JP2006188922A - Room entrance/exit control system and method - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To make it possible that even in the case when a third party has illegally obtained the mobile phone, the room entrance/exist control using it remains effective while preventing the third party from successfully impersonating the mobile's owner. <P>SOLUTION: An AP server 11, before the scheduled application time shown in the scheduled application time information included in the certification information registered in a certification table 121, informs the user's mobile phone 30 for the certification information about information for unlocking including a password contained in the certification information. When the specific telephone number for unlocking is dialed by the mobile phone 30, the AP server 11 certifies the user by getting the telephone number of the mobile phone 30 and the password transmitted from it through the user's input operation. When the AP server succeeds in certifying the user, it takes out the key number of the key necessary for unlocking from the key information registered in the key information table 124 and informs it to the mobile 30, provided that it is within the scheduled application time shown by the certification information used for certification. <P>COPYRIGHT: (C)2006,JPO&NCIPI

Description

  The present invention relates to an entrance / exit management system and method for managing a person's entrance / exit to a location represented by a building or room by using a mobile phone.

  It is essential in terms of security to manage the entrance and exit of people to places such as buildings or rooms that should be prevented from entering by outsiders or non-administrators. As a place where this kind of management (entrance / exit management) is required, for example, a building or a room where a server computer is installed or an important document is stored is known.

  Conventional general entrance / exit management is mainly performed by a card reader using a medium such as a security card. In this conventional entrance / exit management, the medium such as a card may be damaged, and it may become impossible to enter / exit the room when necessary even though it is the owner of the medium. In addition, if a small card is lost, not only will it be impossible to enter and leave the room when necessary, but there is also a risk of security information leakage.

  Therefore, in recent years, an entrance / exit management method using a mobile phone incorporating a short-range wireless data communication interface instead of a medium such as a card has been proposed (for example, see Patent Document 1). According to the entrance / exit management method described in Patent Document 1, entrance / exit of a user (passerby) who wants to enter a building to be entered / exited is managed as follows.

First, when the user approaches the gate (door) of the building, communication is performed with the gate device by the short-range wireless data communication function of the mobile phone possessed by the user. The gate device acquires the personal identification information of the user from the mobile phone through this communication. The gate device reads the passability information corresponding to the personal identification information from the passability storage means and determines whether or not the passability is allowed. The gate device wirelessly transmits a random password to the user's mobile phone only when it is determined that passage is possible. The user inputs this password into input means installed at the gate (door). If the input personal identification number matches the personal identification number transmitted from the gate device to the user's mobile phone, the gate device unlocks the gate (door). Further, in the above-mentioned Patent Document 1, when it is determined that passage is permitted, the gate device requests the user's mobile phone to input a user ID (password), and the user can be authenticated based on the input user ID. However, a technique is also described in which a personal identification number is transmitted from the gate device to the user's mobile phone.
JP 2002-213126 (paragraphs 0029 to 0035, FIGS. 1 and 2)

  According to the entrance / exit management method using the mobile phone described in Patent Document 1 (hereinafter referred to as the prior art), unlike the case where a medium such as a security card is used, there is little risk of damage or loss of the mobile phone. Therefore, the owner of the mobile phone can surely enter and leave the room when necessary.

  In the above prior art, even if the mobile phone is used by a third party due to the loss or theft of the mobile phone, unless the third party knows the ID of the user of the mobile phone, "Action" can be prevented. However, since this user ID is generally fixed and used in various scenes where a service is received through a mobile phone, there is a possibility of leakage to a third party. That is, there is a possibility that the user ID is illegally acquired by a third party who has illegally acquired the mobile phone. In such a case, impersonation by a third party cannot be prevented.

  The present invention has been made in view of the above circumstances, and its purpose is to enter / exit a mobile phone using a mobile phone while preventing the spoofing by the third party even if the mobile phone is illegally acquired by a third party. It is an object to provide an entrance / exit management system and method capable of management.

  According to one aspect of the present invention, an entrance / exit management system for managing entrance / exit of a user who owns a mobile phone is provided. This entrance / exit management system is associated with a user who is scheduled to enter / exit a location where entry / exit management is required and a key required for unlocking the entrance / exit to the location. Authentication information storage means for storing authentication information including scheduled use period information indicating a period and a password used for authentication of the user when inquiring the key number of the key from the user to the entry / exit management system; User information storage means for storing user information including the mobile phone number of the mobile phone owned by the user for each user, and a key required for unlocking to enter / exit a place where entry / exit management is required Key information storage means for storing key information including the key number of the key, and the scheduled use period information in the authentication information stored in the authentication information storage means. The first notification means for notifying the user mobile phone associated with the authentication information of the unlocking information including the password included in the authentication information prior to the scheduled use period indicated by When a specific unlocking phone number is dialed from the user's mobile phone, the mobile phone number of the user's mobile phone is acquired and transmitted from the mobile phone in response to the user's input operation Authentication means for performing user authentication based on the mobile phone number and password, the mobile phone number included in the user information and the password included in the authentication information, and authentication by the authentication means If it is confirmed that the user is a valid user, if it is within the scheduled use period indicated by the scheduled use period information in the authentication information used for authentication, The key number of the key that is associated with the authentication information is taken out from the key information of the key, provided the key number, and a second notifying means for notifying to the mobile phone of the user authenticated by the authentication means.

  In such a configuration, the first notifying unit has a user's mobile phone associated with the authentication information prior to the scheduled use period indicated by the scheduled use period information in the authentication information registered in the authentication information storage unit. The telephone is notified of unlocking information including the password included in the authentication information. This password is valid only during the scheduled use period, and is used for user authentication for unlocking with a specific unlocking phone number. The authentication means obtains the mobile phone number of the mobile phone when a specific unlocking phone number is dialed from the mobile phone and, for example, the mobile phone by a user input operation in response to a voice message prompting for password entry And a double user authentication using a mobile phone number (that is, a mobile phone number as personal information) and a password. The second notification means only obtains the key number of the key required for unlocking when the authentication by the authentication means is successful and the current time is the scheduled use period (usable period) indicated by the authentication information used for authentication. The key information registered in the key information storage means is taken out and notified to the user's mobile phone.

