Electronic lock system, electronic lock, locking / unlocking method for electronic lock system, locking / unlocking program for electronic lock system, production method for electronic lock system, authentication system, and authentication program

Abstract

To provide an electronic lock system capable of speeding up remote operation to lock and unlock an electronic lock.SOLUTION: An electronic lock system 1 comprises an electronic lock 2 and a server 5 connected communicably to the electronic lock 2. A response generation part 52 of the server 5 generates a response to be used for challenge response authentication based upon a previously stored challenge in response to a control command related to locking or unlocking of the electronic lock 2, and transmits the response to an authentication part 22 of the electronic lock 2. The authentication part 22 of the electronic lock 2 performs challenge response authentication based upon the transmitted response. A locking / unlocking control part 23 locks or unlocks the electronic lock 2 when the challenge response authentication is successful. A challenge generation part 21 generates and transmits another challenge response to be used for other challenge response authentication to the server 5 after the challenge response authentication is performed by the authentication part 22. The response generation part 52 stores the other challenge response.SELECTED DRAWING: Figure 7

Description

[Technical field]

[0001] The present disclosure relates to an electronic lock system, an electronic lock, a locking / unlocking method for an electronic lock system, a locking / unlocking program for an electronic lock system, a production method for an electronic lock system, an authentication system, and an authentication program. [Background technology]

[0002] Conventionally, a system has been proposed in which challenge-response authentication is performed in response to commands sent via the Internet using a terminal device such as a smartphone, and if the authentication passes, the locking and unlocking of an electronic lock can be remotely controlled (for example, Patent Document 1). [Prior art documents] [Patent documents]

[0003] [Patent Document 1] JP 2016-111704 A Summary of the Invention [Problem to be solved by the invention]

[0004] However, conventional electronic lock systems have room for improvement in the speed of locking and unlocking when remotely operated. Therefore, the problem that the present invention aims to solve is to provide an electronic lock system, an electronic lock, a locking and unlocking method for an electronic lock system, a locking and unlocking program for an electronic lock system, a production method for an electronic lock system, an authentication system, and an authentication program that can lock and unlock faster when remotely operated.

[0005] The present disclosure aims to provide an electronic lock system that can lock and unlock more quickly via remote control, an electronic lock, a locking / unlocking method for an electronic lock system, a locking / unlocking program for an electronic lock system, a production method for an electronic lock system, an authentication system, and an authentication program. [Means for solving the problem]

[0006] An electronic lock system according to one aspect of an embodiment of the present invention is an electronic lock system comprising an electronic lock and a server communicatively connected to the electronic lock, wherein the server has an acquisition unit that acquires a control command regarding unlocking or locking the electronic lock, and a response generation unit that generates a response to be used for challenge-response authentication in response to the control command based on a pre-stored challenge and transmits the response to the electronic lock, and the electronic lock has an authentication unit that performs the challenge-response authentication based on the transmitted response, a lock / unlock control unit that unlocks or locks the electronic lock if the challenge-response authentication is passed, and a challenge generation unit that generates another challenge to be used for another challenge-response authentication after the challenge-response authentication has been performed and transmits the another challenge to the server, and the response generation unit stores the other challenge. Effect of the Invention

[0007] According to the present disclosure, it is possible to provide an electronic lock system, an electronic lock, a locking / unlocking method for an electronic lock system, a locking / unlocking program for an electronic lock system, a production method for an electronic lock system, an authentication system, and an authentication program that can lock and unlock more quickly via remote operation. [Brief description of the drawings]

[0008] [Figure 1] FIG. 1 is a diagram illustrating a schematic configuration of an electronic lock system according to an embodiment. [Diagram 2] A diagram showing the communication connections of each element of the electronic lock system. [Diagram 3] Functional block diagram for remote control of electronic lock system [Figure 4] Hardware configuration diagram of electronic lock server and smartphone [Diagram 5] Hardware configuration diagram of electronic lock control device [Figure 6] A sequence diagram of a conventional procedure for remotely controlling an electronic lock as a comparative example. [Figure 7] FIG. 1 is a sequence diagram showing a procedure for remotely controlling an electronic lock in an electronic lock system according to an embodiment of the present invention. [Figure 8] FIG. 1 is a diagram for explaining the effect of the steps of the locking / unlocking method according to the present embodiment. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0009] Hereinafter, an embodiment will be described with reference to the accompanying drawings. In order to facilitate understanding of the description, the same components in each drawing are denoted by the same reference numerals as much as possible, and duplicated description will be omitted.

[0010] Fig. 1 is a diagram illustrating a schematic configuration of an electronic lock system 1 according to an embodiment. Fig. 2 is a diagram illustrating the communication connection relationships of each element of the electronic lock system 1. The electronic lock system 1 includes an electronic lock 2, a smartphone 3, a relay device 4, and a server 5. The electronic lock system 1 may also include a remote control key 6, a wireless router 7, etc.

[0011] As shown in FIG. 1, the electronic lock system 1 is a system for locking or unlocking an electronic lock 2 at a short distance or remotely in response to operational input using a terminal device such as a smartphone 3 carried by a user.

[0012] The electronic lock 2 is installed on a locking element such as an indoor door 11, as shown in Fig. 1. Various types of electronic locks are available, such as an add-on type that is installed to turn an existing thumbturn lock, and a replacement type that is installed to replace a manual locking element such as a thumbturn lock.

