Electronic lock device and method for processing electronic lock device
The electronic lock device manages operating mode changes and secure command execution through a communication and mode change system, enhancing efficiency and security by validating commands based on authentication and mode information.
Patent Information
- Authority / Receiving Office
- JP · JP
- Patent Type
- Applications
- Current Assignee / Owner
- Filing Date
- 2024-08-21
- Publication Date
- 2026-03-06
AI Technical Summary
Existing electronic lock devices inefficiently manage changes in operating modes, requiring manual checking of memory states for command execution and lacking secure management of authentication information.
An electronic lock device equipped with a communication unit, mode change unit, judgment unit, and processing unit that processes commands based on authentication and mode information, allowing mode changes and secure command execution.
Enables efficient and secure processing of commands considering operating mode changes, preventing unauthorized access and ensuring only authorized commands are executed.
Smart Images

Figure 2026036752000001_ABST
Abstract
Description
[Technical Field]
[0001] The present invention relates to an electronic lock device and a processing method for the electronic lock device. [Background technology]
[0002] Conventionally, authentication information is stored in advance in the mobile terminal device and the electronic lock device, and when unlocking, the mobile terminal device and the electronic lock device are electrically connected and the authentication information is sent from the mobile terminal device to the electronic lock device.The electronic lock device then compares the received authentication information with the authentication information stored internally and unlocks if the two match. Such electronic lock devices require a locking / unlocking function during operation, as well as a function to register and update authentication information. Furthermore, electronic lock devices require a testing function to check for malfunctions or damage during manufacturing and shipping, and an issuing function to perform initialization processing to use nonvolatile memory.
[0003] In the initialization process, the method for storing information in the memory of the IC chip in the electronic lock device is defined by a program, and information is read and written to the IC chip memory according to that method. Since management information is required to manage multiple pieces of information in order to read and write information, the initialization process performs processes such as creating a management area and dividing up storage areas to store the various pieces of information to be read and written. By executing the initialization process, the electronic lock device writes its own administrator information, ID number, and authentication information required for unlocking. The electronic lock device also requires commands to execute the initialization process, a command to write administrator information, and a read command to confirm the write.
[0004] Furthermore, for operation after shipment of an electronic lock device, the electronic lock device must have a locking / unlocking function and a function for registering or updating authentication information. When an administrator constructs an electronic lock system, they must register an ID number determined by the administrator when acquiring and installing the electronic lock device, and they must also change the initially provisionally registered authentication information to newly determined authentication information. For this reason, the electronic lock device must have a function for registering the electronic lock ID and authentication information. Furthermore, for example, if temporary registration authentication information is registered by the manufacturer at the time of shipment, and the temporary registration authentication information set by the manufacturer is available when the electronic lock device is acquired, the purchaser of the electronic lock device must first authenticate the temporary registration authentication information, update the authentication information, register the ID number, etc.
[0005] Unlike electronic locking devices, a typical mechanical physical lock is unlocked by inserting a key into the keyhole and turning it, or a combination lock is unlocked by turning the dial and matching the set key value. Therefore, it is difficult to test unlocking during the manufacturing stage, and once the device is mechanically assembled, it will be in the same state as when it is in operation, so there is no need to manage the state specially or restrict functions.
[0006] With regard to existing electronic lock systems, the technology described in Patent Document 1 below is known. Patent Document 1 describes a vehicle electronic key system that can improve security. In this vehicle electronic key system, various vehicle controls are performed by exchanging information encrypted using a common encryption key between an onboard device and a portable device installed in the vehicle. The vehicle's operation mode can be selectively set to either a normal mode, in which all vehicle functions are available, or a valet mode, in which use of the vehicle is restricted. When the vehicle's operation mode is changed from normal mode to valet mode, the encryption key used for encryption is changed to a valet mode encryption key, and a new valet mode encryption key is generated each time the vehicle's operation mode is changed from normal mode to valet mode. [Prior art documents] [Patent documents]
[0007] [Patent Document 1] Japanese Patent Application Laid-Open No. 2012-67489 Summary of the Invention [Problem to be solved by the invention]
[0008] In the case of traditional physical locks, the lock can be unlocked by inserting the key into the lock and turning it, or by turning the dial until it matches, so there was no need to manage the lock's condition specially since it was in the same condition as when it was in operation when it was manufactured.
[0009] In the electronic lock device described above, the state of the electronic lock device changes depending on the information stored in the memory at the time of manufacture, shipping, registration, operation, etc. When the electronic lock device receives a command from a mobile terminal, the IC chip needs to check the memory state and determine whether the command can be executed. However, it is inefficient to check the memory state one by one when the electronic lock device receives a command and determine whether to allow the command to be executed every time.
