Electric lock system, registration method, and program

Abstract

This provides an electric lock system that can prevent authentication information from being secretly registered. [Solution] The electric lock system 10 includes a registration unit 54a that registers authentication information read by a reader 52 installed in the facility as authorization authentication information that permits unlocking of the electric lock 40 installed on the facility's door, and an authentication unit 54b that unlocks the electric lock 40 when the authentication information read by the reader 52 is registered as authorization authentication information. The registration unit 54a, when it has at least one authorization authentication information registered and has received a request to register new authentication information, queries the registered user corresponding to the registered authorization authentication information to ask whether or not to permit the registration of the new authentication information.

Description

Technical Field

[0001] The present invention relates to an electric lock system.

Background Art

[0002] Patent Document 1 discloses an electric lock system without a communication function that appropriately authenticates that a mobile terminal requesting unlocking has unlocking authority.

Prior Art Documents

Patent Documents

[0003]

Patent Document 1

Summary of the Invention

Problems to be Solved by the Invention

[0004] The present invention provides an electric lock system or the like that can suppress the unauthorized registration of authentication information.

Means for Solving the Problems

[0005] An electric lock system according to an aspect of the present invention includes a registration unit that registers authentication information read by a reading device provided in a facility as permission authentication information for permitting unlocking of an electric lock provided on a door of the facility, and an authentication unit that unlocks the electric lock when the authentication information read by the reading device is registered as the permission authentication information. The registration unit, when at least one piece of the permission authentication information is registered and a registration request for new authentication information is acquired, makes an inquiry to a first user corresponding to the registered permission authentication information as to whether to permit registration of the new authentication information.

[0006] A registration method according to one aspect of the present invention is a registration method performed by a computer, comprising: a registration step of registering authentication information read by a reader installed in a facility as authorization authentication information that permits unlocking an electric lock installed on the door of the facility; an authentication step of unlocking the electric lock when the authentication information read by the reader is registered as authorization authentication information; and a query step of querying a first user corresponding to the registered authorization authentication information whether or not to permit the registration of the new authentication information when at least one authorization authentication information is registered and a request for registration of new authentication information is received.

[0007] A program according to one aspect of the present invention is a program that causes the computer to execute the registration method described above. [Effects of the Invention]

[0008] The electric lock system and the like of the present invention can prevent authentication information from being secretly registered. [Brief explanation of the drawing]

[0009] [Figure 1] Figure 1 is a diagram showing an overview of an electric lock system according to an embodiment. [Figure 2] Figure 2 is a block diagram showing the configuration of an electric lock system according to an embodiment. [Figure 3] Figure 3 is a flowchart of Example 1 of the registration process. [Figure 4] Figure 4 shows an example of an inquiry screen. [Figure 5] Figure 5 is a flowchart of Example 2 of the registration process. [Figure 6] Figure 6 is a flowchart of Example 3 of the registration process. [Figure 7] Figure 7 shows an example of the authentication screen for a registered user. [Modes for carrying out the invention]

[0010] The embodiments will be described in detail below with reference to the drawings. Note that the embodiments described below are all comprehensive or specific examples. The numerical values, shapes, materials, components, arrangement positions and connection configurations of components, steps, and the order of steps shown in the following embodiments are examples only and are not intended to limit the present invention. Furthermore, components in the following embodiments that are not described in an independent claim will be described as optional components.

[0011] Please note that each figure is a schematic diagram and not necessarily a strictly accurate representation. Furthermore, in each figure, substantially identical components are denoted by the same reference numerals, and redundant explanations may be omitted or simplified.

[0012] (Embodiment) [composition] The configuration of the electric lock system according to the embodiment will be described below. Figure 1 is a diagram showing an overview of the electric lock system according to the embodiment. Figure 2 is a block diagram showing the configuration of the electric lock system according to the embodiment.

[0013] The electric lock system 10 shown in Figures 1 and 2 is a system for managing the entry and exit of people to and from facility 100. Doors 30 are provided at the entrances to facility 100 (for example, the front door of a house). Facility 100 is, for example, a house. Facility 100 is not limited to a house; it may also be an apartment building, an office building, a hospital, or a nursing home. Doors 30 are, for example, hinged doors, but may also be sliding doors. In the following description, the entrances to facility 100 are described as places for moving between the outside and inside of facility 100, but the entrances to facility 100 may also be located inside facility 100.

