Electric lock control method, electric lock control system, and program

Abstract

The purpose of the present disclosure is to reduce the possibility that an electric lock device becomes unable to be operated with a wireless terminal. A wireless terminal (40) according to the present disclosure holds a third operation command obtained by using shared key information and a password to encrypt a first operation command for operating an electric lock device (10). When a first communication unit (12) of the electric lock device (10) receives the third operation command from the wireless terminal (40), a first processing unit (11) causes the first communication unit (12) to transmit seed data to the wireless terminal (40). The wireless terminal (40) calculates a first calculation value using a password input by the user using an operation unit (45) and the seed data. When the first communication unit (12) receives the first calculation value from the wireless terminal (40), the first processing unit (11) compares the first calculation value with a second calculation value calculated using the password set for the electric lock device (10) and the seed data. If the second calculation value matches the first calculation value, the first processing unit (11) operates in accordance with the first operation command obtained by decrypting the third operation command using the shared key information and the password.

Description

Electric lock control method, electric lock control system, and program

[0001] The present disclosure relates to an electric lock control method, an electric lock control system, and a program. More specifically, the present disclosure relates to an electric lock control method, an electric lock control system, and a program that enable an electric lock device to be operated using a wireless terminal.

[0002] Patent Document 1 discloses an electronic lock system including an electronic lock, an owner terminal, an applicant terminal, and a server device. When the server device receives an unlocking request from the applicant terminal via a network, it transmits an unlocking inquiry to the owner terminal via the network, inquiring whether the applicant is permitted to unlock the electronic lock. When the server device receives an application permission notice from the owner terminal via the network indicating that the applicant is permitted to unlock the electronic lock, it enables the applicant terminal to obtain a one-time password, thereby enabling the applicant to unlock the electronic lock. The applicant terminal obtains the one-time password from the server device via the network and transmits the one-time password to the electronic lock to unlock the electronic lock.

[0003] In the electronic lock system of Patent Document 1, if an abnormality occurs in the communication between the applicant terminal (wireless terminal) and the server device (management server) due to a deterioration in the communication environment, etc., it may become impossible to unlock the electronic lock using the applicant terminal.

[0004] Japanese Patent Application Laid-Open No. 2018-013002

[0005] An object of the present disclosure is to provide an electric lock control method, an electric lock control system, and a program that reduce the possibility of an electric lock device becoming inoperable using a wireless terminal.

[0006] An electric lock control method according to one aspect of the present disclosure is an electric lock control method executed by an electric lock control system including an electric lock device and a management server that manages the electric lock device. The electric lock control method includes a setting step, a first generation step, a second generation step, a storage step, a first transmission step, a first operation step, a second transmission step, a reception step, a comparison step, a mismatch processing step, and a second operation step. In the setting step, the management server sets shared key information and a password in the electric lock device. In the first generation step, the management server generates a second operation command by encrypting a first operation command for operating the electric lock device using the shared key information. In the second generation step, the management server generates a third operation command by encrypting the first operation command using the shared key information and the password. In the storage step, the management server transmits the third operation command to a wireless terminal capable of wireless communication with the management server and the electric lock device, and causes the wireless terminal to store the third operation command. In the first transmission step, when the management server receives an operation request for the electric lock device from the wireless terminal, it transmits the second operation command to the wireless terminal. In the first operation step, when the electric lock device receives the second operation command from the wireless terminal, it operates according to the first operation command obtained by decrypting the second operation command using the shared key information. In the second transmission step, when the electric lock device receives the third operation command from the wireless terminal, it transmits seed data to the wireless terminal. In the reception step, the electric lock device receives from the wireless terminal a first calculated value calculated by the wireless terminal using the password entered by the user of the wireless terminal using the operation unit of the wireless terminal and the seed data received from the electric lock device. In the comparison step, the electric lock device compares the second calculated value calculated by the electric lock device using the password and the seed data set in the electric lock device with the first calculated value. In the mismatch processing step, if the second calculated value and the first calculated value do not match in the comparison step, the electric lock device discards the third operation command.In the second operation step, if the second calculated value and the first calculated value match in the comparison step, the electric lock device operates according to the first operation command obtained by decrypting the third operation command using the shared key information and the password.

[0007] An electric lock control system according to one aspect of the present disclosure includes an electric lock device and a management server that manages the electric lock device. Shared key information and a password are set in each of the electric lock device and the management server. The electric lock device includes a first processing unit and a first communication unit. The management server includes a second processing unit and a second communication unit. The second processing unit generates a second operation command by encrypting a first operation command for operating the electric lock device using the shared key information. The second processing unit generates a third operation command by encrypting the first operation command using the shared key information and the password. The second processing unit causes the second communication unit to transmit the third operation command to a wireless terminal capable of wireless communication with the management server and the electric lock device, and causes the wireless terminal to retain the third operation command. When the second communication unit receives a request to operate the electric lock device from the wireless terminal, the second processing unit causes the second communication unit to transmit the second operation command to the wireless terminal. When the first communication unit receives the second operation command from the wireless terminal, the first processing unit operates in accordance with the first operation command obtained by decrypting the second operation command using the shared key information. When the first communication unit receives the third operation command from the wireless terminal, the first processing unit causes the first communication unit to transmit seed data to the wireless terminal. When the first communication unit receives from the wireless terminal a first calculated value calculated by the wireless terminal using the password entered by the user of the wireless terminal using the operation unit of the wireless terminal and the seed data received from the first communication unit, the first processing unit compares the first calculated value with a second calculated value calculated using the password set in the electric lock device and the seed data. If the second calculated value and the first calculated value do not match, the first processing unit discards the third operation command. If the second calculated value and the first calculated value match, the first processing unit operates in accordance with the first operation command obtained by decrypting the third operation command using the shared key information and the password.

[0008] A program according to one aspect of the present disclosure is a program for causing a computer system to function as an electric lock device in an electric lock control system. The electric lock control system includes the electric lock device and a management server that manages the electric lock device. Shared key information and a password are set in each of the electric lock device and the management server. The program causes the computer system to execute a first operation step, a transmission step, a reception step, a comparison step, a mismatch processing step, and a second operation step. In the first operation step, upon receiving a second operation command obtained by encrypting a first operation command for operating the electric lock device using the shared key information from a wireless terminal capable of wireless communication with the management server and the electric lock device, the computer system operates in accordance with the first operation command obtained by decrypting the second operation command using the shared key information. In the transmission step, upon receiving a third operation command obtained by encrypting the first operation command using the shared key information and the password from the wireless terminal, seed data is transmitted to the wireless terminal. In the receiving step, a first calculated value calculated by the wireless terminal using the password entered by the user of the wireless terminal using an operation unit of the wireless terminal and the seed data received from the electric lock device is received from the wireless terminal. In the comparing step, a second calculated value calculated using the password set in the electric lock device and the seed data is compared with the first calculated value. In the mismatch processing step, if the second calculated value and the first calculated value do not match in the comparing step, the third operation command is discarded. In the second operating step, if the second calculated value and the first calculated value match in the comparing step, the electric lock device operates in accordance with the first operation command obtained by decrypting the third operation command using the shared key information and the password.