[0010] The present disclosure has been made in consideration of these circumstances, and aims to provide an electronic lock device and a processing method for an electronic lock device that can appropriately process commands while taking into account changes in the operating mode of the electronic lock device. [Means for solving the problem]
[0011] The present disclosure has been made to solve the above-mentioned problems, and one aspect of the present disclosure is an electronic lock device that performs an authentication process based on authentication information received from an electronic device and locks or unlocks based on the authentication result of the authentication process, and is equipped with a communication unit that communicates with the electronic device, a mode change unit that changes the operating mode of the electronic lock device between multiple modes based on a mode change command supplied from the electronic device, a memory unit that stores mode information indicating the current operating mode of the electronic lock device and mode condition information that indicates the correspondence with commands that can be executed in the operating mode, a judgment unit that, when the command is supplied from the electronic device, determines based on the mode condition information whether the supplied command is an command that can be executed in the current operating mode indicated by the mode condition information, and a processing unit that performs a predetermined processing based on the command when the judgment unit determines that the supplied command is an command that can be executed in the current operating mode.
[0012] Another aspect of the present disclosure is a processing method for an electronic lock device that performs an authentication process based on authentication information received from an electronic device and locks or unlocks based on the authentication result of the authentication process, the processing method for an electronic lock device including the steps of: changing the operating mode of the electronic lock device between multiple modes based on a mode change command supplied from the electronic device; storing mode information indicating the current operating mode of the electronic lock device and mode condition information indicating the correspondence with commands that can be executed in the operating mode; when the command is supplied from the electronic device, determining based on the mode condition information whether the supplied command is an command that can be executed in the current operating mode indicated by the mode condition information; and when it is determined that the supplied command is an command that can be executed in the current operating mode, performing a predetermined processing based on the command. [Effects of the Invention]
[0013] According to one aspect of the present invention, it is possible to appropriately process commands taking into consideration changes in the operating mode of the electronic lock device. [Brief explanation of the drawings]
[0014] [Figure 1] 1 is a schematic diagram showing an example of an electronic lock system 1 according to an embodiment. [Figure 2] 1 is a block diagram showing an example of the configuration of an electronic lock device 100 according to an embodiment. [Figure 3] FIG. 2 is a diagram showing an example of the internal configuration of an IC chip 120 according to the embodiment. [Figure 4] FIG. 2 is a diagram illustrating an example of a functional configuration of an IC chip 120 according to an embodiment. [Figure 5] FIG. 3 is a diagram showing an example of information stored in a storage unit 135 (non-volatile memory 126) in the embodiment. [Figure 6] FIG. 4 is a diagram showing an example of mode information according to the embodiment. [Figure 7] FIG. 10 is a diagram showing an example of mode information in a manufacturing mode according to the embodiment. [Figure 8] 10A and 10B are diagrams showing examples of mode condition information corresponding to each of a plurality of instructions in the embodiment; [Figure 9] FIG. 4 is a diagram showing an example of mode condition information according to the embodiment. [Figure 10] FIG. 10 is a diagram showing another example of mode information according to the embodiment. [Figure 11] FIG. 10 is a diagram showing another example of mode condition information in the embodiment. [Figure 12] 4 is a flowchart showing an example of the operation of the electronic lock device 100 in the embodiment. [Figure 13] 10 is a flowchart showing an example of processing when a mode change command is received by the electronic lock device 100 according to the embodiment. [Figure 14] 10 is a flowchart showing an example of processing when the electronic lock device 100 in the embodiment receives a blockage mode start command. [Figure 15] 10 is a flowchart showing an example of processing when the electronic lock device 100 in the embodiment receives a blockage mode release command. [Figure 16]10 is a flowchart showing an example of processing when a lock / unlock command is received by the electronic lock device 100 according to the embodiment. [Figure 17] 10 is a flowchart showing an example of processing when an information update command is received by the electronic lock device 100 in the embodiment. DETAILED DESCRIPTION OF THE INVENTION
[0015] An electronic lock device and a processing method for the electronic lock device to which the present invention is applied will be described below with reference to the drawings. FIG. 1 is a schematic diagram showing an example of an electronic lock system 1 according to an embodiment. The electronic lock system of the embodiment includes a battery-less electronic lock device 100 and an electronic device 200. The battery-less electronic lock device 100 is not connected to a commercial power source, but generates power from electromagnetic waves output from the electronic device 200, and operates each component of the electronic lock device 100 using the power generated by the electromagnetic waves. The electronic lock device 100 activates and operates each of its built-in components using the power generated by the electromagnetic waves. In the embodiment, the electronic lock device 100 is described as being battery-less, but the present invention is not limited to this and is also applicable to an electronic lock device 100 that is connected to a power source.
[0016] 1, an electronic lock system 1 according to an embodiment includes, for example, one or more electronic lock devices 100 and one or more electronic devices 200. The electronic lock device 100 locks and unlocks the door 10 to permit and prohibit opening and closing of the door 10 using the handle 12. The electronic device 200 is, for example, a mobile terminal device such as a smartphone held by a user, a mobile terminal device such as a smartphone held by an administrator who manages the operation of the electronic lock device 100, or an inspection device used during the manufacture of the electronic lock device 100.