[0014] The electric lock system 10 includes a plurality of electric locks 40, an authentication device 50, a control device 60, a server device 70, a mobile terminal 80, and a mobile terminal 81. The electric locks 40, the authentication device 50, and the control device 60 are provided on the door 30. Note that the electric lock system 10 does not necessarily include all the devices shown in FIG. 1 or FIG. 2, and may not include some of the devices.

[0015] The door 30 is a door for restricting the entry and exit of people. The door 30 is a door that is locked and unlocked by a plurality of electric locks 40.

[0016] The electric lock 40 is provided on the door 30. When the electric lock 40 is locked, the door 30 cannot be opened or closed. When the electric lock 40 is unlocked, the door can be opened or closed. The locking or unlocking of the electric lock 40 is performed, for example, based on the authentication result of the authentication device 50. However, from the indoor side of the door 30, it can also be manually locked or unlocked. Note that one electric lock 40 is provided at the upper and lower parts of the door 30, but at least one may be provided.

[0017] The specific form of the electric lock 40 is not particularly limited. For example, it has a deadbolt, an electric motor, and a transmission mechanism for transmitting the driving force of the electric motor to the deadbolt. The electric motor is driven according to a control signal output from the control device 60.

[0018] The authentication device 50 is a device that performs authentication processing. When the authentication processing is successful, the authentication device 50 outputs unlocking information for unlocking the electric lock 40. The authentication device 50 is provided, for example, on the door 30. Specifically, the authentication device 50 is provided on the door handle of the door 30. The authentication device 50 may be provided on a part other than the door 30, such as the wall surface of the facility 100. Also, the authentication device 50 may be built in, for example, an intercom arranged around the door 30.

[0019] Specifically, the authentication device 50 includes a communication unit 51, a reading unit 52, an operation reception unit 53, an information processing unit 54, and a storage unit 55.

[0020] The communication unit 51 is a communication circuit (communication module) for the authentication device 50 to communicate with the server device 70. The communication performed by the communication unit 51 is, for example, wireless communication, but may also be wired communication. The authentication device 50 may communicate with the server device 70 via a mobile terminal 80 that is communicatively connected to the reading unit 52. In this case, the authentication device 50 may not include the communication unit 51.

[0021] The reading unit 52 is a device that reads authentication information. The reading unit 52 reads the authentication information from the mobile terminal 80 (or mobile terminal 81) by performing short-range wireless communication with the mobile terminal 80 (or mobile terminal 81). Examples of the communication standard in this case include Bluetooth (registered trademark) or NFC (Near Field Communication).

[0022] The operation reception unit 53 receives operations from users such as residents. The operation reception unit 53 is realized by a hardware button or a touch panel or the like.

[0023] The information processing unit 54 performs registration processing and authentication processing. The information processing unit 54 is realized by, for example, a microcomputer, but may also be realized by a processor. The information processing unit 54 includes a registration unit 54a and an authentication unit 54b as functional components.

[0024] The registration unit 54a performs registration processing. The registration processing is a process of registering the authentication information read by the reading unit 52 in the storage unit 55 as permission authentication information that permits unlocking of the electric lock 40. <​​The authentication unit 54b performs authentication processing. The authentication processing involves unlocking the electric lock 40 if the authentication information read by the reading unit 52 is registered as authorized authentication information. The authentication unit 54b can unlock the electric lock 40 by outputting unlocking information to the control device 60. However, if the authentication information read by the reading unit 52 is not registered as authorized authentication information, the authentication unit 54b does not unlock the electric lock 40 and maintains the locked state of the electric lock 40.

[0026] The functions of the registration unit 54a and the authentication unit 54b described above are realized, for example, by a microcomputer or processor constituting the information processing unit 54 executing a computer program stored in the storage unit 55.

[0027] The storage unit 55 is a memory device that stores authorization and authentication information, as well as computer programs executed by the information processing unit 54. The storage unit 55 is implemented, for example, by semiconductor memory.

[0028] The control device 60 is a device that controls the locking and unlocking of one or more (in this case, two) electric locks 40. The control device 60 is installed, for example, on a door 30. When the control device 60 obtains unlocking information from the authentication device 50 (authentication unit 54b), it unlocks the electric lock 40 by transmitting a control signal to the electric lock 40.