[0009] A program according to one aspect of the present disclosure is a program for causing a computer system to function as a management server for an electric lock control system. The electric lock control system includes an electric lock device and the management server that manages the electric lock device. Shared key information and a password are set in each of the electric lock device and the management server. The program causes the computer system to execute a first generation step, a second generation step, a storage step, and a transmission step. In the first generation step, a second operation command is generated by encrypting a first operation command for operating the electric lock device using the shared key information. In the second generation step, a third operation command is generated by encrypting the first operation command using the shared key information and the password. In the storage step, the third operation command is transmitted to a wireless terminal capable of wireless communication with the management server and the electric lock device, and the wireless terminal stores the third operation command. In the transmission step, upon receiving a request to operate the electric lock device from the wireless terminal, the second operation command is transmitted to the wireless terminal.

[0010] Fig. 1 is a schematic system configuration diagram of an electric lock control system according to an embodiment of the present disclosure. Fig. 2 is a sequence diagram illustrating the operation of the electric lock control system. Fig. 3 is a sequence diagram illustrating the operation of the electric lock control system.

[0011] Hereinafter, an electric lock control method and an electric lock control system according to embodiments will be described in detail with reference to the drawings. The configurations described in the following embodiments are merely examples of the present disclosure. The present disclosure is not limited to the following embodiments, and various modifications are possible depending on the design, etc., as long as the effects of the present disclosure can be achieved.

[0012] (Embodiment) (1) Overview FIG. 1 is a schematic system configuration diagram of an electric lock control system 1 according to this embodiment.

[0013] The electric lock control system 1 includes an electric lock device 10 and a management server 20 that manages the electric lock device 10 .

[0014] The electric lock device 10 and the management server 20 are each set with shared key information and a password.

[0015] The electric lock device 10 includes a first processing unit 11 and a first communication unit 12 .

[0016] The management server 20 includes a second processing unit 21 and a second communication unit 22 .

[0017] The second processing unit 21 generates a second operation command by encrypting a first operation command for operating the electric lock device 10 using shared key information.

[0018] The second processing unit 21 generates a third operation command by encrypting the first operation command using the shared key information and the password.

[0019] The second processing unit 21 causes the second communication unit 22 to transmit the third operation command to the wireless terminal 40, and causes the wireless terminal 40 to store the third operation command. The wireless terminal 40 is capable of wireless communication with the management server 20 and the electric lock device 10.

[0020] When the second communication unit 22 receives an operation request for the electric lock device 10 from the wireless terminal 40 , the second processing unit 21 causes the second communication unit 22 to transmit a second operation command to the wireless terminal 40 .

[0021] When the first communication unit 12 receives the second operation command from the wireless terminal 40, the first processing unit 11 operates in accordance with the first operation command obtained by decrypting the second operation command using the shared key information.

[0022] When the first communication unit 12 receives the third operation command from the wireless terminal 40, the first processing unit 11 causes the first communication unit 12 to transmit seed data to the wireless terminal 40. The seed data is initial data used to calculate the second calculated value.

[0023] When the first communication unit 12 receives the first calculated value from the wireless terminal 40, the first processing unit 11 compares the first calculated value with a second calculated value calculated using the password and seed data set in the electric lock device 10. The first calculated value is a value calculated by the wireless terminal 40 using the password entered by the user of the wireless terminal 40 using the operation unit 45 of the wireless terminal 40 and the seed data received from the first communication unit 12.

[0024] If the second calculated value and the first calculated value do not match, the first processing unit 11 discards the third operation command.

[0025] If the second calculated value and the first calculated value match, the first processing unit 11 operates in accordance with the first operation command obtained by decrypting the third operation command using the shared key information and the password.

[0026] The electric lock device 10 is used, for example, to at least lock and unlock doors of a house, etc. Note that the electric lock device 10 is not limited to being used for locking or unlocking doors of facilities such as houses, but may also be used for locking or unlocking doors of moving objects such as automobiles and trains. The first operation command for operating the electric lock device 10 includes, for example, at least one of a lock command to lock the door and an unlock command to unlock the door.

[0027] The shared key information and password shared by the electric lock device 10 and the management server 20 are used to encrypt the first operation command. The second processing unit 21 generates a second operation command by encrypting the first operation command using the shared key information, and generates a third operation command by encrypting the first operation command using the shared key information and the password. The first processing unit 11 obtains the first operation command by decrypting the second operation command using the shared key information, and obtains the first operation command by decrypting the third operation command using the shared key information and the password.

[0028] Here, when the wireless terminal 40 and the management server 20 are in a state where they can communicate with each other, the wireless terminal 40 transmits an operation request to the management server 20, and the wireless terminal 40 transmits a second operation command, which is transmitted from the management server 20 to the wireless terminal 40 in response to the operation request, to the electric lock device 10. At this time, the first processing unit 11 of the electric lock device 10 obtains the first operation command by decrypting the second operation command using the shared key information, and operates in accordance with the first operation command.

[0029] On the other hand, when the wireless terminal 40 and the management server 20 are unable to communicate with each other, the wireless terminal 40 cannot receive the second operation command from the management server 20. In this case, when the wireless terminal 40 transmits a third operation command stored in advance to the electric lock device 10, the electric lock device 10 transmits seed data to the wireless terminal 40. When the user of the wireless terminal 40 operates the operation unit 45 to input a password, the wireless terminal 40 calculates a first calculated value using the password input by the user and the seed data input from the electric lock device 10, and transmits this first calculated value to the electric lock device 10. The electric lock device 10 calculates a second calculated value using the password and seed data set in the electric lock device 10, and compares the second calculated value with the first calculated value received from the wireless terminal 40.

[0030] Here, if the first calculated value and the second calculated value do not match, it is assumed that the password entered by the user of the wireless terminal 40 is incorrect, and therefore the first processing unit 11 discards the third operation command entered from the wireless terminal 40. This reduces the possibility of the electric lock device 10 being operated fraudulently, even if another person sends a third operation command that they have obtained fraudulently to the electric lock device 10.

[0031] On the other hand, if the first calculated value and the second calculated value match, it can be confirmed that the user of the wireless terminal 40 has entered the correct password, so the first processing unit 11 can decrypt the third operation command using the shared key information and the password to obtain the first operation command, and can operate in accordance with the first operation command.

[0032] As described above, according to this embodiment, it is possible to suppress unauthorized operation of the electric lock device 10 while reducing the possibility that the electric lock device 10 will become inoperable using the wireless terminal 40 due to communication abnormalities between the wireless terminal 40 and the management server 20, etc.

[0033] (2) Details The electric lock control system 1 according to this embodiment will be described in detail below with reference to FIGS. 1 to 3. FIG.

[0034] (2.1) Configuration As described above, the electric lock control system 1 of this embodiment includes the electric lock device 10 and the management server 20.

[0035] The configuration of each part of the electric lock control system 1 and the configuration of the wireless terminal 40 will be described below.

[0036] (2.1.1) Electric Lock Device As described above, the electric lock device 10 includes the first processing unit 11 and the first communication unit 12. The electric lock device 10 further includes an electric lock 13 and a first storage unit 14.

