Use management system, management device, use control device, use management method, and computer-readable program

Abstract

To reduce security risks while improving convenience in a use management technique of use objects.SOLUTION: In a use management system, a use control device 1 can communicate only by short-range wireless communication 63, and stores a first public key paired with a first secret key stored in a management device 2. When receiving whole data together with a first signature from a provider terminal 3, the first signature is verified with the first public key, and the whole data is set to the use control device 1 if signature verification is established. The whole data includes a second public key paired with a second secret key stored in the management device 2. When receiving a use permission certificate together with a second signature from a user terminal 4, the second signature is verified with the second public key, and transaction information included in the use permission certificate is acquired if signature verification is established. Then, the acquired transaction information is refers to, and use restriction on a use object (house 50) is lifted if a condition identified by the transaction information is satisfied.SELECTED DRAWING: Figure 1

Description

[Technical field]

[0001] The present invention relates to a usage management technology for objects whose usage can be restricted by locking / unlocking, access control, or encryption / decryption, including entrances to hotels, inns, private lodging facilities, houses, warehouses, rooms, etc., mobile objects such as automobiles and bicycles, and viewing terminals for electronic media such as electronic medical records and e-books. [Background technology]

[0002] Patent Document 1 discloses a system in which various services including unlocking and locking rooms can be used in facilities such as companies, hospitals, amusement parks, and public facilities by simply carrying a room key. This system includes a room key having a readable and writable RFID (Radio Frequency Identification) wireless tag that stores information such as a room number, a PIN number, and customer information, an RFID reader installed in each location in the facility to read and write information to the RFID wireless tag of the room key, a database that stores information about each room and each facility in the facility, and a server that is connected to the RFID reader and the database via a network and manages each room and each facility in the facility. For example, the RFID reader installed on the door or inside each room in the facility reads the information stored in the RFID wireless tag of the room key and transmits it to the server, and the server, upon receiving this, collates the room number included in the information received from the RFID reader with the room number of the room in which the RFID reader is installed, and unlocks and locks the room. [Prior art documents] [Patent documents]

[0003] [Patent Document 1] JP 2003-132435 A Summary of the Invention [Problem to be solved by the invention]

[0004] However, the system of Patent Document 1 is premised on the lending and returning of room keys at the reception desk of facilities such as companies, hospitals, amusement parks, and public facilities. For this reason, even if a facility is reserved on the Internet, the user must stop by the reception desk of the management department that manages the facility to borrow a room key and then move to the reserved facility. In addition, after using the facility, the user must stop by the reception desk of the management department to return the room key. Therefore, when the reserved facility and the reception desk of the management department that manages the facility are geographically separated, this is inconvenient.

[0005] In addition, in the system of Patent Document 1, RFID readers installed at various locations within the facility read the information stored in the RFID wireless tag of the room key and transmit it to a server via a network. Therefore, for example, if the server is installed outside the facility and the RFID readers installed at various locations within the facility are connected to the server installed outside the facility via the Internet, every time the RFID reader reads information from the RFID wireless tag of the room key, the read information will be transmitted over the Internet. This increases the security risk.

[0006] The present invention has been made in consideration of the above circumstances, and has as its object to improve convenience and reduce security risks in usage management technology for objects whose usage can be restricted by locking / unlocking, access control, or encryption / decryption, including entrances to hotels, inns, private lodging facilities, houses, warehouses, rooms, etc., mobile objects such as automobiles and bicycles, and viewing terminals for electronic media such as electronic medical records and e-books. [Means for solving the problem]

[0007] In order to solve the above problems, the present invention comprises a usage control device that controls the usage of an object of use by locking / unlocking, access control, or encryption / decryption based on a usage certificate, a management device that manages the object of use in association with the usage control device, a provider terminal that sets hall data necessary for verifying the usage certificate in the usage control device, and a user terminal that notifies the usage control device of the usage certificate.

[0008] Here, the usage control device can communicate only by short-range wireless communication and is separated from the network. The usage control device also stores a first public key paired with a first private key stored in the management device in association with the usage control device. When the usage control device receives hall data together with a first signature from the provider terminal via short-range wireless communication, the usage control device verifies the first signature with the first public key, and if the signature verification is successful, sets the hall data in the usage control device. The hall data includes a second public key paired with a second private key stored in the management device in association with the usage control device. When the usage control device receives a usage certificate together with a second signature from the user terminal via short-range wireless communication, the usage control device verifies the second signature with the second public key, and if the signature verification is successful, acquires transaction information included in the usage certificate. The usage control device then refers to the acquired transaction information, and releases the usage restriction on the usage object if the condition specified by the transaction information is satisfied.

[0009] The transaction information included in the license may be encrypted with a common key that the usage control device shares with the management device. The usage control device then uses this common key to decrypt the encrypted transaction information included in the license received from the user terminal. In this case, the common key may be included in the hall data and transmitted to the usage control device.

[0010] For example, the present invention provides A usage management system for managing usage of an object to be used, a usage control device that controls the usage of the object by locking / unlocking, access control, or encryption / decryption based on the usage license; a management device that manages the object of use in association with the usage control device; a provider terminal for setting hall data required for verifying the license in the usage control device; a user terminal that notifies the usage control device of the usage license, The management device includes: a transaction management means for managing transaction information including conditions regarding the use of the object of use; an object management means for managing a first private key and a public key in association with the usage control device; a hall management means for managing a second private key and a public key in association with the usage control device; a hole data processing means for generating a first signature for the hole data, including the second public key managed by the hole management means, using the first private key managed by the object management means, and transmitting the hole data and the first signature to the provider terminal; a license processing means for generating a second signature for the license including the transaction information managed by the transaction management means, by using the second private key managed by the hall management means, and transmitting the license and the second signature to the user terminal, The provider terminal includes: transmitting the hall data and the first signature received from the management device to the usage control device via short-range wireless communication; The user terminal includes: transmitting the usage license and the second signature received from the management device to the usage control device by short-range wireless communication; The usage control device includes: Communication is possible only via short-range wireless communication. a hall setting means for verifying the first signature received from the provider terminal together with the hall data by using the first public key registered in advance, and setting the hall data in the own device if the verification is successful; a transaction information acquiring means for verifying the second signature received from the user terminal together with the license by using the second public key included in the hall data set in the device, and acquiring the transaction information included in the license if the verification is successful; and a lifting means for lifting the usage restriction on the object of use by referring to the transaction information acquired by the transaction information acquisition means and if a condition specified by the transaction information is satisfied. Effect of the Invention

[0011] In the present invention, the usage control device can communicate only by short-distance wireless communication and is separated from the network. Therefore, the usage control device cannot be attacked from the outside via a network such as the Internet. In addition, the validity of the usage permit used to release the usage restriction of the object to be used is proven by verifying the second signature added to the usage permit using the second public key included in the hall data, and the validity of the hall data is proven by verifying the first signature added to the hall data using the first public key. Therefore, according to the present invention, security risks are reduced.

[0012] Furthermore, in the present invention, the usage restrictions on the object of use are lifted only when the conditions specified by the transaction information included in the license are satisfied, and if they are not satisfied, the usage restrictions on the object of use are not lifted. Therefore, by including conditions such as the usage period and number of uses in the transaction information, a license that does not meet these conditions becomes invalid even if its validity is proven, so there is no need to ask the user of the object of use (the user of the user terminal) to return the license. Therefore, the present invention improves convenience.

