Information security management system authorized to open near field communication lock

Abstract

The invention provides a capital security management system authorized to open a near field communication lock. The capital security management system comprises a database module, an identity confirmation module, a public key infrastructure module, an unlocking processing module, an unlocking notification module and a capital security notification module. According to the invention, the mobile communication device is used as a repeater and does not intervene in operation related to unlocking. For a person who needs to be unlocked to obtain protected data or articles, the identity confirmation module and the unlocking processing module confirm the identity and management authority of the person firstly, and then digital signature operation is carried out on generated random numbers through the public key infrastructure module. And after the near field communication chip carries out digital signature verification and confirms that the generated random number is correct, the near field communication lock is unlocked. Therefore, a key-free and password-free working environment can be achieved, and the complexity of unlocking by authorization of a key and a password is avoided.

Description

Technical Field

[0001] The present invention relates to an information security management system, and more particularly to an information security management system for authorizing the opening of a near field communication lock. Background Art

[0002] In order to protect confidential information that can be circulated within the enterprise, such as documents, reports, design drawings, samples, etc., as well as production equipment such as servers, machine equipment, and cash register equipment such as POS machines and cashboxes, a company needs to have many permanent or temporary containers to store these cash, confidential information and related assets; accordingly, these containers also need to use one or more locks to ensure that they will not be opened maliciously or accidentally. In addition to the high cost of purchasing and installing each lock, the use and management (authorization to open) of each lock is also very cumbersome. For example, each employee is equipped with a locked office cabinet and a personal belongings cabinet. The key is issued to the employee when he joins the company and is collected when he leaves the company. This may be a matter that the human resources department can take care of. Each department has its own exclusive filing cabinets, file cabinets, display cabinets, etc., which are used to store department assets; the locks of special cabinets, especially those that store important or confidential assets, must also formulate special management such as key usage procedures and processes, and even have the complex work of storing and managing spare keys, and also prevent employees from copying keys privately, which requires the department head to handle it personally. If it is important confidential information of the company's senior management or across departments, the procedures for its safekeeping and authorization to open the safe deposit box often require the approval of the highest-level executives. It is helpless when many unnecessary people are needed for the action of "unlocking". However, these confidentiality practices are the only way for most companies to meet the security requirements of ISO27001.

[0003] In addition to the traditional method of authorizing and unlocking with physical keys, many companies use password locks to replace mechanical locks. The advantage of this is that it saves the risk of handing over and keeping keys, but the password for unlocking the password lock may be leaked to an unrelated third party or even remembered by a former employee, causing unnecessary risks. Recently, the business community has a rapidly increasing demand for a keyless and passwordless work environment, and fingerprint locks or face recognition locks have become a solution under technological substitution. However, in practice, this is not suitable for corporate use because the program architecture of these locks to record personal biometrics is very cumbersome. In addition, the average turnover rate of companies is about 15%, not counting job changes, and the management workload is very huge. Biometric locks require batteries or external power, and regular charging is also an additional management cost for companies. If the risk of personal biometric leakage is too high, there is also a potential moral cost. Therefore, biometric locks are not a better choice for companies than traditional keys.

[0004] Therefore, companies are still looking for better solutions to create a keyless and password-free working environment that also has the security requirements of ISO27001. Summary of the invention

[0005] The purpose of the present invention is to provide an information security management system for authorizing the opening of a near field communication lock.

[0006] In order to meet the above-mentioned needs, the present invention provides an information security management system for authorizing the opening of a near-field communication lock. The system is installed in a server cluster and is connected to multiple mobile communication devices, including: a database module for storing multiple groups of registered accounts and registered passwords, multiple registered near-field communication chip serial numbers, and at least one registered account set for each registered near-field communication chip serial number; an identity confirmation module, which is connected to the database module information and receives a user account and a user password from any mobile communication device. If the user account and the user password are the same as a group of registered accounts and registration passwords in the database module, the mobile communication device is allowed to perform an authorized unlocking procedure; a public key infrastructure module, which uses the multiple registered near-field communication chips to store the registered account and registration password. The method comprises the steps of: generating a plurality of key pairs according to the serial numbers of the registered near field communication chips, storing the public keys in the plurality of key pairs and the plurality of registered near field communication chip serial numbers, and using the public key in any key pair to digitally sign any information to obtain an unlocking code; and an unlocking processing module, connected with the database module, the identity confirmation module and the public key infrastructure module information, executing the authorized unlocking procedure, the authorized unlocking procedure comprising the following steps: a serial number receiving step: receiving a target near field communication chip serial number from an authorized mobile communication device that is allowed to execute the authorized unlocking procedure, the target near field communication chip serial number is the serial number of the authorized mobile communication device taken from a control unit of a near field communication chip. A near field communication chip of a communication lock unlocking mechanism, the near field communication chip having a private key in a key group generated by the target near field communication chip serial number; a first judgment step: judging whether the target near field communication chip serial number is one of the multiple registered near field communication chip serial numbers, if not, stopping the authorization unlocking procedure; a second judgment step: judging whether the user account used by the authorized mobile communication device is the registered account set by the registered near field communication chip serial number corresponding to the target near field communication chip serial number, if not, stopping the authorization unlocking procedure; a random number receiving step: receiving a generated random number from the authorized mobile communication device, the generated random number being the near field communication chip serial number. The NFC chip is randomly generated; an unlocking code generating step: the target NFC chip serial number and the generated random number are transmitted to the public key infrastructure module, and the public key infrastructure module uses the public key in the key group generated by the registered NFC chip serial number which is the same as the target NFC chip serial number to digitally sign the generated random number to obtain a corresponding unlocking code; and an unlocking step: the unlocking code is transmitted back to the NFC chip through the authorized mobile communication device, and the NFC chip digitally verifies the signature of the unlocking code with the private key to obtain a verification random number. If the verification random number is the same as the generated random number, the NFC chip unlocks the NFC lock.