[0037] The first processing unit 11 is mainly composed of a computer system having one or more processors and a memory. The functions of the first processing unit 11 are realized by the processor of the computer system executing a program recorded in the memory of the computer system. The program may be recorded in the memory, provided via a telecommunications line such as the Internet, or provided by being recorded on a non-transitory recording medium such as a memory card.

[0038] The first communication unit 12 performs wireless communication with the wireless terminal 40. The communication method for wireless communication between the first communication unit 12 and the wireless terminal 40 is, for example, Bluetooth (registered trademark) Low Energy (BLE). Note that the communication method for wireless communication between the first communication unit 12 and the wireless terminal 40 may be a communication method such as Bluetooth, Wi-Fi (registered trademark), ZigBee (registered trademark), or a low-power radio that does not require a license (specified low-power radio).

[0039] The electric lock 13 performs at least one of locking and unlocking of a door of a house, for example. The electric lock 13 locks or unlocks the door in response to a control command input from the first processing unit 11. In this embodiment, the electric lock 13 performs both locking and unlocking of the door, but it may also perform only one of locking and unlocking.

[0040] The first storage unit 14 includes, for example, a rewritable nonvolatile memory such as a random access memory (RAM), a read-only memory (ROM), or an electrically erasable programmable read-only memory (EEPROM). The first storage unit 14 stores individual device ID information (e.g., a MAC address, an IP address, etc.) assigned to the electric lock device 10. The first storage unit 14 also stores shared key information and a password set by the management server 20 to which the electric lock device 10 is registered. The shared key information and password are set in the first storage unit 14 during the manufacturing stage of the electric lock device 10, but the shared key information and password may also be set after shipping from the factory.

[0041] (2.1.2) Management Server The management server 20 manages or controls the electric lock devices 10 that are the management targets. As described above, the management server 20 includes the second processing unit 21 and the second communication unit 22. The management server 20 also includes a second storage unit 23.

[0042] The second processing unit 21 mainly comprises a computer system having one or more processors and a memory. The functions of the second processing unit 21 are realized by the processor of the computer system executing a program recorded in the memory of the computer system. The program may be recorded in the memory, or may be provided via a telecommunications line such as the Internet, or may be recorded on a non-transitory recording medium such as a memory card and provided.

[0043] The second communication unit 22 communicates with the wireless terminal 40 via a network 50 such as the Internet and a wireless access point (denoted as "AP" in FIG. 1 ) 51. The communication between the second communication unit 22 and the wireless terminal 40 preferably employs an encrypted communication method such as TLS (Transport Layer Security) / SSL (Secure Sockets Layer) communication. Note that the network 50 is not limited to the Internet and may be, for example, a local communication network established in the area where the electric lock device 10 is installed.

[0044] The second storage unit 23 includes, for example, a RAM, a ROM, or a rewritable nonvolatile memory such as an EEPROM. The second storage unit 23 stores device ID information of the electric lock device 10 registered as a management target in the management server 20, in association with shared key information and a password set in the electric lock device 10. The shared key information and password may be set in the management server 20 that manages the electric lock device 10 during the manufacturing stage of the electric lock device 10. Alternatively, the shared key information and password set in the electric lock device 10 may be registered in the management server 20 when the electric lock device 10 is registered with the management server 20 after the electric lock device 10 is shipped from the factory. In other words, when registering the electric lock device 10 as a management target, the management server 20 sets the shared key information and password to be shared with the electric lock device 10 in both the management server 20 and the electric lock device 10.

[0045] (2.1.3) Wireless Terminal The wireless terminal 40 includes a third processing unit 41 , a third communication unit 42 , a fourth communication unit 43 , a display unit 44 , an operation unit 45 , and a third storage unit 46 .

[0046] The third processing unit 41 mainly comprises a computer system having one or more processors and a memory. The functions of the third processing unit 41 are realized by the processor of the computer system executing a program recorded in the memory of the computer system. The program may be recorded in the memory, or may be provided via a telecommunications line such as the Internet, or may be recorded on a non-transitory recording medium such as a memory card and provided.

[0047] The third communication unit 42 performs wireless communication with the electric lock device 10. The communication method for wireless communication between the third communication unit 42 and the electric lock device 10 is, for example, BLE. Note that the communication method for wireless communication between the third communication unit 42 and the electric lock device 10 is not limited to BLE, and may be a communication method such as Bluetooth, Wi-Fi, ZigBee, or low-power radio that does not require a license.

[0048] The fourth communication unit 43 is connected to a network 50 such as the Internet via a wireless access point 51 , and communicates with the management server 20 via the network 50 .

[0049] The display unit 44 includes a thin display device such as a liquid crystal display, etc. The display unit 44 displays on the screen of the display device the display content indicating the operating status of the electric lock device 10 and operation buttons for causing the electric lock device 10 to perform desired operations.

[0050] The operation unit 45 includes a position input device such as a touchpad combined with a display device. The operation unit 45 receives an operation (such as a tap, double tap, flick, or swipe) in which the user touches an operation button displayed on the screen of the display device with their finger, and outputs a signal corresponding to the operation to the third processing unit 41.

[0051] The third storage unit 46 includes, for example, a RAM, a ROM, or a rewritable nonvolatile memory such as an EEPROM, etc. The third storage unit 46 stores terminal ID information of the wireless terminal 40, device ID information of the electric lock device 10 used with the wireless terminal 40, application programs for operating the electric lock device 10, etc.

[0052] (2.2) Operation Description (2.2.1) Operation During Normal Communication The operation of the electric lock control system 1 when a user operates (e.g., unlocks) the electric lock device 10 using the wireless terminal 40 when communication between the wireless terminal 40 and the management server 20 is normal (when communication is normal) will be described with reference to the sequence diagram in Figure 2. Note that the sequence diagram shown in Figure 2 is merely an example of the device management method according to this embodiment, and the order of processing may be changed as appropriate, and processing may be added or omitted as appropriate. Also, in Figure 2, the electric lock device 10 and the management server 20 are connected by a single virtual communication path.

[0053] In the electric lock control system 1 of this embodiment, for example, during the manufacturing stage of the electric lock device 10, shared key information and a password are set in each of the electric lock device 10 and the management server 20 (step S1). As a result, the shared key information and the password are stored in the second storage unit 23 of the management server 20 in association with the device ID information of the electric lock device 10 (step S2). In addition, the shared key information and the password are stored in the first storage unit 14 of the electric lock device 10 (step S4: setting step).

[0054] Next, the second processing unit 21 of the management server 20 generates a third operation command by encrypting a first operation command (e.g., a lock command and an unlock command) for operating the electric lock device 10 using the shared key information and the password (step S3: second generation step), and stores the generated third operation command in the second storage unit 23. For example, the second processing unit 21 generates the third operation command by encrypting the first operation command using key information obtained by performing an operation (e.g., an XOR operation) on the shared key information and the password. The encryption method is, for example, the AES method, but the encryption method can be changed as appropriate as long as plain text can be encrypted using the shared key information.