[0029] The server device 70 is a cloud server for the authentication device 50 to communicate with the mobile terminal 81, and is installed outside the facility 100. As described later, when the authentication device 50 receives a request to register new authentication information, it sends query information to the mobile terminal 81 in which the authentication information is already registered, and the server device 70 is used for sending this query information.

[0030] Furthermore, if the communication unit 51 of the authentication device 50 is a wireless communication circuit that can connect to a mobile communication network, the authentication device 50 can send inquiry information to the mobile terminal 81 without using the server device 70. In this case, the electric lock system 10 does not need to have a server device 70.

[0031] The mobile device 80 is specifically a smartphone or tablet device. The mobile device 80 is a mobile device for which authentication information is not registered with the authentication device 50 (in other words, a mobile device used by a user for whom authentication information is not registered).

[0032] The mobile device 81 is specifically a smartphone or tablet device. The mobile device 81 is a mobile device on which authentication information is registered with the authentication device 50 (in other words, a mobile device used by a user on which authentication information is registered), and functions as a key for the electric lock 40.

[0033] Mobile terminals 80 and 81 have a dedicated application program for the electric lock system 10 (hereinafter also referred to as the dedicated app) installed on them. Authentication information is, for example, a unique identification information (string) of mobile terminal 80 (or mobile terminal 81) that is generated by the dedicated app after the dedicated app is installed.

[0034] After the dedicated app is installed, the initial setup will configure the mobile terminal 80 and mobile terminal 81 with a username, email address, and phone number, as needed.

[0035] [Example of registration operation 1] Next, we will describe Example 1 of the registration operation performed by the authentication device 50. Figure 3 is a flowchart of Example 1 of the registration operation performed by the authentication device 50.

[0036] A user whose authentication information has not been registered (hereinafter also referred to as an unregistered user) prepares a mobile terminal 80 running the dedicated application. In this state, the unregistered user performs a predetermined registration operation to start the registration process, and the operation reception unit 53 accepts the registration operation (S11). Once the registration operation is accepted, short-range wireless communication is started between the reading unit 52 and the mobile terminal 80, and the reading unit 52 receives a registration request from the mobile terminal 80 (S12). The registration request includes the authentication information to be registered, the username, and the ID of the dedicated application. In other words, in step S12, the reading unit 52 reads the authentication information to be registered.

[0037] The registration unit 54a determines whether or not permission authentication information (registered authentication information) is stored in the storage unit 55 (S13). In other words, it determines whether or not at least one mobile terminal 81 has already been registered.

[0038] If authorization authentication information is stored in the storage unit 55, the authorization authentication information is linked to the ID of the dedicated application of the user (hereinafter also referred to as the registered user) corresponding to the authorization authentication information. If the registration unit 54a determines that authorization authentication information is stored in the storage unit 55 (Yes in S13), it sends inquiry information to the ID of the dedicated application (mobile terminal 81) linked to the authorization authentication information as the destination (S14).

[0039] The inquiry information is used to inquire whether or not to allow a registered user to register new authentication information. Specifically, the registration unit 54a communicates with the server device 70 using the communication unit 51, and can send the inquiry information to the user's mobile terminal 81 corresponding to the authorized authentication information via the server device 70. The inquiry information includes the username that was included in the registration request.

[0040] The display unit (not shown) of the mobile terminal 81 that received the inquiry information displays the inquiry screen. Figure 4 shows an example of the inquiry screen. As shown in Figure 4, the inquiry screen indicates that an unregistered user with the username included in the registration request is attempting to register.

[0041] When a registered user selects the permission icon, permission information is sent from the mobile terminal 81 to the authentication device 50. The permission information is information sent by the mobile terminal 81 as a response to the inquiry information, and indicates that the registered user has permitted the registration of the authentication information included in the registration request received in step S12.

[0042] On the other hand, if a registered user selects the reject icon, rejection information is sent from the mobile terminal 81 to the authentication device 50. The rejection information is information sent by the mobile terminal 81, which received the inquiry information, as a response to the inquiry information, and indicates that the registered user has rejected the registration of the authentication information included in the registration request received in step S12.

