WO2018193887A1

WO2018193887A1 - Communication system, comprehensive communication system, relay system, reception system, communication method, and program

Info

Publication number: WO2018193887A1
Application number: PCT/JP2018/014845
Authority: WO
Inventors: 昌幸天野; 燕峰王; 松尾　至生
Original assignee: パナソニックＩｐマネジメント株式会社
Priority date: 2017-04-21
Filing date: 2018-04-09
Publication date: 2018-10-25
Also published as: JP6868819B2; JP2018182706A

Abstract

The present disclosure addresses the problem of reducing the load of communication with a reception system. A communication system (1) is provided with a first communication unit (11) and a second communication unit (12). The first communication unit (11) outputs first information, which is encoded data, to a portable terminal (4) on the basis of request information from the portable terminal (4) located in an outside region from among the outside region and an inside region of a facility separated by a gate. The second communication unit (12) outputs second information, which is key information for decoding the first information, to a reception system (2) that can communicate with the portable terminal (4) located in the inside region.

Description

COMMUNICATION SYSTEM, GENERAL COMMUNICATION SYSTEM, RELAY SYSTEM, RECEPTION SYSTEM, COMMUNICATION METHOD, AND PROGRAM

The present disclosure generally relates to a communication system, a comprehensive communication system, a relay system, a reception system, a communication method, and a program. More specifically, the present disclosure relates to a communication system, an integrated communication system, a relay system, a reception system, a communication method, and a program that output information to a reception system.

Conventionally, an entrance / exit management system for controlling entry / exit of a user to / from a section in a facility is known, and disclosed in, for example, Patent Document 1. The entrance / exit management system described in Patent Literature 1 includes a card reader and a control device. The card reader is installed near the door of the facility room and is associated with the electric lock. The control device is connected to the card reader and the electric lock. The control device can receive the personal identification information read by the card reader. The control device can control locking and unlocking of the electric lock.

The control device determines whether or not the personal identification information read by the card reader has the authority to pass through the door, using the verification information transmitted from the entry / exit management server. Then, when having the authority, the control device performs an unlocking operation of the electric lock corresponding to the card reader that transmitted the personal identification number.

In the entrance / exit management system described in Patent Document 1, for example, when a plurality of users hold IC cards (portable terminals) all at once with a plurality of card readers (reception systems), for example, an individual is transferred to the control device (communication system) Identification information is concentrated and transmitted at a time. In such a case, in the communication system, the communication load with the receiving system may be excessive.

JP 2013-140517 A

The present disclosure has been made in view of the above points, and provides a communication system, a comprehensive communication system, a relay system, a reception system, a communication method, and a program capable of reducing a load of communication with the reception system. Objective.

The communication system according to an aspect of the present disclosure includes a first communication unit and a second communication unit. The first communication unit is data encrypted with respect to the mobile terminal based on request information from the mobile terminal in the outer area among the inner area and the outer area of the facility separated by the gate. Output information. The second communication unit outputs second information, which is key information for decrypting the first information, to a receiving system capable of communicating with the mobile terminal in the inner area.

A comprehensive communication system according to an aspect of the present disclosure includes the communication system described above and a relay system. The relay system relays communication between the mobile terminal and the first communication unit provided at the gate.

A comprehensive communication system according to an aspect of the present disclosure includes the communication system described above and a plurality of reception systems. Each of the plurality of receiving systems is provided in the inner region and acquires the second information from the second communication unit.

The relay system according to one aspect of the present disclosure is provided at a gate that separates an inner area and an outer area of a facility, and relays communication between the communication system and the mobile terminal. The communication system includes a first communication unit and a second communication unit. The first communication unit outputs first information that is encrypted data to the mobile terminal based on request information from the mobile terminal in the outer area. The second communication unit outputs second information that is key information for decrypting the first information to the receiving system in the inner area.

The reception system according to an aspect of the present disclosure is provided in the inner area of the facility inner area and the outer area separated by the gate, and receives the second information from the communication system. The communication system includes a first communication unit and a second communication unit. The first communication unit outputs first information, which is encrypted data, to the mobile terminal based on request information from the mobile terminal in the outer area. The second communication unit outputs the second information, which is key information for decrypting the first information, to the receiving system in the inner area.

The communication method according to an aspect of the present disclosure includes a first step and a second step. The first step is data encrypted with respect to the mobile terminal based on request information from the mobile terminal in the outer area among the inner area and the outer area of the facility separated by the gate. Is a step of outputting. The second step is a step of outputting second information, which is key information for decrypting the first information, to the receiving system in the inner area.

The program according to an aspect of the present disclosure is a program for causing a computer to realize the first function and the second function. The first function is data encrypted with respect to the mobile terminal based on request information from the mobile terminal in the outer area among the inner area and the outer area of the facility separated by the gate. It is a function to output. The second function is a function of outputting second information, which is key information for decrypting the first information, to the receiving system in the inner area.

FIG. 1 is a block diagram illustrating a configuration of a communication system and an integrated communication system according to an embodiment of the present disclosure. FIG. 2 is a schematic diagram showing an example of a facility where the integrated communication system is used. FIG. 3 is a schematic diagram showing another example of a facility in which the above integrated communication system is used. FIG. 4 is a sequence diagram showing an example of operations of the communication system and the integrated communication system.

(1) Overview An overview of the communication system 1 and the integrated communication system 100 according to the embodiment will be described below with reference to FIGS. The total communication system 100 of this embodiment includes a communication system 1 and a plurality (five in FIG. 1) of reception systems 2. The plurality of receiving systems 2 are all located in the inner area 60 of the inner area 60 and the outer area 61 of the facility 6 separated by the gate 7 and can communicate with the mobile terminal 4 (see FIGS. 2 and 3). Here, the facility 6 is a set (including the site 62) of a plurality of buildings 81 installed on the site 62 such as a factory, a complex commercial facility, a theme park, and the like (see FIG. 2). In this case, the gate 7 is installed at, for example, an entrance / exit in the site 62. Further, the facility 6 is a single building 63 such as an office building or an apartment house (see FIG. 3). In this case, the gate 7 is installed at the entrance of the building 63. In addition, the facility 6 may be, for example, a welfare facility, a hospital, a store, or a detached house.

