Electronic key system and electronic key usage method

• US 20040222877A1
• Filed: 03/30/2004
• Published: 11/11/2004
• Est. Priority Date: 04/23/2003
• Status: Abandoned Application

• Current Assignee: Hitachi, Ltd.
• Original Assignee: Hitachi, Ltd.
• Inventors: Kuwana, Toshiyuki, Saito, Motonobu, Teramura, Takeshi
• Application Number:
  US10/811,905
• Publication Number:
  US 20040222877A1
• Time in Patent Office: Days
• US Class Current: 340/5.65
• CPC Class Codes: G07C 9/00571 operated by interacting with a central unit
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/35 Protecting application or service provisioning, e.g. securing SIM application provisioning
• CPC Class Codes: H04W 88/02 Terminal devices

Abstract

In a case where the services are used jointly among plural users with the use of shared electronic keys, a method which invalidates only the electronic keys of some users is provided.

Electronic key data stored in a user module 100 owned by the user includes two kinds of data: main ID data and sub ID history data. A service providing device 400 holds two tables: a service allowance table and a service denial table, and upper receipt of the electronic key data from the user module 100, it allows the use of the services (Step 106) only when the main ID data of the electronic key is present in the service allowance table (Step 104) and when the sub ID data contained in the sub ID history data is absent in the service denial table (Step 105).

Claims

1. An electronic key system which provides services with the use of an electronic key, said system comprising:

a user module which has stored electronic key data having a main ID and a sub ID to identify an electronic key, and a service providing device which judges allowance or denial of provision of services,

wherein;

said user module comprises

accepting means which accepts an electronic key transmission request from said service providing device, and

transmitting means which transmits said electronic key data to said service providing device;

said service providing device comprises

storing means which stores service allowance information to allow the provision of services and service denial information to deny the provision of services,

accepting means which accepts said electronic key data from said user module,

first judging means which judges whether the main ID in said accepted electronic key data is present in said service allowance information,

second judging means which judges whether the sub ID in said accepted electronic key data is present in said service denial information, and

provision judging means which judges allowance or denial of the provision of services according to results of said first and second judgments.

2. The electronic key system according to claim 1, wherein:

said provision judging means allows the provision of services when said first judging means judges that the main ID is present in said service allowance table and said second judging means judges that the sub ID is absent in said service denial table.

3. The electronic key system according to claim 1, wherein:

said electronic key date comprises shared hierarchy data indicating whether the electronic key can be shared or not; and

said user module further comprises generating means which generates an electronic key to be shared, having a same main ID and a different sub ID, when the shared hierarchy data indicates that the electronic key can be shared.

4. The electronic key system according to claim 1, further comprising:

an electronic key managing apparatus which manages an electronic key service,

wherein;

said electronic key managing apparatus comprises

a means which stores a client table containing a membership number and a sub ID to identify a user,

accepting means which accepts the membership number and the sub ID from an external system,

invalidation judging means which judges whether the sub ID in said client table corresponding to the accepted membership number matches with the accepted sub ID and judges, according to a result of said judgment, whether entire invalidation processing for invaliding all user modules having a same main ID or partial invalidation processing for invalidating only a user module having a same sub ID is to be performed, and

transmitting means which transmits a result of said invalidation judgment to said service providing device; and

said service providing device further comprises changing means which changes said service denial table or said service allowance table according to the result of said invalidation judgment.

5. A user module which has stored electronic key data used in judging allowance or denial of provision of services by a service providing device which provides services, wherein:

said electronic key data comprises main ID data and sub ID data to identify an electronic key; and

said user module comprises transmission request accepting means which accepts an electronic key transmission request from said service providing device, and transmitting means which transmits said electronic key data to said service providing device.

6. The user module according to claim 5, wherein said electronic key data s shared hierarchy data indicating whether the electronic key can be shared or not, and

wherein said user module further comprises:

sharing request accepting means which accepts an electronic key sharing request;

generating means which generates electronic key data to be shared, having a same main ID and a different sub ID, when the electronic key can be shared; and

transmitting means which transmits said generated electronic key data to be shared to an external system.

7. The user module according to claim 6, claim 6, further comprising:

sharing judging means which judges that the electronic key cannot be shared when the shared hierarchy data has a specific value and the electronic key can be shared when the shared hierarchy data has a value other than said specific value,

wherein said generating means generates said electronic key data to be shared by changing the value of the shared hierarchy data in said electronic key data by subtracting “

1”

therefrom.

16. The program according to claim 5, further causing said computer apparatus to activate:

storing means which stores shared hierarchy data indicating whether the electronic key can be shared;

sharing request accepting means which accepts an electronic key sharing request;

generating means which generates electronic key data to be shared, having a sane main ID and a different sub ID, when the electronic key can be shared; and

transmitting means which transmits said generated electronic key data to be shared to an external system.

8. A service providing device which judges allowance or denial of provision of services with the use of electronic key data stored in a user module, said device comprising:

storing means which stores service allowance information to allow the provision of services, and service denial information to deny the provision of services;

accepting means which accepts said electronic key data from said user module; and

judging means which judges allowance or denial of the provision of service for said accepted electronic key data on the basis of said accepted electronic key data, said service allowance information, and said service denial information.

