Management system capable of automatically connecting wearable terminal and repeater to transmit biometric information

Abstract

A management system capable of automatically connecting between a wearable terminal and a repeater and transmitting biometric information, wherein the safety of automatic connection is improved.　A management system 100 according to the present invention comprises: a repeater 2 that relays between a wearable terminal 1 and a server 3; the wearable terminal 1 that can be communicatively connected to the repeater 2 using a connection key; and the server 3 that transmits the connection key to the repeater 2. The wearable terminal 1 executes request transmission processing for transmitting a communication connection request, with identification information added thereto, to the repeater 2 at a predetermined timing, and the server 3 executes connection key transmission processing for transmitting the connection key of a wearable terminal 1 corresponding to the identification information of the communication connection request to the repeater 2 that has received the communication connection request. When the repeater 2 receives the connection key, processing for automatic communication connection between the wearable terminal 1 and the repeater 2 is performed, and the wearable terminal 1 executes connection transmission processing for transmitting biometric information to the server 3 via the repeater 2 that is in a communicatively connected state.

Description

A management system that can automatically connect a wearable terminal and a repeater to transmit biological information

[0001] The present invention relates to a management system that can automatically connect a wearable terminal and a repeater to transmit biological information.

[0002] Patent Document 1 discloses a management system in which a server receives biological information transmitted from a wearable terminal via a repeater, and the server manages the received biological information.

[0003] Specifically, biological information is transmitted from a wearable terminal by broadcast communication, a repeater within a short-range communication area receives the biological information, and the received biological information is transmitted by the repeater to the server.

[0004] And Patent Document 1 also discloses that when the permission conditions of preset data communication are satisfied, the wearable terminal and the repeater automatically establish a communication connection, and biological information is transmitted from the wearable terminal to the repeater in the communication connection state.

[0005] Japanese Patent No. 7570608

[0006] By the way, since biological information is personal information, it is important to prevent it from being known by unrelated third parties. Even when automatically establishing a communication connection to transmit biological information, it is preferably performed by a connection method that is less likely to cause leakage.

[0007] The present invention has been made in view of such circumstances, and in a management system that can automatically connect a wearable terminal and a repeater to transmit biological information, one of the objectives is to improve the safety of the automatic connection.

[0008] The present invention is understood to have the following configuration in order to achieve the above objective. (1) The management system of the present invention is a management system that can transmit biometric information by automatically connecting a wearable terminal and a relay, the management system comprising: a relay that relays between the wearable terminal and a server; the wearable terminal that can communicate with the relay using a connection key; and the server that transmits the connection key to the relay, the wearable terminal comprising: a biometric information acquisition unit that acquires the biometric information of the wearer; and a first short-range wireless communication unit that can communicate with devices within a short-range communication area, the relay comprising: a second communication unit that can communicate with the server; and a second short-range wireless communication unit that can communicate with the first short-range wireless communication unit within the short-range communication area, the server comprising: a third communication unit that can communicate with the relay; a biometric information storage unit that manages the biometric information; and a unit that identifies the wearable terminal in association with the wearer. The wearable terminal comprises a user management unit that registers identification information, and the wearable terminal performs a storage process to store the acquired biometric information and a request transmission process to send a communication connection request to the relay unit with the identification information attached at a predetermined timing. The server performs a connection key transmission process to send the connection key of the wearable terminal corresponding to the identification information of the communication connection request to the relay unit that has received the communication connection request. When the relay unit receives the connection key, an automatic communication connection process is performed between the wearable terminal and the relay unit. The wearable terminal performs a connection transmission process to send the stored biometric information to the server via the relay unit in a communication connection state. The server performs a storage process to store the biometric information transmitted in the connection transmission process in the biometric information storage unit, categorized by the user wearing the device.

[0009] (2) In the configuration of (1) above, the wearable terminal comprises an encryption key and an encryption unit that encrypts based on the encryption key, the server comprises a decryption unit that performs decryption corresponding to the encryption key, the wearable terminal performs a first generation process to generate encrypted biometric information by encrypting the acquired biometric information, and a first transmission process to broadcast first data, which has the identification information added to the encrypted biometric information, to unspecified devices within the short-range communication area, the repeater performs a transmission process to send the received first data to the server, the server performs a decryption process to decrypt the encrypted biometric information of the first data back into biometric information, and a storage process to store the biometric information acquired by decryption in the biometric information storage unit, for each wearer, based on the identification information.

[0010] (3) In the configuration of (2) above, the wearable terminal is equipped with a first key, and the connection key is obfuscated using the encryption key and the first key.

[0011] (4) The management system of the present invention is a management system that can transmit biometric information by automatically connecting a wearable terminal and a relay, the management system comprising: a relay that relays between the wearable terminal and a server; the wearable terminal that establishes a communication connection with the relay using a connection key; and the server that transmits the connection key to the relay that establishes a communication connection with the wearable terminal, the wearable terminal comprising: a biometric information acquisition unit that acquires biometric information of the wearer; and a first short-range wireless communication unit that can communicate with devices within a short-range communication area, the relay comprising: a second communication unit that can communicate with the server; and a second short-range wireless communication unit that can communicate with the first short-range wireless communication unit within the short-range communication area, the server comprising: a third communication unit that can communicate with the relay; a biometric information storage unit that manages the biometric information; and an identification unit that identifies the wearable terminal in association with the wearer The wearable terminal comprises a user management unit that registers obfuscated identification information obtained by obfuscating the information, and the wearable terminal performs a storage process to store the acquired biometric information, and a request transmission process to send a communication connection request to the relay at a predetermined timing, which includes the obfuscated identification information obtained by obfuscating the identification information, and the server performs a connection key transmission process to send the connection key of the wearable terminal corresponding to the obfuscated identification information of the communication connection request to the relay that has received the communication connection request, and when the relay receives the connection key, an automatic communication connection process is performed between the wearable terminal and the relay, and the wearable terminal performs a connection transmission process to send the stored biometric information to the server via the relay that is in a communication connection state, and the server performs a storage process to store the biometric information transmitted in the connection transmission process in the biometric information storage unit for each wearer.

[0012] (5) In the configuration of (4) above, the wearable terminal comprises an encryption key and an encryption unit that encrypts based on the encryption key, the server comprises a decryption unit that performs decryption corresponding to the encryption key, the wearable terminal comprises a first generation process that generates encrypted biometric information by encrypting the acquired biometric information, a first transmission process that transmits first data, which has the identification information added to the encrypted biometric information, by broadcast communication to an unspecified device within the short-range communication area, and the identification information added to the obfuscated identification information which obfuscates the identification information that identifies the wearable terminal. The relay device performs a second transmission process, which involves broadcasting the second data with the attached information to unspecified devices within the short-range communication area; the relay device performs a transmission process, which involves sending the received first data and the second data to the server; the server performs a decryption process, which involves decrypting the encrypted biometric information of the first data into biometric information; and a storage process, which involves storing the biometric information acquired by decryption in the biometric information storage unit, for each user wearing the device, based on the identification information of the first data and the second data and the obfuscated identification information of the second data.