[0013] The electronic lock 2 is a device that is attached to, for example, the thumb turn portion of the door 11 and performs locking and unlocking operations upon receiving commands from an application 31 on a smartphone 3 as shown in Fig. 2. As shown by the arrow E in Fig. 2, the communication method between the electronic lock 2 and the smartphone 3 can be, for example, Bluetooth (registered trademark) Low Energy (hereinafter referred to as "BLE").

[0014] The electronic lock 2 is connected to the relay device 4 so that it can communicate with them. That is, the electronic lock 2 is installed within the communication range of the relay device 4. The communication range of the relay device 4 is the range in which the communication module included in the relay device 4 can communicate. For example, if the communication module included in the relay device 4 is wireless communication, the communication range of the relay device 4 is within the range of radio waves emitted by the communication module. If the communication module included in the relay device 4 is a wired communication cable, the communication range of the relay device 4 is limited to devices connected to the communication cable. In FIG. 1, the communication module included in the relay device 4 is described as being BLE. Note that, for example, the communication range includes a part or the whole of the building 10 in which the electronic lock 2 is installed, and at least the electronic lock 2 to be operated is included within the range of the BLE radio waves. In this case, the relay device 4 is often also installed in the same building 10.

[0015] The relay device 4 is communicatively connected to a server 5 on the Internet 40. The relay device 4 relays communication between the registered electronic lock 2 and the server 5. In the electronic lock system 1, the electronic lock 2 and the relay device 4 are constantly connected, so that the electronic lock 2 is communicatively connected to the server 5 via the relay device 4.

[0016] The relay device 4 is a device that allows a user to operate the electronic lock 2 from outside. The relay device 4 transmits a command for locking / unlocking operation transmitted from the smartphone 3 to the electronic lock 2 via the server 5. As shown by the arrow D in FIG. 2, for example, BLE can be applied as a communication method between the relay device 4 and the electronic lock 2. The relay device 4 is also communicatively connected to the server 5 via a wireless router 7 or the like. As shown by the arrow C in FIG. 2, for example, Wi-Fi (registered trademark) (WPA2) can be applied as a communication method between the relay device 4 and the wireless router 7. As shown by the arrow B in FIG. 2, for example, an Internet-usable protocol such as PPPоE or IPоE can be applied as a communication method between the wireless router 7 and the server 5. In addition, at the time of initial setting of the relay device 4, for example, BLE can be applied as a communication method between the relay device 4 and the smartphone 3 as shown by the arrow G in FIG. 2. The relay device 4 can be driven by a power source of DC 5V from a USB input, for example.

[0017] The electronic lock 2 can communicate with the smartphone 3 by wireless communication. In the electronic lock system 1, when the smartphone 3 owned by the user 41 shown in FIG. 1 is in a state where it can communicate with the electronic lock 2 at short distances, the smartphone 3 can be connected to the electronic lock 2 at any time. The user 41 can use the smartphone 3 he carries to lock and unlock the electronic lock 2. The state where it can communicate at short distances is a state where the electronic lock 2 is present within a range where the communication module of the smartphone 3 can communicate at short distances wirelessly, and the smartphone 3 is present within a range where the communication module of the electronic lock 2 can communicate at short distances wirelessly. The short distance communication is a communication where the devices can communicate directly with each other without going through a relay device. Examples of the short distance communication include Bluetooth (registered trademark), Bluetooth Classic, BLE, NFC, or IEEE802.11x. x indicates a communication standard used in wireless LAN (Local Area Network), such as b, g, a, n, or ac. The communication between the smartphone 3 and the remote control key 6, indicated by the arrow H, is performed by short distance communication. Moreover, communication between the electronic lock 2 and the remote control key 6, indicated by an arrow F, is performed by short-range communication. Moreover, communication between the electronic lock 2 and the relay device 4, indicated by an arrow D, is performed by short-range communication.

[0018] Next, the locking and unlocking of the electronic lock 2 in a state where the smartphone 3 and the electronic lock 2 cannot communicate with each other in the short distance will be described. The state where the short distance communication is not possible is a state where the electronic lock 2 does not exist within a range where the communication module of the smartphone 3 can communicate with the electronic lock 2 in the short distance, or the smartphone 3 does not exist within a range where the communication module of the electronic lock 2 can communicate with the electronic lock 2 in the short distance. For example, the smartphone 3 owned by the user 42 shown in FIG. 1 is in a state where the short distance communication is not possible with the electronic lock 2. In this embodiment, a place where the smartphone 3 and the electronic lock 2 cannot communicate with each other in the short distance may be referred to as a "remote place". In this state, the smartphone 3 connects to the electronic lock 2 via the relay device 4 via the server 5 on the Internet 40 using a communication method different from the short distance wireless communication. Then, the user 42 can operate the locking and unlocking of the electronic lock 2 using the smartphone 3 carried by the user 42. The smartphone 3 can use a mobile communication system such as 3G, 4G, or 5G as a communication method different from the short distance wireless communication. Note that the smartphone 3 may use wireless LAN such as IEEE802.11x or other short distance communication as a communication method before connecting to the mobile communication system. Even if the smartphone 3 and the electronic lock 2 are capable of short-distance communication, the smartphone 3 may connect to a mobile communication system to communicate. Remote operation refers to the smartphone 3 connecting to the server 5 on the Internet 40 from a remote location using a communication method other than short-distance wireless communication, or connecting to the electronic lock 2 via the relay device 4 via the server 5.

