JP2008033922A - Equipment use management system and method therefor - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an equipment use management system which restricts the use range of equipment by each user. <P>SOLUTION: In an IC card 100 held by a user, permission data 199 in which functional codes indicating functions of IC card management type equipment 500 permitted to the user are enumerated is stored. The IC card management type equipment 500, when an operation by a user to request use of the functions is accepted, reads the permission data 199 from the IC card 100 and transmits decision request data including an operation code indicating the operation of the user and the permission data 199 to a management server device 700. The management server device 700 has a database 710 in which the operation codes of the IC card management type equipment 500 are correlated, when a functional code corresponding to the operation code included in the decision request data is included in the permission data 199, returns an execution permit indicating permission of the function corresponding to the operation code to the IC card management type equipment 500 and the IC card management type equipment 500 executes the function whose use is requested by the user. <P>COPYRIGHT: (C)2008,JPO&INPIT

Description

  The present invention relates to a system for managing facility use according to a facility user and a method thereof.

  Conventionally, management of users who use equipment (for example, office equipment) has been performed from the aspects of confidentiality management and cost management.

For example, Patent Document 1 discloses a technique for managing entry / exit of a user using an IC card and granting the use permission of equipment installed in the room to the user who has entered the room correctly. (Prior art 1)
Japanese Patent Laying-Open No. 2005-1003009 (pages 9 to 11, FIGS. 5 and 6)

  However, in the prior art 1, there is a problem that it is not possible to restrict the use range of a user who has correctly entered a room in which equipment such as a computer is installed.

  For example, when the equipment is a computer, various applications such as document creation software and mail software are often installed on the computer, and if the user is allowed to use the computer, all applications installed on the computer It was not allowed to use only mail software installed on the computer.

  Therefore, the present invention has been made in consideration of such a conventional technique, and an object of the present invention is to provide an equipment use management system and a method thereof that can limit the use range of equipment for each user. It is to be.

  The present invention solves the problems of the present invention by the following means. The invention of claim 1 is an equipment use permission system comprising an IC card possessed by a user, an IC card management type equipment whose use is managed using the IC card, and a management server device, The IC card stores the permission data in which a function code indicating the function of the IC card management facility permitted by the user is stored, and transmits permission data from the IC card management facility. When receiving a request, it comprises permission data return means for returning the permission data stored in the storage means, and the IC card management equipment requests the user to use the function of the IC card management equipment. An operation receiving means for receiving an operation, and a permission data requesting the IC card to transmit the permission data when the operation receiving means receives the user's operation. Data transmission request means, permission data receiving means for receiving the permission data from the IC card, an operation code indicating the user's operation received by the operation receiving means, and the permission data received from the IC card; The determination request data including the determination request data is transmitted to the management server device, and the user accepts the execution permission of the user's operation from the management server device. A function execution unit that executes a function of the IC card type management facility requested to be used; and the management server device includes a determination request reception unit that receives the determination request data from the IC card management type facility, the operation code, and the When the database storing the function code in association with the determination request receiving unit receives the determination request data, Permission determination means for referring to the database, searching for the function code corresponding to the operation code included in the determination request data, and confirming whether the searched function code is included in the permission data of the determination request data And only when the retrieved function code is included in the permission data of the determination request data, an execution permit indicating permission to use the function corresponding to the operation code included in the determination request data is obtained. Is a facility use permission system, comprising a permit issuing means for transmitting to the IC card management type facility that has transmitted

  Further, the invention of claim 2 is a facility use permission method for managing the use of a user for each function of the facility, wherein the facility receives an operation for requesting the user to use the function of the facility. A step of reading permission data in which a function code indicating a function of the facility permitted by the user is read from an IC card possessed by a user who operates the facility, and the facility is executed by the user Generating determination request data including an operation code indicating an operation and the permission data read from the IC card, and transmitting the determination request data to a management server device connected to a network; the management server device is included in the determination request data The function requested by the user is identified from the operation code, and the function code corresponding to the identified function is the permission data of the determination request data. A step of confirming whether the function code corresponding to the specified function is included in the permission data of the determination request data, and generating an execution permit indicating the permission of the function specified by the operation code And the step of transmitting the execution permit to the facility that has transmitted the determination request data, and the step of receiving the execution permit to execute the function requested by the user. This is a facility use permission method characterized by being made.