[0013] (6) In the configuration of (4) above, the wearable terminal comprises an encryption key and an encryption unit that encrypts based on the encryption key, the server comprises a decryption unit that performs decryption corresponding to the encryption key, the repeater further comprises a modification processing unit that generates modified identification information by modifying the identification information, the wearable terminal comprises a first generation process that generates encrypted biometric information by encrypting the acquired biometric information, a first transmission process that transmits first data, which has the identification information added to the encrypted biometric information, by broadcast communication to unspecified devices within the short-range communication area, and second data, which has the identification information added to obfuscated identification information that obfuscates the identification information that identifies the wearable terminal, to unspecified devices within the short-range communication area. The relay performs a second transmission process to send a broadcast message to the device, and when the relay receives the first data, it performs a first transmission process to send modified first data to the server, which is the encrypted biometric information with the modified identification information added to it, and when the relay receives the second data, it performs a second transmission process to send modified second data to the server, which is the obfuscated identification information with the modified identification information added to it, and the server performs a decryption process to decrypt the encrypted biometric information of the modified first data back into the biometric information, and a storage process to store the biometric information acquired by decryption in the biometric information storage unit, for each user wearing the device, based on the modified first data, the modified identification information of the modified second data, and the obfuscated identification information of the modified second data.

[0014] (7) In the configuration of (5) or (6) above, the wearable terminal is equipped with a first key, and the connection key is obfuscated using the encryption key and the first key.

[0015] (8) In the configuration of (5) or (6) above, the wearable terminal executes the second transmission process after executing the first transmission process multiple times.

[0016] According to the present invention, in a management system that can transmit biometric information by automatically connecting a wearable terminal and a relay device, the security of the automatic connection can be improved.

[0017] This is a diagram illustrating the management system of the first embodiment according to the present invention. This is a diagram illustrating the configuration of a wearable terminal of the first embodiment according to the present invention. This is a diagram illustrating an example of the data format transmitted by the first short-range wireless communication unit of the first embodiment according to the present invention. This is a diagram illustrating the configuration of a repeater of the first embodiment according to the present invention. This is a diagram illustrating the configuration of a server of the first embodiment according to the present invention. This is a diagram illustrating the biometric information storage unit of the first embodiment according to the present invention. This is a diagram illustrating the user management unit of the first embodiment according to the present invention. This is a flowchart illustrating the operation of a wearable terminal third embodiment according to the present invention.

[0018] Hereinafter, embodiments for carrying out the present invention (hereinafter referred to as "embodiments") will be described in detail with reference to the attached drawings. Throughout the description of the embodiments, the same elements are denoted by the same numbers or reference numerals.

[0019] <<First Embodiment>> A management system 100 that can automatically connect a wearable terminal 1 and a relay 2 according to the first embodiment of the present invention and transmit biometric information will be described with reference to Figures 1 to 8.

[0020] Figure 1 is a diagram illustrating a management system 100 according to a first embodiment of the present invention. As shown in Figure 1, the management system 100 includes a relay 2 that relays communication between a wearable terminal 1 and a server 3, a wearable terminal 1 that can communicate with the relay 2 using a connection key (described later), a server 3 that transmits the connection key (described later) to the relay 2, and a receiving permission terminal 4.

[0021] Furthermore, the repeater 2 and server 3, as well as the receiving permission terminal 4 and server 3, can communicate via network N. In addition, as will be described later, the wearable terminal 1 and repeater 2 are capable of short-range communication.

[0022] [Wearable Terminal 1] Figure 2 is a diagram illustrating the configuration of a wearable terminal 1 according to the first embodiment of the present invention. The wearable terminal 1 is a terminal worn and used by a user registered with the management system 100, and as shown in Figure 2, it comprises a control unit 11, a storage unit 12, a biometric information acquisition unit 13, an encryption unit 14, and a first short-range wireless communication unit 15, which are connected to each other via a bus BS1 for access. The user who wears and uses the wearable terminal 1 will henceforth be referred to as the wearer.

[0023] (Control Unit 11) The control unit 11 is responsible for the overall control of the wearable terminal 1. For example, the control unit 11 is a central processing unit (so-called CPU) that performs various control and calculation processes according to the control program stored in the memory unit 12.

[0024] Specifically, the control unit 11 performs calculations and other operations to determine the necessary biometric information based on the measurement data (described later) related to the wearer's biometric information acquired by the biometric information acquisition unit 13 (described later).

[0025] Furthermore, the control unit 11 is responsible for the overall control of communication and other functions of the wearable terminal 1 via the first short-range wireless communication unit 15. Since the control by the control unit 11 is the same as the operation of the wearable terminal 1 itself, the wearable terminal 1 may be described as the main component.

[0026] (Storage Unit 12) The storage unit 12 includes RAM, which is a volatile memory that temporarily stores various data and calculation results from the control unit 11, and ROM, which is a non-volatile memory that stores encryption keys (described later), connection keys (described later), and control programs (for example, software corresponding to the management system 100).

[0027] For example, one example of the various data stored in the memory unit 12 is the wearer's biometric information, which will be described later. The encryption key stored in the memory unit 12 is the key used for encryption by the encryption unit 14, which will be described later, and the connection key stored in the memory unit 12 is a so-called pairing key, as will be shown later as an example, when the first short-range wireless communication unit 15 is Bluetooth®.

[0028] To explain the communication connection state using a connection key, using the case where the connection key is a pairing key as an example, the communication connection state using a connection key is when the pairing key of one device that wants to establish a communication connection is registered with the other device to which it is connected, resulting in a unicast communication state between the devices.

[0029] Furthermore, since the pairing key is used to establish a communication connection between devices, a communication connection cannot be established with a device that does not possess a pairing key. Therefore, a communication connection using a pairing key is a highly confidential communication state.

[0030] (Biometric Information Acquisition Unit 13) The Biometric Information Acquisition Unit 13 is the part that acquires the wearer's biometric information, and is equipped with sensors that acquire the wearer's vital data and movement status. The Biometric Information Acquisition Unit 13 is equipped with, for example, a pulse sensor, a temperature sensor, a pulse wave sensor, a gyroscope sensor, a compass, an acceleration sensor, etc., and measures biometric information such as heart rate, blood oxygen saturation, body temperature, steps taken, sleep (autonomic nervous system recovery, REM sleep, non-REM sleep) state, floors climbed, distance traveled, etc. The portion of biometric information acquired by the sensors equipped in the Biometric Information Acquisition Unit 13 is also called measurement data.

[0031] Furthermore, based on the measurement data from the sensors equipped in the biological information acquisition unit 13, the control unit 11 determines biological information such as respiratory rate, various workouts including strength training workouts, aerobic workouts, anaerobic workouts, interval training, rep count, pitch, VO2MAX, training load, stress level, recovery measurement, and fitness test results. The portion of biological information obtained through calculations based on the measurement data from the sensors equipped in the biological information acquisition unit 13 is also called calculated data.

[0032] Furthermore, based on the measurement data from the sensors equipped in the biological information acquisition unit 13, the control unit 11 also determines abnormal states as biological information. For example, when the control unit 11 detects abnormalities in vital data such as abnormally low temperature or decreased pulse rate, or abnormalities in operating states due to sudden changes in acceleration (e.g., falling), by comparing them with preset thresholds, it records the abnormal state as biological information (records an abnormality flag). In the first embodiment, an abnormality flag of "0" indicates no abnormality, and "1" indicates an abnormality.

[0033] Furthermore, since the calculation data and abnormality flag can be determined on the server 3 side based on the measurement data, the biological information only needs to include at least the measurement data and the date and time when that measurement data was acquired.