  As described above, in the above-described configuration, the scheduled registration of the user's entrance / exit can be managed using the scheduled use period information in the authentication information, so that it is possible to narrow down the scheduled use period (usable period) of the key release. Thereby, it becomes possible to disclose the key number based on the user authentication to the corresponding person only during the key vacancy use scheduled period. In addition, at least a password required for user authentication for unlocking and a specific unlocking telephone number is disclosed in advance only to the corresponding person in advance within the scheduled period for using the key. In other words, since the authentication information is not continuously held on the mobile phone but is issued (granted) at the required time from the entrance / exit management system side, the security information is confidential. Secured. In addition, this authentication information (password) is valid only during the scheduled use period, and from this point, the security information can be secured.

  In the above configuration, double authentication is performed using personal information using the number notification function of the mobile phone and the password distributed from the above-described entrance / exit management system, and the validity period of the password is the key. Since it is the vacant use scheduled period (usable period), even when the mobile phone is illegally acquired by a third party, it is possible to effectively prevent the third party from impersonating.

  Here, in addition to the key number, the key information has the specific unlocking telephone number used for dialing for user authentication necessary for the notification of the key number, and the specific unlocking key is added to the password. It may be configured such that unlocking information including a telephone number is notified. In this way, it is possible to more effectively perform double authentication using the password and the unlocking phone number. This effect is further enhanced if an unlocking telephone number is set for each key. In addition, if the configuration is such that the unlocking information including the information indicating the usable period is notified in addition to the password and the unlocking telephone number, the user does not have to memorize or record the usable period. I can grasp.

  In addition, the authentication information includes notification time information indicating the notification time desired by the user, and the unlocking information including the password included in the authentication information is notified at the timing indicated by the notification time information. Good. In this way, the user can receive the unlocking information at a time desired by the user.

  Further, if the user information has the user's mobile mail address indicated by the user information, and the mail transmission based on the mobile mail address is used for the notification of the unlocking information and the key number, the confidential information is diffused. Can be prevented.

  If a key number changing means for changing the key number included in the key information stored in the key information storage means is added at regular intervals, the key number is dynamically changed. The security of the place where it is applied can be improved. In particular, if the key number included in the key information is configured to be changed in a shorter period as the level is higher, depending on the security level required at the location where the key indicated by the key information is applied, It is possible to rank security related to unlocking, and to further improve security. Here, if the key information has key number change interval information indicating the key number change interval determined according to the security level required at the location where the key indicated by the key information is applied, the key information corresponds to the security level. The key number can be changed easily. Further, if key number change flag information indicating whether or not to change the key number is included in the key information, for example, it is possible to perform setting for changing the key number for a public room.

  Further, the authentication information is key number notification flag information indicating the notification state of the key number, and has the key number notification flag information indicating that notification is not performed in the initial state, while all the authentication information stored in the authentication information storage means Among them, the scheduled use period indicated by the scheduled use period information included in the authentication information is older than the current time, and the key number notification flag information included in the authentication information is searched for authentication information indicating that the notification is not performed. Assuming that the key number included in the key information of the key associated with the authentication information is notified within the scheduled use period, the key number notification flag information is forcibly changed from a state indicating that the notification is not performed. Key number notification flag information included in authentication information used for user authentication by adding monitoring means to change the status to indicate that notification has been performed When in the state shown the notification Performed may and the current time is judged configure user authentication unsuccessful deviates from the usage date range indicated by the drive schedule period information included in the authentication information.

  In such a configuration, as long as the scheduled use period has passed and the key number notification flag information has not been noticed, the user simply dials the unlocked phone number and enters the password. Key number can be obtained. Therefore, even if the key number is frequently changed to improve security, the user can obtain the latest key number and re-enter the room within the scheduled use period. Further, as described above, since the key number is not notified when the scheduled use period has passed, the user security operation within the scheduled use period (usable period) can be established.

  Here, the authentication history information storage means for storing the authentication history information, and the authentication information including the key number notification flag information in a state indicating that the notification is not performed is selected from the authentication information storage means, and the authentication information is selected. If an authentication history storage unit that stores at least a part of the information excluding the password as authentication history information in the history information storage unit is added, history browsing based on the authentication history information storage unit can be performed.

  According to the present invention, the password distributed prior to the user's scheduled use period and the telephone number of the mobile phone acquired by dialing from the user's mobile phone to a specific unlocking phone number ( The key number for unlocking is only relevant if it is confirmed that the user is a legitimate user by double authentication using the personal information) and the password is within the valid key usage period (usable period). Since the notification is made to the user's mobile phone, even if the mobile phone is illegally acquired by a third party, it is possible to effectively prevent impersonation by the third party.

Embodiments of the present invention will be described below with reference to the drawings.
FIG. 1 is a block diagram showing a configuration of an entrance / exit management system 10 according to an embodiment of the present invention. The entrance / exit management system 10 includes an application server (hereinafter referred to as an AP server) 11 and a database server (hereinafter referred to as a DB server) 12 in order to realize entrance / exit management using a mobile phone. Here, it is assumed that the AP server 11 and the DB server 12 are realized by independent computers.

  On the AP server 11, various applications (application programs) for entering / leaving management using a mobile phone, for example, a notification application (notification application) 111, an authentication application (authentication application) 112, and a key number (key No) change. An application (key number changing application) 113, an adaptation period monitoring application (adaptive period monitoring application) 114, and an authentication history storage application (authentication history storage application) 115 can operate. Functions realized by executing the applications 111 to 115 will be described later. The AP server 11 can communicate with various mobile phones including the mobile phone 30 via the communication gateway (communication GW) 20.