[0055] The second processing unit 21 of the management server 20 causes the second communication unit 22 to transmit the generated third operation command to the wireless terminal 40, and causes the wireless terminal 40 to store the third operation command (step S5: storage step). When the fourth communication unit 43 of the wireless terminal 40 receives the third operation command from the management server 20, the third processing unit 41 stores the third operation command received by the fourth communication unit 43 in the third storage unit 46, and stores the third operation command (step S6).

[0056] Thereafter, when the third processing unit 41 of the wireless terminal 40 executes an application program for operating the electric lock device 10, operation buttons and the like for operating the electric lock device 10 are displayed on the screen of the display unit 44. For example, the display unit 44 displays an unlock operation button for unlocking the door with the electric lock device 10 and a lock operation button for locking the door.

[0057] For example, when the user taps the unlock operation button displayed on the screen of the display unit 44, the operation unit 45 accepts the unlock operation by the user and outputs a signal indicating that the unlock operation has been performed to the third processing unit 41. When the signal indicating that the unlock operation has been performed is input from the operation unit 45, the third processing unit 41 causes the third communication unit 42 to transmit a request signal requesting the management server 20 to perform the unlock operation of the electric lock device 10 (step S7).

[0058] When the second communication unit 22 of the management server 20 receives a request signal from the wireless terminal 40, the second processing unit 21 of the management server 20 generates a second operation command by encrypting a first operation command corresponding to the request signal using shared key information (step S8: first generation step).The second processing unit 21 of the management server 20 then transmits the generated second operation command from the second communication unit 22 to the wireless terminal 40 (step S9: first transmission step).When the fourth communication unit 43 of the wireless terminal 40 receives the second operation command from the management server 20, the third processing unit 41 transmits the second operation command received by the fourth communication unit 43 to the electric lock device 10 from the third communication unit 42 (step S10).

[0059] When the first communication unit 12 of the electric lock device 10 receives the second operation command from the wireless terminal 40, the first processing unit 11 decrypts the second operation command using the shared key information (step S11) and controls the electric lock 13 according to the decrypted first operation command (step S12: first operation step). Here, the first operation command is an operation command to unlock the door, and the first processing unit 11 controls the electric lock 13 to unlock the door.

[0060] Here, the wireless terminal 40 does not perform processes such as decrypting the second operation command received from the management server 20 or re-encrypting the decrypted operation command, which increases the confidentiality of communication without the need to set shared key information in the wireless terminal 40. Furthermore, the risk that the second operation command transmitted from the management server 20 will be tampered with mid-transmission can be reduced.

[0061] (2.2.2) Operation in the Event of a Communication Abnormality Next, the operation of the electric lock control system 1 when a user operates (e.g., unlocks) the electric lock device 10 using the wireless terminal 40 when some abnormality occurs in the communication between the wireless terminal 40 and the management server 20 (when a communication abnormality occurs) will be described with reference to the sequence diagram of Figure 3. Note that the sequence diagram shown in Figure 3 is merely an example of the device management method according to this embodiment, and the order of processing may be changed as appropriate, and processing may be added or omitted as appropriate. Also, in Figure 3, the electric lock device 10 and the management server 20 are connected by a single virtual communication path.

[0062] When the third processing unit 41 of the wireless terminal 40 executes an application program for operating the electric lock device 10, operation buttons and the like for operating the electric lock device 10 are displayed on the screen of the display unit 44. In this state, for example, when the user taps the unlock operation button displayed on the screen of the display unit 44 (step S21), the operation unit 45 accepts the unlock operation by the user and outputs a signal indicating that the unlock operation has been performed to the third processing unit 41. When the signal indicating that the unlock operation has been performed is input from the operation unit 45, the third processing unit 41 causes the third communication unit 42 to transmit a request signal requesting the management server 20 to unlock the electric lock device 10 (step S22).

[0063] Here, if an abnormality occurs in the communication between the wireless terminal 40 and the management server 20, even if the wireless terminal 40 transmits a request signal to the management server 20, it will not be able to receive the second operation command corresponding to the request signal from the management server 20. If the third processing unit 41 of the wireless terminal 40 is unable to receive the second operation command within a predetermined waiting time from the time the request signal is transmitted, it determines that an abnormality has occurred in the communication between the wireless terminal 40 and the management server 20. At this time, the third processing unit 41 of the wireless terminal 40 causes the third communication unit 42 to transmit the third operation command stored in the third memory unit 46 to the electric lock device 10 (step S23).

[0064] When the first communication unit 12 of the electric lock device 10 receives a third operation command from the wireless terminal 40, the first processing unit 11 attempts to decrypt the third operation command using the shared key information. However, because the third operation command is encrypted using the shared key information and a password, the first processing unit 11 is unable to successfully decrypt the third operation command. If the first processing unit 11 fails to decrypt the third operation command, it determines that the operation command received from the wireless terminal 40 is not a second operation command, generates seed data (step S24), and transmits request information requesting password input and the seed data from the first communication unit 12 to the wireless terminal 40 (step S25: second transmission step). Here, the seed data generated by the first processing unit 11 is a random value whose value changes each time the second transmission step is performed. Since the first processing unit 11 generates the random seed data each time the second transmission step is performed, and the value of the seed data changes each time the second transmission step is performed, the first calculated value and the second calculated value change each time. Therefore, security can be improved compared to when the value of the seed data remains the same each time. In the present embodiment, in the second transmission step, the seed data generated by the electric lock device 10 (specifically, the first processing unit 11) is transmitted to the wireless terminal 40. Since the seed data is generated by the electric lock device 10, security can be improved compared to when the first calculated value and the second calculated value are calculated using seed data input from outside.

[0065] When the third communication unit 42 of the wireless terminal 40 receives request information requesting password entry, the third processing unit 41 of the wireless terminal 40 displays a screen requesting password entry on the display unit 44. A user authorized to lock or unlock the electric lock device 10 using the wireless terminal 40 is notified of the password in advance. When the user enters the password using the operation unit 45 of the wireless terminal 40 (step S26), the third processing unit 41 inputs the password entered in step S26 and the seed data received by the third communication unit 42 into a hash function to calculate a first calculated value, which is a hash value (step S27). The third processing unit 41 calculates the first calculated value by, for example, inputting data obtained by performing a predetermined calculation using the password and the seed data into the hash function. After calculating the first calculated value, the third processing unit 41 transmits the first calculated value from the third communication unit 42 to the electric lock device 10 (step S28). The first calculated value transmitted from the wireless terminal 40 is received by the first communication unit 12 of the electric lock device 10. That is, in the receiving step at the electric lock device 10, the wireless terminal 40 inputs the password and seed data into a hash function and calculates the first calculated value, which the electric lock device 10 receives from the wireless terminal 40. In this way, the wireless terminal 40 inputs the password and seed data into a hash function and transmits the first calculated value to the electric lock device 10, which reduces the risk of the password being stolen compared to when the password entered by the user is transmitted to the electric lock device 10.