[0019] 1 is in a state in which short-distance communication with the electronic lock 2 is not possible, a situation may occur in which the electronic lock 2 is unlocked by another user 41, 42. In this case, the server 5 may be configured to notify the user 43 via the Internet 40 on the screen of the smartphone 3, etc., owned by the user 43 that the electronic lock 2 has been unlocked.

[0020] In this way, the electronic lock system 1 according to this embodiment uses the smartphone 3 to unlock, lock, and manage the electronic lock 2. Here, "management" includes outputting information about the state of the electronic lock, such as whether the electronic lock 2 is unlocked or locked, to the output device 105 (see FIG. 4) of the smartphone 3, as in the case of user 43 in FIG. 1. This allows the user to more easily lock and unlock locking elements such as the door 11.

[0021] The server 5 receives an operation command from the smartphone 3 (see step S6 in Figures 6 and 7). When the server 5 receives the operation command, it generates a response used in challenge-response authentication. The server 5 transmits the response and encrypted data to the electronic lock 2. The operation command and encrypted data will be described later. As shown by arrow A in Figure 2, a mobile communication system such as 3G, LTE, or 4G can be applied as the communication method between the server 5 and the smartphone 3. The server 5 shown in Figure 2 is a cloud server provided by a cloud computing system. Note that the server 5 is not limited to a cloud server, and may be a server constructed on-premise or a server provided by a hosting service.

[0022] The remote control key 6 is a device for unlocking or locking the electronic lock 2. In order for the remote control key 6 to unlock or lock the electronic lock 2, the remote control key 6 and the electronic lock 2 need to be paired. Pairing is performed when the smartphone 3, which is initially registered for operating the electronic lock 2, registers the remote control key 6 with the electronic lock 2. As shown by the arrow F in FIG. 2, BLE is used as the communication method between the remote control key 6 and the electronic lock 2. Furthermore, when the remote control key 6 is initially set up, that is, when pairing is performed between the remote control key 6 and the electronic lock 2, BLE can be used as the communication method between the remote control key 6 and the smartphone 3 as shown by the arrow H in FIG. 2.

[0023] An application 31 for operating the electronic lock 2, for example, is installed on the smartphone 3, and the user can input and send control commands via the application 31.

[0024] The electronic lock system 1 allows the following operations to be performed. (1) An operation in which the smartphone 3 sends a control command to the electronic lock 2 to unlock or lock the door while the smartphone 3 is capable of short-range communication with the door 11 (electronic lock 2). (2) An operation in which the remote control key 6 sends a control command for unlocking or locking to the electronic lock 2 while the remote control key 6 is capable of short-range communication with the door 11 (electronic lock 2). (3) An operation in which the smartphone 3 sends a control command for unlocking or locking to the electronic lock 2 when the smartphone 3 and the electronic lock 2 are unable to communicate with each other in the short distance.

[0025] When the above operation (1) is performed, the communication path between the electronic lock 2 and the smartphone 3 is the path of arrow E shown in Fig. 2. When the above operation (2) of the remote control key 6 is performed, the communication path between the electronic lock 2 and the remote control key 6 is the path of arrow F shown in Fig. 2. When the above operation (3) is performed, the communication path between the electronic lock 2 and the smartphone 3 is the path connecting the arrows A, B, C, and D shown in Fig. 2.

[0026] In the electronic lock system 1 according to the present embodiment, when the server 5 receives a control command, challenge-response authentication is performed. In the electronic lock system 1 according to the present embodiment, the server 5 generates a response using a challenge stored in advance. The generated response is transmitted to the electronic lock 2. The electronic lock 2 authenticates the server 5 based on the response. If the authentication is successful, the electronic lock 2 unlocks or locks the door in response to the control command. In the electronic lock system 1 according to the present embodiment, after the electronic lock 2 unlocks or locks the door, the electronic lock 2 generates a challenge and transmits it to the server 5. The server 5 stores the challenge received from the electronic lock 2. When the server 5 receives a new control command, the stored challenge is used to generate the next response. In this way, the electronic lock 2 generates a challenge after unlocking or locking the door, and the server 5 stores the generated challenge, so that a response can be generated quickly after the control command is acquired. This enables the electronic lock system 1 to quickly complete the unlocking or locking of the electronic lock 2, and speeds up the unlocking or locking of the electronic lock 2 from a remote location via the Internet 40.

[0027] Fig. 3 is a functional block diagram related to the remote operation of the electronic lock system 1. As shown in Fig. 3, the electronic lock 2 has a control device 20 for controlling locking and unlocking. The control device 20 of the electronic lock 2 has a challenge generation unit 21, an authentication unit 22, and a locking / unlocking control unit 23 as functions related to the remote operation of the electronic lock 2 described above. The server 5 has an acquisition unit 51 and a response generation unit 52 as functions related to the remote operation of the electronic lock 2 described above. The smartphone 3 has the application 31 described with reference to Fig. 2.

[0028] The challenge generation unit 21 generates a challenge used in challenge-response authentication. The challenge generation unit 21 also outputs the generated challenge to the response generation unit 52 of the server 5.

[0029] The authentication unit 22 performs challenge-response authentication.

[0030] The lock / unlock control unit 23 controls the locking or unlocking of the electronic lock 2 when the challenge-response authentication by the authentication unit 22 is successful.

[0031] The acquisition unit 51 acquires a control command related to unlocking or locking the electronic lock 2 from the smartphone 3.

[0032] The response generating unit 52 generates a response used for challenge-response authentication in response to the control command. The response generating unit 52 outputs the generated response to the authentication unit 22 of the electronic lock 2.