[0017] The electronic device 200 includes, for example, an NFC (Near Field Communication) communication circuit 202 as a communication unit, a processing unit 204, a user interface unit 206, and a storage unit 208. The NFC communication circuit 202 transmits and receives electromagnetic waves compatible with NFC. When the electronic device 200 is in a state where it can communicate with the electronic lock device 100, the NFC communication circuit 202 continues to transmit electromagnetic waves to the electronic lock device 100, thereby continuing to supply power. The processing unit 204 is realized by a processor such as a CPU (Central Processing Unit) executing a program stored in a program memory. The processing unit 204 controls the NFC communication circuit 202, the processing unit 204, the user interface unit 206, and the storage unit 208. The user interface unit 206 includes, for example, a display device, an operation input device, and an audio input / output device. The storage unit 208 is realized by, for example, a flash memory or an EEPROM (Electrically Erasable Programmable Read Only Memory).
[0018] 2 is a block diagram showing an example of the configuration of electronic lock device 100 according to the embodiment. Electronic lock device 100 includes, for example, antenna unit 110, IC chip 120, rectifier circuit 140, control microcomputer 150, and locking / unlocking mechanism 160. In the present embodiment, locking / unlocking mechanism 160 may perform both locking and unlocking operations, but is not limited to this and may only perform unlocking.
[0019] The antenna unit 110 generates power from electromagnetic waves output from the electronic device 200. The antenna unit 110 receives, for example, electromagnetic waves compatible with NFC from the electronic device 200. The transmission method of the electromagnetic waves compatible with NFC is, for example, a radio wave method (microwave method), but it may also be an electromagnetic induction method. If the electromagnetic waves for NFC communication are in the UHF band or 2.45 GHz band, the electromagnetic waves may be transmitted and received using a radio wave method (microwave method). If the electromagnetic waves for NFC communication are in a low frequency of 13.56 MHz or less, the electromagnetic waves may be transmitted and received using an electromagnetic induction method. The antenna unit 110 outputs an electric signal corresponding to the electromagnetic waves received from the electronic device 200 to the IC chip 120.
[0020] The IC chip 120 performs a predetermined decoding process on the electrical signal corresponding to the electromagnetic waves, acquires various pieces of information transmitted from the electronic device 200, and performs a process of locking or unlocking the door 10.
[0021] The rectifier circuit 140 generates DC power by rectifying an electrical signal corresponding to the electromagnetic waves, and supplies the DC power to the control microcomputer 150 and the locking / unlocking mechanism 160. When the control microcomputer 150 receives a lock / unlock signal from the IC chip 120 , it outputs a drive signal to the lock / unlock mechanism 160 .
[0022] The locking / unlocking mechanism 160 moves the tip of the deadbolt 162 toward the strike 13 of the door 10 in accordance with the drive signal. The locking / unlocking mechanism 160 may include an actuator such as a solenoid and a motor, and may include a cylinder that generates a drive force, such as a hydraulic cylinder, a pneumatic cylinder, or a water hydraulic cylinder, or may include an artificial muscle (soft actuator) using a polymer.
[0023] Regarding locking, the door 10 may be automatically locked (auto-locked) when closed using a latch mechanism (such as a spring) of the locking / unlocking mechanism 160. In this case, the locking / unlocking mechanism 160 compresses a spring attached to a latch bar (a rod-shaped member) when unlocking. When the locking / unlocking mechanism 160 is stopped, the latch is automatically locked due to the spring's restoring force. However, the spring is merely an example, and rubber or other elastic materials may also be used. The latch bar may also be a cylindrical part (such as a cylinder) that contains a fluid such as gas or liquid. In practice, these examples are not limited to these, and an auto-locking method that does not require power for locking may also be used. In this case, the electronic locking device 100 can maintain the unlocked state by constantly receiving electromagnetic waves compatible with NFC. However, a mechanism (such as a lock and a stopper) that can maintain the unlocked state after unlocking and release the unlocked state when locking may also be provided.
[0024] The battery-less electronic lock device 100 shown in Fig. 2 operates by receiving power from an electronic device 200 such as a mobile terminal. When the electronic lock device 100 receives power from the electronic device 200, the program in the IC chip 120 runs and the electronic lock device 100 enters a state of waiting for commands from the electronic device 200. In the command waiting state, the electronic lock device 100 processes the command received from the electronic device 200, transmits the processing result, and then enters a state of waiting for commands again.
[0025] FIG. 3 is a diagram showing an example of the internal configuration of IC chip 120 according to the embodiment. The IC chip 120 includes, for example, an I / O 122, a CPU 124, a nonvolatile memory 126, and a RAM 128. The I / O 122 communicates with the electronic device 200 via the antenna unit 110. The CPU 124 performs various types of arithmetic processing. The nonvolatile memory 126 stores various types of information required for the operation of the electronic lock device 100. The nonvolatile memory 126 may be configured with an EEPROM and a PROM. If the nonvolatile memory 126 serving as the storage unit of the electronic lock device 100 is a flash memory, it may be divided into an area for storing various types of information (a system area and a data area) and a program area. The RAM 128 is a volatile memory and functions as a work area for storing the results of calculations by the CPU 124 and the like.
