JP2014159692A - Security system - Google Patents

Abstract

To lock and unlock a house safely and remotely without requiring other equipment such as a fingerprint authentication device.
A personal digital assistant (90) acquires authentication information stored in a card key (92) by short-range wireless communication, and receives an instruction to lock or unlock an electric lock (50) of a house (10). And the input command can be transmitted. The information center 80 receives the authentication information transmitted by the portable information terminal 90, and locks or unlocks the electric lock 50 on the portable information terminal 90 when the received authentication information matches the previously registered authentication information. Allow sending of commands. The HEMS 30 acquires the authentication information and command transmitted by the portable information terminal 90 via the information center 80, and when the acquired authentication information matches the previously registered authentication information, the electric lock 50 is obtained based on the acquired command. Lock or unlock.
[Selection] Figure 1

Description

  The present invention relates to a security system that can remotely control locking and unlocking of a house.

  There is a home security system in which a home terminal is remotely operated from a mobile terminal by a mobile terminal.

  For example, in the prior art described in Patent Document 1, a fingerprint authentication device is attached to a mobile terminal, and after the sender of the mobile terminal is authenticated as a person registered in the system, remote operation of a device in the house is performed. An acceptable home security system has been proposed.

JP 2006-48174 A

  However, the technique described in Patent Document 1 has a problem in that it is necessary to carry a fingerprint authentication device in addition to the portable terminal.

  The present invention has been made in consideration of the above facts, and an object of the present invention is to provide a security system capable of safely and remotely controlling locking and unlocking of a house without requiring other devices such as a fingerprint authentication device. To do.

  The invention of claim 1 for solving the above-mentioned problem is that the authentication information stored in the electronic key is acquired by short-range wireless communication, and a command for locking or unlocking the electric lock of the house is input, and the acquisition is performed. And receiving the authentication information and the authentication information transmitted by the portable information terminal, and the received authentication information matches the pre-registered authentication information. In this case, the relay unit that permits the portable information terminal to transmit the command, the authentication information and the command transmitted by the portable information terminal are acquired via the relay unit, and the acquired authentication information is stored in advance. And a control unit that locks or unlocks the electric lock based on the acquired command when it matches the registered authentication information.

  According to the first aspect of the present invention, when the relay unit determines that the authentication information transmitted from the portable information terminal is authentic, the transmission of an electric lock locking or unlocking command from the portable information terminal is performed. it can.

  According to a second aspect of the present invention, in the invention of the first aspect, the portable information terminal acquires the encrypted authentication information from the electronic key by the short-range wireless communication, and acquires the acquired authentication information. The decrypted authentication information and the input command are encrypted and transmitted to the relay unit.

  According to the second aspect of the present invention, communication between the electronic key and the portable information terminal and communication between the portable information terminal and the relay unit can be encrypted.

  The invention according to claim 3 is the invention according to claim 2, wherein the control means acquires and decrypts the authentication information and the command encrypted from the relay means, and the decrypted authentication information is stored in advance. When the authentication information matches the registered authentication information, the electric lock is locked or unlocked based on the decoded instruction of the house.

  According to the third aspect of the present invention, the method of locking the encrypted authentication information and the electric lock of the house receives the decryption command and decrypts it to lock or unlock the electric lock of the house. it can.

  As described above, according to the first aspect of the present invention, when the relay unit determines that the authentication information transmitted from the portable information terminal is authentic, the locking or unlocking of the electric lock from the portable information terminal is performed. By enabling the transmission of the command, it is possible to safely and remotely control the locking and unlocking of the house without requiring other devices such as a fingerprint authentication device.

  According to the invention described in claim 2, by encrypting the communication between the electronic key and the portable information terminal and the communication between the portable information terminal and the relay means, no other device such as a fingerprint authentication device is required. In addition, it has the effect of being able to remotely control the locking and unlocking of houses safely.

