Computer system

Abstract

To provide a computer system capable of safely and easily pairing electronic devices with high security.SOLUTION: A computer system includes: an IC card 5 having a first storage part 51 for storing first authentication information; a reading part 41 for reading the first authentication information; a display part 42 for displaying a two-dimensional code Q based on the first authentication information; and a smartphone 6 having an imaging part 61 for imaging the two-dimensional code Q displayed on the display part 42, and a second storage part 62 for storing second authentication information associated with the first authentication information when the two-dimensional code Q displayed on the display part 42 coincides with imaging information in the two-dimensional code Q imaged by the imaging part 61.SELECTED DRAWING: Figure 1

Description

[Technical Field]

[0001] The present invention relates to computer systems. [Background technology]

[0002] In recent years, IC card keys (hereinafter sometimes abbreviated as IC cards or card keys) incorporating an IC chip or the like have been widely adopted as electronic key devices used in security systems in corporate offices, factories, government offices, public facilities, etc., and for locking and unlocking automobiles, delivery lockers, etc. Although these IC cards contain the same authentication information, they are extremely difficult to duplicate, and therefore are particularly suitable for use in security systems for facilities that require high security.

[0003] Furthermore, a pairing device has been proposed for safely and easily associating key devices and card keys installed in various facilities when performing the above-mentioned security activation / deactivation operations and locking / unlocking operations (see, for example, Patent Document 1). The pairing device described in Patent Document 1 is said to be able to safely and easily pair a key device and a card key by including a pairing processing unit that pairs the card key to be paired with the key device, and an authentication unit that authenticates the personal identification card. [Prior art documents] [Patent documents]

[0004] [Patent Document 1] Japanese Patent Publication No. 2022-134524 Summary of the Invention [Problem to be solved by the invention]

[0005] Furthermore, in order to improve the operability and convenience of starting and releasing security and locking / unlocking using the above-mentioned IC card, a technology has recently been proposed that enables security start / release operations and locking / unlocking operations through authentication using a smartphone, etc. by pairing an IC card with a mobile device such as a smartphone. By adopting such a configuration, for example, it becomes possible to start and release security and lock / unlock operations through authentication using a mobile device such as a smartphone, without having to carry an IC card at all times, resulting in excellent convenience.

[0006] On the other hand, when pairing an IC card with a smartphone, if the smartphone model is changed, the IC card must be paired with the new smartphone again in order to continue using the smartphone for security activation / deactivation operations and lock / unlock operations. However, in the case of security systems for various facilities, the re-pairing of the IC card with the smartphone is performed by the security company, etc., and the end user using the security system must request the security company to change the settings. This creates the problem of having to request the security company every time the smartphone model is changed due to aging or a malfunction, and also the time it takes to complete the setting changes.

[0007] The present invention has been made in view of the above problems, and has as its object to provide a computer system that enables pairing between electronic devices to be performed safely, easily, and with high security. [Means for solving the problem]

[0008] In order to solve the above problems, the present inventors conducted extensive research. As a result, they discovered that a first electronic device having a first storage unit and a second electronic device having a second storage unit can be paired by storing second authentication information associated with the first authentication information in the second storage unit when a two-dimensional code displayed based on first authentication information stored in the first storage unit of the first electronic device matches image information of the two-dimensional code captured by the second electronic device. This makes it possible to pair various electronic devices, such as IC cards and smartphones, safely, easily, and with high security, and they have completed the present invention.

[0009] That is, the present invention provides a computer system comprising: a first electronic device having a first memory unit that stores first authentication information; a second electronic device having a reading unit that reads the first authentication information; a display unit that displays a two-dimensional code based on the first authentication information; an imaging unit that captures the two-dimensional code displayed on the display unit; and a second memory unit that stores second authentication information associated with the first authentication information when the two-dimensional code displayed on the display unit matches the image information of the two-dimensional code captured by the imaging unit.

[0010] In the above aspect, the computer system of the present invention can further adopt a configuration including a two-dimensional code issuing unit that issues a two-dimensional code based on the first authentication information and displays it on the display unit; an authentication information processing unit that compares the two-dimensional code displayed on the display unit with image information of the two-dimensional code captured by the image capturing unit and, if they match, can notify the outside of authentication success information; and an authentication information inquiry unit that receives image information of the two-dimensional code from the second electronic device and notifies the authentication information processing unit of the image information, and, when the authentication success information is received from the authentication information processing unit, transmits the second authentication information associated with the first authentication information to the second electronic device.

[0011] In the computer system of the present invention, in the above aspect, the second authentication information may be information different from the first authentication information.

[0012] In the computer system of the present invention, in the above aspect, the second authentication information may be the same information as the first authentication information.

[0013] In the above aspect, the computer system of the present invention can employ a configuration in which the first electronic device is an IC card.

