JP2019097027A - Communication system, control method for communication system, and relay device - Google Patents

Abstract

To secure security in establishing paring of a radio operation terminal and a relay device and, additionally, enhance convenience of a user.SOLUTION: A communication adapter 40 transmits identification information of an adapter and a password generation request to a server 20 when a paring request is input to the communication adapter 40 from a smartphone 30. The server 20 transmits a challenge code to the communication adapter 40 responsive to the password generation request. The communication adapter 40 and the server 20 generate a first and second passwords using common function operation to the challenge code. The first password and identification information are transmitted from the communication adapter 40 to the smartphone 30 and are further transmitted to the server 20. The server 20, when the first password agrees with the second password, authenticates paring of the smartphone 30 and the communication adapter 40 corresponding to the identification information transmitted together with the first password.SELECTED DRAWING: Figure 5

Description

  The present invention relates to a communication system, a control method for a communication system, and a relay device, and more specifically, to a hot water utilization facility (for example, a hot water heater, a multi-hot water supply system, a hot water in the bathtub repelling device, a filtration device, or And a communication system for remote monitoring and / or remote control of a water heating apparatus and the like, and a control method thereof, and a relay apparatus applied to the communication system.

  The applicant of the present application discloses a remote management system for a multi-hot water supply system, which is an example of a hot water utilization facility, in Japanese Patent Application Laid-Open No. 2017-58026 (Patent Document 1). In the remote management system of Patent Document 1, various information of the hot water supply system is transmitted to a management center (server) by using a communication adapter connected in communication with the hot water supply system as a relay device.

  For example, the communication adapter is communicably connected to the hot water supply system via a two-core communication line, and is connected by wireless communication to a router connected to a communication network such as the Internet. Since the communication adapter is communicably connected to the management center (server) via the router and the communication network, bi-directional information transmission via the communication network becomes possible between the hot water supply system and the management center.

  Further, Patent Document 2 (Japanese Patent No. 4695423) describes a remote control system that enables remote control of facility equipment from a terminal device such as a mobile phone by data communication via a communication network. In Patent Document 2, a combination of a facility device and a terminal device is collated using identification information issued by a center device that passes data between a terminal device and the facility device on a communication network.

JP, 2017-58026, A Patent No. 4695423

  The applicant of the present invention is studying to perform remote monitoring and / or remote control of a water heater connected to a communication adapter using a mobile wireless communication terminal such as a smartphone to enhance user convenience. It is necessary to take security measures so that third parties do not obtain unauthorized information and operation of water heater.

  In this regard, according to the remote control system described in Patent Document 2, in the remote control device of the facility device already connected to the communication system, the user operates the dedicated operation unit that is not normally operated by the center device. Generation of identification information is required. Further, the generated identification information is transferred from the center device to the facility device, and further transferred from the facility device to the terminal device, and a combination of the facility device and the terminal device which are authenticated by collation of the identification information (Also referred to as "pairing") is established.

  In the configuration of Patent Document 2, an unregistered terminal device can be paired starting from the facility device already connected with the center device, while a new pairing authentication process is performed starting from the terminal device Can not start. For this reason, since the authentication process for establishing a pairing can not be performed from an unregistered terminal device, there is a concern that user convenience may be deteriorated.

  The present invention has been made to solve such problems, and an object of the present invention is to provide a wireless communication system for remote monitoring and / or remote control of a hot water utilization facility through a communication network. In establishing pairing between an operation terminal by communication and a relay apparatus for communication connection between a management apparatus and a hot water utilization facility via a communication network, security is ensured and user convenience is enhanced.

  In one aspect of the present invention, a communication system includes a relay device connected to a hot water utilization facility via a communication line, a router for communication connection between the communication network and the relay device, a communication network, and a router. And a management device communicably connected to the relay device via the communication device. The wireless operation terminal has a first wireless communication function with the relay device and a second wireless communication function with the management device via the communication network. The relay device transmits a pairing request for authenticating the combination of the wireless operation terminal and the relay device to the relay device from the wireless operation terminal by the first wireless communication function. In response, identification information for identifying the individual relay device and a password generation request for pairing are transmitted to the management device via the router and the communication network. In response to the password generation request, the management device generates basic information for generating the password in association with the identification information, and transmits the basic information to the relay device via the communication network and the router. The relay device generates the first password by processing the basic information transmitted from the management device according to an operation using a predetermined function shared in advance between the relay device and the management device. The password of 1 and identification information are transmitted to the wireless operation terminal. The wireless operation terminal transmits the first password and the identification information transmitted from the relay device to the management device using the second wireless communication function. The management apparatus processes the basic information by calculation using a function to generate a second password, and when the first password transmitted from the wireless operation terminal matches the second password, the second password is generated along with the first password. The pairing between the relay device corresponding to the transmitted identification information and the wireless operation terminal that has transmitted the first password is authenticated.