[0034] The wearable terminal 1 then performs a storage process to store and accumulate the acquired biometric information (measurement data, date and time of acquisition of measurement data, calculation data, and abnormality flag, etc.) in the storage unit 12.

[0035] (Encryption Unit 14) The encryption unit 14 is a functional component configured by the operation of the control unit 11 according to a control program, and performs a first generation process to generate encrypted biometric information by encrypting the biometric information acquired by the wearable terminal 1 (at least measurement data acquired by the biometric information acquisition unit 13, the date and time of acquisition of the measurement data, etc.) based on an encryption key.

[0036] Furthermore, if the data includes calculation data, anomaly flags, etc., the encryption unit 14 performs a first generation process to generate encrypted biometric information by encrypting the biometric information (acquisition date and time, measurement data, calculation data, anomaly flags, etc.) including the calculation data, anomaly flags, etc.

[0037] In other words, the wearable terminal 1 uses the encryption unit 14 to perform a first generation process that generates encrypted biometric information, which includes at least the measurement data acquired by the biometric information acquisition unit 13 and the date and time the measurement data was acquired.

[0038] (First Short-Range Wireless Communication Unit 15) The first short-range wireless communication unit 15 is a communication interface that can communicate with devices within the short-range communication area CA (see Figure 1), and is, for example, Bluetooth®.

[0039] The wearable terminal 1 then performs a first transmission process (details described later) in which it periodically transmits (sends) first data (details described later) with identification information added to encrypted biometric information via broadcast communication to unspecified devices within the short-range communication area CA of the first short-range wireless communication unit 15 via broadcast communication. Broadcast communication, as goes without saying, is a form of communication that can be arbitrarily received by unspecified devices.

[0040] For example, the identification information is unique information used to identify the wearable device 1. If the identification information is a MAC address, for example, it will be automatically added when making a call. However, the identification information may be unique information different from the MAC address, and this information may be added to each wearable device 1 when making a call.

[0041] Furthermore, from the viewpoint of suppressing power consumption, it is preferable that the transmission period for the first data (details will be described later) be approximately once every three seconds. However, it is not necessary for the period to be the same at all times. For example, the wearable terminal 1 may vary the transmission period for the first data depending on the remaining power level to avoid power loss.

[0042] Furthermore, the first short-range wireless communication unit 15 receives data and the like transmitted from the server 3 via the second short-range wireless communication unit 22 of the repeater 2.

[0043] Figure 3 shows an example of the format of the first data transmitted by the first short-range wireless communication unit 15 of the first embodiment of the present invention. As shown in Figure 3, the first data transmitted in the first transmission process described later is encrypted biometric information, in which biometric information is encrypted by the encryption unit 14, with identification information added to it. The encrypted biometric information includes at least encrypted measurement data and acquisition date and time, and in the example of Figure 3, it also includes encrypted calculation data and an abnormality flag.

[0044] [Repeater 2] FIG. 4 is a diagram for explaining the configuration of the repeater 2 according to the first embodiment of the present invention. As shown in FIG. 4, the repeater 2 includes a second communication unit 21 capable of communicating with a server 3 described later, a second short-range wireless communication unit 22 capable of communicating with the first short-range wireless communication unit 15 within a short-range communication area CA (see FIG. 1), a control unit 23 that controls overall control of the repeater 2, and a storage unit 24 that performs various types of storage, and they are connected so as to be accessible via a bus BS2.

[0045] (Second Communication Unit 21) The second communication unit 21 is, for example, a communication interface capable of communicating in accordance with standards such as LTE (registered trademark), 4G, 5G, etc. As shown in FIG. 1, it is connected to the network N via the base station CS and is responsible for communication with the server 3.

[0046] However, since the second communication unit 21 only needs to be able to communicate with the server 3, it may also be a communication interface capable of wired network connection.

[0047] Further, if the repeater 2 is used in an environment with a Wi-Fi (registered trademark) router, the second communication unit 21 may also be a communication interface that complies with standards such as Wi-Fi (registered trademark).

[0048] (Second Short-Range Wireless Communication Unit 22) The second short-range wireless communication unit 22 is, for example, a communication interface that performs short-range communication such as Bluetooth (registered trademark), and receives first data and the like transmitted (sent) by broadcast communication from the first short-range wireless communication unit 15 of the wearable terminal 1. Also, the second short-range wireless communication unit 22 transmits data and the like transmitted from the server 3 toward the first short-range wireless communication unit 15.

[0049] (Control Unit 23) The control unit 23 controls overall control of the repeater 2. For example, the control unit 23 is a central processing arithmetic unit (so-called CPU) that executes various types of control, arithmetic processing, etc. in accordance with a control program stored in the storage unit 24.

[0050] (Storage Unit 24) The storage unit 24 includes RAM, which is a volatile memory that temporarily stores various data and calculation results from the control unit 23, and ROM, which is a non-volatile memory that stores control programs, etc. (for example, software corresponding to the management system 100).

[0051] For example, the repeater 2 may be a device 2A such as a typical smartphone or tablet terminal, as shown in Figure 1. Specifically, a device 2A such as a typical smartphone or tablet terminal has the configuration corresponding to the second communication unit 21, the second short-range wireless communication unit 22, the control unit 23, and the storage unit 24 described above, so it can be used as a repeater 2 by installing software that corresponds to the management system 100.

[0052] Furthermore, as shown in Figure 1, the repeater 2 may be a light bulb 2B used as lighting in places frequently used by the user on a daily basis, such as toilets and kitchens, equipped with a second communication unit 21, a second short-range wireless communication unit 22, a control unit 23, and a storage unit 24, with software corresponding to the management system 100 installed. Note that the light bulb 2B is not limited to the shape of an incandescent bulb, but may also be shaped like a fluorescent lamp.

[0053] [Server 3] Server 3 manages the biometric information of each user of the management system 100 on a user-by-user basis, and is in charge of managing the entire system, such as sending the biometric information of a specific user that is authorized to be acquired to the authorized receiving terminal 4 at a predetermined timing or in accordance with a request from the authorized receiving terminal 4.

[0054] Server 3 may be implemented as a physical computer, or it may be implemented as a cloud server utilizing cloud computing technology. If Server 3 is a cloud server, the storage unit 34 described later may be a data storage area provided by a cloud service provider.

[0055] Figure 5 is a diagram illustrating the configuration of a server 3 according to the first embodiment of the present invention. As shown in Figure 5, the server 3 comprises a third communication unit 31 that can communicate with the repeater 2, a control unit 32 that oversees the overall control of the server 3, a decoding unit 33, and a storage unit 34, which are connected to each other via a bus BS3 for access.

[0056] Furthermore, as will be explained later, the memory unit 34 includes a biometric information memory unit 34A for managing biometric information, and a user management unit 34B that registers identification information (for example, a MAC address) to identify the wearable terminal 1 in association with the user wearing it.

[0057] Therefore, the server 3 includes a biometric information storage unit 34A for managing biometric information, and a user management unit 34B that registers identification information (for example, a MAC address) that identifies the wearable terminal 1 in association with the user wearing it.

[0058] (Third communication unit 31) The third communication unit 31 is a communication interface that communicates with the repeater 2 and the receiving permission terminal 4 via the network N, and the specific contents of the communication interface may be the same as those described for the second communication unit 21.