[0013] In this way, according to the present invention, in a usage management technology for an object whose usage can be restricted by locking / unlocking, access control, or encryption / decryption, it is possible to improve convenience while reducing security risks. [Brief description of the drawings]

[0014] [Figure 1] FIG. 1 is a schematic diagram of a usage management system according to an embodiment of the present invention. [Diagram 2] FIG. 2 is a sequence diagram showing an example of an object registration operation for registering the usage control device 1 in the management device 2 in the usage management system according to the embodiment of the present invention. [Diagram 3] FIG. 3 is a sequence diagram showing an example of a hall setting operation for setting hall data in the usage control device 1 in the usage management system according to the embodiment of the present invention. [Figure 4] FIG. 4 is a sequence diagram showing an example of a transaction information registration operation for registering transaction information including conditions related to the use of a use object in the management device 2 in the use management system according to one embodiment of the present invention. [Diagram 5] FIG. 5 is a sequence diagram showing an example of a usage certificate issuing operation in which the management device 2 issues a usage certificate to the user terminal 4 in the usage management system according to one embodiment of the present invention. [Figure 6] FIG. 6 is a sequence diagram showing an example of a usage restriction release operation in which the usage control device 1 releases a usage restriction on a usage object in the usage management system according to one embodiment of the present invention. [Figure 7] FIG. 7 is a schematic functional configuration diagram of the usage control device 1. As shown in FIG. [Figure 8] FIG. 8 is a flow diagram for explaining the operation of the usage control device 1. As shown in FIG. [Figure 9] FIG. 9 is a schematic functional configuration diagram of the management device 2. As shown in FIG. [Figure 10] FIG. 10 is a diagram showing an example of registered contents in the user information storage unit 221. As shown in FIG. [Figure 11] FIG. 11 is a diagram showing an example of registered contents in the provider information storage unit 222. As shown in FIG. [Figure 12] FIG. 12 is a diagram showing an example of registered contents in the object data storage unit 223. As shown in FIG. [Figure 13]FIG. 13 is a diagram showing an example of registered contents in the hole data storage unit 224. As shown in FIG. [Figure 14] FIG. 14 is a diagram showing an example of registered contents in the transaction information storage unit 225. As shown in FIG. [Figure 15] FIG. 15 is a flow diagram for explaining the operation of the management device 2. As shown in FIG. [Figure 16] FIG. 16 is a flow diagram for explaining the object registration request process S305 shown in FIG. [Figure 17] FIG. 17 is a flow diagram for explaining the hole generation request process S306 shown in FIG. [Figure 18] FIG. 18 is a flow diagram for explaining the transaction request process S309 shown in FIG. [Figure 19] FIG. 19 is a flow diagram for explaining the license request process S310 shown in FIG. [Figure 20] FIG. 20 is a schematic diagram of a modified example of the usage management system shown in FIG. [Figure 21] FIG. 21 is a sequence diagram showing an example of a usage restriction releasing operation in which the usage control device 1A releases the usage restriction on the usage object in the modified example of the usage management system shown in FIG. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0015] Hereinafter, an embodiment of the present invention will be described with reference to the drawings.

[0016] FIG. 1 is a schematic diagram of a usage management system according to the present embodiment.

[0017] As shown in the figure, the usage management system according to this embodiment includes a usage control device 1, a management device 2, a provider terminal 3, and a user terminal 4.

[0018] The usage control device 1 is provided for each object to be used, and can communicate only by short-distance wireless communication 63 such as IrDA (Infrared Data Association) or Bluetooth (registered trademark), and controls the usage of the object to be used by locking / unlocking, access control, or encryption / decryption based on the usage permit. In this example, the object to be used is a house 50, and the usage of the house 50 is controlled by locking / unlocking an entrance 51. The management device 2 manages the usage control device 1. The management device 2 also transmits hall data used for verifying the usage permit to a provider terminal 3 via a WAN (Wide Area Network) 60, and transmits the usage permit to a user terminal 4. The provider terminal 3 is provided for each provider, and is connected to the WAN 60 via a wireless network 62 and a relay device 61 such as a wireless base station or an access point, and receives hall data from the management device 2. The provider terminal 3 also transmits the hall data received from the management device 2 to the usage control device 1 via short-distance wireless communication 63. A user terminal 4 is provided for each user, connected to the WAN 60 via a wireless network 62 and a relay device 61, and receives a usage certificate from the management device 2. In addition, the provider terminal 3 transmits the usage certificate received from the management device 2 to the usage control device 1 by short-range wireless communication 63.

[0019] FIG. 2 is a sequence diagram showing an example of an object registration operation for registering the usage control device 1 in the management device 2 in the usage management system according to the present embodiment.

[0020] First, when the provider terminal 3 accepts a login operation from a provider who provides a utilization service of the utilization object (house 50) (S100), it transmits a login request including the provider's user ID and password to the management device 2 (S101). In response to this, the management device 2 performs authentication processing using the password included in the login request and a password that is managed in association with the user ID included in this login request (S102). Then, if the authentication is successful, it permits the login of the provider terminal 3 that has sent the login request, and transmits a login permission notice to this provider terminal 3 (S103).

[0021] Next, when the provider terminal 3 receives an object registration request operation including facility information including the property name, address, etc. of the house 50, which is the object to be used, from the provider (S104), the provider terminal 3 transmits the object registration request including the facility information of the house 50 to the management device 2 (S105). In response to this, the management device 2 issues an object ID to be assigned to the usage control device 1 used for use control of the house 50 (locking and unlocking control of the entrance 51). In addition, the management device 2 generates a first secret key and a public key according to a public key cryptosystem. Then, the management device 2 generates object data including the object ID, the first secret key and the public key, and the facility information included in the object registration request (S106). Then, the management device 2 registers and manages the generated object data by linking it to the user ID of the provider (S107). After that, the management device 2 transmits an object registration notification including the object ID and the first public key to the provider terminal 3 (S108).

[0022] Next, when the provider terminal 3 receives an object setting operation from the provider while approaching the usage control device 1 close enough to perform short-range wireless communication 63 with the usage control device 1 (S109), the provider terminal 3 transmits the object registration notification received from the management device 2 to the usage control device 1 via short-range wireless communication 63 (S110). In response to this, the usage control device 1 sets the object ID and the first public key included in the object registration notification in its own device 1 (S111).

[0023] FIG. 3 is a sequence diagram showing an example of a hall setting operation for setting hall data in the usage control device 1 in the usage management system according to the present embodiment.

[0024] First, when the provider terminal 3 accepts a login operation from a provider who provides a service of using the object to be used (house 50) (S120), it transmits a login request including the provider's user ID and password to the management device 2 (S121). In response to this, the management device 2 performs authentication processing using the password included in the login request and a password that is managed in association with the user ID included in this login request (S122). Then, if the authentication is successful, it permits the login of the provider terminal 3 that has sent the login request, and transmits a login permission notice to this provider terminal 3 (S123).

[0025] Next, when the provider terminal 3 receives a hole generation request operation accompanied by the designation of the object ID of the usage control device 1 from the provider (S124), it transmits a hole generation request including the object ID to the management device 2 (S125). In response to this, the management device 2 generates a common key according to the common key cryptosystem, and generates a second secret key and a public key according to the public key cryptosystem. Then, it generates hole data including the object ID, the common key, and the second public key (S126). Then, the management device 2 registers and manages the hole data together with the second secret key (S127). Also, the management device 2 identifies object data including the object ID designated in the hole generation request operation from the object data managed by itself, and generates a first signature for the hole data using the first secret key included in this object data (S128). Then, the management device 2 transmits the generated hole data and the first signature to the provider terminal 3 (S129).

[0026] Next, when the provider terminal 3 receives a hall setting operation from the provider while approaching the usage control device 1 close enough to perform short-range wireless communication with the usage control device 1 (S130), it transmits the hall data and first signature received from the management device 2 to the usage control device 1 via short-range wireless communication 63 (S131). In response, the usage control device 1 verifies the first signature received from the provider terminal 3 using the hall data received from the provider terminal 3 and a first public key set in itself (S132). Then, if the signature verification is successful, it sets the hall data in its own device 1 (S133).

[0027] FIG. 4 is a sequence diagram showing an example of a transaction information registration operation for registering transaction information including conditions related to the use of the object of use (house 50) in management device 2 in the use management system according to the present embodiment.