  According to the above-described invention, the function code indicating the function of the IC card type management facility permitted to the user is stored in the IC card possessed by the user, and the management server apparatus By confirming whether or not the function code corresponding to the operation code indicating the user's operation is stored in the IC card, the user can use the function code included in the permission data stored in the IC card. Only the functions of the IC card management type equipment specified in (1) can be used.

  Furthermore, since the management server manages the correspondence between the operation code and the function code when executing the function of the IC card management type equipment, even if the IC card management type equipment is updated or changed, There is also an effect that it is not necessary to rewrite the contents of the permission data stored in the IC card possessed by the user.

  According to the above-described present invention, it is possible to provide an equipment use management system and a method for limiting the use range of equipment for each user.

(Example)
Hereinafter, embodiments of the present invention will be described in more detail with reference to the drawings. FIG. 1 is a diagram for explaining the outline of the facility use permission system 1.

  The equipment use permission system 1 includes an IC card 100 possessed by a user, an IC card management type equipment 500 whose use is managed by using the IC card 100, and a management server device 700. The IC card type management equipment 500 and the management server device 700 are connected via a network. The IC card 100 possessed by the user may be either a contact type or a non-contact type.

  The IC card management type equipment 500 is equipment for managing the use of the user by using the IC card 100 possessed by the user. For example, the IC card management type printing device 500a and the IC card management type safe 500b. IC card management type entrance / exit gate 500c, IC card management type personal computer 500d, and the like.

  The IC card 100 stores permission data 199 of the user who owns the IC card 100. The permission data 199 is data in which function codes indicating functions of the IC card management type equipment 500 permitted by the user who owns the IC card 100 are listed.

  The IC card management type equipment 500 is provided with an IC card reader 501. When the user accepts an operation for requesting the use of a function, the IC card management type equipment 500 is stored in the IC card 100 possessed by the user. The permission request data 199 is read, and determination request data including the operation code indicating the user's operation and the permission data 199 read from the IC card 100 is transmitted to the management server device 700.

  The management server device 700 includes a database 710 in which a function code indicating the function of the IC card management facility 500 and an operation code of the IC card management facility 500 are associated with each other, and determination request data is transmitted from the IC card management facility 500. Then, the function code corresponding to the operation code included in the determination request data is identified with reference to the database 710, and if the identified function code is in the permission data 199 of the determination request data, the function code corresponding to the operation code is identified. An execution permit indicating permission is returned to the IC card management facility 500 that has transmitted the determination request data.

  Only when the execution permission is received from the management server device 700, the IC card management type facility 500 executes the function requested by the user.

  FIG. 2 is a diagram for explaining the flow of processing of the facility use permission system 1.

  The IC card management type facility 500 (for example, the IC card management type safe 500b) accepts an operation for requesting the use of the function of the IC card management type facility 500 (for example, unlock request for the safe) from the user (FIG. 2 (1)). )), The IC card management facility 500 requests the IC card 100 possessed by the user to transmit the permission data 199 ((2)).

  When the IC card 100 receives a transmission request for permission data 199 from the IC card management facility 500, the IC card 100 returns the permission data 199 stored in the IC card 100 to the IC card management facility 500 ((3)).

  When the IC card management facility 500 receives the permission data 199 from the IC card 100 ((4)), the IC card management facility 500 receives the operation code indicating the user's operation and the permission received from the IC card 100. The determination request data including the data 199 is transmitted to the management server device 700 ((11)).