[0059] (Control Unit 32) The control unit 32 is responsible for the overall control of the server 3. For example, the control unit 32 is a central processing unit (so-called CPU) that performs various control and calculation processes according to the control program stored in the memory unit 34.

[0060] (Decryption Unit 33) The decryption unit 33 is a functional component configured by the operation of the control unit 32 according to the control program, and performs a decryption process to decrypt the encrypted biometric information encrypted by the wearable terminal 1 contained in the first data described above back into biometric information.

[0061] As will be described later, the user management unit 24B of the memory unit 34 has a decryption key corresponding to the encryption key of each wearable terminal 1 registered in association with identification information that identifies the wearable terminal 1, and the decryption unit 33 decrypts the encrypted biometric information of the first data back into biometric information based on that decryption key.

[0062] For example, if the encryption method is a symmetric-key cryptography method, the same encryption key as the encryption key of each wearable terminal 1 is registered as the decryption key in the user management unit 34B. If the encryption method is a public-key cryptography method, a decryption key different from the decryption-specific encryption key corresponding to the encryption key of each wearable terminal 1 is registered.

[0063] In this manner, the server 3 uses the decryption unit 33 to decrypt the encrypted biometric information of the first data in accordance with the encryption key, and performs a decryption process that decrypts the encrypted biometric information of the first data back into biometric information.

[0064] (Storage Unit 34) The storage unit 34 includes RAM, which is a volatile memory for temporarily storing various data and calculation results from the control unit 32; ROM, which is a non-volatile memory for storing control programs, etc. (for example, software corresponding to the management system 100); a storage device (for example, a hard disk) for the biometric information storage unit 34A and the user management unit 34B. However, as explained earlier, in the case of a cloud server, the entire storage unit 34 may consist of a data storage area provided by the cloud service provider.

[0065] "Biometric Information Storage Unit 34A" Figure 6 is a diagram illustrating the biometric information storage unit 34A of the first embodiment according to the present invention. As shown in Figure 6, the biometric information storage unit 34A stores, for example, a file for each wearer in which the user name of the wearer and the MAC address of the wearable terminal 1, which is identification information for identifying the wearable terminal 1, are registered. In this file, as biometric information, measurement data, calculation data, and abnormal flags are recorded in chronological order based on the date and time the measurement data was acquired.

[0066] In Figure 6, the abnormal state of the abnormal flag is shown as "0," but as explained earlier, if there is an abnormality in the measurement data, etc., "1" will be recorded.

[0067] "User Management Unit 34B" Figure 7 is a diagram illustrating the user management unit 34B of the first embodiment according to the present invention. As shown in Figure 7, the user management unit 34B is linked to the wearer (username: AAA) and registers a decryption key (XXX) corresponding to the encryption key of the wearable terminal 1 worn by the wearer, a connection key (YYY), an identification information MAC address (00:1A:C1:SS:20:01), and the receiving permission terminal information (ID, PW, MAC address, email address, etc.) of the receiving permission terminal 4 described later. The encryption key and connection key may be given in binary or the like, and the ID and PW (password) of the receiving permission terminal information are the ID and PW used when the receiving permission terminal 4 accesses the management system 100.

[0068] [Receiving Authorized Terminal 4] Receiving authorized terminal 4 can be any general PC, smartphone, or tablet device equipped with communication capabilities that allow it to communicate with server 3; a detailed explanation of its configuration is omitted.

[0069] Furthermore, this authorized receiving terminal 4 is a terminal that is authorized (registered for acquisition) to acquire biometric information about the wearer by a relative of the wearer (for example, the wearer's daughter or son, etc.) who is concerned about the wearer's safety, with the wearer's permission.

[0070] While the above discussion focused on the case of relatives, this does not prevent the registration of devices belonging to caregivers other than relatives. Furthermore, in cases where permission for the use of biometric information has been obtained from the user, the information may be provided to authorized corporations or other entities, and the authorized receiving device 4 may be one of the devices authorized to access the information in this case.

[0071] Next, the overall operation of the management system 100 of the first embodiment will be explained, mainly with reference to the flowchart used to explain the operation of the wearable terminal 1. In other words, the operation of the wearable terminal 1 will be mainly explained, while at various points the operations of the relay device 2 and the server 3 that occur in conjunction with its operation will also be explained.

[0072] Figure 8 is a flowchart illustrating the operation of the wearable terminal 1 according to the first embodiment of the present invention.

[0073] It should be assumed that the activation (initial use procedure) of the wearable device 1 has already been completed before the start of Figure 8. This activation may be performed by the wearer, or by a daughter, son, or other person who is gifting the wearer the device 1 to the wearer. In addition, if a caregiver gives the wearable device 1 to the wearer, the caregiver may perform the activation.

[0074] To briefly explain the state before activation, at the time of shipment, identification information (MAC address in this example) that identifies the wearable terminal 1 is acquired, and a file for the wearer with the acquired identification information registered in the biometric information storage unit 34A (see Figure 6) is prepared.

[0075] Furthermore, at the time of shipment, the user management unit 34B (see Figure 7) registers the acquired identification information, decryption key, connection key, ID and password of authorized receiving terminal information, etc., in order to manage the user wearing the device.

[0076] However, at this point, parts that cannot be determined without input from the user wearing the device, such as the user's username, remain blank.

[0077] Furthermore, even if the wearable device 1 is started to be used before activation, the management of biometric information itself begins based on the identification information of the first data.

[0078] Each shipped wearable device 1 includes instructions (for example, a QR code®) directing users to an activation site, an ID for registration specific to each shipped wearable device 1, a password, etc. Activation is completed when the user accesses the site and registers their username, etc.

[0079] As a result, the user name and other information of the wearer, which were unknown at the time of shipment, are reflected in the file of the biometric information storage unit 34A (see Figure 6) and the user management unit 34B (see Figure 7), so that the management system 100 can manage biometric information, including data from before activation.

[0080] (S1) When processing by the wearable terminal 1 begins, in S1, the wearable terminal 1 determines whether it can detect the repeater 2. If the repeater 2 is within the short-range communication area CA (Figure 1), the repeater 2 is detected, the determination becomes YES, and the process proceeds to S2. On the other hand, if the repeater 2 is not within the short-range communication area CA (Figure 1), it cannot be detected, the determination becomes NO, and the process proceeds to S5.

[0081] (S2) In S2, the wearable terminal 1 determines whether it is the predetermined timing to establish a communication connection with the repeater 2 using the connection key. For example, if biometric information accumulated while in a communication connection state is transmitted about once a day, the predetermined timing can be determined by setting a criterion such as whether 24 hours or more have passed since the previous communication connection with the repeater 2 using the connection key, or whether a predetermined amount of time has passed since the previous connection.

[0082] With these criteria in place, if repeater 2 is not detected and no biometric information has been transmitted while connected to the network for more than 24 hours, the system can prioritize the transmission of biometric information while connected to the network, as described below.

[0083] Then, if the timing is as specified, the result is YES and the process proceeds to S3; otherwise, the result is NO and the process proceeds to S6.

[0084] (S3) In S3, since the predetermined timing (S2 is YES) has occurred, the wearable terminal 1 sends a communication connection request. However, if the identification information is a MAC address, it is automatically added, so more precisely, the request transmission process is executed to send a communication connection request with the identification information (MAC address) added to the relay 2. After the request transmission process, the process proceeds to S4.

