Control system and program

Abstract

To provide a control system that can grant authority to control a device or the like to other systems.SOLUTION: A device control server 50 is an example of a control system. The device control server 50 includes: a communication unit 52 configured to transmit an access token to a security server 70 different from the device control server 50 when a predetermined notification is received and receive request information to request at least one of control of the device 45 and acquisition of state of the device 45 from the security server 70; and an information processing unit 51. Normally, information regarding the device 45 is not transmitted or received between the device control server 50 and the security server 70. When the request information includes the access token, the information processing unit 51 causes the communication unit 52 to transmit information for performing processing according to the request information. When the request information does not include the access token, the processing according to the request information is not performed.SELECTED DRAWING: Figure 1

Description

[Technical field]

[0001] The present invention relates to a control system for controlling a device and an information processing system. [Background technology]

[0002] In recent years, the introduction of HEMS (Home Energy Management System) into homes has progressed. HEMS allows for "visualization" of the amount of energy used in a home, such as electricity or gas, by displaying it on a monitor. HEMS can also be used as a control system for controlling home appliances installed in a home. Patent Document 1 discloses a technology that allows remote control of information devices using HEMS. [Prior art documents] [Patent documents]

[0003] [Patent Document 1] JP 2014-203411 A Summary of the Invention [Problem to be solved by the invention]

[0004] The present invention provides a control system capable of granting authority, such as device control, to another system, and an information processing system to which authority is granted by the control system. [Means for solving the problem]

[0005] A control system according to one embodiment of the present invention is a control system that controls equipment installed in a building, and when a specified notification is received, the control system transmits authentication information including an access token to an information processing system different from the control system, and receives request information from the information processing system requesting at least one of control of the equipment and acquisition of the status of the equipment, and the control system and the information processing system are each located on a cloud server, and information about the equipment is not normally sent or received between the control system and the information processing system, and when the request information includes information based on the authentication information, the information processing unit causes the communication unit to send information for performing processing according to the request information, and when the request information does not include the authentication information, the information processing unit does not perform processing according to the request information.

[0006] An information processing system according to one embodiment of the present invention is an information processing system comprising: a communication unit that receives authentication information transmitted by a control system that is different from the information processing system and that has received a specified notification; and an information processing unit that causes the communication unit to transmit request information requesting at least one of control of an equipment that is to be controlled by the control system and acquisition of the status of the equipment, wherein the request information includes information based on the authentication information, each of the control system and the information processing system is located on a cloud server, and information regarding the equipment is not normally sent or received between the control system and the information processing system.

[0007] A program according to one aspect of the present invention is a program for causing a computer to function as the control system.

[0008] A program according to one aspect of the present invention is a program for causing a computer to function as the information processing system. Effect of the Invention

[0009] According to the present invention, a control system capable of granting authority such as device control to another system, and an information processing system to which authority is granted by the control system are realized. [Brief description of the drawings]

[0010] [Figure 1] FIG. 1 is a block diagram showing a functional configuration of the linkage system according to the first embodiment. [Diagram 2] FIG. 2 is a sequence diagram of a first operation example of the linkage system according to the first embodiment. [Diagram 3] FIG. 3 is a flowchart of the authentication process. [Figure 4] FIG. 4 is a sequence diagram of a second operation example of the linkage system according to the first embodiment. [Diagram 5] FIG. 5 is a sequence diagram of an operation example 3 of the linkage system according to the first embodiment. [Figure 6] FIG. 6 is a sequence diagram of an operation example 4 of the linkage system according to the first embodiment. [Figure 7] FIG. 7 is a sequence diagram of a fifth operation example of the linkage system according to the first embodiment. [Figure 8] FIG. 8 is a sequence diagram of a sixth operation example of the linkage system according to the first embodiment. [Figure 9] FIG. 9 is a first sequence diagram of an operation example 7 of the linkage system according to the first embodiment. [Figure 10] FIG. 10 is a second sequence diagram of the seventh operation example of the linkage system according to the first embodiment. [Figure 11] FIG. 11 is a first sequence diagram of an eighth operation example of the linkage system according to the first embodiment. [Figure 12] FIG. 12 is a second sequence diagram of the eighth operation example of the linkage system according to the first embodiment. [Figure 13] FIG. 13 is a block diagram illustrating a functional configuration of the linkage system according to the second embodiment. As shown in FIG. [Figure 14]FIG. 14 is a sequence diagram of a first operation example of the security system according to the second embodiment. [Figure 15] FIG. 15 is a sequence diagram of an operation example 2 of the security system according to the second embodiment. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0011] Hereinafter, the embodiments will be described in detail with reference to the drawings. Note that the embodiments described below are all comprehensive or specific examples. The numerical values, shapes, materials, components, component arrangement and connection forms, steps, and order of steps shown in the following embodiments are merely examples and are not intended to limit the present invention. In addition, among the components in the following embodiments, components that are not described in the independent claims will be described as optional components.

[0012] In addition, each drawing is a schematic diagram and is not necessarily a precise illustration. In addition, in each drawing, the same reference numerals are used for substantially the same configuration, and duplicated explanations may be omitted or simplified.

[0013] (Embodiment 1) [Configuration of the linked system] First, a description will be given of the configuration of the linkage system according to embodiment 1. Fig. 1 is a block diagram showing the functional configuration of the linkage system according to embodiment 1.

[0014] As shown in Fig. 1, the linkage system 10 according to the first embodiment includes a device control system 20 and a security system 30. Fig. 1 also shows a first mobile terminal 46 and a second mobile terminal 66. The device control system 20 is, for example, a system operated by a business operator such as a home appliance manufacturer that provides a device control service, and the security system 30 is, for example, a system operated by a business operator that provides a home security service or the like.

[0015] 1 is, for example, a residence such as an apartment building or a detached house. In the building 80, an appliance controller 40 and appliances of the appliance control system 20, and a security controller 60 and a sensor 65 of the security system 30 are installed. The appliance control server 50 of the appliance control system 20 and the security server 70 of the security system 30 are realized as a cloud (in other words, a cloud server).

[0016] [Device control system configuration] The device control system 20 is a system that enables a user residing in a building 80 to remotely control a device 45 from outside the building 80 and to acquire the status of the device 45 from outside the building 80. The device control system 20 includes a device controller 40, a device 45, and a device control server 50.

[0017] Specifically, the user can operate the first mobile terminal 46 from outside the building 80 to transmit request information requesting control of the device 45 or request information requesting acquisition of the status of the device 45 from the first mobile terminal 46 to the device control server 50. In response to the received request information, the device control server 50 can control the device 45 via the device controller 40, or acquire the status of the device 45 via the device controller 40.