[0026] 4 is a diagram showing an example of the functional configuration of IC chip 120 according to the embodiment. IC chip 120 includes, for example, interface unit 130, authentication unit 131, mode change unit 132, determination unit 133, processing unit 134, storage unit 135, and lock / unlock signal output unit 136. Interface unit 130, authentication unit 131, mode change unit 132, determination unit 133, processing unit 134, storage unit 135, and lock / unlock signal output unit 136 operate using power generated by antenna unit 110. Authentication unit 131, mode change unit 132, determination unit 133, and processing unit 134 are functional units corresponding to functions of electronic lock device 100 that are realized by CPU 124 executing a program.
[0027] The interface unit 130 functions as a communication unit that communicates with the electronic device 200 . The authentication unit 131 operates using power generated by the antenna unit 110, and performs authentication processing based on authentication information received from the electronic device 200 and authentication information stored in the storage unit 135. Locking and unlocking are performed based on the authentication result of the authentication processing. The mode change unit 132 changes the operation mode of the electronic lock device 100 among multiple modes based on a mode change command supplied from the electronic device 200. The multiple modes are, for example, a manufacturing mode, a shipping mode, and an operation mode, but are not limited to these, and there may be more or fewer modes than the three modes of the manufacturing mode, shipping mode, and operation mode, and other operation modes may be mixed in. If the electronic lock device 100 has a blocked mode, the mode change unit 132 changes the mode to the blocked mode based on a mode change command. When a command is supplied from the electronic device 200, the determination unit 133 determines, based on the mode condition information, whether the supplied command is executable in the current operation mode indicated by the mode condition information. When the determination unit 133 determines that the command is executable in the current operation mode, the processing unit 134 performs a predetermined process based on the command. After performing the predetermined process, the processing unit 134 transmits the processing result to the electronic device 200 and waits for a command again. The storage unit 135 stores mode information indicating the current operation mode of the electronic lock device 100, and mode condition information indicating the correspondence with commands that can be executed in the operation mode. The locking / unlocking signal output unit 136 outputs a locking signal for locking and an unlocking signal for unlocking in response to successful authentication by the authentication unit 131. The locking / unlocking unit may be any one of the components for locking and unlocking the door 10, such as the locking / unlocking signal output unit 136, the control microcomputer 150, and the locking / unlocking mechanism 160.
[0028] FIG. 5 is a diagram showing an example of information stored in the storage unit 135 (non-volatile memory 126) in the embodiment. The storage unit 135 is divided into a system area, a data area, and a program area. The system area stores data area management information and electronic lock status information. The data area management information includes, for example, the starting address of the data area, the data area size, and the starting addresses and sizes of various information. The electronic lock status information includes, for example, mode information. The mode information is information that indicates the current operating mode of the electronic lock device 100. The data area stores administrator information, electronic lock information, and authentication-related information. Administrator information includes the management company name and administrator ID. Electronic lock information includes the electronic lock ID. Authentication-related information includes the manufacturer's authentication ID and manufacturer's authentication information, the administrator's authentication ID and administrator's authentication information, and the user's authentication ID and user's authentication information. The program area stores programs and mode condition information. The programs are programs that are executed by the CPU 124.
[0029] FIG. 6 is a diagram showing an example of mode information according to the embodiment. The mode information defines the operation mode of the electronic lock device 100 by a value assigned to each of, for example, eight bits. For example, b0 corresponds to the manufacturing mode, b1 corresponds to the shipping mode, b2 corresponds to the operation mode, and b3 corresponds to the blocked mode. In manufacturing mode, the nonvolatile memory 126 is set to an initial value at the time of manufacture, so the mode information is set to a meaningless value. However, when the nonvolatile memory 126 is formatted in manufacturing mode and a management area and data area are configured, the mode information takes on meaning depending on the values assigned to specific bit positions. When the nonvolatile memory 126 is formatted, b0 is set in the mode information. Other bits are also set when specific commands are processed, and the operating mode changes. As the operating mode changes, the bits are set in order from b0 to the most significant bit. For example, when only memory formatting is performed, the mode information is set to "h'01 (b'00000001)" indicating the manufacturing mode. The mode information is set to "h'03 (b'00000011)" in the shipping mode, "h'07 (b'00000111)" in the operational mode, and "h'0F (b'00001111)" in the blocked mode.
[0030] FIG. 7 is a diagram showing an example of mode information in the manufacturing mode according to the embodiment. When the operation mode of the electronic lock device 100 is the manufacturing mode, the mode information b0 is set to "1" and b1, b2, and b3 are set to "0." This allows the electronic lock device 100 to recognize that the manufacturing mode is permitted and the shipping mode, operation mode, and block mode are prohibited.