[0014] In the above aspect, the computer system of the present invention can employ a configuration in which the second electronic device is a smartphone.

[0015] In the above aspect, the computer system of the present invention can employ a configuration further including a third electronic device including the reading section and the display section.

[0016] In the above-described aspect, the computer system of the present invention can employ a configuration in which the first electronic device is an IC card capable of storing authentication information required for starting and canceling security. [Effects of the Invention]

[0017] As described above, the computer system of the present invention employs a configuration in which, when a two-dimensional code displayed based on the first authentication information stored in the first storage unit of the first electronic device matches image information of the two-dimensional code captured by the image capture unit of the second electronic device, second authentication information associated with the first authentication information is stored in the second storage unit of the second electronic device. This allows pairing of the first electronic device and the second electronic device with high security, thereby enabling safe and easy pairing between various electronic devices such as IC cards and smartphones.

[0018] Other objects, features and advantages of the present invention will become apparent from the following description of the preferred embodiments of the present invention, which proceeds with reference to the accompanying drawings. [Brief explanation of the drawings]

[0019]

Figure 1

Figure 2

Figure 3

Figure 4

Figure 5

Figure 6

Figure 7

Embodiments for Carrying Out the Invention

[0020] Hereinafter, embodiments of a computer system according to the present invention will be given and described in detail with appropriate reference to the drawings. In the drawings used in the following description, for the sake of convenience, characteristic portions may be shown slightly enlarged to make the features of the computer system of the present invention easier to understand, and the connection configuration of each component may differ from the actual configuration. Furthermore, the communication methods and structures exemplified in the following description are merely examples, and the present invention is not limited to them and can be implemented with appropriate modifications within the scope of the present invention.

[0021] <Overall configuration of the computer system> A computer system according to an embodiment of the present invention will be described with reference to FIGS. 1 to 7 as needed. 1 and 2 are overall configuration diagrams showing an example of a security system 1 including a computer system of this embodiment, in which FIG. 1 is a schematic diagram explaining the pairing operation between an IC card 5 and a smartphone 6, and FIG. 2 is a schematic diagram explaining the operation of starting and canceling security using the smartphone 6. FIG. 3 is a block diagram showing an example of a security system 1 including a computer system according to this embodiment. FIG. 4 is a flowchart showing the flow of the pairing operation shown in the overall configuration diagram of FIG. FIG. 5 is a flowchart showing the operation flow for starting and canceling security shown in the overall configuration diagram of FIG. FIG. 6 is a diagram showing an example of the overall configuration of a security system 1 including a computer system according to this embodiment, and is a schematic diagram illustrating the locking and unlocking operation using a smartphone 6. FIG. 7 is a flowchart showing the flow of the locking and unlocking operation shown in the overall configuration diagram of FIG.

[0022] The computer system of the present invention can be applied to the security system 1 shown in Figure 1, etc., as well as to systems for pairing card keys (IC cards) that require various types of authentication, such as document viewing management systems, car door opening / closing and starter management devices, and various mobile devices such as smartphones and tablet terminals. That is, the security system including the computer system according to the present invention includes the configuration of the computer system according to the present invention as described above, and by pairing the above various mobile devices with a card key (IC card) used for security start / stop operations and electric lock locking / unlocking operations, it is possible to perform operations similar to those of the card key on a mobile device such as a smartphone. Therefore, in this specification, for convenience of explanation, as an example of the computer system according to the present invention, an aspect in which this computer system is included in a security system is given, and for these detailed explanations, the same drawings are referred to while assigning the same reference numerals and explaining them simultaneously.

[0023] [Configuration of Security System Including Computer System] Hereinafter, an example of the configuration of the security system including the computer system of the present embodiment will be described in detail. As shown in the overall configuration diagrams of FIGS. 1, 2, and 6 and the block diagram of FIG. 3, the computer system in the example described in the present embodiment is included in the security system 1. That is, the computer system of the present embodiment includes an IC card (first electronic device) 5, an operation terminal (third electronic device) 4 having a reading unit 41 and a display unit 42, and a smartphone (second electronic device) 6 having an imaging unit 61 and a second storage unit 62, and is schematically configured.

[0024] Further, in the security system 1 including the computer system of the present embodiment, a two-dimensional code issuing unit 31, an authentication information processing unit 33, and an authentication information inquiry unit 21 can be further provided. That is, in the security system (security system including a computer system) 1 in the example shown in FIG. 1 and the like, a two-dimensional code issuing unit 31, an authentication information processing unit 33, and an authentication information inquiry unit 21 are provided, and further, a two-dimensional code information transmitting unit 32 is provided. In the block diagram of FIG. 3, an example is shown in which among the above configurations, the two-dimensional code issuing unit 31, the two-dimensional code information transmitting unit 32, and the authentication information processing unit 33 are provided in the control terminal 3, and the authentication information inquiry unit 21 is provided in the server 2.