The communication system 1 includes a first communication unit 11 and a second communication unit 12. The first communication unit 11 is configured to output first information that is encrypted data to the mobile terminal 4 based on request information from the mobile terminal 4 in the outer region 61. That is, the mobile terminal 4 can acquire the first information from the first communication unit 11.

The mobile terminal 4 is a smartphone, for example, and is owned by the user A1 (see FIG. 2). The user A1 is, for example, an employee who works for the facility 6, or a visitor who visits the facility 6. That is, the 1st communication part 11 is not with respect to the portable terminal 4 of the user A1 who has already entered the inner area | region 60 of the facility 6, but with respect to the portable terminal 4 of the user A1 who is going to enter the inner area | region 60 of the facility 6. The first information is output. And user A1 who entered inside field 60 of facility 6 has the 1st information.

The second communication unit 12 is configured to output the second information, which is key information for decrypting the first information, to the receiving system 2. Here, the key information is, for example, a secret key or a public key. That is, the receiving system 2 can acquire the second information from the second communication unit 12. And the receiving system 2 can decode the 1st information from the portable terminal 4 using this 2nd information.

As described above, in the present embodiment, the communication system 1 can cause the reception system 2 to acquire the second information in advance. And the receiving system 2 can decode the 1st information from the portable terminal 4 using the 2nd information acquired previously. That is, in this embodiment, the receiving system 2 does not need to communicate with the communication system 1 when communicating with the mobile terminal 4 and decoding the first information. For this reason, in this embodiment, for example, when a plurality of receiving systems 2 communicate with a plurality of mobile terminals 4, signals are transmitted from the plurality of receiving systems 2 to the communication system 1 in a concentrated manner at a time. It is hard to happen. Therefore, in this embodiment, the communication system 1 can reduce the load of communication with the receiving system 2. There is an advantage.

(2) Details Hereinafter, the communication system 1 and the comprehensive communication system 100 according to the present embodiment will be described in detail with reference to FIGS. The total communication system 100 of this embodiment includes a communication system 1, a plurality of (five in FIG. 1) reception systems 2, and one or more (one in FIG. 1) relay systems 3. In addition to these, FIG. 1 shows a portable terminal 4 and a network 5 such as the Internet.

Moreover, although two portable terminals 4 are shown in FIG. 1, these portable terminals 4 are the same terminals and are terminals owned by one user A1. That is, one mobile terminal 4 of the two mobile terminals 4 shown in FIG. 1 represents a mobile terminal at the time of communication with the relay system 3, and the other mobile terminal 4 at the time of communication with the reception system 2. Represents a mobile terminal. In the present embodiment, it is assumed that there are a plurality of mobile terminals 4 instead of only one. In addition, the user A1 owns one mobile terminal 4 per person. For this reason, in this embodiment, the case where there are multiple users A1 is assumed. In particular, in the present embodiment, it is assumed that there are thousands to tens of thousands of users A1, but this is not intended to limit the number of users A1 targeted by the communication system 1 and the integrated communication system 100.

In the present embodiment, the plurality of receiving systems 2 are provided in each of the plurality of specific areas 8 in the inner area 60. For example, when the facility 6 is a factory as shown in FIG. In the example illustrated in FIG. 2, each of the plurality of buildings 81 is the specific region 8. For example, as shown in FIG. 3, when the facility 6 is an office building, the corridor, the elevator hall, the entrance hall, the room 83 and the like in the building 63 are the specific area 8. In addition, one room 83 may be divided into a plurality of specific areas 8. In the example shown in FIG. 3, each of the plurality of rooms 83 is the specific area 8. The specific area 8 may be managed by the owner of the facility 6, or may be managed by a business operator (tenant) borrowed from the owner of the facility 6.

In the example shown in FIG. 2, the plurality of receiving systems 2 are each attached to a wall near the door 82 that serves as an entrance / exit of the plurality of buildings 81. In the example shown in FIG. 3, the plurality of receiving systems 2 are attached to the walls near the doors 84 serving as the entrances and exits of the plurality of rooms 83. Needless to say, the position of the receiving system 2 is not limited, and the receiving system 2 only needs to be provided at a position where it can communicate with the mobile terminal 4 in the specific area 8.

In this embodiment, one or more relay systems 3 are provided in each of one or more gates 7 of the facility 6. In the example shown in FIG. 2, a plurality of (here, four) gates 7 are provided at the entrance / exit of the site 62, and a partition 72 is provided between the gates 7. The relay system 3 is attached to each of a plurality of (here, three) partitions 72. That is, the relay system 3 may not correspond to the gate 7 on a one-to-one basis, and may correspond to a plurality of gates 7. In the example shown in FIG. 3, a door 73 is provided as a gate 7 at the entrance of the building 63. The relay system 3 is attached to a wall near the door 73. Needless to say, the position of the relay system 3 is not limited, and the relay system 3 may be provided at a position where the relay system 3 can communicate with the mobile terminal 4 in the outer area 61.

The communication system 1 includes a first communication unit 11, a second communication unit 12, a processing unit 13, a first storage unit 101, and a second storage unit 102. In the present embodiment, the communication system 1 is a server. The communication system 1 mainly includes a computer system (including a microcomputer) including a processor and a memory, for example. That is, the computer system functions as the communication system 1 by executing an appropriate program on the processor.