[0031] FIG. 8 is a diagram showing an example of mode condition information corresponding to each of a plurality of commands in the embodiment. The mode condition information is mode information indicating the current operating mode of the electronic lock device 100, and information indicating the correspondence with commands that can be executed in the operating mode. The mode condition information shown in Fig. 8, for example, corresponds a number, a command name, and information indicating prohibition or permission for each operating mode. For example, the mode condition information for number "1" indicates that the command name "test memory" is permitted to be executed in manufacturing mode, prohibited to be executed in shipping mode, prohibited to be executed in operation mode, and prohibited to be executed in blockage mode.
[0032] The test memory command is a command that is permitted to be executed in the manufacturing mode, and is a command that checks whether there are any abnormalities in the memory of the electronic lock device 100 from the manufacturing process at the factory until shipping, for example.
[0033] The authentication command is a command that is permitted to be executed in the manufacturing mode, shipping mode, operation mode, and blocked mode. The authentication command is, for example, a command to perform authentication required for the execution authority of various commands. The authentication includes manufacturer authentication, administrator authentication, user authentication, etc.
[0034] The information update command is a command that is permitted to be executed in the manufacturing mode, shipping mode, and operation mode, and is prohibited to be executed in the blocking mode. The information update command is, for example, a command for a manufacturer to provisionally write information required for a function test of the electronic lock device 100, or a command for an administrator to update (write) information required for the operation of the electronic lock device 100 (for example, an electronic lock ID, administrator information, etc.).
[0035] The mode change command is a command that is permitted to be executed in the manufacturing mode and the shipping mode, but prohibited to be executed in the operation mode and the blocking mode. The mode change command is, for example, a command to transition the operation mode in the order of manufacturing mode, shipping mode, and operation mode. When the mode change unit 132 receives a mode change command, if the authentication information for the current operation mode matches the authentication information supplied from the electronic device 200, and the operation modes specified by the command to transition the operation mode are in the order, the mode change unit 132 transitions the current operation mode in the order.
[0036] The lock / unlock command is a command that is permitted to be executed in the shipping mode and the operation mode, and prohibited to be executed in the manufacturing mode and the blockage mode. The lock / unlock command is typically a command to lock or unlock the door 10 in the operation mode, or a command to test the lock or unlock function in the shipping mode.
[0037] The blocking command is a command that is permitted to be executed in the shipping mode and the operation mode, but is prohibited to be executed in the manufacturing mode and the blocking mode. The blocking command is a command that prevents the user from locking or unlocking the door in the operation mode. The operation modes of the electronic lock device 100 include a blocked mode that prohibits the user from locking or unlocking the door. The nonvolatile memory 126 stores authentication information for the blocked mode, and the CPU 124 determines whether the authentication information for the blocked mode matches the authentication information supplied from the electronic device 200, and if both pieces of authentication information match, sets the operation mode to the blocked mode.
[0038] The unlock command is a command that is permitted to be executed in the shipping mode and the blocking mode, but is prohibited to be executed in the manufacturing mode and the operation mode. The unlock command is typically a command to lock or unlock the door 10 in the operation mode, or a command to test the lock or unlock function in the shipping mode.
[0039] FIG. 9 is a diagram showing an example of mode condition information according to the embodiment. The mode condition information is composed of, for example, 8-bit data. b0 stores a value indicating whether to allow or prohibit manufacturing mode, b1 stores a value indicating whether to allow or prohibit shipping mode, b2 stores a value indicating whether to allow or prohibit operation mode, and b3 stores a value indicating whether to allow or prohibit blockage mode. For example, the value indicating allowance is "1," and the value indicating prohibition is "0." Specifically, the mode condition information corresponding to the test memory command stores a value indicating permission in b0, a value indicating prohibition in b1, a value indicating prohibition in b2, and a value indicating prohibition in b2.
[0040] FIG. 10 is a diagram showing another example of mode information in the embodiment, and FIG. 11 is a diagram showing another example of mode condition information in the embodiment. When the operating mode of the electronic lock device 100 is the operation mode, the mode information has values of b0, b1, and b2 of "1" and value of b3 of "0" as shown in Fig. 10. When a lock / unlock command is received in the operation mode, the electronic lock device 100 refers to the mode condition information stored in correspondence with the lock / unlock command as shown in Fig. 11. The mode condition information indicates that execution of the command is prohibited in the manufacturing mode, permitted in the shipping mode, permitted in the operation mode, and prohibited in the blocking mode. When the electronic lock device 100 performs an AND logic operation on the value "0111" stored in the mode information and the value "0110" stored in the mode condition information, the result is b3-0=0110. Since the current mode is the operating mode with "1" set to the far left in the mode information, when "b2" is checked, the calculated value b2=1, so it can be determined that execution is permitted. For example, if the mode information indicates the blocked mode, b3=1 in the mode information, so b3-0=1111, and when a lock / unlock command is received, the mode condition information for the lock / unlock command is b3-0=0110, so the result of the AND logic operation is b3-0=0110. And because the highest-order b3 in the mode information is 1, checking the operation result b3 reveals that b3=0, so it can be determined that execution is prohibited.