[0043] After sending the inquiry information, the registration unit 54a determines whether or not the authorization information has been received by the communication unit 51 (S15). If the registration unit 54a determines that the authorization information has been received (Yes in S15), it performs the registration process (S17). Specifically, the registration unit 54a registers the authentication information included in the registration request received in step S12 as authorization authentication information in the storage unit 55. At this time, the registration unit 54a associates the ID of the dedicated application included in the registration request with the authorization authentication information.

[0044] Furthermore, the registration unit 54a sends notification information to the application program ID (mobile terminal 80) to notify that registration is complete (S18). Specifically, the registration unit 54a can send notification information to the mobile terminal 80 via the server device 70 by communicating with the server device 70 using the communication unit 51.

[0045] On the other hand, if permission information is not received by the communication unit 51, or if the communication unit 51 determines that rejection information has been received (No in S15), the registration unit 54a does not register the authentication information included in the registration request received in step S12. In this case, the registration unit 54a stores the unregistered authentication information in the storage unit 55 as access history information (S19). Such access history information can be used for analyzing unauthorized access, etc. Note that the processing in step S19 is not mandatory, and the registration unit 54a may simply discard the unregistered authentication information. The registration unit 54a may also ask the registered user whether to keep the unregistered authentication information as access history information or discard it.

[0046] On the other hand, if in step S13 it is determined that no authorization authentication information is stored in the storage unit 55 (no mobile terminals 80 are registered) (No in S13), the registration unit 54a omits the processing in steps S14 and S15 and performs the registration process (S17) and the notification process (S18).

[0047] As explained above, when the authentication device 50 has at least one authorized authentication piece of information registered and receives a request to register new authentication information, it queries the registered user (the user corresponding to the registered authorized authentication information) to ask whether or not to allow the registration of the new authentication information. Specifically, the authentication device 50 makes this query by communicating with the registered user's mobile terminal 80.

[0048] This allows registered users to receive notifications (inquiries) when new authentication information (mobile device 80) is about to be registered, enabling them to be aware of new authentication information registration requests even when they are away from facility 100. This helps to deter new authentication information from being secretly registered, thereby improving security.

[0049] Furthermore, the authentication device 50 registers the new authentication information as authorized authentication information, provided that the authorization information, which indicates that a registered user has authorized the registration of new authentication information as a result of the inquiry, has been received by the communication unit 51 and transmitted by the mobile terminal 80.

[0050] In this way, the authentication device 50 can prevent unauthorized registration of new authentication information by making permission from a registered user a requirement for registering new authentication information.

[0051] Furthermore, if the authentication device 50 receives rejection information from the registered user's mobile terminal 81, indicating that the registered user has refused to register new authentication information as a result of the inquiry, the communication unit 51 will store the new authentication information as access history information. Such access history information can be used for analyzing unauthorized access (whether a malicious user attempted to unlock the electric lock 40), etc.

[0052] If multiple authorization authentication pieces of information are stored in the storage unit 55, in step S14, the inquiry information may be sent to a mobile terminal 81 (the representative user's mobile terminal 81) corresponding to one predetermined authorization authentication piece of information, or the inquiry information may be sent to multiple mobile terminals 81 corresponding to multiple authorization authentication pieces of information.

[0053] When inquiry information is sent to multiple mobile terminals 81, the registration process in step S17 may be performed on the condition that permission information is received from all of the multiple mobile terminals 81 to which the inquiry information was sent, or on the condition that permission information is received from at least one of the multiple mobile terminals 81. Alternatively, the registration process in step S17 may be performed on the condition that permission information is received from a predetermined number or more (for example, more than half) of the multiple mobile terminals 81.

[0054] [Example of registration operation 2] Next, we will describe an example of registration operation 2 performed by the authentication device 50. Figure 5 is a flowchart of example 2 of registration operation performed by the authentication device 50.

[0055] The processing in steps S11 to S15 is the same as in Example 1 of the registration operation, so a detailed explanation is omitted. After step S15, the registration unit 54a determines whether the mobile terminal 80 is located within a predetermined range from the reading unit 52 (in other words, in the vicinity of the reading unit 52) ​​(S16). For example, the registration unit 54a attempts to establish a short-range wireless communication connection with the mobile terminal 80 using the reading unit 52, and if the communication connection is successful, it can determine that the mobile terminal 80 is located within a predetermined range from the reading unit 52 (i.e., within the range where short-range wireless communication is possible). Also, if the communication connection fails, the registration unit 54a can determine that the mobile terminal 80 is located outside the predetermined range from the reading unit 52.