[0085] Furthermore, when the repeater 2 receives a communication connection request, it notifies the server 3 that a communication connection request has been made from the wearable terminal 1 by, for example, forwarding (transmitting) the received communication connection request to the server 3, using the identification information attached to the communication connection request.

[0086] Furthermore, when server 3 receives notification that a communication connection request has been made (for example, a forwarded communication connection request), it refers to user management unit 34B to obtain the connection key of wearable terminal 1 from the identification information attached to the communication connection request, and executes a connection key transmission process to send the connection key of wearable terminal 1 corresponding to the identification information of the communication connection request to relay unit 2, which received the communication connection request.

[0087] Then, when the repeater 2 receives the connection key, both the wearable terminal 1 and the repeater 2 will hold the connection key, and as explained earlier, a communication connection will be established. The automatic communication connection process between the wearable terminal 1 and the repeater 2 will then take place, and the wearable terminal 1 and the repeater 2 will be in a communication connection state.

[0088] In this case, when establishing a communication connection, a connection key is generally sent from the device requesting the connection to the device to be connected to. Therefore, if, for example, a device impersonating the repeater 2 exists, there is a risk that a communication connection may be established between the wearable terminal 1 and the impersonating device.

[0089] On the other hand, in the first embodiment, the connection key is not sent from the wearable terminal 1 requesting the connection to the repeater 2, but rather from the server 3 to the repeater 2. Therefore, even if there is a fraudulent device that has impersonated the repeater 2, that fraudulent device cannot access the server 3, and thus cannot obtain the connection key, and cannot establish a communication connection with the wearable terminal 1. Thus, a high level of security for automatic connection (high security for automatic communication connection) is ensured.

[0090] (S4) In S4, the wearable terminal 1 performs a connection transmission process to send the stored biometric information to the server 3 via the relay 2 which is connected to the communication network, and then proceeds to S5. For example, as described above, if the predetermined timing is about once a day, the connection transmission process will transmit approximately 24 hours' worth of biometric information that has been stored since the last connection transmission process.

[0091] Furthermore, when transmitting the accumulated biometric information, the transmitted data is the accumulated biometric information with identification information added to it, so server 3 will receive the data with identification information added to it.

[0092] Therefore, when server 3 receives data, it records the biometric information in the biometric information storage unit 34A in the file of the wearer whose identification information is the same as the identification information of the data, based on the identification information of the data which has been added to the stored biometric information.

[0093] In other words, server 3 performs a storage process in the biometric information storage unit 34A to store the biometric information transmitted during the connection transmission process, for each user wearing the device.

[0094] (S5) In S5, the wearable terminal 1 determines whether to perform termination processing. For example, if the wearer performs an operation such as turning off the power of the wearable terminal 1, the determination is YES, and the series of operations in this flowchart ends. If the power of the wearable terminal 1 is turned ON again, the series of operations in this flowchart starts again from the beginning. On the other hand, if no operation such as turning off the power of the wearable terminal 1 is performed, the determination is NO, and the process returns to S1, and the series of operations is repeated.

[0095] (S6) In S6, the wearable terminal 1 uses the encryption unit 14 to perform a first generation process that generates encrypted biometric information by encrypting at least the measurement data acquired by the biometric information acquisition unit 13 and the biometric information including the date and time of acquisition of the measurement data based on the encryption key, and then proceeds to S7.

[0096] Furthermore, since the processing in S6 is based on the most recent measurement data, the data capacity of the biometric information to be encrypted is small, and therefore the data capacity of the encrypted biometric information is also small, for example, around 40 bytes or less.

[0097] (S7) In S7, the wearable terminal 1 performs a first transmission process in which it broadcasts (transmits) first data, which has identification information added to encrypted biometric information, to unspecified devices within the short-range communication area CA (see Figure 1), and then proceeds to S5.

[0098] Then, the repeater 2 located within the short-range communication area CA (see Figure 1) receives the first data, and the repeater 2 performs a transmission process to send the received first data to the server 3.

[0099] Then, when server 3 receives the first data transmitted from relay 2, it refers to user management unit 34B to obtain the decryption key for wearable terminal 1 of the identification information of the first data, and uses the decryption unit 33 to decrypt the encrypted biometric information of the first data according to the obtained decryption key, thereby executing a decryption process that decrypts the encrypted biometric information of the first data back into biometric information.

[0100] Subsequently, based on the identification information of the first data, server 3 records the biometric information obtained through decryption into the user's file in the biometric information storage unit 34A, where the identification information of the biometric information storage unit 34A is the same as the identification information of the data.

[0101] In other words, based on the identification information, server 3 performs a storage process to store the biometric information acquired through decryption in the biometric information storage unit 34A, for each user wearing the device.

[0102] As explained earlier, if the determination in S5 is NO, the process returns to S1 and the series of operations is repeated. Therefore, as long as the timing is not predetermined (while S2 is NO), the first transmission process (S7) that transmits the first data will be performed repeatedly.

[0103] In the flowchart of Figure 8, since the detection of repeater 2 is determined in S1, the first generation process (S6) and the first transmission process (S7) are performed only if repeater 2 is within the short-range communication area CA (see Figure 1).

[0104] However, as explained earlier, since the first data has a small data capacity, less power is required to perform the first generation process (S6) and the first transmission process (S7). Therefore, regardless of whether the repeater 2 is detected or not, the processes S6 and S7 may be performed periodically.

[0105] Furthermore, in the first embodiment, encryption is performed in the first generation process of S6. However, since the data transmitted in the first transmission process has a small data capacity and the wearer can only be identified on the server 3 side, this encryption process may be omitted, and the first data may be biometric information with identification information added. In this case, the decryption on the server 3 described above can be omitted. However, from the standpoint of obtaining higher security in terms of preventing leakage of personal information to third parties, it is preferable to perform encryption.

[0106] <<Second Embodiment>> Next, we will describe a management system 100 that enables the automatic connection of the wearable terminal 1 and the relay device 2 according to the second embodiment and the transmission of biometric information.

[0107] Since the basic configuration of the management system 100 of the second embodiment is the same as that of the management system 100 of the first embodiment, the following will mainly describe the differences from the management system 100 of the first embodiment, and will omit explanations of the similarities.

[0108] The wearable terminal 1 of the second embodiment includes, in addition to the configuration shown in Figure 2, a connection key generation unit that generates a connection key.

[0109] Furthermore, instead of the connection key stored in the memory unit 12, a first key is stored that is assigned to each version of the software (application) corresponding to the management system 100 of the wearable terminal 1.

[0110] Then, the connection key generation unit generates an obfuscated connection key using the encryption key and the first key. One specific example of obfuscation is hashing based on a hash function, and in the second embodiment, the connection key generation unit generates an obfuscated connection key by hashing the sum of the encryption key and the first key based on a hash function.

[0111] Furthermore, the key registered as the connection key for the user management unit 34B of server 3 is also an obfuscated key using the encryption key and the first key. In the second embodiment, as described above, the key registered as the connection key for the user management unit 34B of server 3 is a key formed by hashing the sum of the encryption key and the first key.

[0112] In other words, the connection key differs from the first embodiment in that it is an obfuscated key using the encryption key and the first key.

[0113] Then, when the wearable device 1 updates the software version corresponding to the management system 100 of the wearable device 1, it acquires a new first key.