  The DB server 12 includes DB (database) tables including an authentication table 121, an authentication history table 122, a user information table 123, and a key information table 124. Each of these tables 121 to 124 is stored in a storage device such as a magnetic disk drive. The DB server 12 is connected to the AP server 11 and the administrator terminal 40. The administrator terminal 40 is, for example, a personal computer that can be used by an administrator (system administrator) 42 (see FIG. 3) of the entrance / exit management system 10. The administrator terminal 40 has an entry / exit management GUI 41 as a graphical user interface (GUI) for the administrator 42 to interact with the entry / exit management system 10. Note that the AP server 11 and the DB server 12 may be physically realized by one computer.

  FIG. 2 shows a data format example of records stored in the authentication table 121, the authentication history table 122, the user information table 123, and the key information table 124 of the DB server 12, respectively. In the following description, unlocking a location subject to entrance / exit management, for example, a door of a room by inputting a key number (key No.) as a personal identification number is referred to as “unlocking”. Information necessary for “unlocking”, that is, information used for authentication when the user inquires about the key No. is referred to as “unlocking information (or unlocking authentication information)”. This unlocking information includes a later-described unlocking telephone number and password.

  In the authentication table 121, an authentication information record 121R generated in accordance with the user entry / exit application procedure is stored. This authentication information record 121R includes a user number used as user identification information, a key opening use date and time (key opening use start date and time) and a key opening use time applied by the user. As the user number, a phone number of a mobile phone owned by the user (user mobile phone number) is used. The unlocking use date and time represents the date and time when the unlocking use is scheduled to start, and the unlocking use time represents the time range that the user plans to use. The period for which the user is scheduled to use (scheduled period for unlocking use) is indicated from the key opening use date and time and the key opening use time. That is, the key opening use date and time and the key opening use time are information representing a key opening use scheduled period from the key opening use date and time (key opening use start date and time) to (key opening use date and time + key opening use time). In the present embodiment, this scheduled unlocking use period is treated as a usable unlocking period that can be used by the user. The authentication information record 121R also includes a notification requesting date (information notification requesting date) of the unlocking information requested by the user, a key serial number as identification information of the key (key) of the location to be unlocked, Including a password for a limited period of time that is temporarily given to the user. This password is encrypted. As described above, the authentication information record 121R including the user number and the key sequence number is associated with the user number and the key sequence number.

  The authentication information record 121R further includes a registrant (registration operator) and registration date of the record 121R, an information notification flag, and a key No notification flag. For example, when the information notification flag is “0”, the information notification (notification of unlocking information) is not performed, the information notification is performed when “1”, and the information notification flag is “2”. Indicates that an error occurred in the information notification. For example, when the key No notification flag is “0”, the key No notification has not been performed, when the key No notification is “1”, the key No notification has been performed, and when the key No notification flag is “2”, an error has occurred. It shows that each occurred.

  The authentication history table 122 stores an authentication history record 122R. The authentication history record 122R is authentication information history information. The authentication history record 122R includes a user number, a key opening use date, a key opening use time, an information notification desired date, a key serial number, a registrant and a registration date, and a history deletion date. Here, information other than the history erasure date / time included in the authentication history record 122R, that is, the user number, key unlocking date / time, key unlocking usage time, information notification desired date, key serial number, registrant and The registration date is copied from the authentication information record 121R corresponding to the record 122R. For data (for example, a registrant) stored in common in various databases of the DB server 12, for example, an authentication information record 121R in the authentication table 121 is replaced with a corresponding flag (registrant's name) instead of the data (registrant). It is not necessary to copy by adding a flag) indicating that it is also included in the authentication history record 122R corresponding to the authentication information record 121R. The same applies to data stored in common in other databases. In this way, the storage capacity of the storage device required for the DB server 12 can be reduced.

  The user information table 123 stores a user information record 123R for each user. The user information record 123R includes a user number, the user's mail address (mobile mail address), the user's name, the registrant and registration date of the record 121R.

  The key information table 124 stores a key information record 124 </ b> R indicating the key information at each location that is to be entered / exited by the entry / exit management system 10. The key information record 124R includes a key serial number, a key number for unlocking, key location information, and an encrypted key No. That is, the key information record 124R is associated with key information (or key location information). The telephone number for unlocking is the telephone number necessary for “inquiry for unlocking” for inquiring the room entry / exit management system 10 for information necessary for unlocking using the key specified by the key sequence number (information for unlocking the key). Indicates. This unlocking telephone number may be prepared for each key or may be prepared in common for all keys. Here, it is assumed that the unlocking telephone number is common to all keys. The key location information indicates a location where it is necessary to open the key using the key specified by the key serial number. The key information table 124 further includes a key No change interval, a key No latest change time, a key No invariant flag, a registrant and a registration date. The key No change interval represents a key No change condition, for example, a time interval for changing the key No. This key No change interval can be set by, for example, the administrator 42 of the entrance / exit management system 10 according to the level of security required for the room (or building) specified by the key location information. Here, the higher the security level, the shorter the key No change interval is set. This makes it possible to rank security for each room that requires entry / exit management, and to improve security. The latest key No change time indicates the latest key No change time. The key number unchanged flag indicates that the key number is changed according to the key number changing interval when “0”, for example, and that the key number is not changed and fixed when “1”. By applying this key No invariant flag, for the purpose of improving security, it is possible to make a setting in which the key No is not changed, for example, for a public room, while changing the key No according to the key No change interval.

  Next, the operation of the above embodiment of the present invention will be described with reference to FIGS. FIG. 3 is a diagram showing a flow of operations from a prior entry / exit application by the user 31 to notification of unlocking information to the user 31 by the entrance / exit management system 10, and FIG. 4 is an operation from an inquiry for unlocking to unlocking. It is a figure which shows the flow of. FIG. 5 shows an example of an administrator screen necessary for entry / exit management, and FIG. 6 shows an example of a mail displayed from the entry / exit management system 10 (internal AP server 11) to the mobile phone 30 of the user 31.

