USE CONTROL SYSTEM, SETTING INFORMATION TRANSMISSION DEVICE, USE CONTROL UNIT, USE CONTROL METHOD, AND PROGRAM

Abstract

To reduce security risks while improving the convenience of use control technology of an object to be used.SOLUTION: A use permit issuance device 1 is configured to: store, for each user, authentication data and an authentication method in association with identification information of one or more users; upon receipt of a use permit issuance request from a setting terminal 5, issue a use permit and generates a signature, and also identifies the authentication data associated with the user identification information and the authentication method included in the issuance request; and notify the setting terminal 5 of setting information including the use permit, the signature and the authentication data. The setting terminal 5 registers the setting information in a use permit notification device 4. The use permit notification device 4 acquires authentication data from a user, and transmits the use permit and the signature of the setting information including the authentication data to a use control device 3. The use control device 3 verifies the signature and, if the signature verification is successful, unlocks use restrictions of an object to be used if a use condition included in the use permit is satisfied.SELECTED DRAWING: Figure 1

Description

[Technical field]

[0001] The present invention relates to a usage control technology for objects of use, including real estate such as hotels, inns, private lodging facilities, houses, warehouses, and rooms, mobile objects such as automobiles and bicycles, and viewing terminals for electronic media such as electronic medical records and e-books, the usage of which can be restricted by locking / unlocking, access control, or encryption / decryption. [Background technology]

[0002] Patent Document 1 discloses a system that allows users to unlock and lock rooms, and use a variety of services including cashless dining and purchasing within facilities such as companies, hospitals, amusement parks, and public facilities, simply by carrying a room key.

[0003] This system includes room keys having readable and writable RFID (Radio Frequency Identification) tags that store authentication data such as room numbers, PIN numbers, and customer information, RFID readers installed at various locations within the facility for reading and writing information from and to the RFID tags of the room keys, a database that stores information about each room and facility within the facility, and a server connected to the RFID readers and database via a network and that manages each room and facility within the facility. Any one of the RFID readers reads the authentication data stored in the RFID tags of the room keys and transmits it to the server, and the server, upon receiving this, authenticates the user using the authentication data received from the RFID reader, thereby providing the user carrying the room key with a service associated with the RFID reader. [Prior art documents] [Patent documents]

[0004] [Patent Document 1] JP 2003-132435 A Summary of the Invention [Problem to be solved by the invention]

[0005] However, the system described in Patent Document 1 is based on the premise that common authentication data stored in the RFID tag of the room key will be used for services provided anywhere in the facility where an RFID reader is installed, and does not anticipate a situation in which services employing different authentication methods will coexist.

[0006] Furthermore, the system described in Patent Document 1 is premised on the case where the same service provider provides multiple services, and does not assume the case where there are multiple service providers. For example, when a service provider is different for each service, even if a user has already registered face recognition data to use a service of service provider B, when the user first uses a service of another service provider A that requires face recognition data, the user must separately register face recognition data, which is cumbersome.

[0007] Furthermore, the system described in Patent Document 1 does not assume that a facility will be used by multiple people. In this case, a representative will be selected from among the multiple users who will use the facility, and the representative will be tasked with managing the room keys and unlocking and locking the facility, which places a heavy burden on the representative. On the other hand, users other than the representative cannot freely unlock and lock the facility on their own, which is inconvenient.

[0008] Furthermore, the system described in Patent Document 1 is premised on the lending and returning of room keys at the reception desk of facilities such as companies, hospitals, amusement parks, and public facilities. In other words, when using the facility, a user must borrow a room key from the reception desk, and must return the room key to the reception desk after using the facility. This is inconvenient when the facility and the reception desk are geographically separated.

[0009] In addition, in the system described in Patent Document 1, RFID readers installed at various locations within the facility read the information stored in the RFID wireless tag of the room key and transmit it to a server via a network. Therefore, for example, if the server is installed outside the facility and the RFID readers installed at various locations within the facility are connected to the server installed outside the facility via the Internet, every time the RFID reader reads information from the RFID wireless tag of the room key, the read information will be transmitted over the Internet, increasing the security risk.

[0010] The present invention has been made in consideration of the above circumstances, and its object is to provide a method for managing real estate such as hotels, inns, private lodging facilities, houses, warehouses, rooms, etc. and Cars, bicycles, and other moving objects of Including locking and unlocking or Access Control Oni In order to improve convenience, we have developed a usage control technology that can more effectively restrict usage. Let The purpose of this document is to: [Means for solving the problem]

[0011] In order to solve the above problems, the present invention provides Setting information transmission device and are set for each user. , give Locking and unlocking, or Access Control Oni The advantage of controlling the usage of the target users Control unit for and, Setting and a fixed terminal.

[0012] In accordance with the operator's instructions, the setting terminal transmits first information to the setting information transmission device, the first information including specific information capable of identifying the user's identification information and the authentication method adopted by the usage control unit corresponding to the usage target, acquires setting information including the user's authentication data from the setting information transmission device, and notifies the acquired setting information to the usage control unit.

[0013] The setting information transmission device stores at least one authentication data for each user, together with the authentication method, linked to at least one identification information such as an email address, a mobile phone number, an employee number, or a membership number. The setting information transmission device also identifies the authentication data of the authentication method identified by the identification information included in the first information received from the setting terminal from the authentication data stored linked to the user's identification information included in the first information. Then, the setting information including the identified authentication data is transmitted to the setting terminal.

[0014] The usage control unit stores the setting information notified by the setting terminal, acquires authentication data from the user according to a predetermined authentication method, and searches for setting information including the acquired authentication data.