  When the management server device 700 receives the determination request data from the IC card management type equipment 500 ((12)), the management server device 700 refers to the database 710 and adds the operation code included in the received determination request data. The corresponding function code is specified, whether or not the specified function code is included in the permission data 199 of the determination request data, and only when the specified function code is included in the permission data 199 of the determination request data An execution permit permitting the execution of the process corresponding to the operation code included in is returned to the IC card management facility 500 ((13)).

  When the IC card management type equipment 500 receives the execution permit from the management server device 700 (same as (14)), the IC card management type equipment 500 performs a process corresponding to the user's operation (for example, locking of a safe). (15).

  FIG. 3 is a detailed configuration diagram of the management notification system 1. The management notification system 1 includes an IC card 100, an IC card management type facility 500, and a management server device 700.

  The IC card 100 receives the permission data 199 stored in the storage unit 190 when the storage unit 190 storing the permission data 199 and the transmission request of the permission data 199 from the IC card management type facility 500 are received. Permission data reply means 130 for replying to 500 is provided. The permission data return means 130 of the IC card 100 is realized by, for example, a command mounted on the IC card 100, and the storage means 190 of the IC card 100 is a memory.

  The IC card management type facility 500 includes an operation receiving unit 510, a permission data transmission request unit 520, a permission data receiving unit 530, a determination request unit 540, and a function execution unit 550.

  The operation accepting unit 510 is a unit that accepts an operation of a user requesting to use the function of the IC card management type equipment 500, and is realized by the user interface of the IC card management type equipment 500.

  The permission data transmission request unit 520 is a unit that transmits a command to the IC card 100 via the IC card reader 501 and requests the IC card 100 to transmit the permission data 199. The permission data reception unit 530 includes This is a means for receiving a response from 100 and acquiring permission data 199 included in the response.

  The determination request unit 540 generates determination request data including the operation code indicating the user's operation received by the operation receiving unit 510 and the permission data 199 received from the IC card 100, and the generated determination request data is stored in the management server. A means for transmitting to the device 700 is realized by a computer program installed in the IC card management facility 500.

  The function execution unit 550 is a unit that receives an execution permit from the management server device 700 and executes a process corresponding to the user's operation received by the operation reception unit 510. The function execution unit 550 is an IC card management type facility. The implementation method is different for each of the 500 functions.

  For example, when the IC card management type facility 500 is an IC card management type safe 500b, the function execution means 550 becomes a physical means for unlocking the IC card management type safe 500b, and the IC card management type facility 500b. When 500 is the IC card management type personal computer 500d, the function execution means 550 is a computer program for starting an application program (such as document creation software) installed in the IC card management type safe 500b.

  The management server device 700 includes a database 710, a usage determination receiving unit 740, a permission determining unit 750, and a permit issuing unit 760.

    As described above, the database 710 is a database in which the function code indicating the function of the IC card management type equipment 500 and the operation code of the IC card management type equipment 500 are associated with each other.

  The usage determination receiving unit 740 is a unit that receives determination request data from the IC card management type facility 500. When the usage determination reception unit 740 receives the determination request data, the permission determination unit 750 refers to the database 710, identifies the function code corresponding to the operation code included in the determination request data, and stores it in the permission data 199 of the determination request data. It is confirmed whether the specified function code is included, and only when the specified function code is included in the permission data 199 of the determination request data, the IC card management-type facility 500 that has generated the execution permit and transmitted the determination request data Is a means for transmitting an execution permit.

  Each unit of the management server device 700 is realized by a computer program installed in the management server device 700, and the database 710 is realized by a storage device such as a hard disk.

  From here, the example which manages the utilization of the IC card management type equipment 500 for every function using the permission data 199 memorize | stored in the IC card 100 is demonstrated.

  FIG. 4 is a diagram illustrating an example of a function code. As described above, the permission data 199 describes the function code of the IC card management type equipment 500 permitted by the user, and this function code indicates the type of the IC card management type equipment 500 and the IC card management type equipment 500. Systematic codes are used for each type-specific function.