[0018] Note that obtaining the state of the device 45 means, for example, obtaining the operation state of the device 45 and obtaining the power consumption state of the device 45. The operation state specifically includes a power-on state, a power-off state, and a setting state (such as a set temperature if the device 45 is an air conditioner, or brightness if the device 45 is a lighting device), etc.

[0019] Hereinafter, each component included in the device control system 20 will be described. First, the device controller 40 will be described. The device controller 40 is an example of a first control device. The device controller 40 is, for example, a HEMS controller having an energy management function, and is installed in a building 80 to manage the power consumption of the device 45 installed in the building 80. The device controller 40 also acquires the status of the device 45 and controls the device 45 installed in the building 80 (or within the premises of the building 80). The device controller 40 is not limited to a HEMS controller, and may be another home controller not having an energy management function, or a gateway device. The device controller 40 includes a first control unit 41, a first communication unit 42, and a first storage unit 43.

[0020] The first control unit 41 performs control related to the device controller 40. The first control unit 41 is realized by, for example, a microcomputer, but may also be realized by a processor or a dedicated circuit.

[0021] The first communication unit 42 is a communication circuit for the device controller 40 to communicate with the device 45, the security controller 60, and the device control server 50. The first communication unit 42 is, for example, a wireless communication circuit for performing wireless communication, but may also be a wired communication circuit for performing wired communication. There are no particular limitations on the communication standard for the communication performed by the first communication unit 42. Note that the communication between the first communication unit 42 and the device 45 complies with, for example, ECHONET Lite (registered trademark).

[0022] The first storage unit 43 is a storage device that stores the control program executed by the first control unit 41. The first storage unit 43 is realized by, for example, a semiconductor memory.

[0023] Next, the device 45 will be described. The device 45 is a device that is controlled by the device controller 40. The device 45 operates based on a control signal transmitted from the first communication unit 42 of the device controller 40. In addition, the device 45 transmits information indicating the state of the device 45 to the device controller 40 based on the control signal transmitted from the first communication unit 42.

[0024] The device 45 is, for example, a home appliance such as an air conditioner or a lighting device. The device 45 may be a floor heating device, an electric vehicle, a battery system, a fuel cell system, a heat pump water heater, a solar power generation system, or the like. The device 45 may be a security device such as an electric lock or a window or door opening / closing sensor, or an alarm such as a fire alarm. The device control system 20 may include at least one device 45, but may also include a plurality of devices 45.

[0025] Next, the device control server 50 will be described. The device control server 50 is an example of a control system, and performs information processing for a user to remotely control the device 45 from outside the building 80 and to acquire the status of the device. The device control server 50 includes an information processing unit 51, a communication unit 52, and a storage unit 53.

[0026] The information processing unit 51 performs information processing for enabling a user to remotely control the device 45 from outside the building 80 and to acquire the status of the device. The information processing unit 51 is realized by, for example, a microcomputer, but may also be realized by a processor or a dedicated circuit.

[0027] The communication unit 52 is a communication circuit for the device control server 50 to communicate with the device controller 40 and the security server 70. The communication unit 52 can also communicate with the device 45 or the security controller 60 via the device controller 40. There are no particular limitations on the communication standard for communication performed by the communication unit 52.

[0028] The storage unit 53 is a storage device that stores the control program executed by the information processing unit 51. The storage unit 53 is realized by, for example, a semiconductor memory.

[0029] As described above, according to the device control system 20, the user can remotely control the device 45 from outside the building 80 and check the status of the device 45 from outside the building 80. In other words, the device control system 20 can improve user convenience.

[0030] [Security system configuration] The security system 30 is a system for performing predetermined information processing for dealing with the occurrence of an abnormality in the building 80. The predetermined information processing is, for example, information processing for notifying a user of the occurrence of an abnormality, information processing for arranging for visitors to the building 80, etc. The security system 30 includes a security controller 60, a sensor 65, and a security server 70.

[0031] The security system 30 is, for example, a crime prevention system. When the security controller 60 detects an intruder into the building 80 using the sensor 65 while the alert mode (for example, an operation mode set when the user is absent from the building 80) is active, the security controller 60 assumes that an abnormality has occurred in the building 80 and notifies the security server 70 of the occurrence. Then, an operator of the business operator that operates the security system 30 arranges for a visitor, who rushes to the building 80. The operator also reports to the police station or the like as necessary. In the first embodiment, the operator means a person who operates a computer or the like.

[0032] The security system 30 may also be a disaster prevention system. In this case, for example, when the security controller 60 detects an outbreak of a fire or the like in the building 80 using the sensor 65 while the alert mode is active, it assumes that an abnormality has occurred in the building 80 and notifies the security server 70 of that fact. Then, an operator of the business operator that operates the security system 30 arranges for a visitor to rush to the building 80. The operator also notifies the fire department or the like as necessary.

[0033] The security system 30 may also be a monitoring system. In this case, the security controller 60 monitors the health condition of the elderly person residing in the building 80 using the sensor 65 when the alert mode is active, and notifies the security server 70 of any abnormality that may occur. In response, an operator of the business that operates the security system 30 arranges for a visitor to come to the building 80. The operator also contacts the family of the elderly person (for example, a family member living far away).

[0034] Each component of the security system 30 will be described below. First, the security controller 60 will be described. The security controller 60 is an example of a second control device, and is installed in the building 80, and detects the occurrence of an abnormality in the building 80 using a sensor 65. Here, the occurrence of an abnormality in the building means the occurrence of an abnormality within the premises of the building 80, and includes not only the occurrence of an abnormality within the building 80, but also the occurrence of an abnormality outside the building 80. The security controller 60 includes a second control unit 61, a second communication unit 62, and a second storage unit 63.

[0035] The second control unit 61 performs control related to the security controller 60. The second control unit 61 is realized by, for example, a microcomputer, but may also be realized by a processor or a dedicated circuit.

[0036] The second communication unit 62 is a communication circuit for the security controller 60 to communicate with the sensor 65, the device controller 40, and the security server 70. The second communication unit 62 is, for example, a wireless communication circuit for performing wireless communication, but may also be a wired communication circuit for performing wired communication. There is no particular limitation on the communication standard for the communication performed by the second communication unit 62.

[0037] The second storage unit 63 is a storage device that stores the control program executed by the second control unit 61. The second storage unit 63 is realized by, for example, a semiconductor memory.

[0038] Next, the sensor 65 will be described. The sensor 65 is a sensor for detecting the occurrence of an abnormality in a building. When the security system 30 is a crime prevention system, the sensor 65 is a window or door opening / closing sensor, a glass breakage sensor, a human presence sensor, or the like. When the security system 30 is a disaster prevention system, the sensor 65 is a heat sensor, a smoke sensor, a gas leak sensor, or the like. When the security system 30 is a monitoring system, the sensor 65 is a monitoring sensor, a vital sensor, or the like. The security system 30 is required to be provided with at least one sensor 65, but may be provided with multiple sensors 65.