[0016] For example, the present invention provides A usage control system for controlling usage of a usage object, Setting information transmission device and, Provided for each of the above-mentioned usage targets , give Locking and unlocking, or Access Oni The advantage of controlling the use of the target of use Control unit for and, According to the operator's instructions, Setting information transmission device To, First information including user identification information and specific information capable of identifying an authentication method adopted by the usage control unit corresponding to the usage target. By sending Setting information transmission device from, User authentication data and acquiring setting information including the setting information, The utilization control unit A setting terminal for notifying the The above Setting information transmission device teeth, an authentication data storage means for storing at least one piece of authentication data for each user, together with an authentication method of the authentication data, in association with at least one piece of identification information; 、 The user ID is associated with the first information received from the setting terminal. From the authentication data stored in the authentication data storage means, Identified by the identification information included in the first information an authentication data identification means for identifying the authentication data of an authentication method; The above The setting information including the authentication data identified by the authentication data identification means, The above A setting information transmission means for transmitting the setting information to the setting terminal, The utilization control unit includes: a setting information storage means for storing the setting information notified by the setting terminal; an authentication data acquisition means for acquiring the authentication data from a user in accordance with a predetermined authentication method; a setting information retrieval means for retrieving the setting information including the authentication data acquired by the authentication data acquisition means from the setting information storage means; , having . Effect of the Invention

[0017] In the present invention, Setting information transmission device For each user, authentication data is stored together with the authentication method in association with at least one piece of identification information, and the authentication data is stored from a setting terminal. First information When you accept, This first piece of information From the authentication data linked to the user's identity information contained in First informationIdentifying authentication data of an authentication method identified by specific information contained in This identified authentication data The setting terminal is then notified. Setting information transmission device Received from Recognition Proof Data Utilize the control unit Therefore, even if a user uses a certain target for the first time, the user can register the Utilization Control Unit Authentication data for the authentication method adopted by Setting information transmission device If the user has already registered his / her authentication data with the service provider that provides the service to be used, the user does not need to separately register his / her authentication data with the service provider that provides the service to be used.

[0020] Therefore, the present invention improves convenience.

[0022] Thus, according to the present invention, locking and unlocking or Access Control Oni In order to improve convenience, we have developed a usage control technology that can more effectively restrict usage. Let It is possible. [Brief description of the drawings]

[0023] [Figure 1] FIG. 1 is a schematic diagram of a usage control system according to an embodiment of the present invention. [Diagram 2] FIG. 2 is a sequence diagram showing an example of a setting information registration operation for registering setting information in the usage certificate notification device 4. As shown in FIG. [Diagram 3] FIG. 3 is a sequence diagram showing an example of a usage restriction release operation for a target user by the usage control device 3. In FIG. [Figure 4] FIG. 4 is a diagram showing a schematic functional configuration of the license issuing device 1. As shown in FIG. [Diagram 5] FIG. 5 is a diagram showing an example of registered contents of the identification information table 1030. As shown in FIG. [Figure 6] FIG. 6 is a diagram showing an example of registered contents of the authentication data table 1031. As shown in FIG. [Figure 7] FIG. 7 is a diagram showing an example of registered contents in the key information storage unit 104. As shown in FIG. [Figure 8]FIG. 8 is a flow diagram for explaining the operation of the usage certificate issuing device 1. As shown in FIG. [Figure 9] FIG. 9 is a schematic functional configuration diagram of the usage control device 3. As shown in FIG. [Figure 10] FIG. 10 is a flow diagram for explaining the operation of the usage control device 3. As shown in FIG. [Figure 11] FIG. 11 is a schematic functional configuration diagram of the license notification device 4. As shown in FIG. [Figure 12] FIG. 12 is a diagram showing an example of registered contents in the setting information storage unit 43. As shown in FIG. [Figure 13] FIG. 13 is a flow diagram for explaining the operation of the usage certificate notifying device 4. As shown in FIG. [Figure 14] FIG. 14 is a diagram showing an example of registered contents of the account information table 1033. As shown in FIG. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0024] Hereinafter, an embodiment of the present invention will be described with reference to the drawings.

[0025] FIG. 1 is a schematic diagram of a usage control system according to the present embodiment.

[0026] As shown in the figure, the usage control system according to this embodiment includes a usage certificate issuing device 1 that issues a usage certificate including usage conditions for a usage object such as real estate such as a hotel, inn, private lodging facility, house, warehouse, or room, mobile objects such as an automobile or bicycle, and a viewing terminal for electronic media such as an electronic medical record or an electronic book, usage control units 2-1 to 2-n (hereinafter also simply referred to as usage control unit 2) provided for each usage object, and a setting terminal 5. The usage control unit 2 also includes a usage control device 3 that controls the usage of the usage object by locking / unlocking, access control, or encryption / decryption based on the usage certificate, and a usage certificate notifying device 4 that notifies the usage control device 3 paired with its own device of the usage certificate.

[0027] The license issuing device 1 is connected to a WAN (Wide Area Network) 60, and stores at least one piece of authentication data for each user, together with the authentication method (face authentication, vein authentication, password authentication, etc.), linked to at least one piece of identification information such as an email address, a mobile phone number, an employee number, a membership number, etc. Also, for each target of use, key information is stored, including a private key used to sign the license and a common key used to encrypt the usage conditions included in the license.

[0028] The usage control device 3 can communicate only by short-distance wireless communication 63 such as IrDA (Infrared Data Association) or Bluetooth (registered trademark), and is separated from the network. Furthermore, the usage control device 3 is set with hall data including a public key required for signature verification of the usage certificate and a common key required for decrypting the usage conditions included in the usage certificate.

[0029] At least one piece of setting information including a license, a signature for the license, and authentication data of the user is registered in the license notification device 4.

[0030] The setting terminal 5 is provided, for example, for each service provider who provides a utilization service to be utilized. The setting terminal 5 is connected to the WAN 60 via a wireless network 62 and a relay device 61 such as a wireless base station or an access point, and acquires setting information from the usage certificate issuing device 1. Then, the acquired setting information is transmitted to the usage certificate notifying device 4 by short-distance wireless communication 63 and registered therein.