[0041] FIG. 12 is a flowchart showing an example of the operation of the electronic lock device 100 according to the embodiment. When the electronic device 200 is brought close to the electronic lock device 100 and transmits NFC-compatible electromagnetic waves to the electronic lock device 100, the electronic lock device 100 converts the electromagnetic waves into electromotive force via the antenna unit 110, supplying power to the IC chip 120, the rectifier circuit 140, the control microcomputer 150, and the locking / unlocking mechanism 160. This activates the IC chip 120, and it transitions to a standby state for receiving commands from the electronic device 200 (step S100).
[0042] The electronic lock device 100 determines whether or not it has received a command from the electronic device 200 (step S102). If it has not received a command, it continues to wait (step S102: NO). If it has received a command (step S102: YES), it reads mode condition information corresponding to the command (step S104). Based on the mode condition information, the electronic lock device 100 determines whether the supplied command is executable in the current operating mode indicated by the mode condition information (step S106). At this time, the electronic lock device 100 recognizes the current operating mode using the mode information, and determines whether the current operating mode is permitted or prohibited using the mode condition information.
[0043] If the electronic lock device 100 determines that the received command is executable (permitted) in the current operating mode (step S108: YES), it proceeds to a subroutine for executing the received command (step S110). If the subroutine determines that the command is executable in the current operating mode, it performs a predetermined process based on the command. If the predetermined process corresponding to the command is completed normally (step S112: YES), the electronic lock device 100 prepares a normal response (step S114) and transmits the normal response to the electronic device 200 (step S120).
[0044] If the predetermined processing corresponding to the command does not end normally (step S112: NO), the electronic lock device 100 prepares an abnormal response (step S116) and sends the abnormal response to the electronic device 200 (step S120). If the electronic lock device 100 determines that the command is not executable in the current operating mode, it notifies the electronic device 200 by sending an abnormal response. For example, the electronic lock device 100 may notify the electronic device 200 by sending a message such as "This command does not work in the current operating mode," or by sounding a buzzer or by displaying a message.
[0045] FIG. 13 is a flowchart showing an example of processing when the electronic lock device 100 according to the embodiment receives a mode change command. When the electronic lock device 100 receives a mode change command from the electronic device 200 and determines that the command can be executed (step S108: YES), it checks the authentication conditions (step S200). If the mode change command is a command to transition from manufacturing mode to shipping mode, the authentication condition is that the authentication of the manufacturer authentication information has been successful. If the mode change command is a command to transition from shipping mode to operation mode, the authentication condition is that the authentication of the administrator authentication information has been successful.
[0046] The nonvolatile memory 126 of the electronic lock device 100 stores authentication information for executing an operation mode in association with the operation mode. The authentication information for executing an operation mode may be authentication information for each operation mode, or may be authentication information corresponding to a person corresponding to the operation mode. In the subroutine described in Figures 13 to 17, when it is determined that the command is executable in the current operation mode, the CPU 124 (processing unit) determines whether the authentication information for executing the operation mode matches the authentication information supplied from the electronic device 200 that sent the command, and if both pieces of authentication information match, performs a predetermined process based on the command.
[0047] If the authentication conditions are met as a result of checking the authentication conditions (step S202: YES), the electronic lock device 100 checks whether the operation mode (designated mode) designated by the mode change command is the operation mode next to the current operation mode (step S206). If the designated mode is the operation mode next to the current operation mode (step S206: YES), the electronic lock device 100 switches the operation mode to the designated mode (step S208) and sets a normal response indicator (step S210). As a result, the electronic lock device 100 changes the operation mode of the electronic lock device 100 between the manufacturing mode, shipping mode, and operation mode based on the mode change command supplied from the electronic device 200.
[0048] If, after checking the authentication conditions, the electronic lock device 100 finds that the authentication conditions are not met (step S202: NO), or if the specified mode is not the next operating mode of the current operating mode (step S206: NO), it sets an abnormal response indicator (step S212).
[0049] FIG. 14 is a flowchart showing an example of processing when the electronic lock device 100 according to the embodiment receives a command to start the blocked mode. When the electronic lock device 100 receives the blockage mode start command from the electronic device 200 and determines that the command can be executed (step S108: YES), the electronic lock device 100 checks the authentication conditions (step S300). The authentication condition when the blockage mode start command is received is that the authentication of the administrator authentication information has been successful.
[0050] If the electronic lock device 100 checks the authentication conditions and finds that the authentication conditions are met (step S302: YES), it changes the operating mode to the blocked mode in accordance with the blocked mode start command (step S304) and sets a normal response indicator (step S306).
[0051] If the authentication conditions are not met as a result of checking the authentication conditions, the electronic lock device 100 sets an abnormal response indicator (step S302: NO, step S308).