The first communication unit 11 acquires request information from the mobile terminal 4 by communicating with the mobile terminal 4 in the outer area 61 via the relay system 3 and the network 5. The first communication unit 11 outputs the acquired request information to the processing unit 13. The request information includes identification information (ID: Identification) of the portable terminal 4 that is the transmission source of the request information (that is, identification information of the user A1).

Further, when the first information is input from the processing unit 13, the first communication unit 11 outputs the input first information to the portable terminal 4 via the network 5 and the relay system 3. The first information is data encrypted using key information corresponding to the second information. In the present embodiment, for example, when a common key cryptosystem is adopted, the first information is encrypted using the common key. For example, when a public key cryptosystem is adopted, the first information is encrypted using a secret key. The first information includes the identification information of the mobile terminal 4 that is the transmission source of the request information, the access authority, and the electronic signature.

In this embodiment, an expiration date such as an output date is set in the first information. For example, the processing unit 13 sets an expiration date in the first information when creating the first information as will be described later. Therefore, for example, when the expiration date of the first information is exceeded, the first information becomes invalid. In the present embodiment, when the expiration date of the first information is exceeded, the authentication of the first information fails in the receiving system 2, so that the user A1 can enter the specific area 8 even if he has access authority. Can not.

In addition, the first communication unit 11 has an acquisition unit 111. The acquisition unit 111 is configured to acquire the third information from the mobile terminal 4 by communicating with the mobile terminal 4 in the inner region 60 via the relay system 3 and the network 5. For example, the acquisition unit 111 acquires the third information by communicating with the mobile terminal 4 when the user A1 passes through the gate 7 and leaves the outer region 61. The acquisition unit 111 outputs the acquired third information to the processing unit 13. The third information is associated with each of the plurality of specific areas 8 in the inner area 60. The third information includes, for example, information such as the date and time when authentication with the mobile terminal 4 was performed, and the attributes of the specific area 8 (for example, the room number if the specific area 8 is the room 83). That is, the third information includes information regarding the specific area 8 where the user A1 has entered.

In the present embodiment, as will be described later, when the receiving system 2 provided in each of the plurality of specific areas 8 succeeds in the authentication of the first information of the mobile terminal 4, the third information is created and the mobile terminal 4 Output. That is, there are a plurality of receiving systems 2, and each of them is provided in a plurality of specific areas 8. Then, the third information is output from each of the plurality of receiving systems 2 to the mobile terminal 4. In other words, the mobile terminal 4 is configured to acquire the third information in one or more specific areas 8 of the plurality of specific areas 8.

When the second information is input from the processing unit 13, the second communication unit 12 outputs the second information to the reception system 2 by communicating with the reception system 2 in the inner region 60 via the network 5. To do. The second information is key information for decrypting the first information. In the present embodiment, for example, when the common key cryptosystem is adopted, the second information is a common key. In this case, the second information output to the receiving system 2 is the same as the common key that the communication system 1 has. For example, when the public key cryptosystem is adopted, the second information is a public key. In this case, the public key that is the second information output to the receiving system 2 and the secret key that the communication system 1 has are different from each other.

In the present embodiment, the second information is updated every predetermined time (for example, in the morning, one day, one week), for example, and output from the communication system 1 to the plurality of receiving systems 2. The update of the second information is automatically performed, for example, when the processor of the communication system 1 executes a program stored in the memory. Of course, the update of the second information may be performed manually by an administrator of the communication system 1 or the like, for example.

The connection between the first communication unit 11 and each of the one or more relay systems 3 may be, for example, a wired connection, a wireless connection, or a connection form via a repeater or the like It may be. Similarly, the connection between the second communication unit 12 and each of the plurality of reception systems 2 may be, for example, a wired connection, a wireless connection, or via a repeater A connection form may be used.

When the request information from the mobile terminal 4 is input, the processing unit 13 performs authentication of identification information included in the request information. Specifically, the processing unit 13 includes a list of identification information for the plurality of portable terminals 4 stored in the first storage unit 101 (that is, a plurality of identification information). A list of identification information about the user A1). If the identification information of the transmission source portable terminal 4 is included in the list, the processing unit 13 determines that the authentication is successful, and includes the identification information of the transmission source portable terminal 4, the corresponding access authority, and the electronic signature. The first information is created by encrypting the data. Then, the processing unit 13 transmits the first information from the first communication unit 11 to the mobile terminal 4 that is the transmission source. In other words, the processing unit 13 is configured to execute authentication of the identification information, and output the first information from the first communication unit 11 to the mobile terminal 4 that is the transmission source of the request information when the authentication is successful. . On the other hand, if the identification information of the transmission source mobile terminal 4 is not included in the list, the processing unit 13 determines that the authentication has failed, and transmits, for example, notification information indicating that the authentication has failed from the first communication unit 11. Transmit to the original portable terminal 4.

The first storage unit 101 and the second storage unit 102 each include a rewritable nonvolatile memory such as an EEPROM (Electrically Erasable Programmable Read-Only Memory). The first storage unit 101 stores a database in which identification information about a plurality of mobile terminals 4 and access authority are associated with each other. The second storage unit 102 stores a database of second information about the plurality of receiving systems 2.

The receiving system 2 is provided in the inner region 60 and includes a communication unit 21 and an authentication unit 22. The communication unit 21 receives the second information from the communication system 1 by communicating with the second communication unit 12 of the communication system 1 via the network 5. The communication unit 21 outputs the received second information to the authentication unit 22. That is, the receiving system 2 is provided in the inner region 60 of the facility 6 and the outer region 61 separated by the gate 7 and receives the second information from the communication system 1.