[0031] FIG. 2 is a sequence diagram showing an example of a setting information registration operation for registering setting information in the usage certificate notification device 4. As shown in FIG.

[0032] Here, the service provider is deemed to have received a request for permission to use from the user via e-mail, mobile phone, etc., which includes the specification of the target of use and the conditions of use (start and end dates and times of use, etc.), and to have granted permission.

[0033] First, when the setting terminal 5 accepts a login operation from a service provider (S100), it transmits a login request including the login information (user ID, password) of the service provider to the usage certificate issuing device 1 (S101). In response to this, the usage certificate issuing device 1 performs authentication processing using the password included in the login request and a password managed in association with the user ID included in the login request (S102). Then, if the authentication is successful, it permits the login of the setting terminal 5 that has sent the login request, and transmits a login permission notification to the setting terminal 5 (S103).

[0034] Next, when the setting terminal 5 receives from the service provider a license issuance operation including an object ID which is the identification information of the usage target specified in the usage permission request, the authentication method (biometric authentication (face authentication, vein authentication, etc.), password authentication, etc.) adopted by the license notification device 4 of the usage control unit 2 corresponding to this usage target, the usage conditions specified in the usage permission request, and the identification information of the user who has requested usage permission that is known to the service provider (email address, mobile phone number, employee number, membership number, etc.) (S104), the setting terminal 5 generates a license issuance request including the specification of this information, and sends this license issuance request to the license issuing device 1 (S105).

[0035] In response to this, the license issuing device 1 issues a license including the usage conditions specified in the license issuance request (S106). The license issuing device 1 also encrypts the usage conditions included in the issued license using a common key included in key information stored in association with the object ID specified in the license issuance request, and generates a signature for the license using a private key included in this key information (S107). Specifically, the license, or a predetermined part of the license, or a message digest of either of them is encrypted with the private key, and the encrypted information is used as the signature.

[0036] Furthermore, the license issuing device 1 identifies authentication data for the authentication method specified in the license issuance request from among the authentication data stored in association with the identification information of the user specified in the license issuance request (S108).

[0037] Then, the license issuing device 1 generates setting information including the license issued as described above, the generated signature, and the identified authentication data, and transmits this setting information to the setting terminal 5 which is the sender of the license issuance request (S109).

[0038] Next, when the setting terminal 5 receives a setting operation from the service provider while being brought close to the usage certificate notification device 4 of the usage control unit 2 associated with the usage target specified in the usage permission request received from the user (S110), it transmits the setting information received from the usage certificate issuing device 1 to the usage certificate notification device 4 by short-range wireless communication 63 (S111). In response to this, the usage certificate notification device 4 registers the setting information received from the setting terminal 5 (S112).

[0039] FIG. 3 is a sequence diagram showing an example of a usage restriction release operation for a target user by the usage control device 3. In FIG.

[0040] First, the user approaches the license notification device 4 of the usage control unit 2 associated with the target of use authorized by the service provider and performs an authentication data reading operation to have the license notification device 4 read his / her own authentication data (S120). The license notification device 4 then reads the authentication data from the user according to a predetermined authentication method such as biometric authentication (face authentication, vein authentication, etc.) or password authentication (S121). The license notification device 4 then searches for setting information including the authentication data read from the user (S122). The license and signature included in the searched setting information are then transmitted to the usage control device 3 paired with the device 4 via short-distance wireless communication 63 (S123).

[0041] In response to this, the usage control device 3 verifies the signature received together with the usage license from the usage license notification device 4 via short-range wireless communication 63 using the public key included in the hall data set in its own device 3 (S124). If the signature verification is successful, it decrypts the encrypted usage conditions included in the usage license (hereinafter referred to as the encrypted usage conditions) using the common key included in the hall data (S125).

[0042] Next, the usage control device 3 confirms that the decrypted usage conditions are satisfied (S126). For example, if the usage conditions are the usage start and end times, it confirms that the current date and time is within the period specified by the usage start and end times. If the usage control device 3 confirms that the usage conditions are satisfied, it releases the usage restrictions on the usage target (S127). For example, if the usage target is real estate such as a hotel, inn, private lodging facility, house, warehouse, or room, it unlocks the autolock device at the entrance and exit of the real estate.

[0043] Thereafter, the usage control device 3 transmits a usage restriction release notification to the usage license notification device 4 by the short-distance wireless communication 63 (S128). In response to this, the usage license notification device 4 performs a predetermined release message output process, such as displaying a message to the effect that the usage restriction of the target has been released, or outputting a message sound to that effect (S129).

[0044] Next, the usage permit issuing device 1 and the usage control unit 2 constituting the usage control system according to the present embodiment will be described in detail. Note that, since an existing mobile terminal such as a smartphone or tablet terminal equipped with a short-range wireless communication function can be used as the setting terminal 5, detailed description thereof will be omitted.

[0045] First, the license issuing device 1 will be described in detail.

[0046] FIG. 4 is a diagram showing a schematic functional configuration of the license issuing device 1. As shown in FIG.

[0047] As shown in the figure, the license issuing device 1 includes a WAN interface unit 100, a memory unit 101, a login processing unit 105, a license issuing unit 106, an encryption unit 107, a signature generation unit 108, an authentication data identification unit 109, and a setting information transmission unit 110.

[0048] The WAN interface unit 100 is an interface for connecting to the WAN 60 .

[0049] The storage unit 101 includes a login information storage unit 102 , an authentication data storage unit 103 , and a key information storage unit 104 .

[0050] The login information storage unit 102 stores login information (user ID, password) for logging in to the usage certificate issuing device 1 for each service provider.

[0051] The authentication data storage unit 103 stores an identification information table 1030 and an authentication data table 1031 for each user.

[0052] FIG. 5 is a diagram showing an example of registered contents of the identification information table 1030. As shown in FIG.