[0033] The application 31 accepts input of operation commands such as control commands for the electronic lock 2 by the user of the smartphone 3, and transmits them to the acquisition unit 51 of the server 5. When the smartphone 3 is in a state in which short-range communication with the door 11 (electronic lock 2) is possible, the application 31 can transmit the operation command directly to the electronic lock 2. Furthermore, the application 31 can display information related to the electronic lock 2, such as whether the electronic lock 2 is currently unlocked or locked, on the display screen of the smartphone 3 to notify the user.

[0034] Although not shown in FIG. 3, a relay device 4 is interposed in the information communication between the challenge generation unit 21 and authentication unit 22 of the electronic lock 2 and the response generation unit 52 of the server 5.

[0035] FIG. 4 is a hardware configuration diagram of the server 5 and the smartphone 3. As shown in FIG. 4, the server 5 and the smartphone 3 can be physically configured as a computer device or a circuit board including a CPU (Central Processing Unit) 101, a RAM (Random Access Memory) 102 and a ROM (Read Only Memory) 103 as main storage devices, an input device 104 such as a keyboard and a mouse as input devices, an output device 105 such as a display, a communication module 106 as a data transmission / reception device such as a network card, an auxiliary storage device 107, etc. Each function of the server 5 (acquisition unit 51 and response generation unit 52) ​​is realized by the CPU 101 reading a predetermined computer software (locking / unlocking program of the electronic lock system 1) stored in the ROM 103 and expanding it in the RAM 102. It is realized by operating the communication module 106, the input device 104, the output device 105, etc. under the control of the CPU 101 and reading and writing data in the RAM 102 and the auxiliary storage device 107. The application 31 of the smartphone 3 operates the communication module 106, the input device 104, the output device 105, etc. under the control of the CPU 101 by the CPU 101 reading predetermined computer software (locking / unlocking program of the electronic lock system 1) stored in the ROM 103 and expanding it in the RAM 102. The input device 104 and the output device 105 of the smartphone 3 may be a touch panel configured as an integrated unit.

[0036] Fig. 5 is a hardware configuration diagram of the control device 20 of the electronic lock 2. As shown in Fig. 5, the control device 20 can be physically configured as a circuit board including a CPU 201, RAM 202 and ROM 203 which are main storage devices, a communication module 206 which is a data transmission / reception device, an auxiliary storage device 207, etc. The CPU 201, RAM 202, and ROM 203 form a control unit 200. Note that the auxiliary storage device 207 is, for example, a storage device such as a hard disk or SSD, but the electronic lock 2 may be configured not to include the auxiliary storage device 207.

[0037] The electronic lock 2 is also equipped with a drive source such as a motor 24 for rotating the thumb turn, and the control unit 200 of the control device 20 is communicatively connected to the motor 24. Each function of the control device 20 described with reference to Fig. 3 (challenge generation unit 21, authentication unit 22, and locking / unlocking control unit 23) is realized by the CPU 201 reading predetermined computer software (locking / unlocking program of the electronic lock system 1) stored in the ROM 203 and expanding it in the RAM 202. Among the functional blocks shown in Fig. 3, the function of the locking / unlocking control unit 23 is executed by the CPU 201 of the control unit 200, and can control the unlocking or locking of the electronic lock 2 by sending a control command to the motor 24.

[0038] Next, the procedure of the locking / unlocking method relating to remote control of the electronic lock system 1 according to this embodiment will be described with reference to Figs.

[0039] FIG. 6 is a sequence diagram of a conventional procedure for remotely controlling the electronic lock 2 as a comparative example.

[0040] First, an operation to start a connection with the electronic lock 2 is performed from the application 31 of the smartphone 3 (S1), and the electronic lock 2 is initially registered in the application 31 of the smartphone 3 (S2). Also, an operation to start a connection with the relay device 4 is performed from the application 31 of the smartphone 3 (S3), and the relay device 4 is initially registered in the application 31 of the smartphone 3 (S4). The initial registration of steps S1 to S4 is performed, for example, in response to an operation by the user of the smartphone 3. The timing of the initial registration of steps S1 to S4 is not limited to the time of remote operation, and may be performed at any time, such as during short-distance communication. Through the initial registration of steps S1 to S4, the smartphone 3 is able to transmit a control command indicating unlocking or locking the electronic lock 2. Through the initial registration, the server 5 is able to uniquely identify the electronic lock 2 to be controlled in response to a control command from the smartphone 3.

[0041] On the other hand, the processes after step S5 are performed when the smartphone 3 performs remote control.

[0042] The application 31 of the smartphone 3 receives a control command from the owner of the smartphone 3, which command instructs the user to unlock or lock the electronic lock 2 (S5). The control command is input by the user via the application 31, for example, via a UI (User Interface) displayed on the output device 105 of the smartphone 3. The UI is generated by the application 31. In the following, the control command in Fig. 6 will be described as a command instructing the user to either unlock or lock the electronic lock.

[0043] Next, an operation command is transmitted from the smartphone 3 to the acquisition unit 51 of the server 5 (S6). The operation command is a command to instruct the server 5 to unlock or lock the electronic lock 2. The operation command includes a control command and predetermined identification information. The predetermined identification information is information that can uniquely identify the electronic lock 2 to be unlocked or locked. The predetermined identification information may be, for example, information specific to the smartphone 3, the user of the smartphone 3, or the electronic lock 2, or any information that can uniquely identify the electronic lock 2 in the server 5. The predetermined identification information is stored in the auxiliary storage device 107 or application 31 of the smartphone 3 during the initial registration in S2.