[0052] FIG. 15 is a flowchart showing an example of processing when the electronic lock device 100 according to the embodiment receives a command to release the blocked mode. When the electronic lock device 100 receives the blockage mode release command from the electronic device 200 and determines that the command can be executed (step S108: YES), it checks the authentication conditions (step S400). The authentication condition when the blockage mode release command is received is that the authentication of the administrator authentication information has been successful.
[0053] If the electronic lock device 100 checks the authentication conditions and finds that the authentication conditions are met (step S402: YES), it changes the operating mode to the operational mode in accordance with the blockage mode release command (step S404) and sets a normal response indicator (step S406).
[0054] If the authentication conditions are not met as a result of checking the authentication conditions, the electronic lock device 100 sets an abnormal response indicator (step S402: NO, step S408).
[0055] FIG. 16 is a flowchart showing an example of processing when the electronic lock device 100 according to the embodiment receives a lock / unlock command. When the electronic lock device 100 receives a lock / unlock command from the electronic device 200 and determines that the command can be executed (step S108: YES), it determines whether the door ID received from the electronic device 200 matches the door ID stored in the nonvolatile memory 126 (step S502). If the two door IDs do not match, it sets an abnormal response indicator (step S502: NO, step S512).
[0056] If both door IDs match, the electronic lock device 100 checks whether the user authentication information received from the electronic device 200 matches the user authentication information stored in the nonvolatile memory 126 (step S504). If both user authentication information match and authentication is successful (step S506: YES), the electronic lock device 100 outputs an unlock signal to the control microcomputer 150 from the lock / unlock signal output unit 136, and performs an unlocking operation by causing the control microcomputer 150 to operate the lock / unlock mechanism 160 (step S508), and sets a normal response indicator (step S510).
[0057] If the user authentication information matches and the authentication fails, the electronic lock device 100 sets an abnormal response indicator (step S506: NO, step S512).
[0058] FIG. 17 is a flowchart showing an example of processing when the electronic lock device 100 according to the embodiment receives an information update command. The electronic lock device 100 receives an information update command from the electronic device 200, and if it confirms that the current operating mode is the shipping mode or the operation mode and determines that execution is possible (step S108: YES), it checks the authentication conditions (step S600). The authentication condition when an information update command is received is that the authentication of the administrator authentication information has been successful.
[0059] If the authentication conditions are met as a result of checking the authentication conditions (step S602: YES), the electronic lock device 100 updates the designated information in the area where the designated information specified by the information update command is stored to the designated information specified by the information update command (step S604), and sets a normal response indicator (step S606). For example, when an information update command to update the electronic lock ID is received, the designated information is written by writing the electronic lock ID included in the information update command to the area where the electronic lock ID was written.
[0060] If the authentication conditions are not met as a result of checking the authentication conditions, the electronic lock device 100 sets an abnormal response indicator (step S602: NO, step S608).
[0061] As described above, according to the electronic lock device 100 of the embodiment, the operating mode of the electronic lock device 100 is changed among a plurality of modes based on a mode change command supplied from the electronic device 200. In this electronic lock device 100, the nonvolatile memory 126 stores mode information indicating the current operating mode of the electronic lock device 100 and mode condition information indicating correspondence with commands executable in the operating mode. When a command is supplied from the electronic device 200, the electronic lock device 100 determines, based on the mode condition information, whether the supplied command is executable in the current operating mode indicated by the mode condition information, and if it is determined that the supplied command is executable in the current operating mode, it can perform a predetermined process based on the command.
[0062] In this electronic lock device 100, the storage state of the information stored in nonvolatile memory 126 changes during the process from manufacture to operation, but mode information is stored in nonvolatile memory 126 to enable necessary functions to operate or prevent unnecessary functions from operating during the change process. Furthermore, when electronic lock device 100 processes multiple commands, mode condition information for setting an executable operating mode for each command is stored in nonvolatile memory 126. As a result, when electronic lock device 100 receives a command, it can check the current operating mode using the mode information stored in nonvolatile memory 126 in IC chip 120 and confirm whether it is OK to execute the command using the mode condition information.
[0063] According to the electronic lock device 100, the state of the electronic lock device 100 can be easily confirmed by storing mode information in the nonvolatile memory 126. Furthermore, according to the electronic lock device 100, by setting mode condition information for each command, it is possible to easily determine whether a received command can be executed under the current mode information, and therefore it is possible to reliably eliminate the execution of commands that are unnecessary to execute in the current operating mode. As a result, the electronic lock device 100 can reliably process commands required in the current operating mode without complicating the program processing of the IC chip 120.
[0064] Furthermore, according to the electronic lock device 100, when the operating mode is the shipping mode or the operation mode, the execution of commands that may cause changes to the memory state, such as unnecessary "initial setting commands" and "write commands" in the shipping mode or the operation mode, is prohibited, thereby improving security.