[0053] As shown in the figure, an identification information table 1030 is provided for each user, linked to a route ID 1032 assigned to the user. A record 10301 of user identification information is stored in the identification information table 1030. This record 10301 of identification information has a field 10302 for registering the type and use of identification information such as an email address, a mobile phone number, an employee number, a membership number, etc., and a field 10303 for registering the user's identification information.

[0054] FIG. 6 is a diagram showing an example of registered contents of the authentication data table 1031. As shown in FIG.

[0055] As shown in the figure, an authentication data table 1031 is provided for each user, linked to a route ID 1032 assigned to the user. A record 10311 of authentication data of the user is stored in the authentication data table 1031. The record 10311 of authentication data has a field 10312 for registering an authentication method such as face authentication, vein authentication, password authentication, etc., and a field 10313 for registering authentication data of the user.

[0056] The key information storage unit 104 stores key information for each target of use.

[0057] FIG. 7 is a diagram showing an example of registered contents in the key information storage unit 104. As shown in FIG.

[0058] As shown in the figure, a record 1040 of key information is stored for each usage object in the key information storage unit 104. The key information record 1040 has a field 1041 for registering an object ID which is identification information of the usage object, a field 1042 for registering a private key used for signing a license for the usage control unit 2 corresponding to this usage object, a field 1043 for registering a public key paired with this private key, and a field 1044 for registering a common key used for encrypting / decrypting the usage conditions included in this license.

[0059] The login processing unit 105 processes a login request received from the setting terminal 5 by referring to the login information storage unit 102 .

[0060] The license issuing unit 106 follows an instruction from the setting information transmitting unit 110 and issues a license including the encrypted usage conditions received from the setting information transmitting unit 110 .

[0061] In accordance with instructions from the setting information transmission unit 110, the encryption unit 107 encrypts the usage conditions received from the setting information transmission unit 110 using a common key contained in the key information that is linked to the object ID received from the setting information transmission unit 110 and stored in the key information storage unit 104, to generate encrypted usage conditions.

[0062] In accordance with instructions from the setting information transmission unit 110, the signature generation unit 108 generates a signature for the license received from the setting information transmission unit 110, using a private key contained in the key information that is linked to the object ID received from the setting information transmission unit 110 and stored in the key information storage unit 104.

[0063] Following instructions from the setting information transmission unit 110 , the authentication data specification unit 109 refers to the authentication data storage unit 103 and specifies the authentication data linked to the user identification information and authentication method received from the setting information transmission unit 110 .

[0064] The setting information transmitting unit 110 cooperates with the license issuing unit 106 and the encryption unit 107 to issue a license including encrypted usage conditions generated from the usage conditions included in the license issuance request in accordance with the license issuance request received from the setting terminal 5 via the WAN interface unit 100, and cooperates with the signature generating unit 108 to generate a signature for this license. Also, in cooperation with the authentication data identifying unit 109, it identifies, from the authentication data storage unit 103, authentication data of the user identified by the identification information included in the license issuance request, according to the authentication method included in the license issuance request. Then, it transmits setting information including the license, the signature, and the authentication data to the setting terminal 5.

[0065] The schematic functional configuration of the license issuing device 1 shown in Fig. 4 may be realized in hardware by an integrated logic IC such as an ASIC (Application Specific Integrated Circuit) or an FPGA (Field Programmable Gate Array), or may be realized in software by a computer such as a DSP (Digital Signal Processor). Alternatively, it may be realized in a general-purpose computer having a CPU (Central Processing Unit), a memory, an auxiliary storage device such as a flash memory or a hard disk drive, and a communication device such as a NIC (Network Interfae Card), by the CPU loading a predetermined program from the auxiliary storage device into the memory and executing it. It may also be realized on a distributed system consisting of the cooperation of multiple general-purpose computers.

[0066] FIG. 8 is a flow diagram for explaining the operation of the usage certificate issuing device 1. As shown in FIG.

[0067] This flow starts when the WAN interface unit 100 receives a login request from the setting terminal 5 via the WAN 60 .

[0068] First, the WAN interface unit 100 notifies the received login request to the login processing unit 105. In response to this, the login processing unit 105 performs login authentication (S200). Specifically, it searches for a password associated with the user ID of the service provider included in the login request and stored in the login information storage unit 102, and if the searched password matches the password included in the login request, it permits the login (authentication successful), and if they do not match, it rejects the login (authentication unsuccessful).

[0069] Next, if the login authentication is not successful (NO in S201), the login processing unit 105 performs a predetermined error processing such as sending an error message to the setting terminal 5 that is the sender of the login request via the WAN interface unit 100 (S209).

[0070] On the other hand, if the login authentication is successful (YES in S201), a login permission notification is sent to the setting terminal 5 that sent the login request via the WAN interface unit 100 (S202). Then, the setting information transmitting unit 110 waits for a license issuance request to be sent from the setting terminal 5 that has been permitted to login via the WAN interface unit 100 (S203).

[0071] When the setting information transmitting unit 110 receives a license issuance request from the setting terminal 5 that has been permitted to log in via the WAN interface unit 100 (YES in S203), it passes the object ID and usage conditions of the object to be used that are included in the license issuance request to the encryption unit 107 and instructs it to generate encrypted usage conditions. In response to this, the encryption unit 107 searches the key information storage unit 104 for a record 1040 of key information using the object ID received from the setting information transmitting unit 110 as a key. Then, it encrypts the usage conditions received from the setting information transmitting unit 110 using the common key registered in field 1044 of the searched record 1040 to generate encrypted usage conditions (S204).

[0072] Next, the setting information transmitting unit 110 passes the object ID of the object to be used and the user identification information included in the license issuance request, and the encrypted usage conditions generated by the encryption unit 107, to the license issuing unit 106, and instructs it to issue a license. In response, the license issuing unit 106 issues a license including the object ID of the object to be used, the user identification information, and the encrypted usage conditions received from the setting information transmitting unit 110 (S205).