[0028] First, when the user terminal 4 accepts a login operation from a user who enjoys the utilization service of the utilization object (house 50) (S140), it transmits a login request including the user's user ID and password to the management device 2 (S141). In response to this, the management device 2 performs authentication processing using the password included in the login request and a password managed in association with the user ID included in this login request (S142). Then, if the authentication is successful, it permits the login of the user terminal 4 that has sent the login request, and transmits a login permission notification to this user terminal 4 (S143).

[0029] Next, when the user terminal 4 receives a transaction request operation from the user, which includes specification of the user ID of the provider offering the utilization service of the desired utilization object (house 50), the object ID of the utilization control device 1 installed on the utilization object, and desired information regarding utilization of the utilization object such as the desired utilization start and end times and number of utilizations (S144), the user terminal 4 transmits a transaction request including the specified provider's user ID, object ID, and desired information regarding utilization to the management device 2 (S145).

[0030] In response to this, the management device 2 confirms the transaction contents based on the information included in the transaction request (S146). Specifically, by confirming that the object data having the object ID included in the transaction request is among the object data managed in association with the user ID of the provider included in the transaction request, the management device 2 confirms that the service desired by the user can be provided. Then, the management device 2 generates a transaction approval / rejection inquiry including the object ID and desired information regarding use included in the transaction request, and transmits this transaction approval / rejection inquiry to the provider terminal 3 specified by the address information managed in association with the user ID of the provider included in the transaction request (S147).

[0031] Next, when the provider terminal 3 receives the transaction approval / rejection inquiry from the management device 2, it displays the object ID and desired information regarding use included in the transaction approval / rejection inquiry to confirm the approval / rejection of the transaction with the provider. Then, when it receives a transaction approval operation from the provider to approve the transaction (to provide the user with a service of using the object of use, the use of which is restricted by the usage control device 1 specified by the object ID) (S148), it transmits a transaction approval response to the management device 2 as a reply to the transaction approval / rejection inquiry (S149).

[0032] In response to this, the management device 2 determines that the transaction has been completed and issues a transaction ID. Then, the management device 2 generates transaction information including this transaction ID, the user ID of the user, the user ID of the provider, the object ID, and desired information regarding use included in the transaction request, and the time at which a license can be obtained (for example, 24 hours before the desired start time of use) determined based on the desired start time of use included in the desired information regarding use (S150). Next, the management device 2 registers and manages the generated transaction information (S151). Then, the management device 2 transmits a transaction completion notice including the transaction information to the user terminal 4 (S152), and causes the user terminal 4 to display this transaction information.

[0033] FIG. 5 is a sequence diagram showing an example of a usage certificate issuing operation in which the management device 2 issues a usage certificate to the user terminal 4 in the usage management system according to the present embodiment.

[0034] It is assumed that the license obtainable time of the transaction information included in the transaction completion notification received by the user terminal 4 from the management device 2 has passed (S160). When the user terminal 4 accepts a login operation from a user who recognizes that the license obtainable time has passed (S161), it transmits a login request including the user's user ID and password to the management device 2 (S162). In response to this, the management device 2 performs authentication processing using the password included in the login request and a password managed in association with the user ID included in the login request (S163). Then, if the authentication is successful, it permits the login of the user terminal 4 that is the sender of the login request, and transmits a login permission notification to this user terminal 4 (S164).

[0035] Next, when the user terminal 4 receives from the user a license request operation accompanied by the specification of the transaction ID included in the transaction information (S165), it transmits a license request including this transaction ID to the management device 2 (S166).

[0036] In response to this, the management device 2 identifies transaction information having the transaction ID included in the license request from among the transaction information it manages, and verifies that the license issuance conditions are satisfied based on this transaction information (S167). Specifically, it verifies that the user ID of the user of the user terminal 4 matches the user ID of the user included in the transaction information, and that the license acquisition time included in the transaction information has passed. Then, the management device 2 identifies hall data having the object ID included in the transaction information from among the hall data it manages. Then, it encrypts the transaction information using the common key of the identified hall data, and issues a license including this encrypted transaction information (S168). Next, the management device 2 generates a second signature for the license using a second private key that it manages in association with the identified hall data (S169). After that, the management device 2 transmits the license and the second signature to the user terminal 4 (S170).

[0037] FIG. 6 is a sequence diagram showing an example of a usage restriction release operation in which the usage control device 1 releases the usage restriction of a usage object in the usage management system according to the present embodiment.

[0038] It is assumed that the available use start time included in the desired information regarding the use of the transaction information included in the transaction completion notification received by the user terminal 4 from the management device 2 has passed (S180). When the user terminal 4 approaches the usage control device 1 installed in the object of use (house 50) for which the user desires to use a service within a distance allowing short-range wireless communication 63 with the usage control device 1, and receives a usage operation from the user who recognizes that the current date and time is within the period specified by the available use start and end times included in the desired information regarding the use of the transaction information (S181), the user terminal 4 transmits the usage permit received from the management device 2 and the second signature to the usage control device 1 via short-range wireless communication 63 (S182).

[0039] In response to this, the usage control device 1 verifies the second signature received from the user terminal 4 using the usage permit received from the user terminal 4 and the second public key included in the hall data set in its own device 1 (S183). Then, if the signature verification is successful, it decrypts the encrypted transaction information included in the usage permit using the common key included in the hall data (S184).

[0040] Next, the usage control device 1 confirms that the conditions specified by the desired information on usage contained in the decrypted transaction information are satisfied (S185). Specifically, it confirms that the current date and time is within the period specified by the available start and end times included in the desired information on usage. It also confirms that the number of uses managed in association with the transaction ID of the transaction information is less than the number of uses included in the desired information on usage. Then, if the usage control device 1 confirms that the conditions specified by the desired information on usage are satisfied, it releases the usage restriction on the object to be used (S186). Here, it unlocks the autolock device of the entrance 51 of the house 50, which is the object to be used.

[0041] Thereafter, the usage control device 1 transmits a usage restriction lift notification to the user terminal 4 via short-range wireless communication 63 (S187). Then, the usage count managed in association with the transaction ID of the transaction information is incremented by one (S188). Here, if the usage count is not managed in association with the transaction ID of the transaction information, the usage count "1" is managed in association with the transaction ID of the transaction information.

[0042] Next, the details of the usage control device 1 and management device 2 constituting the usage management system according to the present embodiment will be described. Note that, since existing network terminals equipped with short-range wireless communication functions such as smartphones and tablet PCs (Personal Computers) can be used as the provider terminal 3 and the user terminal 4, detailed descriptions thereof will be omitted.

[0043] First, the usage control device 1 will be described in detail.

[0044] FIG. 7 is a schematic functional configuration diagram of the usage control device 1. As shown in FIG.

[0045] As shown in the figure, the usage control device 1 includes a short-range wireless communication unit 10, a setting information storage unit 11, an object setting unit 12, a hole setting unit 13, a usage restriction removal unit 14, a signature verification unit 15, and a decryption unit 16.

[0046] The short-distance wireless communication unit 10 communicates with the provider terminal 3 and the user terminal 4 by short-distance wireless communication 63 such as an IrDA device or Bluetooth (registered trademark).

[0047] The setting information storage unit 11 stores setting information such as an object ID, a first public key, hole data, etc. It also stores judgment information used to judge whether or not conditions related to the use of the object to be used, such as the number of times of use, are satisfied.

[0048] The object setting unit 12 stores the object ID and the first public key acquired from the provider terminal 3 in the setting information storage unit 11 as setting information.

[0049] When the verification of the first signature acquired from the provider terminal 3 together with the hole data is successful, the hole setting unit 13 stores the hole data in the setting information storage unit 11 as setting information.

[0050] The usage restriction lifting unit 14 lifts the usage restriction on the object of use when the verification of the second signature obtained from the user terminal 4 together with the license is successful and the condition specified by the desired information regarding the use of the transaction information included in the license is satisfied. In this embodiment, it outputs an unlock command to the autolock device at the entrance 51 of the house 50. The usage restriction lifting unit 14 also registers and updates judgment information such as the number of times of use in the setting information storage unit 11.