[0039] Next, a description will be given of the security server 70. The security server 70 is an example of an information processing system, and performs information processing based on an abnormality notification received from the security controller 60. The security server 70 includes an information processing unit 71, a communication unit 72, and a storage unit 73.

[0040] The information processing unit 71 performs information processing based on the abnormality notification. The information processing unit 71 is realized by, for example, a microcomputer, but may also be realized by a processor or a dedicated circuit.

[0041] The communication unit 72 is a communication circuit for the security server 70 to communicate with the security controller 60 and the device control server 50. The communication unit 72 can also communicate with the sensor 65 or the device controller 40 via the security controller 60. There are no particular limitations on the communication standard for communication performed by the communication unit 72.

[0042] The storage unit 73 is a storage device that stores the control program executed by the information processing unit 71. The storage unit 73 is realized by, for example, a semiconductor memory.

[0043] As described above, the security system 30 allows the user to receive flexible and reliable responses through the operator and visitors. In the following, the security system 30 is described as a crime prevention system, but as described above, the security system 30 may be a disaster prevention system or a monitoring system. In the following description, it is assumed that the equipment controller 40 and the security controller 60 are installed in the same building 80 (i.e., they are in a corresponding relationship) and this is shared within the linkage system 10.

[0044] [Example 1] The device control system 20 and the security system 30 are usually independent systems that do not transmit or receive information between the systems. If the device control system 20 and the security system 30 were linked to enable the security system 30 to control the devices 45 in the building 80 and obtain the status of the devices 45, it would be possible to realize more flexible responses by operators and visitors. However, there are security and privacy concerns when the security system 30 is easily granted access authority to the device control system 20.

[0045] Therefore, the linkage system 10, when the device control server 50 of the device control system 20 receives a predetermined notification, grants the security system 30 the authority to access the device control system 20. The predetermined notification is, for example, an abnormality notification indicating that an abnormality has occurred in the building 80, but may be any other notification.

[0046] The following describes a first operation example of the linking system 10. FIG.

[0047] In the following operation example 1, it is assumed that at least one of the ID of the security controller 60 and the ID of the security server 70 is stored in the memory unit 53 of the device control server 50 as ID information in a state in which the ID of the device controller 40 is associated with the ID of the device controller 40.

[0048] First, the second control unit 61 of the security controller 60 detects the occurrence of an abnormality in the building 80 (S11). For example, when an intruder into the building 80 is detected by the sensor 65 while the alert mode is enabled by the user, the second control unit 61 determines (detects) this as the occurrence of an abnormality in the building 80. When the second control unit 61 detects the occurrence of an abnormality in the building 80, it causes the second communication unit 62 to transmit an abnormality notification to the security server 70 (S12).

[0049] The abnormality notification transmitted by the second communication unit 62 is received by the communication unit 72 of the security server 70 (S13). When the abnormality notification is received by the communication unit 72, the information processing unit 71 causes the communication unit 72 to transmit the abnormality notification to the device control server 50 (S14).

[0050] In step S13, at least one of the ID of the security controller 60 and the ID of the security server 70 is received together with the abnormality notification. At least one of the ID of the security controller 60 and the ID of the security server 70, together with the ID information stored in the storage unit 53, is used to identify the device controller 40 to which the instruction information is to be sent in step S22 described later.

[0051] When the abnormality notification transmitted by the communication unit 72 is received by the communication unit 52 of the device control server 50 (S15), the information processing unit 51 generates an access token for temporarily granting the security server 70 authority to control the device 45 (specifically, authority to control the device 45 and / or acquire the status of the device 45) (S16). The access token is an example of authentication information. The access token may have a set expiration date, or may have a set number of uses (e.g., valid only once). Then, the information processing unit 51 causes the communication unit 52 to transmit the generated access token to the security server 70 (S17).

[0052] The access token transmitted by the communication unit 52 is received by the communication unit 72 of the security server 70 (S18). On the other hand, the device control server 50 that transmitted the access token transitions to an access permission mode (S19).

[0053] Thereafter, the information processing unit 71 of the security server 70 causes the communication unit 72 to transmit request information to the device control server 50 based on an operation by an operator or the like (S20). The request information is information requesting at least one of control of the device 45 installed in the building 80 and acquisition of the status of the device 45. The request information includes the access token received in step S18. Note that it is not essential that the request information includes the access token, and information that cannot be generated without using the access token, such as information generated based on the access token, may be included. In other words, it is sufficient for the request information to include information based on the access token (including the access token itself).

[0054] When the communication unit 52 of the device control server 50 receives request information (S21), the information processing unit 51 performs authentication processing (S22). Fig. 3 is a flowchart of the authentication processing.

[0055] The information processing unit 51 first judges whether or not the device control server 50 is in the access permission mode (S31). When the information processing unit 51 judges that the device control server 50 is in the access permission mode (Yes in S31), it judges whether or not the access token included in the request information is the same access token as the access token transmitted in step S17 (in other words, a correct access token) (S32). If an expiration date or number of uses is set for the access token, the expiration date and number of uses are also judged in step S32. Note that in step S32, it is only necessary to judge whether or not the request information includes information based on the access token transmitted in step S17.

[0056] When the information processing unit 51 determines that the access token is a valid access token (Yes in S32), it causes the communication unit 52 to transmit, to the device controller 40, instruction information for instructing the device controller 40 to perform processing in accordance with the request information (S33). In other words, the instruction information is information for performing processing in accordance with the request information (i.e., at least one of controlling the device 45 and acquiring the status of the device 45, as requested by the security server 70). Having received the instruction information, the device controller 40 performs control of the device 45 in accordance with the request information, for example, to unlock an electric lock on a door of the building 80.

[0057] On the other hand, when it is determined in step S31 that the access permission mode is not set (No in S31), and when it is determined in step S32 that the access token is not a correct access token (No in S32), the information processing unit 51 does not cause the communication unit 52 to transmit the instruction information. In other words, the information processing unit 51 does not perform processing according to the request information.

[0058] If the instruction information is transmitted as a result of the authentication process in step S22, the transmitted instruction information is received by the first communication unit 42 of the device controller 40 (S23). When the instruction information is received by the first communication unit 42, the first control unit 41 executes the process instructed by the instruction information (i.e., at least one of controlling the device 45 and acquiring the status of the device 45, which are requested by the security server 70) (S24). When the device controller 40 acquires the status of the device 45, it transmits information indicating the status of the device 45 to the security server 70 via the device control server 50.