  According to another aspect of the present invention, there is provided a relay device connected to a hot water utilization facility via a communication line, a router for communication connection between the communication network and the relay device, and a communication network The control method of the communication system comprising the management apparatus includes: (1) a wireless operation terminal transmitting a pairing request for authenticating the combination of the wireless operation terminal and the relay device to the relay device; And transmitting identification information for identifying an individual of the relay apparatus and a password generation request for pairing from the relay apparatus via the router and the communication network in response to the pairing request. Sending to the managing device. The wireless operation terminal has a first wireless communication function with the relay device and a second wireless communication function with the management device via the communication network. The control method of the communication system (2) generates the basic information for generating the password by the management device in response to the password generation request, and also transmits the basic information from the management device via the communication network and the router And (3) processing the basic information transmitted from the management apparatus by the relay apparatus according to an operation using a predetermined function shared in advance between the relay apparatus and the management apparatus. And (4) transmitting the generated first password and identification information from the relay apparatus to the wireless operation terminal by the first wireless communication function, and (5) the wireless operation terminal relaying Transmitting the first password and the identification information transmitted from the device to the management device by the second wireless communication function; (6) using the management device Generating a second password by processing the basic information by calculation using a predetermined function; (7) in the management device, the first password transmitted from the wireless operation terminal matches the second password Then, the method further includes the step of authenticating pairing between the relay device corresponding to the identification information transmitted together with the first password and the wireless operation terminal which has transmitted the first password.

  In yet another aspect of the present invention, a relay device for relaying data transmission and reception between a management device connected to a communication network and a hot water utilization facility includes a first communication unit and a second communication. And a third communication unit, and a control unit. The first communication unit is configured to transmit and receive information to and from the hot water utilization facility connected via the communication line. The second communication unit is configured to transmit and receive information to and from the management device via the router and the communication network. The third communication unit is configured to transmit and receive information to and from a wireless operation terminal having a first wireless communication function with the relay device and a second wireless communication function via the communication network with the management device. Ru. The control unit is configured to execute an operation using a predetermined function shared in advance between the relay device and the management device. When the third communication unit receives a pairing request for authenticating the combination of the wireless operation terminal and the relay device from the wireless operation terminal, the second communication unit responds to the pairing request in response to the pairing request. The identification information for identifying the individual and the password generation request for pairing are transmitted to the management apparatus via the router and the communication network. Furthermore, the second communication unit receives the basic information for generating the password, which is returned from the management device via the communication network and the router in response to the password generation request. The control unit generates the first password by processing the basic information received by the second communication unit by an operation using a predetermined function. The third communication unit transmits the generated first password and identification information to the wireless operation terminal. The first password and the identification information transmitted from the third communication unit to the wireless operation terminal are transmitted from the wireless operation terminal to the management apparatus by the second wireless communication function. When the first password transmitted from the wireless operation terminal to the management device matches the second password generated by processing the basic information in the management device by calculation using a predetermined function, the relay device The pairing with the wireless operation terminal that has transmitted the password of 1 is authenticated.

  According to the communication system, the control method of the communication system, and the relay device, the pairing of the wireless terminal device and the relay device that transmits and receives the first password by the authentication process activated by the pairing request from the wireless operation terminal Can be authenticated by first and second password verification at the management device. Furthermore, since the first and second passwords are generated in each of the relay device and the management device by processing common basic information by the common function operation, the password itself is outputted from the management device and Compare and enhance the security of authentication. As a result, in establishing the pairing between the wireless terminal and the relay device, it is possible to enhance the convenience of the user after securing security.

  Preferably, in the communication system, the control method of the communication system, and the relay device, a remote request command for remotely monitoring or remotely managing the hot water utilization facility is input to the management device from the wireless operation terminal by the second wireless communication function. Then, the management device transmits the remote request command to the relay device whose pairing with the wireless operation terminal has been authenticated, via the communication network and the router.

  In this way, a remote request command for remote monitoring or remote management of the hot water utilization facility is transmitted only between the wireless operation terminal and the relay apparatus for which pairing has been established. Can prevent unauthorized information acquisition and / or unauthorized operation.

  More preferably, the basic information is a bit string randomly generated for each password generation request. The first and second passwords are invalidated after a predetermined period of time has elapsed.

  In this way, the security of pairing authentication can be further enhanced by converting the first and second passwords into a one-time password according to a so-called challenge / response method.