[0007] According to the present invention, the database module can further record the data generated by the unlock processing module each time the authorization unlocking procedure is executed, and the relevant data of the NFC lock corresponding to each registered NFC chip serial number.

[0008] The information security management system for authorizing the unlocking of the NFC lock may further include an unlock notification module, which is informationally connected to the database module and the unlock processing module. When a registered NFC chip serial number is used to execute the authorized unlocking procedure, the unlock notification module synchronously notifies at least one mobile communication device logged in using the same user account as the at least one registered account. In the second judgment step of the authorized unlocking procedure, if the authorized unlocking procedure stops due to a negative judgment result, the unlock notification module further notifies the authorized mobile communication device operator that he is not authorized to unlock the NFC lock.

[0009] According to the present invention, the data related to the NFC lock includes information tags of the classification of the information or assets protected by the NFC lock. The authorized unlocking procedure may further include a first information tag step: the unlocking processing module sends the information tag of the NFC lock to the authorized mobile communication device and displays it on it.

[0010] According to the present invention, each NFC chip can also store relevant data, and the relevant data includes information tags of the classification of information or assets protected by the NFC lock.

[0011] According to the present invention, the authorized unlocking procedure may further include a second information tag step: the NFC chip of the NFC lock sends the information tag of the NFC lock to the authorized mobile communication device and displays it thereon.

[0012] According to the present invention, the authorized unlocking procedure may further include the following steps: a successful unlocking notification step: the near-field communication chip notifies the unlocking processing module of the successful unlocking through the authorized mobile communication device; an unlocking purpose collection step: the unlocking processing module presents an unlocking purpose window on the authorized mobile communication device, for the unlocker to input the unlocking purpose into the unlocking purpose window or select the unlocking reason from the menu displayed in the unlocking purpose window, and receives the unlocking purpose transmitted from the authorized mobile communication device and stores it in the database module.

[0013] The information security management system for authorizing the opening of the near field communication lock may further include an information security notification module, which is informationally connected to the database module and the unlocking processing module, wherein the database module further stores a notification unit corresponding to each unlocking purpose. When the unlocking processing module stores the unlocking purpose after the near field communication lock is unlocked in the database module, the corresponding notification unit is notified of the user account that executes the unlocking.

[0014] Preferably, the database module can further record a personal identification code bound to each registered account. Therefore, the authorization unlocking procedure can further include the following steps: a personal identification code acquisition step: receiving a personal identification code input by the unlocker from the authorized mobile communication device; and a personal identification code confirmation step: determining whether the personal identification code is one of the personal identification codes bound to the multiple registered accounts, and if not, stopping the authorization unlocking procedure.

[0015] The present invention uses a mobile communication device as a repeater and does not intervene in unlocking related operations. For a person who needs to unlock the door to obtain protected data or items, the identity confirmation module and the unlocking processing module will first confirm his identity and management authority, and then the generated random number will be digitally signed through the public key infrastructure module. After the near-field communication chip performs digital signature verification to confirm that the generated random number is correct, the near-field communication lock is opened. In this way, a keyless and password-free working environment can be achieved, eliminating the tediousness of requiring keys and passwords to authorize unlocking.

[0016] The above description extracts and compiles certain features of the present invention. Other features will be provided in subsequent paragraphs. Its purpose is to cover various modifications and similar arrangements within the spirit and scope of the attached claims. BRIEF DESCRIPTION OF THE DRAWINGS

[0017] Figure 1 A schematic diagram of components and application environment of an information security management system for authorizing the opening of a near field communication lock according to an embodiment of the present invention.

[0018] Figure 2 The figure is a block diagram of components of a near field communication lock applied in the present invention.

[0019] Figure 3 The table lists the data set for each registered NFC chip serial number.

[0020] Figure 4 Flowchart for the authorization unlocking procedure.

[0021] Figure 5 A display state of a screen of a second mobile communication device is depicted.

[0022] Figure 6 It is a partial flow chart of the authorization unlocking procedure in yet another embodiment.

[0023] Figure 7 A display state of a screen of a first mobile communication device is depicted.