[0056] If the registration unit 54a determines that the mobile terminal 80 is located within a predetermined range from the reading unit 52 (Yes in S16), it performs registration processing (S17) and notification processing (S18). On the other hand, if the registration unit 54a determines that the mobile terminal 80 is located outside the predetermined range from the reading unit 52 (No in S16), it stores the authentication information that was not registered as access history information in the storage unit 55 (S19). The processing in step S19 is not mandatory, and the registration unit 54a may simply discard the authentication information that was not registered. The registration unit 54a may also ask the registered user whether to keep the authentication information that was not registered as access history information or discard it.

[0057] Thus, in Example 2 of the registration operation, the authentication device 50 registers new authentication information as authorized authentication information, provided that the authorization information is received by the communication unit 51 and the mobile terminal 80 is located within a predetermined range from the reading unit 52. This prevents users who cannot bring their mobile terminal 80 close to the reading unit 52 from fraudulently registering authentication information.

[0058] [Example of registration operation 3] In Example 1 of the registration operation, it was explained that authentication information that was not registered is stored in the storage unit 55 as access history information. Here, authentication information that was not registered based on rejection information is added to the registration rejection list, and authentication information added to the registration rejection list may be automatically rejected for registration. Example 3 of such a registration operation will be described below. Figure 6 is a flowchart of Example 3 of the registration operation performed by the authentication device 50.

[0059] The processing in steps S11 and S12 is the same as in Example 1 of the registration operation, so a detailed explanation is omitted. After step S12, the registration unit 54a determines whether or not the authentication information included in the registration request is in the registration rejection list (listed) (S20).

[0060] If the registration unit 54a determines that the authentication information included in the registration request is in the registration rejection list, it does not perform the registration process and stores the authentication information in the storage unit 55 as access history information (S19). In other words, registration is automatically rejected without querying registered users.

[0061] If the registration unit 54a determines that the authentication information included in the registration request is not in the registration rejection list, it determines whether or not the storage unit 55 has authorized authentication information (registered authentication information) stored in it (S13). Subsequent processing is the same as in Example 1 of the registration operation or Example 2 of the registration operation.

[0062] Thus, in Example 3 of the registration process, authentication information added to the registration rejection list is automatically rejected without requiring a query to the registered user. Therefore, the authentication device 50 can reject the registration of new authentication information without bothering the registered user.

[0063] It is not mandatory that the addition of authentication information to the registration rejection list be based on rejection information. For example, adding authentication information to the registration rejection list and deleting authentication information from the registration rejection list (i.e., editing the registration rejection list) may be permitted for registered users. For example, a registered user may be permitted to edit the registration rejection list based on operations on their mobile terminal 81 by establishing a communication connection between the registered user's mobile terminal 81 and the reader 52.

[0064] Furthermore, the registration rejection list may include not only authentication information but also other identification information, such as the phone number of the mobile terminal 80 (in this case, a smartphone). For example, if the registration request includes not only authentication information but also the phone number of the mobile terminal 80, the registration unit 54a can add the authentication information and the phone number to the registration rejection list when rejection information is received by the communication unit 51. Subsequently, if the registration request is received by the reading unit 52 and at least one of the authentication information and identification information included in the registration request is listed in a predetermined registration rejection list, the registration unit 54a rejects the registration of the authentication information without further inquiry.

[0065] With this configuration, even if an unregistered user who has been added to the registration rejection list tries to force registration by reinstalling the dedicated app or changing their mobile device 80 to change their authentication information, registration can still be rejected based on the phone number as long as the phone number associated with the mobile device 80 remains unchanged.

[0066] [Other variations] In the above embodiment, permission information was transmitted from the mobile terminal 81 to the authentication device 50 by an operation performed by the registered user on the mobile terminal 81 (hereinafter also referred to as the permission operation). Here, the permission information may be transmitted only after the registered user's authentication has been successfully completed, so that the permission operation is performed by the registered user themselves. In other words, the mobile terminal 81 may transmit permission information to the authentication device 50 (communication unit 51) only after the registered user's authentication has been successfully completed. Figure 7 shows an example of the authentication screen for a registered user.