  According to the present invention, in a communication system for remote monitoring and / or remote control of a hot water utilization facility via a communication network, the control terminal by wireless communication and the management device and the hot water utilization facility are communicated via the communication network. In establishing pairing with a relay apparatus for connection, it is possible to enhance the convenience of the user after securing security.

It is a block diagram showing an example of composition of a communication system according to this embodiment. It is a schematic block diagram of the server apparatus which comprises the cloud server shown by FIG. 1, and an application server. It is a block diagram which shows the structural example of the communication adapter shown by FIG. It is a schematic block diagram of the smart phone shown by FIG. It is a sequence diagram of a pairing authentication process in the communication system according to the present embodiment. It is a conceptual diagram explaining the example of a display screen in the smart phone in pairing attestation processing. It is a block diagram which shows the modification of a structure of the communication system according to this Embodiment.

  Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings. In the following, the same or corresponding portions in the drawings are denoted by the same reference numerals, and the description thereof will not be repeated in principle.

  FIG. 1 is a block diagram showing a configuration example of a communication system according to the present embodiment. As shown in FIG. 1, the communication system according to the present embodiment performs transmission and reception of data for remote monitoring and / or remote control of a hot water utilization facility.

  With reference to FIG. 1, the hot water supply system 10 includes a hot water supply apparatus 100 which is an example of a “hot water utilization facility”, and a remote controller (hereinafter simply referred to as “remote control”) for inputting an operation instruction of the hot water supply apparatus 100. Also referred to as “105”. In the present embodiment, the hot water supply apparatus 100 is a target of remote management and / or remote control.

  In the hot water supply system 10, the hot water supply apparatus 100 and the remote controller 105 are communicably connected to each other via a two-core communication line 50. More specifically, a control unit (not shown) including a microcomputer and the like is built in each of the hot water supply apparatus 100 and the remote control 105, and these control units communicate with each other by a predetermined communication protocol. Serial communication is configured via 50. Further, the hot water supply apparatus 100 can be configured to output a power supply voltage for an external device to the two-core communication wire 50. In this case, the communication data can be superimposed on the power supply voltage.

  Furthermore, the control unit of the hot water supply apparatus 100 is connected to the communication adapter 40 via the two-core communication line 50. For example, the hot water supply system 10 and the communication adapter 40 can be installed outdoors, for example, around the outer wall of a house or in a garage. The communication adapter 40 is communicably connected to a LAN (Local Area Network) router 60 disposed indoors.

  In the configuration example of FIG. 1, the LAN router 60 is shown as a wired LAN router which is communicably connected to the communication adapter 40 by a communication cable 65 (for example, an Ethernet (registered trademark) cable) conforming to a predetermined communication standard. The LAN router 60 is further connected to the Internet, which is a representative example of a communication network. Thereby, the communication adapter 40 can communicate with the Internet via the LAN router 60.

  Furthermore, in the communication system according to the present embodiment, management center 20 and support center 70 are connected to the Internet (communication network). The management center 20 includes a cloud server 21a and an application server 21b. The cloud server 21a and the application server 21b are communicably connected to each other via the Internet or a dedicated line, and can cooperate with each other to provide various services.

  FIG. 2 is a schematic configuration diagram of the server device 21 configuring the cloud server 21a and the application server 21b.

  Referring to FIG. 2, the server device 21 includes a central processing unit (CPU) 25 for controlling the entire device, a communication unit 26 connected to the CPU 25, a memory 27, and a display unit 28. The communication unit 26 has a function of communicating with another device or server by communication connected to a communication network (Internet).

  The memory 27 is, for example, a ROM (Read Only Memory) 27a, which is a memory for storing a program executed by the CPU 25. The memory 27 serves as a work area when the program is executed by the CPU 30, and stores calculated values. It includes a RAM (Random Access Memory) 27 b which is a memory, and an HDD (Hard Disk Drive) 27 c as an example of a large storage device.

  The server device 21 can be configured to have a function corresponding to a general computer. The display unit 28 can be configured by, for example, a liquid crystal display. The server device 21 may further include an operation unit for receiving an operation input.

FIG. 3 is a block diagram showing a configuration example of the communication adapter 40. As shown in FIG.
Referring to FIG. 3, the communication adapter 40 includes a control unit 41, communication units 42, 43, 46, a power supply circuit 44, a memory 45, an antenna 47, and a manual switch 49.

  The control unit 41 can be configured by a microcomputer including a CPU 41a and an interface (I / F) 41b.

  The communication unit 42 is configured to be able to transmit and receive data bidirectionally between the hot water supply apparatus 100 and the remote control 105 via the two-core communication line 50. The power supply circuit 44 receives power supply from the two-core communication line 50 and generates an operating power supply voltage of each element in the communication adapter 40.