  According to the third aspect of the invention, the method of locking the encrypted authentication information and the electric lock of the house receives the decryption command and decrypts it to lock or unlock the electric lock of the house. In addition, there is an effect that it is possible to safely and remotely control locking and unlocking of a house without requiring other devices such as a fingerprint authentication device.

It is the schematic which shows an example of the security system which concerns on embodiment of this invention. It is a block diagram which shows schematic structure of HEMS in the security system which concerns on embodiment of this invention. It is a flowchart which shows an example of a process of the portable information terminal in the case of acquiring authentication information from the card key in the security system concerning an embodiment of the invention. It is a flowchart which shows an example of the process of the portable information terminal in the session of the portable information terminal and information center in the security system which concerns on embodiment of this invention. It is a flowchart which shows an example of a process of the information center in the session of the information center and HEMS in the security system which concerns on embodiment of this invention. It is a sequence diagram which shows an example of the whole process in the security system which concerns on embodiment of this invention. It is a flowchart which shows an example of a process of the portable information terminal which authenticates by a voiceprint in the session of a portable information terminal and an information center in the security system which concerns on embodiment of this invention.

  Hereinafter, an example of an embodiment of the present invention will be described in detail with reference to the drawings. FIG. 1 is a schematic diagram showing an example of a security system according to an embodiment of the present invention.

  In the present embodiment, the power from the grid power 12 is supplied to the distribution board 14 of the house 10 via the main breaker 100.

  On the system power side of the main breaker 100, a main breaker current sensor 120 that detects the current value of the power supplied from the system power 12 is provided.

  The electric power supplied from the grid power 12 and the SOFC 70 to the distribution board 14 is supplied to the home appliance 32 and the residential equipment 34, which are power load means, via the branch circuits 20A and 20B, respectively. The branch circuit 20C is for supplying power for operating the electric lock 52.

  The branch circuits 20A to 20C are provided with current sensors 22A to 22C for measuring the current values of the branch circuits 20A to 20C, respectively. The information lines from the current sensors 22A to 22C are connected to the HEMS 30 together with the information line from the main breaker current sensor 120 and the information line for the HEMS 30 to control the distribution board 14. In FIG. 1, the broken line is an information line through which measurement data or control information flows.

  The branch circuits 20A to 20C of the distribution board 14 are respectively provided with branch breakers 24A to 24C for switching the branch circuits 20A to 20C to an on state or an off state, and the branch breakers 24A to 24C are controlled by the HEMS 30. .

  In FIG. 1, only three systems of branch circuits are shown for simplification of description, but in this embodiment, three or more systems or three systems or less may be used, and the number of branch circuits is not particularly limited. .

  In addition, an electric lock 52 that can lock and unlock the door 54 is connected to the HEMS 30. The electric lock 52 locks or unlocks the door by authentication using a card key 92 which is a kind of so-called electronic key or by control from the HEMS 30.

  A terminal device 56 that is a gateway of a network 70 such as the Internet is connected to the HEMS 30. The HEMS 30 can communicate with the information center 80 via the terminal device 56 and the network 70, and further can communicate with the portable information terminal 90 via the terminal device 56, the network 70, and the information center 80. .

  The portable information terminal 90 can perform voice communication and data communication with other terminals, and can perform near field communication (NFC: Near Field Communication) encrypted at a short distance of several centimeters from the card key 92. Is possible. The portable information terminal 90 acquires authentication information for locking or unlocking the electric lock 52 stored in the card key 92 by NFC encrypted from the card key 92, and acquires the acquired authentication information via the network 70. It is assumed that transmission to the information center 80 is possible.

  The card key 92 records authentication information such as a password as optically readable information such as a barcode, QR code (registered trademark), or iQR code, or electromagnetically records on a magnetic storage medium or an integrated circuit (IC). A card-like key recorded using the method. In the present embodiment, it is assumed that the card key 92 records the internal authentication information and can transmit the authentication information to the card reader unit of the electric lock 52 or the portable information terminal 90 by encrypted NFC.