  First, it is assumed that the user 31 who owns the mobile phone 30 shown in FIG. 1 needs to enter / exit a room with a certain building managed by the entrance / exit management system 10. In this case, the user 31 makes a prior entry / exit application 301 for applying in advance to the manager 42 of the entry / exit management system 10 when and where the entry / exit is required. Here, it is assumed that the entry / exit application 301 is performed with information (provided information) 301a necessary for a predetermined application form. As the provision information 301a, the telephone number (mobile phone number) of the mobile phone 30 owned by the user 31, the unlocking use date and time (unlocking use start date and time) and time (unlocking use time), and the unlocking information notification request You need a day and a place to unlock it. At the time of new application (new registration), the mobile mail address of the user 31 and the name of the user 31 are further required as the provision information 301a. It is also possible to display a pre-entry / exit application input screen on a terminal of the user 31 such as the mobile phone 30 or a personal computer, and to make an online pre-entry application to the administrator terminal 40 through the input screen. . It is also possible for one user to make a pre-entry / exit application for a plurality of users.

  The administrator 42 calls the administrator GUI screen 51 shown in FIG. 5A via the entrance / exit management GUI 41 of the administrator terminal 40 in accordance with the pre-entrance / exit application 301 from the user 31. The administrator GUI screen 51 is selected from “registration for unlocking schedule”, “registration of new user”, “registration of new key information”, “browsing unlocking history”, “browsing user information”, and “browsing key information”. It is a menu screen for the administrator 42 to select arbitrary items. When “unlocking schedule registration” is selected, the entrance / exit management GUI 41 switches from the administrator GUI screen 51 to the unlocking schedule registration screen 52 shown in FIG. Similarly, when “new user registration” is selected, the entrance / exit management GUI 41 switches from the administrator GUI screen 51 to the new user registration screen 53 shown in FIG. Similarly, when “new key information registration” is selected, the entrance / exit management GUI 41 switches from the administrator GUI screen 51 to the new key information registration screen 54 shown in FIG.

  The administrator 42 uses the key opening schedule registration screen 52, the new user registration screen 53, or the new key information registration screen 54 to register the information provided by the user 31's prior application in the input field on the screen. The registration operation 302 is performed. Here, on the unlocking schedule registration screen 52, the mobile phone number of the user 31, the unlocking use date and time requested by the user 31, the unlocking information notification desired date, and the unlocking location are registered. The operation is performed. In response to this operation, an operation for authentication information registration 303 by the administrator terminal 40 is performed. Thereby, the authentication information record 121R shown in FIG. 2 corresponding to the prior application from the user 31 is generated and registered (saved) in the authentication table 121. However, at this time, no password is set in the authentication information record 121R. Both the information notification flag and the key No notification flag are initially set to “0”. At the time of new registration, an operation for registering user information including the mobile phone number of the user 31, the name of the user 31, and the mobile mail address of the user 31 is performed on the new user registration screen 53. In response to this operation, the user information record 123R shown in FIG. The user information record 123R and the authentication information record 121R are associated with each other by a user number (= user mobile phone number).

  The AP server 11 functions as an unlocking information notification unit by executing the notification application 111. As a result, the AP server 11 requests the key unlocking information notification date when the time to notify the key unlocking information has arrived from among the key unlocking information notification desired dates specified by the respective authentication information records 121R registered in the authentication table 121. Notification date detection 304 is performed to detect. The AP server 11 selects the authentication information record 121R that includes the desired date of unlocking information notification detected by the notification date detection 304. The AP server 11 specifies the user number of the corresponding user, that is, the mobile phone number, based on the selected authentication information record 121R. Then, the AP server 11 generates a password to be temporarily given to the user who owns the mobile phone having the specified mobile phone number by using a random number, and encrypts the password.

  The AP server 11 selects a key information record 124R having a user number that matches the mobile phone number of the user 31 from the key information table 124 stored in the DB server 12, and uses the key 124 for unlocking the key from the record 124R. Get a phone number. Further, the AP server 11 detects the unlocking use date and time and the unlocking use time from the previously selected authentication information record 121R, and determines the unlocking usable period. The AP server 11 is a key for notifying the mobile phone 30 of the user 31 of the key unlocking information 305 including the acquired key unlocking phone number, the encrypted password, and the determined key unlocking available period by mail. An opening information mail notification (notification of key opening number) 306 is executed. Further, the AP server 11 executes password registration 307 for registering the encrypted password in the previously selected authentication information record 121R according to the notification application 111. FIG. 6A shows a display example of the unlocking information mail notified to the mobile phone 30 of the user 31. In the example of FIG. 6 (a), the unlocking period is “from 8:00 to 19:00 on January 4, 2005” and the unlocking phone number is “xxx-xxx”. "--Xxxx" and that the password is "xxxx".

  When the user 31 is notified of the key opening information 305 by e-mail, the user 31 makes a key opening inquiry 401 using the mobile phone 30. This unlocking inquiry 401 is performed as follows using the unlocking information 305 notified by the previous unlocking information mail notification 306. First, the user 31 dials the unlocking phone number included in the unlocking information 305 from the mobile phone 30. It is assumed that this unlocking telephone number is assigned to the telephone 402 in the entrance / exit management system 10. Further, it is assumed that the telephone 402 has a function (telephone number notification function) of detecting a telephone number of a mobile phone (in this case, the mobile phone 30) of a call (communication) partner and notifying the AP server 11.

  For this reason, at the time of a key opening inquiry using the mobile phone 30, a number notification 403 for notifying the telephone number of the mobile phone 30 from the telephone 402 to the authentication application 112 of the AP server 11 is performed. Then, the AP server 11 functions as a key opening authentication unit by executing the authentication application 112. First, the AP server 11 returns a voice message prompting the user 31 of the cellular phone 30 to input a password from the telephone 402 to the cellular phone 30 by automatic voice operation. In response to this, the user 31 operates the push button of the mobile phone 30 to perform the password input 404 for inputting the password included in the unlocking information 305.