  The communication unit 43 is configured to have a function of bidirectionally transmitting / receiving data to / from an external device such as the smartphone 30 by wireless communication via the antenna 47. The communication unit 46 is configured to have a function of transmitting / receiving data bidirectionally to / from the LAN router 60 (wired LAN router) shown in FIG. 1 by wired communication via the communication cable 65.

  The memory 45 has a ROM 45a and a RAM 45b. Since the ROM 45a is configured by a non-volatile memory (typically, a flash memory), the stored contents are retained even when the communication adapter 40 is powered off. Further, the storage content of the ROM 45 a can be rewritten by the control unit 41. For example, a program for controlling the operation of the communication adapter 40 is stored in the ROM 45a.

  Since the RAM 45 b is configured of volatile memory (typically, DRAM (Dynamic Random Access Memory)), the stored contents are cleared when the communication adapter 40 is powered off. In particular, the storage content of the RAM 45 b is initialized at the time of activation processing of the communication adapter 40. Although the memory 45 and the control unit 41 are shown as separate elements in FIG. 3, part or all of the memory 45 can be incorporated in the control unit 41.

  The manual switch 49 can be configured by a push switch operable by a user or a worker. In response to the operation of the manual switch 49, a predetermined electrical signal is input from the manual switch 49 to the control unit 41. Thereby, the control unit 41 can detect the operation of the manual switch 49. For example, the manual switch 49 includes a push switch for turning on / off the access point mode (AP mode) of the communication adapter 40.

  The communication adapter 40 can use the communication unit 46 to communicate with the communication unit 26 of the management center 20 via the LAN router 60 and the Internet. Thus, the communication adapter 40 can transmit and receive data and information to and from the management center 20. Further, when the communication adapter 40 operates in the AP mode, the communication unit 43 can communicate with an external device within a certain distance by wireless LAN. Thus, it is understood that the communication adapter 40 has a relay function of data transmission and reception between the hot water supply system 10, the management center 20, and the smartphone 30 described later in the communication system shown in FIG. .

  In the configuration example of FIG. 3, the communication unit 42 corresponds to one embodiment of the “first communication unit”, the communication unit 46 corresponds to one embodiment of the “second communication unit”, and the communication unit 43 corresponds to “one communication unit”. This corresponds to an example of the “third communication unit”. Further, a control unit 41 configured by a microcomputer corresponds to an example of the “control unit”.

  Referring back to FIG. 1, the smartphone 30 is configured to communicatively connect to the Internet via a mobile communication network such as an LTE line, a 4G line, or a 3G line. Furthermore, the smartphone 30 can form a wireless LAN connection with the communication adapter 40 by the communication adapter 40 operating in the access point mode (AP mode).

FIG. 4 is a schematic block diagram of the smartphone 30 shown in FIG.
Referring to FIG. 4, the smartphone 30 includes a central processing unit (CPU) 31, a touch screen 32, a memory 34, a button (operation unit) 35 such as power on / off, a communication interface 36, a speaker 37 for audio output, And a memory I / F (abbreviation of Interface) 38.

  The communication interface 36 is at least a communication connection function (first wireless communication function) with the communication adapter 40 and a communication with a mobile communication network as a communication function with the external device of the smartphone 30 in the communication system of FIG. It has a connection function (second wireless communication function). The memory I / F 38 has a function of reading and writing data of the memory card 39 detachably mounted from the outside.

  The touch screen 32 can constitute a display integrated type input device constituted by a display 33a and a touch panel (tablet) 33b. Alternatively, the display and the operation unit (buttons, keys, etc.) can be provided separately.

  The memory 34 is realized by various RAMs, ROMs, flash memories, hard disks, and the like. The memory 34 stores various programs to be executed by the CPU 31. The CPU 31 can execute various control processes and the like by executing various programs stored in the memory 34.

  Referring back to FIG. 1, the cloud server 21 a is mainly connected to a large number of communication adapters 40 installed in each home, and communicates with the communication adapters 40 to communicate with each home. Various information of the supply system 10 is collected and managed. For example, the information to be collected may include the amount of hot water supply per unit time, the amount of fuel consumed, the temperature of the hot water supply, error information generated in each hot water supply system 10, and the like.

  The application server 21b manages a large number of user accounts for a large number of users in each home, accepts a login from a smartphone 30 (wireless operation terminal) owned by the user, and performs various services for the operation terminal. Can be provided.

  Preferably, dedicated application software for using a service provided by the application server 21b can be installed in the smartphone 30, and login operations and various operations after login can be performed from the application software. Alternatively, by providing a web-based service, login and other operations can be performed using an appropriate web browser.