[0059] As described above, in the linkage system 10, the device control server 50 includes a communication unit 52 that transmits an access token to the security server 70 when an abnormality notification is received, and receives request information from the security server 70 requesting at least one of control of the device 45 and acquisition of the status of the device 45, and an information processing unit 51. When the request information includes an access token, the information processing unit 51 causes the communication unit 52 to transmit, to the device controller 40, instruction information for performing processing according to the request information.

[0060] Such a linkage system 10 can grant the security server 70 access authority to the device control server 50 upon receipt of an abnormality notification.

[0061] [Example 2] In the operation example 1, the abnormality notification transmitted by the security controller 60 is received by the device control server 50 via the security server 70. However, the abnormality notification transmitted by the security controller 60 may be received by the device control server 50 via the device controller 40. Fig. 4 is a sequence diagram of such an operation example 2 of the linkage system 10.

[0062] In the following operation example 2, it is assumed that the ID of the security controller 60 is stored in the first storage unit 43 of the device controller 40 in advance.

[0063] First, the second control unit 61 of the security controller 60 detects the occurrence of an abnormality in the building 80 (S11). When the occurrence of an abnormality in the building 80 is detected, the second control unit 61 causes the second communication unit 62 to transmit an abnormality notification to the device controller 40 (S41).

[0064] The abnormality notification transmitted by the second communication unit 62 is received by the first communication unit 42 of the device controller 40 (S42). When the first communication unit 42 receives the abnormality notification, the first control unit 41 causes the first communication unit 42 to transmit the abnormality notification to the device control server 50 (S43). The abnormality notification transmitted by the first communication unit 42 is received by the communication unit 52 of the device control server 50 (S44). The subsequent processing is similar to that in the first operation example.

[0065] [Example 3] In the operation example 1, after the security controller 60 transmits the abnormality notification, the safety of the building 80 may be confirmed by a resident of the building 80 or a visitor dispatched by the business operator operating the security system 30. In such a case, the security controller 60 transmits an abnormality release notification by operating the security controller 60. Fig. 5 is a sequence diagram of the operation example 3 of the linkage system 10.

[0066] The processes in steps S11 to S19 are the same as those in operation example 1. After that, when the safety of the building is confirmed and the security controller 60 is operated, the second control unit 61 causes the second communication unit 62 to transmit an abnormality release notification to the security server 70 (S51).

[0067] The abnormality recovery notification transmitted by the second communication unit 62 is received by the communication unit 72 of the security server 70 (S52). When the abnormality recovery notification is received by the communication unit 72, the information processing unit 71 causes the communication unit 72 to transmit the abnormality recovery notification to the device control server 50 (S53).

[0068] When the abnormality recovery notification transmitted by the communication unit 72 is received by the communication unit 52 of the device control server 50 (S54), the device control server 50 that transmitted the access token releases the access permission mode (S55). The abnormality recovery notification may be received by the device control server 50 via the device controller 40 as in the second operation example.

[0069] Thereafter, the information processing unit 71 of the security server 70 causes the communication unit 72 to transmit request information about the inside of the building 80 to the device control server 50 based on an operation by the operator or the like (S20). When the request information is received by the communication unit 52 of the device control server 50 (S21), the information processing unit 51 performs authentication processing (S22).

[0070] In the authentication process, if request information is received while the access permission mode is deactivated, the authentication fails (No in S31 in FIG. 3 above), and no instruction information is sent. In other words, the information processing unit 51 of the device control server 50 does not accept request information while the access permission mode is deactivated.

[0071] As described above, when request information is received by the communication unit 52 after the communication unit 52 receives an abnormality resolution notification indicating that the abnormal condition of the building 80 has been resolved, the information processing unit 51 does not perform processing according to the request information even if the request information contains a correct access token.

[0072] The linkage system 10 can grant the security server 70 access authority to the device control server 50 only during the period when it is estimated that an abnormality has occurred in the building 80.

[0073] [Example 4] As described above, when the occurrence of an abnormality is detected by the security controller 60, a visitor dispatched by the operator of the security system 30 rushes to the building 80. In this case, the visitor who rushes to the building 80 may request control of the device 45 and acquisition of the status of the device 45. In such a case, the access token may be generated by being triggered by a request for generating the access token transmitted by a second mobile terminal 66 that is operated by the visitor and capable of communicating with the security controller 60. FIG. 6 is a sequence diagram of an operation example 4 of such a linkage system 10. The second mobile terminal 66 is a general-purpose mobile terminal such as a smartphone or a tablet terminal, but may also be a dedicated terminal.

[0074] The processes in steps S11 to S15 are the same as those in operation example 1. After that, the second mobile terminal 66 accepts a predetermined operation by the visitor (S61) and transmits a request to generate an access token to the security controller 60 (S62).

[0075] The generation request transmitted by the second portable terminal 66 is received by the second communication unit 62 of the security controller 60 (S63). When the generation request is received by the second communication unit 62, the second control unit 61 causes the second communication unit 62 to transmit the generation request to the device controller 40 (S64).

[0076] The generation request transmitted by the second communication unit 62 is received by the first communication unit 42 of the device controller 40 (S65). When the generation request is received by the first communication unit 42, the first control unit 41 causes the first communication unit 42 to transmit the generation request to the device control server 50 (S66).

[0077] The generation request transmitted by the first communication unit 42 is received by the communication unit 52 of the device control server 50 (S67). When the generation request is received by the communication unit 52, the information processing unit 51 generates an access token (S16) and causes the communication unit 52 to transmit the generated access token to the security server 70 (S17). The subsequent processing is similar to that in the first operation example.

[0078] As described above, when an abnormality notification is received, the communication unit 52 of the device control server 50 transmits an access token to the security server 70 in response to a request for generating an access token transmitted by the second mobile terminal 66 capable of communicating with the security controller 60.

[0079] The linkage system 10 can grant the security server 70 access authority to the device control server 50 in response to a request from a visitor who has arrived at the building 80 and is operating the second mobile terminal 66 .

[0080] In the above-described operation example 4, the second mobile terminal 66 transmits a request to generate an access token to the security controller 60. However, the second mobile terminal 66 may be capable of communicating with the device controller 40 or the device control server 50, and may transmit a request to generate an access token to the device controller 40 or the device control server 50.

[0081] [Example 5] In the operation example 1, the abnormality notification is transmitted to the communication unit 52 of the device control server 50 when the security controller 60 detects an abnormality in the building 80. However, the abnormality notification may be transmitted to the communication unit 52 of the device control server 50 when the device controller 40 detects an abnormality in the building 80. Fig. 7 is a sequence diagram of such an operation example 5 of the linkage system 10.

