JP2004046479A - Gate management system, ic card, and application for ic card - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To effectively prevent un-authorization when admission and quitting restriction is applied to a gate using an IC card. <P>SOLUTION: A contactless IC card writer transmits application for gate passage or the deletion command of permission data for gate passage to the IC card in passing the outlet gate of a facility; or the application or the permission data for gate passage installed in the IC card is automatically deleted by timer setting. Thus, a problem being the illegal use of the IC card in future is positively prevented even if the IC card is not collected in quitting the facility. <P>COPYRIGHT: (C)2004,JPO

Description

[0001]
TECHNICAL FIELD OF THE INVENTION
The present invention relates to a gate management system using an IC card, and more particularly to an IC card and a system for effectively preventing impropriety when gate entry / exit is restricted, and an application for an IC card.
[0002]
[Prior art]
In recent years, IC cards have also been used for managing visitors to buildings and amusement facilities. In this type of system, a gate facility is provided at a key point of the facility so that only a holder of an IC card carrying appropriate permission data or an application can use the gate passing and other services. Since it is extremely difficult for an IC card to falsify data, a highly reliable system can be constructed.
[0003]
Of these, for the purpose of, for example, a day use ticket for an amusement facility or for visitors to an office building, hand out an IC card storing a gate permission data or an application capable of unlocking the gate when entering the facility, and when leaving the facility There is a usage mode for collecting the IC card again. Conventionally, in such a use mode, the collection of the IC card is performed by voluntary posting to the collection box or receipt by an attendant.
[0004]
[Problems to be solved by the invention]
However, relying on voluntary mailing or manual collection of cards may result in omission of collection. Permission data and applications that can pass through the gate remain in the IC card that could not be collected, so that a third party who obtained this IC card could pass through the gate without permission or illegally use the facility. There's a problem.
[0005]
In recent years, a non-contact type IC card, that is, a type in which the IC card itself includes transmission / reception means including an antenna or the like and can read and write information from a physically separated reader / writer has been put to practical use. According to this, the IC card can pass through the gate while being kept in a bag or a pocket, which is convenient for the user. However, there is a problem that it is difficult to thoroughly collect the IC card.
[0006]
The present invention has been made in view of the above-described problems, and has developed a system for erasing permission data and applications even when an IC card cannot be collected at the time of leaving the facility, thereby reliably preventing unauthorized use by a third party at a later date. Aim.
[0007]
[Means for Solving the Problems]
In order to achieve this object, a gate management system according to the present invention is a gate management system using an IC card, and a non-contact type gate provided near the gate through which a holder of the IC card passes. An IC card writer, and gate control means connected to the card writer.
The IC card writer transmits a command for deleting an application or data stored in the IC card toward the gate in response to an instruction from the gate control means.
[0008]
As described above, a service application or service data mounted on an IC card from a contactless card writer at a facility exit gate or the like (in order to receive a service using an IC card, a specific process corresponding to each service is performed. Specific data for collation on the application or service provider side (hereinafter, also simply referred to as “application” or “data” in this specification) is deleted. Therefore, for example, since the application or data for passing through the gate is automatically deleted from the IC card at the exit gate of the facility, even if the IC card cannot be collected at the exit of the facility for some reason, unauthorized use at a later date is prevented. be able to.
[0009]
In one embodiment, the gate is an openable door, and the gate control means instructs the card writer to issue a delete command when the door is opened. In another embodiment, the gate includes a rotatable bar, and the gate control unit instructs the card writer to transmit a delete command when the bar is rotated. Further, the gate management system includes a sensor unit for detecting a person passing through the gate, and the gate control unit instructs the card writer to transmit a delete command when the sensor unit detects a person passing through the gate. You may do so. In a further embodiment, the gate management system comprises an IC card reader provided near the gate, and the gate control means reads the information of the IC card which is going to pass through the gate when the card reader reads the information of the IC card. Instructs the card writer to send a delete command. With such a configuration, the application or data can be reliably deleted from the IC card passing through the gate.