  Based on the mobile phone number notified by the number notification 403 and the password input by the password input 404, the AP server 11 is a user who can unlock the user 31 who owns the mobile phone 30 of the mobile phone number. The key opening authentication 405 for authenticating the above is executed. In the unlocking authentication 405, an authentication information record 121R including a user number that matches the notified mobile phone number is retrieved from the DB server 12. Then, the password included in the retrieved authentication information record 121R is compared with the input password, and the current time is the applied unlocking date / time and the key included in the authentication information record 121R. It is determined whether it is within the range of the scheduled use period (usable period) specified by the open use time, that is, the adaptation period.

  As a result of the password verification, if the password match is determined and it is determined that the current time is within the range of the adaptation period, the AP server 11 determines successful key-opening authentication (authentication OK). On the other hand, if it is determined that the password does not match or the current time is outside the range of the adaptation period, the AP server 11 determines the unlocking authentication failure (authentication NG). The AP server 11 performs a mail notification 407 for notifying the mobile phone 30 of a mail of a response 406 to the key opening inquiry according to whether or not the authentication is OK. Here, when the authentication is OK, the key No is notified as shown in FIG. On the other hand, in the case of authentication NG, an error message (when out of the adaptation period) is notified as shown in FIG.

  Here, it is assumed that the key number is notified to the mobile phone 30 of the user 31 by the mobile mail by the AP server 11. In addition, a number input device 410 used for inputting a key No. for unlocking the door 409 of the room 408 is provided outside the room 408 where the user 31 applied. In this number input device 410, a key No. for unlocking the door 409 is set by communication by the AP server 11. The key No. set in the number input device 410 is changed according to a key No change described later.

  When the user 31 uses the number input device 410 to execute the key opening 411 for inputting the key No notified by the AP server 11, the door 409 is unlocked. As a result, the user 31 can enter the room 408.

  In the present embodiment, the AP server 11 functions as a key number changing unit for performing the key number changing 412 by executing the key number changing application 113. As a result, the AP server 11 changes the key No. in each key information record 124R stored in the key information table 124 according to the key No change interval that is the change condition in the record 124R (however, the key No invariant flag). Is “0” indicating that there is a change). In addition, the AP server 11 changes the key No set in the number input device 410 by communication. By changing the key number, it is possible to improve the security required for the room (or building) specified by the key location information in the key information record 124R.

  However, by changing the key No., the user 31 once leaves the room 408 and then tries to enter the room 408 again. Even if the unlocking 411 using the same key No as the previous time is executed within the adaptation period, The door 409 cannot be unlocked.

  Therefore, the user 31 makes an unlocking inquiry 401 again in order to obtain the latest key No when re-entering after leaving the room. As long as it is within the range of the usable period specified by the key unlocking use date and time and the key unlocking usage time applied by the key unlocking inquiry 401, the user 31 can always contact the AP server 11 as long as it is within the adaptation period. Key No can be acquired.

  In this embodiment, the key No notification flag in the authentication information record 121R indicates that the key No notification has been performed when “1” as described above. If the key No is notified to the mobile phone 30 in response to the first unlocking inquiry 401 from the mobile phone 30, the key No notification flag is changed from “0” to “1”. The following problem arises with respect to the unlocking inquiry 401. In other words, since the determination in step S14, which will be described later, becomes “NO” in response to the key opening inquiry 401 again, the key number cannot be notified. Therefore, in the present embodiment, even if the key No is notified in response to the key opening inquiry 401, the key No notification flag does not change from “0” to “1”, and apparently the key No notification is not performed. Maintain state. However, if the key number notification flag is in the “0” state even after the adaptation period, the key number can always be used, which is a problem in terms of security.

  Therefore, in the present embodiment, the AP server 11 executes the adaptation period monitoring application 114, so that the key opening use date and time and the key opening use time included in each authentication information record 121R stored in the authentication table 121 are determined. It functions as an adaptation period monitoring means for performing the designated adaptation period monitoring (adaptation period monitoring) 413. By this adaptive period monitoring means, an authentication information record including a key No flag indicating that key number notification has not been performed even if the end of the adaptive period (key opening utilization date + key opening utilization time) is exceeded, from the authentication table 121. 121R is searched, and the key No flag is forcibly changed to “1” indicating that it has been implemented. This makes it possible to establish user security operations within the adaptation period.

  Further, the AP server 11 functions as an authentication history management unit for managing the history of authentication information by executing the authentication history storage application 115. As a result, the AP server 11 searches the authentication information record 121R stored in the authentication table 121 for an authentication information record 121R that satisfies a certain authentication history collection condition, and the password, information notification flag, key No notification flag, The authentication history storage 414 for storing in the authentication history table 122 as the authentication history record 122R is performed. Therefore, the manager 42 can browse the unlocking history as described below.

  The administrator 42 selects “unlock history browsing” on the administrator GUI screen 51 shown in FIG. Then, an unlocking history search screen 55 shown in FIG. 5 (e) is displayed on the administrator terminal 40. On the unlocking history search screen 55, a user mobile number for specifying a user and a date and time can be input as search conditions. The administrator terminal 40 includes an authentication history record 122R including the user number that matches the user mobile number and including an adaptation period (key opening use date and time and key opening use time) that matches the specified date and time. Are displayed in the search information display area of the unlocking history search screen 55. When only one of the user mobile number or the date and time is input, the authentication history record 122R including the user number that matches the user mobile number or the authentication history record 122R including the adaptation period that matches the specified date and time. Is searched. It is also possible to specify a time range instead of the date and time.

  In the present embodiment, the administrator 42 can also browse user information and key information as described below. When the administrator 42 wants to view the user information, the user 42 selects “view user information” on the administrator GUI screen 51 shown in FIG. Then, the user information search screen 56 shown in FIG. On the user information search screen 56, a user mobile phone number for specifying a user can be input as a search condition. The administrator terminal 40 searches the user information table 123 for the user information record 123R including the user number that matches the user mobile number, and displays it in the search information display area of the user information search screen 56. Further, when the administrator 42 wants to browse the key information, he / she selects “Browse Key Information” on the administrator GUI screen 51 shown in FIG. Then, the key information search screen 57 shown in FIG. On this key information search screen 57, a key sequence number can be input as a search condition. The administrator terminal 40 searches the key information table 124 for the key information record 124R including the key serial number and displays it in the search information display area of the key information search screen 57.