  According to FIG. 4, in the personal computer, the value of the function code corresponding to the start of the document creation software is “11” and the value of the function code corresponding to the start of the mail software is “12”. The corresponding function code value is “13”, the function code value corresponding to browser activation is “14”, the function code value corresponding to file saving is “15”, and corresponds to the print output command. The value of the function code is “16”.

  Further, in the printing apparatus, the value of the function code corresponding to printing is “21”, in the copying apparatus, the value of the function code corresponding to copying is “31”, and in the scanner, the value of the function code corresponding to the scanner is “41”.

  Furthermore, in FAX, the value of the function code corresponding to FAX reception is “51”, and the value of the function code corresponding to FAX transmission is “52”.

  Furthermore, the value of the function code corresponding to the shooting by the monitoring camera is “61”, and the value of the function code corresponding to browsing of the image captured by the monitoring camera is “62”.

  Further, in the safe, the value of the function code corresponding to unlocking is “71”, and in the entrance / exit gate, the value of the function code corresponding to passage permission is “81”.

  FIG. 7 is a diagram for explaining the database 710 provided in the management server device 700. As shown in FIG. 7, in the database 710 provided in the management server device 700, the user operates the IC card management type equipment 500 in order to use the functions of the IC card management type equipment 500 shown in FIG. The function code is stored in association with the operation code for specifying the operation by the IC card management facility 500.

  For example, when a user clicks an icon of the document creation software to start the document creation software on a personal computer, the function code corresponding to the activation of the document creation software is associated with the operation code for specifying the clicked icon. “11” is stored.

  The function codes illustrated in FIG. 4 are systematic codes for each type-specific function of the IC card management type equipment 500. Therefore, even if the IC card management type equipment 500 is different, if the functions are the same, Same function code.

  For example, in FIG. 7, the value of the function code corresponding to the operation code when printing with the printer 1 and the value of the function code corresponding to the operation code when printing with the printer 2 are the same as “21”.

  5 and 6 are usage examples of the IC card management type facility 500 using the permission data 199. FIG.

  FIG. 5 is an example of permission data 199. In FIG. 5, the permission data 199a for the sales employee A includes “11”, “12”, “13”, “14”, “15”, “16” as function codes. , “21”, “31”, “41”, “51”, “52”, and “81” are described (FIG. 5A).

  Similarly, in the permission data 199b for contract employee B, function codes “11”, “12”, “14”, “15”, “16”, “21”, “ “31”, “41”, “51”, “52”, and “81” are described ((2)).

  Also, in the permission data 199c for the security employee C, “61”, “62”, and “81” are described as function codes ((3)).

  Further, in the permission data 199d for the accounting employee D, “71” and “81” are described as function codes ((4)).

  FIG. 6 shows an example of IC card management type equipment use by a user.

  FIG. 6 shows an IC card management type entrance / exit gate 500c, an IC card management type printing device 500a, an IC card management type safe 500b, an IC card management type personal computer 500d, an IC card management type monitoring camera 500e, an IC An office room in which a card management type copying apparatus 500g, an IC card management type scanner apparatus 500h, and an IC card management type multifunction peripheral (FAX / copying) 500j are installed is shown.

  The IC card management type entrance / exit gate 500c corresponds to the function code having a value of “81”, has a function of managing the user's entry, and when the user performs an operation to enter the room, The determination request data including the permission data 199 read from the IC card 100 possessed by the user is transmitted to the management server device 700, and the management server device 700 is requested to determine whether or not the user is allowed to enter the room.

  The IC card management type printing apparatus 500a corresponds to the function code whose value is “21”, has a function of managing the printing of the user, and when the user performs an operation of printing, the operation code and the use The determination request data including the permission data 199 read from the IC card 100 possessed by the user is transmitted to the management server device 700, and the management server device 700 is requested to determine whether or not the user is permitted to print.