[0024] Explanation of the accompanying drawings: 1-first server; 2-second server; 3-third server; 4-first mobile communication device; 4a-screen; 4b-unlocking purpose window; 5-second mobile communication device; 5a-screen; 6-third mobile communication device; 7-file cabinet; 8-file folder with lock; 9-safe; 10-near field communication lock; 20-lock module; 30-unlocking module; 31-near field communication antenna unit; 32-unlocking unit; 33-processing unit; 33a-near field communication chip; 33b-random access memory; 33c-read-only memory; 33d-input and output interface; 100-database module; 200-identity confirmation module; 300-public key infrastructure module; 400-unlocking processing module; 500-unlocking notification module; 600-information security notification module. DETAILED DESCRIPTION

[0025] The present invention will be described more specifically with reference to the following embodiments.

[0026] See also Figure 1 , which is a schematic diagram of the components and application environment of an information security management system for authorizing the opening of a near field communication lock according to an embodiment of the present invention. The information security management system for authorizing the opening of a near field communication lock (hereinafter referred to as the present system) is installed in a server cluster and operates through the hardware architecture of the server cluster. The server cluster includes more than one server, each of which performs different tasks or works together to maintain a larger workload service. According to the present invention, the number of servers in the server cluster is not limited. In this embodiment, three servers are used as an example, namely the first server 1, the second server 2 and the third server 3. The hardware architecture of each server is not much different from the general server architecture, and may include a central processing unit, a memory, a storage device (such as a hard disk), an input and output unit, etc. Although these hardware are not shown in the figure Figure 1 However, it is an architecture that should be understood by technicians in the server field. The various modules of the present invention introduced below are the technical requirements of the system that utilizes or cooperates with the above-mentioned existing server equipment. Therefore, they can be software, including specific program codes and data, and run in at least a part of the hardware architecture under the operating system (for example, the program code and related data files are stored in a storage device, temporarily stored in a memory under the operation of the operating system, and dynamically called and executed by the central processing unit). On the other hand, these modules can also be special hardware, such as an application-specific integrated circuit (ASIC) or an external card to perform the functions assigned by these modules. What's more, these technical requirements can be partly software and partly hardware, and are effectively integrated according to the needs of product designers, all within the technical scope claimed by this patent.

[0027] The server cluster is connected to several mobile communication devices through the network N ( Figure 1 The mobile communication device may be, but is not limited to, a smart phone, a tablet computer, or a smart wearable device. However, these mobile communication devices need to be equipped with a near-field communication (NFC) module to form a near-field communication reader (NFC Reader), which can communicate with the near-field communication tag in a near-field communication manner ( Figure 1 In this embodiment, three mobile communication devices are used as examples for explanation, namely, a first mobile communication device 4 is a smart phone, a second mobile communication device 5 is a tablet computer, and a third mobile communication device 6 is a smart watch. According to the present invention, the function of each mobile communication device is to serve as a repeater for data transmission, providing the system with multiple devices or apparatuses that are controlled and opened by near-field communication locks 10, and unlocking the near-field communication locks 10 with authorized unlocking codes, so as to obtain the data or items protected in the equipment or apparatus. In this embodiment, the first mobile communication device 4 is to unlock the near-field communication lock 10 on the inside of the bottom slide of a file cabinet 7 (because it cannot be seen from the outside, it is represented by a dotted box), the second mobile communication device 5 is to unlock the near-field communication lock 10 on a folder 8 with a lock, and the third mobile communication device 6 is to unlock the near-field communication lock 10 inside a safe 9 (because it cannot be seen from the outside, it is represented by a dotted box).

[0028] The NFC lock 10 is a composite lock that combines electronic components with a physical lock. Figure 2 , which is a block diagram of the components of the near field communication lock 10 used in the present invention. The structure of the near field communication lock 10 includes a lock module 20 and an unlocking module 30. The lock module 20 usually includes two locks that can be locked to each other and are respectively installed on the objects to be locked. One lock has a corresponding structure to match the other lock. The unlocker operates one of them to unlock the lock module 20. In terms of form, the lock module 20 can be a mechanical lock without power, or an electronic (magnetic) lock that requires power or has its own power. Different lock modules 20 can be used according to different protection objects.