[0051] The signature verification unit 15 verifies the first signature for the hall data using the first public key stored in the setting information storage unit 11 in accordance with an instruction from the hall setting unit 13. Also, the signature verification unit 15 verifies the second signature for the usage certificate using the second public key included in the hall data stored in the setting information storage unit 11 in accordance with an instruction from the usage restriction release unit 14.

[0052] In accordance with instructions from the usage restriction removal unit 14, the decryption unit 16 decrypts the encrypted transaction information contained in the usage license using a common key contained in the hall data stored in the setting information storage unit 11.

[0053] 7 may be realized in hardware using an integrated logic IC such as an ASIC (Application Specific Integrated Circuit) or an FPGA (Field Programmable Gate Array), or in software using a computer such as a DSP (Digital Signal Processor).Alternatively, it may be realized by a general-purpose computer having a CPU, a memory, an auxiliary storage device such as a flash memory or a hard disk drive, and a short-range wireless communication device such as an IrDA communication device or a Bluetooth (registered trademark) communication device, in which the CPU loads a predetermined program from the auxiliary storage device onto the memory and executes it.

[0054] FIG. 8 is a flow diagram for explaining the operation of the usage control device 1. As shown in FIG.

[0055] When the object setting unit 12 receives an object registration notification from the provider terminal 3 via the short-range wireless communication unit 10 (YES in S200), it stores the object ID and the first public key included in this object registration notification as setting information in the setting information storage unit 11 (S201).

[0056] Furthermore, when the hole setting unit 13 receives the hole data and the first signature from the provider terminal 3 via the short-range wireless communication unit 10 (YES in S202), it passes the hole data and the first signature to the signature verification unit 15 and requests verification of the first signature. In response, the signature verification unit 15 verifies the first signature for the hole data using the first public key stored in the setting information storage unit 11 (S203). Specifically, it verifies the validity of the first signature by decrypting the first signature using the first public key and determining whether the decrypted information matches the hole data or its message digest (hash value).

[0057] Next, the signature verification unit 15 notifies the hole setting unit 13 of the verification result of the first signature. In response to this, if the hole setting unit 13 succeeds in verifying the first signature and can prove the authenticity of the first signature (YES in S204), it stores this hole data as configuration information in the configuration information storage unit 11 (S205). On the other hand, if the verification of the first signature fails and the authenticity of the first signature cannot be proved (NO in S204), it performs a predetermined error process, such as sending an error message to the provider terminal 3 via the short-range wireless communication unit 10 (S206).

[0058] Furthermore, when the usage restriction lifting unit 14 receives the license and the second signature from the user terminal 4 via the short-range wireless communication unit 10 (YES in S207), it passes the license and the second signature to the signature verification unit 15 and instructs it to verify the second signature. In response, the signature verification unit 15 verifies the second signature for the license using the second public key included in the hall data stored in the setting information storage unit 11 (S208). Specifically, it verifies the authenticity of the second signature by decrypting the second signature using the second public key and determining whether or not the decrypted information matches the license or its message digest.

[0059] Next, the signature verification unit 15 notifies the usage restriction lifting unit 14 of the verification result of the second signature. In response to this, if the usage restriction lifting unit 14 succeeds in verifying the second signature and can verify the authenticity of the second signature (YES in S209), it passes the encrypted transaction information included in this usage license to the decryption unit 16 and instructs it to decrypt it. On the other hand, if the verification of the second signature fails and the authenticity of the second signature cannot be verified (NO in S209), it performs a predetermined error process, such as sending an error message to the user terminal 4 via the short-range wireless communication unit 10 (S214).

[0060] Next, when the decryption unit 16 receives the encrypted transaction information together with a decryption instruction from the usage restriction lifting unit 14, the decryption unit 16 decrypts the encrypted transaction information using the common key included in the hall data stored in the setting information storage unit 11 (S210). Then, the decrypted transaction information is passed to the usage restriction lifting unit 14.

[0061] In response to this, the usage restriction release unit 14 judges whether or not the conditions specified by the desired information on usage included in the decrypted transaction information are satisfied (S211). Specifically, it judges whether or not the current date and time is within the period specified by the available start and end times included in the desired information on usage. It also judges whether or not the number of uses stored in the setting information storage unit 11 in association with the transaction ID of the transaction information is less than the number of uses included in the desired information on usage. Note that if there is no number of uses stored in the setting information storage unit 11 in association with the transaction ID of the transaction information, the number of uses is judged to be "0".

[0062] Next, when the usage restriction lifting unit 14 determines that the conditions specified by the desired information regarding usage included in the transaction information are satisfied (YES in S211), it lifts the usage restriction on the object to be used (S212). In this embodiment, it outputs an unlock command to the autolock device at the entrance 51 of the house 50. The usage restriction lifting unit 14 also updates the number of uses stored in the setting information storage unit 11 in association with the transaction ID of the transaction information (S213). Here, if the number of uses is not registered in the setting information storage unit 11 in association with the transaction ID of the transaction information, it registers the number of uses "1" in the setting information storage unit 11 in association with the transaction ID of the transaction information.

[0063] On the other hand, if the usage restriction removal unit 14 determines that the conditions specified by the desired usage information contained in the transaction information are not satisfied (NO in S211), it performs a predetermined error processing such as sending an error message to the user terminal 4 via the short-range wireless communication unit 10 (S214).

[0064] Next, the management device 2 will be described in detail.

[0065] FIG. 9 is a schematic functional configuration diagram of the management device 2. As shown in FIG.

[0066] As shown in the figure, the management device 2 includes a WAN interface unit 200, a memory unit 201, a user management unit 202, an object management unit 203, a hall management unit 204, a transaction management unit 205, a login processing unit 206, an object registration request processing unit 207, a hall generation request processing unit 208, a transaction approval / rejection inquiry unit 209, a transaction request processing unit 210, and a license request processing unit 211.

[0067] The WAN interface unit 200 is an interface for connecting to the WAN 60 .

[0068] The storage unit 201 includes a user information storage unit 221 , a provider information storage unit 222 , an object data storage unit 223 , a hall data storage unit 224 , and a transaction information storage unit 225 .

[0069] The user information storage unit 221 stores user information for each user.

[0070] FIG. 10 is a diagram showing an example of registered contents in the user information storage unit 221. As shown in FIG.

[0071] As shown in the figure, a user information record 2210 of user information is stored for each user in the user information storage unit 221. The user information record 2210 has a field 2211 for registering the user ID of the user, a field 2212 for registering the user password, a field 2213 for registering address information of the user terminal 4 on the WAN 60, and a field 2214 for registering personal information such as the user's name, address, contact information, etc.

[0072] The provider information storage unit 222 stores provider information for each provider.

[0073] FIG. 11 is a diagram showing an example of registered contents in the provider information storage unit 222. As shown in FIG.

[0074] As shown in the figure, a provider information record 2220 is stored for each provider in the provider information storage unit 222. The provider information record 2220 has a field 2221 for registering the user ID of the provider, a field 2222 for registering the password of the provider, a field 2223 for registering address information of the provider terminal 3 on the WAN 60, and a field 2224 for registering personal information such as the name, address, and contact information of the provider.

[0075] The object data storage unit 223 stores object data for each usage control device 1 .

[0076] FIG. 12 is a diagram showing an example of registered contents in the object data storage unit 223. As shown in FIG.

[0077] As shown in the figure, object data storage unit 223 stores object data record 2230 for each usage control device 1. Object data record 2230 has a field 2231 for registering an object ID which is an identifier, a field 2232 for registering a first public key, a field 2233 for registering a first private key, a field 2234 for registering facility information including the property name, address, etc. of house 50 which is the object of use, and a field 2235 for registering a user ID of a provider which provides a usage service for this object of use.

[0078] The hall data storage unit 224 stores information including hall data for each usage control device 1.