[0044] Next, the acquisition unit 51 of the server 5 transmits a command issuance notification to the relay device 4 (S7). The command issuance notification is a notification instructing the electronic lock 2 to lock or unlock the electronic lock 2. The acquisition unit 51 identifies the electronic lock 2 to be notified based on predetermined identification information included in the operation command. The acquisition unit 51 transmits the command issuance notification to the relay device 4, addressed to the electronic lock 2 to be notified.

[0045] Next, the relay device 4 performs a connection process for communication between the relay device 4 and the electronic lock 2 to be operated (S8). When the relay device 4 and the electronic lock 2 are able to communicate with each other, the relay device 4 transmits a challenge request command to the electronic lock 2 (S9).

[0046] When the challenge generation unit 21 of the electronic lock 2 receives a challenge request command, it generates a challenge (S10). The challenge is used to generate a response in challenge-response authentication. Each time a challenge is generated, different data is generated. The challenge is, for example, 16 bytes of information. The challenge is appropriately represented as "CA" in the drawings. The challenge generation unit 21 transmits information including the generated challenge to the relay device 4 (S11). The challenge generation unit 21 also outputs the generated challenge to the authentication unit 22 and stores it.

[0047] Next, information including the challenge received in step S11 is transmitted from the relay device 4 to the response generation unit 52 of the server 5 (S12). The response generation unit 52 acquires the challenge.

[0048] The response generation unit 52 generates a response using the acquired challenge (S13). The response is information generated by combining the challenge with predetermined information. The predetermined information may be, for example, the above-mentioned predetermined identification information or information received from the user. The response generation unit 52 generates a response using a hash function for the combined information. The response is appropriately represented as "RA" in the drawings. The response generation unit 52 transmits information including the generated response and data (encrypted data) obtained by encrypting the operation command received in step S6 to the relay device 4 (S14).

[0049] The relay device 4 transmits information including the response and the encrypted data received from the server 5 in step S14 to the electronic lock 2 to be operated (S15).

[0050] The authentication unit 22 of the electronic lock 2 performs challenge-response authentication in response to receiving information from the relay device 4 (S16). The authentication unit 22 performs authentication based on the challenge generated by the challenge generation unit 21 and stored. Specifically, the authentication unit 22 generates a response from the stored challenge. If the response received from the server and the response generated by the authentication unit 22 match, the authentication unit 22 determines that the authentication is successful. If they do not match, the authentication unit determines that the authentication is not successful. If the authentication unit 22 determines that the authentication is successful, the locking / unlocking control unit 23 executes the unlocking or locking of the electronic lock 2 in response to the control command (S17). On the other hand, if the authentication unit 22 determines that the authentication is not successful, the locking / unlocking control unit 23 does not execute the operation in response to the control command.

[0051] Thereafter, the result of the control command is sent from the electronic lock 2 to the smartphone 3 via the relay device 4 and the server 5 (S18), and the communication between the relay device 4 and the electronic lock 2 to be operated, which was connected in step S8, is disconnected (S19).

[0052] 7 is a sequence diagram showing the procedure for remotely controlling the electronic lock 2 in the electronic lock system 1 of this embodiment. Each process in steps S1 to S4 is the same as that in FIG. 6, so a description thereof will be omitted.

[0053] After step S4, the relay device 4 performs a connection process for communication between the relay device 4 and the electronic lock 2 to be operated (S101), and the relay device 4 and the electronic lock 2 are constantly connected. Here, "constant connection" is not limited to a state in which the connection is continuously maintained, but includes, for example, an operation in which communication is temporarily cut off for a short period of time at a timing when communication between the relay device 4 and the electronic lock 2 is not impaired, and then immediately reconnected, but also includes a state in which the connection is substantially maintained.

[0054] When communication between the relay device 4 and the electronic lock 2 is constantly connected, a challenge request command is transmitted from the relay device 4 to the electronic lock 2 (S102).

[0055] When the challenge generation unit 21 of the electronic lock 2 receives the challenge request command, it generates a challenge (S103). The challenge generation unit 21 transmits information including the generated challenge to the relay device 4 (S104). The challenge generation unit 21 also outputs the generated challenge to the authentication unit 22 and stores it.

[0056] Next, information including the challenge received in step S104 is transmitted from the relay device 4 to the response generation unit 52 of the server 5 (S105). The response generation unit 52 records and holds the received challenge (S106). That is, in this embodiment, the server 5 can obtain in advance, before receiving a control command from the smartphone 3, information on the challenge to be used in the challenge-response authentication to be executed after receiving the control command.

[0057] In this manner, in a state in which the server 5 has been provided with a challenge in advance from the electronic lock 2, the server 5 waits until the acquisition unit 51 of the server 5 acquires a control command (S107).

[0058] 6, the application 31 of the smartphone 3 receives a control command instructing the owner of the smartphone 3 to unlock or lock the electronic lock 2 (S5). The smartphone 3 transmits an operation command to the acquisition unit 51 of the server 5 (S6).

[0059] In response to receiving the operation command, the response generation unit 52 of the server 5 creates a response using the challenge previously stored in step S106 (S108). The response generation unit 52 transmits information including the created response and data (encrypted data) obtained by encrypting the operation command received in step S6 to the relay device 4 (S109).

[0060] The relay device 4 transmits information including the response and the encrypted data received from the server 5 in step S109 to the electronic lock 2 to be operated (S110).