Further, the communication unit 21 acquires the first information from the mobile terminal 4 by performing wireless communication with the mobile terminal 4 in the inner region 60. The communication unit 21 outputs the acquired first information to the authentication unit 22. The method of wireless communication with the portable terminal 4 is short-range wireless communication such as Bluetooth (registered trademark) or NFC (Near Field Communication). In addition, the wireless communication method may be, for example, Wi-Fi (registered trademark) or specific low-power wireless communication.

As an example, when the receiving system 2 is configured by a non-contact type card reader, the communication unit 21 of the receiving system 2 is connected to the portable terminal 4 when the user A1 holds the portable terminal 4 over the card reader. The first information is acquired from the portable terminal 4 by performing wireless communication.

The authentication unit 22 is mainly composed of a computer system (including a microcomputer) including a processor and a memory, for example. That is, the computer system functions as the authentication unit 22 by executing an appropriate program on the processor. The authentication unit 22 stores the second information input from the communication unit 21. Further, when the first information is input from the communication unit 21, the authentication unit 22 performs authentication of the first information. Specifically, the authentication unit 22 decrypts the first information using the second information stored in advance. And the authentication part 22 test | inspects whether the identification information contained in the decoded 1st information, access authority, and an electronic signature are valid. If the identification information, access authority, and electronic signature are all valid, the authentication unit 22 determines that the authentication is successful, and outputs a permission signal from the communication unit 21 to the opening / closing device 23. On the other hand, if at least one of the identification information, the access authority, and the electronic signature is invalid, the authentication unit 22 determines that the authentication has failed and, for example, sends notification information indicating that the authentication has failed from the communication unit 21 to the source It transmits with respect to the portable terminal 4.

The opening / closing device 23 is a device that opens and closes the

doors

82 and 84 provided in the specific area 8. The door here may be either a hinged door type or a sliding door type. The opening / closing device 23 may open and close the

doors

82 and 84 formed of automatic doors, or may be able to open and close the doors by unlocking electric locks provided on the

doors

82 and 84. When receiving the permission signal from the receiving system 2, the opening / closing device 23 opens the

doors

82 and 84. As a result, the user A1 can enter the specific area 8. When the user A1 enters the specific area 8 or when a certain time has elapsed since the opening / closing device 23 opened the

doors

82 and 84, the authentication unit 22 outputs a closing signal from the communication unit 21 to the opening / closing device 23. The opening / closing device 23 closes the

doors

82 and 84 when receiving the closing signal from the receiving system 2. The opening / closing device 23 may be included in the reception system 2 or may be a separate body from the reception system 2. 2 and 3, the opening / closing device 23 is not shown.

That is, in this embodiment, the receiving system 2 is an entrance / exit management system that is provided in each of the plurality of specific areas 8 in the inner area 60 and manages entry and exit of the user A1 to the corresponding specific area 8. is there. The receiving system 2 is also a lock management system that is provided in each of the plurality of

doors

82 and 84 in the inner region 60 and manages locking and unlocking of the corresponding

doors

82 and 84. The first information includes the access authority as information regarding whether to enter and leave the corresponding specific area 8 and information about whether the corresponding

doors

82 and 84 can be locked and unlocked.

The relay system 3 is provided in the gate 7 and acquires request information from the mobile terminal 4 by wireless communication with the mobile terminal 4 in the outer area 61. Then, the relay system 3 outputs the acquired request information to the communication system 1 by communicating with the communication system 1. That is, the relay system 3 is provided in the gate 7 that separates the inner region 60 and the outer region 61 of the facility 6 and relays communication between the communication system 1 and the portable terminal 4. The method of wireless communication with the portable terminal 4 is short-range wireless communication such as Bluetooth (registered trademark) and NFC, for example, as with the receiving system 2. In addition, the wireless communication method may be, for example, Wi-Fi (registered trademark) or specific low-power wireless communication.

As an example, when the relay system 3 includes a beacon terminal, the relay system 3 continuously or intermittently transmits a beacon toward a predetermined area around the gate 7, for example. When the mobile terminal 4 enters a predetermined area and receives a beacon, the mobile terminal 4 transmits request information to the relay system 3. That is, in this case, the user A1 can output request information to the communication system 1 via the relay system 3 only by entering a predetermined area of the gate 7. As an example, when the relay system 3 is configured by a non-contact card reader, the relay system 3 wirelessly communicates with the mobile terminal 4 when the user A1 holds the mobile terminal 4 over the card reader. The first information is acquired from the portable terminal 4 by communicating. That is, in this case, the user A1 can output request information to the communication system 1 via the relay system 3 by holding the portable terminal 4 over a card reader installed at the gate 7.

Further, when the first information from the communication system 1 is input, the relay system 3 outputs the first information to the mobile terminal 4 that is the transmission source of the request information. As described above, in the present embodiment, at least one of the request information and the first information is relayed between the communication system 1 and the portable terminal 4 by the relay system 3 provided in the gate 7.

The portable terminal 4 is a portable information terminal such as a smartphone. The mobile terminal 4 is mainly composed of a computer system (including a microcomputer) having a processor and a memory, for example. The portable terminal 4 functions as a communication device with at least the receiving system 2 and the relay system 3 (the communication system 1 when there is no relay system 3) by installing dedicated application software and starting the application software. That is, the mobile terminal 4 is configured to be able to communicate with the reception system 2 and the relay system 3 using the above-described wireless communication method.

The mobile terminal 4 is assigned identification information. The identification information is information unique to the mobile terminal 4 and is information for identifying each mobile terminal 4. That is, the identification information is also information for identifying the user A1 who owns the mobile terminal 4. The identification information is stored in a storage unit such as a nonvolatile memory of the mobile terminal 4, for example. Further, when the first information is acquired from the communication system 1, the acquired first information is stored in the storage unit of the mobile terminal 4. In addition, when the third information is acquired from the reception system 2, the acquired third information is stored in the storage unit of the mobile terminal 4.