[0010]
In another embodiment of the present invention, the application or data stored on the IC card includes expiration date information, and the gate management system further includes: an IC card reader that reads the expiration date information from the IC card; The gate control means instructs the card writer to transmit a delete command when the read validity period is before the current date and time. In this way, if the application or data itself has expiration date information and is automatically deleted from the IC card after the expiration date, even if the application or data is not deleted at the time of passing through the exit gate for any reason, Alternatively, data can be securely deleted to prevent unauthorized use of the IC card.
[0011]
In the above gate management system, it is desirable that the gate is configured to permit the passage of the holder of the IC card only when the application or data stored in the IC card is valid. . That is, the application or data mounted on the IC card can be suitably used as a gate-passing application or data in a system for managing entry and exit of facilities using the IC card.
[0012]
The second invention of the present application relates to an IC card used in the above-mentioned system, and in a non-contact type IC card including an operating system and one or more service applications or service data, the operating system is used for the service application or the IC card. The service application or the service data is deleted when a request for deletion is received from the card writer.
[0013]
In this IC card, the service application or service data is an application or data for passing through an entrance / exit gate of a facility.
[0014]
Preferably, the IC card further includes timer means and a power supply for operating the timer means, and the operating system deletes the service application or service data when a date and time set in the timer means arrives. . Even when an application or data cannot be deleted at a facility exit gate or the like, the application or data can be securely deleted to prevent subsequent unauthorized use.
[0015]
In another embodiment of the automatic disappearance by the timer setting, the service application or the service data includes expiration date information, and the IC card further includes a means for acquiring the current date and time, and the operating system includes the service application or the service data. The service application or service data may be deleted when the expiration date has expired.
[0016]
The third invention of the present application relates to a service application mounted on the IC card. This IC card has expiration date information of the application, and obtains the current date and time when the IC card is energized, and determines whether or not the expiration date of the application has passed based on the obtained current date and time. Requesting the operating system of the IC card or a writing device for the IC card to delete the own application when the expiration date has passed, and causing the IC card to execute the step. I do.
[0017]
BEST MODE FOR CARRYING OUT THE INVENTION
Embodiments of the present invention will be described below in detail with reference to the accompanying drawings. FIG. 1 is a diagram illustrating a system and an IC card according to a first embodiment of the present invention. As shown in FIG. 1 (a), a non-contact type reader / writer 20 for an IC card is provided beside an exit gate 10 which is one of entrance gates provided at important points of the facility. An IC card collection box 30 is placed in the vicinity. The exit gate 10 and the reader / writer 20 are connected to a gate control terminal 25. The effective range of the radio wave of the non-contact type reader / writer 20 covers the entire gate 10.
[0018]
FIG. 1B shows the configuration of an IC card 40 used in this system. The IC card 40 includes at least an OS (Operating System) 41 for controlling the operation of the entire IC card 40 and a memory 42 for storing applications and other data operating on the OS 41. In the present embodiment, the IC card 40 is a non-contact type, and although not shown, is provided with communication means such as an antenna in addition to the above-described components, and can perform information communication with the reader / writer 20 wirelessly. Since the non-contact type IC card itself is a known technology, further detailed description is omitted in this specification.
[0019]
The memory 42 stores a gate passing application 43. Upon receiving the signal from the reader / writer 20, the application 43 returns a request to unlock the exit gate 10 together with the identification information of the application itself. This information is collated by the gate control terminal 25, and if it is valid, the lock is released and the card holder can leave the exit gate 10. The OS 41 of the IC card 40 includes a deletion unit 44 that deletes the application 43 from the memory 42.