[0066] Furthermore, after executing the process of step S25, the first processing unit 11 of the electric lock device 10 calculates a second calculated value by inputting the seed data generated in step S24 and the password set in the electric lock device 10 into a hash function (step S29). The first processing unit 11 calculates the second calculated value by inputting data obtained by performing a predetermined calculation using the password and the seed data into the hash function, for example. Here, the calculation method by which the electric lock device 10 calculates the second calculated value is the same as the calculation method by which the wireless terminal 40 calculates the first calculated value, so if the user enters the correct password in step S26, the first calculated value and the second calculated value will be the same.

[0067] After calculating the second calculated value, the first processing unit 11 of the electric lock device 10 performs a process of comparing the first calculated value received in step S28 with the second calculated value calculated in step S29 (step S30: comparison step). That is, in the comparison step, the electric lock device 10 compares the second calculated value calculated by inputting the password and seed data into a hash function with the first calculated value received from the terminal device 40.

[0068] If the first calculated value and the second calculated value do not match in the comparison process of step S30, the first processing unit 11 of the electric lock device 10 determines in step S26 that the correct password was not entered and discards the third operation command received in step S23 (mismatch processing step). This reduces the possibility that the first processing unit 11 of the electric lock device 10 will activate the electric lock 13 if a third operation command that was illegally obtained by another person is sent to the electric lock device 10, thereby improving security.

[0069] If the first calculated value and the second calculated value match in the comparison process of step S30, the first processing unit 11 of the electric lock device 10 determines that the correct password was entered in step S26 and generates a first operation command by decrypting the third operation command using the shared key information and the password.The first processing unit 11 of the electric lock device 10 then controls the electric lock 13 according to the decrypted first operation command (step S31: second operation step).This has the advantage that even if communication between the wireless terminal 40 and the management server 20 is abnormal, the wireless terminal 40 can be used to lock or unlock the electric lock device 10.

[0070] (3) Modifications The above embodiment is merely one of various embodiments of the present disclosure. The above embodiment can be modified in various ways depending on the design, etc., as long as the object of the present disclosure can be achieved. In addition, functions similar to those of the electric lock control system 1 may be embodied in an electric lock control method, a computer program, a non-transitory recording medium on which a program is recorded, or the like.

[0071] A device management method according to one aspect is an electric lock control method executed by an electric lock control system 1 including an electric lock device 10 and a management server 20 that manages the electric lock device 10. The electric lock control method includes a setting step, a first generation step, a second generation step, a storage step, a first transmission step, a first operation step, a second transmission step, a reception step, a comparison step, a mismatch processing step, and a second operation step. In the setting step, the management server 20 sets shared key information and a password in the electric lock device 10. In the first generation step, the management server 20 generates a second operation command by encrypting a first operation command for operating the electric lock device 10 using the shared key information. In the second generation step, the management server 20 generates a third operation command by encrypting the first operation command using the shared key information and the password. In the storage step, the management server 20 transmits the third operation command to a wireless terminal 40 capable of wireless communication with the management server 20 and the electric lock device 10, and causes the wireless terminal 40 to store the third operation command. In the first transmission step, when the management server 20 receives an operation request for the electric lock device 10 from the wireless terminal 40, it transmits a second operation command to the wireless terminal 40. In the first operation step, when the electric lock device 10 receives the second operation command from the wireless terminal 40, it operates according to the first operation command obtained by decrypting the second operation command using the shared key information. In the second transmission step, when the electric lock device 10 receives a third operation command from the wireless terminal 40, it transmits seed data to the wireless terminal 40. In the reception step, the electric lock device 10 receives from the wireless terminal 40 a first calculated value calculated by the wireless terminal 40 using a password entered by the user of the wireless terminal 40 using the operation unit 45 of the wireless terminal 40 and the seed data received from the electric lock device 10. In the comparison step, the electric lock device 10 compares the second calculated value calculated by the electric lock device 10 using the password and seed data set in the electric lock device 10 with the first calculated value. In the mismatch processing step, if the second calculated value and the first calculated value do not match in the comparison step, the electric lock device 10 discards the third operation command. In the second operation step, if the second calculated value and the first calculated value match in the comparison step, the electric lock device 10 operates according to the first operation command obtained by decrypting the third operation command using the shared key information and the password.

[0072] A (computer) program according to one aspect is a program for causing a computer system to function as an electric lock device 10 of an electric lock control system 1. The electric lock control system 1 includes the electric lock device 10 and a management server 20 that manages the electric lock device 10. Shared key information and a password are set in each of the electric lock device 10 and the management server 20. The program causes the computer system to execute a first operation step, a transmission step, a reception step, a comparison step, a mismatch processing step, and a second operation step. In the first operation step, the computer system receives a second operation command, which is a first operation command for operating the electric lock device 10 encrypted using the shared key information, from a wireless terminal 40 capable of wireless communication with the management server 20 and the electric lock device 10. The computer system operates in accordance with the first operation command obtained by decrypting the second operation command using the shared key information. In the transmission step, the computer system receives a third operation command, which is the first operation command encrypted using the shared key information and the password, from the wireless terminal 40. The third operation command is the first operation command encrypted using the shared key information and the password. The computer system transmits seed data to the wireless terminal 40. In the receiving step, a first calculated value calculated by the wireless terminal 40 using a password entered by the user of the wireless terminal 40 using the operation unit 45 of the wireless terminal 40 and the seed data received from the electric lock device 10 is received from the wireless terminal 40. In the comparing step, a second calculated value calculated using the password and seed data set in the electric lock device 10 is compared with the first calculated value. In the mismatch processing step, if the second calculated value and the first calculated value do not match in the comparing step, the third operation command is discarded. In the second operating step, if the second calculated value and the first calculated value match in the comparing step, the electric lock device 10 operates in accordance with the first operation command obtained by decrypting the third operation command using the shared key information and the password.

[0073] A (computer) program according to one aspect is a program for causing a computer system to function as a management server 20 of an electric lock control system 1. The electric lock control system 1 includes an electric lock device 10 and a management server 20 that manages the electric lock device 10. Shared key information and a password are set in each of the electric lock device 10 and the management server 20. The program causes the computer system to execute a first generation step, a second generation step, a storage step, and a transmission step. In the first generation step, a second operation command is generated by encrypting a first operation command for operating the electric lock device 10 using the shared key information. In the second generation step, a third operation command is generated by encrypting the first operation command using the shared key information and the password. In the storage step, the third operation command is transmitted to a wireless terminal 40 capable of wireless communication with the management server 20 and the electric lock device 10, and the wireless terminal 40 stores the third operation command. In the transmission step, upon receiving a request to operate the electric lock device 10 from the wireless terminal 40, the second operation command is transmitted to the wireless terminal 40.

[0074] Modifications of the above embodiment are listed below. The modifications described below can be applied in appropriate combinations.