[0061] The authentication unit 22 of the electronic lock 2 performs challenge-response authentication in response to receiving information from the relay device 4 (S111). The authentication unit 22 performs authentication based on the challenge generated by the challenge generation unit 21 and stored in the memory. If the authentication unit 22 determines that the authentication is successful, the locking / unlocking control unit 23 locks or unlocks the electronic lock 2 in response to the control command (S112). On the other hand, if the authentication unit 22 determines that the authentication is not successful, the locking / unlocking control unit 23 does not perform the operation in response to the control command. Thereafter, the result of the control command is transmitted from the electronic lock 2 to the smartphone 3 via the relay device 4 and the server 5 (S113).

[0062] After the challenge-response authentication in step S111 based on the control command in step S5 is completed and the operation of the electronic lock 2 based on this control command is completed in step S112, a challenge request command is sent from the relay device 4 to the electronic lock 2 (S114).

[0063] When the challenge generation unit 21 of the electronic lock 2 receives the challenge request command, it generates a challenge (S115). The challenge generated in step S115 is appropriately represented as "CB" in the drawings. The challenge generation unit 21 transmits information including the generated challenge to the relay device 4 (S116). The challenge generation unit 21 also outputs the generated challenge to the authentication unit 22 and stores it.

[0064] Next, information including the next challenge received in step S116 is transmitted from the relay device 4 to the response generation unit 52 of the server 5 (S117). The response generation unit 52 records and holds the received challenge (S118). That is, in this embodiment, the server 5 can obtain, before obtaining a new next control command from the smartphone 3, information on the next challenge to be used in the challenge-response authentication to be executed after obtaining this control command.

[0065] In this manner, with the server 5 having been provided with a challenge in advance by the electronic lock 2, the server 5 waits until the acquisition unit 51 of the server 5 acquires a control command from the smartphone 3 (S119).

[0066] 6, when the application 31 of the smartphone 3 receives a new control command from the owner of the smartphone 3 instructing to unlock or lock the electronic lock 2, and a new operation command is sent from the smartphone 3 to the acquisition unit 51 of the server 5, the same processes as those of steps S108 to S113 described above are repeated using the challenge. Furthermore, after the operation of the electronic lock 2 based on the new control command is completed, the same processes as those of steps S114 to S118 are repeated, and yet another challenge is generated and stored in the server 5.

[0067] As described above, in the electronic lock system 1 according to the present embodiment, first, in a challenge generation step of steps S102 to S105, before the server 5 acquires a control command related to unlocking or locking the electronic lock 2, the challenge generation unit 21 of the electronic lock 2 generates a challenge to be used for challenge-response authentication and transmits it to the server 5 in advance. Next, in a challenge storage step of step S106, the response generation unit 52 of the server 5 records and stores the challenge received from the electronic lock 2 in the challenge generation step. Next, in a response generation step of steps S108 to S110, the response generation unit 52 of the server 5 generates a response to be used for challenge-response authentication using the challenge stored in the challenge storage step in response to acquisition of the control command, and transmits it to the electronic lock 2. Next, in an authentication step of step S111, the authentication unit 22 of the electronic lock 2 performs challenge-response authentication using the response received from the server 5 in the response generation step. Then, in a locking / unlocking control step of step S112, the locking / unlocking control unit 23 of the electronic lock 2 controls the unlocking or locking of the electronic lock 2 based on the control command if the challenge-response authentication is successful in the authentication step.

[0068] Fig. 8 is a diagram for explaining the effect of the procedure of the locking / unlocking method according to this embodiment. Fig. 8(A) shows the flow of the control sequence for remotely operating the conventional electronic lock 2 described with reference to Fig. 6. In the conventional sequence, the following eight steps were required from the command operation by the smartphone 3 to the operation of the electronic lock 2. (1) A command request from the smartphone 3 to the server 5 (2) Connection request from server 5 to relay device 4 (3) Communication connection between relay device 4 and electronic lock 2 (4) Acquire a challenge from electronic lock 2 to relay device 4 (5) Sending a challenge from relay device 4 to server 5 (6) Response generation by Server 5 (7) Sending a command (response) from the server 5 to the relay device 4 (8) Sending a command (response) from the relay device 4 to the electronic lock 2

[0069] Fig. 8(B) shows the flow of the high-speed sequence for remotely controlling the electronic lock 2 according to the present embodiment described with reference to Fig. 7. In the sequence of the present embodiment, the following four steps are sufficient from the command operation by the smartphone 3 to the operation of the electronic lock 2. (1) A command request from the smartphone 3 to the server 5 (2) Response generation by Server 5 (3) Sending a command (response) from the server 5 to the relay device 4 (4) Sending a command (response) from the relay device 4 to the electronic lock 2

[0070] The reason why the number of steps can be reduced in this way compared to the conventional method is that, as shown in FIG. 8(B), the following steps (5) and (6) have been performed before step (1). (5) Pre-acquisition of a challenge from the electronic lock 2 to the relay device 4 (6) Pre-transmission of a challenge from the relay device 4 to the server 5

[0071] According to the electronic lock system 1 of the electronic lock 2 of this embodiment, the above procedure makes it possible for the challenge to be stored in the server 5 before the server 5 accepts the command, thereby speeding up remote operation of locking and unlocking the electronic lock 2.