  The application server 21b may provide only the application service for the user terminal such as the smartphone 30, and the customer information including the user account may be further managed by another customer information management center. Alternatively, the cloud server 21a and the application server 21b may be configured by an integrated server device.

  The services provided by the cloud server 21a and the application server 21b can be designed as needed. For example, remote management services such as a connected device confirmation service, an operation information collection management service, an error monitoring service, and a maintenance monitoring service can be provided.

  According to the connection device confirmation service, the system configuration of the hot water supply system 10 connected to the communication adapter 40 described later and the model of the hot water supply apparatus 100 can be confirmed. Based on the information collected by the communication adapter 40 from the hot water supply system 10, the model and system configuration can be determined on the server side.

  According to the operation information collection and management service, operation information of the hot water supply system 10 can be periodically collected and managed from the communication adapter 40 every unit time (for example, every hour). Although the operation information to collect is arbitrary, for example, the accumulated hot-water supply amount or the accumulated fuel consumption amount per unit time can be collected. The collected driving information can also be used to create development data by big data analysis.

  According to the error monitoring service, when an error occurs in the hot water supply system 10, information on the error is acquired from the communication adapter 40, and the error is sent to the terminal 71 of the support center 70 or to the user's mail address. Notifications can be made.

  According to the maintenance monitor service, when repairing the hot water supply system 10, etc., the operation status of the hot water supply system 10 can be monitored in real time. Specifically, the field work connected to the cloud server 21a It is possible to monitor in real time the operating condition of the hot water supply system 10 connected to the specified communication adapter 40 by the tablet terminal 80 etc. for employees.

  Furthermore, in the remote management system of the hot water utilization facility according to the present embodiment, the remote control service of the hot water supply system 10 can be provided.

  According to the remote control service, the predetermined operation of the hot water supply system 10, for example, the switching operation of the hot water supply operation switch and the change of the hot water supply temperature setting from the terminal 71 of the support center 70 or the smartphone 30 owned by the user. It is possible to perform operations etc. remotely. For example, the remote control by the user can be performed by logging in to the application server 21b from the smartphone 30 or the like.

  In addition, as part of the service of the remote management system, it is also possible to display the operation information collected from the communication adapter 40 in a logged-in state so that it can be viewed on the smartphone 30. The communication system according to the present embodiment can be configured to perform only one or both of remote monitoring and remote control of the hot water supply system 10.

  Thus, in the communication system according to the embodiment, remote monitoring and / or remote control of the hot water supply system 10 is performed by transmitting and receiving data between the hot water supply system 10 and the management center 20 by relay by the communication adapter 40. Is realized. Furthermore, since the user can connect to the communication system by the “wireless operation terminal” such as the smartphone 30, the user convenience of remote monitoring and / or remote operation of the hot water utilization facility is improved.

  That is, in the configuration example of FIG. 1, the communication adapter 40 corresponds to one embodiment of the “relaying device”, the LAN router 60 corresponds to one embodiment of the “router”, and the server (management center) 20 is “management device The smartphone 30 corresponds to an example of the “wireless operation terminal”.

  On the other hand, in remote monitoring and / or remote control from the smartphone 30, a security measure is required by a third party to prevent unauthorized information acquisition and / or unauthorized operation in the hot water supply system 10.

  Therefore, in the communication system according to the present embodiment, pairing is performed in advance for authenticating the combination of the wireless operation terminal (smartphone 30) and the communication adapter 40 connected to the hot water supply system 10. Then, when a remote request command for remote monitoring and / or remote control is input from the smartphone 30, the remote request command is transmitted to the communication adapter 40 previously paired with the smartphone 30, and communication is performed. An operation instruction for realizing the remote request instruction is input from the adapter 40 to the corresponding hot water supply system 10.

  Hereinafter, a pairing authentication process procedure in the communication system according to the present embodiment will be described using FIGS. 5 and 6. FIG. 5 shows a sequence diagram of the pairing authentication process, and FIG. 6 shows an example of a display screen on the smartphone in the pairing authentication process.

  Referring to FIG. 5, communication connection between communication adapter 40 and server 20 via LAN router 60 is established in advance by initial setting at the time of installation of communication adapter 40.

  When the smart phone 30 logs in to the server 20 via the Internet (S1), the smart phone 30 and the communication adapter 40 are communicatively connected by operating the communication adapter 40 in the AP mode by the manual switch 49 of the communication adapter 40 As a result (S2), the pairing authentication process can be activated. Login can be performed by the user ID acquired in advance by the user.

  In this state, the start screen of the pairing authentication process shown in FIG. 6A is displayed on the touch screen 32 of the smartphone 30. A soft switch 33x for instructing the start of the authentication process is displayed on the start-up screen. When the soft switch 33x of the start screen is operated, the pairing request input to the smartphone 30 is transmitted to the communication adapter 40 (S3).