[0025] The security system 1 including the computer system of this embodiment is configured so that the IC card 5 can store authentication information required for starting and canceling security. As a result, the security system 1 including the computer system of this embodiment, as will be described below, can pair a smartphone 6, which is a type of mobile device, with the IC card 5, thereby enabling security start and release operations and electric lock locking and unlocking operations using the smartphone 6 in addition to the IC card 5.

[0026] The IC card (first electronic device) 5 is a card-type electronic device having a first storage unit 51 that stores first authentication information A. The IC card 5 described in this embodiment may be, for example, one that supports near field communication (NFC) and is capable of contactless communication with the reader unit 41 of the operation terminal 4 using this method.

[0027] The operation terminal (third electronic device) 4 has a reading unit 41 that reads the first authentication information A and a display unit 42 that displays a two-dimensional code Q based on the first authentication information A. The operation terminal 4 in the illustrated example further includes an operation unit 43 that enables end users, such as managers and users of various facilities, to start and stop security in the security system 1, lock and unlock the electric lock 81 (details of which will be described later), and perform operations such as pairing the IC card 5 with the smartphone 6. The operation terminal 4 is configured as an operating device that is installed near a door 8 (see FIG. 6) that serves as an entrance or exit to, for example, a company office, a factory, a government office, or a public facility.

[0028] The reading unit 41 is configured to be able to read the first authentication information A stored in the first memory unit 51 of the IC card 5 non-contactly, for example, by holding the IC card 5 over the reading unit 41 using NFC (Near Field Communication), a type of short-range wireless communication. In addition, the reading unit 41 is configured to be able to read the second authentication information B stored in the second memory unit 62 of the smartphone (second electronic device) 6, which will be described in detail later, by holding the smartphone 6 over the reading unit 41 using the above-mentioned NFC or Bluetooth (registered trademark). That is, the reading unit 41 may be, for example, one having an antenna or the like capable of communicating by the above-mentioned various short-range wireless communication methods. Furthermore, the contactless short-distance wireless communication technology is not necessarily limited to the above methods, and various other short-distance wireless communication technologies can also be adopted.

[0029] The display unit 42 displays a two-dimensional code Q based on the first authentication information A stored in the first storage unit 51 of the IC card 5. This two-dimensional code Q is issued by a two-dimensional code issuing unit 31 provided in the control terminal 3, the details of which will be described later. The display unit 42 is not particularly limited, but it is preferable to use, for example, a liquid crystal panel or the like that can display the two-dimensional code Q with high resolution.

[0030] The two-dimensional code Q displayed on the display unit 42 is, for example, a QR (Quick Response) code (registered trademark).

[0031] The smartphone (second electronic device) 6 is a type of mobile device used in the security system 1 of this embodiment. The smartphone 6 has an imaging unit 61 that captures an image of the two-dimensional code Q displayed on the display unit 42, and a second storage unit 62 that stores second authentication information B associated with the first authentication information A when the two-dimensional code Q displayed on the display unit 42 matches the image information of the two-dimensional code Q captured by the imaging unit 61. The smartphone 6 also has an operation display unit 63 that displays various information and is capable of performing various operations in the security system 1 including the computer system of this embodiment, as well as sending and receiving telephone calls and emails.

[0032] As described above, the imaging unit 61 is composed of an imaging device having a predetermined number of pixels for imaging the two-dimensional code Q displayed on the display unit 42 of the operation terminal 4, a lens, and further a camera having an imaging data processing unit (not shown). The above imaging device is composed of, for example, a CMOS (Complementary Metal-Oxide-Semiconductor) image sensor or the like.

[0033] As described above, the second storage unit 62 stores the second authentication information B associated with the first authentication information A. The second storage unit 62 is composed of, for example, a rewritable memory such as a flash memory built in a commercially available general smartphone.

[0034] The operation display unit 63 can display various information and perform various operations as described above. The operation display unit 63 is composed of, for example, a touch panel having a liquid crystal or an organic EL (Organic Electro-Luminescence) as a display element.

[0035] In the security system 1 including the computer system of the present embodiment, a dedicated application is installed on the smartphone 6, and various operations described above and various operations to be described later can be performed by this dedicated application. For example, by connecting the smartphone 6 to an application download site (application sales site) on the Internet and downloading and installing a dedicated application corresponding to the computer system of the present embodiment, various operations can be performed.