[0067] In the example shown in Figure 7, permission information is sent after the permission operation is performed, provided that the correct transmission password is entered. The transmission password is set on the mobile device 81 by the registered user themselves during the initial setup of the dedicated application.

[0068] Thus, once authorization information is sent, based on the requirement that the authentication of a registered user is successful, it is suppressed from an unregistered user performing an authorization operation on the mobile terminal 81 (in other words, impersonating a registered user) and sending authorization information.

[0069] Furthermore, in the above embodiment, inquiries and notifications were made through the dedicated application based on the ID of the dedicated application. However, inquiries and notifications may also be made via email based on an email address. Inquiries and notifications may also be made through messaging applications other than the dedicated application.

[0070] Furthermore, although the above embodiment described an example in which the electric lock 40 is unlocked when authentication is successful, the electric lock 40 may also be locked when authentication is successful. When authentication is successful, the electric lock 40 should be either locked or unlocked.

[0071] Furthermore, in the above embodiment, the reading unit 52 obtained authentication information from the mobile terminal 80, but the reading unit 52 may also obtain authentication information from the IC card. In other words, authentication information may be obtained from the IC card instead of the mobile terminal 80, and the authentication information recorded on the IC card may be registered by using the IC card and the mobile terminal 80 in combination.

[0072] Furthermore, the reading unit 52 may obtain biometric authentication information directly from the user. In other words, biometric authentication information may be registered by using the biometric authentication information in conjunction with the mobile terminal 80. In this case, the reading unit 52 is a biosensor that reads the biometric authentication information of a resident from that resident, and specifically, it may be a facial recognition sensor, a fingerprint sensor, or an iris sensor.

[0073] [Effects, etc.] The following describes examples of inventions that can be obtained from the disclosures in this specification, and explains the effects and other benefits that can be obtained from such inventions.

[0074] Invention 1 is an electric lock system 10 comprising: a registration unit 54a that registers authentication information read by a reading unit 52 provided in the facility 100 as authorization authentication information that permits unlocking of an electric lock 40 provided on the door 30 of the facility 100; and an authentication unit 54b that unlocks the electric lock 40 when the authentication information read by the reading unit 52 is registered as authorization authentication information. The registration unit 54a has at least one authorization authentication information registered and, when it receives a request to register new authentication information, it queries the registered user corresponding to the registered authorization authentication information to ask whether or not to permit the registration of the new authentication information. The reading unit 52 is an example of a reading device, and the registered user is an example of a first user.

[0075] With such an electric lock system 10, registered users can receive notifications (inquiries) when new authentication information (mobile terminal 80) is about to be registered, and can be aware of requests for new authentication information registration even when they are away from the facility 100. The electric lock system 10 can prevent authentication information from being secretly registered, thereby improving security.

[0076] Invention 2 is an electric lock system 10 of Invention 1, further comprising a communication unit 51 that communicates with a registered user's mobile terminal 81, wherein the registration unit 54a makes an inquiry by communicating with the mobile terminal 81 using the communication unit 51, and registers the new authentication information as authorized authentication information, provided that the communication unit 51 receives authorization information indicating that the first user has authorized the registration of new authentication information as a result of the inquiry, which is authorization information transmitted by the mobile terminal 81. The mobile terminal 81 is an example of a first mobile terminal.

[0077] Such an electric lock system 10 can prevent unauthorized registration of new authentication information by making permission from a registered user a requirement for registering new authentication information.

[0078] Invention 3 is an electric lock system 10 of Invention 2, wherein the mobile terminal 81 transmits permission information to the communication unit 51, provided that it has successfully authenticated a registered user.

[0079] Such an electric lock system 10 can prevent unregistered users from impersonating registered users and sending permission information.

[0080] Invention 4 is an electric lock system 10 of Invention 2 or 3, wherein the new authentication information is authentication information for an unregistered user, and the registration unit 54a registers the new authentication information as authorized authentication information, provided that the authorization information is received by the communication unit 51 and the unregistered user's mobile terminal 80 is located within a predetermined range from the reading unit 52. The unregistered user is an example of a second user, and the mobile terminal 80 is an example of a second mobile terminal.

