JP2008225714A - Equipment management system - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an equipment management system capable of preventing unauthorized use of equipment by not allowing use when the mobile equipment is unauthorizedly moved from a room of an installation destination to another room. <P>SOLUTION: In this equipment management system, an access management device has: an information storage medium; a means for reading a card ID from the information storage medium, and allowing access from a gate when authentication is received; and a means for writing a passage gate ID into the information storage means. The mobile equipment has an authenticating device having a storage means and a read/write means. The storage means of the authenticating device stores: a setting-completing program making processing for making a gate ID be stored be executed when the passage gate ID and the gate ID are read from the information storage medium, are collated and accord; and a use-management program making it perform unusably it when the gate ID stored in the authenticating device and the passage gate ID read from the information storage medium are collated and accord when the installed mobile equipment is used. <P>COPYRIGHT: (C)2008,JPO&INPIT

Description

  The present invention prevents unauthorized use of a device by preventing the device from being used when a mobile device installed and installed in a room where the installation is scheduled is illegally moved to another room. The present invention relates to a device management system that can be used.

In recent years, against the backdrop of measures such as the Japanese version of the SOX method, the appropriateness of finance-related fixed asset management and office equipment management has become more important.
Therefore, when moving to another building or the like, it is necessary to consider making it possible to accurately grasp the storage location of the mobile device.
Conventionally, for such reasons as well, an asset management system is known in which the installation status of devices such as various OA devices that are the targets of asset management can be easily and efficiently confirmed. (For example, see Patent Document 1)

In recent years, the proportion of office equipment such as personal computers has increased in the fixed assets, and it is important to thoroughly manage the use of such personal computers in terms of information security measures.
For example, if an unauthorized access is made after a third party illegally moves a personal computer installed in a predetermined room, information leakage, destruction, or alteration of information is performed. It also includes the risk of being caught.
In particular, if there is a large amount of fixed assets to be moved along with moving, it is expected that it will be easy to move a computer once installed to another place illegally, taking advantage of the confusion of moving, and then the computer Although there is a risk that illegal activities such as unauthorized access will be performed using, there is a problem that there is no technology to prevent or prevent them.

JP 2004-295406 A

  Therefore, the present invention prevents the use of the device when the mobile device that is carried in and installed in the room where the installation is planned is illegally moved from the installation destination room to another room. And a device management system capable of preventing unauthorized use of the device.

  In the device management system of the present invention, when a mobile device to be newly installed in a planned room is illegally moved from the installation destination room to another room, the device cannot be used. A device management system that prevents unauthorized use of the information storage device, the information storage medium for the resident who has storage means in which the card ID, the mobile device ID, and the gate ID of the installation destination room are stored; , Means for reading a card ID from the information storage medium, performing an authentication process based on the card ID, and enabling the entry from the gate when the authentication is received, and storing the information storage medium possessed by the occupant An entry management device having a means for writing a pass gate ID in the means, and an authentication device having a reading / writing means for reading and writing information on the information storage medium and a storage means in the mobile device. For the authentication device, the storage means of the authentication device reads the gate ID and passage gate ID of the installation destination room from the storage means of the information storage medium, and the gate ID of the installation destination room and the gate ID A process for collating with a passing gate ID, and a program for completing the process of storing the gate ID of the installation destination room in the storage means when the collation matches, and the mobile device after the installation is used The pass gate ID read from the storage means of the information storage medium is matched with the process of checking the gate ID of the installation destination room stored in the storage means of the authentication device. In this case, a use management program for controlling the use of the mobile device to a possible state is stored.

  In the device management system of the present invention, the installation completion program is read from the storage unit of the information storage medium when executing the process of storing the gate ID of the installation destination room in the storage unit. The mobile device ID is also stored in the storage means.

  Furthermore, in the device management system of the present invention, the mobile device ID stored in the storage means of the information storage medium and the gate ID of the installation destination room are stored in the management information database in which the management information of the mobile device is registered. It is information written in the storage means of the information storage medium based on registration information.

  The device management system of the present invention compares the passing gate ID with the gate ID of the installation destination room stored in the storage means of the authentication device so that the mobile device cannot be used if they do not match. Therefore, even if a mobile device installed in a room where installation is planned is illegally moved from the installation destination room to another room, the unauthorized use of the device can be prevented. There is.