[0073] Next, the setting information transmitting unit 110 passes the object ID of the usage target included in the license issuance request and the license issued by the license issuing unit 106 to the signature generating unit 108 and instructs it to generate a signature. In response to this, the signature generating unit 108 searches for a record 1040 of key information from the key information storage unit 104 using the object ID received from the setting information transmitting unit 110 as a key. Then, using the private key registered in field 1042 of the searched record 1040, it generates a signature for the license received from the setting information transmitting unit 110 (S206). Specifically, the license, or a predetermined part of the license, or a message digest of either of them is encrypted with the private key, and the encrypted information is used as the signature.

[0074] Furthermore, the setting information transmitting unit 110 passes the user identification information and authentication method included in the license issuance request to the authentication data identifying unit 109, and instructs it to identify the authentication data of the user. In response to this, the authentication data identifying unit 109 refers to the authentication data storage unit 103 and identifies the authentication data of the user linked to the user identification information and authentication method received from the setting information transmitting unit 110 (S207). Specifically, the authentication data storage unit 103 searches for an identification information table 1030 having an identification information record 10301 in which the user identification information received from the setting information transmitting unit 110 is registered in a field 10303. Then, from the authentication data table 1031 stored in the authentication data storage unit 103 and linked to the route ID 1032 linked to the searched identification information table 1030, a record 10311 of authentication data in which the authentication method received from the setting information transmission unit 110 is registered in field 10312 is searched for, and the authentication data of the user registered in field 10313 of the searched record 10311 is identified.

[0075] Then, the setting information transmission unit 110 generates setting information including the license issued by the license issuing unit 106, the signature generated by the signature generation unit 108, and the authentication data of the user identified by the authentication data identification unit 109, and transmits this setting information to the setting terminal 5, which is the sender of the license issuance request, via the WAN interface unit 100 (S208).

[0076] Next, the usage control unit 2 will be described in detail.

[0077] As described above, the usage control unit 2 includes the usage control device 3 and the usage license notifying device 4.

[0078] First, the usage control device 3 will be described in detail.

[0079] FIG. 9 is a schematic functional configuration diagram of the usage control device 3. As shown in FIG.

[0080] As shown in the figure, the usage control device 3 includes a short-distance wireless communication unit 30, a hall data storage unit 31, a usage restriction lifting unit 32, a signature verification unit 33, and a decryption unit .

[0081] The short-distance wireless communication unit 30 communicates with the license notifying device 4 by short-distance wireless communication such as IrDA or Bluetooth (registered trademark).

[0082] The hole data storage unit 31 stores hole data. The hole data includes a public key used for signature verification of the license and a common key for decrypting the encrypted usage conditions included in the license. These public key and common key are the same as the public key and common key registered in the record 1040 of the key information stored in the key information storage unit 104 in the license issuing device 1, linked to the object ID of the usage target associated with the usage control unit 2 including the device 3 itself.

[0083] When the verification of the signature received from the license notification device 4 together with the license is successful and the usage conditions included in the license are satisfied, the usage restriction release unit 32 releases the usage restriction of the usage object associated with the usage control unit 2 including its own device 3. For example, when the usage object is real estate such as a hotel, inn, private lodging facility, house, warehouse, room, etc., it outputs an unlock command to an autolock device installed at the entrance door of the real estate.

[0084] The signature verification unit 33 verifies the signature on the license by using the public key included in the hall data stored in the hall data storage unit 31 .

[0085] The decryption unit 34 uses the common key included in the hall data stored in the hall data storage unit 31 to decrypt the encrypted usage conditions included in the license.

[0086] 9 may be realized in hardware using an integrated logic IC such as an ASIC or FPGA, or in software using a computer such as a DSP, or may be realized by a general-purpose computer having a CPU, a memory, an auxiliary storage device such as a flash memory or a hard disk drive, and a short-range wireless communication device such as an IrDA communication device or a Bluetooth (registered trademark) communication device, in which the CPU loads a predetermined program from the auxiliary storage device onto the memory and executes it.

[0087] FIG. 10 is a flow diagram for explaining the operation of the usage control device 3. As shown in FIG.

[0088] This flow starts when the short-distance wireless communication unit 30 receives a usage certificate together with a signature from the usage certificate notifying device 4 via short-distance wireless communication 63.

[0089] The usage restriction lifting unit 32 passes the license and signature received from the license notification device 4 to the signature verification unit 33 via the short-range wireless communication unit 30, and instructs the signature verification unit 33 to verify the signature. In response, the signature verification unit 33 verifies the signature on the license using the public key included in the hall data stored in the hall data storage unit 31 (S300). Specifically, the signature is decrypted using the public key, and the authenticity of the signature is verified by determining whether or not the decrypted information matches the license, or a predetermined part of the license, or a message digest of either.

[0090] Next, the signature verification unit 33 notifies the usage restriction lifting unit 32 of the verification result of the signature. In response to this, if the usage restriction lifting unit 32 succeeds in the signature verification and can prove the validity of the signature (YES in S301), it passes the encrypted usage conditions included in this license to the decryption unit 34 and instructs decryption. On the other hand, if the signature verification fails and the validity of the signature cannot be proved (NO in S301), it transmits an error notification to the license notification device 4 via the short-range wireless communication unit 30 (S306).

[0091] Next, when the decryption unit 34 receives the encrypted usage conditions together with a decryption instruction from the usage restriction lifting unit 32, the decryption unit 34 decrypts the encrypted usage conditions using the common key included in the hole data stored in the hole data storage unit 31 (S302). Then, the decrypted usage conditions are passed to the usage restriction lifting unit 32.

[0092] In response to this, the usage restriction removal unit 32 judges whether or not the decrypted usage conditions are satisfied (S303). For example, if the usage conditions are usage start and end times, it judges whether or not the current date and time is within the period specified by the usage start and end times.