[0079] FIG. 13 is a diagram showing an example of registered contents in the hole data storage unit 224. As shown in FIG.

[0080] As shown in the figure, hall data storage unit 224 stores hall data record 2240 for each usage control device 1. Hall data record 2240 has field 2241 for registering a hall ID, which is an identifier, field 2242 for registering a second public key, field 2243 for registering a second private key, field 2244 for registering a common key, and field 2245 for registering an object ID assigned to the usage control device 1 in which the hall data is set. Here, the second public key, common key, and object ID registered in fields 2242, 2244, and 2245 constitute the hall data to be set in the usage control device 1.

[0081] The transaction information storage unit 225 stores transaction information for each transaction of a service for use of a utilization object established between a provider and a user.

[0082] FIG. 14 is a diagram showing an example of registered contents in the transaction information storage unit 225. As shown in FIG.

[0083] As shown in the figure, the transaction information storage unit 225 stores a transaction information record 2250 for each transaction of a service to be used. The transaction information record 2250 has a field 2256 for registering a transaction ID which is an identifier, a field 2251 for registering an object ID given to the usage control device 1 installed in the usage object which is the subject of the transaction of the service to be used, a field 2252 for registering the user ID of the user, a field 2253 for registering the user ID of the provider, a field 2254 for registering desired information regarding the user's usage including the usage start and end times and the number of times of usage, and a field 2255 for registering the usage certificate obtainable time at which the usage certificate can be obtained.

[0084] The user management unit 202 uses a user information storage unit 221 to manage user information, and also uses a provider information storage unit 222 to manage provider information.

[0085] The object management unit 203 uses the object data storage unit 223 to manage the object data.

[0086] The hole management unit 204 manages the hole data using the hole data storage unit 224 .

[0087] The transaction management unit 205 manages the transaction information using the transaction information storage unit 225.

[0088] The login processing unit 206 cooperates with the user management unit 202 to process login requests received from the provider terminal 3 and the user terminal 4 .

[0089] The object registration request processing unit 207 cooperates with the object management unit 203 to process an object registration request received from the provider terminal 3 .

[0090] The hole creation request processing unit 208 cooperates with the object management unit 203 and the hole management unit 204 to process a hole creation request received from the provider terminal 3 .

[0091] The transaction approval / rejection inquiring unit 209, in accordance with an instruction from the transaction request processing unit 210, inquires of the provider terminal 3 about the approval / rejection of the transaction for the service to be used for the object to be used.

[0092] The transaction request processing unit 210 cooperates with the transaction management unit 205 and the transaction approval / rejection inquiry unit 209 to process a transaction request received from the user terminal 4 .

[0093] The license request processor 211 then cooperates with the hall manager 204 and the transaction manager 205 to process the license request received from the user terminal 4 .

[0094] The schematic functional configuration of the management device 2 shown in Fig. 9 may be realized in hardware by an integrated logic IC such as an ASIC or FPGA, or in software by a computer such as a DSP. Alternatively, it may be realized in a general-purpose computer having a CPU, a memory, an auxiliary storage device such as a flash memory or a hard disk drive, and a communication device such as a NIC (Network Interfae Card), by the CPU loading a predetermined program from the auxiliary storage device onto the memory and executing it. It may also be realized on a distributed system consisting of the cooperation of multiple general-purpose computers.

[0095] FIG. 15 is a flow diagram for explaining the operation of the management device 2. As shown in FIG.

[0096] This flow starts when the WAN interface unit 200 receives a login request from the provider terminal 3 or the user terminal 4 via the WAN 60 .

[0097] First, the WAN interface unit 200 notifies the received login request to the login processing unit 206. In response to this, the login processing unit 206 performs the login process (S300).

[0098] Specifically, when a login request is received from the provider terminal 3, the user management unit 202 is notified of a password search accompanied by the specification of the provider's user ID included in the login request. In response to this, the user management unit 202 searches the provider information storage unit 222 for a record 2220 using the provider's user ID specified by the login processing unit 206 as a key. If the record 2220 is found, the login processing unit 206 is notified of the password registered in the record 2220, and if the record 2220 is not found, the login processing unit 206 is notified of the fact that the corresponding record does not exist. On the other hand, when a login request is received from the user terminal 4, the user management unit 202 is notified of a password search accompanied by the specification of the user's user ID included in the login request. In response to this, the user management unit 202 searches the user information storage unit 221 for a record 2210 using the user's user ID specified by the login processing unit 206 as a key. If record 2210 is found, the login processing unit 206 is notified of the password registered in this record 2210, and if record 2210 is not found, the login processing unit 206 is notified that the corresponding record does not exist. If the password received from the user management unit 202 matches the password included in the received login request, the login processing unit 206 permits the login (authentication successful), and if they do not match or if the login processing unit 206 is notified by the user management unit 202 that the corresponding record does not exist, the login processing unit 206 rejects the login (authentication unsuccessful).

[0099] Next, if the login authentication is not successful (NO in S301), the login processing unit 206 performs a predetermined error process such as sending an error message to the sender of the login request via the WAN interface unit 200 (S311). On the other hand, if the login authentication is successful (YES in S301), the login permission notification is sent to the sender of the login request via the WAN interface unit 200 to manage the login status of the sender of the login request, and if the sender of the login request is the provider terminal 3 ("Provider" in S302), the process proceeds to S303, and if the sender is the user terminal 4 ("User" in S302), the process proceeds to S307.

[0100] In S303, the WAN interface unit 200 waits for a request to be sent from the provider terminal 3 that has been permitted to log in. If the request received from this provider terminal 3 is an object registration request ("object registration request" in S304), the object registration request is notified to the object registration request processing unit 207 together with the provider's user ID included in the login request received from this provider terminal 3, and the object registration request processing described below is performed (S305), and if the request is a hole creation request ("hole creation request" in S304), the hole creation request is notified to the hole creation request processing unit 208 together with the provider's user ID included in the login request received from this provider terminal 3, and the hole creation request processing described below is performed (S306).

[0101] Also, in S307, the WAN interface unit 200 waits for a request to be sent from the user terminal 4 that has been permitted to log in. If the request received from this user terminal 4 is a transaction request ("transaction request" in S308), the transaction request is notified to transaction request processing unit 210 together with the user ID of the user included in the login request received from this user terminal 4, and the transaction request processing described below is performed (S309), and if it is a license request ("license request" in S308), the license request is notified to license request processing unit 211 together with the user ID of the user included in the login request received from this user terminal 4, and the license request processing described below is performed (S310).

[0102] FIG. 16 is a flow diagram for explaining the object registration request process S305 shown in FIG.

[0103] First, the object registration request processing unit 207 issues an object ID (S3050) and generates a first private key and public key according to a public key cryptosystem (S3051). Then, it generates object data including the object ID, the first private key and public key, and the facility information included in the object registration request, and notifies the object management unit 203 of this object data together with the user ID of the provider, and instructs the object management unit 203 to manage the object data.

[0104] In response to this, object management unit 203 adds record 2230 of the object data to object data storage unit 223, and registers the object data (object ID, first public key, first private key, facility information) in this record 2230 in association with the provider's user ID (S3052). Then, object management unit 203 notifies object registration request processing unit 207 of the object ID and the first public key.

[0105] Next, the object registration request processing unit 207 generates an object registration notification including the object ID and first public key notified by the object management unit 203, and transmits this object registration notification to the provider terminal 3 which is the sender of the object registration request (S3053).

[0106] FIG. 17 is a flow diagram for explaining the hole generation request process S306 shown in FIG.

[0107] First, the hole generation request processor 208 issues a hole ID (S3060), generates a second secret key and a public key according to the public key cryptosystem (S3061), and generates a common key according to the common key cryptosystem (S3062).