Hereinafter, a device management system according to an embodiment of the present invention will be described in detail based on the drawings.
First of all, if your organization such as a company makes a move to the office of another building, carried out a study of Heyawari such as how can I pre-arranged which departments anywhere in the room, then, is the destination of the room of each department When it is specifically determined, the installation position such as the location in the room after moving is also determined for a device such as a personal computer that is a fixed asset.
Then, these pieces of information are registered in the management sheet of the management information database so that fixed assets can be managed accurately.
Thereby, even after moving, the information registered in the management sheet of these management information databases can be managed so that the fixed assets can be easily and efficiently confirmed by calling them on the personal computer screen.

FIG. 1 shows information of the mobile device management sheet 1 registered in a database used in the device management system according to the embodiment of the present invention.
In the mobile device management sheet 1 registered in the database, a mobile device ID 2 that can identify a device that is a fixed asset, a gate ID 3 of an installation destination room, and the like are registered.
The gate ID 3 of the installation destination room where this fixed asset is installed is information that identifies the gate provided at the entrance / exit that will always pass when entering or leaving the room where the mobile device that is the fixed asset is installed. In addition to the open / close gate, this gate refers to a room entrance management device in a broad sense such as a door whose locking and unlocking is controlled by electronic locking.
In the description of this embodiment, a case where an open / close gate is used will be described as an example.

Regarding the relationship between these gates and rooms, as shown in the relationship table between the office layout in FIG. 12 and the gates and rooms in FIG. 13, the relationship information is registered in advance in the database.
The office layout shown in FIG. 12 shows a plurality of rooms and gates provided in each room, and FIG. 13 shows a gate ID set for each gate and a gate before passing through the gate. Registered are location information indicating an area (room) and an area (room) after passing, card authentication information indicating whether or not card authentication is required when passing through the gate, and the like.
As you can see from these card authentication information, even when passing through the same gate, when entering a place where security is required, even if card authentication is required, conversely, when leaving the room, Whether there is no need for card authentication or not, the necessity of card authentication is set according to the installation position and location of the gate.
In the device management system of the present invention, it is assumed that the room in which the mobile device is installed requires card authentication at the gate when entering the room.

In FIG. 2, as an outline of the device management system according to the embodiment of the present invention, a gate device 7, which is a room entry management device provided in a predetermined room 6, with a personal computer 5, such as an employee, as a mobile device, by a importer 4 such as an employee. The state from passing through to installing in the room 6 is shown.
The importer 4 possesses an information storage medium for a room occupant such as an employee ID card. In this embodiment, the importer 4 uses the IC card 8 as the information storage medium, and the gate device 7 includes the IC storage card. A means for reading and writing information corresponding to the card 8 is provided. Further, the personal computer 5 has an authentication device 5a having a reading / writing means for reading and writing information corresponding to the IC card 8. Is provided.
This authentication device 5a may be built in the personal computer 5 or may be connected via a communication line.

When the importer 4 carries the personal computer 5 into the room 6, the importer 4 first reads the card ID, which is information stored in the IC card 8, by the gate device 7, performs an authentication process, and receives the authentication. The passing gate ID is written from the gate device 7 to the storage means of the IC card 8.
Further, when the authentication is received, the open / close gate 7a of the gate device 7 is opened to enter the room, and the personal computer 5 can be carried into the room 6.
Thereafter, the importer 4 installs the personal computer 5 at a predetermined position in the room 6 and then uses the installation completion program registered in the authentication device 5a to store information stored in the storage means of the IC card 8. And register the necessary information settings.
When the setting registration of information based on the installation completion program is performed, the personal computer 5 can be used only by a person who has been authenticated by the registered gate device 7 and can pass it. When it is moved to a room, it is managed so that it cannot be used in the destination room.

3 and 4 are diagrams for explaining the storage information 9 stored in the storage means of the IC card 8.
The storage means 9 of the IC card 8 has a storage area for storing the card ID 9a, the mobile device ID 9b, the gate ID 9c of the installation destination room, the passing gate ID 9d, etc., of which the card ID 9a is provided to the importer 4 It is registered in advance when the IC card 8 is issued.
Further, the mobile device ID 9b and the gate ID 9c of the installation destination room are registered in advance based on the mobile device management sheet 1 registered in the database before the importer 4 moves the personal computer 5.
That is, when the importer 4 is in charge of the personal computer 5 as the mobile device, the importer 4 moves from the registered information of the mobile device management sheet 1 to the mobile device ID 9b of the corresponding personal computer 5 and the mobile device 5 that moves the personal computer 5. The gate ID 9c of the previous room is checked and registered in advance in the storage means of the IC card 8 using a reader / writer (not shown) or the like.
The passing gate ID 9d is information written from the gate device 7 when passing through the gate device 7 when entering the room 6.