  The information center 80 is a facility for relaying information through a network 70 including a server and a router related to Internet communication. The server or router of the information center 80 verifies whether the authentication information of the card key 92 transmitted by the portable information terminal 90 is correct. If the authentication information is correct, the communication or communication between the portable information terminal 90 and the HEMS 30 is permitted. The operation to lock or unlock the electric lock 52 through the HEMS 30 is made possible.

  FIG. 2 is a block diagram showing a schematic configuration of the HEMS 30 according to the security system according to the present embodiment.

  As shown in FIG. 2, the HEMS 30 includes a CPU 36, a ROM 38, a RAM 40, and an input / output port 42. These include a bus 44 such as an address bus, a data bus, and a control bus. Are connected to each other.

  A display unit 46, an operation unit 48, and a memory 50 are connected to the input / output port 42 as various input / output devices. The display unit 46 and the operation unit 48 are integrally configured, and a touch panel provided on the display unit 46 can be applied to the operation unit 48.

  The display unit 46 can display the power consumption of the power load means such as the home appliance 32, the locking state of the electric lock 52, and the like.

  The power consumption of the home appliance 32 can be calculated from the current value detected by the current sensor 22A, and the power consumption of the residential equipment 34 can be calculated from the current value detected by the current sensor 22B. The power consumption of the electric lock 52 can be calculated based on the current value detected by the current sensor 22C.

  Since the voltage supplied from the distribution board 14 to the electric power load means such as the home appliance 32, the dwelling device 34, and the electric lock 52 is approximately 100V, in the present embodiment, the current value detected by each current sensor is multiplied by 100. Thus, the amount of power can be calculated. However, in a branch circuit with a large voltage fluctuation, a means for measuring the voltage may be provided separately.

  The memory 50 stores a program for controlling the branch breakers 24A to 24C, a program for controlling the electric lock 52, various information for executing these programs, and the like.

  The HEMS 30 performs various kinds of control such as control of electric power supplied to the house 10 or control of the electric lock 52 by developing a program stored in the memory 50 on the RAM 40 or the like and executing it by the CPU 36.

  Further, the distribution board 14, the electric lock 52, the termination device 56, and the like are connected to the input / output port 42.

  Subsequently, control of the HEMS 30 according to the present embodiment will be described. FIG. 3 is a flowchart showing an example of processing of portable information terminal 90 in the security system according to the present embodiment.

  In step 300, the authentication information of the electric lock 52 is acquired from the card key 92 by NFC encrypted. For example, NFC can use a technology such as FeliCa (registered trademark) performed at a communication speed of 106 kbps with a carrier wave of 13.56 MHz. The card key 92 is fed by electromagnetic waves emitted from the portable information terminal 90 and is transmitted to the portable information terminal 90 by NFC obtained by encrypting the authentication information stored in the internal IC. In the present embodiment, a block cipher such as DES (Data Encryption Standard) or triple DES can be used. In step 302, the encrypted authentication information is decrypted.

  In step 304, it is verified whether the authentication information of the decrypted card key 92 is the owner of the portable information terminal 90 and the resident of the house 10, and if the determination is affirmative, decryption is performed in step 306. The authentication information thus stored is stored in a storage means such as a memory, and the process is terminated. Various methods can be used for the verification in step 304. For example, an identifier such as a serial number, an expiration date, and an owner name of the card key 92 is registered in advance in a storage unit such as a memory of the portable information terminal 90. When the authentication information is acquired from the card key 92 in step 300, the identifier of the card key 92 is also acquired by the encrypted NFC, and in step 304, it is determined whether or not the decrypted identifier matches the registered identifier. To do. Alternatively, the authentication information of the card key 92 may be registered in advance in the portable information terminal 90, and the determination may be made based on whether or not the authentication information transmitted from the card key 92 matches the registered authentication information. Furthermore, when the authentication information and identifier transmitted from the card key 90 completely match the registered authentication information and identifier, the authentication information of the card key 92 may be determined to be authentic.