[0108] Next, hole management unit 208 generates hole data including the object ID, first public key, and common key included in the hole generation request, and notifies hole management unit 204 of this hole data together with the hole ID and second private key, instructing it to manage the hole data. In response, hole management unit 204 adds record 2240 of the hole data to hole data storage unit 224, and registers the hole data (object ID, second public key, common key) in record 2240 together with the hole ID and second private key (S3063).

[0109] Next, hole creation request processing unit 208 notifies object management unit 203 of the object ID included in the hole creation request, and instructs it to search for the first secret key. In response, object management unit 203 searches object data storage unit 223 for record 2230 of the object data using the object ID as a key, and notifies hole creation request processing unit 208 of the first secret key included in this record 2230. Then, hole creation request processing unit 208 generates a first signature for the hole data using the first secret key notified by object management unit 203 (S3064).

[0110] Then, the hole generation request processor 208 transmits the hole data together with the first signature to the provider terminal 3 which is the source of the hole generation request (S3065).

[0111] FIG. 18 is a flow diagram for explaining the transaction request process S309 shown in FIG.

[0112] First, the transaction request processing unit 210 notifies the user management unit 202 of the provider's user ID included in the transaction request, and instructs the user management unit 202 to specify the provider terminal 3 of the provider who will be the trading partner. In response to this, the user management unit 202 searches the provider's record 2220 from the provider information storage unit 222 using the provider's user ID as a key. Then, the user management unit 202 notifies the transaction request processing unit 210 of the address information of the provider terminal 3 included in the found record 2220 (S3090).

[0113] Next, transaction request processing unit 210 notifies transaction approval / rejection inquiry unit 209 of the object ID of usage control device 1 and desired information regarding the use of the object of use, which are included in the transaction request, together with the address information notified by user management unit 202, and instructs the transaction approval / rejection inquiry. In response to this, transaction approval / rejection inquiry unit 209 generates a transaction approval / rejection inquiry including the object ID of usage control device 1 and the desired information regarding the use of the object of use, and transmits this transaction approval / rejection inquiry via WAN interface unit 200 to the provider terminal 3 specified by the address information notified by user management unit 202 (S3091). Then, when a response to this transaction approval / rejection inquiry is received from provider terminal 3 (YES in S3092), the received response is notified to transaction request processing unit 210.

[0114] Next, if the response to the transaction approval / rejection inquiry is a transaction rejection response (NO in S3093), the transaction request processing unit 210 performs a predetermined error processing, such as sending an error message to the user terminal 4, which is the sender of the transaction request, via the WAN interface unit 200 (S3097).

[0115] On the other hand, if the response to the transaction approval inquiry is a transaction approval response (YES in S3093), transaction request processing unit 210 determines that the transaction has been established, issues a transaction ID, and determines the time when the license can be obtained based on the usage start time of the desired information regarding the use of the object of use included in the transaction request (S3094). For example, the time when the license can be obtained is determined to be 24 hours before the desired usage start time.

[0116] Then, transaction request processing unit 210 generates transaction information including the transaction ID, the user ID of the user, the user ID of the provider included in the transaction request, the object ID, the desired information regarding usage, and the time when the license can be obtained. Then, it instructs transaction management unit 205 to manage this generated transaction information. In response to this, transaction management unit 205 adds record 2250 of the transaction information to transaction information storage unit 225, and registers the transaction information (transaction ID, object ID, user ID of the user, user ID of the provider, desired information regarding usage, and the time when the license can be obtained) in this record 2250 (S3095).

[0117] Next, the transaction request processor 210 transmits a transaction completion notification including the license obtainable time to the user terminal 4 that is the sender of the transaction request (S3096).

[0118] FIG. 19 is a flow diagram for explaining the license request process S310 shown in FIG.

[0119] First, the license request processing unit 211 notifies the transaction management unit 205 of the transaction ID included in the license request and instructs it to search for transaction information. In response, the transaction management unit 205 searches the transaction information storage unit 225 for record 2250 of transaction information using the transaction ID as a key. Then, it notifies the license request processing unit 211 of the transaction information registered in record 2250 (S3100).

[0120] Next, the license request processing unit 211 confirms that the user ID of the user included in the transaction information notified by the transaction management unit 205 is the user ID of the user of the user terminal 4 that is the sender of the license request notified by the login processing unit 206, and also confirms that the license acquisition time included in the transaction information has passed (S3101).

[0121] If the user ID of the user included in the transaction information is not the user ID of the user of the user terminal 4 that sent the license request, or if the license acquisition time included in the transaction information has not yet elapsed (NO in S3101), the license request processing unit 211 performs a predetermined error processing such as sending an error message to the user terminal 4 that sent the license request via the WAN interface unit 200 (S3107).

[0122] On the other hand, if the user ID of the user included in the transaction information is the user ID of the user of the user terminal 4 that is the sender of the license request, and the license obtainable time included in the transaction information has passed (YES in S3101), the license request processing unit 211 notifies the hall management unit 204 of the object ID included in the transaction information and instructs it to search for the common key and the second secret key. In response, the hall management unit 204 searches the hall data storage unit 224 for the hall data record 2240 using the object ID as a key. Then, it notifies the license request processing unit 211 of the common key and the second secret key included in the found record 2240 (S3102).

[0123] Next, the license request processor 211 encrypts the transaction information using the common key notified by the hall manager 204 (S3103), and generates a license including this encrypted transaction information (S3104).Then, the license request processor 211 generates a second signature for the license using the second private key notified by the hall manager 204 (S3105).

[0124] Next, the license request processing unit 211 transmits the license and the second signature to the user terminal 4 which is the sender of the license request (S3106).

[0125] One embodiment of the present invention has been described above.

[0126] In this embodiment, the usage control device 1 can communicate only via short-distance wireless communication 63 and is separated from the WAN 60. Therefore, the usage control device 1 cannot be attacked from the outside via the WAN 60. In addition, the validity of the usage permit used to release the usage restriction on the house 50, which is the object of use, is verified by verifying the second signature added to this usage permit using the second public key included in the hall data, and the validity of the hall data is verified by verifying the first signature added to this hall data using the first public key. Therefore, according to this embodiment, security risks are reduced.

[0127] Furthermore, in this embodiment, the usage restrictions on the object of use are lifted only when the desired information regarding the use of the transaction information contained in the license is satisfied, and if not satisfied, the usage restrictions on the object of use are not lifted. Therefore, by including conditions such as the usage period and number of uses in the desired information regarding the use of the transaction information, a license that does not meet these conditions becomes invalid even if its validity is proven, so there is no need to ask the user of the object of use (the user of user terminal 4) to return the license. Therefore, this embodiment improves convenience.

[0128] As described above, according to the present embodiment, in the utilization management of utilization objects, it is possible to improve convenience while reducing security risks.

[0129] Furthermore, in this embodiment, the management device 2 manages the transaction information including the license obtainable time, and when a license request is received from the user terminal 4, the management device generates a license if the license obtainable time included in the transaction information specified by the transaction ID specified in the license request has passed. In this way, by limiting the license obtainable time, the opportunities for tampering with the license are reduced, and security can be further improved.

[0130] Furthermore, in this embodiment, when the management device 2 receives a usage request from the user terminal 4, it transmits a transaction approval inquiry including desired information regarding usage contained in the usage certificate to the provider terminal 3. Then, when a transaction approval response is received from the provider terminal 3 in response to the transaction approval inquiry, it generates transaction information and transmits a transaction completion notification including the usage certificate obtainable time contained in the transaction information to the user terminal 4. As a result, the provider can indicate his / her intention to make a transaction for each transaction (provision) of a usage service of the object to be used, and the user can know the time when the usage certificate can be obtained if the transaction is completed. This further improves convenience for both the provider and user of the usage service of the object to be used.

[0131] The present invention is not limited to the above-described embodiment, and various modifications are possible within the scope of the present invention.