Therefore, the IC card 8 shown in FIG. 3 is stored information at the previous stage when entering the room 6, and only the passing gate ID 9d is not stored.
The IC card 8 shown in FIG. 4 is stored information at the stage after entering the room 6, and the passing gate ID 9d is also written and stored from the gate apparatus 7 when passing through the gate apparatus 7. ing.

FIG. 5 shows the relationship between the system configuration of the gate device 7 and the IC card 8.
The gate device 7 includes a read / write means 10 having a function of reading information from the IC card 8 in a non-contact manner and writing information to the IC card 8, and a gate opening / closing operation for opening / closing the open / close gate 7a. Means 11 and storage means 12 are provided.
The storage means 12 stores an authentication processing program 12a and a control program 12b, and further includes a storage area for storing a gate ID 12c set in advance for each gate device.
As for the gate ID 12c stored for each gate device, the gate ID information registered in the mobile device management sheet 1 shown in FIG. 1 and the gate-room association table shown in FIG. It is remembered.

The authentication processing program 12a has a function of determining whether or not the card ID 9a can be authenticated after the gate device 7 reads the card ID 9a stored in the storage means 9 of the IC card 8.
Therefore, the information to be compared with the card ID 9a read from the gate device 7 is stored in the storage means 9 in advance, and the card ID 9a read at the time of performing the authentication process is compared with the information stored in advance to make a match. If authentication is successful, it is assumed that authentication has been received.
The control program 12b is a program related to the processing procedure, and when authentication is received based on the authentication processing program 12a, the card ID 9a is transmitted from the reading / writing means 10 to the IC card 8 and the IC card 8 Control such as storing in the storage unit 9 is performed.

In the example shown in FIG. 5, the card ID 9a stored in the storage means 9 of the IC card 8 is read by the gate device 7 by the authentication processing program 12a, and the authentication is received by the authentication processing. 8 shows a state in which the gate ID 12c is transmitted and the gate ID 12c is written and stored in the passing gate ID 9d of the storage means 9 of the IC card 8.
Therefore, in FIG. 5, the passage gate ID 9d of the storage means 9 of the IC card 8 is in a state where the same information as the gate ID 12c stored in the storage means 12 of the gate device 7 is stored.

Next, the relationship between the authentication device 5a provided in the personal computer 5 which is a mobile device and the IC card 8 will be described with reference to FIG.
The authentication device 5a includes a reading / writing means 13 for reading and writing information with respect to the IC card 8, a storage means 14, a control means 15, and an interface (I / F) 16 for communicating with the personal computer 5. Is provided.
The storage unit 14 of the authentication device 5a stores an installation completion program 14a and a use management program 14b.
The installation completion program 14a reads the gate ID 9c and the passing gate ID 9d stored in the storage means 9 of the IC card 8 by the reading / writing means 13, and compares the read gate ID 9c and the passing gate ID 9d, In the case of matching, it has a function of executing processing for storing the mobile device ID 9b and the gate ID 9c of the installation destination room in the storage unit 14.

The storage means 14 of the authentication device 5a is provided with storage areas 14c and 14d for storing the mobile device ID 9b and the gate ID 9c in the case of the matching.
When the mobile device ID 9b and the pass gate ID 9d are written in the storage areas 14c and 14d, the installation completion process is completed.
FIG. 7 shows a state where the mobile device ID 9b and the pass gate ID 9d are written in the storage areas 14c and 14d of the storage means 14 of the authentication device 5a and the installation is completed.

The use management program 14b is set with a procedure for processing when the personal computer 5 is used after the personal computer 5 is installed in the room 6.
In the usage management program 14b, when the personal computer 5 is used, it is stored in the pass gate ID 9d read by the reading / writing means 13 from the user's IC card 8 and in the storage means 14 of the authentication device 5a. A process of checking the gate ID of the installation destination room is performed.
Then, when the collation coincides, the personal computer 5 is controlled to transmit a signal for enabling the use.

8 and 9 are diagrams for explaining a state in which the installed personal computer is used.
When the user 17 of the personal computer 5 enters the room 6, the gate device 7 reads the card ID 9 a stored in the storage means 9 of the IC card 8 and is authenticated by the authentication process based on the card ID 9 a. In addition, the pass gate ID 9d is written from the gate device 7 to the storage means 9 of the IC card 8 and stored in the storage means 9 of the IC card 8, and the open / close gate 7a is opened to enter the room.