  When the communication adapter 40 receives the pairing request transmitted from the smartphone 30 (S4), the communication adapter 40 generates a password generation request. The password generation request is transmitted from the communication adapter 40 to the server 20 together with identification information for specifying an individual of the communication adapter 40 (S5). For example, the serial number of the communication adapter 40 can be used as the identification information. Based on the identification information, the server 20 can distinguish among the plurality of communication adapters 40 connected via the Internet.

  The server 20 generates a challenge code for each identification information (serial number) of the communication adapter 40 in response to the reception of the password generation request (S6). The challenge code is a randomly generated bit string, and a different bit string is generated each time a password generation request is received.

  The server 20 transmits the generated challenge code to the communication adapter 40 corresponding to the identification information (S7). In the communication adapter 40, the password P1 is generated by processing the challenge code transmitted from the server 20 by calculation using a predetermined function Fx shared in advance between the communication adapter 40 and the server 20 (S8). ).

  Similarly, also in the server 20, the password P2 is generated by processing the same range code as that transmitted to the communication adapter 40 by calculation using the function Fx common to the communication adapter 40 (S9) . As a result, common passwords P1 and P2 associated with the identification information (S5) of the communication adapter 40 are generated.

  The passwords P1 and P2 correspond to a response in a so-called challenge-response method. The passwords P1 and P2 are preferably generated in the form of a so-called one-time password which is invalidated when a predetermined time period has elapsed. The function Fx can be stored in the ROM 45a (FIG. 4) as part of data distributed from the server 20, for example, at the time of connection establishment in the initial setting of the communication adapter 40.

  That is, the password P1 generated by the communication adapter 40 corresponds to the "first password", and the password P2 generated by the server 20 corresponds to the "second password". Further, the challenge code generated each time the password generation request is received corresponds to an example of the “basic information”.

  When the password P1 is generated, the communication adapter 40 transmits the password P1 and the identification information of the communication adapter 40 to the smartphone 30 (S10). The identification information is the same as that transmitted from the communication adapter 40 to the server 20 in S5. The smartphone 30 displays the screen shown in FIG. 6B on the touch screen 32 in response to the reception of the password P1 and the identification information.

  On the display screen of FIG. 6B, the password P1 and the identification information received from the communication adapter 40, and the soft switch 33y for advancing the authentication process are displayed. When the soft switch 33y is operated, the smartphone 30 disconnects wireless LAN communication (Wi-Fi) with the communication adapter 40 established in S2. In response to this, the screen shown in FIG. 6C is displayed on the touch screen 32 (S11).

  When the soft switch 33y on the screen of FIG. 6C is operated, the smartphone 30 is communicably connected to the server 20 (S12). In response to this, the screen illustrated in FIG. 6D is displayed on the touch screen 32 of the smartphone 30. On the display screen of FIG. 6 (d), a soft switch 33y for advancing the authentication process, and a password P1 and identification information identical to those of FIG. 6 (b) are displayed. When the soft switch 33y is operated, the password P1 and the identification information displayed on the screen of FIG. 6D are transmitted from the smartphone 30 to the server 20 (S13).

  When the server 20 receives the identification information and the password P1 from the smartphone 30, the server 20 compares the password P1 with the password P2 corresponding to the received identification information (S14). When the passwords P1 and P2 match, the server 20 authenticates the combination of the smartphone 30 and the communication adapter 40. As a result, the server 20 stores pairing information indicating an authenticated correspondence between information on the smartphone 30 (for example, a telephone number or a user ID at login in S1) and the identification information of the communication adapter 40. Ru.

  That is, in the communication system according to the present embodiment, pairing of the smartphone 30 (wireless operation terminal) to the communication adapter 40 (relay device) is not limited to the individual of the smartphone 30 specified by the telephone number etc. The association (correspondence) between the information on the smartphone 30 (wireless operation terminal) including the user ID and the like logged in from the smartphone 30 at the time of request and the communication adapter 40 (relay device) is authenticated.

  Furthermore, the server 20 transmits, to the smartphone 30, information indicating that pairing has succeeded (S15). In response to this, the touch screen 32 of the smartphone 30 displays a screen shown in FIG. 6E for notifying the user that the pairing authentication process has succeeded. When the soft switch 33y on the screen of FIG. 6 (e) is operated, a series of pairing authentication processing ends.