[0081] Such an electric lock system 10 can prevent users who cannot bring their mobile terminal 80 close to the reader 52 (users who are not affiliated with the facility 100) from illegally registering authentication information.

[0082] Invention 5 is an electric lock system 10 according to any of Inventions 2 to 4, wherein the registration unit 54a stores new authentication information as access history information when the communication unit 51 receives rejection information that indicates a registered user has rejected the registration of new authentication information as a result of an inquiry, and the rejection information was transmitted by the mobile terminal 81.

[0083] The access history information managed by such an electric lock system 10 can be used for analyzing unauthorized access (such as whether a malicious user attempted to unlock the electric lock 40).

[0084] Invention 6 is an electric lock system 10 according to any of Inventions 2 to 4, wherein the registration unit 54a discards new authentication information when it receives rejection information from a mobile terminal 81 that indicates a registered user has refused to register new authentication information as a result of an inquiry, and the rejection information has been transmitted by the mobile terminal 81.

[0085] Such an electric lock system 10 can discard new authentication information if a registered user refuses to register new authentication information.

[0086] Invention 7 is an electric lock system 10 according to any of Inventions 2 to 6, wherein the registration unit 54a acquires identification information along with a request to register new authentication information, and if at least one of the new authentication information and the identification information is listed in a predetermined registration rejection list, it rejects the registration of the new authentication information without further inquiry.

[0087] Such an electric lock system 10 can reject registration based on identification information even if an unregistered user who has been previously denied registration tries to force registration by changing their authentication information.

[0088] Invention 8 is the electric lock system 10 of Invention 7, wherein the new authentication information is the authentication information of an unregistered user, and the identification information is the phone number of the smartphone owned by the unregistered user.

[0089] Such an electric lock system 10 can reject registration by phone number even if an unregistered user who has been rejected once tries to force registration by changing their authentication information.

[0090] Invention 9 is an electric lock system 10 according to any of Inventions 1 to 8, further comprising a reading unit 52 and an electric lock 40.

[0091] Such an electric lock system 10 can be realized as a system comprising a reading unit 52 and an electric lock 40.

[0092] Invention 10 is a registration method performed by a computer, comprising: a registration step of registering authentication information read by a reader 52 provided in the facility 100 as authorization authentication information that permits unlocking an electric lock 40 provided on the door 30 of the facility 100; an authentication step of unlocking the electric lock 40 when the authentication information read by the reader 52 is registered as authorization authentication information; and a query step of querying a registered user corresponding to the registered authorization authentication information whether or not to permit the registration of new authentication information when at least one authorization authentication information is registered and a request for registration of new authentication information is received.

[0093] With this registration method, registered users can receive notifications (inquiries) when new authentication information (mobile device 80) is about to be registered, and can be aware of requests for new authentication information registration even when they are away from facility 100. The registration method can deter authentication information from being registered secretly, thereby improving security.

[0094] Invention 11 is a program for causing a computer to execute the registration method of Invention 10.

[0095] With such a program, registered users can receive notifications (inquiries) when new authentication information (mobile device 80) is about to be registered, and can be aware of requests for new authentication information registration even when they are away from facility 100. With such a program, the computer can prevent authentication information from being secretly registered, thereby improving security.

[0096] (Other embodiments) Although embodiments have been described above, the present invention is not limited to the embodiments described above.

[0097] For example, in the above embodiment, the electric lock system was implemented by multiple devices. In this case, some or all of the processing performed by the devices of the electric lock system may be performed by other devices. For example, some or all of the processing performed by the authentication device may be performed by the control device. Alternatively, the electric lock system may be implemented by a single device, for example, as a single device corresponding to the authentication device.

[0098] Furthermore, in the above embodiment, the processing performed by a specific processing unit may be performed by another processing unit. Also, the order of multiple processing units may be changed, or multiple processing units may be executed in parallel.

[0099] Furthermore, in the above embodiment, each component may be realized by executing a software program suitable for each component. Each component may also be realized by a program execution unit such as a CPU or processor reading and executing a software program recorded on a recording medium such as a hard disk or semiconductor memory.