When using the personal computer 5, when entering the room and using the personal computer 5, the IC card 8 is brought close to the authentication device 5 a and the pass gate ID 9 d stored in the storage means 9 of the IC card 8 is used. Is read by the authentication device 5a.
Then, in the authentication device 5a, when the passing gate ID 9d read from the IC card 8 matches the gate ID stored in the storage area 14d of the gate ID of the storage means 14 in the authentication device 5a and matches, However, the personal computer 5 can be switched to a usable state by transmitting a signal for instructing the personal computer 5 to switch to the personal computer 5 from the authentication device 5a.

Next, in the device management system according to the embodiment, after the personal computer 5 which is the device installation is installed in the room 6 and installed, the processing procedure for performing the installation completion processing is based on the flowchart shown in FIG. I will explain.
First, the importer 4 moves the personal computer 5 to the storage means 9 of the IC card 8 in advance through a reader / writer (not shown) based on the mobile device management sheet 1 registered in the database before moving the personal computer 5. The mobile device ID 9b and the gate ID 9c of the destination room 6 to which the personal computer 5 is moved are written and registered. (Step S1)

When the personal computer 5 is carried into the room 6, the card ID 9 a stored in the storage unit 9 of the IC card 8 is read by the gate device 7. (Step S2)
The gate device 7 performs an authentication process on the read card ID 9a. (Step S3)
In this authentication process, when authentication is received, the gate ID stored in the gate device 7 is transmitted from the gate device 7 to the IC card 8, and the storage device 9 of the IC card 8 is transmitted. It is stored as a passing gate ID. (Step S4)
Further, the gate device 7 opens the open / close gate 7 a so that the importer 4 can carry the personal computer 5 into the room 6. (Step S5)

The importer 4 installs the personal computer 5 at a predetermined position in the room 6, then brings the IC card 8 close to the authentication device 5 a provided in the personal computer 5 and stores it in the storage means 9 of the IC card 8. The mobile device ID 9b, the gate ID 9c of the installation destination room, and the passing gate ID 9d are read. (Step S6)
The authentication device 5a performs a process of collating the read gate ID 9c with the passing gate ID 9d. (Step S7)
If they match in this verification process, the mobile device ID 9b and the gate ID 9c stored in the storage unit 9 of the IC card 8 are stored in the storage unit 14 of the authentication device 5a. (Step S8)
In addition, in each of the above-described matching processes, if the matching process does not match, the process ends.
Through the above processing, the personal computer 5 is scheduled and carried into the room 6, and the installation completion processing is completed.

Next, in the device management system according to the embodiment, the processing procedure when the user uses the personal computer 5 which is installed in the room 6 is based on the flowchart shown in FIG. explain.
First, the user 17 causes the gate device 7 to read the card ID 9 a stored in the storage unit 9 of the IC card 8. (Step S11)
The gate device 7 performs an authentication process on the read card ID 9a. (Step S12)
In this authentication process, when authentication is received, the gate device 7 opens the open / close gate 7a so that the user 17 can enter the room 6. (Step S13)

Thereafter, when the user 17 enters the room, when using the personal computer 5, the IC card 8 is brought close to the authentication device 5a, and the pass gate ID 9d stored in the storage means 9 of the IC card 8 is stored in the authentication device 5a. Let me read. (Step S14)
The authentication device 5a compares the passing gate ID 9d read from the IC card 8 with the gate ID stored in the storage area 14d of the gate ID of the storage means 14 in the authentication device 5a. (Step S15)
If they match in this verification, the authentication device 5a transmits a use instruction signal for instructing the personal computer 5 to switch to use of the personal computer. (Step S16)
When the personal computer 5 receives the use instruction signal from the authentication device 5a, the personal computer 5 performs processing to switch the personal computer to a usable state. (Step S17)

If the verification does not match, the authentication device 5a does not transmit a use instruction signal for instructing the personal computer 5 to switch the use of the personal computer, and the process ends.
With the above processing, the user 17 is authenticated by the gate device 7 and is managed so that it can be used only when the personal computer 5 is installed in a room registered in the mobile device management sheet 1 in advance.
In other words, if the personal computer 5 is illegally taken out and moved to another room, when entering the room, the gate device in that room has different contents as the passing gate ID on the IC card of the occupant. When the personal computer 5 is used to write the pass gate, the pass gate ID written in the IC card and the gate ID stored in the storage means 14 of the authentication device 5a of the personal computer 5 are collated. Since the verification does not match, the process is terminated without transmitting a use instruction signal for instructing the personal computer 5 to switch to use of the personal computer from the authentication device 5a.
Therefore, since the personal computer 5 cannot be used, unauthorized use can be prevented.