[0114] Furthermore, during this update, the wearable device 1 obtains a new encryption key from the server 3 for updating the encryption key set for each wearable device 1.

[0115] In this way, since the encryption key and primary key used to generate the connection key are updated periodically, the connection key itself is also changed periodically, which enhances security compared to continuing to use the same connection key.

[0116] Furthermore, updating the encryption key enhances the security of the first outgoing process, as explained in S7.

[0117] The wearable terminal 1 may generate a connection key using the connection key generation unit when a connection key is needed. Alternatively, the connection key generation unit may generate a connection key only once when the encryption key and the first key are updated, and store the generated connection key in the storage unit 12. Then, when a connection key is needed, the connection key stored in the storage unit 12 may be used.

[0118] <<Third Embodiment>> As explained above, the repeater 2 may be a device 2A such as a general smartphone or tablet terminal, with software compatible with the management system 100 installed on it.

[0119] In the first embodiment, we have described the case where MAC addresses are used as identification information. However, in recent years, in order to prevent the tracking of user behavior and device connections and to protect privacy, some smartphone and tablet models have been developed that have a function to randomize MAC addresses.

[0120] Addresses generated by randomizing MAC addresses in this way are called random MAC addresses, etc. These addresses are sometimes also called private MAC addresses.

[0121] Therefore, depending on the model of the smartphone or tablet used as the repeater 2, in addition to the configuration shown in Figure 4, the repeater 2 may also be equipped with a change processing unit (e.g., a randomization function) that generates modified identification information (e.g., a random MAC address) by changing the identification information (e.g., MAC address).

[0122] In this case, if the relay device 2 is equipped with a modification processing unit, the relay device 2 sends the first data, which is encrypted biometric information transmitted by the wearable terminal 1 in the first transmission process with identification information added, to the server 3 as modified first data with modified identification information added to the encrypted identification information.

[0123] In this case, since server 3 receives the first modified data, which has modified identification information added to the encrypted identification information, even if the user management unit 34B has registered identification information to identify the wearable terminal 1, a problem arises in that it cannot determine which wearable terminal 1 the first modified data is from.

[0124] Therefore, in the third embodiment, a management system 100 that addresses these problems will be described. Since the basic configuration of the management system 100 in the third embodiment is the same as that of the management system 100 in the first embodiment, the following will mainly describe the differences from the management system 100 in the first embodiment, and will omit explanations of similar points.

[0125] First, as explained earlier, the third embodiment differs from the first embodiment in that, in addition to the configuration of the repeater 2 of the first embodiment, the repeater 2 is further equipped with a change processing unit (e.g., randomization function) that generates modified identification information (e.g., random MAC address) by changing the identification information (e.g., MAC address).

[0126] Furthermore, the user management unit 34B of the third embodiment includes, in addition to identification information (for example, a MAC address) for identifying the wearable terminal 1, or, in place of the identification information for identifying the wearable terminal 1, obfuscated identification information which is an obfuscated version of the identification information for identifying the wearable terminal 1.

[0127] For example, one method of obfuscation is hashing using a hash function. In this case, the obfuscated identification information is hashed identification information (e.g., hashed MAC address) obtained by hashing the identification information that identifies the wearable device 1 (e.g., MAC address) using a hash function.

[0128] In other words, the server 3 is equipped with a user management unit 34B that registers obfuscated identification information (e.g., hashed MAC address) which is an obfuscated version of the identification information (e.g., MAC address) used to identify the wearable terminal 1 in association with the user wearing it.

[0129] Furthermore, in the third embodiment, the biometric information storage unit 34A's file for each wearer contains, in addition to identification information that identifies the wearable terminal 1 (e.g., MAC address), or in place of the identification information that identifies the wearable terminal 1, obfuscated identification information (e.g., hashed MAC address) that obfuscates the identification information that identifies the wearable terminal 1.

[0130] Furthermore, the wearable terminal 1 stores obfuscated identification information (for example, a hashed MAC address) in the storage unit 12, which is registered in the user management unit 34B at the time of shipment. In other words, the wearable terminal 1 is equipped with obfuscated identification information, which is an obfuscated version of the identification information used to identify the wearable terminal 1.

[0131] Furthermore, the wearable terminal 1 may be configured to include an obfuscation unit and, if necessary, generate obfuscated identification information by obfuscating the identification information. Alternatively, as described above, if the obfuscation is hashing, the wearable terminal 1 may be configured to include a hashing unit that hashes using a hash function and, if necessary, generate hashed identification information by hashing the identification information.

[0132] Next, the overall operation of the management system 100 of the third embodiment will be explained, mainly with reference to a flowchart illustrating the operation of the wearable terminal 1. Here, as with the first embodiment, the operation of the wearable terminal 1 will be mainly explained, while the operations of the relay device 2 and the server 3 that occur in conjunction with its operation will also be explained at various points.

[0133] Figure 9 is a flowchart illustrating the operation of the wearable terminal 1 according to the third embodiment of the present invention, and corresponds to Figure 8. In Figure 9, steps that are the same as those described in the first embodiment with reference to Figure 8 are numbered the same, with the main differences being that "S3" has become "S3'" and "S8" has been added. Therefore, the following will mainly explain the differences, and explanations of similar points may be omitted.

[0134] (S3') In S3, as explained with reference to Figure 8, the wearable terminal 1 sent a communication connection request with identification information added. In the third embodiment, the wearable terminal 1 performs a request transmission process to send a communication connection request to the repeater 2 that includes obfuscated identification information (e.g., hashed identification information) obtained by obfuscating (e.g., hashing) the identification information.

[0135] More specifically, as explained earlier, in the case of a MAC address to which identification information is automatically added at the time of transmission, in S3', the wearable terminal 1 performs a request transmission process to send a communication connection request to the repeater 2 that includes a hashed MAC address (obfuscated identification information) with the MAC address (identification information) added, and then proceeds to S4. In other words, in S3', the wearable terminal 1 transmits data for a communication connection request in the request transmission process, which has obfuscated identification information (hashed MAC address in this example) and a communication connection request in the data area, and identification information (MAC address in this example) in the header.

[0136] When the relay 2 receives a communication connection request, it forwards (sends) the received communication connection request to the server 3, thereby notifying the server 3 that a communication connection request has been made from the wearable terminal 1. However, the modification processing unit (randomization function in this example) of the relay 2 only changes the header's identification information (MAC address in this example) to modified identification information (random MAC address in this example). As a result, the obfuscated identification information (hashed MAC address in this example) in the data area remains unchanged when the communication connection request is sent to the server 3.

[0137] Therefore, when server 3 receives a forwarded (transmitted) communication connection request, it refers to user management unit 34B to obtain the connection key of wearable terminal 1 from the obfuscated identification information included in the communication connection request, and executes a connection key transmission process to send the connection key of wearable terminal 1 corresponding to the obfuscated identification information of the communication connection request to relay unit 2, which received the communication connection request.

[0138] Then, similar to the first embodiment, in S4, the wearable terminal 1 performs a connection transmission process to send the stored biometric information to the server 3 via the relay 2, which is in a communication connection state. At this time, as in the first embodiment, identification information is added to the stored biometric information.

[0139] Here, at the repeater 2, the identification information is changed to modified identification information, and the server 3 receives data with the modified identification information added to the stored biometric information. However, the modified identification information itself does not change every time; it remains unchanged for a certain period of time. Therefore, as long as communication is ongoing and the connection is established, if the identification information is the same, the modified identification information will also be the same.