(3) Operation Hereinafter, an example of the operation of the communication system 1 and the comprehensive communication system 100 according to the present embodiment will be described with reference to FIG. In the following, any one receiving system 2 among the plurality of receiving systems 2, any one relay system 3 among the plurality of relay systems 3, and any one portable terminal among the plurality of portable terminals 4 A description will be given focusing on item 4. First, the 2nd communication part 12 of the communication system 1 outputs 2nd information with respect to the receiving system 2, for example before opening of the plant | facility 6 (step S101). Thereby, the receiving system 2 stores the second information in advance.

Thereafter, the facility 6 is opened, and the user A1 who owns the portable terminal 4 arrives at the gate 7 (step S102). When the user A1 holds the portable terminal 4 over the relay system 3, or the portable terminal 4 receives a beacon from the relay system 3, the portable terminal 4 outputs request information with the transmission destination as the communication system 1 (step S103). ). The first communication unit 11 of the communication system 1 acquires request information from the mobile terminal 4 via the relay system 3. And the process part 13 of the communication system 1 performs the authentication of the identification information contained in the request information of the portable terminal 4 (step S104). If the authentication is successful, the processing unit 13 outputs the first information from the first communication unit 11 to the mobile terminal 4 (step S105). Thereafter, the mobile terminal 4 stores the first information acquired from the communication system 1.

Thereafter, the user A1 passes through the gate 7 and enters the inner area 60, and arrives at the specific area 8 where the user A1 has access authority (step S106). When the user A1 holds the portable terminal 4 over the receiving system 2, the portable terminal 4 outputs the first information to the receiving system 2 (step S107). When the communication unit 21 of the reception system 2 acquires the first information, the authentication unit 22 performs authentication of the first information of the portable terminal 4 using the second information (step S108). If the authentication is successful, the authentication unit 22 outputs a permission signal to the opening / closing device 23 (step S109). Then, the

doors

82 and 84 are opened by the opening / closing device 23, so that the user A1 can enter the specific area 8 having the access authority. In the present embodiment, the receiving system 2 outputs the third information to the mobile terminal 4 after successful authentication (step S110). Therefore, when the user A1 enters one or more specific areas 8, the mobile terminal 4 stores the third information every time the user A1 enters one or more specific areas 8.

In the present embodiment, the third information is used for grasping the behavior of the user A1. Specifically, the mobile terminal 4 acquires one or more third information corresponding to each of the one or more specific areas 8 when the user A1 visits the one or more specific areas 8. When the user A1 passes through the gate 7 and leaves the inner area 60 of the facility 6, the acquisition unit 111 of the communication system 1 communicates with the portable terminal 4 via the relay system 3 and the network 5, One or more pieces of third information are acquired from the portable terminal 4. Here, the one or more pieces of third information are information relating to one or more specific areas 8, respectively. Therefore, the administrator of the communication system 1 grasps the history of one or more specific areas 8 visited by the user A1, in other words, the behavior of the user A1 by referring to the one or more third information acquired from the mobile terminal 4. Is possible. The one or more pieces of third information acquired by the communication system 1 may be associated with the identification information of the mobile terminal 4 (that is, the identification information of the user A1) and stored in the database.

Here, an expiration date may be set in the third information. And the portable terminal 4 may be comprised so that 1st information may be invalidated when the expiration date of the memorize | stored 3rd information exceeds. In this case, for example, when the user A1 enters the next specific area 8 after entering the specific area 8, for example, when the user A1 goes to the next specific area 8 while taking a detour, One information cannot be authenticated, and it becomes impossible to enter the next specific area 8. That is, in this case, there is an advantage that the user A1 can be prompted to move to the next specific area 8 without taking a detour. Note that the expiration date of the third information is preferably invalidated when authentication in the next specific area 8 is successful.

(4) Modification The above embodiment is merely one of various embodiments of the present disclosure. The above embodiment can be variously modified according to the design and the like as long as the object of the present disclosure can be achieved. Moreover, the function similar to the communication system 1 may be embodied by a communication method, a computer program, or a non-transitory recording medium storing the program.

The communication method according to one aspect includes a first step and a second step. The first step is data encrypted with respect to the portable terminal 4 based on request information from the portable terminal 4 in the outer area 61 among the inner area 60 and the outer area 61 of the facility 6 separated by the gate 7. This is a step of outputting certain first information. The second step is a step of outputting second information, which is key information for decrypting the first information, to the receiving system 2 in the inner area 60. Here, the first step and the second step are in no particular order. That is, the first step may be executed before the second step, or the second step may be executed before the first step.

(Computer) program according to one aspect is a program for causing a computer to realize a first function and a second function. The first function is data encrypted with respect to the portable terminal 4 based on request information from the portable terminal 4 in the outer area 61 among the inner area 60 and the outer area 61 of the facility 6 separated by the gate 7. This is a function for outputting certain first information. The second function is a function of outputting second information, which is key information for decrypting the first information, to the receiving system 2 in the inner area 60.

Hereinafter, modifications of the embodiment will be listed. The modifications described below can be applied in appropriate combinations.

The execution subject of the communication system 1 or the communication method in the present disclosure includes a computer system. The computer system mainly includes a processor and a memory as hardware. When the processor executes the program recorded in the memory of the computer system, the function as the execution subject of the communication system 1 or the communication method in the present disclosure is realized. The program may be recorded in advance in the memory of the computer system. Further, the program may be provided through an electric communication line, or may be provided by being recorded on a non-transitory recording medium such as a memory card, an optical disk, or a hard disk drive that can be read by a computer system. A processor of a computer system includes one or more electronic circuits including a semiconductor integrated circuit (IC) or a large scale integrated circuit (LSI). The plurality of electronic circuits may be integrated on one chip, or may be distributed on the plurality of chips. The plurality of chips may be integrated into one device, or may be distributed and provided in a plurality of devices.