  The IC card management type safe 500b has a function of managing the unlocking of the user corresponding to the function code having the value “71”, and when the user performs an unlocking operation, The determination request data including the permission data 199 read from the IC card 100 possessed by the user is transmitted to the management server device 700, and the management server device 700 is requested to determine whether to permit the user to unlock.

  The IC card management type personal computer 500d corresponds to the function code having a value of “11”, manages the activation of the document creation software, and corresponds to the function code of the value “12”, and activates the mail software. A function for managing, a function for managing a mail transmission corresponding to a function code having a value of “13”, a function for managing a browser activation corresponding to a function code having a value of “14”, and a value Corresponding to a function code whose value is “15” and a function for managing saving of a file and a function corresponding to a function code whose value is “16” and a function for managing a print output command. When an operation using the above function is performed, determination request data including an operation code corresponding to the user's operation and permission data 199 read from the IC card 100 possessed by the user is transmitted to the management server device 700. To request permission determination of the function used by the user to the management server device 700.

  The IC card management type surveillance camera 500e corresponds to the function code having a value of “61” and manages the start of video shooting, and corresponds to the function code having a value of “62” to view the shot video. A determination that includes an operation code corresponding to the user's operation and permission data 199 read from the IC card 100 possessed by the user when the user performs an operation using these functions. The request data is transmitted to the management server device 700, and the management server device 700 is requested to determine whether or not the function of the user is permitted.

  The IC card management type copying apparatus 500g corresponds to a function code having a value of “31” and has a function of managing the copying of the user. When the user performs the copying operation, the operation code and the usage code are used. The determination request data including the permission data 199 read from the IC card 100 possessed by the user is transmitted to the management server apparatus 700, and the management server apparatus 700 is requested to determine whether to permit copying of the user.

  The IC card management type scanner device 500h corresponds to a function code whose value is “41”, has a function of managing the user's scanner, and when the user performs an operation of scanning, The determination request data including the permission data 199 read from the IC card 100 possessed by the user is transmitted to the management server device 700, and the management server device 700 is requested to determine permission of the user's scanner.

  The IC card management type MFP (FAX / copy) 500j corresponds to a function code having a value of “31”, a function for managing copying of the user, and a function code having values of “51” and “52”. And a function for managing the FAX transmission / reception of the user, and when the user performs an operation using these functions, an operation code corresponding to the operation of the user and the IC card 100 possessed by the user. The determination request information including the permission data 199 read from is transmitted to the management server device 700, and the management server device 700 is requested to determine whether to permit the user's function.

  According to the permission data 199 illustrated in FIG. 5, the sales employee A uses the IC card 100 storing the permission data 199a, so that the IC card management type entrance / exit gate 500c, the personal computer 500d, the printing device 500a, The copying function and the FAX transmission / reception function of the copying apparatus 500g, the scanner apparatus 500h, and the multifunction peripheral (FAX / copying) 500j can be used.

  Further, the contract employee B uses the IC card 100 storing the permission data 199b, so that the IC card management type entrance / exit gate 500c, a predetermined function excluding the mail transmission function of the personal computer 500d, the printing apparatus 500a, The copying function and the FAX transmission / reception function of the copying apparatus 500g, the scanner apparatus 500h, and the multifunction peripheral (FAX / copying) 500j can be used.

  Furthermore, the guard employee C can use the IC card management type entrance / exit gate 500c and the monitoring camera 500e by using the IC card 100 storing the permission data 199c.

  Furthermore, the accounting employee D can use the IC card management type entrance / exit gate 500c and the safe 500a by using the IC card 100 storing the permission data 199d.

  Next, it will be described that there is no need to change the setting of the facility use permission system 1 when the IC card management facility 500 is updated.