[0029] The unlocking module 30 is a technical component that unlocks the lock module 20 by mechanical drive or electromagnetic field change when specific conditions are met. Generally speaking, the unlocking module 30 includes a near field communication antenna unit 31, an unlocking unit 32 and a processing unit 33. The near field communication antenna unit 310 is a tool for receiving near field communication signals and obtaining electrical energy therefrom. The signal includes an unlocking signal from the system and converts the electromagnetic energy emitted by the mobile communication device into electrical energy. This embodiment uses the NFC 13.56MHz frequency band to transmit the unlocking signal, and provides the unlocking module 30 with the power required for unlocking by coil induction. The unlocking signal is an electromagnetic wave signal, which can transmit an unlocking code in a continuous transmission or packet transmission mode. The unlocking unit 32 is a technical component that couples the unlocking module 30 with the lock module 20 and actually drives the lock module 20 to unlock mechanically or electromagnetically. For example, if the lock module 20 is a mechanical lock, which needs to be externally pressed or rotated to release the complex mechanical lock system, the unlocking unit 320 can be a module composed of a stepper motor, a gear set and a control circuit (not shown). The processing unit 33 is electrically connected to the near field communication antenna unit 31 to receive power and unlocking signals from the near field communication antenna unit 31, and is also coupled to the unlocking unit 32. The function of the processing unit 33 is to perform authentication on the unlocking code in the unlocking signal, and when the authentication is successful, notify the unlocking unit 32 to perform the unlocking action. The processing unit 330 includes a near field communication chip 33a, a random access memory 33b, a read-only memory 33c and an input and output interface 33d. The near field communication chip 33a is used to process the received signal, and in particular, can be programmed to randomly generate a random number and process the unlocking code in the unlocking signal. The relevant program code is stored in the read-only memory 33c, and the data generated when the near field communication chip 33a is in operation can be temporarily stored in the random access memory 33b. The input and output interface 33d is a device for the processing unit 330 to communicate with the near field communication antenna unit 31 and the unlocking unit 32.

[0030] The system includes a database module 100, an identity verification module 200, a public key infrastructure module 300, an unlocking processing module 400, an unlocking notification module 500 and a security notification module 600. The types, functions and interactions of these modules will be described in detail below with the corresponding diagrams. It should be noted that the servers installed in each module are only examples and may not be implemented according to the architecture.

[0031] The database module 100 is installed in the first server 1, and its function is to store an array of registered account numbers and registration passwords, several registered near-field communication chip serial numbers, and at least one registered account number set for each registered near-field communication chip serial number. This system is applied to a company that has control needs for confidential documents or items. In addition to each device that protects documents or items, such as the aforementioned file cabinets 7, folders 8 and safes 9, all employees of the company must be installed with a near-field communication lock 10. In order to be authorized to unlock all or part of these near-field communication locks 10, all employees of the company must register with the system with the mobile communication devices they use. The registration process is to leave an exclusive set of registered account numbers and registration passwords in the database module 100, and rely on this set of account numbers and passwords when logging into the system. The registered near-field communication chip serial number is the near-field communication chip serial number stored in the near-field communication chip 33a of the near-field communication lock 10 that the system can authorize to unlock. The word "registered" indicates that the database module 100 already has and is authorized to use the corresponding near-field communication chip serial number. For the state of the registered account number set for each registered near-field communication chip serial number, please refer to Figure 3 , this chart lists the data set for each registered NFC chip number. Figure 3 This is an example of the application of the system in a small company. The company has three members, namely employee A, employee B and the boss. Employee A registered the registration account N0001 with the first mobile communication device 4, employee B registered the registration account N0002 with the second mobile communication device 5, and the boss registered the registration account N0003 with the third mobile communication device 6. The company uses 10 NFC locks, and their registered NFC chip serial numbers are NFC0001 to NFC0010. For example, for the registered NFC chip serial number NFC0001, its set registration account is N0001, which means that only the registered account N0001 has the management authority to open the NFC lock with the registered NFC chip serial number NFC0001, which is usually used to protect personal items or highly confidential information or assets. In contrast, for example, if the NFC chip serial number is NFC0007, the registered accounts are N0001 to N0003, which means that all registered accounts have management rights to open the NFC lock with the NFC chip serial number NFC0007, which usually protects shared information or assets. However, for the NFC chip serial number NFC0005, only registered accounts N0002 and N0003 have management rights to open the corresponding NFC lock. In terms of company management, this eliminates the possibility of employee A obtaining the information or assets protected by the lock.

[0032] The identity confirmation module 200 is installed in the second server 2 and is connected to the database module 100. Its function is to receive a user account and a user password from any mobile communication device. The user account and user password refer to a set of account and password input by the mobile communication device and transmitted to the second server 2. If the input is wrong, it will not be accepted by the system and the unlocking service will not be provided. On the contrary, if the aforementioned user account and user password are the same as a set of registered account and registered password in the database module, the mobile communication device is allowed to perform an authorized unlocking procedure. The authorized unlocking procedure will be described in detail later.

[0033] The public key infrastructure module 300 is installed in the third server 3. The public key infrastructure (PKI) is a set of infrastructure composed of hardware, software, participants, management policies and processes, and its purpose is to create, manage, distribute, use, store and restore digital certificates. The public key infrastructure module 300 is to achieve the purpose of the public key infrastructure, and the encryption technology it uses is the same as other public key infrastructure platforms. In practice, the public key infrastructure module 300 generates several pairs of key groups with the aforementioned registered near field communication chip serial numbers, stores the public keys in the key groups and the registered near field communication chip serial numbers, and can digitally sign any information with the public key in any pair of key groups to obtain an unlocking code, and the unlocking code is included in the aforementioned unlocking signal, which is transmitted to the corresponding near field communication lock through the mobile communication device.

[0034] The unlocking processing module 400 is installed in the second server 2 and is connected to the database module 100, the identity confirmation module 200 and the public key infrastructure module 300. The unlocking processing module 400 is the main technical element for executing the authorization unlocking procedure. Figure 4 , which is a flow chart of the authorization unlocking procedure, and the authorization unlocking procedure includes the following steps.