[0082] First, the first control unit 41 of the device controller 40 detects the occurrence of an abnormality in the building 80 (S71). For example, if a device having a function similar to that of the sensor 65 is used as the device 45, the first control unit 41 can detect the occurrence of an abnormality in the building 80 using the device 45. When the first control unit 41 detects the occurrence of an abnormality in the building 80, it causes the first communication unit 42 to transmit an abnormality notification to the device control server 50 (S72).

[0083] When the abnormality notification transmitted by the first communication unit 42 is received by the communication unit 52 of the device control server 50 (S73), the information processing unit 51 generates an access token (S16). Then, the information processing unit 51 causes the communication unit 52 to transmit the generated access token (S17). The subsequent processing is the same as in the first operation example.

[0084] As described above, the abnormality notification may be transmitted to the communication unit 52 when the device controller 40 detects an abnormality in the building 80. Such a linkage system 10 can reduce the amount of communication required for the abnormality notification to reach the device control server 50.

[0085] [Example 6] In the fifth operational example, the abnormality notification is not transmitted to the security server 70, but the abnormality notification may be transmitted to the security server 70. Fig. 8 is a sequence diagram of a sixth operational example of the linkage system 10.

[0086] First, the first control unit 41 of the device controller 40 detects the occurrence of an abnormality in the building 80 (S81). When the first control unit 41 detects the occurrence of an abnormality in the building 80, it causes the first communication unit 42 to transmit an abnormality notification to the security controller 60 (S82). The abnormality notification transmitted by the first communication unit 42 is received by the second communication unit 62 of the security controller 60 (S83). When the second communication unit 62 receives the abnormality notification, the second control unit 61 causes the second communication unit 62 to transmit the abnormality notification to the security server 70 (S84). The abnormality notification transmitted by the second communication unit 62 is received by the communication unit 72 of the security server 70.

[0087] Furthermore, when the first control unit 41 detects the occurrence of an abnormality in the building 80, it causes the first communication unit 42 to transmit an abnormality notification to the device control server 50 (S86). When the abnormality notification transmitted by the first communication unit 42 is received by the communication unit 52 of the device control server 50 (S87), the information processing unit 51 generates an access token (S16). Then, the information processing unit 51 causes the communication unit 52 to transmit the generated access token to the security server 70 (S17). The subsequent processing is similar to that in the first operation example.

[0088] As described above, when an abnormality in the building 80 is detected by the device controller 40, the abnormality notification may be transmitted not only to the communication unit 52 of the device control server 50 but also to the communication unit 72 of the security server 70. Such a linkage system 10 can notify the security server 70 of the occurrence of an abnormality even when an abnormality is detected by the device controller 40.

[0089] [Example 7] As described above, when the security controller 60 detects the occurrence of an abnormality, a visitor dispatched from the business operator operating the security system 30 rushes to the building 80. In this case, the visitor who rushes to the building 80 may want to unlock the door of the building 80. Generally, in such a case, the visitor needs to go to a predetermined place to pick up the key to the door of the building 80 in advance. However, in the linkage system 10, the visitor can operate the second mobile terminal 66 in the vicinity of the building 80 to give the visitor the authority to unlock the door of the building 80. FIG. 9 is a first sequence diagram of an operation example 7 of such a linkage system 10. In the following description of the operation example 7, it is assumed that the second mobile terminal 66 is capable of communicating with the device control server 50 and the device controller.

[0090] Steps S11 to S19 are the same as in the operation example 1. After that, the information processing unit 71 of the security server 70 performs a process of selecting a mobile terminal of a visitor (S91). The business operator who operates the security system 30 has visitors (in other words, security guards) waiting in various locations to rush to the building when an abnormality occurs in the building. Therefore, when an abnormality occurs in the building 80, the security server 70 selects a mobile terminal of a visitor that is considered to be located near the building 80 from among multiple candidates of mobile terminals registered in advance, and transmits an access token to the selected mobile terminal (here, it is assumed that the second mobile terminal 66 is selected) (S92).

[0091] This selection is made, for example, based on visitor schedule information (information indicating which visitor is waiting at which location at which time and which mobile device he / she is carrying) previously stored in the storage unit 73. The selection may also be made based on current location information of the mobile device of each visitor that is periodically acquired by the security server 70 from the mobile device. The current location information of the mobile device is measured, for example, by a GPS (Global Positioning System) module equipped in the mobile device.

[0092] When the second mobile terminal 66 receives the access token (S93), it transmits request information including the access token to the device control server 50 (S94). When the request information is received by the communication unit 52 of the device control server 50 (S95), the information processing unit 51 performs authentication processing (S22). If instruction information is transmitted as a result of the authentication processing, the transmitted instruction information is received by the first communication unit 42 of the device controller 40 (S23), and the first control unit 41 executes the processing instructed by the instruction information (in this case, unlocking the electric lock of the building 80) (S24).

[0093] The authentication process in step S21 may be performed by the device controller 40. Fig. 10 is a second sequence diagram of the seventh operation example of the linkage system 10.

[0094] Steps S11 to S18 are almost the same as in Operation Example 1, but in step S17, the access token is also transmitted to the device controller 40, and the first communication unit 42 of the device controller 40 receives it (S101). The received access token is stored in the first storage unit 43. The device controller 40 that has received the access token transitions to an access permission mode (S102).

[0095] Thereafter, the information processing unit 71 of the security server 70 performs a process of selecting the visitor's mobile terminal (S91), and transmits an access token to the selected mobile terminal (here, it is assumed that the second mobile terminal 66 is selected) (S92).

[0096] When the second portable terminal 66 receives the access token (S93), it transmits request information including the access token to the device controller 40 (S103). At this time, the communication between the second portable terminal 66 and the device controller 40 is, for example, a relatively short-distance wireless communication that does not involve a wide area communication network such as the Internet. In other words, this communication is performed when a visitor carrying the second portable terminal 66 approaches the building 80.

[0097] When the request information is received by the first communication unit 42 of the device controller 40 (S104), the first control unit 41 performs an authentication process (S105). If the authentication process determines that the access token included in the request information is the same as the access token stored in the first storage unit 43 (i.e., authentication is successful), the first control unit 41 executes the process instructed by the request information (in this case, unlocking the electronic lock of the building 80) (S106).

[0098] As described above, in the seventh operational example, when an abnormality occurs, the electronic lock of the building 80 can be unlocked using the second mobile terminal 66 carried by a visitor who belongs to the company that operates the security system 30.

[0099] [Example 8] The first sequence diagram of the seventh operation example (FIG. 9) may be combined with the fourth operation example (FIG. 6). FIG. 11 is a first sequence diagram of an eighth operation example of the linkage system 10.

[0100] In FIG. 11, the processing from step S11 to step S19 is almost the same as in operation example 4, but whereas in operation example 4 the request for generating an access token is sent to the device control server 50 via the security controller 60 and the device controller 40 (S62 to S67), in FIG. 11 the request is sent to the device control server 50 via the security server 70 (S111 to S114).