[0140] Therefore, based on the obfuscated identification information of the communication connection request to which the same modified identification information as the modified identification information attached to the received biometric information is attached, the server 3 records the biometric information in the biometric information storage unit 34A to the user's file to which the obfuscated identification information is the same as the obfuscated identification information of the data. In other words, the server 3 performs a storage process in the biometric information storage unit 34A to store the biometric information transmitted in the connection transmission process for each user.

[0141] In addition, in S4, the wearable terminal 1 may transmit biometric information that has been added to the stored biometric information, and the server 3 may record the biometric information in the biometric information storage unit 34A in a file of the wearer whose obfuscated identification information is the same as the data's obfuscated identification information, based on the obfuscated identification information added to the biometric information.

[0142] On the other hand, the above describes a case where the repeater 2 is equipped with a change processing unit that generates modified identification information by changing the identification information. However, some smartphones and tablet devices used as repeater 2 may not have a change processing unit.

[0143] In this case, since there is no modification processing unit, the relay 2 does not perform the process of changing the identification information to the modified identification information. Therefore, the server 3 receives data in which the identification information has been added to the information that has been stored as biometric information plus obfuscated identification information. In other words, it receives data that has biometric information and obfuscated identification information in the data area and identification information in the header.

[0144] Therefore, server 3 can determine, based on the identification information, which user's biometric information it belongs to.

[0145] However, if the server 3 were to determine whether or not the repeater 2 has a change processing unit and change the processing content accordingly, the system would become complicated. Therefore, it is best for the server 3 to perform the same processing as if the repeater 2 had a change processing unit, even if the repeater 2 does not have one.

[0146] In this case, the same processing can be performed by replacing the changed identification information in the explanation section of Server 3 from S3' onward with the identification information. Specifically, Server 3 should record the biometric information in the user's file where the obfuscated identification information of the biometric information storage unit 34A is the same as the obfuscated identification information of the data, based on the obfuscated identification information of the communication connection request to which the same identification information as the identification information attached to the received biometric information has been attached.

[0147] On the other hand, the processing of the wearable terminal 1 in S6 and S7 is the same as the processing of the wearable terminal 1 in S6 and S7 of the first embodiment. That is, in the first transmission process of S7, the wearable terminal 1 performs a first transmission process in which it transmits (sends) first data, which has identification information added to encrypted biometric information, via broadcast communication to unspecified devices within the short-range communication area CA (see Figure 1).

[0148] However, if the repeater 2 is equipped with a modification processing unit (randomization function in this example) that generates modified identification information (random MAC address in this example) by changing the identification information (MAC address in this example), the repeater 2, upon receiving the first data, executes a first transmission process to send the modified first data, which has the modified identification information added to the encrypted biometric information, to the server 3.

[0149] The server 3 then receives the first change data, but since the identification information has been changed to the changed identification information, it is not possible to identify the user wearing the device. Therefore, in the third embodiment, as shown in Figure 9, the wearable terminal 1 proceeds from S7 to S8.

[0150] (S8) In S8, the wearable terminal 1 performs a second transmission process, which involves broadcasting second data, obtained by obfuscating (hashing in this example) the identification information that identifies the wearable terminal 1 (MAC address in this example) to an unspecified device within the short-range communication area CA (see Figure 1), to obfuscated identification information (hashed MAC address in this example), and adding the identification information to this obfuscated identification information (hashed MAC address in this example). Then, the process proceeds to S5.

[0151] In other words, a second data is transmitted from the wearable device 1, which has obfuscated identification information (a hashed MAC address in this example) in its data area and identification information (a MAC address in this example) in its header.

[0152] When this happens, relay 2 will receive the second data. Upon receiving this second data, it will change the identification information (MAC address in this example) to modified identification information (random MAC address in this example). Therefore, relay 2 will perform a second transmission process to send the modified second data, which has the modified identification information (random MAC address in this example) added to the obfuscated identification information (hashed MAC address in this example), to server 3.

[0153] In other words, the relay 2 transmits modified second data, which has obfuscated identification information (a hashed MAC address in this example) in the data area and modified identification information (a random MAC address in this example) in the header.

[0154] Therefore, server 3 will receive modified second data, which has modified identification information (a random MAC address in this example) added to the obfuscated identification information (a hashed MAC address in this example).

[0155] As explained earlier, for a certain period of time, if the identification information is the same, the changed identification information will also be the same.

[0156] Therefore, the server 3 obtains the decryption key for the wearable terminal 1 corresponding to the obfuscated identification information, based on the modification identification information of the first modified data and the modification identification information of the second modified data, and executes a decryption process to decrypt the encrypted biometric information of the first modified data back into biometric information.

[0157] Furthermore, based on the modification identification information of the first and second modified data and the obfuscated identification information of the second modified data, the server 3 records biometric information in the biometric information storage unit 34A to the user whose obfuscated identification information is the same as the obfuscated identification information of the second modified data. In other words, the server 3 performs a storage process in the biometric information storage unit 34A to store the biometric information acquired through decryption, separately for each user.

[0158] In the above explanation, we described the case where the first transmission process is performed once, followed by the second transmission process once. However, since the second data transmitted in the second transmission process does not contain biometric information, the first transmission process may be performed multiple times before the second transmission process is executed, in order to improve the efficiency of data processing.

[0159] In other words, the first generation process in step S6 and the first transmission process in step S7 may be performed multiple times as a set, and after transmitting the first data multiple times, the second transmission process in S8 may be performed once to transmit the second data.

[0160] On the other hand, the above describes a case where the repeater 2 is equipped with a change processing unit that generates modified identification information by changing the identification information. However, some smartphones and tablet devices used as repeater 2 may not have a change processing unit.

[0161] In this case, since there is no modification processing unit, the relay 2 does not perform the process of changing the identification information to the modified identification information. Therefore, the relay 2 performs a transmission process that sends the received first data and second data to the server 3 as they are.

[0162] Therefore, since the server 3 receives the first data transmitted by the wearable terminal 1 in its original state, it can determine which wearer's biometric information the first data belongs to based on the identification information of the received first data, without having to refer to the received second data.

[0163] Therefore, the server 3 can also store biometric information acquired through decryption in the biometric information storage unit 34A, based on the identification information of the first data, for each user wearing the device.

[0164] However, as explained earlier, if the server 3 were to determine whether or not the repeater 2 has a change processing unit and change the processing content accordingly, the system would become complicated. Therefore, it is best for the server 3 to perform the same processing as if the repeater 2 had a change processing unit, even if the repeater 2 does not.

[0165] In other words, even when performing a transmission process that sends the first data and second data received by the relay 2 directly to the server 3, the same process can be performed by replacing the modified first data, modified second data, and modified identification information in the explanation section of the server 3 from S8 onwards with the first data, second data, and identification information.

[0166] Specifically, the server 3 obtains a decryption key for the wearable terminal 1 corresponding to the obfuscated identification information based on the identification information of the first data and the second data, and the obfuscated identification information of the second data, and performs a decryption process to decrypt the encrypted biometric information of the first data back into biometric information. The server 3 also records the biometric information in the biometric information storage unit 34A in a file for the wearer whose obfuscated identification information is the same as the obfuscated identification information of the second data, based on the identification information of the first data and the second data, and the obfuscated identification information of the second data. In other words, the server 3 performs a storage process to store the biometric information storage unit 34A, separately for each wearer, the biometric information obtained through decryption.