[0132] For example, in the above embodiment, the management device 2 encrypts the transaction information to be included in the usage certificate to be sent to the user terminal 4 using a common key shared between the management device 2 and the usage control device 1, and the usage control device 1 decrypts the encrypted transaction information included in the usage certificate received from the user terminal 4. However, the present invention is not limited to this. The transaction information may be sent from the management device 2 to the usage control device 1 via the user terminal 4 in plain text, without being encrypted.

[0133] In the above embodiment, the preferred information on use to be included in the transaction information is described by way of example using the available start and end times and the number of uses. However, the present invention is not limited to this. The preferred information on use may include only the available start and end times and the number of uses as long as it specifies the conditions for lifting the usage restrictions on the object of use. Alternatively, another condition may be included in place of the available start and end times and the number of uses, or in place of either one of them. For example, the preferred information on use may include the available start and end times and a list of IDs of users who are allowed to use the object.

[0134] FIG. 20 is a schematic diagram of a modified example of the usage management system shown in FIG.

[0135] The modified example shown in Fig. 20 differs from the usage management system shown in Fig. 1 in that an ID card 7 and a card reader 8 are added, and that a usage control device 1A is provided instead of the usage control device 1. The rest of the configuration is the same as the usage management system shown in Fig. 1.

[0136] The ID cards 7 are distributed to each related party such as the user's family and friends who will enjoy the utilization services of the utilization object (house 50), and each has a unique authorization ID stored therein. The card reader 8 is connected to the utilization control device 1A, and transmits the authorization ID read from the ID card 7 to the utilization control device 1A. The utilization control device 1A has a card reader interface unit for connecting to the card reader 8. The other configurations are the same as those of the utilization control device 1 shown in FIG. 7.

[0137] FIG. 21 is a sequence diagram showing an example of a usage restriction releasing operation in which the usage control device 1A releases the usage restriction on the usage object in the modified example of the usage management system shown in FIG.

[0138] In the modified example of the usage management system shown in Fig. 20, the object registration operation and hall setting operation are the same as the object registration operation and hall setting operation shown in Fig. 2 and Fig. 3. Also, the transaction information registration operation and usage certificate issuance operation are the same as the transaction information registration operation and usage certificate issuance operation shown in Fig. 4 and Fig. 5, except that a list of authorization IDs is included in the desired information regarding the use of transaction information instead of the number of uses. Therefore, details of these operations are omitted.

[0139] It is assumed that the available use start time included in the desired information regarding the use of the transaction information included in the transaction completion notification received by the user terminal 4 from the management device 2 has passed (S400). When the user terminal 4 approaches the usage control device 1A installed in the object of use (house 50) for which the user desires to use a service within a distance allowing short-range wireless communication 63 with the usage control device 1A, and receives a usage operation from the user who recognizes that the current date and time is within the period specified by the available use start and end times included in the desired information regarding the use of the transaction information (S401), the user terminal 4 transmits the usage permit received from the management device 2 and the second signature to the usage control device 1A via short-range wireless communication 63 (S402).

[0140] In response, the usage control device 1A verifies the second signature on the usage certificate received from the user terminal 4 using the second public key included in the hall data set in its own device 1A (S403). If the signature verification is successful, it decrypts the encrypted transaction information included in the usage certificate using the common key included in the hall data (S404).

[0141] Next, the usage control device 1A identifies the desired information regarding usage contained in the decrypted transaction information, and confirms that the current date and time is within the period specified by the available use start and end times contained in the desired information (S405). If it is confirmed that the current date and time is within the period specified by the available use start and end times contained in the desired information, it determines that the usage restriction of the object to be used is ready to be released (S406), and transmits a usage restriction release preparation notification to the user terminal 4 via short-range wireless communication 63 (S407).

[0142] Next, when the card reader 8 receives a read operation to read the authorization ID stored in the ID card 7 from a person related to the user (family member, friend, etc.) (S408), it transmits the read authorization ID to the usage control device 1A (S409).

[0143] In response to this, the usage restriction release unit 14 of the usage control device 1A confirms that the current date and time is within the period specified by the available use start and end times included in the desired information on usage, and also confirms that the permission ID received from the card reader 8 via the card reader interface unit is included in the list of permission IDs included in the desired information on usage (S410). Then, if it is confirmed that these conditions are satisfied, the usage restriction of the object to be used is released (S411). Here, the autolock device of the entrance 51 of the house 50, which is the object to be used, is unlocked.

[0144] In the above-mentioned modified example of the usage management system, the desired information on usage may include biometric authentication information such as fingerprints, veins, and irises of users who are permitted to use the system, instead of the list of IDs of users who are permitted to use the system. In this case, instead of the ID card 7 and the card reader 8 in FIG. 20, a biometric authentication reading device is connected to the usage control device 1A. Also, in S408 and S409 in FIG. 21, when the biometric authentication reading device receives a reading operation from a related person (family member, friend, etc.) of the user to read biometric authentication information, the biometric authentication reading device transmits the read biometric authentication information to the usage control device 1A. Then, in S410, the usage restriction release unit 14 of the usage control device 1A confirms that the current date and time is within the period specified by the available start and end times included in the desired information on usage, and confirms that the biometric authentication information received from the biometric authentication reading device is registered in the list of biometric authentication information included in the desired information on usage.

[0145] In the above embodiment, the storage unit 201 is arranged in the management device 2. However, the present invention is not limited to this. The storage unit 201 may be stored in a file server connected to the WAN 60. In this case, the user information storage unit 221, the provider information storage unit 222, the object data storage unit 223, the hall data storage unit 224, and the transaction information storage unit 225 may be stored in different file servers. Alternatively, each may be divided into multiple parts and distributed and stored in multiple file servers. In addition, it is preferable that the validity of the information stored in these storage units 221 to 225 is guaranteed by using block chain technology or the like.

[0146] In the above embodiment, the use control device 1, 1A is used to unlock an auto-lock device installed at the entrance 51 of a house 50, which is an object of use, but the present invention is not limited to this. The object of use may be a hotel, inn, private lodging facility, warehouse, room, etc., and the use control device 1, 1A may be used to unlock an auto-lock device installed at the entrance of these objects. Alternatively, the object of use may be a moving object such as a car or bicycle, and the use control device 1, 1A may be used to unlock the door of the moving object or start the ignition. Alternatively, the object of use may be a viewing terminal for electronic media such as electronic medical records or electronic books, and the use control device 1, 1A may be used to release access restrictions on the electronic media or to decrypt encrypted electronic media. [Explanation of symbols]

[0147] 1, 1A: Usage control device 2: Management device 3: Provider terminal 4: User terminal 7: ID card 8: Card reader 10: Short-range wireless communication section 11: Setting information storage section 12: Object setting section 13: Hole setting section 14: Usage restriction removal unit 15: Signature verification unit 16: Decryption unit 50: House 51: Entrance / exit 60: WAN 61: Repeater 62: Wireless network 63: Short-range wireless communication 200: WAN interface unit 201: memory unit 202: User management section 203: Object management section 204: Hall Management Department 205: Transaction Management Department 206: Login processing unit 207: Object registration request processing unit 208: Hole generation request processing unit 209: Transaction approval / rejection inquiry unit 210: Transaction request processing unit 211: License request processing unit 221: User information storage unit 222: Provider information storage unit 223: Object data storage unit 224: Hole data storage unit 225: Transaction information storage unit