  The portable information terminal 90 encrypts the temporarily stored authentication information of the card key 92 and transmits it to the information center 80.

  FIG. 4 is a flowchart showing an example of processing of portable information terminal 90 in a session between portable information terminal 90 and information center 80 in the security system according to the present embodiment. In the present embodiment, a session between the portable information terminal 90 and the information center 80 uses a communication protocol in consideration of security such as SSL (Secure Sockets Layer) or TLS (Transport Layer Security).

  In step 400, the portable information terminal 90 makes an access request to the information center 80, and in step 402, it is determined whether or not the server certificate transmitted from the information center 80 has been acquired.

  If the determination in step 402 is affirmative, it is verified in step 404 whether or not the acquired server certificate is authentic. The verification is performed by decrypting the acquired server certificate with a public key issued by a certificate authority (CA), the signature of the information center 80 described in the decrypted server certificate, and the expiration date of the server certificate. And whether the connection domain and the like are normal. In step 404, if all of these matters are normal, an affirmative determination is made, and the procedure proceeds to step 406.

  In step 406, the server public key of the information center 80 is extracted from the decrypted server certificate. The server public key is a public key issued by the information center 80.

  In step 408, a common key used for encryption and decryption in the session between the portable information terminal 90 and the information center 80 is generated. A common key is generated for each session and discarded when the session ends.

  In step 410, the generated common key is encrypted with the server public key and transmitted to the information center 80. The information center 80 keeps a secret key corresponding to the server public key secret, and decrypts the common key encrypted with this secret key.

  In step 412, the authentication information of the electric lock 52 temporarily stored in the memory or the like is encrypted with the common key and transmitted to the information center 80. At this time, the identifier of the card key 92 may be encrypted and transmitted.

  In step 414, it is verified whether or not a session permission due to determination that the transmitted authentication information is authentic can be received from the information center 80. Whether the authentication information is authentic is determined by whether the information center 80 registers the authentication information of the card key 92 in advance, and the authentication information transmitted from the portable information terminal 90 matches the registered authentication information. Determine by. Alternatively, the information center 80 may register the identifier of the card key 92 in advance and determine whether the identifier of the card key 92 transmitted together with the authentication information from the portable information terminal 90 matches the registered identifier. Good. Further, the authentication information may be determined to be authentic when the authentication information transmitted from the portable information terminal 90 and the identifier of the card key 92 completely match the registered authentication information and identifier.

  If the determination in step 414 is affirmative, an instruction to lock or unlock the electric lock 52 based on the user's operation is encrypted with the common key and transmitted in step 416, and the process ends. In the case of a negative determination in steps 402, 404, and 414, all the processes are terminated in order to maintain security.

  3 and 4 can be implemented as a function unique to the portable information terminal 90, but can also be implemented as an add-on application to the portable information terminal 90. It is.

  FIG. 5 is a flowchart showing an example of processing of the information center 80 in a session between the information center 80 and the HEMS 30 in the security system according to the present embodiment. Also in the session shown in FIG. 5, a communication protocol in consideration of security such as Secure Sockets Layer (SSL) or Transport Layer Security (TLS) is used.

  In step 500, the information center 80 makes an access request to the HEMS 30, and in step 502, it is determined whether or not the server certificate transmitted from the HEMS 30 has been acquired.

  If the determination in step 502 is affirmative, it is verified in step 504 whether or not the acquired server certificate is authentic. In the verification, the obtained server certificate is decrypted with the public key issued by the certificate authority, and the items such as the signature of the HEMS 30, the expiration date of the server certificate, and the connection domain described in the decrypted server certificate are normal. It is determined whether or not. In step 504, when all of these matters are normal, an affirmative determination is made, and the procedure proceeds to step 506.