[0036] The smartphone 6 has an antenna for short-range wireless communication (not shown), and is configured to be able to perform contactless wireless communication with the reading unit 41 of the operation terminal 4 by using this antenna, as needed. That is, the smartphone 6 is configured to be able to cause the reading unit 41 to read the second authentication information B stored in the second storage unit 62 by short-range wireless communication using the above-mentioned NFC or Bluetooth (registered trademark) by holding the vicinity of the antenna (not shown) over the reading unit 41 of the operation terminal 4, as needed.

[0037] In this specification, including the following description, an example is described in which the above-mentioned dedicated application is installed on the smartphone 6 to perform various operations, but the present invention is not limited to this. For example, it is also possible to employ a configuration in which a website for various operations is displayed using a web browser pre-installed on the smartphone 6, and similar operations are performed on this website. However, from the standpoint of various operability and operational stability, it is preferable to install a dedicated application on the smartphone 6 and perform various operations using this application.

[0038] The smartphone 6 may be a commercially available general smartphone, that is, one that uses iOS (registered trademark), Android (registered trademark), or the like as its operating system (OS).

[0039] 3, the control terminal 3 is configured to include a two-dimensional code issuing unit 31, a two-dimensional code information transmitting unit 32, and an authentication information processing unit 33, as described above. The control terminal 3 in the illustrated example is electrically connected to the operation terminal 4, and is also connected to the server 2, the details of which will be described later, via a communication network 7.

[0040] The two-dimensional code issuing unit 31 issues a two-dimensional code Q based on the first authentication information A, notifies the operation terminal 4, and causes the display unit 42 to display the code. The two-dimensional code issuing unit 31 receives the first authentication information A stored in the first storage unit 51 of the IC card 5, which has been read by the reading unit 41 of the operation terminal 4, issues a two-dimensional code Q based on this, notifies the operation terminal 4, and causes it to be displayed on the display unit 42.

[0041] The two-dimensional code information transmitting unit 32 can notify the code information of the two-dimensional code Q displayed on the display unit 42 of the operation terminal 4 to the outside. Specifically, the two-dimensional code information transmitting unit 32 generates the code information corresponding to the two-dimensional code Q displayed on the display unit 42 and notifies the server 2, the details of which will be described later.

[0042] The authentication information processing unit 33 compares the two-dimensional code Q displayed on the display unit 42 of the operation terminal 4 with the imaging information of the two-dimensional code Q imaged by the imaging unit 61, which has been notified from the authentication information inquiry unit 21 provided in the server 2, the details of which will be described later. When these match, it can notify the authentication success information to the outside. That is, the authentication information processing unit 33 notifies the authentication success information to the server 2 via the communication network 7 only when the two-dimensional code Q displayed on the display unit 42 matches the imaging information of the two-dimensional code Q imaged by the imaging unit 61 of the end-user's smartphone 6.

[0043] The server 2 is connected to the control terminal 3 via the communication network 7 and is also connected to the smartphone 6 via the communication network 70. Also, the server 2 in the example shown in the block diagram of FIG. 3 is configured to include an authentication information inquiry unit 21, a security start / cancel operation notification unit 22, and a pairing information management unit 23.

[0044] The authentication information inquiry unit 21 receives the imaging information of the two-dimensional code Q from the smartphone 6 via the communication network 70. In the example described in this embodiment, the imaging information of this two-dimensional code Q is notified to the authentication information processing unit 33 of the control terminal 3. In addition, when the authentication information inquiry unit 21 receives the authentication success information from the above-mentioned authentication information processing unit 33, it transmits the second authentication information B associated with the first authentication information A stored in the first memory unit 51 of the IC card 5 to the smartphone 6 via the communication network 70.

[0045] The security start / cancel operation notification unit 22 notifies the control terminal 3 of an operation signal to start or cancel security in the security system 1. That is, the security start / cancel operation notification unit 22 receives an operation to start or cancel security via the operation display unit 63 using a dedicated application installed on the smartphone 6 that has completed pairing with the IC card 5, and notifies the control terminal 3 of the operation signal to start or cancel security. This makes it possible to perform security start / cancel operations using the smartphone 6 in the same way as when the operation unit 43 of the operation terminal 4 is operated.

[0046] In the above case, operation information for starting / canceling security using a dedicated application on the operation display unit 63 of the smartphone 6 is notified to the server 2 via the communication network 70, and the operation information for starting / canceling security is notified to the control terminal 3 to be secured based on the pairing information managed by the pairing information management unit 23. The control terminal 3 then confirms that the second authentication information B of the smartphone 6 notified to the server 2 is the second authentication information B associated with the first authentication information A of the paired IC card 5, and accepts the operation as having been performed using the corresponding IC card 5.

