Information processing system, information processing method, and program

Abstract

An information processing system (10a) comprises an information terminal (20a) and a plurality of control devices (50a and 50b). The information terminal (20a) is provided with an information processing unit (22) that simultaneously transmits an advertising signal including control information encrypted using an unlocking token to the plurality of control devices (50) using a communication unit (21). Each of the plurality of control devices (50a to 50b) is provided with a control unit (52a) that, when the control information included in the advertising signal received by a communication unit (51a) has been successfully decoded, transmits an advertisement response to the information terminal 20a using the communication unit (51a) and releases a restriction on a corresponding apparatus among a plurality of apparatuses.

Claims

1. An information processing system used to remove the restrictions on a plurality of devices that restrict the operation of an article, comprising an information terminal and a plurality of control devices, wherein the information terminal comprises a first communication unit, a first storage unit that stores a common key, and an information processing unit that simultaneously transmits a Bluetooth®-based advertisement signal, which includes control information encrypted using the common key stored in the first storage unit, to the plurality of control devices using the first communication unit, and each of the plurality of control devices comprises a second communication unit that receives the advertisement signal, a second storage unit that stores the common key, and a control unit that, upon successful decryption of the control information contained in the received advertisement signal using the common key stored in the second storage unit, transmits a Bluetooth®-based advertisement response to the information terminal using the second communication unit and removes the restrictions on the corresponding device among the plurality of devices, the information processing system.

2. The information processing system according to claim 1, wherein the common key is stored in the first storage unit and the second storage unit, respectively, when the information terminal and the control device are paired, by the first communication unit and the second communication unit communicating based on Bluetooth® Encrypted Data Key Material.

3. The first storage unit stores a first private key, a first public key corresponding to the first private key, and a server certificate, the server certificate includes the first public key and a signature for the first public key, the second storage unit stores a root certificate including the public key, in the process of sharing the common key, the information processing unit transmits the server certificate to the control unit using the first communication unit, the second communication unit receives the server certificate, the control unit verifies the signature included in the received server certificate using the public key included in the root certificate, if the verification is successful, the information terminal and the control unit are temporarily paired by JustWorks, and while the information terminal and the control unit are temporarily paired, the first communication unit and the second communication unit communicate based on Bluetooth® Encrypted Data Key Material, thereby storing the common key in the first storage unit and the second storage unit, respectively. The information processing system according to claim 1.

4. The information processing system according to claim 1, wherein the first storage unit stores a first private key, a first public key corresponding to the first private key, and a server certificate, the server certificate includes the first public key and a signature for the first public key, the second storage unit stores a root certificate including a public key, and in a process for sharing the common key, the information processing unit transmits the server certificate to the control device using the first communication unit, the second communication unit receives the server certificate, the control unit verifies the signature included in the received server certificate using the public key included in the root certificate, and if the verification is successful, the first communication unit and the second communication unit perform encrypted communication using a session key so that the common key is stored in the first storage unit and the second storage unit, respectively.

5. The information processing system according to claim 3 or 4, wherein the signature is a signature generated using the first private key, and the public key included in the root certificate is the first public key.

6. The information processing system according to claim 3 or 4, wherein the signature is a signature generated using a second private key different from the first private key, and the public key included in the root certificate is a second public key corresponding to the second private key.

7. The information terminal includes a transmission power measuring unit for measuring the transmission power of the advertisement signal, and the information processing unit, after simultaneously transmitting the advertisement signal using the first communication unit, if it fails to receive the advertisement response from at least one of the plurality of control devices, it simultaneously transmits the advertisement signal again using the first communication unit, and the transmission power of the advertisement signal transmitted again is greater than the measured transmission power, according to claim 1.

8. An information processing method performed by an information processing system used to remove the restrictions on a plurality of devices that restrict the operation of an article, wherein the information processing system comprises an information terminal having a first storage unit and a plurality of control devices having a second storage unit, and the information processing method includes the steps of: the information terminal simultaneously transmitting a Bluetooth®-based advertisement signal, which includes control information encrypted using a common key stored in the first storage unit, to the plurality of control devices; each of the plurality of control devices receiving the advertisement signal; and each of the plurality of control devices successfully decrypting the control information contained in the received advertisement signal using the common key stored in the second storage unit, transmitting a Bluetooth®-based advertisement response to the information terminal and removing the restrictions on the corresponding device among the plurality of devices.

9. A program for causing a computer to execute the information processing method described in claim 8.

Images