  In step 506, the server public key of the HEMS 30 is extracted from the decrypted server certificate. The server public key is a public key issued by the HEMS 30.

  In step 508, a common key used for encryption and decryption in the session between the information center 80 and the HEMS 30 is generated. A common key is generated for each session and discarded when the session ends. In step 510, the generated common key is encrypted with the server public key and transmitted to the HEMS 30.

  In step 512, the authentication information of the electric lock 52 received from the portable information terminal 90 and temporarily stored is encrypted with the common key and transmitted to the HEMS 30. At this time, the identifier of the card key 92 is also encrypted and transmitted.

  In step 514, it is verified whether or not the session permission due to the authentication information being determined to be authentic can be received from the HEMS 30. Whether or not the authentication information is authentic is determined by whether or not the HEMS 30 registers the authentication information of the card key 92 in advance and the authentication information transmitted from the information center 80 matches the registered authentication information. . Alternatively, the HEMS 30 may register the identifier of the card key 92 in advance and determine whether or not the identifier of the card key 92 transmitted from the information center 80 together with the authentication information matches the registered identifier. Furthermore, the session may be permitted when the authentication information transmitted from the information center 80 and the identifier of the card key 92 completely match the registered authentication information and identifier.

  If the determination in step 514 is affirmative, the instruction to lock or unlock the electric lock 52 based on the user's operation is encrypted with the common key and transmitted in step 516, and the process ends. If the determination in steps 502, 504, and 514 is negative, all the processes are terminated in order to maintain security.

  FIG. 6 is a sequence diagram illustrating an example of overall processing in the security system according to the present embodiment. First, in step S600, authentication information is encrypted from the card key 92 and transmitted.

  The portable information terminal 90 decrypts the authentication information received in step S602, and verifies the authentication information in step S604. If the verification result in step S604 is OK, the authentication information decrypted in step S606 is temporarily stored in a memory or the like.

  The portable information terminal 90 issues an access request to the information center 80 in step S608, and the information center 80 issues a server certificate in step S610. The portable information terminal 90 verifies the server certificate received in step S612. If the verification result is OK, the server public key is extracted from the server certificate in step S614.

  The portable information terminal 90 generates a common key in step S616 and transmits the common key encrypted in step S618. Further, the information center 80 decrypts the common key received in step S620.

  The portable information terminal 90 transmits the authentication information encrypted in step S622, and the information center 80 decrypts and verifies the authentication information received in step S624. If the verification result is OK, the session is permitted in step S626. Send.

  The portable information terminal 90 encrypts and transmits the instruction to lock or unlock the electric lock 52 in step S628, and the information center 80 decrypts and temporarily stores the instruction to lock or unlock in step S630.

  The information center 80 issues an access request to the HEMS 30 in step S632, and the HEMS 30 issues a server certificate in step S634. The information center 80 verifies the server certificate received in step S636, and if the verification result is OK, extracts the server public key from the server certificate in step S638.

  The information center 80 generates a common key in step S640, and transmits the common key encrypted in step S642. Further, the HEMS 30 decrypts the common key received in step S644.

  The information center 80 transmits the authentication information encrypted in step S646, and the HEMS 30 decrypts and verifies the authentication information received in step S648. If the verification result is OK, the session permission is transmitted in step S650. .

  The information center 80 encrypts and transmits an instruction to lock or unlock the electric lock 52 in step S652. The HEMS 30 decodes the locking or unlocking instruction in step S654, and controls the electric lock 52 in accordance with the locking or unlocking instruction decoded in step S656.

  The HEMS 30 encrypts and transmits the control result with the common key with the information center 80 at step S658, the information center 80 decrypts the control result received at step S660, and the common key with the portable information terminal 90 at step S662. Encrypt with and send.

  The portable information terminal 90 receives and decodes the control result in step S664, and displays the control result in step S666.