[0047] The pairing information management unit 23 manages the association (linking) information between the first authentication information A and the second authentication information B of the IC card 5 and the smartphone 6 paired by the above procedure. Also, for example, when an end user changes the model of the smartphone 6 and tries to pair the new smartphone 6 after the model change with the IC card 5, the pairing information management unit 23 checks the relationship with the past association information. Then, the pairing information management unit 23 overwrites the association information between the first authentication information A and the second authentication information B with the new second authentication information B associated with the first authentication information A stored in the first storage unit 51 of the IC card 5 and transmitted to the newly paired smartphone 6, and manages this association information.

[0048] The electric lock 81 performs an unlocking operation or a locking operation based on an unlocking signal notified from the control terminal 3 via the operation terminal 4. In the example shown in FIG. 6, the electric lock 81 is provided in the doorknob mechanism of the door 8 and serves as a lock for a doorknob such as a grip ball type. Also, in the illustrated example, the operation terminal 4 is arranged near the door 8 provided with the electric lock 81. Although detailed illustration of the electric lock 81 is omitted, for example, it has a structure in which an unlocking / locking operation is performed by a locking mechanism operated by an electromagnetic coil or the like.

[0049] When an antenna (not shown) for short-range wireless communication of the IC card 5 or the smartphone 6 whose pairing with the IC card 5 is completed is held over the reading unit 41 of the operation terminal 4, the electric lock 81 receives the notification, and is notified from the server 2 to the control terminal 3 so that the unlocking / locking operation by the operation unit 43 becomes effective. Thereby, it becomes possible to perform the locking or unlocking operation of the electric lock 81 at the operation unit 43 of the operation terminal 4.

[0050] Furthermore, the electric lock 81 can also be locked and unlocked using, for example, the operation and display unit 63 of the smartphone 6 that has completed pairing with the IC card 5. Specifically, for example, by operating a dedicated application installed on the smartphone 6 that has completed pairing with the IC card 5 using the operation and display unit 63, it becomes possible to perform the same operations as when operating the operation unit 43 of the operation terminal 4. This makes it possible, for example, for an administrator who is not present to remotely start and release security operations and lock and unlock the electric lock 81 on behalf of an end user who is staying near the door 8 and operation terminal 4.

[0051] In the security system 1 of this embodiment, when security is initiated by operation of the operation unit 43 of the operation terminal 4 or the operation display unit 63 of the smartphone 6, even if a locking / unlocking operation is performed on the operation unit 43 or the operation display unit 63, a notification from the control terminal 3 restricts the electric lock 81 from locking / unlocking. On the other hand, when the security release operation is performed, a notification from the control terminal 3 enables the electric lock 81 to be locked / unlocked by the operation unit 43 or the operation display unit 63.

[0052] As described above, the security system 1 including the computer system of this embodiment is configured to be able to pair the smartphone 6 with the IC card 5 by storing the second authentication information B associated with the first authentication information A in the second storage unit 62 of the smartphone 6. This makes it possible to start or cancel security and lock / unlock the electric lock 81 using the smartphone 6 in addition to the IC card 5.

[0053] [Various operating procedures and operations of security systems, including computer systems] Various operational procedures and flow of operations of the security system 1 including the computer system of this embodiment having the above configuration will be described below mainly with reference to the flowcharts of FIGS. 4, 5 and 7 (also see FIGS. 1 to 3 and 6 as appropriate).

[0054] (Pairing operation) Next, with reference to the flowchart of FIG. 4, the procedure and operation of the operation for pairing the IC card 5 and the smartphone 6 by the security system 1 including the computer system of the present embodiment will be described (also appropriately refer to the overall configuration diagram of FIG. 1 and the block diagram of FIG. 3).

[0055] As shown in FIG. 4, first, an end user who uses the security system 1 installs a dedicated application on the smartphone 6 that is planned to be paired with the IC card 5 (step 1).

[0056] Next, the end user selects "Smartphone registration" (not shown) on the operation unit 43 of the operation terminal 4, and holds the IC card 5 that is planned to be paired with the smartphone 6 over the reading unit 41 of the operation terminal 4. At this time, the operation terminal 4 reads the first authentication information A stored in the IC card 5 and notifies the control terminal 3 (step 2).

[0057] Next, the control terminal 3 issues a two-dimensional code Q as a one-time password for pairing with the smartphone 6 associated with the first authentication information A of the IC card 5, and notifies the operation terminal 4. At this time, the operation terminal 4 causes the display unit 42 to display the two-dimensional code Q notified from the control terminal 3 (step 3).

[0058] Next, the control terminal 3 notifies the server 2 of the first authentication information A of the IC card 5 and the code information of the two-dimensional code Q for pairing with the smartphone 6 based on the first authentication information A (step 4).

[0059] Next, the end user captures an image of the two-dimensional code Q displayed on the operation terminal 4 with the smartphone 6, and notifies the server 2 of the captured image information of the two-dimensional code Q by operating the operation display unit 63 using a dedicated application installed on the smartphone 6. The server 2 also notifies the control terminal 3 of the captured image information of the two-dimensional code Q notified from the smartphone 6 (step 5).