[0093] Next, when it is determined that the usage conditions are satisfied (YES in S303), the usage restriction release unit 32 releases the usage restriction of the usage object associated with the usage control unit 2 including the device 3 (S304). For example, when the usage object is real estate such as a hotel, inn, private lodging facility, house, warehouse, room, etc., it outputs an unlock command to an autolock device installed at the entrance door of the real estate. Then, the usage restriction release unit 32 transmits a usage restriction release notification to the usage license notification device 4 via the short-range wireless communication unit 30 (S305).

[0094] On the other hand, if the usage restriction lifting unit 32 determines that the usage conditions are not satisfied (NO in S303), it transmits an error notification to the usage license notification device 4 via the short-distance wireless communication unit 30 (S306).

[0095] Next, the license notifying device 4 will be described in detail.

[0096] FIG. 11 is a schematic functional configuration diagram of the license notification device 4. As shown in FIG.

[0097] As shown in the figure, the license notification device 4 includes a short-range wireless communication unit 40, an authentication data acquisition unit 41, a display unit 42 such as an LCD (Liquid Crystal Display) or an organic EL (Electro Luminescence) display, a setting information memory unit 43, a setting information receiving unit 44, a setting information search unit 45, a license transmission unit 46, and a notification receiving unit 47.

[0098] The short-distance wireless communication unit 40 communicates with the usage control device 3 and the setting terminal 5 by short-distance wireless communication 63 such as IrDA or Bluetooth (registered trademark).

[0099] The authentication data acquisition unit 41 acquires authentication data from a user according to a predetermined authentication method such as face authentication, vein authentication, or password authentication. For example, in the case of face authentication, the authentication data acquisition unit 41 is provided with a camera and captures an image of the user's face to acquire face authentication data. In the case of vein authentication, the authentication data acquisition unit 41 is provided with a vein sensor and detects the user's vein pattern to acquire vein authentication data. In the case of password authentication, the authentication data acquisition unit 41 is provided with an input device such as a keyboard or a touch panel, or a card reader, and accepts input of a password from the user through the input device, or reads the password from an ID card carried by the user through the card reader.

[0100] The setting information storage unit 43 stores setting information.

[0101] FIG. 12 is a diagram showing an example of registered contents in the setting information storage unit 43. As shown in FIG.

[0102] As shown in the figure, a setting information record 430 is stored in the setting information storage unit 43. The setting information record 430 has a field 431 for registering authentication data, a field 432 for registering a license, and a field 433 for registering a signature for the license.

[0103] The setting information receiving unit 44 receives setting information from the setting terminal 5 via the short-range wireless communication unit 40 , and stores the received setting information in the setting information storage unit 43 .

[0104] The setting information search unit 45 searches the setting information storage unit 43 for a record 430 of setting information that includes the authentication data acquired by the authentication data acquisition unit 41 .

[0105] The license transmitting unit 46 transmits the license and the signature contained in the record 430 of the setting information searched for by the setting information searching unit 45 to the usage control device 3 paired with its own device 4 via the short-range wireless communication unit 40.

[0106] The notification receiving unit 47 receives various notifications from the usage control device 3 via the short-range wireless communication unit 40 and displays them on the display unit 42.

[0107] 11 may be realized in hardware by an integrated logic IC such as an ASIC or an FPGA, or in software by a computer such as a DSP, like the usage control device 3. Alternatively, it may be realized in a general-purpose computer having a CPU, a memory, an auxiliary storage device such as a flash memory or a hard disk drive, and a short-range wireless communication device such as an IrDA communication device or a Bluetooth (registered trademark) communication device, by the CPU loading a predetermined program from the auxiliary storage device onto the memory and executing it.

[0108] FIG. 13 is a flow diagram for explaining the operation of the usage certificate notifying device 4. As shown in FIG.

[0109] When the setting information receiving unit 44 receives the setting information from the setting terminal 5 via the short-range wireless communication unit 40 (YES in S400), the setting information receiving unit 44 stores the setting information in the setting information storage unit 43 (S401). Specifically, if a setting information record 430 in which the authentication data included in the setting information received from the setting terminal 5 is registered in field 431 is not registered in the setting information storage unit 43, a new setting information record 430 is added to the setting information storage unit 43, and the authentication data, license, and signature included in the setting information received from the setting terminal 5 are registered in fields 431 to 433 of this record 430. On the other hand, if a setting information record 430 in which the authentication data included in the setting information received from the setting terminal 5 is registered in field 431 is registered in the setting information storage unit 43, fields 432 and 433 of this record 430 are updated to the license and signature included in the setting information received from the setting terminal 5.

[0110] Furthermore, when the authentication data acquisition unit 41 receives an authentication data reading operation from the user (YES in S402), it acquires authentication data from the user according to a predetermined authentication method such as face authentication, vein authentication, password authentication, etc. (S403). Then, it passes the acquired authentication data to the setting information search unit 45. In response to this, the setting information search unit 45 searches the setting information record 430 from the setting information storage unit 43 using the acquired authentication data as a key (S404).

[0111] Here, if the record 430 of the setting information including the authentication data received from the authentication data acquisition unit 41 is not stored in the setting information storage unit 43 and the search fails (NO in S405), the setting information search unit 45 performs a predetermined error processing such as displaying an error message on the display unit 42 (S408).

[0112] On the other hand, if the setting information record 430 including the authentication data received from the authentication data acquisition unit 41 is stored in the setting information storage unit 43 and the search is successful (YES in S405), the usage certificate and signature included in the searched setting information record 430 are passed to the usage certificate transmission unit 46. In response to this, the usage certificate transmission unit 46 transmits the usage certificate and signature received from the setting information search unit 45 to the usage control device 3 via the short-range wireless communication unit 40 (S406). Thereafter, the notification reception unit 47 receives a notification (either a usage restriction release notification or an error notification) from the usage control device 3 via the short-range wireless communication unit 40, and displays this notification on the display unit 42 (S407).

[0113] One embodiment of the present invention has been described above.