[0065] When a command prohibited from being executed in the current operating mode is received, if response information indicating a mode abnormality is sent to the electronic device 200, it cannot be executed in the current operating mode, but it can be determined from the outside that this command is supported as a command that can be executed in another operating mode, which could lead to an unauthorized attack. In response to this, the electronic lock device 100 changes the type of response information indicating a mode abnormality to an abnormal response indicating that the command is not supported by the electronic lock device 100, and by sending response information indicating that it is not supported, it can be determined from the outside that only the command required for the current operating mode is supported, making it difficult to attack the IC chip 120.
[0066] In this way, the electronic lock device 100 is authorized to register new information through authentication processing of temporary authentication information preset by the manufacturer, and it is necessary to register (update) the information in the authentication information managed by the administrator (purchaser) of the electronic lock device 100, but it can appropriately process commands taking into account changes in the operation mode of the electronic lock device 100. In other words, the electronic lock device 100 takes into account the life cycle of the operation mode, such as manufacturing, shipping, and operation of the electronic lock device 100, and can easily confirm whether the received command is permitted or prohibited from execution in the operation mode at that time.
[0067] Although each embodiment and variant example has been described, these are merely examples and are not intended to limit the scope of the present invention. For example, one of the embodiments or variant examples, or a part of each embodiment or a part of each variant example, may be combined with one or more other embodiments or one or more other variant examples to realize one aspect of the present invention. [Explanation of symbols]
[0068] 1. Electronic lock system 10 doors 12 Handle 13 Strike 26 Security control device 100 Electronic Locking Device 110 Antenna section 120 IC chips 126 Non-volatile memory 130 Interface section 131 Authentication Department 132 Mode change section 133 Judgment section 134 Processing section 135 Storage section 136 Unlock signal output unit 140 Rectifier circuit 150 Control Microcomputer 160 Unlocking mechanism 162 Deadbolt 200 Electronic equipment 202 NFC communication circuit 204 Processing section 206 User Interface Section 208 Storage section
Claims
1. An electronic locking device that performs authentication processing based on authentication information received from an electronic device and locks or unlocks based on the authentication result of the authentication processing, a communication unit that communicates with the electronic device; a mode change unit that changes the operation mode of the electronic lock device among a plurality of modes based on a mode change command supplied from the electronic device; a storage unit that stores mode information indicating a current operation mode of the electronic lock device and mode condition information indicating a correspondence between the mode and an executable command; a determination unit that, when the command is supplied from the electronic device, determines based on the mode condition information whether the supplied command is executable in the current operation mode indicated by the mode condition information; a processing unit that performs a predetermined process based on the command when the determining unit determines that the command is executable in the current operation mode; An electronic lock device comprising:
2. the communication unit includes an antenna unit that generates power using electromagnetic waves output from the electronic device, the mode change unit, the determination unit, and the processing unit operate using power generated by the antenna unit, The storage unit is a non-volatile memory. The electronic lock device according to claim 1.
3. The electronic lock device described in claim 1 or 2, wherein when the judgment unit determines that the command is not executable in the current operating mode, the processing unit changes the type of response from indicating a mode abnormality to an abnormal response indicating that the command is not supported by the electronic lock device, and sends an abnormal response to the electronic device.
4. the storage unit stores authentication information for performing the operation mode; When the determination unit determines that the command is executable in the current operation mode, the processing unit determines whether the authentication information for executing the operation mode matches the authentication information supplied from the electronic device that transmitted the command, and when both pieces of authentication information match, performs a predetermined process based on the command.
3. An electronic lock device according to claim 1 or 2.
5. The operation mode is set to transition between a plurality of modes in a predetermined order, when the mode change unit receives the mode change command, if the authentication information for performing the current operation mode matches the authentication information supplied from the electronic device and the operation modes specified by the command to transition the operation mode follow the order, the mode change unit transitions the current operation mode in the order. The electronic lock device according to claim 4.
6. The operation modes include a blocking mode in which the user is prohibited from locking or unlocking the door; the storage unit stores authentication information for performing the blocked mode; the processing unit determines whether the authentication information for executing the blocked mode matches the authentication information supplied from the electronic device, and sets the operation mode to the blocked mode when both pieces of authentication information match. The electronic lock device according to claim 4.
7. A processing method for an electronic lock device that performs authentication processing based on authentication information received from an electronic device and locks or unlocks based on the authentication result of the authentication processing, changing the operation mode of the electronic lock device among a plurality of modes based on a mode change command supplied from the electronic device; storing mode information indicating a current operation mode of the electronic lock device and mode condition information indicating a correspondence between the mode and an executable command in the operation mode; a step of determining, when the command is supplied from the electronic device, whether the supplied command is executable in the current operation mode indicated by the mode condition information, based on the mode condition information; performing a predetermined process based on the command when it is determined that the command is executable in the current operation mode; A method for processing an electronic lock device, comprising:
Citation Information
Patent Citations
Electronic key system for vehicle
JP2012067489A