Claims

1. A usage management system for managing usage of an object to be used, a usage control device that controls the usage of the object by locking / unlocking, access control, or encryption / decryption based on the usage permit; a management device that manages the object of use in association with the usage control device; a provider terminal for setting hall data required for verifying the license in the usage control device; a user terminal that notifies the usage control device of the usage license, The management device includes: a transaction management means for managing transaction information including conditions regarding the use of the object of use; an object management means for managing a first private key and a public key in association with the usage control device; a hall management means for managing a second private key and a public key in association with the usage control device; a hole data processing means for generating a first signature for the hole data, including the second public key managed by the hole management means, using the first private key managed by the object management means, and transmitting the hole data and the first signature to the provider terminal; a license processing means for generating a second signature for the license including the transaction information managed by the transaction management means, by using the second private key managed by the hall management means, and transmitting the license and the second signature to the user terminal, The provider terminal includes: transmitting the hall data and the first signature received from the management device to the usage control device via short-range wireless communication; The user terminal includes: transmitting the usage license and the second signature received from the management device to the usage control device by short-range wireless communication; The usage control device includes: Communication is possible only via short-range wireless communication. a hall setting means for verifying the first signature received from the provider terminal together with the hall data by using the first public key registered in advance, and setting the hall data in the own device if the verification is successful; a transaction information acquiring means for verifying the second signature received from the user terminal together with the license by using the second public key included in the hall data set in the device, and acquiring the transaction information included in the license if the verification is successful; and a release means for referencing the transaction information acquired by the transaction information acquisition means and, if a condition specified by the transaction information is satisfied, releasing the usage restriction of the object to be used. A usage management system comprising:

2. The usage management system according to claim 1, In the management device, the transaction management means manages the transaction information including a license obtainable time, When the license processing means receives a license request accompanied by designation of the transaction information from the user terminal, if the license obtainable time included in the transaction information designated in the license request managed by the transaction management means has passed, the license processing means generates the license including the transaction information, generates a second signature for the license using the second private key managed by the hall management means, and transmits the license and the second signature to the user terminal. A usage management system comprising:

3. The usage management system according to claim 2, The management device includes: a transaction approval / rejection inquiry means for, when receiving a usage request including conditions regarding the use of the object of use from the user terminal, transmitting a transaction approval / rejection inquiry including the conditions to the provider terminal inquiring about the approval or rejection of a transaction for a service using the object of use; and a transaction information processing means for, when receiving a transaction approval response from the provider terminal as a response to the transaction approval / rejection inquiry transmitted to the provider terminal by the transaction approval / rejection inquiry means, generating the transaction information including the conditions regarding the use of the object of use and the usage license obtainable time included in the transaction approval / rejection inquiry, and transmitting a transaction completion notification including the usage license obtainable time to the user terminal. A usage management system comprising:

4. 4. The usage management system according to claim 1, In the management device, When the hole data processing means receives a hole generation request accompanied by designation of the usage control device from the provider terminal, the hole data processing means generates the second private key and public key, and uses the first private key managed by the object management means to generate the first signature for the hole data including the second public key in accordance with the hole generation request, and transmits the hole data and the first signature to the provider terminal. A usage management system comprising:

5. 5. The usage management system according to claim 1, In the management device, an object registration request processing means for generating the first private key and public key when an object registration request accompanied by designation of the usage control device is received from the provider terminal, and transmitting an object registration notification including the first public key to the provider terminal; The provider terminal includes: transmitting the object registration notification received from the management device to the usage control device via short-range wireless communication; The usage control device includes: registering the first public key included in the object registration notification received from the provider terminal; A usage management system comprising:

6. 6. The usage management system according to claim 1, In the management device, The hall management means also manages a common key in association with the usage control device, The hole data processing means transmits the hole data including the common key, the license processing means encrypts the transaction information to be included in the license by using the common key; In the usage control device, The transaction information acquisition means decrypts the encrypted transaction information included in the license by using the common key included in the hall data set in the device. A usage management system comprising:

7. 7. The usage management system according to claim 1, An ID reader connected to the usage control device, In the management device, the transaction management means manages the transaction information including a list of authorization IDs required for use of the object of use as one of the conditions for use of the object of use, In the usage control device, The release means releases the usage restriction on the object when the authorization ID is read from the ID storage medium by the ID reader, if the authorization ID is included in the list included in the conditions specified by the transaction information acquired by the transaction information acquisition means, and satisfies the conditions specified by the transaction information other than the list. A usage management system comprising:

8. A management device that manages a usage control device that controls the usage of an object to be used by locking / unlocking, access control, or encryption / decryption based on a usage license, a transaction management means for managing transaction information including conditions regarding the use of the object of use; an object management means for managing a first private key and a public key in association with the usage control device; a hall management means for managing a second private key and a public key in association with the usage control device; a hall data processing means for generating a first signature for hall data necessary for verifying the license, the first signature including the second public key managed by the hall management means, using the first private key managed by the object management means, and transmitting the hall data and the first signature to a provider terminal which sets the hall data in the usage control device; a license processing means for generating a second signature for the license including the transaction information managed by the transaction management means, using the second private key managed by the hall management means, and transmitting the license and the second signature to a user terminal which notifies the usage control device of the license. A management device comprising:

9. A usage control device that controls usage of an object to be used by locking / unlocking, access control, or encryption / decryption based on a usage license, Communication is possible only via short-range wireless communication. a hole setting means for verifying a first signature received from a provider terminal together with hole data necessary for verifying the license by using a first public key registered in advance, and setting the hole data in the device if the verification is successful; and a usage restriction release means for verifying a second signature received from a user terminal together with the license by using a second public key included in the hall data set in the device, and if the verification is successful, for referring to transaction information included in the license, and for releasing the usage restriction of the object to be used if a condition specified by the transaction information is satisfied. A usage control device comprising:

10. A usage management method for managing usage of an object of use by using a usage control device that controls usage of the object of use by locking / unlocking, access control, or encryption / decryption based on a usage certificate, a management device that manages the object of use in association with the usage control device, a provider terminal that sets hall data required for verifying the usage certificate in the usage control device, and a user terminal that notifies the usage control device of the usage certificate, comprising: The management device includes: managing transaction information including conditions regarding the use of the object of use, and managing a first private key / public key and a second private key / public key in association with the use control device; Using the first private key, generate a first signature for the hole data including the second public key, and transmit the hole data and the first signature to the provider terminal; generating a second signature for the license including the transaction information by using the second private key, and transmitting the license and the second signature to the user terminal; The provider terminal includes: transmitting the hall data and the first signature received from the management device to the usage control device via short-range wireless communication; The user terminal includes: transmitting the usage license and the second signature received from the management device to the usage control device by short-range wireless communication; The usage control device includes: Communication is possible only via short-range wireless communication. verifying the first signature received from the provider terminal together with the hole data with the first public key registered in advance, and if the verification is successful, setting the hole data in the device itself; The second signature received from the user terminal together with the license is verified with the second public key included in the hall data set in the device, and if the verification is successful, the transaction information included in the license is referenced, and if the conditions specified by the transaction information are satisfied, the usage restriction of the object of use is lifted. A usage management method comprising:

11. A computer readable program comprising: the program causes the computer to function as a management device that manages a usage control device that controls the usage of an object of use by locking / unlocking, access control, or encryption / decryption based on a usage license; The management device includes: a transaction management means for managing transaction information including conditions regarding the use of the object of use; an object management means for managing a first private key and a public key in association with the usage control device; a hall management means for managing a second private key and a public key in association with the usage control device; a hall data processing means for generating a first signature for hall data necessary for verifying the license, the first signature including the second public key managed by the hall management means, using the first private key managed by the object management means, and transmitting the hall data and the first signature to a provider terminal which sets the hall data in the usage control device; a license processing means for generating a second signature for the license including the transaction information managed by the transaction management means, using the second private key managed by the hall management means, and transmitting the license and the second signature to a user terminal which notifies the usage control device of the license. A computer readable program characterized in that

12. A computer readable program comprising: the program causes the computer to function as a usage control device that controls the usage of an object of use by locking / unlocking, access control, or encryption / decryption based on the usage license; The usage control device includes: Communication is possible only via short-range wireless communication. a hole setting means for verifying a first signature received from a provider terminal together with hole data necessary for verifying the license by using a first public key registered in advance, and setting the hole data in the device if the verification is successful; a release means for verifying a second signature received from a user terminal together with the license by using a second public key included in the hall data set in the device, and if the verification is successful, for referring to transaction information included in the license, and for releasing a usage restriction on the object of use if a condition specified by the transaction information is satisfied. A computer readable program characterized in that

Images