[0020]
In this system, a user is handed an IC card 40 when entering a facility, and the IC card 40 functions as a key for passing through a gate. That is, for example, at the time of admission to an amusement facility, the facility stores the gate-passing application 43 in the memory 42 of the IC card 40 and hands it over to the user. When the user holding the IC card 40 approaches the gate (for example, the exit gate 10), wireless communication is performed between the IC card 40 and the reader / writer 20, and the gate 10 is opened and the user passes. Can be. When leaving the facility, the user goes out of the gate 10 and puts the IC card 40 into the collection box 30 to return to the facility. Alternatively, the IC card 40 is returned to a staff member provided outside the gate 10. This IC card 40 will be reused at a later date.
[0021]
However, if the facility user returns the IC card 40 to the collection box 30 without posting the IC card 40, the IC card 40 can be used again to pass through the gate, thereby causing unauthorized use of the facility. . Therefore, in the present embodiment, a delete command is always issued from the reader / writer 20 provided near the exit gate 10, and the application 43 is automatically deleted from the IC card when passing through the exit gate.
[0022]
FIG. 2 is a diagram illustrating the processing flow of the present embodiment. As shown in FIG. 2, the gate control terminal 25 instructs the reader / writer 20 to transmit a delete command (step S1). In this embodiment, it is assumed that this delete command transmission instruction is always issued during operation of the facility. The reader / writer 20 wirelessly transmits an application deletion command to the IC card 40 that is going to pass through the gate 10 (step S2). The deletion command includes identification information unique to the application 43 or an area address of the application 43 in the memory 42.
[0023]
Upon receiving the delete command, the delete unit 44 of the IC card 40 accesses the memory 42 and deletes the application 43 (Step S3). Since this deletion process is performed on the application 43 having the specified identification information or the specified memory area, other applications and data on the IC card 40 are not deleted. When this process is completed, a deletion completion notification is transmitted to the reader / writer 20 (step S4). This is transmitted from the reader / writer 20 to the gate control terminal 25 (step S5). When it is confirmed that the application 43 has been securely deleted, the terminal 25 unlocks the gate 10 (step S6), and 10 is opened and the exit of the user is permitted (step S7). As a result, the application 43 is deleted from the IC card 40 without the user's recognition, and subsequent unauthorized use can be prevented even if the user brings the IC card 40 back without posting it in the collection box 30.
[0024]
In this embodiment, the deletion command may be transmitted only while the exit gate 10 is open. That is, as shown in FIG. 3 as the second embodiment, the gate control terminal 25 issues a delete command transmission instruction only when the gate 10 is open (steps S11 and S12). The reader / writer 20 transmits a delete command to the IC card 40 only while receiving the instruction or for a predetermined time (for example, 30 seconds) after receiving the instruction (step S13). Upon receiving this command, the deletion unit 44 of the IC card 40 deletes the application 43 from the memory 42 (Step S14). Since the user needs to pass through the gate 10 when leaving the facility, the user can send the delete command only while the gate 10 is open, and can reliably delete the application 43. In the case of this embodiment, there is no need to constantly transmit a deletion command, and it is not necessary to perform a process of issuing a deletion completion notification from the IC card 40 side (step S4 and subsequent steps in FIG. 2), so that the system can be simplified. is there.
[0025]
Also, in the above embodiment, the gate passing application 43 is mounted in the memory 42 of the IC card 40. However, in the above and below embodiments, the gate passing permission data is stored instead of the application 43. It may be in a form. In this case, during normal operation, the gate control terminal 25 reads the permission data of the IC card 40 via the reader / writer 20, and unlocks the gate 10 if the data is valid. When the user leaves, the permission data is deleted from the IC card.
[0026]
Further, as a further embodiment, a separate sensor may be provided around the gate to detect the passage of a person. FIG. 4 is a diagram showing a third embodiment of the system according to the present invention. As shown in FIG. 4A, a sensor 26 is provided near the gate 10. The sensor means 26 is a human body sensor or a passage sensor for detecting when a person passes through the gate 10, and is connected to the gate control terminal 25. FIG. 4B shows the operation of this embodiment. When the sensor means 26 detects the passage of a person, the fact is reported to the gate control terminal 25 (step S21). With this report as a trigger, the gate control terminal 25 instructs the reader / writer 20 to transmit a delete command (step S22), and issues a delete command of the application 43 to the IC card 40 (step S23).