[0075] The electric lock control system 1 or the electric lock control method of the present disclosure (the electric lock device 10, the management server 20, and the wireless terminal 40) includes a computer system. The computer system is primarily composed of a processor and memory as hardware. The processor executes a program stored in the computer system's memory to realize the functions of the electric lock control system 1 or the electric lock control method of the present disclosure. The program may be pre-stored in the computer system's memory, provided via a telecommunications line, or provided on a non-transitory recording medium such as a memory card, optical disk, or hard disk drive that is readable by the computer system. The processor of the computer system is composed of one or more electronic circuits, including a semiconductor integrated circuit (IC) or a large-scale integrated circuit (LSI). The integrated circuits, such as ICs and LSIs, are referred to by different names depending on the degree of integration, and include integrated circuits called system LSIs, very large-scale integration (VLSI), or ultra-large-scale integration (ULSI). Furthermore, a field-programmable gate array (FPGA), which is programmed after the LSI is manufactured, or a logic device capable of reconfiguring the connections within the LSI or the circuit partitions within the LSI, can also be employed as a processor. Multiple electronic circuits may be integrated into a single chip or distributed across multiple chips. Multiple chips may be integrated into a single device or distributed across multiple devices. The computer system referred to here includes a microcontroller having one or more processors and one or more memories. Therefore, the microcontroller is also composed of one or more electronic circuits, including a semiconductor integrated circuit or a large-scale integrated circuit.

[0076] Furthermore, it is not essential for the electric lock control system 1 that multiple functions are concentrated in one housing, and the components of the electric lock control system 1 may be distributed across multiple housings. Furthermore, at least some of the functions of the electric lock control system 1, for example, some of the functions of the management server 20, may be realized by the cloud (cloud computing) or the like.

[0077] The first processing unit 11 and the third processing unit 41 calculate the second calculated value and the first calculated value by inputting the password and seed data into a hash function, but the method of calculating the first calculated value and the second calculated value is not limited to the method using a hash function and can be changed as appropriate.

[0078] In the above embodiment, the wireless terminal 40 may assign an identification flag to the third operation command indicating that the information is encrypted using the shared key information and the password, and transmit the third operation command to the electric lock device 10. In this way, the first processing unit 11 of the electric lock device 10 can confirm whether the operation command received from the wireless terminal 40 is the second operation command or the third operation command by checking whether the identification flag is assigned to the operation command received from the wireless terminal 40.

[0079] In the above embodiment, when the electric lock device 10 sends seed data, it sends request information to the wireless terminal 40 requesting the user to enter a password, and the wireless terminal 40 receives this request information and displays a screen on the display unit 44 that prompts the user to enter a password.However, the wireless terminal 40 may also execute a process to prompt the user to enter a password regardless of the request information from the electric lock device 10.

[0080] Specifically, when the operation unit 45 receives an unlocking or locking operation and the third processing unit 41 of the wireless terminal 40 detects an abnormality in communication between the wireless terminal 40 and the management server 20, the third processing unit 41 may cause the display unit 44 to display a screen prompting the user to enter a password. When the user enters the password using the operation unit 45, the third processing unit 41 generates seed data and calculates a first calculated value using the seed data and the password entered by the user. The third processing unit 41 then causes the third communication unit 42 to transmit a third operation command, the calculated first calculated value, and the seed data used for the calculation to the electric lock device 10. When the first communication unit 12 of the electric lock device 10 receives the third operation command, the first calculated value, and the seed data from the wireless terminal 40, the first processing unit 11 calculates a second calculated value using the password and the seed data and compares the first calculated value with the second calculated value. Then, if the first calculated value and the second calculated value match, the first processing unit 11 obtains the first operation command by decrypting the third operation command using the shared key information and the password, and controls the electric lock 13 in accordance with the first operation command.

[0081] In the above embodiment, a password is set for each of the management server 20 and the electric lock device 10 when the electric lock device 10 is registered with the management server 20. However, it is not necessary to set a password for each of the management server 20 and the electric lock device 10 at the time of registration. For example, when starting to use a service that operates the electric lock device 10 using the wireless terminal 40, the management server 20 may generate a password in response to a request from the wireless terminal 40, encrypt this password using, for example, shared key information, and then transmit it to the electric lock device 10. When the electric lock device 10 receives the password encrypted with the shared key information, it decrypts it using the shared key information to obtain the password and stores it in the first storage unit 14. This allows a password to be set for each of the electric lock device 10 and the management server 20 when starting to use the service. The management server 20 may notify the user of the wireless terminal 40 of the generated password using an appropriate method that ensures security.

[0082] Furthermore, the management server 20 may update the password at an appropriate timing, and may encrypt the updated password, for example, with shared key information before transmitting it to the electric lock device 10. When the electric lock device 10 receives a password encrypted with the shared key information, it decrypts it with the shared key information to obtain the password and stores this password in the first storage unit 14. This allows the management server 20 and the electric lock device 10 to update the password at an appropriate timing, thereby increasing security. The management server 20 may notify the user of the wireless terminal 40 of the updated password using an appropriate method that ensures security.

[0083] In addition, in the above embodiment, the seed data is generated by the electric lock device 10 and transmitted to the wireless terminal 40 , but the seed data may also be generated by the wireless terminal 40 and transmitted to the electric lock device 10 .

[0084] Furthermore, in the above embodiment, the management server 20 is configured as a single server. However, the management server 20 may also be configured as a device management server that manages the electric lock device 10 and a service management server that manages services (or users using the services) using the electric lock device 10. Here, the device management server and the service management server may be implemented as two physically separated servers, or as a single server that is not physically separated. For example, the device management server and the service management server do not need to be physically separated, but may be logically (virtually) separated. The device management server that manages the electric lock device 10 and the service management server that manages services using the electric lock device 10 may be virtually installed on the same physical server. The business operator that manages the electric lock device 10 using the device management server and the business operator that manages the services provided by the device 10 using the service management server may be the same or different.

[0085] Furthermore, even when the management server 20 is composed of a device management server and a service management server, the service management server may simply transmit the second operation command and the third operation command transmitted by the device management server to the wireless terminal 40. It is preferable that the service management server does not perform the process of decrypting the second operation command and the third operation command transmitted by the device management server, or the process of re-encrypting the decrypted information, thereby reducing the risk that the second operation command and the third operation command will be tampered with midway.

[0086] (Summary) The above-described embodiments and the like disclose the following aspects.

[0087] The electric lock control method of the first aspect is an electric lock control method executed by an electric lock control system (1) including an electric lock device (10) and a management server (20) that manages the electric lock device (10). The electric lock control method includes a setting step, a first generation step, a second generation step, a holding step, a first transmission step, a first operation step, a second transmission step, a receiving step, a comparison step, a mismatch processing step, and a second operation step. In the setting step, the management server (20) sets shared key information and a password in the electric lock device (10). In the first generation step, the management server (20) generates a second operation command by encrypting a first operation command for operating the electric lock device (10) using the shared key information. In the second generation step, the management server (20) generates a third operation command by encrypting the first operation command using the shared key information and the password. In the storage step, the management server (20) transmits a third operation command to a wireless terminal (40) capable of wireless communication with the management server (20) and the electric lock device (10), causing the wireless terminal (40) to store the third operation command. In the first transmission step, when the management server (20) receives an operation request for the electric lock device (10) from the wireless terminal (40), it transmits a second operation command to the wireless terminal (40). In the first operation step, when the electric lock device (10) receives the second operation command from the wireless terminal (40), it operates according to the first operation command obtained by decrypting the second operation command using the shared key information. In the second transmission step, when the electric lock device (10) receives the third operation command from the wireless terminal (40), it transmits seed data to the wireless terminal (40). In the receiving step, the electric lock device (10) receives from the wireless terminal (40) a first calculated value calculated by the wireless terminal (40) using a password entered by a user of the wireless terminal (40) using an operation unit (45) of the wireless terminal (40) and seed data received from the electric lock device (10). In the comparing step, the electric lock device (10) compares a second calculated value calculated by the electric lock device (10) using the password and seed data set in the electric lock device (10) with the first calculated value. In the mismatch processing step, if the second calculated value and the first calculated value do not match in the comparing step, the electric lock device (10) discards the third operation command.In the second operation step, if the second calculated value and the first calculated value match in the comparison step, the electric lock device (10) operates according to the first operation command obtained by decrypting the third operation command using the shared key information and the password.