[0072] According to the electronic lock system 1 of the electronic lock 2 of this embodiment, when the server 5 receives a control command for locking or unlocking the electronic lock 2, it can generate a response based on a pre-stored challenge and provide it to the electronic lock 2 without waiting for a new challenge to be provided from the electronic lock 2. This allows challenge-response authentication in the electronic lock 2 in response to the control command to be quickly performed when the electronic lock 2 is remotely operated based on the control command via the server 5. As a result, the electronic lock system 1 of this embodiment can lock and unlock more quickly when remotely operated.

[0073] It should be noted that the "challenge pre-stored" in the server 5 mentioned above is a challenge that is generated and sent to the server 5 when the electronic lock 2 is turned on or after the previous challenge-response authentication is performed.

[0074] With this configuration, when the electronic lock 2 is in an operable state, the server 5 stores the challenge information to be used in the next challenge-response authentication, so the server 5 can always generate a response quickly. As a result, the electronic lock system 1 of this embodiment can always quickly lock and unlock the electronic lock 2 when remotely operated.

[0075] In the electronic lock system 1 of this embodiment, the electronic lock 2 and the server 5 are constantly connected. More specifically, the electronic lock system 1 of this embodiment is communicatively connected to the registered electronic lock 2 and includes a relay device 4 that relays communication between the electronic lock 2 and the server 5, and the electronic lock 2 and the relay device 4 are constantly connected.

[0076] This configuration eliminates the need to disconnect communication every time challenge-response authentication based on one command and the operation of the electronic lock 2 are completed, and then reconnect communication when the next command is input, as in the conventional sequence of Fig. 6. As a result, the time required for connection and disconnection of communication can be reduced, making it possible to further speed up remote operation of locking and unlocking the electronic lock 2, and thus enabling even faster remote locking and unlocking.

[0077] This embodiment can also be expressed as a method for producing an electronic lock system 1 including an electronic lock 2 and a server 5 communicably connected to the electronic lock 2. In this production method, the electronic lock 2 executes an authentication step S111 for performing challenge-response authentication based on a response transmitted from the server 5, a control step S112 for locking or unlocking the electronic lock 2 if the challenge-response authentication passes, and challenge generation steps S115-S117 for generating another challenge to be used in another challenge-response authentication after the challenge-response authentication is performed and transmitting the challenge to the server 5, and a storage step S118 for storing the other challenge in the server 5. By carrying out a series of these steps, the electronic lock system 1 for locking or unlocking the electronic lock 2 is completed.

[0078] The present embodiment has been described above with reference to specific examples. However, the present disclosure is not limited to these specific examples. Design modifications made by a person skilled in the art to these specific examples are also included within the scope of the present disclosure as long as they have the features of the present disclosure. The elements and their arrangements, conditions, shapes, etc. of each of the above-mentioned specific examples are not limited to those exemplified, and can be changed as appropriate. The combination of each of the elements of each of the above-mentioned specific examples can be changed as appropriate as long as no technical contradiction occurs.

[0079] In the above embodiment, the electronic lock 2 and the relay device 4 are constantly connected, and thus the electronic lock 2 and the server 5 are constantly connected. However, the electronic lock 2 and the server 5 may not always be connected.

[0080] In the above embodiment, a configuration in which the electronic lock 2 is connected to the server 5 via the relay device 4 has been exemplified, but the electronic lock system 1 may not include the relay device 4, and the electronic lock 2 may be connected to the server 5 so as to be able to communicate directly with it. In this case, the electronic lock 2 may incorporate the functions of the relay device 4 and be connected to the wireless router 7 via Wi-Fi in the same way as the relay device 4, or the electronic lock 2 may be connected to the server 5 so as to be able to communicate with it using an Internet line, a mobile communication system line, or the like.

[0081] Furthermore, although the challenge-response authentication detailed in this embodiment is applied to the electronic lock system 1, it may also be applied to other systems. For example, the electronic lock system 1 in the above embodiment is a type of server-client system, in which the electronic lock 2 is applied as a client communicatively connected to the server 5. Therefore, the challenge-response authentication detailed in this embodiment can be applied to any system that constitutes a server-client system in place of the server 5 and the electronic lock 2.

[0082] For example, a terminal device other than the electronic lock 2 may be used as a client to implement the challenge-response authentication detailed in this embodiment in a system including a server 5 and a terminal device. In this case, the server 5 has an acquisition unit 51 that acquires a control command related to the terminal device, and a response generation unit 52 that generates a response used in the challenge-response authentication in response to the control command based on a challenge stored in advance and transmits the response to the terminal device. The terminal device has an authentication unit 22 that performs challenge-response authentication based on the transmitted response, a control unit (corresponding to the lock / unlock control unit 23 in the above embodiment) that controls the terminal device based on the control command if the challenge-response authentication is successful, and a challenge generation unit 21 that generates another challenge used in another challenge-response authentication after the challenge-response authentication is performed and transmits the challenge to the server 5. The authentication unit 22 and the response generation unit 52 store the other generated challenge.