[0027]
As a modification of the above-described embodiment, a non-contact reader / writer 20 provided beside the gate does not issue a delete command in response to opening / closing of the gate 10 or detection of passage of a person by the sensor means. When the presence of the IC card 40 is detected, a deletion command may be transmitted to the IC card 40.
[0028]
FIG. 5 shows a further embodiment. In the fourth embodiment shown in FIG. 5A, a contact type or proximity card reader 21 and a non-contact type card writer 22 are provided instead of the reader / writer 20. The contact-type card reader has a card slot (not shown), and reads information by inserting an IC card 40. The proximity card reader is a type of non-contact card reader, and has a narrow communication range of ten and several centimeters. Therefore, for the contact-type or near-type card reader 21, communication is not performed unless the user takes out the IC card 40 from a bag or a pocket and approaches the card reader 21 or inserts it into the card slot, and permission to pass through the gate is not granted. Different.
[0029]
In the system shown in FIG. 5A, a user who intends to pass through the exit gate 10 takes out the IC card 40 from a bag or a pocket and reads the IC card 40 into the card reader 21. When this information is transmitted to the gate control means 25, a delete command is transmitted from the non-contact type card writer 22. In the case of this embodiment, since the IC card 40 has been taken out from the front when the command is transmitted, the transmission command is not interrupted because the IC card 40 is deep in the bag or the like, and the application 43 is securely stopped. Can be deleted.
[0030]
In the fifth embodiment shown in FIG. 5B, the width of the gate 11 is reduced so that only one person can pass. Further, a non-contact type (including a proximity type) or contact type IC card reader 23 is provided on one side of the gate 11, and a non-contact type IC card writer 22 is mounted on the other side. . When the IC card reader 23 is a non-contact type, the card information is read when the facility user tries to pass through the gate 11, and a deletion command is transmitted from the IC card writer 22 in response to this. Since only one gate 11 can pass at a time, the application 43 can be deleted more reliably than in a gate where a plurality of people can pass at the same time.
[0031]
In the case where the IC card reader 23 is of a contact type in FIG. 5B, if the user inserts the IC card 40 into a card slot (not shown) while passing through the gate 11, a delete command is issued from the card writer 22. Is transmitted. In this embodiment, similarly to the example of FIG. 4A, a configuration may be adopted in which a sensor unit for detecting passage of a person through the gate 11 is provided instead of the card reader 23.
[0032]
FIG. 6 is a diagram showing a sixth embodiment of the present invention. As shown in FIG. 6, the gate 12 is provided with a rotary bar 13. When the rotating bar 13 rotates, it is transmitted to the gate control terminal 25, and a deletion command is transmitted from the non-contact type card writer 22. Since only one person can pass through the gate 12 using the rotating bar 13 and the user's passage can be reliably detected, the application 43 can be reliably deleted from the IC card 40.
[0033]
FIG. 7 is a diagram illustrating a configuration of an IC card 50 according to the second embodiment of the present invention. The IC card 50 of the present embodiment includes a timer 51 and a card power supply 52 in addition to the components of the IC card 40 shown in FIG. The card power supply 52 is a battery in the form of a film, and the IC card 50 can operate without being supplied with power from a reader / writer. The timer means 51 obtains power from the card power supply 52 and manages the current date and time. In this embodiment, when the IC card 50 is issued, the application 53 is mounted with information on the issue date and time and the validity period, or the date and time when the application 53 should be deleted.