[0114] In this embodiment, the license issuing device 1 stores authentication data for each user together with its authentication method in association with at least one piece of identification information, and upon receiving a license issuance request from the setting terminal 5, issues a license, generates a signature for the license, identifies authentication data of the authentication method included in the license issuance request from among the authentication data linked to the user's identification information included in the license issuance request, and notifies the setting terminal 5 of the license, the signature, and setting information including the identified authentication data. Then, the setting terminal 5 registers the setting information received from the license issuing device 1 in the license notification device 4. Therefore, even when a user uses a certain usage object for the first time, if the authentication data of the authentication method adopted by the license notification device 4 of the usage control unit 2 corresponding to the usage object has already been registered in the license issuing device 1, the user does not need to separately register his / her own authentication data with the service provider providing the usage service of the usage object.

[0115] Furthermore, by previously registering a user's license in the license notification device 4 in association with the user's authentication data, the user can use the usage object under the usage conditions included in the license by having his / her authentication data read by the license notification device 4. Therefore, for example, when multiple people use a usage object, the multiple users can freely use the facility, etc., independently under the usage conditions included in their own license, and there is no need to select a representative from among the multiple users and entrust the representative with the management of room keys, etc., and the unlocking and locking of the facility.

[0116] Furthermore, in this embodiment, the usage control device 3 releases the usage restrictions on the target of use only when the usage conditions included in the usage certificate are satisfied, and does not release the usage restrictions on the target of use if they are not satisfied. Therefore, by including usage conditions such as a usage period and number of uses, the usage certificate becomes invalid in a situation where these usage conditions are not satisfied even if its validity is proven, and there is no need to ask the user to return or delete the usage certificate.

[0117] Therefore, according to this embodiment, convenience is improved.

[0118] In this embodiment, the usage control device 3 can communicate only by short-distance wireless communication 63 and is isolated from the network, so it cannot be attacked from the outside via a network such as the Internet. The validity of the usage permit used to release the usage restrictions on the target is verified by verifying the signature added to the usage permit using the public key included in the hall data. Therefore, according to this embodiment, security risks are reduced.

[0119] As described above, according to this embodiment, in a usage control technology for targets whose usage can be restricted by locking / unlocking, access control, or encryption / decryption, it is possible to reduce security risks while improving convenience.

[0120] The present invention is not limited to the above-described embodiment, and various modifications are possible within the scope of the present invention.

[0121] For example, in the above embodiment, the license issuing device 1 encrypts the usage conditions to be included in the license with a common key included in the hall data set in the usage control device 3 (encrypted usage conditions), and the usage control device 3 decrypts the encrypted usage conditions included in the license received from the usage certificate notification device 4. However, the present invention is not limited to this. The license issuing device 1 may include the usage conditions in the license in plain text without encrypting them. In this case, the common key may be omitted from the hall data set in the usage control device 3.

[0122] In the above embodiment, the use condition may be a condition for lifting the use restriction of the use target. For example, the use condition may be a number of uses instead of the use start and end times, or in addition to the use start and end times. In this case, in the use control device 3, the use restriction lifting unit 32 stores the number of uses of the use target for each user, linked to the identification information of the user. Then, in S303 of FIG. 10, if the number of uses included as the use condition in the use certificate received from the use certificate notification device 4 is less than the number of uses stored in association with the identification information of the user included in this use certificate, it is determined that the use condition is satisfied. In addition, in S304 of FIG. 10, if the use restriction of the use target is lifted, the number of uses stored in association with the identification information of the user included in this use certificate is incremented by one.

[0123] In the above embodiment, the setting terminal 5 includes the authentication method adopted by the usage permission notification device 4 of the usage control unit 2 corresponding to the usage target, together with the identification information of the user who has made the usage permission request and is known by the service provider, in the usage certificate issuance request sent to the usage certificate issuing device 1, but the present invention is not limited to this. It is sufficient that the usage certificate issuing device 1 includes specific information capable of identifying the authentication method adopted by the usage permission notification device 4 of the usage control unit 2 corresponding to the usage target, together with the identification information of this user, in the usage certificate issuance request.

[0124] For example, the type and use of the user's identification information linked to the user's authentication data of the authentication method adopted by the usage permission notification device 4 of the usage control unit 2 corresponding to the target of use may be included as specific information in the license issuance request together with the identification information of the user requesting the usage permission that is known to the service provider.

[0125] In this case, the authentication data storage unit 103 of the storage unit 101 of the license issuing device 1 stores an account information table 1033 shown in FIG. 14, instead of the identification information table 1030 shown in FIG. 5 and the authentication data table 1031 shown in FIG.

[0126] An account information table 1033 is provided for each user, linked to a route ID 1032 assigned to the user. A record 10331 of the user's account information is stored in the account information table 1033. This account information record 10331 has a field 10332 for registering the type and purpose of identification information such as an email address, a mobile phone number, an employee number, a membership number, etc., a field 10333 for registering the identification information of the user of that type and purpose, a field 10334 for registering an authentication method such as face authentication, vein authentication, password authentication, etc., and a field 10335 for registering the authentication data of the user of that authentication method.

[0127] Also, in S104 and S105 of FIG. 2, when the setting terminal 5 receives from the service provider a license issuance operation including an object ID which is the identification information of the target of use specified in the license request, the identification information of the user who made the license request known to the service provider, the type and use of the user's identification information linked to the user's authentication data of the authentication method adopted by the license notification device 4 corresponding to this target of use, and the conditions of use specified in the license request, the setting terminal 5 generates a license issuance request including the specification of this information, and transmits this license issuance request to the license issuing device 1.