[0088] According to this aspect, if the first calculated value and the second calculated value do not match, the password entered by the user of the wireless terminal (40) is incorrect, and the first processing unit (11) discards the third operation command entered from the wireless terminal (40). This reduces the possibility of the electric lock device (10) being used fraudulently, even if a third party illegally obtains and sends the third operation command to the electric lock device (10). On the other hand, if the first calculated value and the second calculated value match, it is possible to confirm that the user of the wireless terminal (40) entered the correct password. Therefore, the first processing unit (11) can decrypt the third operation command using the shared key information and the password to obtain the first operation command and operate in accordance with the first operation command. Thus, an electric lock control method can be provided that reduces the possibility of the electric lock device (10) becoming inoperable by the wireless terminal (40).

[0089] In the electric lock control method of the second aspect, in the first aspect, the seed data is a random value whose value changes each time the second transmission step is executed.

[0090] According to this aspect, by using a random value as the seed data, the first calculated value and the second calculated value can be different each time, thereby improving security.

[0091] In the electric lock control method of the third aspect, in the first or second aspect, in the second transmission step, the electric lock device (10) transmits the generated seed data to the wireless terminal (40).

[0092] According to this aspect, the first processing unit (11) calculates the second calculated value using seed data generated by the electric lock device (10), thereby improving security compared to when the second calculated value is calculated using seed data input from outside.

[0093] In the electric lock control method of the fourth aspect, in any of the first to third aspects, in the receiving step, the electric lock device (10) receives from the wireless terminal (40) a first calculated value calculated by the wireless terminal (40) by inputting the password and seed data into a hash function. In the comparing step, the electric lock device (10) compares the first calculated value with a second calculated value calculated by inputting the password and seed data into the hash function.

[0094] According to this aspect, the first calculated value and the second calculated value are each hash values ​​calculated using a hash function, so the risk of the password being stolen can be reduced compared to when the wireless terminal (40) transmits the password entered by the user to the electric lock device (10).

[0095] An electric lock control system (1) of a fifth aspect includes an electric lock device (10) and a management server (20) that manages the electric lock device (10). Shared key information and a password are set in each of the electric lock device (10) and the management server (20). The electric lock device (10) includes a first processing unit (11) and a first communication unit (12). The management server (20) includes a second processing unit (21) and a second communication unit (22). The second processing unit (21) generates a second operation command by encrypting a first operation command for operating the electric lock device (10) using the shared key information. The second processing unit (21) generates a third operation command by encrypting the first operation command using the shared key information and the password. The second processing unit (21) causes the second communication unit (22) to transmit a third operation command to a wireless terminal (40) capable of wireless communication with the management server (20) and the electric lock device (10), and causes the wireless terminal (40) to store the third operation command. When the second communication unit (22) receives an operation request for the electric lock device (10) from the wireless terminal (40), the second processing unit (21) causes the second communication unit (22) to transmit the second operation command to the wireless terminal (40). When the first communication unit (12) receives the second operation command from the wireless terminal (40), the first processing unit (11) operates in accordance with the first operation command obtained by decrypting the second operation command using shared key information. When the first communication unit (12) receives the third operation command from the wireless terminal (40), the first processing unit (11) causes the first communication unit (12) to transmit seed data to the wireless terminal (40). When the first communication unit (12) receives from the wireless terminal (40) a first calculated value calculated by the wireless terminal (40) using a password entered by a user of the wireless terminal (40) using an operation unit (45) of the wireless terminal (40) and seed data received from the first communication unit (12), the first processing unit (11) compares the first calculated value with a second calculated value calculated using the password and seed data set in the electric lock device (10). If the second calculated value and the first calculated value do not match, the first processing unit (11) discards the third operation command. If the second calculated value and the first calculated value match, the first processing unit (11) operates in accordance with the first operation command obtained by decrypting the third operation command using the shared key information and the password.

[0096] According to this aspect, if the first calculated value and the second calculated value do not match, the password entered by the user of the wireless terminal (40) is incorrect, and the first processing unit (11) discards the third operation command entered from the wireless terminal (40). This reduces the possibility of the electric lock device (10) being used fraudulently, even if a third party transmits a third operation command obtained illegally to the electric lock device (10). On the other hand, if the first calculated value and the second calculated value match, it is possible to confirm that the user of the wireless terminal (40) entered the correct password. Therefore, the first processing unit (11) can decrypt the third operation command using the shared key information and the password to obtain the first operation command and operate in accordance with the first operation command. Thus, an electric lock control system (1) can be provided that reduces the possibility of the electric lock device (10) becoming inoperable by the wireless terminal (40).

[0097] A sixth aspect of the program is a program for causing a computer system to function as an electric lock device (10) of an electric lock control system (1). The electric lock control system (1) includes an electric lock device (10) and a management server (20) that manages the electric lock device (10). Shared key information and a password are set in each of the electric lock device (10) and the management server (20). The program causes the computer system to execute a first operation step, a transmission step, a reception step, a comparison step, a mismatch processing step, and a second operation step. In the first operation step, when a second operation command, which is a first operation command for operating the electric lock device (10) encrypted using the shared key information, is received from a wireless terminal (40) capable of wireless communication with the management server (20) and the electric lock device (10), the computer system operates in accordance with the first operation command obtained by decrypting the second operation command using the shared key information. In the transmission step, when a third operation command obtained by encrypting a first operation command using the shared key information and a password is received from the wireless terminal (40), seed data is transmitted to the wireless terminal (40). In the reception step, a first calculated value calculated by the wireless terminal (40) using a password entered by a user of the wireless terminal (40) using an operation unit (45) of the wireless terminal (40) and the seed data received from the electric lock device (10) is received from the wireless terminal (40). In the comparison step, a second calculated value calculated using the password set in the electric lock device (10) and the seed data is compared with the first calculated value. In the mismatch processing step, if the second calculated value and the first calculated value do not match in the comparison step, the third operation command is discarded. In the second operation step, if the second calculated value and the first calculated value match in the comparison step, the electric lock device (10) operates in accordance with the first operation command obtained by decrypting the third operation command using the shared key information and the password.

[0098] According to this aspect, the possibility that the wireless terminal (40) will be unable to operate the electric lock device (10) can be reduced.