[0034]
In the seventh embodiment, the OS 54 activates the application 53 using a timer interrupt at predetermined intervals, for example, every 24 hours. When activated, the application 53 obtains the current date and time from the timer means 51 and determines whether the validity period of the application 53 has expired or whether the date and time to be deleted has arrived. If the validity period has expired or the deletion date and time has arrived, a deletion request is sent to the OS 54 together with the identification number unique to the application 53 or the address information in the memory 42. The deletion means 44 of the OS 54 deletes the application 53 from the memory 42 based on this request.
[0035]
FIG. 8 shows a processing flow of another example of this embodiment. In the eighth embodiment shown in FIG. 8, the application 53 mounted on the IC card 50 notifies the OS 54 of the date and time when the application should be deleted at the time of installation (step S81). The OS 54 uses the timer means 51 to activate the application 53 when the date and time notified to the application 53 has arrived (step S82). The application 53 confirms whether the validity period has expired or whether the date and time to be deleted has arrived, makes a deletion request to the OS 54 (step S83), and the deletion means 44 of the OS 54 deletes the application 53 (step S84). ).
[0036]
According to the seventh and eighth embodiments, the application 53 to be installed is automatically deleted by the timer setting when the IC card is issued, without detecting the IC card at the exit gate of the facility and deleting the application. Can be. Therefore, in the above-described first to sixth embodiments, for example, when the facility user exits without passing through the exit gate for some reason, or when the IC card is covered with a metal plate to block electromagnetic waves, the Even in the case where the deletion of the application 53 has not been performed, the application 53 can be surely deleted by setting the timer, and the subsequent unauthorized use of the IC card 50 can be reliably prevented.
[0037]
FIG. 9 shows a processing flow of another embodiment (ninth embodiment) for realizing automatic disappearance of an application by setting a timer. In the seventh and eighth embodiments shown in FIG. 7, it is necessary to provide a timer means 51 and a card power supply 52 for driving the timer means 51 on the IC card 50 side. Since this increases the cost of the IC card 50, in the ninth embodiment, timer management is performed on the gate control terminal side. Therefore, the components of this embodiment are the same as those of the first embodiment shown in FIG. 1, but the operations of the application 43 and the gate control terminal 25 are different.
[0038]
In the present embodiment, when the IC card 40 is issued, the application 43 is mounted with information on the issue date and time and the validity period, or the date and time when the application 43 should be deleted. The gate control terminal 25 manages the current date and time. In this situation, when the user approaches the gate 10, communication is performed between the IC card 40 and the reader / writer 20, and the reader / writer 20 requests the IC card 40 to activate the application 43 (step S91). The OS 41 of the IC card 40 receives the notification and activates the application 43 (Step S92).
[0039]
When the application 43 starts, it first inquires of the gate control terminal 25 about the current date and time via the reader / writer 20 (step S93). Upon receiving the response from the gate control terminal 25 (step S94), the application 43 refers to the information on the validity period or the deletion date and time set at the time of issuance, and the validity period has expired or the date and time to be deleted has arrived. If there is (step S95), the OS 41 is requested to delete the own application 43 (step S96). Thus, the deletion unit 44 of the OS 41 deletes the application 43 from the memory 42. On the other hand, if it is within the validity period of the application 43, normal application processing, that is, transmission of a gate unlock request is performed (step S97).
[0040]
According to this embodiment, since the IC card does not require a power supply or a timer, the manufacturing cost of the card can be reduced. Also, the expiration date of the application is checked at the next visit, and after the expiration, the gate cannot be passed. Therefore, the illegal passage of the gate can be surely prevented. As described above, in all of the above embodiments, the application mounted on the IC card may be simple permission data for passing through the gate.
[0041]
As described above, the embodiments of the present invention have been described in detail. However, the technical scope of the present invention is not limited to the above-described embodiments, and various other modified examples can be considered. In particular, in the above description, the application or data mounted on the IC card is for passing through an entrance / exit gate of a facility. However, this is an application or data designed for other services using the IC card. Is also good. As another service example, in a system in which points are accumulated according to the degree of use of shopping and services, the present invention can be applied to a case where points are valid only for a certain period.