[0083] The configuration of the authentication method and authentication program corresponding to this challenge-response authentication system is made to correspond to the locking / unlocking method and the locking / unlocking program of the above embodiment by making the same changes as those of the challenge-response authentication system for the electronic lock system 1 described above. Although the system of the server 5 and the terminal device has been described as an example, the combination is not limited to these as long as it is a system that constitutes a server-client system. For example, any device that includes an acquisition unit 51 and a response generation unit 52 may be used as a substitute for the terminal device. Also, any device that includes a challenge generation unit 21, an authentication unit 22, and a control unit may be used as a substitute for the server 5. [Explanation of symbols]

[0084] 1. Electronic Lock System 2. Electronic lock 21 Challenge Generation Unit 22 Authentication Section 23 Locking / unlocking control unit (control unit) 3. Smartphone 4. Relay Device 5 Server 51 Acquisition Department 52 Response Generation Unit CA Challenge (Pre-stored Challenge) CB Challenge (other challenges) RA Response

Claims

1. An electronic lock system comprising an electronic lock and a server communicably connected to the electronic lock, The server, An acquisition unit that acquires a control command related to unlocking or locking the electronic lock; a response generating unit that generates a response used for challenge-response authentication in response to the control command based on a pre-stored challenge and transmits the response to the electronic lock; having The electronic lock is an authentication unit that performs the challenge-response authentication based on the transmitted response; a lock / unlock control unit that locks or unlocks the electronic lock when the challenge-response authentication is successful; a challenge generation unit that generates another challenge to be used for another challenge-response authentication after the challenge-response authentication is performed, and transmits the another challenge to the server; having The response generation unit stores the other challenge. Electronic lock system.

2. The electronic lock and the server are constantly connected. The electronic lock system according to claim 1.

3. The electronic lock system further includes a relay device that relays communication between the electronic lock and the server, The electronic lock and the relay device are constantly connected to each other. The electronic lock system according to claim 2.

4. The pre-stored challenge is a challenge that is generated when the electronic lock is turned on or after the challenge-response authentication is performed and is transmitted to the server. An electronic lock system according to any one of claims 1 to 3.

5. An electronic lock, an authentication unit that performs challenge-response authentication using a response acquired from a predetermined device that is communicably connected to the electronic lock; a lock / unlock control unit that controls unlocking or locking of the electronic lock when the challenge-response authentication is passed by the authentication unit; a challenge generation unit that generates another challenge to be used in another challenge-response authentication after the challenge-response authentication is performed, and transmits the another challenge to the predetermined device; having Electronic lock.

6. Electronic lock and A server connected to the electronic lock in a communicable manner; A locking / unlocking method for an electronic lock system comprising: an acquisition step in which the server acquires a control command related to unlocking or locking the electronic lock; a response generation step in which the server generates a response used for challenge-response authentication in response to the control command acquired in the acquisition step, based on a pre-stored challenge, and transmits the response to the electronic lock; an authentication step in which the electronic lock performs the challenge-response authentication based on the response received from the server in the response generation step; a lock / unlock control step of the electronic lock unlocking or locking the electronic lock based on the control command when the challenge-response authentication is successful in the authentication step; a challenge generation step in which the electronic lock generates another challenge to be used for another challenge-response authentication after the challenge-response authentication is performed, and transmits the another challenge to the server; Including, The server stores the other challenge generated in the challenge generating step. How to lock and unlock an electronic lock system.

7. Electronic lock and A server connected to the electronic lock in a communicable manner; A locking / unlocking program executed in an electronic lock system comprising: An acquisition function by which the server acquires a control command related to unlocking or locking the electronic lock; a response generation function in which the server generates a response used for challenge-response authentication in response to the acquisition of the control command acquired by the acquisition function based on a pre-stored challenge and transmits the response to the electronic lock; an authentication function of the electronic lock performing the challenge-response authentication based on the response received from the server by the response generation function; a lock / unlock control function for unlocking or locking the electronic lock based on the control command when the challenge-response authentication is passed by the authentication function; a challenge generation function of the electronic lock generating another challenge to be used for another challenge-response authentication after the challenge-response authentication is performed, and transmitting the another challenge to the server; This is realized in the electronic lock system, The server stores the other challenge generated by the challenge generation function. A program for locking and unlocking electronic lock systems.

8. A method for producing an electronic lock system comprising an electronic lock and a server communicably connected to the electronic lock, In the electronic lock, an authentication step of performing a challenge-response authentication based on a response transmitted from the server; a control step of unlocking or locking the electronic lock when the challenge-response authentication is successful; a challenge generation step of generating another challenge to be used for another challenge-response authentication after the challenge-response authentication is performed, and transmitting the another challenge to the server; Run In the server, and storing the other challenge. How to produce an electronic lock system.

9. A challenge-response authentication system comprising a server and a terminal device communicably connected to the server, The server, An acquisition unit that acquires a control command related to the terminal device; a response generation unit that generates a response used in challenge-response authentication in response to the control command based on a pre-stored challenge and transmits the response to the terminal device; having The terminal device an authentication unit that performs the challenge-response authentication based on the transmitted response; a control unit that controls the terminal device based on the control command when the challenge-response authentication is successful; a challenge generation unit that generates another challenge to be used for another challenge-response authentication after the challenge-response authentication is performed, and transmits the another challenge to the server; having The authentication unit and the response generation unit store the other challenge. Authentication system.

10. A server; A terminal device communicably connected to the server; An authentication program executed in a challenge-response authentication system comprising: an acquisition function of the server for acquiring a control command related to the terminal device; a response generation function in which the server generates a response used for challenge-response authentication in response to the control command acquired by the acquisition function based on a pre-stored challenge, and transmits the response to the terminal device; an authentication function of the terminal device performing the challenge-response authentication based on the response received from the server by the response generation function; a control function of the terminal device controlling the terminal device based on the control command when the challenge-response authentication is passed by the authentication function; a challenge generation function of the terminal device generating another challenge to be used for another challenge-response authentication after the challenge-response authentication is performed, and transmitting the another challenge to the server; This is realized in a challenge-response authentication system, The terminal device stores the other challenge generated by the challenge generation function. Certification program.

Images