  For example, even if the printing device 500a, the copying device 500g, and the scanner device 500h are replaced with a multifunction device (printing / copying / scanner) having the same function, the contents of the database 710 provided in the management server device 700 are changed. Only by changing the operation code of the multi-function peripheral, the user can use only functions that have been permitted conventionally without changing the permission data 100 stored in the IC card 100.

  In other words, from the viewpoint of the user, even if the equipment is replaced, functions other than those permitted are not usable. This also means that the facility installation manager and the facility operations manager do not have the trouble of registering the user's settings for the replaced multifunction machine.

  As described above in detail, according to the present invention, it is possible to grant the equipment use permission for each user by limiting the use range of the function of the equipment.

Overall configuration of equipment usage permission system. The figure which showed the flow of the process of an equipment utilization permission system. The detailed block diagram of an equipment use permission system. The figure which showed an example of the function code. The figure which showed an example of permission data. The figure which showed an example of IC card management type equipment utilization by the user. The figure explaining a database.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 Equipment use permission system 100 IC card 130 Authorization data return means 190 Storage means 199 Authorization data 500 IC card management type equipment 500a IC card management type printing device 500b IC card management type safe 500c IC card management type entrance / exit gate 500d IC card management Type PC 500e IC card management type surveillance camera 500g IC card management type copying device 500h IC card management type scanner device 500j IC card management type multi-function machine (FAX / copying)
500k MFP (printing / copying / scanner)
510 Usage request reception means 520 Permit data transmission request means 530 Permit data reception means 540 Determination request means 550 Function execution means 700 Management server device 710 Database 740 Usage determination reception means 750 Permit determination means 760 Permit issue means

Claims (2)

  A facility use permission system comprising an IC card possessed by a user, an IC card management type facility whose use is managed using the IC card, and a management server device, wherein the IC card When the permission data transmission request is received from the storage means for storing the permission data in which the function code indicating the function of the IC card management facility permitted to the person is described, and the IC card management facility, And a permission data return means for returning the permission data stored in the storage means, wherein the IC card management equipment is an operation reception means for accepting an operation for requesting the user to use a function of the IC card management equipment. Permission data transmission requesting means for requesting the IC card to transmit the permission data when the operation accepting means accepts the user's operation; Determination request data including permission data receiving means for receiving the permission data from the IC card, an operation code indicating the operation of the user received by the operation receiving means, and the permission data received from the IC card. A determination requesting means for generating and transmitting the generated determination request data to the management server device; and the IC card requested by the user to be used when the execution permission of the user's operation is accepted from the management server device A function execution unit that executes a function of the type management facility, wherein the management server device associates the determination request reception unit that receives the determination request data from the IC card management type facility, the operation code, and the function code. When the stored database and the determination request receiving means receive the determination request data, the database is A permission determination means for searching for the function code corresponding to the operation code included in the determination request data and confirming whether the searched function code is included in the permission data of the determination request data; Only when the function code is included in the permission data of the determination request data, the determination request data is transmitted with an execution permit indicating the use permission of the function corresponding to the operation code included in the determination request data. A facility use permission system comprising a permit issuing means for transmitting to the IC card management type facility. A facility use permission method for managing the use of a user for each function of the facility, wherein when the facility receives an operation that the user requests to use the facility function, a user operating the facility Reading permission data describing a function code indicating the function of the facility permitted to the user from an IC card possessed, an operation code indicating an operation performed by the user by the facility, and the IC Generating determination request data including the permission data read from the card, and transmitting the determination request data to a management server device connected to a network; the management server device is configured by the user from the operation code included in the determination request data; Identify the requested function and confirm whether the function code corresponding to the identified function is included in the permission data of the determination request data When the function code corresponding to the specified function is included in the permission data of the determination request data, an execution permit indicating permission of the function specified by the operation code is generated, and the determination request data Transmitting the execution permit to the facility that has transmitted the function, and the facility that has received the execution permit performs a function requested by the user to be used. How to use the facility.

Images