JP2008233942A - Equipment management system - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an equipment management system not allowing use when set equipment is moved to another room. <P>SOLUTION: This equipment management system comprises an information storage medium, an access control device, the equipment having an authenticating device, and a server. A setting-completing program of the authenticating device transmits equipment peculiar information and access peculiar information read from the information storage medium to the server, and performs processing for making a storage means store all the access peculiar information received from the server. A use-management program of the equipment controls the equipment usable when the access peculiar information read from the information storage medium and the access peculiar information are collated and accord. When receiving the access peculiar information and the equipment peculiar information from the equipment, a control program of the server specifies room information associated with the received access peculiar information by a gate database, and makes processing for making for making the access peculiar information of all the access control devices associated with the specified room information be transmitted to the equipment be performed. <P>COPYRIGHT: (C)2009,JPO&INPIT

Description

  The present invention cannot be used in a room equipped with an entrance management apparatus that requires personal authentication as an entrance condition when entering a room, and equipment installed in the room is illegally moved to another room. Relates to the device management system.

In recent years, against the backdrop of measures such as the Japanese version of the SOX method, the appropriateness of finance-related fixed asset management and office equipment management has become more important.
Therefore, when moving to another building or the like, it is necessary to consider making it possible to accurately grasp the storage location of the mobile device.
Conventionally, for such reasons as well, an asset management system is known in which the installation status of devices such as various OA devices that are the targets of asset management can be easily and efficiently confirmed. (For example, see Patent Document 1)

In recent years, the proportion of office equipment such as personal computers has increased in the fixed assets, and it is important to thoroughly manage the use of such personal computers in terms of information security measures.
For example, if an unauthorized access is made after a third party illegally moves a personal computer installed in a predetermined room, information leakage, destruction, or alteration of information is performed. It also includes the risk of being caught.
In particular, if there is a large amount of fixed assets to be moved along with moving, it is expected that it will be easy to move a computer once installed to another place illegally, taking advantage of the confusion of moving, and then the computer Although there is a risk that illegal activities such as unauthorized access will be performed using, there is a problem that there is no technology to prevent or prevent them.

JP 2004-295406 A

  Therefore, the present invention is used in a room equipped with an entrance management apparatus that requires personal authentication as an entrance condition when entering a room, and equipment installed in the room is illegally moved to another room. Providing a device management system that prevents this.

  The device management system according to the present invention is provided in a room equipped with an entry management device that requires personal authentication as an entry condition when entering a room, and the device installed in the room is illegally moved to another room. Is a device management system that cannot be used, and is an information storage medium for room occupants in which medium specific information is stored, storage means in which room specific information is stored, and medium specific information is read from the information storage medium. In addition, when authentication is received after performing means for writing entry specific information to the information storage medium, means for switching to either a state where entry is possible or a state where entry is not possible, and authentication processing based on the read medium unique information In addition, the entrance management device loaded with a control program for making the entry possible and further performing processing for writing entry specific information in the information storage medium, and Means for reading the medium specific information and the room specific information stored in the information storage medium, means for communicating with the server, device specific information, an installation completion program, and a use management program. A device including an authentication device, a means for communicating with the device, a gate database in which relations between room entry specific information, room information managed in advance by the room entry management device are registered, and device specific information And a server having a device database for registering a relationship with a room in which the device is installed and a storage unit storing a control program, and the installation completion program installed in the device for authentication of the device includes The device is started after the installation is completed, and the room entry unique information and the device unique information read from the information storage medium are transmitted to the server and received. The storage unit stores the entry unique information of all the entry management devices associated with the room information associated with the room unique information as authentication verification information used when the device is used, and The use management program installed in the device is activated when the device is used, and includes all the entry-specific information read from the information storage medium and stored as the authentication verification information. The information is collated, and when the collation is matched, the device is controlled so that it can be used. Further, the server control program receives the entry specific information and the device specific information from the device. In the gate database, the room information registered in association with the received room entry specific information is specified and related to the specified room information. It is characterized in that a process for transmitting the room entry specific information of all the room entry management devices to the equipment is performed.