  As described above, according to the present embodiment, other devices such as a fingerprint authentication device are required by performing encrypted communication with the card key 92, the portable information terminal 90, the information center 80, and the HEMS 30. In addition, the house 10 can be locked and unlocked safely and remotely.

  In the present embodiment, the case where the locking and unlocking of the electric lock 52 of the door 54 is remotely controlled has been described as an example. However, as described above, the home appliances 32 and the housing equipment 34 are provided via the information center 80. It is also possible to remotely control devices in the house using the card key 92 and the portable information terminal 90 safely. In this case, in step 416 of FIG. 4, a command for controlling the equipment in the house is transmitted.

  In the present embodiment, the authentication information of the card key 92 is registered in the portable information terminal 90, and the lock and unlock of the electric lock 52 and the remote operation of the equipment in the house can be performed without using the card key 92. It may be possible.

  In the present embodiment, in the authentication between the portable information terminal 90 and the information center 80, the voice print of the user can be further used for authentication. By adding authentication by voiceprint, locking and unlocking of the house 10 and devices in the house can be remotely operated more safely.

  FIG. 7 is a flowchart showing an example of processing of portable information terminal 90 that performs voiceprint authentication in a session between portable information terminal 90 and information center 80 in the security system according to the present embodiment.

  In step 700, the portable information terminal 90 transmits an access request to the information center 80. In step 702, a voice information input instruction is received from the information center 80. The voice information input instruction is, for example, an instruction for the user to utter a phrase such as “Hinodeyamagata” or “Niitakayama nobore” on the display of the portable information terminal 90. As described above, the lexical word to be uttered may not have a substantial meaning, but it is preferable that the phoneme included in the lexical word is easily identified.

  In step 704, voice information that is voice data uttered by the user is transmitted to the information center 80. In the information center 80, it is determined whether or not the voice print of the transmitted voice information matches the voice print of the user registered in advance.

  In step 706, it is determined whether or not the voiceprints match and the information center 80 has permitted access. If the determination is affirmative, the procedure proceeds to step 402. Thereafter, the procedure of steps 402 to 416 is the same as that in FIG.

  Thus, before starting a session with the information center 80, it is possible to determine whether or not the person who owns the portable information terminal 90 and the card key 92 is a resident of the house 10 by voiceprint recognition. It becomes possible.

  In the case of FIG. 7, the information center 80 registers a voiceprint of a resident of the house 10 who is a user of the portable information terminal 90 in advance. Voiceprint registration is possible from the portable information terminal 90 or the HEMS 30.

10 Housing 32 Home Appliance 34 Housing Equipment 36 CPU
38 ROM
40 RAM
46 Display Unit 48 Operation Unit 50 Memory 52 Electric Lock 54 Door 56 Termination Device 70 Network 80 Information Center 90 Portable Information Terminal 92 Card Key

Claims (3)

The authentication information stored in the electronic key is acquired by short-range wireless communication, and a command to lock or unlock the electric lock of the house is input, and the acquired authentication information and the input command can be transmitted. Portable information devices,
Relay means for receiving the authentication information transmitted by the portable information terminal, and permitting the portable information terminal to transmit the command when the received authentication information matches the authentication information registered in advance.
When the authentication information and the command transmitted by the portable information terminal are acquired via the relay unit, and the acquired authentication information matches the previously registered authentication information, based on the acquired command Control means for locking or unlocking the electric lock;
Security system with   The portable information terminal acquires the encrypted authentication information from the electronic key by the short-range wireless communication, decrypts the acquired authentication information, and decrypts the decrypted authentication information and the input command The security system according to claim 1, wherein each is encrypted and transmitted to the relay unit.   The control means obtains and decrypts the authentication information and the command encrypted from the relay means, and when the decrypted authentication information matches the pre-registered authentication information, The security system according to claim 2, wherein the electric lock is locked or unlocked based on the command.

Images