[0035] Step 1: Serial number receiving step (S01). The specific content of the serial number receiving step is to receive a target near field communication chip serial number from an authorized mobile communication device that is allowed to execute the authorized unlocking procedure. The target near field communication chip serial number is a near field communication chip that controls a near field communication lock unlocking mechanism taken by the authorized mobile communication device. The near field communication chip has a private key in the key group generated by the target near field communication chip serial number. For example, the authorized mobile communication device is the first mobile communication device 4, that is, employee A can approach any near field communication lock to obtain the near field communication chip serial number in the near field communication chip after logging into the system with his registered account N0001 and obtaining authorization. For the purpose of clarification, the obtained near field communication chip serial number is called the target near field communication chip serial number, which is different from other registered near field communication chip serial numbers that have not been obtained and other near field communication chip serial numbers that do not belong to this system.

[0036] Step 2: First judgment step (S02). The first judgment step is to determine whether the target near-field communication chip serial number is one of the registered near-field communication chip serial numbers. If not, the authorization unlocking procedure is stopped. The purpose of this step is to determine whether the near-field communication chip approached by the authorized mobile communication device is registered and used by this system. If the result of the above judgment is "no", then the authorization unlocking procedure is stopped, and the unlocking processing module 400 can also transmit information such as "This lock is not controlled by this system, please ask the administrator" to the authorized mobile communication device, so that the user of the authorized mobile communication device can know that this near-field communication lock cannot be unlocked. If the result of the judgment is "yes", then the unlocking processing module 400 proceeds to the next step.

[0037] Step 3: Second judgment step (S03). The second judgment step is to judge whether the user account used by the authorized mobile communication device is the registered account set for the registered near-field communication chip number corresponding to the target near-field communication chip number. If not, stop the authorization unlocking procedure. The first judgment step is for the unlocking control of the near-field communication lock, and the second judgment step is for the user's authority control. That is, only when the registered account with the same user account is set on the registered near-field communication chip corresponding to the target near-field communication chip number, the unlocking processing module 400 will proceed to the next step. Figure 3 For example, after employee B logs into the system with his registered account N0002 and obtains authorization, the NFC locks he can unlock are limited to those with registered NFC chip numbers NFC0004 to NFC0008. For other NFC locks, the authorization unlocking procedure will stop at this step.

[0038] Step 4: random number receiving step (S04). The random number receiving step is to receive a generated random number from the authorized mobile communication device, and the generated random number is randomly generated by the near field communication chip. As mentioned above, the generated random number is randomly generated by the near field communication chip 33a in the near field communication lock that performs near field communication with the authorized mobile communication device, and its purpose is to be used for digital signature by the public key infrastructure module 300. In practice, this step can also be incorporated into the first step and processed by the unlocking processing module 400 simultaneously.

[0039] Step 5: Unlock code generation step (S05). The unlock code generation step is to transmit the target NFC chip serial number and the generated random number to the public key infrastructure module 300. The public key infrastructure module 300 uses the public key in the key group generated by the registered NFC chip serial number that is the same as the target NFC chip serial number to digitally sign the generated random number to obtain the corresponding unlock code. The purpose of this step is to use the public key infrastructure technology to digitally sign the generated random number generated by the NFC lock, and use the obtained unlock code string for the NFC lock to determine whether to unlock.

[0040] Step 6: Unlocking step (S06). The unlocking step is to transmit the unlocking code back to the NFC chip through the authorized mobile communication device. The NFC chip uses the private key to digitally verify the unlocking code to obtain a verification random number. If the verification random number is the same as the generated random number, the NFC chip unlocks the NFC lock. The unlocking code may use the header and footer of the transmission protocol during the transmission process, which needs to be removed during the digital verification. The key point of this step to enable the NFC chip to unlock the NFC lock is to allow the NFC chip to perform a digital verification operation relative to the digital signature operation, and unlock only when the confirmation result is the same as the generated random number issued. It can be seen from the above description that in the entire unlocking process, the authorized mobile communication device only acts as a repeater for information transmission and does not intervene in the unlocking-related operations. For those who need to unlock to obtain protected data or items, the system will first confirm his identity and management authority before executing the second half of the steps. In terms of operation, the system only requires the system administrator to intervene when registering the NFC chip serial number to set the registration account, and the subsequent unlocking operations are all automated.