[0099] A seventh aspect of the program is a program for causing a computer system to function as a management server (20) for an electric lock control system (1). The electric lock control system (1) includes an electric lock device (10) and a management server (20) that manages the electric lock device (10). Shared key information and a password are set in each of the electric lock device (10) and the management server (20). The program causes the computer system to execute a first generation step, a second generation step, a storage step, and a transmission step. In the first generation step, a second operation command is generated by encrypting a first operation command for operating the electric lock device (10) using the shared key information. In the second generation step, a third operation command is generated by encrypting the first operation command using the shared key information and the password. In the storage step, the third operation command is transmitted to a wireless terminal (40) capable of wireless communication with the management server (20) and the electric lock device (10), and the wireless terminal (40) stores the third operation command. In the transmission step, when an operation request for the electric lock device (10) is received from the wireless terminal (40), a second operation command is transmitted to the wireless terminal (40).

[0100] According to this aspect, the possibility that the wireless terminal (40) will be unable to operate the electric lock device (10) can be reduced.

[0101] Not limited to the above aspects, various configurations (including modified examples) of the electric lock control system (1) according to the embodiment can be embodied as an electric lock control method, a (computer) program, or a non-temporary recording medium on which a program is recorded, etc.

[0102] The configurations according to the second to fourth aspects are not essential for the electric lock control method and may be omitted as appropriate.

[0103] REFERENCE SIGNS LIST 1 electric lock control system 10 electric lock device 11 first processing unit 12 first communication unit 20 management server 21 second processing unit 22 second communication unit 40 wireless terminal 45 operation unit

Claims

1. An electric lock control method executed by an electric lock control system including an electric lock device and a management server that manages the electric lock device, a setting step in which the management server sets shared key information and a password in the electric lock device; a first generation step in which the management server generates a second operation command by encrypting a first operation command for operating the electric lock device using the shared key information; a second generation step in which the management server generates a third operation command by encrypting the first operation command using the shared key information and the password; a storage step in which the management server transmits the third operation command to a wireless terminal capable of wireless communication with the management server and the electric lock device, and causes the wireless terminal to store the third operation command; a first transmission step in which the management server transmits the second operation command to the wireless terminal when receiving an operation request for the electric lock device from the wireless terminal; a first operation step in which, when the electric lock device receives the second operation command from the wireless terminal, the electric lock device operates in accordance with the first operation command obtained by decrypting the second operation command using the shared key information; a second transmission step of transmitting seed data to the wireless terminal when the electric lock device receives the third operation command from the wireless terminal; a receiving step in which the electric lock device receives from the wireless terminal a first calculated value calculated by the wireless terminal using the password input by the user of the wireless terminal using an operation unit of the wireless terminal and the seed data received from the electric lock device; a comparison step in which the electric lock device compares a second calculated value calculated by the electric lock device using the password and the seed data set in the electric lock device with the first calculated value; a mismatch processing step in which the electric lock device discards the third operation command if the second calculated value and the first calculated value do not match in the comparison step; and a second operation step in which, if the second calculated value and the first calculated value match in the comparison step, the electric lock device operates in accordance with the first operation command obtained by decrypting the third operation command using the shared key information and the password. Electric lock control method.

2. the seed data is a random value whose value changes each time the second transmission step is executed. The electric lock control method according to claim 1.

3. In the second transmission step, the seed data generated by the electric lock device is transmitted to the wireless terminal.

3. The electric lock control method according to claim 1 or 2.

4. In the receiving step, the first calculated value calculated by the wireless terminal by inputting the password and the seed data into a hash function is received by the electric lock device from the wireless terminal; In the comparison step, the electric lock device compares the second calculated value, which is calculated by inputting the password and the seed data into the hash function, with the first calculated value.

3. The electric lock control method according to claim 1 or 2.

5. An electric lock control system comprising an electric lock device and a management server that manages the electric lock device, Shared key information and a password are set in each of the electric lock device and the management server, The electric lock device includes a first processing unit and a first communication unit, the management server includes a second processing unit and a second communication unit; the second processing unit generates a second operation command by encrypting a first operation command for operating the electric lock device using the shared key information; the second processing unit generates a third operation command by encrypting the first operation command using the shared key information and the password; The second processing unit transmits the third operation command from the second communication unit to a wireless terminal capable of wireless communication with the management server and the electric lock device, and stores the third operation command in the wireless terminal; When the second communication unit receives an operation request for the electric lock device from the wireless terminal, the second processing unit transmits the second operation command from the second communication unit to the wireless terminal; when the first communication unit receives the second operation command from the wireless terminal, the first processing unit operates in accordance with the first operation command obtained by decrypting the second operation command using the shared key information; When the first communication unit receives the third operation command from the wireless terminal, the first processing unit causes the first communication unit to transmit seed data to the wireless terminal; When the first communication unit receives from the wireless terminal a first calculated value calculated by the wireless terminal using the password input by the user of the wireless terminal using an operation unit of the wireless terminal and the seed data received from the first communication unit, the first processing unit compares the first calculated value with a second calculated value calculated using the password set in the electric lock device and the seed data, the first processing unit discards the third operation command when the second calculated value and the first calculated value do not match; the first processing unit operates in accordance with the first operation command obtained by decrypting the third operation command using the shared key information and the password when the second calculated value and the first calculated value match. Electric lock control system.

6. A program for causing a computer system to function as an electric lock device of an electric lock control system, which includes an electric lock device and a management server that manages the electric lock device, and in which shared key information and a password are set in each of the electric lock device and the management server, The computer system includes: a first operation step in which, when a second operation command obtained by encrypting a first operation command for operating the electric lock device using the shared key information is received from a wireless terminal capable of wireless communication with the management server and the electric lock device, the first operation step operates in accordance with the first operation command obtained by decrypting the second operation command using the shared key information; a transmitting step of transmitting seed data to the wireless terminal when a third operation command obtained by encrypting the first operation command using the shared key information and the password is received from the wireless terminal; a receiving step of receiving from the wireless terminal a first calculated value calculated by the wireless terminal using the password input by a user of the wireless terminal using an operation unit of the wireless terminal and the seed data received from the electric lock device; a comparison step of comparing a second calculated value calculated using the password set in the electric lock device and the seed data with the first calculated value; a mismatch processing step of discarding the third operation command when the second calculated value and the first calculated value do not match in the comparing step; a second operation step in which, if the second calculated value and the first calculated value match in the comparison step, the electric lock device operates in accordance with the first operation command obtained by decrypting the third operation command using the shared key information and the password; program.

7. A program for causing a computer system to function as the management server of an electric lock control system, which includes an electric lock device and a management server that manages the electric lock device, and in which shared key information and a password are set in each of the electric lock device and the management server, The computer system includes: a first generation step of generating a second operation command by encrypting a first operation command for operating the electric lock device using the shared key information; a second generation step of generating a third operation command by encrypting the first operation command using the shared key information and the password; a storing step of transmitting the third operation command to a wireless terminal capable of wireless communication with the management server and the electric lock device, and causing the wireless terminal to store the third operation command; a transmitting step of transmitting the second operation command to the wireless terminal when an operation request of the electric lock device is received from the wireless terminal, program.