9. The service providing device according to claim 8, wherein:

said electronic key data comprises main ID data and sub ID data to identify an electronic key; and

said judging means comprises first judging means which judges whether a main ID in said accepted electronic key data is present in said service allowance information, and second judging means which judges whether a sub ID in said accepted electronic key data is present in said service denial information, and judges allowance or denial of the provision of services for said accepted electronic key data according to results of said first and second judgments.

10. A service providing device which judges allowance or denial of provision of services with the use of electronic key data stored in a user module, wherein:

said electronic key data comprises main ID data and sub ID data to identify an electronic key;

said service providing device comprises storing means which stores service allowance information to allow the provision of services and service denial information to deny the provision of services;

invalidation accepting means which accepts a command for partial invalidation or a command for entire invalidation at the electronic key from said user module;

appending means which appends, when the command for the partial invalidation is accepted, main ID data and sub ID data contained in said command to said service denial information; and

deleting means which deletes, when the command for the entire invalidation is accepted, main ID data contained in said command from said service allowance information.

11. An electronic key managing apparatus which manages electronic key data to receive provision or services, said apparatus comprising:

storing mean which stores electronic key data having main ID data to identify an electronic key, sub ID data to identify the electronic key, and shared hierarchy data indicating a range within which the electronic key can be shared;

sharing requesting means which accepts a sharing request of the electronic key containing the sub ID data inputted from a linked-terminal apparatus via a network;

sharing judging means which judges whether the electronic key can be shared or not with reference to the shared hierarchy data; and

generating means which generates electronic key data to be shared when the electronic key can be shared.

12. An electronic key managing apparatus which manages electronic key data to receive provision of services, said apparatus comprising:

storing means which stores service allowance information to allow the provision of services and service denial information to deny tho provision of services;

accepting means which accepts electronic key data from an external system; and

judging means, which judges allowance or denial or the provision of services for said accepted electronic key data on the basis of said accepted electronic key data, said service allowance information, and said service denial information.

13. A door locking/unlocking system which locks or unlocks a door of a residence with the use of an electronic key, said system comprising:

an IC card which has stored electronic key data having a main ID and a sub ID to identify an electronic key, and a device which locks or unlocks the door by judging validity of said electronic key data,

wherein;

said IC card comprises transmitting means which accepts an electronic key transmission request from said device and transmits said electronic key data to said device; and

said device comprises

storing means which stores service allowance information to allow the provision of services and service denial information to deny the provision of services,

accepting means which accepts said electronic key data from said IC card,

first judging means which judges whether the main ID in said accepted electronic key data is present in said service allowance information,

second judging means which judges whether the sub ID in said accepted electronic key data is present in said service denial information, and

performing means which locks or unlocks the door by judging the validity of said accepted electronic key data according to results of said first and second judgments.

14. A rental car service system which provides a key of a rental car to a user with the use of an electronic key as the key of the rental car, said system comprising:

an IC card which has stored electronic key data having a main ID and a sub ID to identify the electronic key, a device which allows the use of the rental car by judging validity of said electronic key data, and an electronic key managing apparatus which manages said electronic key data to receive the provision of services,

wherein;

said electronic key managing apparatus comprises generating means which generates an electronic key having a main ID and a sub ID to identify a rental car selected from an external system, transmitting means which transmits said generated electronic key to the IC card of the user, and transmitting means which transmits said main ID to said device;

said IC card comprises storing means which stores said generated electronic key; and

said device comprises storing means which stores said transmitted main ID, into service allowance information to allow the provision of services.

15. A program of a computer apparatus used for a service providing device which judges allowance or denial of provision of services to judge allowance or denial of the provision of services, said program causing said computer apparatus to activate:

storing means which stores main ID data and sub ID data to identify an electronic key; and

transmission request accepting means which accepts an electronic key transmission request from said service providing device, and transmitting means which transmits said electronic key data to said service providing device.

17. A program readable by a computer apparatus for judging allowance or denial of provision of services which causes the computer apparatus to judge allowance or denial of the provision of services with the use of electronic key data stored in a user module, said program causing said computer apparatus to activate:

storing means which stores service allowance information to allow the provision of services and service denial information to deny the provision of services;

accepting means which accepts said electronic key data from said user module; and

judging means which judges allowance or denial of the provision of services for said accepted electronic key data on the basis of said accepted electronic key data, said service allowance information, and said service denial information.

18. An electronic key usage method which provides services with the use of an electronic key, said method comprising:

a storing step of storing service allowance information to allow the provision of services and service denial information to deny the provision or services;

an accepting step of accepting electronic key data, containing main ID data and sub ID data to identify an electronic key, from an external system;

a first judging step of judging whether a main ID of said accepted electronic key data is present in said service allowance information;

a second judging step of judging whether a sub ID if said accepted electronic key data is present in said service denial information; and

a provision allowance/denial judging step of judging allowance or denial of the provision of services for said accepted electronic key data according to results of said first and second judging steps.