  In the device management system of the present invention, the control program installed in the server causes the device database to perform processing for associating and registering the received device specific information and the specified room information. And

  Furthermore, in the equipment management system of the present invention, the room entry management device is a gate device, the medium unique information is card ID information, the information storage medium is an IC card, and the room unique information is gated. ID information, and the device unique information is device ID information.

  The device management system of the present invention is designed so that once a device installed in a predetermined room is illegally moved to another room, the device is used in the predetermined room even if an attempt is made to use the device. Since the entry specific information registered in the equipment when installed in the room is different from the entry specific information of the entry management device of the room that has been illegally moved, it is written from the entry management device to the information storage medium when entering the room. Equipment that has been illegally moved to another room because the device cannot be used because it does not match the verification process between the entry-specific information and the entry-specific information registered in the device and authentication is not received. There is an effect of preventing unauthorized use.

  In addition, the device management system of the present invention is installed by causing the control program installed in the server to perform a process of associating and registering the received device specific information with the identified room information in the device database. The room in which the device is installed can be easily checked from the device database, and it is possible to efficiently check whether there is a device that has been illegally moved to another room.

  Furthermore, the device management system of the present invention has an effect that devices can be managed using an IC card that has been used as an employee ID card.

Hereinafter, a device management system according to an embodiment of the present invention will be described in detail based on the drawings.
First of all, if your organization such as a company makes a move to the office of another building, carried out a study of Heyawari such as how can I pre-arranged which departments anywhere in the room, then, is the destination of the room of each department When it is specifically determined, the installation position such as the location in the room after moving is also determined for a device such as a personal computer that is a fixed asset.
Then, these pieces of information are registered in the management sheet of the management information database so that fixed assets can be managed accurately.
Thereby, even after moving, the information registered in the management sheet of these management information databases can be managed so that the fixed assets can be easily and efficiently confirmed by calling them on the personal computer screen.

In FIG. 1, as an overview of the device management system according to the embodiment of the present invention, an employee 1 who is a device importer carries a mobile device PC 5 into a room 2 where a sales department is located, and then installs it. A state in which predetermined processing after completion is applied to the personal computer 5 is shown.
The employee 1 has an IC card 6 that is an information storage medium for an employee ID card in advance, and the IC card 6 stores unique information for use in authentication processing.
In the room 2 where the sales department is located, there are two entrances for passage when entering and leaving the room, and gate devices 3 and 4 which are entrance management devices are provided at the respective entrances.
The gate devices 3 and 4 read card ID information, which is unique information stored in the IC card 6, and write gate ID information of the passed gate device as entry unique information to the IC card 6, Furthermore, open / close doors 3a and 4a that are opened only when authentication is received in the personal authentication process based on the unique information read from the IC card 6 are provided.
The personal computer 5 is also provided with an authentication device 5a that can read the unique information from the IC card 6 when the personal computer 5 is used.

Therefore, when the employee 1 carries the personal computer 5 into the room 2 where the sales department is located, the card ID stored in the IC card 6 by the gate device when passing through any one of the two gate devices 3 and 4. When the information is read and authentication based on the card ID information is received, the gate ID information is written from the gate device to the IC card 6 and the door is opened.
Thereby, the employee 1 can pass through the gate device and enter the room, and the personal computer 5 can be installed at a predetermined position in the room.
FIG. 1 shows a case where the user enters the room from the gate device 3. Hereinafter, the case where the user enters the room from the gate device 3 will be described.
The installed personal computer 5 is communicably connected to a server 7 for managing the personal computer 5 and using a communication network.

The server 7 is provided with means for communicating with the personal computer 5, a gate database, a device database, a storage means for storing a control program, and the like.
In the gate database, the relationship between the entry specific information and the room information for managing the entry by the entry management device is registered in advance.
In the device database, the relationship between the device specific information and the room in which the device is installed is registered.
After the personal computer 5 is installed in the room 2, it is necessary to perform a predetermined installation completion process. If the predetermined installation completion process is not performed, the use of the personal computer 5 is restricted so that it cannot be used.