Next, the procedure of the unlocking information notification process by the AP server 11 according to the notification application 111 will be described with reference to the flowchart of FIG.
The AP server 11 acquires the current time (indicating time information) from a clock device (not shown), and from the authentication table 121, authenticates that the information notification desired date is older than the current time and the information notification flag is “0”. All the information records 121R are searched (step S1). That is, the AP server 11 searches for the authentication information record 121R that is the target of the unlocking information mail notification 306 shown in FIG. If even one corresponding authentication information record 121R can be searched (step S2), the AP server 11 repeats the following processing for each searched authentication information record 121R in units of records.

  First, the AP server 11 issues a password necessary for user authentication at the time of key No notification using a random number (step S3). The issued password is encrypted and set in the corresponding authentication information record 121R. Next, the AP server 11 searches the user information table 123R including the user number that matches the user number from the user information table 123 using the user number in the authentication information record 121R as a key. The user's mobile mail address is acquired (step S4). In this step S4, the AP server 11 uses the key sequence number in the authentication information record 121R as a key, and searches the key information table 124 for a key information record 124R that includes the key sequence number that matches the key sequence number. The unlocking telephone number is acquired from 124R. In step S4, the AP server 11 detects the key opening use date and time and the key opening use time from the previously selected authentication information record 121R, and determines the key opening available period (adaptive period). Further, in step S4, the AP server 11 uses the acquired mobile mail address for the user corresponding to the acquired unlocking telephone number, the encrypted password, and the determined unlocking usable period by e-mail. The lock opening information mail notification 306 (see FIG. 3) for notifying the mobile phone is executed.

  If a transmission error occurs in the unlocking information mail notification 306 (step S5), the AP server 11 changes the information notification flag in the authentication information record 121R to “2” indicating an error (step S6). Then, the AP server 11 generates a system alert to the administrator terminal 40 to notify the administrator 42 of the error (step S7), and ends the processing for one record. On the other hand, if no transmission error has occurred, the AP server 11 changes the information notification flag in the authentication information record 121R to “1” indicating that it has been processed (step S8). As a result, the authentication information record 121 </ b> R whose information notification flag has been changed to “1” is not subject to the unlocking information notification process by the AP server 11 according to the notification application 111.

  The AP server 11 repeatedly executes the above-described processing according to the notification application 111 while pausing (sleeping) for a certain time (for example, 10 minutes) (step S9). However, the repetition here is not necessarily performed constantly. For example, in order to prioritize another process, it may be temporarily stopped by a dedicated monitoring application.

Next, the procedure of authentication processing by the AP server 11 according to the authentication application 112 will be described with reference to the flowchart of FIG.
Now, as shown in FIG. 4, it is assumed that the unlocking inquiry 401 is generated when the user 31 dials the unlocking telephone number notified by the unlocking information mail notification 306 from the mobile phone 30. . Then, the mobile phone number of the mobile phone 30 is detected and notified to the AP server 11 by the phone number detection function of the phone 402 to which the unlocking phone number is assigned. The AP server 11 acquires the mobile phone number notified by the telephone 402 (step S11). The AP server 11 also acquires the password input from the mobile phone 30 by the operation of the user 31 in response to the voice message that prompts the password input (step S12).

  The AP server 11 searches the authentication table 121 for an authentication information record 121R that includes the user number that matches the acquired mobile phone number and the password that matches the acquired password and has the key No flag “0” ( Step S13). If there is no corresponding authentication information record 121R (step S14), the AP server 11 returns an error message indicating that the scheduled entry / exit registration has not been performed to the mobile phone 30 by the mail notification 407 as a response to the key opening inquiry 401. (Step S15). In addition, since there is no user information record 123R including the user number that matches the acquired mobile phone number, when the mail address of the user of the mobile number cannot be acquired, it is an unauthorized unlocking inquiry 401. There is no need to respond to the inquiry 401. An error message by voice may be returned.

  On the other hand, if there is a corresponding authentication information record 121R (step S14), the AP server 11 applies an adaptation period determined by the unlocking use date and the unlocking use time in the record 121R (unlocking use date and time ~ The key opening use date + key opening use time) is compared with the current time (step S16). The AP server 11 determines from the result of this comparison whether the current time is within the adaptation period (step S17). If the current time is outside the range of the adaptation period, the AP server 11 returns an error message indicating that it is outside the scheduled time to the mobile phone 30 by the mail notification 407 (step S18).

  On the other hand, if the current time is within the range of the adaptation period, the user information record 123R including the user number that matches the acquired mobile phone number is searched from the user information table 123, and the corresponding record 123R is applicable. The mobile mail address of the user 31 is acquired (step S19). In this step S19, the AP server 11 uses the key sequence number in the authentication information record 121R as a key, and searches the key information table 124 for a key information record 124R including the key sequence number that matches the key sequence number. The encrypted key No is acquired from 124R. In step S19, the AP server 11 sends a mail notification (key No notification) 407 for notifying the acquired key No. to the mobile phone 30 of the user 31 by mail using the acquired mobile mail address (see FIG. 4). Execute.

  If a transmission error occurs in the mail notification (key No notification) 407 (step S20), the AP server 11 changes the key No notification flag in the authentication information record 121R to “2” indicating an error (step S21). ). Then, the AP server 11 generates a system alert for the administrator terminal 40 (step S22), and ends the authentication process for the corresponding unlock key inquiry 401. On the other hand, if no transmission error has occurred (step S20), the AP server 11 ends the authentication process for the corresponding key opening inquiry 401 as it is.