[0060] Next, the control terminal 3 compares the code information of the two-dimensional code Q displayed on the display unit 42 with the image information of the two-dimensional code Q captured by the smartphone 6 and notified by the server 2, and if they match, notifies the authentication information inquiry unit 21 of the server 2 of authentication success information. When the authentication information inquiry unit 21 (server 2) receives the authentication success information from the control terminal 3, it authenticates that pairing between the IC card 5 and the smartphone 6 has been established, and notifies the smartphone 6 of the second authentication information B associated with the first authentication information A of the IC card 5 (step 6).

[0061] The smartphone 6 then stores the second authentication information B notified by the server 2. Furthermore, the pairing information management unit 23 of the server 2 manages the pairing information between the IC card 5 and the smartphone 6 (step 7).

[0062] Through the above steps, the IC card 5 and the smartphone 6 can be paired.

[0063] (Security start / release operation) Next, referring to the flowchart of Figure 5, we will explain the procedures and operations for starting or canceling security in a security system 1 including the computer system of this embodiment, using a smartphone 6 that has completed pairing with an IC card 5 through each step shown in the flowchart of Figure 4 (also see the overall configuration diagram of Figure 2 and the block diagram of Figure 3 as appropriate).

[0064] As shown in FIG. 5, first, the end user performs an arming / disarming operation by operating the operation display unit 63 using the dedicated application installed on the smartphone 6. At this time, the smartphone 6 notifies the server 2 of the arming / disarming operation information (step 11).

[0065] Next, based on the pairing information managed by the pairing information management unit 23 in the server 2, the server 2 notifies the control terminal 3 to be guarded of the arming / disarming operation information (step 12).

[0066] Next, the authentication information processing unit 33 of the control terminal 3 receives the notification of the arming / disarming operation information from the arming / disarming operation notification unit 22 of the server 2, and confirms that the second authentication information B of the smartphone 6 notified to the server 2 is the second authentication information B associated with the first authentication information A of the paired IC card 5. When the second authentication information B of the smartphone 6 is associated with the first authentication information A of the IC card 5, the arming / disarming operation is accepted as being operated by the corresponding IC card 5 (step 13).

[0067] (Lock / Unlock Operation) Next, with reference to the flowchart of FIG. 7, in the security system 1 including the computer system of the present embodiment, the procedure and operation of performing the locking and unlocking of the electric lock 81 provided on the door 8 using the smartphone 6 for which the pairing with the IC card 5 has been completed by each step shown in the flowchart of FIG. 4 will be described (also appropriately refer to the block diagram of FIG. 3 and the overall configuration diagram of FIG. 6).

[0068] As shown in FIG. 7, first, the end user holds the smartphone 6 over the reading unit 41 of the operation terminal 4 connected to the electric lock 81, and the reading unit 41 reads the second authentication information B stored in the second storage unit 62 of the smartphone 6 (step 21).

[0069] Next, the operation terminal 4 notifies the pairing information management unit 23 of the server 2 of the second authentication information B read by the reading unit 41 via the control terminal 3, and requests a match between the second authentication information B (smartphone 6) and the paired first authentication information A (IC card 5) (step 22).

[0070] Next, the pairing information management unit 23 of the server 2 compares the second authentication information B (smartphone 6) with the first authentication information A (IC card 5) and notifies the control terminal 3 of an unlocking request based on the first authentication information A of the IC card 5 paired with the smartphone 6 (step 23).

[0071] Next, the authentication information processing unit 33 of the control terminal 3 compares the first authentication information A of the IC card 5 notified by the pairing information management unit 23 of the server 2 with the second authentication information B of the smartphone 6. If the first authentication information A and the second authentication information B match, it determines whether or not the electric lock 81 can be operated, and notifies the operation terminal 4 of whether or not the electric lock 81 can be operated (step 24).

[0072] Then, the operation terminal 4 operates the electric lock 81 based on the notification from the control terminal 3 (step 25).

[0073] It is preferable that the history of the pairing operation between the IC card 5 and the smartphone 6, the security start / release operation, and the lock / unlock operation described above is all recorded in the operation history recording unit 34 provided in the control terminal 3.

[0074] <Action and effect> As described above, the computer system of this embodiment employs a configuration in which, when the two-dimensional code Q displayed based on the first authentication information A stored in the first storage unit 51 of the IC card (first electronic device) 5 matches the image information of the two-dimensional code Q captured by the image capture unit 61 of the smartphone (second electronic device) 6, the second authentication information B associated with the first authentication information A is stored in the second storage unit 62 of the smartphone 6. This allows the IC card 5 and the smartphone 6 to be paired with high security, making it possible to perform pairing between various electronic devices safely and easily.