[0041] The unlock notification module 500 is installed in the second server 2 and is connected to the database module 100 and the unlock processing module information 400. When a registered near field communication chip serial number is used to execute the authorized unlocking procedure, the unlock notification module 500 can simultaneously notify at least one mobile communication device logged in with the same user account as the at least one registered account. Figure 3As shown, when the registered NFC chip serial number NFC0006 is used to execute the authorization unlocking procedure with the registered account number N0002, since the registered account number set by the registered NFC chip serial number also has N0003, that is, the registered account number of the boss, if the boss uses his registered account number as the user account to log in to the identity confirmation module 200, the unlocking notification module 500 will synchronously notify the third mobile communication device 6 used by the boss. The specific content of the unlocking notification module 500 notification is that the NFC lock corresponding to the registered NFC chip serial number NFC0006 is being opened by the person using the registered account number N0002, and the relevant parties are simultaneously informed of the current status of the specific lock. Of course, for the NFC lock with the registered NFC chip serial number NFC0001, since it is for private storage of items, employee A may not be notified when it is opened. However, considering that there may be a situation where the registered account number is stolen, the system can also be set to receive the function of the unlocking notification module 500 report when the party opens the NFC lock for personal use. In this case, in the second judgment step of the authorization unlocking procedure, if the authorization unlocking procedure stops due to the judgment result of "no", that is, although the authorization unlocking procedure can be executed but the NFC lock without management authority is unlocked, the unlocking notification module 500 will further notify the authorized mobile communication device operator that he is not authorized to unlock the NFC lock. However, this situation of unlocking the wrong lock may be unintentional, and the process will only be recorded in the database module 100, and the unlocking notification module 500 will not notify the mobile communication device logged in with other registered accounts set by the registered NFC chip serial number.

[0042] For some companies with strict internal controls, the details of the unlocking process need to be recorded to prevent information security incidents or to handle subsequent incidents when they occur. In order to achieve this goal, the database module 100 needs to further record the data generated by the unlocking processing module 400 each time the authorization unlocking procedure is executed, and it is not limited to whether the unlocking is successful or failed. For example, the data generated by executing the authorization unlocking procedure may include the time of occurrence, the registered account number of the unlocking operation, the target near-field communication chip serial number, the reason for the success or failure of the unlocking, etc. In addition, the database module 100 also records the relevant data of the near-field communication lock corresponding to each registered near-field communication chip serial number. According to the present invention, the relevant data includes information tags for the classification of information or assets protected by the near-field communication lock. For a better understanding of this, please refer to Figure 3. Take the NFC lock with the registered NFC chip serial number NFC0002 as an example. The lock is used in a locker. The locker stores the sample inspections of goods shipped in previous times, shipping documents and some reference books. The information tag content can simply have the text of bulk samples, general documents and books. The function of the information tag is to let the unlocker know the type of things protected by the NFC lock before unlocking. In practice, the information tag can also be a corresponding image, not limited to text.

[0043] After the database module 100 records the data generated by the unlock processing module 400 each time the authorization unlock procedure is executed and the corresponding NFC lock related data, the unlock processing module 400 can further add a first information tag step to the authorization unlock procedure between any two steps after the first step, or after the sixth step. The specific content of the first information tag step is: sending the information tag of the NFC lock to the authorized mobile communication device and displaying it on it. Take the second mobile communication device 5 as an authorized mobile communication device to unlock the NFC lock 10 with the registered NFC chip serial number NFC0005 as an example, see Figure 5 , which shows the display state of the screen 5a of the second mobile communication device 5. The content displayed on the screen 5a includes the content classification including the information tags, and other notification items, such as the text "unlocking" and related animations informing that the authorization unlocking process is in progress. This information can be dynamically displayed through the mobile communication software installed on each mobile communication device.

[0044] In the previous embodiment, the relevant data of the near-field communication lock corresponding to each registered near-field communication chip serial number is recorded in the database module 100, called by the unlocking processing module 400 and presented on the screen of the authorized mobile communication device. In another embodiment, each near-field communication chip may also store relevant data, and the relevant data includes an information tag that classifies the information or assets protected by the aforementioned near-field communication lock. In other words, the source of the information tag has changed. Therefore, the unlocking processing module 400 of the present system may further add a second information tag step to the authorized unlocking procedure between any two steps after the first step, or after the sixth step. The specific content of the second information tag step is: the near-field communication chip of the near-field communication lock sends the information tag of the near-field communication lock to the authorized mobile communication device and displays it on it. The display result is the same as Figure 5 The second information labeling step and the first information labeling step have different implementation conditions, so one must be implemented at a time.

[0045] If the mobile communication device used by the unlocker may be lost or stolen by someone with intent, and then used to unlock a specific near-field communication lock, the present invention also has a corresponding solution. To this end, the database module 100 can further record a personal identification number (PIN) bound to each registered account. This is another set of passwords that is additionally set by the unlocker and is different from the login password. Its purpose is described as follows. The authorization unlocking procedure can further include the following steps at any time point after the first step and before the fifth step: A, a personal identification number acquisition step: receiving a personal identification number input by the unlocker from the authorized mobile communication device; and B, a personal identification number confirmation step: determining whether the personal identification number is one of the personal identification numbers bound to the registered accounts, and if not, stopping the authorization unlocking procedure. Step A is to dynamically "test" the unlocker whether he remembers the personal identification number he has registered before the unlocking code is generated. If the unlocker is the owner of the registered account, he will not forget the personal identification number, and the unlocking is completed only after entering the correct personal identification number, which is equivalent to another protection for the operation of this system. After entering the personal identity confirmation code, if it is correct, the next steps will be continued. If it is incorrect, the authorization unlocking process will be stopped.