Next, the procedure of the key number changing process by the AP server 11 according to the key number changing application 113 will be described with reference to the flowchart of FIG.
The AP server 11 searches the key information table 124 for all the key information records 124R including the key No that should be the target of the current key No change process (Step S31). Here, the key information record 124R including the key No to be subjected to the key No change processing is the key No latest update time and the key No change scheduled time indicated by the key No change interval in the record 124R, that is, “Key The time indicated by “No latest change time + key No change interval” is older than the current time, and the key No unchanged flag in the record 124R indicates the key information record 124R of “0” indicating that the key No has been changed. If even one corresponding key information record 124R can be searched (step S32), the AP server 11 repeats the following processing for each searched key information record 124R in units of records.

  The AP server 11 issues a key No with a random number and encrypts it (step S33). In this step S33, the AP server 11 changes the key No in the corresponding key information record 124R to the issued encrypted key No. At this time, the AP server 11 updates the latest key No. change time in the key information record 124R to the current time. In step S <b> 33, the AP server 11 also reflects the change in the key No. on the number input device 410. That is, the AP server 11 changes the key number set in the number input device 410 to the encrypted key number.

  The AP server 11 repeatedly executes the above-described processing according to the key number changing application 113 while sleeping for a certain time (for example, 10 minutes) (step S34). However, the repetition here is not necessarily performed constantly, as in the process according to the notification application 111 described above.

Next, the procedure of the adaptation period monitoring process by the AP server 11 according to the adaptation period monitoring application 114 will be described with reference to the flowchart of FIG.
The AP server 11 refers to the key information table 124 and determines the key opening use date and time (key opening use start date and time) and the key opening use time included in each authentication information record 121R in the table 124. The opening use end date and time (key opening use date and time + key opening use time) is compared with the current time (step S41). Then, the AP server 11 sets the key No notification flag to “0” for all the authentication information records 121R whose key opening notification end date is older than the current time and whose key No notification flag is “0” indicating unprocessed. "Is changed to" 1 "indicating that processing has been completed (step S42).

  The AP server 11 repeatedly executes the above-described processing according to the adaptation period monitoring application 114 while sleeping for a predetermined time (for example, 10 minutes) (step S43). However, the repetition here is not necessarily performed constantly, as in the process according to the notification application 111 described above.

  Next, the procedure of authentication history storage processing by the AP server 11 according to the authentication history storage application 115 will be described with reference to the flowchart of FIG. This authentication history saving process is a kind of batch process, and is performed once a day, for example.

  The AP server 11 deletes from the authentication history table 122 all authentication history records 122R whose “history erasure date / time” is older than the current time as past unnecessary data (step S51). The history deletion date / time information is set so as to indicate “registration date / time + certain period (for example, one month)” when the authentication history record 122R is registered as described below.

  Next, from the authentication table 121, the AP server 11 stores all authentication information records 121R whose key No notification flag is not “0”, that is, all “1” indicating that the key No notification flag has been processed or “2” indicating an error. Authentication information record 121R is selected as an authentication history storage target record, and predetermined items in the authentication information record 121R, for example, user number, key opening use date, key opening use time, information notification desired date, key serial number, registration An authentication history record 122R including the user and the registration date is generated and stored in the authentication history table 122 (step S52). In this step S52, the AP server 11 sets the current time + a predetermined period (here, one month) as the history erasure date / time in the authentication history record 122R. Next, the AP server 11 deletes from the authentication table 121 all the authentication information records 121R that are targets of history storage in step S52 (step S53).

  The entrance / exit management system 10 described above can be applied as a new entrance / exit management system for the purpose of improving security to companies that perform entrance / exit management using a conventional card reader or the like. The entrance / exit management system 10 can also be applied as a new entrance / exit management system for the purpose of improving security even for buildings and condominiums that have been subjected to security management by conventional auto-locking or the like. Moreover, if a large scale DB server is used as the DB server 12, the entrance / exit management system 10 can be applied as an entrance / exit management system for a general household operated by a security company, for example.

  Note that the present invention is not limited to the above-described embodiment as it is, and can be embodied by modifying the constituent elements without departing from the scope of the invention in the implementation stage. Further, various inventions can be formed by appropriately combining a plurality of constituent elements disclosed in the embodiment. For example, some components may be deleted from all the components shown in the embodiment.

The block diagram which shows the structure of the entrance / exit management system 10 which concerns on one Embodiment of this invention. FIG. 2 is a diagram showing an example of a data format of records stored in an authentication table 121, an authentication history table 122, a user information table 123, and a key information table 124 that the DB server 12 of FIG. The figure which shows the flow of operation | movement from the prior entrance / exit application by the user 31 to the notification of the key opening information with respect to the user 31 by the entrance / exit management system. The figure which shows the flow of operation | movement from the inquiry for unlocking to unlocking. The figure which shows the example of a screen for managers required for entrance / exit management. The figure which shows the example of a display of the mail notified to the mobile telephone 30 of the user 31 from the entrance / exit management system 10. FIG. The flowchart which shows the procedure of the information notification process for unlocking by the AP server 11 according to the notification application 111. The flowchart which shows the procedure of the authentication process by AP server 11 according to the authentication application 112. FIG. The flowchart which shows the procedure of the key number change process by AP server 11 according to the key number change application 113. FIG. The flowchart which shows the procedure of the adaptation period monitoring process by AP server 11 according to the adaptation period monitoring application 114. FIG. The flowchart which shows the procedure of the authentication history preservation | save process by AP server 11 according to the authentication history preservation | save application 115. FIG.

Explanation of symbols

  DESCRIPTION OF SYMBOLS 10 ... Entrance / exit management system, 11 ... AP server (application server), 12 ... DB server (database server), 30 ... Mobile phone, 31 ... User, 40 ... Administrator terminal, 41 ... Entrance / exit management GUI (entrance / exit management) Graphical user interface), 42 ... Administrator, 111 ... Notification application (notification application, first notification means), 112 ... Authentication application (authentication means, second notification means), 113 ... Key No (key number) change application, 114: Adaptation period monitoring application, 115 ... Authentication history storage application, 121 ... Authentication table, 122 ... Authentication history table, 123 ... User information table, 124 ... Key information table.