[0075] Furthermore, according to the computer system of this embodiment, by being included in the security system 1 shown in FIGS. 1, 2, 6, etc., if the two-dimensional code Q displayed based on the first authentication information A stored in the first storage unit 51 of the IC card 5 matches the image information of the two-dimensional code Q captured by the image capture unit 61 of the smartphone 6, the second authentication information B associated with the first authentication information A is stored in the second storage unit 62 of the smartphone 6, and the smartphone 6 and the IC card 5 are paired. This enables the smartphone 6 to start and release security and lock and unlock operations in addition to the IC card 5. This makes it possible to lock and unlock the electric lock using the smartphone 6 without carrying and using the IC card 5, thereby establishing a cardless security system. Furthermore, even if the end user changes the model of the smartphone 6, the end user can safely and easily perform a new pairing (registration) operation with the IC card 5 with high security, without the need for new authentication by a security company or the like.

[0076] When using a conventional system, end users are required to enter a large amount of information when installing an application on their smartphone, such as their ID, email address, password, etc. Performing these input operations without error places a burden on end users. On the other hand, by adopting the system of the present embodiment, the end user only needs to download a dedicated application to the smartphone 6 and then perform an operation of simply photographing the two-dimensional code Q with the smartphone 6 and transmitting it to the server 2 without performing a character input operation, and the pairing is completed. Thereby, not only the burden on the end user but also the burden on the security company side can be reduced.

[0077] Further, according to the security system 1 including the computer system of the present embodiment, since various operations can be performed using the smartphone 6 that has completed pairing with the IC card 5 without using the IC card 5, for example, even if the user forgets to carry the IC card 5 or loses it, various operations can be performed.

[0078] Furthermore, by applying the security system including the computer system of the present embodiment, for example, it is possible to promote cardless operation only by updating the firmware using an existing security system including a computer system or an IC card that is already in use.

[0079] <Modification Example of the Present Invention> In the above, the embodiments of the present invention have been described in detail. However, the computer system of the present invention is not limited by the above embodiments, and various changes and modifications can be made and implemented without departing from the principle of the present invention and the scope of the appended claims.

[0080] For example, in the present embodiment, an example has been described in which the authentication information processing unit 33 that compares and authenticates the two-dimensional code Q displayed on the display unit 42 of the operation terminal 4 and the imaging information of the two-dimensional code Q captured by the imaging unit 61 is provided in the control terminal 3. However, the configuration is not limited to this. For example, the authentication information processing unit 33 that performs the above-described comparison and authentication may be provided in the server 2.

[0081] Furthermore, in this embodiment, an example is described in which the control terminal 3 having the above configuration is provided, but it is also possible to omit the entire control terminal 3. That is, for example, by adopting a configuration in which the operation terminal 4 has a function of communicating with the server 2 via the communication network 7, it is possible to adopt a configuration in which the two-dimensional code issuing unit 31, the two-dimensional code information transmitting unit 32, and the operation history recording unit 34 provided in the control terminal 3 are each provided in the operation terminal 4 or the server 2. This makes it possible to omit the entire control terminal 3 by combining it with a configuration in which the authentication information processing unit 33 is provided in the server 2 as described above.

[0082] In this embodiment, it is preferable that the second authentication information B stored in the second storage unit 62 of the smartphone 6 is different from the first authentication information A stored in the first storage unit 51 of the IC card 5. In this way, because the first authentication information A and the second authentication information B are different information, the first authentication information A stored in the IC card 5 is not stored in the smartphone 6. Therefore, for example, even if the end user loses the smartphone 6, the second authentication information B stored in the smartphone 6 is different information from the first authentication information A stored in the IC card 5, and therefore the first authentication information A will not be leaked. This ensures extremely high safety from a security standpoint, and also eliminates the need to reissue the IC card 5, thereby preventing the need for complicated procedures.

[0083] On the other hand, the second authentication information B stored in the second storage unit 62 of the smartphone 6 may be the same information as the first authentication information A stored in the first storage unit 51 of the IC card 5. In this way, when the first authentication information A and the second authentication information B are the same information, the same authentication information as that stored on the IC card 5 is stored in the smartphone 6, which provides benefits such as easier authentication management.

[0084] In addition, in the present embodiment, the IC card 5 is exemplified as the first electronic device, and the smartphone 6 is exemplified as the second electronic device composed of a mobile device for explanation. However, each electronic device is not limited to these. In the computer system according to the present invention and the security system 1 including the same, as the second electronic device, for example, other mobile devices such as a smartwatch or a tablet terminal can also be adopted.