In the present embodiment, the total communication system 100 includes the communication system 1, the reception system 2, and the relay system 3, but the reception system 2 and the relay system 3 are indispensable for the total communication system 100. It is not a configuration. That is, the integrated communication system 100 only needs to include the communication system 1, and at least one of the reception system 2 and the relay system 3 may not be included in the components of the integrated communication system 100. In other words, the integrated communication system 100 may include the communication system 1 and the reception system 2 except for the relay system 3. The comprehensive communication system 100 may include the communication system 1 and the relay system 3 except for the reception system 2.

Further, in the present embodiment, the communication system 1 is realized by one system, but may be realized by two or more systems. For example, the functions of the first communication unit 11 and the second communication unit 12 may be distributed and provided in two systems. In addition, for example, the functions of the first communication unit 11, the second communication unit 12, the processing unit 13, the first storage unit 101, and the second storage unit 102 may be distributed in two or more systems. Further, for example, the functions of the first communication unit 11, the second communication unit 12, the processing unit 13, the first storage unit 101, and the second storage unit 102 may be provided in one device that can be accommodated in one housing. In addition, it may be distributed in a plurality of devices. In addition, at least a part of the functions of the communication system 1 may be realized by, for example, cloud (cloud computing).

In the present embodiment, the first communication unit 11 of the communication system 1 is configured to acquire request information from the mobile terminal 4 in the outer region 61, but the present invention is not limited to this. For example, the first communication unit 11 may acquire request information from the mobile terminal 4 at the gate 7 when the user A1 who owns the mobile terminal 4 enters the gate 7.

In the present embodiment, the first communication unit 11 of the communication system 1 may output the third information when outputting the first information to the mobile terminal 4 that is the transmission source of the request information. That is, in this case, the gate 7 also becomes the specific region 8. In this case, for example, when the user A1 tries to enter the next specific area 8 after passing through the gate 7, if the user A1 goes to the next specific area 8 while taking a detour, the first specific information 8 is stored in the next specific area 8. The user cannot enter the next specific area 8 without being authenticated. That is, in this case, there is an advantage that the user A1 can be prompted to go to the specific area 8 without taking a detour.

In the present embodiment, since the receiving system 2 authenticates the first information using the second information, the second communication unit 12 of the communication system 1 has the user A1 store the second information in advance in the receiving system 2. It is preferable to output the second information before passing through the gate 7. For example, if the facility 6 is a facility to which a user A1 (employee) belongs, such as a factory, an office building, or a theme park, the second communication unit 12 outputs the second information before starting the facility 6. preferable. In addition, even after the user A1 passes through the gate 7, the second communication unit 12 transmits the second information to the reception system 2 corresponding to the specific area 8 before the user A1 reaches the specific area 8. It only needs to be output.

In the present embodiment, the authentication unit 22 of the reception system 2 checks whether the identification information, access authority, and electronic signature of the mobile terminal 4 included in the decrypted first information are valid. Although the authentication is executed, the purpose is not limited to this. For example, the authentication unit 22 may perform authentication of the first information depending on whether or not the first information can be decrypted using at least the second information. In this case, the authentication unit 22 determines that the authentication has succeeded if the first information can be decrypted, and determines that the authentication has failed if the first information cannot be decrypted.

In the present embodiment, the reception system 2 creates the third information and outputs it to the mobile terminal 4, but the present invention is not limited to this. For example, the receiving system 2 may be configured to output a signal requesting the third information to the communication system 1 when the first information is successfully authenticated. In this case, when the communication system 1 receives a signal from the reception system 2, the communication system 1 creates third information corresponding to the reception system 2 (in other words, the specific area 8), and sends the created third information to the reception system 2. Output. And if the receiving system 2 acquires 3rd information from the communication system 1, you may output the acquired 3rd information with respect to the portable terminal 4 of the transmission source of 1st information.

In this embodiment, the receiving system 2 is a lock management system and an entry / exit management system, but the present invention is not limited to this. For example, the receiving system 2 may be configured only with a lock management system, or may be configured only with an entry / exit management system.

In the present embodiment, the relay system 3 may be configured to manage entry and exit from the gate 7 to the inner area 60 based on request information from the mobile terminal 4. For example, when the relay system 3 receives the request information from the mobile terminal 4 and relays the first information to the mobile terminal 4, the user A1 who owns the mobile terminal 4 moves from the gate 7 to the inner region 60. It is determined to enter, and the determination result is stored. In this way, the relay system 3 can manage the user A1 who has entered the inner area 60 from the gate 7.

In this embodiment, the mobile terminal 4 communicates with the communication system 1 via the relay system 3 and the network 5, but the present invention is not limited to this. For example, the mobile terminal 4 may be configured to communicate with the communication system 1 via the network 5 instead of via the relay system 3. In this case, the user A1 communicates with the communication system 1 via the network 5 by the mobile terminal 4 before arriving at the gate 7 (for example, when in a train used for commuting), thereby the first information It is also possible to obtain. In this case, the mobile terminal 4 is connected to the network 5 via, for example, a mobile phone network (carrier network) provided by a communication carrier. The mobile phone network includes, for example, a 3G (third generation) line, an LTE (Long Termination Evolution) line, and the like. In addition, the mobile terminal 4 may be connected to the network 5 via, for example, a public wireless LAN (Local Area Network).

In the present embodiment, the mobile terminal 4 is a smartphone, but the present invention is not limited to this. The portable terminal 4 may be a tablet terminal or a personal computer, for example. In addition, the mobile terminal 4 can be directly worn by the user A1 or possessed by the user A1 such as a bag, such as a key holder type, employee card type, name tag type, glasses type, or watch type wearable terminal. The structure which attaches may be sufficient.

