Offline Utilization Control Device for Secure Access Management
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing utilization management systems for restricted usage objects, such as hotel rooms or electronic media, face challenges in convenience and security. Users must physically visit a reception desk to borrow and return room keys, and the reliance on network-connected RFID readers increases security risks.
Innovation Solution
A utilization management system that employs a utilization control device communicating only via Near Field Communication, separated from the network. This system includes a management device, a provider terminal, and a user terminal, using public and secret keys for secure verification and authorization processes.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If RFID readers are connected to the server via the Internet to enable remote facility management, then the convenience of users is improved, but the security risk is increased
Solution Approach 1:
The system divides the facility management function into two independent parts: the network-connected server for user management and the offline utilization control device for actual control. This segmentation allows the server to provide convenient user interfaces while the control device maintains security by operating independently from the network.
Solution Approach 2:
The utilization control device acts as an intermediary between the server and the usage target object. It receives control instructions from the server via Near Field Communication and executes them locally without requiring continuous network connection, thereby mediating between the convenience of remote management and the security of offline operation.
2Object-affected harmful factors
If the utilization control device communicates only via Near Field Communication and is separated from the network, then the security risk is reduced, but the convenience of users is worsened
Solution Approach 1:
The system implements a feedback mechanism where the server sends control instructions to the utilization control device through the user's terminal via Near Field Communication. This allows the offline control device to receive updated commands and status information without requiring direct network connectivity, maintaining both security and user convenience.
3Object-affected harmful factors
If room keys are lent out and returned at a reception desk to enable facility access control, then the security of the facility is improved, but the convenience of users is worsened
Solution Approach 1:
The system replaces the mechanical key lending and returning process with an electronic control system. The utilization control device electronically authenticates users and controls access to the facility, eliminating the need for physical key exchange at the reception desk while maintaining security and improving convenience.
Data Source
AI summary
The present invention reduces security risks while improving the convenience of use management technology for a usage target object. A utilization control device (1), upon receiving hole data with a first signature from a provider terminal (3), verifies the first signature by using a first public key, to set the hole data to the device (1) itself when the signature verification is established. Furthermore, upon receiving a use permit with a second signature from a user terminal (4), the utilization control device (1) verifies the second signature by using a second public key included in the hole data, transmits a nonce to the user terminal (4), receives a third signature to the nonce from the user terminal (4), and verifies the third signature by using a third public key included in the use permit. When the second and third signature verifications are both established, the utilization control device (1) refers to transaction information included in the use permit, and lifts restriction on use of the usage target object (house 50) when conditions identified by the transaction information are satisfied.