[0085] In addition, in the present embodiment, a configuration including the operation terminal 4 as the third electronic device including the reading unit 41 and the display unit 42 is exemplified, but the present invention is not limited to this, and a configuration in which the reading unit and the display unit are separately provided may be adopted.

[0086] In addition, in the present embodiment, a configuration is exemplified in which the security start / cancel operation notification unit 22 of the server 2 receives an operation of starting or canceling security by the operation display unit 63 using a dedicated application installed in the smartphone 6 and notifies the control terminal 3 of an operation signal for starting or canceling security. However, the present invention is not limited to this. For example, when a short-range wireless communication antenna (not shown) provided in the smartphone 6 after pairing is held over the reading unit 41 of the operation terminal 4, the security start / cancel operation notification unit 22 receives the notification, and a configuration in which the security by the security system 1 is started or canceled may be adopted. Alternatively, a configuration in which the security can be started or canceled by any of the operation of the operation display unit 63 of the smartphone 6 and the operation of holding the smartphone 6 over the reading unit 41 of the operation terminal 4 as described above may also be adopted.

[0087] In addition, in the present embodiment, an example using a QR code (registered trademark) is described as an example of the two-dimensional code Q which is information displayed on the display unit 42 of the operation terminal 4. However, the present invention is not limited to this. As the two-dimensional code, in addition to the above QR code (registered trademark), for example, a barcode, characters, patterns, etc. may be used, and it can be set as appropriate.

[0088] Furthermore, the computer system of this embodiment and the security system 1 including it are capable of safely and easily pairing the IC card 5 with a mobile device such as a smartphone 6, but it is not essential to perform the security start / stop operations or the lock / unlock operations using the smartphone 6. That is, for example, depending on the circumstances of the end user, it is possible to adopt a usage form in which the above operations are performed solely under the management of the IC card 5 without using a smartphone 6 with which pairing has been completed or without performing the above pairing.

[0089] Furthermore, the computer system of this embodiment can, for example, pair an IC card (employee ID card) used to manage employee attendance with a smartphone, making it possible to use a smartphone instead of a regular employee ID card to manage attendance. [Industrial Applicability]

[0090] The computer system of the present invention enables safe and easy pairing between various electronic devices such as IC cards and smartphones, etc. Therefore, the computer system of the present invention is highly suitable for applications such as security systems in corporate offices, factories, government offices, various archives, public facilities, etc., and for using a smartphone as a security key by pairing it with an IC card used to lock and unlock automobiles, delivery lockers, etc. [Explanation of symbols]

[0091] 1...Security system (computer system; security system including computer system) 2. Server 21...Authentication information inquiry section 22…Security start / cancellation operation notification section 23...Pairing information management section 3...Control terminal 31...2D code issuing department 32...Two-dimensional code information transmission unit 33...Authentication information processing unit 34...Operation history recording section 4...Operation terminal (third electronic device) 41...Reading unit 42...Display section 43...Operation unit 5...IC card (first electronic device) 51...1st memory section 6...Smartphone (secondary electronic device) 61...imaging unit 62...Second memory section 63...Operation unit 7,70…Communication Network A...First authentication information B...Second authentication information Q...2D code

Claims

1. a first electronic device having a first storage unit that stores first authentication information; a reading unit that reads the first authentication information; a display unit that displays a two-dimensional code based on the first authentication information; a second electronic device having an imaging unit that captures an image of the two-dimensional code displayed on the display unit, and a second storage unit that stores second authentication information associated with the first authentication information when the two-dimensional code displayed on the display unit matches image information of the two-dimensional code captured by the imaging unit; A computer system comprising:

2. moreover, a two-dimensional code issuing unit that issues a two-dimensional code based on the first authentication information and displays the code on the display unit; an authentication information processing unit that compares the two-dimensional code displayed on the display unit with image information of the two-dimensional code captured by the image capturing unit, and notifies an external device of authentication success information when the two-dimensional code matches; an authentication information inquiry unit that receives image information of the two-dimensional code from the second electronic device, notifies the authentication information processing unit of the image information, and, when receiving the authentication success information from the authentication information processing unit, transmits the second authentication information associated with the first authentication information to the second electronic device; 2. The computer system of claim 1, comprising:

3. 3. The computer system according to claim 1, wherein the second authentication information is different from the first authentication information.

4. 3. The computer system according to claim 1, wherein the second authentication information is the same as the first authentication information.

5. 3. The computer system according to claim 1, wherein the first electronic device is an IC card.

6. 3. The computer system according to claim 1, wherein the second electronic device is a smartphone.

7. 3. The computer system according to claim 1, further comprising a third electronic device including the reading unit and the display unit.

8. 3. The computer system according to claim 1, wherein the first electronic device is an IC card capable of storing authentication information required for starting and canceling security.

Images