[0046] Under the condition of low noise in the communication environment, the whole unlocking process is very fast, and the unlocker does not need to wait too long to unlock and retrieve the item. However, if the noise in the communication environment is high, the communication key between the near-field communication lock and the server must be exchanged many times to complete the unlocking. In this case, the unlocker waiting for the unlocking must be informed when the unlocking is successful, so that he will not accidentally think that the unlocking is successful, and thus forcibly pull the near-field communication lock to cause damage, or think that the system is malfunctioning. In addition, based on information security considerations, after the near-field communication lock is opened, it is best for the unlocker to leave the purpose of his unlocking this time, so that he can be tracked in the future when an information security incident occurs. In the following embodiments, the unlocking processing module 400 has other steps after the sixth step of the authorization unlocking procedure to improve the entire procedure.

[0047] See also Figure 6 , which is a partial flow chart of the authorized unlocking procedure in another embodiment. Step 7: Unlocking success notification step (S07). Unlocking success notification step The near field communication chip notifies the unlocking processing module 400 of the unlocking success through the authorized mobile communication device. Step 8: Unlocking purpose collection step (S08). The unlocking purpose collection step is that the unlocking processing module 400 presents an unlocking purpose window on the authorized mobile communication device, for the unlocker to input the unlocking purpose into the unlocking purpose window or select the unlocking reason from the menu displayed in the unlocking purpose window, receive the unlocking purpose transmitted from the authorized mobile communication device and store it in the database module 100. For a better understanding of this, please refer to Figure 7 , which shows the display state of the screen 4a of the first mobile communication device 4. The first mobile communication device 4 is used as the authorized mobile communication device for explanation. The screen 4a of the first mobile communication device 4 presents an unlocking purpose window 4b. The menu displayed in the unlocking purpose window 4b contains multiple unlocking reasons for the unlocker to select. After selecting, click the "Confirm" button to upload the unlocking reason to the server. After the unlocking processing module 400 receives it, it is stored in the database module 100 for standby use.

[0048] Finally, the information security notification module 600 of the present system is installed in the second server 2, and is connected to the database module 100 and the unlocking processing module 400. After having the aforementioned unlocking purpose record service, the present system can use the information security notification module 600 to notify different notification units according to the unlocking purpose of the unlocker that a specific registered account has opened a specific near field communication lock. For example, if the purpose of unlocking is a device failure and the server needs to be repaired, under the definition of ISO27001, this accident will cause the business to continue to operate, and the information security team that receives the notification needs to determine whether to notify the relevant parties, such as customers or consumers. For example, if the purpose of unlocking is to send the equipment for repair, the information security team that receives the notification needs to understand whether the equipment or components sent for repair contain storage memory. If so, it must follow the data deletion method and delete it before it can be sent for repair to avoid information leakage. Here, the notification unit is not limited to the upper-level managers of the organizational structure. For the company's important secrets or assets, the manager may place them in a special safe deposit box. The action of unlocking and taking out the items, especially during non-working hours, needs to be reported to the security company or even the police station. In this case, the security company and the police station are the aforementioned notification units. In practice, a specific person in the company, such as a human resources manager, can also be found to serve as the notification unit. According to the present invention, the database module 100 needs to further store the notification unit corresponding to each unlocking purpose in response to the aforementioned needs. For example, the notification unit for unlocking the purpose of authorizing an order to pick up the item is the human resources manager, the notification unit for unlocking the purpose of regularly taking inventory of the contents is the security company, and the notification unit for unlocking the purpose of accidentally opening the item is the police station. It should be emphasized that this kind of notification involves a wide range of matters, and the commercial value of the data or items protected by the near-field communication lock involved is very high. When the unlocking processing module 400 stores the unlocking purpose after unlocking the near-field communication lock in the database module 100, the information security notification module 600 will notify the corresponding notification unit of the user account that executed the unlocking. When a security incident occurs afterwards, the user account in the record can be used to find the person involved as a basis for clarifying rights and responsibilities.

[0049] Although the present invention has been provided as above by specific implementation modes, it is not intended to limit the present invention. Any general technician with common knowledge in the relevant technical field can make some changes and modifications without departing from the spirit and scope of the present invention. Therefore, the scope of protection of the present invention shall be based on the definition of the attached claims.