  After establishment of the pairing, when the remote request command of the hot water supply system 10 input to the smartphone 30 is transmitted to the server 20 (S20), the server 20 selects the smartphone 30 based on the pairing information. The remote request command is transmitted to the communication adapter 40 which has been paired with the information (S21). The communication adapter 40 that has received the remote request instruction generates an operation instruction according to the remote request instruction, and transmits the operation instruction to the hot water supply system 10 via the two-core communication line 50 (S22).

  As a result, only between the communication adapter 40 and the smartphone 30 which are paired in advance, the smartphone 30 remotely monitors and / or controls the hot water supply system 10 via the server 20 and the communication adapter 40. You can enter the required command for

  As described above, according to the communication system according to the present embodiment, by the authentication process activated by the input to the smart phone 30, the pairing of the smart phone 30 and the communication adapter 40 that transmitted and received the password is authenticated by the password verification in the server 20. can do. As a result, it is possible to prevent unauthorized information acquisition and / or unauthorized operation in the hot water supply system 10 by a third party from the smartphone 30 which is not paired.

  Furthermore, since the passwords P1 and P2 to be collated are generated in each of the server 20 and the communication adapter 40 by processing common basic information (challenge code), compared with the aspect in which the password itself is output from the server 20. , Can improve the security of authentication. By setting the passwords P1 and P2 as one-time passwords, the security of authentication is further improved.

  As described above, in the communication system according to the present embodiment, in establishing the pairing of the operation terminal (smartphone 30) and the relay device (communication adapter 40) by wireless communication, the security is ensured and the convenience of the user is improved. It is.

FIG. 7 shows a modification of the configuration of the communication system according to the present embodiment.
Comparing FIG. 7 with FIG. 1, the communication system according to the modification shown in FIG. 7 differs from the configuration example of FIG. 1 in that the LAN router 60 is configured by a wireless LAN router.

  The communication adapter 40 and the wireless LAN router 60 communicate according to a predetermined communication protocol (for example, IEEE 802.11n or the like). In the configuration example of FIG. 7, the smartphone 30 and the communication adapter 40 can operate as a wireless LAN slave device, and connect to the Internet via the wireless LAN router 60 when a wireless link with the wireless LAN router 60 is established. It is possible.

  When the communication adapter 40 shown in FIG. 3 is applied to the communication system shown in FIG. 7, each of the communication adapter 40, the smart phone 30, and the LAN router 60 (wireless LAN router) can be used by the communication unit 43. The wireless communication function between them is secured. That is, in this case, the communication unit 43 can realize the functions of the “second communication unit” and the “third communication unit”.

  Also in the communication system according to the modification shown in FIG. 7, pairing authentication between the communication adapter 40 and the smartphone 30 can be executed by the processing procedure shown in FIG. 6. That is, in the present embodiment, regardless of whether the LAN router is a wired LAN router or a wireless LAN router, pairing between the communication adapter 40 and the smartphone 30 can be established by the common pairing authentication process.

  In the present embodiment, the smartphone 30 has been described as an example of the wireless operation terminal for remote monitoring and / or remote control, but wireless communication with the communication adapter 40 and the server 20 is also possible other than the smartphone 30. It is possible to apply a device having the same function. For example, even when using a tablet terminal or a notebook computer (not shown) or the like also shown in FIGS. 1 and 7 as the “wireless operation terminal”, the specific communication adapter 40 can be obtained according to the processing procedure shown in FIG. It is possible to establish pairing with

  It should be understood that the embodiments disclosed herein are illustrative and non-restrictive in every respect. The scope of the present invention is indicated not by the above description but by claims, and is intended to include all modifications within the meaning and scope equivalent to claims.

  DESCRIPTION OF SYMBOLS 10 hot-water supply system, 20 management center (server), 21 server apparatus, 21a cloud server, 21b application server, 26, 42, 43, 46 communication unit, 27, 34, 45 memory, 28 display parts, 30 smart phones, 32 touch Screen, 33a Display, 33x, 33y Soft Switch, 36 Communication Interface, 37 Speaker, 39 Memory Card, 40 Communication Adapter, 41 Control Unit, 44 Power Supply Circuit, 47 Antenna, 49 Manual Switch, 50 Two-Core Communication Wire, 60 LAN Router , 65 communication cable, 70 support center, 71 terminals, 100 hot water supply device, 105 remote control.