[0100] Furthermore, each component may be implemented by hardware. For example, each component may be a circuit (or integrated circuit). These circuits may form a single circuit as a whole, or they may be separate circuits. Also, each of these circuits may be a general-purpose circuit or a dedicated circuit.

[0101] Furthermore, general or specific embodiments of the present invention may be implemented as a system, apparatus, method, integrated circuit, computer program, or recording medium such as a computer-readable CD-ROM. Alternatively, they may be implemented as any combination of a system, apparatus, method, integrated circuit, computer program, and recording medium.

[0102] For example, the present invention may be implemented as an authentication device or an electric lock system according to the above embodiment. Furthermore, the present invention may be implemented as a method executed by a computer, such as an authentication device or an electric lock system, or as a program for causing a computer to execute such a method. The present invention may also be implemented as a computer-readable non-temporary recording medium on which such a program is recorded.

[0103] Furthermore, the present invention also includes forms obtained by applying various modifications to each embodiment that a person skilled in the art could conceive, or forms realized by arbitrarily combining the components and functions of each embodiment without departing from the spirit of the present invention. [Explanation of Symbols]

[0104] 10 Electric Lock Systems 30 doors 40 Electric Locks 50 Authentication devices 51 Communications Department 52 Reading section 53 Operation Reception Section 54 Information Processing Section 54a Registration Section 54b Authentication Department 55 Storage section 60 Control device 70 Server Devices 80. Mobile device (second mobile device) 81. Mobile device (first mobile device) 100 facilities

Claims

1. A registration unit that registers authentication information read by a reader installed in the facility as authorization authentication information that permits unlocking of the electric lock installed on the door of the facility, The system includes an authentication unit that unlocks the electric lock when the authentication information read by the reading device is registered as the authorized authentication information, The registration unit, upon receiving a request to register new authentication information, if at least one of the authorization authentication pieces of information is already registered, will inquire with the first user corresponding to the registered authorization authentication piece of information whether or not to permit the registration of the new authentication piece of information. Electric lock system.

2. Furthermore, it includes a communication unit that communicates with the first mobile terminal of the first user, The aforementioned registration unit is The inquiry is made by communicating with the first mobile terminal using the communication unit, As a result of the aforementioned inquiry, permission information indicating that the first user has authorized the registration of the new authentication information is provided, and the permission information transmitted by the first mobile terminal is received by the communication unit, and the new authentication information is registered as the authorized authentication information. The electric lock system according to claim 1.

3. The first mobile terminal transmits the permission information to the communication unit, provided that it has successfully authenticated the first user. The electric lock system according to claim 2.

4. The aforementioned new authentication information is the authentication information of the second user, The registration unit registers the new authentication information as the authorization authentication information, provided that the authorization information is received by the communication unit and the second user's second mobile terminal is located within a predetermined range from the reader. The electric lock system according to claim 2.

5. The registration unit, upon receiving rejection information from the first mobile terminal that indicates the first user has refused to register the new authentication information as a result of the inquiry, stores the new authentication information as history information. The electric lock system according to claim 2.

6. The registration unit, upon receiving rejection information from the first mobile terminal indicating that the first user has refused to register the new authentication information as a result of the inquiry, discards the new authentication information. The electric lock system according to claim 2.

7. The aforementioned registration unit is Along with the request to register the new authentication information, the identification information is obtained. If at least one of the new authentication information and the identification information is listed in a predetermined registration rejection list, the inquiry is omitted and registration of the new authentication information is rejected. The electric lock system according to claim 2.

8. The aforementioned new authentication information is the authentication information of the second user, The aforementioned identification information is the phone number of the smartphone owned by the second user. The electric lock system according to claim 7.

9. moreover, The aforementioned reading device, The electric lock is provided An electric lock system according to any one of claims 1 to 8.

10. A registration method performed by a computer, A registration step in which authentication information read by a reader installed in the facility is registered as authorization authentication information that permits unlocking of the electric lock installed on the door of the facility, If the authentication information read by the reader is registered as the authorized authentication information, the authentication step of unlocking the electric lock, The system includes a query step in which, if at least one of the aforementioned authorization authentication pieces of information is registered and a request for registration of new authentication information is received, the system queries the first user corresponding to the registered authorization authentication piece of information whether or not to permit the registration of the new authentication information. How to register.

11. A program for causing the computer to execute the registration method described in claim 10.

Images