Claims

1. An information security management system for authorizing the opening of a near field communication lock, installed in a server cluster and connected to multiple mobile communication devices, characterized in that: Include: A database module for storing a plurality of sets of registered accounts and registered passwords, a plurality of registered near field communication chip serial numbers, and at least one registered account set for each registered near field communication chip serial number; an identity confirmation module, connected to the database module information, receiving a user account and a user password from any mobile communication device, and allowing the mobile communication device to perform an authorized unlocking procedure if the user account and the user password are the same as a set of registered account and registered password in the database module; a public key infrastructure module, generating a plurality of key pairs using the plurality of registered NFC chip serial numbers, storing the public keys in the plurality of key pairs and the plurality of registered NFC chip serial numbers, and digitally signing any information using the public key in any key pair to obtain an unlocking code; and An unlocking processing module is connected to the database module, the identity confirmation module and the public key infrastructure module to execute the authorization unlocking procedure, which includes the following steps: A serial number receiving step: receiving a target NFC chip serial number from an authorized mobile communication device that is allowed to execute the authorized unlocking procedure, wherein the target NFC chip serial number is a NFC chip of the authorized mobile communication device that controls a NFC lock unlocking mechanism, and the NFC chip has a private key in a key set generated using the target NFC chip serial number; The first determination step: determining whether the target NFC chip serial number is one of the multiple registered NFC chip serial numbers, if not, stopping the authorization unlocking procedure; The second determination step: determining whether the user account used by the authorized mobile communication device is the registered account set by the registered near field communication chip serial number corresponding to the target near field communication chip serial number, if not, stopping the authorization unlocking procedure; A random number receiving step: receiving a generated random number from the authorized mobile communication device, wherein the generated random number is randomly generated by the near field communication chip; Unlock code generation step: the target NFC chip serial number and the generated random number are transmitted to the public key infrastructure module, and the public key infrastructure module uses the public key in the key group generated by the registered NFC chip serial number which is the same as the target NFC chip serial number to digitally sign the generated random number to obtain the corresponding unlock code; and Unlocking step: the unlocking code is transmitted back to the NFC chip through the authorized mobile communication device, and the NFC chip digitally verifies the unlocking code with the private key to obtain a verification random number. If the verification random number is the same as the generated random number, the NFC chip unlocks the NFC lock.

2. The information security management system for authorizing the opening of a near field communication lock as claimed in claim 1, characterized in that: The database module also records the data generated by the unlock processing module each time the authorization unlocking program is executed, and the relevant data of the NFC lock corresponding to each registered NFC chip serial number.

3. The information security management system for authorizing the opening of a near field communication lock as claimed in claim 2, characterized in that: It also includes an unlocking notification module, which is informationally connected to the database module and the unlocking processing module. When a registered near-field communication chip serial number is used to execute the authorized unlocking procedure, the unlocking notification module synchronously notifies at least one mobile communication device logged in using the same user account as the at least one registered account.

4. The information security management system for authorizing the opening of a near field communication lock as claimed in claim 3, characterized in that: In the second determination step of the authorization unlocking procedure, if the authorization unlocking procedure stops due to a negative determination result, the unlocking notification module notifies the authorized mobile communication device operator that he is not authorized to unlock the NFC lock.

5. The information security management system for authorizing the opening of a near field communication lock as claimed in claim 2, characterized in that: The relevant data of the NFC lock includes information tags of the classification of the information or assets protected by the NFC lock.

6. The information security management system for authorizing the opening of a near field communication lock as claimed in claim 5, characterized in that: The authorized unlocking procedure further comprises a first information tag step: the unlocking processing module sends the information tag of the NFC lock to the authorized mobile communication device and displays it thereon.

7. The information security management system for authorizing the opening of a near field communication lock as claimed in claim 1, characterized in that: Each NFC chip stores relevant data, and the relevant data includes information tags of the classification of information or assets protected by the NFC lock.

8. The information security management system for authorizing the opening of a near field communication lock as claimed in claim 7, characterized in that: The authorized unlocking procedure further comprises a second information tag step: the NFC chip of the NFC lock sends the information tag of the NFC lock to the authorized mobile communication device and displays it on the authorized mobile communication device.

9. The information security management system for authorizing the opening of a near field communication lock as claimed in claim 1, characterized in that: The authorization unlocking procedure also includes the following steps: Unlock success notification step: the near field communication chip notifies the unlock processing module of unlock success through the authorized mobile communication device; Unlocking purpose collection step: The unlocking processing module presents an unlocking purpose window on the authorized mobile communication device, for the unlocker to input the unlocking purpose into the unlocking purpose window or select the unlocking reason from the menu displayed in the unlocking purpose window, and receives the unlocking purpose transmitted from the authorized mobile communication device and stores it in the database module.

10. The information security management system for authorizing the opening of a near field communication lock as claimed in claim 9, characterized in that: It also includes a security notification module, which is connected to the database module and the unlocking processing module, and is characterized in that the database module further stores a notification unit corresponding to each unlocking purpose. When the unlocking processing module stores the unlocking purpose after unlocking the near field communication lock in the database module, the corresponding notification unit is notified of the user account that executes the unlocking.

11. The information security management system for authorizing the opening of a near field communication lock as claimed in claim 2, characterized in that: The database module also records a personal identity confirmation code bound to each registered account.

12. The information security management system for authorizing the opening of a near field communication lock as claimed in claim 11, characterized in that: The authorization unlocking procedure also includes the following steps: A personal identification code acquisition step: receiving a personal identification code input by the unlocker from the authorized mobile communication device; and Personal identity confirmation code confirmation step: determine whether the personal identity confirmation code is one of the personal identity confirmation codes bound to the registered account. If not, stop the authorization unlocking procedure.

Images