[0101] The processes from step S91 onwards, which are performed after step S19, are similar to those in the first sequence diagram of the seventh operational example (FIG. 9).

[0102] Moreover, the second sequence diagram of the operation example 7 (FIG. 10) may be combined with the operation example 4 (FIG. 6). FIG. 12 is a second sequence diagram of the operation example 8 of the linkage system 10.

[0103] 12, the processes of steps S11 to S19 are the same as those of FIG. 11, but in step S17, the access token is also transmitted to the device controller 40, and the first communication unit 42 of the device controller 40 receives it (S101). The received access token is stored in the first storage unit 43. The device controller 40 that has received the access token transitions to an access permission mode (S102).

[0104] The processes from step S91 onwards, which are performed after step S19, are similar to those in the second sequence diagram of the seventh operational example (FIG. 10).

[0105] According to such an operational example 8, a visitor who belongs to the company that operates the security system 30 can obtain the authority to unlock the electronic lock of the building 80 by operating the second mobile terminal 66.

[0106] [Variations] However, it is possible that the security server 70 that has received the access token may not be given the authority to control all of the devices 45 that are the control targets of the device control server 50 (device controller 40). In this case, the user may be able to set the level of authority to be given to the security server 70 with respect to the control of the devices 45. Specifically, the user may set the security server 70 to allow control of lighting devices but not to allow control of air conditioners. The user may also set the security server 70 to allow acquisition of the status of the devices 45 but not to allow control of the devices 45.

[0107] Such settings are made by the user, for example, via a user interface included in the device controller 40 or the first mobile terminal 46. The setting contents are transmitted to the device control server 50 as setting information and stored in the storage unit 53.

[0108] In this way, setting information indicating processes that are permitted to be executed as processes corresponding to the request information received in step S21 is stored in the storage unit 53. When a process that is not permitted is requested by the request information, the information processing unit 51 does not execute the process even if the request information includes a valid access token.

[0109] In such a linkage system 10, it is possible to set the level of authority to be given to the security server 70 by means of an access token.

[0110] [Effects, etc.] As described above, the device control server 50 is an example of a control system that controls the device 45. The device control server 50 includes a communication unit 52 that transmits an access token to a security server 70 different from the device control server 50 when a predetermined notification is received, and receives request information from the security server 70 requesting at least one of control of the device 45 and acquisition of the status of the device 45, and an information processing unit 51. When the request information includes information based on the access token, the information processing unit 51 causes the communication unit 52 to transmit information for performing processing according to the request information, and when the request information does not include the access token, the information processing unit 51 does not perform processing according to the request information. The security server 70 is an example of an information processing system, and the access token is an example of authentication information.

[0111] Upon receiving a predetermined notification, the device control server 50 can grant the security server 70 authority to control the device 45, for example.

[0112] Furthermore, for example, the predetermined notification includes an abnormality notification indicating that an abnormality has occurred in the building 80 in which the device 45 is installed.

[0113] Upon receiving an abnormality notification, the device control server 50 can grant the security server 70 authority to control the device 45, for example.

[0114] Also, for example, a device controller 40 capable of communicating with the device control server 50 is installed in the building 80. A predetermined notification is transmitted to the communication unit 52 when an abnormality in the building 80 is detected by the device controller 40. The device controller 40 is an example of a first control device.

[0115] Such a device control server 50 can receive the abnormality notification without passing through the security system 30, and therefore the amount of communication required to receive the abnormality notification can be reduced.

[0116] Also, for example, a security controller 60 capable of communicating with the security server 70 is installed in the building 80. A predetermined notification is transmitted to the communication unit 52 when an abnormality in the building 80 is detected by the security controller 60. The security controller 60 is an example of a second control device.

[0117] Such a device control server 50 can receive a notification of an abnormality in the building 80 without passing through the security server 70, and therefore the amount of communication required to receive the abnormality notification can be reduced.

[0118] Furthermore, for example, the communication unit 52 transmits an access token to the security server 70 in response to a request for generating an access token transmitted by the second mobile terminal 66. The request for generating an access token is an example of an authentication information request.

[0119] Such a device control server 50 can grant authority to control the device 45 to the security server 70 in response to a request from a person operating the second mobile terminal 66 (for example, a visitor who has rushed into the building 80).

[0120] Furthermore, for example, when request information is received by the communication unit 52 after the communication unit 52 receives an abnormality resolution notification indicating that the abnormal condition of the building 80 has been resolved, the information processing unit 51 does not perform processing according to the request information even if the request information includes information based on the access token.

[0121] Such a device control server 50 can grant the security server 70 authority to control the device 45, etc., only during the period when it is estimated that an abnormality has occurred in the building 80.

[0122] For example, the computer further includes a storage unit 53 for storing setting information indicating processes that are permitted to be executed as processes corresponding to the request information.

[0123] Such a device control server 50 can set the level of authority to be given to the security server 70 by means of an access token.

[0124] Also, for example, the security server 70 is a system that performs predetermined information processing to deal with the occurrence of an abnormality when the occurrence of an abnormality in the building 80 is detected.

[0125] Such an equipment control server 50 can grant authority to control equipment 45, etc. to a security server 70 that performs specified information processing to deal with the occurrence of an abnormality when an abnormality is detected in building 80.

[0126] The security server 70 also includes a communication unit 72 that receives an access token transmitted by a device control server 50 that is different from the security server 70 and that has received a predetermined notification, and an information processing unit 71 that causes the communication unit 72 to transmit request information requesting at least one of control of a device 45 that is a control target of the device control server 50 and acquisition of the status of the device 45. The request information includes information based on the access token. In this case, the security server 70 is an example of an information processing system, and the device control server 50 is an example of a control system. The access token is an example of authentication information.

[0127] Such a security server 70 can obtain authority to control the device 45, etc., when the device control server 50 receives a predetermined notification.

[0128] The present invention may be realized as a program for causing a computer to function as the device control server 50, or may be realized as a program for causing a computer to function as the security server .

[0129] (Embodiment 2) [composition] In the second embodiment, an operation performed by the security system 30 alone when an abnormality occurs will be described. As shown in Fig. 13, in the second embodiment, the security controller 60 has a function of controlling a device (specifically, an electric lock 67). Fig. 13 is a block diagram showing the functional configuration of the linkage system 10 assumed in the second embodiment.

[0130] [Example 1] As described above, when the occurrence of an abnormality is detected by the security controller 60, a visitor dispatched by the business operator operating the security system 30 rushes to the building 80. In the second embodiment, an operation of the security system 30 alone giving the second mobile terminal 66 the authority to unlock the electric lock 67 so that the visitor who rushes to the building 80 can unlock the door of the building 80 will be described. Fig. 14 is a sequence diagram of a first operation example of the security system 30 according to the second embodiment.