[0128] 2, the license issuing device 1 identifies, from the authentication data storage unit 103, an account information table 1033 having a record 10331 of account information in which the identification information of the user specified in the license issuance request is registered in a field 10333. Then, from the identified account information table 1033, the device further identifies a record 10331 of account information in which the type and use specified in the license issuance request is registered in a field 10332. Then, the device identifies the authentication data registered in a field 10335 of the authentication method registered in a field 10334 of this record 10331 as the authentication data of the user of the authentication method adopted by the license notification device 4 of the usage control unit 2 corresponding to the usage target specified by the object ID specified in the license issuance request. [Explanation of symbols]

[0129] 1: license issuing device 2, 2-1 to 2-n: usage control unit 3: Usage control device 4: Usage license notification device 5: Setting terminal 30: Short-range wireless communication section 31: Hall data storage section 32: Usage restriction release unit 33: Signature verification unit 34: Decryption unit 40: Short-distance wireless communication unit 41: Authentication data acquisition unit 42: Display unit 43: Setting information storage unit 44: Setting information receiving unit 45: Setting information search unit 46: License transmission unit 47: Notification receiver 60: WAN 61: Relay device 62: Wireless network 63: Short-range wireless communication 100: WAN interface unit 101: memory unit 102: Login information storage unit 103: Authentication data storage unit 104: Key information storage unit 105: Login processing unit 106: license issuing unit 107: encryption unit 108: signature generating unit 109: Authentication data identification unit 110: Setting information transmission unit

Claims

1. A usage control system for controlling usage of a usage object, A setting information transmission device; a usage control unit provided for each of the objects of use and controlling usage of the objects of use by locking / unlocking or access control; a setting terminal which transmits to said setting information transmission device, in accordance with an instruction from an operator, first information including a user's identification information and specific information capable of identifying an authentication method adopted by said usage control unit corresponding to said usage target, and obtains setting information including the authentication data of the user from said setting information transmission device, and notifies said usage control unit of said obtained setting information; The setting information transmission device an authentication data storage means for storing at least one piece of authentication data for each user, together with an authentication method of the authentication data, in association with at least one piece of identification information; an authentication data specifying means for specifying, from the authentication data stored in the authentication data storage means in association with the user's identification information included in the first information received from the setting terminal, the authentication data of an authentication method specified by the specification information included in the first information; a setting information transmitting means for transmitting the setting information including the authentication data identified by the authentication data identifying means to the setting terminal, The utilization control unit includes: a setting information storage means for storing the setting information notified by the setting terminal; an authentication data acquisition means for acquiring the authentication data from a user in accordance with a predetermined authentication method; a setting information retrieval means for retrieving the setting information including the authentication data acquired by the authentication data acquisition means from the setting information storage means; A usage control system comprising:

2. 2. The access control system according to claim 1, The specific information is an authentication method of the authentication data, The authentication data identification means Identifying the authentication data of the authentication method identified by the identification information included in the first information from the authentication data stored in the authentication data storage means in association with the user's identification information included in the first information A usage control system comprising:

3. 2. The access control system according to claim 1, The authentication data storage means includes: At least one piece of account information is stored for each user, the account information including authentication data and its authentication method, identification information and its type and purpose, The specific information is a type and purpose of the identification information, The authentication data identification means Identifying account information including the type and purpose included in the first information from among the account information stored in the authentication data storage means in association with a user identified by the user's identification information included in the first information, and identifying authentication data included in the account information A usage control system comprising:

4. 4. The usage control system according to claim 1, The authentication data storage means includes: At least one of the authentication data and the authentication method, which are associated with each other, and at least one of the identification information are stored for each user in association with a root ID assigned to the user. A usage control system comprising:

5. an authentication data storage means for storing, for each user, at least one authentication method among a plurality of authentication methods adopted by a usage control unit corresponding to each of a plurality of usage targets, and at least one authentication data corresponding to the authentication method, in association with at least one piece of identification information; an authentication data specifying means for receiving first information including identification information of the user and specific information capable of specifying an authentication method adopted by the usage control unit corresponding to the target of usage, and for specifying the authentication data of the authentication method specified by the specific information included in the first information from the authentication data stored in the authentication data storage means in association with the identification information of the user included in the first information; and a setting information transmitting means for transmitting setting information, which includes the authentication data identified by the authentication data identifying means and is used for confirming whether the usage conditions of the target of usage by the usage control unit are satisfied, to a source of transmission of the first information. A setting information transmission device comprising:

6. A usage control method for controlling usage of a usage object, comprising: A setting information transmission device; a usage control unit provided for each of the objects of use and controlling usage of the objects of use by locking / unlocking or access control; a setting terminal which transmits, to the setting information transmission device in accordance with an instruction from an operator, first information including a user's identification information and specific information capable of identifying an authentication method adopted by the usage control unit corresponding to the usage target, obtains setting information including the authentication data of the user from the setting information transmission device, and notifies the usage control unit of the obtained setting information, The setting information transmission device At least one piece of authentication data is stored for each user, together with an authentication method of the authentication data, in association with at least one piece of identification information; identifying the authentication data of an authentication method identified by the first information from the authentication data associated with the user's identification information included in the first information received from the setting terminal and stored, and transmitting the setting information including the identified authentication data to the setting terminal; The utilization control unit includes: The setting information notified by the setting terminal is stored, The authentication data is obtained from the user according to a predetermined authentication method, and the setting information including the authentication data is searched for. A usage control method comprising:

7. Computer, an authentication data storage means for storing, for each user, at least one authentication method among a plurality of authentication methods adopted by a usage control unit corresponding to each of a plurality of usage targets, and at least one authentication data corresponding to the authentication method, in association with at least one piece of identification information; an authentication data specifying means for receiving first information including identification information of the user and specification information capable of specifying an authentication method adopted by the usage control unit corresponding to the usage target, and specifying the authentication data of the authentication method specified by the specification information included in the first information from the authentication data stored in the authentication data storage means in association with the identification information of the user included in the first information; The setting information transmitting means transmits setting information, which includes the authentication data specified by the authentication data specifying means and is used for checking whether the usage conditions of the target of usage by the usage control unit are satisfied, to a source of the first information. A program characterized by:

Images