[0042]
【The invention's effect】
As described above, according to the present invention, an application or data is automatically deleted when passing through an exit gate of a facility or by setting a timer. Therefore, even if the IC card cannot be collected at the time of leaving the facility, it is possible to reliably prevent the problem of unauthorized use thereafter.
[Brief description of the drawings]
FIG. 1 is a diagram showing a configuration of a first exemplary embodiment of the present invention.
FIG. 2 is a diagram showing an operation flow of the first embodiment.
FIG. 3 is a diagram showing an operation flow of a second embodiment of the present invention. .
FIG. 4 is a diagram showing the configuration and operation of a third embodiment of the present invention.
FIG. 5 is a diagram showing a configuration of a fourth embodiment and a fifth embodiment of the present invention.
FIG. 6 is a diagram showing a configuration of a sixth embodiment of the present invention.
FIG. 7 is a diagram showing a configuration of a seventh and an eighth embodiment of the present invention.
FIG. 8 is a diagram showing an operation flow of an eighth embodiment of the present invention.
FIG. 9 is a diagram showing an operation flow of a ninth embodiment of the present invention.
[Explanation of symbols]
10 Exit gate 20 IC card reader / writer 25 Gate control terminal 30 Collection box 40, 50 IC card 41, 54 Operating system 42 Memory 43, 53 Application 44 Deletion means 51 Timer means 52 Card power supply

Claims (12)

A gate management system using an IC card, comprising: a gate through which a holder of the IC card passes; a non-contact type IC card writer provided near the gate; and gate control means connected to the card writer. With
A gate management system, wherein the IC card writer transmits a command for deleting an application or data stored in the IC card toward the gate in response to an instruction from the gate control means. 2. The gate management system according to claim 1, wherein the gate is an openable door, and the gate control unit instructs the card writer to transmit a delete command when the door is opened. Management system. 2. The gate management system according to claim 1, wherein the gate includes a rotary bar, and the gate control unit instructs the card writer to transmit a delete command when the bar is rotated. Gate management system. 2. The gate management system according to claim 1, wherein the system includes a sensor unit that detects a person passing through the gate, and the gate control unit detects the card when the sensor unit detects a person passing through the gate. A gate management system for instructing a writer to issue a delete command. 2. The gate management system according to claim 1, wherein said system includes an IC card reader provided near said gate, and said gate control means transmits information of an IC card which said card reader tries to pass through said gate. A gate management system for instructing the card writer to transmit a delete command when the card is read. 2. The gate management system according to claim 1, wherein the application or data stored in the IC card includes expiration date information, and the gate management system further reads the expiration date information from the IC card; A gate control means for managing a current date and time, wherein the gate control unit instructs the card writer to issue a delete command when the read validity period is before the current date and time. 7. The gate management system according to claim 1, wherein the gate is configured to permit the holder of the IC card to pass only when an application or data stored in the IC card is valid. Gate management system characterized by being done. In a non-contact type IC card including an operating system and one or more service applications or service data, when the operating system receives a deletion request from the service application or the card writer for the IC card, An IC card for deleting a service application or service data. 9. The IC card according to claim 8, wherein the service application or service data is an application or data for passing through an entrance / exit gate of a facility. 10. The IC card according to claim 8, wherein the IC card further includes timer means, and a power supply for operating the timer means, and the operating system provides the service when a date and time set in the timer means arrives. 11. An IC card for deleting application or service data. 10. The IC card according to claim 8, wherein the service application or service data includes expiration date information, and the IC card further includes a unit for acquiring a current date and time, and the operating system includes the service application or service data. An IC card for deleting the service application or service data when the expiration date has passed. A service application mounted on the IC card, which has expiration date information of the application, and obtains a current date and time when the IC card is energized; Determining whether the application has been deleted and, if the expiration date has passed, requesting the operating system of the IC card or a writing device for the IC card to delete the own application. An application for an IC card characterized by being executed by a user.

Images