[0131] First, the second control unit 61 of the security controller 60 detects the occurrence of an abnormality in the building 80 (S201). For example, when an intruder into the building 80 is detected by the sensor 65 while the alert mode is enabled by the user, the second control unit 61 determines (detects) this as the occurrence of an abnormality in the building 80. When the second control unit 61 detects the occurrence of an abnormality in the building 80, it causes the second communication unit 62 to transmit an abnormality notification to the security server 70 (S202).

[0132] The abnormality notification transmitted by the second communication unit 62 is received by the communication unit 72 of the security server 70 (S203). When the abnormality notification is received by the communication unit 72, the information processing unit 71 performs a process of selecting a mobile terminal of a visitor (S204). The operator of the security system 30 has visitors (in other words, security guards) waiting in various locations to rush to the building when an abnormality occurs in the building. Therefore, when an abnormality occurs in the building 80, a mobile terminal of a visitor (specifically, the second mobile terminal 66) that is considered to be located near the building 80 is selected from among multiple candidates of mobile terminals registered in advance. In other words, when the information processing unit 71 receives an abnormality notification, the information processing unit 71 selects the second mobile terminal 66 from among multiple candidates of mobile terminals based on the current positions of the multiple mobile terminals (more specifically, the distance between each of the multiple candidates of mobile terminals and the building 80).

[0133] This selection is made, for example, based on visitor schedule information (information indicating which visitor is waiting at which location at which time and which mobile device he / she is carrying) previously stored in the storage unit 73. The above selection may also be made based on current location information acquired by the communication unit 72 of the security server 70 periodically acquiring current location information of the mobile device of each visitor from the mobile device. The current location information of the mobile device is measured, for example, by a GPS module equipped in the mobile device.

[0134] The number of candidates for the multiple mobile terminals may be changed depending on the contract between the resident of the building 80 and the business operator operating the security system 30. For example, the higher the amount paid by the resident for the contract, the more candidates for the multiple mobile terminals there are (in other words, the more visitors are the target of emergency response).

[0135] Next, the information processing unit 71 generates an access token for temporarily granting the second mobile terminal 66 the authority to unlock the electric lock 67 (S205). The access token is an example of authentication information. The access token may have a set expiration date, or may have a set number of uses (e.g., valid only once). Then, the information processing unit 71 causes the communication unit 72 to transmit the generated access token to the security controller 60 (S206).

[0136] The access token transmitted by the communication unit 72 is received by the second communication unit 62 of the security controller 60 (S207). The received access token is stored in the second storage unit 63.

[0137] Furthermore, the information processing unit 71 causes the communication unit 72 to transmit an abnormality notification including the generated access token to the second mobile terminal 66 (i.e., the mobile terminal selected in step S204) (S208). Upon receiving the abnormality notification (S209), the second mobile terminal 66 stores the access token included in the abnormality notification in a storage unit provided in the second mobile terminal 66, and further urges the visitor to head toward the building 80 by outputting an image, a sound, and the like in response to the abnormality notification. As a result, the second mobile terminal 66 moves close to the building 80 together with the visitor (S210).

[0138] Thereafter, the second portable terminal 66 receives a predetermined operation by the visitor (S211) and transmits request information including the access token (more specifically, the access token received in step S209) to the security controller 60 (S212). At this time, the communication between the second portable terminal 66 and the security controller 60 is, for example, a relatively short-distance wireless communication that does not involve a wide area communication network such as the Internet. In other words, this communication is performed when the visitor approaches the building 80 carrying the second portable terminal 66.

[0139] There is no particular limitation on the method of transmitting the request information to the security controller 60. For example, when the second mobile terminal 66 is held over the electric lock 67, an access token may be transmitted to the security controller 60 via the electric lock 67.

[0140] Also, it is not essential that the request information includes an access token, and the request information may include information that cannot be generated without using the access token, such as information generated based on the access token. In other words, the request information only needs to include information based on the access token (including the access token itself).

[0141] When the second communication unit 62 of the security controller 60 receives the request information (S213), the first control unit 41 performs an authentication process (S214). When it is determined in the authentication process that the access token included in the request information is the same as the access token stored in the second storage unit 63 (i.e., the access token received in step S207) (i.e., authentication is successful), the second control unit 61 executes the process instructed by the request information (S215). The process instructed by the request information is specifically unlocking the electric lock 67 of the building 80, but may be at least one of controlling the device and acquiring the device status, as in the first embodiment. Note that if the request information does not include the access token received in step S207, the process according to the request information is not performed. In addition, in the authentication process, it is only necessary to determine whether the request information includes information based on the access token.

[0142] According to the above-described operational example 1, the security system 30 alone can give the visitor the authority to unlock the door of the building 80.

[0143] [Example 2] If each of the multiple candidate portable terminals holds a unique access token in advance, and if the security server 70 manages the access tokens of each of the multiple candidate portable terminals using management information, there is no need to provide the access token to the second portable terminal 66. Fig. 15 is a sequence diagram of such an operation example 2 of the security system 30 according to the second embodiment.

[0144] Steps S201 to S204 are the same as those in Operation Example 1. After the second mobile terminal 66 is selected in step S204, the access token corresponding to the second mobile terminal 66 is identified (S216) by referring to management information previously stored in the storage unit 73. After that, the information processing unit 71 causes the communication unit 72 to transmit the identified access token to the security controller 60 (S206).

[0145] The access token transmitted by the communication unit 72 is received by the second communication unit 62 of the security controller 60 (S207). The received access token is stored in the second storage unit 63.

[0146] Furthermore, the information processing unit 71 causes the communication unit 72 to transmit an abnormality notification not including an access token to the second portable terminal 66 (S217). When the second portable terminal 66 receives the abnormality notification (S209), it urges the visitor to head toward the building 80 by outputting an image, a sound, and the like in response to the abnormality notification. As a result, the second portable terminal 66 moves closer to the building 80 together with the visitor (S210).

[0147] Thereafter, the second portable terminal 66 receives a predetermined operation from the visitor (S211), and transmits request information including the access token stored in advance to the security controller 60 (S217). The subsequent processing is the same as in the first operation example.

[0148] According to the above-described second operational example, it is possible to give the visitor the authority to unlock the door of the building 80 without providing an access token to the second mobile terminal 66.