[0167] Although the present invention has been described above based on specific embodiments, the present invention is not limited to the above embodiments.

[0168] For example, in the third embodiment, as described in the second embodiment, the wearable terminal 1 is equipped with a first key, and the connection key may be obfuscated using the encryption key and the first key, for example, by summing the encryption key and the first key and then hashing them.

[0169] Thus, the present invention includes modifications and improvements to its embodiments, which is evident to those skilled in the art from the claims.

[0170] 1... Wearable terminal, 11, 23, 32... Control unit, 12, 24, 34... Memory unit, 13... Biometric information acquisition unit, 14... Encryption unit, 15... First short-range wireless communication unit, 2... Repeater, 2A... Equipment, 2B... Light bulb, 21... Second communication unit, 22... Second short-range wireless communication unit, 3... Server, 31... Third communication unit, 33... Decryption unit, 34A... Biometric information storage unit, 34B... User management unit, 4... Reception permission terminal, 100... Management system, BS1, BS2, BS3... Bus

Claims

1. A management system that enables the transmission of biometric information by automatically connecting a wearable terminal and a relay, the management system comprising: a relay that relays between the wearable terminal and a server; the wearable terminal that can communicate with the relay using a connection key; the server that transmits the connection key to the relay; the wearable terminal comprising: a biometric information acquisition unit that acquires the biometric information of the wearer; a first short-range wireless communication unit that can communicate with devices within a short-range communication area; the relay comprising: a second communication unit that can communicate with the server; a second short-range wireless communication unit that can communicate with the first short-range wireless communication unit within the short-range communication area; the server comprising: a third communication unit that can communicate with the relay; a biometric information storage unit that manages the biometric information; and a user management unit that registers identification information that identifies the wearable terminal in association with the wearer; the wearable terminal comprising: an storage process that stores the acquired biometric information; A management system characterized by: executing a request transmission process to send a communication connection request to the relay at a predetermined timing with the identification information attached; the server executing a connection key transmission process to send the connection key of the wearable terminal corresponding to the identification information of the communication connection request to the relay that received the communication connection request; when the relay receives the connection key, an automatic communication connection process is performed between the wearable terminal and the relay; the wearable terminal executing a connection transmission process to send the stored biometric information to the server via the relay in a communication connection state; and the server executing a storage process to store the biometric information transmitted in the connection transmission process in the biometric information storage unit for each wearer.

2. The management system according to claim 1, characterized in that the wearable terminal comprises an encryption key and an encryption unit that encrypts based on the encryption key, the server comprises a decryption unit that performs decryption corresponding to the encryption key, the wearable terminal performs a first generation process to generate encrypted biometric information by encrypting the acquired biometric information, and a first transmission process to transmit first data, which has the identification information added to the encrypted biometric information, by broadcast communication to unspecified devices within a short-range communication area, the repeater performs a transmission process to transmit the received first data to the server, and the server performs a decryption process to decrypt the encrypted biometric information of the first data back into biometric information, and a storage process to store the biometric information acquired by decryption in the biometric information storage unit, for each wearer, based on the identification information.

3. The management system according to claim 2, characterized in that the wearable terminal is equipped with a first key, and the connection key is obfuscated using the encryption key and the first key.

4. A management system that enables the transmission of biometric information by automatically connecting a wearable terminal and a relay, the management system comprising: a relay that relays between the wearable terminal and a server; the wearable terminal that establishes a communication connection with the relay using a connection key; the server that transmits the connection key to the relay that establishes a communication connection with the wearable terminal; the wearable terminal comprising: a biometric information acquisition unit that acquires the biometric information of the wearer; a first short-range wireless communication unit that can communicate with devices within a short-range communication area; the relay comprising: a second communication unit that can communicate with the server; a second short-range wireless communication unit that can communicate with the first short-range wireless communication unit within the short-range communication area; the server comprising: a third communication unit that can communicate with the relay; a biometric information storage unit that manages the biometric information; and a user management unit that registers obfuscated identification information, which is an obfuscated version of identification information used to identify the wearable terminal in association with the wearer; the wearable terminal comprising: an storage process for storing the acquired biometric information; A management system characterized by: executing a request transmission process to send a communication connection request to the relay at a predetermined timing, which includes obfuscated identification information obtained by obfuscating the identification information; the server executing a connection key transmission process to send the connection key of the wearable terminal corresponding to the obfuscated identification information of the communication connection request to the relay that received the communication connection request; when the relay receives the connection key, an automatic communication connection process is performed between the wearable terminal and the relay; the wearable terminal executing a connection transmission process to send the stored biometric information to the server via the relay in a communication connection state; and the server executing a storage process to store the biometric information transmitted in the connection transmission process in the biometric information storage unit for each wearer.

5. The wearable terminal comprises an encryption key and an encryption unit that encrypts based on the encryption key; the server comprises a decryption unit that performs decryption corresponding to the encryption key; the wearable terminal performs a first generation process to generate encrypted biometric information by encrypting the acquired biometric information; a first transmission process to transmit first data, which has the identification information added to the encrypted biometric information, via broadcast communication to unspecified devices within the short-range communication area; a second transmission process to transmit second data, which has the identification information added to obfuscated identification information that obfuscates the identification information that identifies the wearable terminal, via broadcast communication to unspecified devices within the short-range communication area; the repeater performs a transmission process to transmit the received first data and the second data to the server; the server performs a decryption process to decrypt the encrypted biometric information of the first data back into the biometric information; The management system according to claim 4, characterized in that, based on the identification information of the first data and the second data and the obfuscated identification information of the second data, it performs a storage process in the biometric information storage unit to store the biometric information obtained by decoding, for each user wearing the device.

6. The wearable terminal comprises an encryption key and an encryption unit that encrypts based on the encryption key; the server comprises a decryption unit that performs decryption corresponding to the encryption key; the repeater further comprises a modification processing unit that generates modified identification information by modifying the identification information; the wearable terminal performs a first generation process that generates encrypted biometric information by encrypting the acquired biometric information; a first transmission process that transmits first data, in which the identification information is added to the encrypted biometric information, via broadcast communication to unspecified devices within the short-range communication area; a second transmission process that transmits second data, in which the identification information is obfuscated to identify the wearable terminal, with the identification information added to it, via broadcast communication to unspecified devices within the short-range communication area; and the repeater performs a first transmission process that, upon receiving the first data, transmits modified first data, in which the modified identification information is added to the encrypted biometric information, to the server. The management system according to claim 4, characterized in that when the second data is received, the system performs a second transmission process which sends modified second data to the server obtained by adding the modified identification information to the obfuscated identification information, and the server performs a decryption process which decrypts the encrypted biometric information of the modified first data into biometric information, and a storage process which stores the biometric information obtained by decryption in the biometric information storage unit for each user wearing the data, based on the modified first data, the modified identification information of the modified second data and the obfuscated identification information of the modified second data.

7. The management system according to claim 5 or 6, characterized in that the wearable terminal is equipped with a first key, and the connection key is obfuscated using the encryption key and the first key.

8. The management system according to claim 5 or 6, characterized in that the wearable terminal performs the second transmission process after performing the first transmission process multiple times.

Images