Claims (7)

A relay device connected to the hot water utilization facility via a communication line,
A router for establishing communication connection between a communication network and the relay device;
And a management device communicably connected to the relay device via the communication network and the router.
From the wireless operation terminal having the first wireless communication function with the relay device and the second wireless communication function with the management device via the communication network, the wireless operation with respect to the relay device When the pairing request for authenticating the combination of the terminal and the relay device is transmitted by the first wireless communication function, the relay device identifies an individual of the relay device in response to the pairing request. Sending identification information for communication and a password generation request for pairing to the management apparatus via the router and the communication network,
In response to the password generation request, the management device generates basic information for generating a password in association with the identification information, and generates the basic information via the communication network and the router. Send to
The relay device generates a first password by processing the basic information transmitted from the management device by an operation using a predetermined function shared in advance between the relay device and the management device. And transmitting the first password and the identification information to the wireless operation terminal,
The wireless operation terminal transmits the first password and the identification information transmitted from the relay device to the management device using the second wireless communication function.
The management apparatus processes the basic information by calculation using the function to generate a second password, and the first password transmitted from the wireless operation terminal matches the second password. A communication system for authenticating pairing between the relay apparatus corresponding to the identification information transmitted together with the first password and the wireless operation terminal which has transmitted the first password.   When the remote control instruction for remotely monitoring or remotely operating the hot water utilization facility is input from the wireless operation terminal by the second wireless communication function, the management device receives the pairing with the wireless operation terminal. The communication system according to claim 1, wherein the remote request command is transmitted to the authenticated relay device via the communication network and the router. The basic information is a bit string randomly generated for each password generation request,
The communication system according to claim 1, wherein the first and second passwords are invalidated after a predetermined time period has elapsed. A communication system comprising: a relay device connected to a hot water utilization facility via a communication line; a communication network; a router for communication connection between the relay devices; and a management device communicatively connected to the communication network Control method of
From the wireless operation terminal having the first wireless communication function with the relay device and the second wireless communication function with the management device via the communication network, the wireless operation with respect to the relay device Transmitting a pairing request for authenticating the combination of the terminal and the relay apparatus by the first wireless communication function;
In response to the pairing request, the relay device transmits identification information for identifying an individual of the relay device and a password generation request for pairing to the management device via the router and the communication network. Step to
A step of generating basic information for generating a password by the management device in response to the password generation request, and transmitting the basic information from the management device to the relay device via the communication network and the router When,
A first password is generated by processing the basic information transmitted from the management apparatus by the relay apparatus according to an operation using a predetermined function shared in advance between the relay apparatus and the management apparatus. Step and
Transmitting the generated first password and the identification information from the relay apparatus to the wireless operation terminal by the first wireless communication function;
The wireless operation terminal transmits the first password and the identification information transmitted from the relay device to the management device by the second wireless communication function;
Generating a second password by processing the basic information according to an operation using the predetermined function by the management device;
In the management device, when the first password transmitted from the wireless operation terminal matches the second password, the relay device corresponding to the identification information transmitted together with the first password; And C. authenticating the pairing with the wireless operation terminal that has transmitted the 1 password.   When a remote request command for remotely monitoring or remotely operating the hot water utilization facility is input from the wireless operation terminal to the management device, the management device has authenticated the pairing with the wireless operation terminal. The control method of the communication system according to claim 4, further comprising transmitting the remote request command to the relay device. A relay apparatus for relaying data transmission and reception between a management apparatus connected to a communication network and a hot water utilization facility,
A first communication unit that transmits and receives information to and from the hot water utilization facility connected via a communication line;
A router and a second communication unit for transmitting and receiving information to and from the management apparatus via the communication network;
A third communication unit for transmitting and receiving information to and from a wireless operation terminal having a first wireless communication function with the relay device and a second wireless communication function via the communication network with the management device;
A control unit that executes an operation using a predetermined function shared in advance between the relay device and the management device;
When the third communication unit receives a pairing request for authenticating the combination of the wireless operation terminal and the relay device from the wireless operation terminal, the second communication unit responds to the pairing request, An identification information for identifying an individual of the relay device and a password generation request for pairing are transmitted to the management device via the router and the communication network, and in response to the password generation request. Receiving basic information for generating a password returned from the management device via the communication network and the router;
The control unit generates a first password by processing the basic information received by the second communication unit by an operation using the predetermined function.
The third communication unit transmits the generated first password and the identification information to the wireless operation terminal.
The first password and the identification information transmitted from the third communication unit to the wireless operation terminal are transmitted from the wireless operation terminal to the management apparatus by the second wireless communication function.
When the first password transmitted from the wireless operation terminal to the management device matches a second password generated by processing the basic information by the calculation using the predetermined function in the management device The relay apparatus, wherein the pairing with the wireless operation terminal that has transmitted the first password is authenticated. The second communication unit remotely monitors the hot water utilization facility which is input to the management device by the second wireless communication function from the wireless operation terminal whose pairing with the relay device has been authenticated. Receiving a remote request command for remote control from the management device;
The relay device according to claim 6, wherein the first communication unit outputs an operation instruction according to the remote request instruction received by the second communication unit to the hot water utilization facility.

Images