[0149] [Effects, etc.] As described above, in the operation example 1 of the second embodiment, the security system 30 includes the communication unit 72 that transmits an access token to the second mobile terminal 66 when a predetermined notification is received, the second communication unit 62 that receives request information from the second mobile terminal 66 requesting at least one of device control and device status acquisition, and the second control unit 61. When the request information includes information based on the access token, the second control unit 61 causes the second communication unit 62 to transmit information for performing processing according to the request information, and when the request information does not include the access token, the second control unit 61 does not perform processing according to the request information. The security system 30 is an example of an information processing system. The device is, for example, an electric lock 67.

[0150] Such a security system 30 can grant the second mobile terminal 66 authority to control devices, etc.

[0151] Moreover, in the operation example 2 of the second embodiment, the security system 30 includes a second communication unit 62 that receives request information requesting at least one of controlling the device and acquiring the device's status from a mobile terminal that holds authentication information in advance when a predetermined notification is received, and a second control unit 61. When the request information includes information based on an access token, the second control unit 61 causes the second communication unit 62 to transmit information for performing processing according to the request information, and when the request information does not include an access token, the second control unit 61 does not perform processing according to the request information. The security system 30 is an example of an information processing system. The device is, for example, an electric lock 67.

[0152] Such a security system 30 can grant the second mobile terminal 66 authority to control devices, etc.

[0153] Furthermore, when a predetermined notification is received, the second control unit 61 performs a process of selecting the second portable terminal 66 from among a plurality of portable terminal candidates.

[0154] Such a security system 30 can grant authority such as control of equipment to a selected second mobile terminal 66 .

[0155] Furthermore, when a predetermined notification is received, the second control unit 61 performs a process of selecting a second mobile terminal 66 from among a plurality of candidate mobile terminals based on the positions of the plurality of mobile terminals.

[0156] Such a security system 30 can select the mobile terminal located closest to the building 80 as the second mobile terminal 66 .

[0157] Note that the same operations as those of the security system 30 described in the second embodiment may be performed by the device control system 20. In the second embodiment, the device control system 20 is another example of an information processing system.

[0158] (Other embodiments) Although the embodiment has been described above, the present invention is not limited to the above embodiment.

[0159] In the above embodiment, a security system is exemplified as an information processing system, but the information processing system may be a system other than a security system. For example, the information processing system may be a voice recognition system. In addition, although an abnormality notification is exemplified as the predetermined notification, the predetermined notification may be another notification determined corresponding to the information processing system.

[0160] In the above embodiment, a device control server is exemplified as a control system, and a security system is exemplified as an information processing system. That is, the control system and the information processing system are each realized as a single device. However, the control system and the information processing system may each be realized by a plurality of devices. When a system such as a control system and an information processing system is realized by a plurality of devices, the components of the system may be distributed in any manner among the plurality of devices.

[0161] For example, the communication method between the devices in the above embodiment is not particularly limited. In addition, a relay device (not shown) may be used in the communication between the devices. In addition, the sequence diagram described in the above embodiment shows an example of a transmission path of information by communication. For example, in the above embodiment, the security server and the device controller are described as not communicating directly with each other, but the security server and the device controller may transmit information by communicating directly with each other. The same applies to the device control server and the security controller.

[0162] In the above embodiment, the process executed by a specific processing unit may be executed by another processing unit. The order of multiple processes may be changed, or multiple processes may be executed in parallel. Operational examples 1 to 6 of the above embodiment and the modified examples may be combined in any manner.

[0163] In the above embodiment, each component may be realized by executing a software program suitable for each component. Each component may be realized by a program execution unit such as a CPU or a processor reading and executing a software program recorded on a recording medium such as a hard disk or a semiconductor memory.

[0164] Furthermore, each component may be realized by hardware. For example, each component may be a circuit (or an integrated circuit). These circuits may form a single circuit as a whole, or each may be a separate circuit. Furthermore, each of these circuits may be a general-purpose circuit, or a dedicated circuit.

[0165] Furthermore, the general or specific aspects of the present invention may be realized as a system, an apparatus, a method, an integrated circuit, a computer program, or a computer-readable recording medium such as a CD-ROM, or may be realized as any combination of a system, an apparatus, a method, an integrated circuit, a computer program, and a recording medium.

[0166] For example, the present invention may be realized as a control method executed by a computer such as a control system, or as an information processing method executed by an information processing system. Furthermore, the present invention may be realized as a program for causing a computer to execute such a control method or information processing method, or as a computer-readable non-transitory recording medium on which such a program is recorded.

[0167] In addition, the present invention also includes forms obtained by applying various modifications to each embodiment that a person skilled in the art may think of, or forms realized by arbitrarily combining the components and functions of each embodiment without departing from the spirit of the present invention. [Explanation of symbols]

[0168] 40 Equipment Controller (First Control Equipment) 45 Equipment 50 Device control server (control system) 51, 71 Information Processing Section 52, 72 Communications Department 53, 73 Memory section 60 Security controller (second control device) 66 Second mobile terminal (mobile terminal) 70 Security Server (Information Processing System) 80 Building

Claims

1. A control system for controlling equipment installed in a building, comprising: a communication unit that transmits authentication information including an access token to an information processing system different from the control system when a predetermined notification is received, and receives request information from the information processing system requesting at least one of control of the device and acquisition of a status of the device; An information processing unit, Each of the control system and the information processing system is located on a cloud server, and information regarding the device is not normally transmitted or received between the control system and the information processing system; The information processing unit includes: When the request information includes information based on the authentication information, the communication unit transmits information for performing processing according to the request information; If the request information does not include the authentication information, a process corresponding to the request information is not performed; The predetermined notification includes an abnormality notification indicating that an abnormality has occurred in the building, When the communication unit receives the predetermined notification, the communication unit transmits the authentication information to the information processing system in response to an authentication information request transmitted by the mobile terminal. Control system.

2. A first control device capable of communicating with the control system is installed in the building, The predetermined notification is transmitted to the communication unit when an abnormality in the building is detected by the first control device. The control system of claim 1 .

3. a second control device capable of communicating with the information processing system is installed in the building; The predetermined notification is transmitted to the communication unit when an abnormality in the building is detected by the second control device. The control system of claim 1 .

4. When the request information is received by the communication unit after an abnormality recovery notice indicating that the abnormal state of the building has been recovered is received by the communication unit, the information processing unit does not perform processing according to the request information even if the request information includes information based on the authentication information. A control system according to any one of claims 1 to 3.

5. The apparatus further includes a storage unit for storing setting information indicating a process that is permitted to be executed as a process in response to the request information. A control system according to any one of claims 1 to 4.

6. The information processing system is a system that performs predetermined information processing for dealing with the occurrence of an abnormality when the occurrence of an abnormality is detected in the building. A control system according to any one of claims 1 to 5.

7. The device includes a home appliance, The control system remotely controls the home appliances from outside the building. A control system according to any one of claims 1 to 6.

8. A program for causing a computer to function as the control system according to any one of claims 1 to 7.

Images