(Summary)
As described above, the communication system (1) according to the first aspect includes the first communication unit (11) and the second communication unit (12). The first communication unit (11) receives request information from the portable terminal (4) in the outer region (61) among the inner region (60) and the outer region (61) of the facility (6) separated by the gate (7). The first information, which is encrypted data, is output to the mobile terminal (4) based on the above. The second communication unit (12) sends second information, which is key information for decrypting the first information, to the receiving system (2) that can communicate with the portable terminal (4) in the inner area (60). Output.

According to this aspect, the communication system (1) outputs the first information to the portable terminal (4) and outputs the second information to the receiving system (2). For this reason, according to this aspect, since the receiving system (2) already stores the second information when decoding the first information, the mobile terminal (2) does not communicate with the communication system (1). It is possible to decode the first information from 4). Therefore, according to this aspect, even when there are a large number of users (A1) who own the mobile terminal (4), the second information is simultaneously transmitted from the plurality of receiving systems (2) to the communication system (1). The request does not cause a situation where communication traffic increases rapidly. That is, according to this aspect, when the receiving system (2) communicates with the mobile terminal (4), the receiving system (2) of the communication system (1) is compared with the communication system (1). There is an advantage that the communication load can be reduced.

In the communication system (1) according to the second aspect, in the first aspect, at least one of the request information and the first information is relayed by the relay system (3) provided in the gate (7).

According to this aspect, the portable terminal (4) can communicate with the communication system (1) via the relay system (3) even if the portable terminal (4) cannot communicate directly with the communication system (1). . Therefore, according to this aspect, there exists an advantage that the freedom degree of the communication system of a portable terminal (4) improves.

The communication system (1) according to the third aspect further includes a processing unit (13) in the first or second aspect. The request information includes identification information of the mobile terminal (4) that is the transmission source of the request information. The processing unit (13) executes authentication of the identification information. When the authentication is successful, the processing unit (13) outputs the first information from the first communication unit (11) to the portable terminal (4) that is the transmission source of the request information. It is configured.

According to this aspect, since the first information is output after confirming whether or not the portable terminal (4) that is the transmission source of the request information is reliable, for example, to an unrelated third party such as a suspicious person There is an advantage that the output of the first information can be prevented.

In the communication system (1) according to the fourth aspect, in any one of the first to third aspects, an expiration date is set in the first information.

According to this aspect, for example, a third party such as a suspicious person can be prevented from entering the specific area (8) without the access authority using the first information acquired by some method in the past. There are advantages.

In the communication system (1) according to the fifth aspect, in any of the first to fourth aspects, the third information is associated with each of the plurality of specific areas (8) in the inner area (60). ing. The mobile terminal (4) is configured to acquire the third information in one or more specific areas (8) of the plurality of specific areas (8).

According to this aspect, for example, by setting an expiration date in the third information, the user (A1) who has acquired the third information in any specific area (8) does not detour and moves to the next specific area 8. There is an advantage of being able to encourage heading.

In the fifth aspect, the communication system (1) according to the sixth aspect further includes an acquisition unit (111) that acquires third information from the mobile terminal (4) in the inner region (60).

According to this aspect, by referring to one or more third information acquired from the mobile terminal (4), the history of one or more specific areas (8) visited by the user (A1), in other words, the user (A1) There is an advantage that it becomes possible to grasp the behavior of.

In the communication system (1) according to the seventh aspect, in the fifth or sixth aspect, there are a plurality of receiving systems (2), each provided in a plurality of specific areas (8). The third information is output from each of the plurality of receiving systems (2) to the mobile terminal (4).

According to this aspect, each of the plurality of receiving systems (2) can output the third information to the mobile terminal (4) without communicating with the communication system (1). Therefore, according to this aspect, when outputting the third information to the mobile terminal (4), there is an advantage that the communication load between the communication system (1) and the reception system (2) is difficult to increase. .

In the communication system (1) according to the eighth aspect, in any of the first to seventh aspects, the reception system (2) is provided in each of the plurality of specific areas (8) in the inner area (60). And entering and leaving the corresponding specific area (8). The first information includes information regarding whether to enter and leave the corresponding specific area (8).

According to this aspect, there is an advantage that it becomes possible to manage the user (A1) who entered each of the plurality of specific areas (8) or exited from each of the plurality of specific areas (8).

In the communication system (1) according to the ninth aspect, in any one of the first to seventh aspects, the reception system (2) is connected to each of the plurality of doors (82, 84) in the inner region (60). It is a lock management system that is provided and manages the locking and unlocking of the corresponding doors (82, 84). The first information includes information regarding whether or not the corresponding door (82, 84) can be locked and unlocked.

According to this aspect, there is an advantage that it becomes possible to manage the user (A1) who locked or unlocked the door (82, 84).

In the communication system (1) according to the tenth aspect, in the second aspect, the relay system (3) manages entry and exit from the gate (7) to the inner area (60) based on the request information. It is configured.

According to this aspect, there is an advantage that it becomes possible to manage the user (A1) who enters the inner area (60) from the gate (7) or leaves the inner area (60).

The integrated communication system (100) according to the eleventh aspect includes the communication system (1) according to any one of the first to tenth aspects and the relay system (3). The relay system (3) is provided in the gate (7) and relays communication between the portable terminal (4) and the first communication unit (11).

According to this aspect, the communication with the reception system (2) of the communication system (1) is compared with the communication system (1) when the reception system (2) communicates with the mobile terminal (4). There is an advantage that the load can be reduced.

The integrated communication system (100) according to the twelfth aspect includes the communication system (1) according to any one of the first to tenth aspects and a plurality of reception systems (2). The plurality of receiving systems (2) are provided in the inner region (60), respectively, and acquire the second information from the second communication unit (12).