Claims (12)

An entrance / exit management system for managing entrance / exit of a user who owns a mobile phone,
Usage schedule period information indicating the scheduled usage period of the user in association with the user who is scheduled to enter / exit the location where entry / exit management is required and the key required for unlocking the location. And an authentication information storage means for storing authentication information including a password used for authenticating the user when inquiring the key number of the key from the user to the entrance / exit management system,
User information storage means for storing user information including the mobile phone number of the mobile phone owned by the user for each user;
Key information of a key necessary for unlocking for entering and leaving a place where entry / exit management is required, and key information storage means for storing key information including the key number of the key,
Prior to the scheduled use period indicated by the scheduled use period information in the authentication information stored in the authentication information storage means, the user's mobile phone associated with the authentication information is included in the authentication information. First notifying means for notifying the unlocking information including the current password;
When a specific unlocking phone number is dialed from the user's mobile phone, the mobile phone number of the user's mobile phone is acquired and transmitted from the mobile phone in response to the user's input operation. An authentication means for obtaining a password and performing user authentication based on the mobile phone number and the password and the mobile phone number included in the user information and the password included in the authentication information;
When it is confirmed by the authentication means that the user is a valid user, if it is within the scheduled use period indicated by the scheduled use period information in the authentication information used for authentication, it is associated with the authentication information. A second notification means for taking out the key number of the existing key from the key information of the key and notifying the key number of the key to the user's mobile phone authenticated by the authentication means. system. The key information includes, in addition to the key number, the specific unlocking phone number used for dialing for user authentication necessary for notification of the key number,
In addition to the password included in the authentication information, the first notification means includes a key including the specific unlocking telephone number included in the key information of the key associated with the authentication information. The entrance / exit management system according to claim 1, wherein opening information is notified.   In addition to the password and the specific unlocking telephone number, the first notifying unit notifies unlocking information including information indicating an available period corresponding to the scheduled use period. The entrance / exit management system according to claim 2. The authentication information represents a timing for notifying the user's mobile phone associated with the authentication information of the key opening information including the password included in the authentication information prior to the scheduled use period. Including notification time information indicating the notification time desired by the user,
The first notification means notifies unlocking information including a password included in the authentication information at a timing indicated by the notification time information included in the authentication information. The entry / exit management system described. The user information includes a user's mobile mail address indicated by the user information,
The first and second notifying means notify the user's mobile phone of the unlocking information and the key number, respectively, based on the mobile mail address included in the user information of the user. The entry / exit management system according to claim 1, wherein transmission is used.   The entrance / exit management system according to claim 1, further comprising key number changing means for changing the key number included in the key information stored in the key information storage means at regular intervals.   The key number changing means changes the key number included in the key information in a shorter period as the level is higher in accordance with a security level required for a location to which a key indicated by the key information is applied. The entrance / exit management system according to claim 6. The key information includes a key number change interval as a time interval for changing the key number included in the key information, which is determined according to a security level required at a location where the key indicated by the key information is applied. Further including key number change interval information to indicate,
The entrance / exit management according to claim 7, wherein the key number changing means changes the key number included in the key information at a time interval indicated by the key number change interval information included in the key information. system. The key information includes key number change flag information indicating whether to change the key number included in the key information,
When the key number change flag information included in the key information indicates that the key number is not changed, the key number changing means includes the key number changing means included in the key information regardless of the key number change interval information. 9. The entrance / exit management system according to claim 8, wherein the key number is not changed. The authentication information is key number notification flag information indicating a notification state of a key number included in the key information of a key associated with the authentication information, and includes key number notification flag information indicating that notification is not performed in an initial state. In addition,
The entrance / exit management system has a scheduled use period indicated by the scheduled use period information included in the authentication information among all the authentication information stored in the authentication information storage unit, and is older than a current time, and The key number notification flag information included in the authentication information is searched for authentication information indicating that the notification is not performed, and the key number included in the key information of the key associated with the authentication information is within the scheduled use period. Further comprising monitoring means for forcibly changing the key number notification flag information from a state indicating that notification is not performed to a state indicating that notification has been performed,
When the key number notification flag information included in the authentication information used for user authentication is in a state indicating that the notification has been performed, the authentication unit uses the current time included in the authentication information. The entrance / exit management system according to claim 6, wherein the user authentication failure is determined as being out of the scheduled use period indicated by the scheduled period information. Authentication history information storage means for storing authentication history information;
From the authentication information storage means, select authentication information including the key number notification flag information in a state indicating that the notification is not performed, and at least a part of the authentication information excluding the password is stored in the authentication history The entrance / exit management system according to claim 10, further comprising authentication history storage means for storing information in the history information storage means as information. Usage schedule period information indicating the scheduled usage period of the user in association with the user who is scheduled to enter / exit the location where entry / exit management is required and the key required for unlocking the location. And an authentication information storage means for storing authentication information including a password used for authentication of the user when inquiring the key number of the key from the user to the entry / exit management system, and for each user, User information storage means for storing user information including a mobile phone number of a mobile phone that is owned, and key information of a key necessary for unlocking for entry / exit to a place where entry / exit management is required, Entrance / exit tube for managing entry / exit of a user who owns a mobile phone, applied to an entrance / exit management system comprising key information storage means for storing key information including the key number of the key There is provided a method,
Prior to the scheduled use period indicated by the scheduled use period information in the authentication information stored in the authentication information storage means, the user's mobile phone associated with the authentication information is included in the authentication information. Notifying the unlocking information including the current password;
Obtaining a mobile phone number of the user's mobile phone when a specific unlocking phone number is dialed from the user's mobile phone; and
Acquiring a password transmitted in response to the user's input operation from the mobile phone of the acquired mobile phone number;
Performing user authentication based on the acquired mobile phone number and password and the mobile phone number included in the user information and the password included in the authentication information;
Only when it is confirmed that the user is a valid user in the user authentication step and is within the scheduled use period indicated by the scheduled use period information in the authentication information used for authentication, it is associated with the authentication information. A key number of the key being taken out from the key information of the key, and notifying the key number to the mobile phone of the user who has been authenticated in the step of performing the user authentication. Method.

Images