The present invention is not limited to the personal computer shown in the above embodiment, but can be applied to other various devices.
Further, the authentication device 5a may have a structure integrated in the device.
Further, the information storage medium for the occupant is not limited to the IC card shown in the above embodiment, and an information storage medium having the same function can be used.

It is a figure which shows the information of the mobile equipment management sheet registered into the database utilized for the equipment management system which concerns on embodiment of this invention. It is a figure which shows the outline | summary of the apparatus management system which concerns on embodiment of this invention. It is a figure explaining the memory | storage information of the memory | storage means of the IC card which is an information storage medium used for the apparatus management system which concerns on embodiment of this invention. It is a figure explaining the memory | storage information of the memory | storage means of the IC card which is an information storage medium used for the apparatus management system which concerns on embodiment of this invention. It is a figure which shows the system configuration | structure of an entrance management apparatus regarding the apparatus management system which concerns on embodiment of this invention. It is a figure which shows the system configuration | structure of the apparatus management system which concerns on embodiment of this invention. FIG. 5 is a diagram illustrating a state in which installation completion information is registered in an authentication device according to the device management system according to the embodiment of the present invention. It is a figure explaining the state which uses the personal computer which is the apparatus management system which concerns on embodiment of this invention, and is installed. It is a figure which shows the system configuration | structure at the time of using the personal computer which is the apparatus management system which concerns on embodiment of this invention, and is installed. It is a flowchart figure which concerns on the apparatus management system which concerns on embodiment of this invention, and shows the process sequence at the time of performing apparatus installation. It is a flowchart figure which concerns on the apparatus management system which concerns on embodiment of this invention, and shows the process sequence at the time of using the installed apparatus. It is a figure which shows an example of the relationship between an office layout and a gate in the apparatus management system which concerns on embodiment of this invention. It is a figure which shows an example of the relationship information regarding a device management system which concerns on embodiment of this invention, a gate, a room, and card | curd authentication.

Explanation of symbols

1 Mobile device management sheet
2 Mobile device ID
3 Gate ID of the room where it is installed
4 importers
5 PC
5a Authentication device
6 rooms
7 Gate device
7a Open / close gate
8 IC card
9, 12, 14 Storage means
9a Card ID
9b Mobile device ID
9c, 12c Gate ID of installation room
9d Passing gate ID
10, 13 Reading / writing means
11 Gate opening / closing means
12a Authentication processing program
12b Control program
14a Installation completion program
14b Usage management program
14c, 14d storage area
15 Control means
16 Interface (I / F)
17 PC users

Claims (3)

Device management that prevents unauthorized use of the device by preventing the device from being used when a mobile device newly installed in the planned room is illegally moved from the installation destination room to another room A system,
An information storage medium for a resident who has storage means in which a card ID, a mobile device ID, and a gate ID of a room at the installation destination are stored;
When entering a room, a card ID is read from the information storage medium, an authentication process based on the card ID is performed, and when authentication is received, means for enabling entry from the gate and an information storage medium possessed by the room occupant An entrance management device having means for writing the passage gate ID in the storage means,
The mobile device includes an authentication device having a reading / writing unit for reading and writing information on the information storage medium and a storage unit,
In the storage device of the authentication device, the gate ID and passage gate ID of the installation destination room are read from the storage means of the information storage medium, and the gate ID of the installation destination room and the passage gate ID are collated. In the case where the installation completion program for executing the process of storing the gate ID of the installation destination room in the storage means and the mobile device after being installed are used when the matching and matching are performed, The process of checking the passing gate ID read from the storage means of the information storage medium and the gate ID of the installation destination room stored in the storage means of the authentication device And a use management program for controlling the use of the device to a possible state.   The installation completion program stores the mobile device ID read from the storage unit of the information storage medium in the storage unit when executing the process of storing the gate ID of the installation destination room in the storage unit The device management system according to claim 1, wherein: The mobile device ID stored in the storage means of the information storage medium and the gate ID of the installation destination room are based on registration information in a management information database in which management information of the mobile device is registered. 3. The device management system according to claim 1, wherein the information is information written in the storage means.

Images