The relay system (3) according to the thirteenth aspect is provided at the gate (7) separating the inner area (60) and the outer area (61) of the facility (6), and is connected to the communication system (1) and the mobile phone. Relay communication with the terminal (4). The communication system (1) includes a first communication unit (11) and a second communication unit (12). A 1st communication part (11) outputs the 1st information which is the data encrypted with respect to the portable terminal (4) based on the request information from the portable terminal (4) in an outer area | region (61). . The second communication unit (12) outputs second information, which is key information for decrypting the first information, to the receiving system (2) in the inner area (60).

The reception system (2) according to the fourteenth aspect is provided in the inner region (60) of the inner region (60) and the outer region (61) of the facility (6) separated by the gate (7), and is used for communication. The second information is received from the system (1). The communication system (1) includes a first communication unit (11) and a second communication unit (12). A 1st communication part (11) outputs the 1st information which is the data encrypted with respect to the portable terminal (4) based on the request information from the portable terminal (4) in an outer area | region (61). . The second communication unit (12) outputs second information, which is key information for decrypting the first information, to the receiving system (2) in the inner area (60).

The communication method according to the fifteenth aspect includes a first step and a second step. The first step is based on request information from the mobile terminal (4) in the outer area (61) of the inner area (60) and outer area (61) of the facility (6) separated by the gate (7). It is a step of outputting first information which is encrypted data to the portable terminal (4). The second step is a step of outputting second information that is key information for decrypting the first information to the receiving system (2) in the inner area (60).

The program according to the sixteenth aspect is a program for causing a computer to realize the first function and the second function. The first function is based on request information from the portable terminal (4) in the outer area (61) of the inner area (60) and the outer area (61) of the facility (6) separated by the gate (7). This is a function for outputting first information that is encrypted data to the portable terminal (4). The second function is a function of outputting second information, which is key information for decrypting the first information, to the receiving system (2) in the inner area (60).

The configurations according to the second to tenth aspects are not essential to the communication system (1) and can be omitted as appropriate.

Not limited to the above aspect, various configurations (including modifications) of the communication system 1 according to the embodiment can be appropriately realized by a communication method and a (computer) program.

DESCRIPTION OF SYMBOLS 1 Communication system 11 1st communication part 111 Acquisition part 12 2nd communication part 13 Processing part 2 Reception system 3 Relay system 4 Portable terminal 6 Facility 60 Inner area | region 61 Outer area | region 7 Gate 8 Specific area |

region

82,84 Door 100 Comprehensive communication system

Claims

1st communication which outputs the 1st information which is the data encrypted with respect to the said portable terminal based on the request information from the portable terminal in the said outer area | region among the inner area | region and outer area | region of the facility separated by the gate And
A communication system comprising: a second communication unit that outputs second information, which is key information for decrypting the first information, to a reception system capable of communicating with the portable terminal in the inner area.
The communication system according to claim 1, wherein at least one of the request information and the first information is relayed by a relay system provided at the gate.
A processing unit;
The request information includes identification information of the mobile terminal that is the transmission source of the request information,
The processing unit is configured to execute authentication of the identification information, and output the first information from the first communication unit to the portable terminal that is the transmission source of the request information when the authentication is successful. The communication system according to claim 1 or 2.
The communication system according to any one of claims 1 to 3, wherein an expiration date is set in the first information.
Third information is associated with each of the plurality of specific areas in the inner area,
The communication system according to any one of claims 1 to 4, wherein the mobile terminal is configured to acquire the third information in one or more specific areas of the plurality of specific areas.
The communication system according to claim 5, further comprising an acquisition unit that acquires the third information from the mobile terminal in the inner region.
A plurality of the receiving systems, each provided in the plurality of specific areas;
The communication system according to claim 5 or 6, wherein the third information is output from each of the plurality of reception systems to the mobile terminal.
The receiving system is provided in each of a plurality of specific areas in the inner area, and is configured to manage entry and exit to a corresponding specific area,
The communication system according to any one of claims 1 to 7, wherein the first information includes information regarding whether or not to enter and leave the corresponding specific area.
The receiving system is a lock management system that is provided in each of the plurality of doors in the inner region and manages locking and unlocking of the corresponding doors,
The communication system according to any one of claims 1 to 7, wherein the first information includes information related to whether the corresponding door is locked and unlocked.
The communication system according to claim 2, wherein the relay system is configured to manage entry and exit from the gate to the inner area based on the request information.
The communication system according to any one of claims 1 to 10,
A relay system that is provided at the gate and relays communication between the mobile terminal and the first communication unit.
The communication system according to any one of claims 1 to 10,
A plurality of reception systems provided in the inner region and acquiring the second information from the second communication unit.
It is provided at the gate that separates the inner area and the outer area of the facility,
Based on request information from a mobile terminal in the outer area, a first communication unit that outputs first information that is encrypted data to the mobile terminal, and a receiving system in the inner area A relay system that relays communication between a communication system including a second communication unit that outputs second information that is key information for decrypting the first information, and the mobile terminal.
It is provided in the inner region of the inner region and the outer region of the facility separated by the gate,
Based on request information from a mobile terminal in the outer area, a first communication unit that outputs first information that is encrypted data to the mobile terminal, and a receiving system in the inner area A receiving system that receives the second information from a communication system including a second communication unit that outputs second information that is key information for decrypting the first information.
A first step of outputting first information, which is encrypted data, to the portable terminal based on request information from the portable terminal in the outer area among the inner area and the outer area of the facility separated by the gate When,
And a second step of outputting second information, which is key information for decrypting the first information, to the receiving system in the inner area.
On the computer,
A first function for outputting first information, which is encrypted data, to the mobile terminal based on request information from the mobile terminal in the outer area among the inner area and the outer area of the facility separated by the gate When,
A program for realizing a second function of outputting second information, which is key information for decrypting the first information, to the receiving system in the inner area.