2 and 3 show the storage means 8 of the IC card 6.
FIG. 2 shows information stored in the storage means 8 of the IC card 6 before the employee 1 enters the room from the gate device 3.
The storage means 8 of the IC card 6 has a card ID information storage area 9 for storing card ID information and a passing gate ID information storage area 10 for storing gate ID information written from the gate device 3 that passes when entering the room. As shown in FIG. 2, only the card ID information is stored in the card ID information storage area 9 before entering the room.
When entering the room, gate ID information is written from the gate device 3 to the IC card 6, and the gate ID information is also stored in the passing gate ID information storage area 10, as shown in FIG.
The gate ID information stored in the passing gate ID information storage area 10 is overwritten and updated every time it passes through the gate device 3.
The gate ID information stored in the passing gate ID information storage area 10 of the storage means 8 of the IC card 6 is used by the personal computer 5 when performing a predetermined installation completion process after the personal computer 5 is installed in the room 2. Used when

Next, the relationship between the system configuration of the gate device 3 and the IC card 6 will be described with reference to FIG.
The gate device 3 includes storage means 11 in which gate ID information 14 that is room entry specific information is stored, read / write means 12 that reads card ID information from the IC card 6 and writes gate ID information to the IC card 6. The entrance management means 13 having a function of switching to either a room entry enabled state or a room entry disabled state by opening and closing the open / close door 3a, and an authentication process based on the card ID information read from the IC card 6 are performed. When the authentication is received, the storage unit 11 is equipped with a control program 15 for performing a process for allowing the user to enter the room and further writing the gate ID information into the IC card 6.
The gate ID information 14 stored in the storage unit 11 is unique information that is different for each gate.

Next, based on FIG. 5, the relationship between the system configuration of the authentication device 5a and the server 7 provided in the personal computer 5 and the IC card 6 will be described.
In FIG. 5, the authentication device 5 a is depicted as a separate body from the personal computer 5, but a configuration in which the function of the authentication device 5 a is built in the personal computer 5 may be used.
The authentication device 5 a includes a reading unit 16 that reads card ID information and gate ID information from the IC card 6, a communication unit 17 that communicates with the server 7, and an interface (I / F) 24 on the personal computer 5 side. Interface (I / F) 18 for performing transmission / reception, device ID information storage area 19 for storing device ID information, gate ID information storage area 20 for storing gate ID information, installation completion program 21, and use And storage means 23 in which a management program 22 is stored.

In the device ID information storage area 19 of the authentication device 5a, device ID information is stored in advance, but the gate ID information storage area 20 is in a state where no gate ID information is stored in the previous stage of the setting process. The gate ID information transmitted from the server 7 is written and stored in the gate ID information storage area 20 by the setting process based on the installation completion program 21.
After the gate ID information is stored in the gate ID information storage area 20, the gate ID information read from the IC card 6 possessed by the user of the personal computer 5 and the gate ID stored in the gate ID information storage area 20 are stored. Control is performed such that the use of the personal computer 5 is permitted only when the information matches the information.
Thereby, when the personal computer 5 is illegally moved to another room, the gate ID information written in the IC card 6 by the gate device 3 in the room is stored in the gate ID information storage area 20 of the authentication device 5a. Unlike the gate ID information stored at the time of setting, since the verification does not match, the personal computer 5 cannot be used and unauthorized use can be prevented.

  In the above embodiment, the case where the authentication device 5a includes the communication unit 17 and the storage unit 23 is described. However, the communication unit 17 and the storage unit 23 are configured to be provided on the personal computer 5 side. The same function may be provided in either the personal computer 5 or the authentication device 5a.

  Next, the server 7 includes a communication unit 25 that communicates with the authentication device 5a or the personal computer 5, a gate database 26 in which a relationship between gate ID information and room information managed in advance by the gate device is registered. The device database 27 for registering the relationship between the device ID information and the room in which the personal computer 5 is installed, and the storage means 29 in which the control program 28 is stored.

Based on FIGS. 6 and 7, the gate database 26 in which the relationship with the room information managed by the gate device is registered will be described.
FIG. 6 shows an office layout 30 on the first floor of a building.
Also, FIG. 7 shows, as a list 31, the relationship between the rooms existing in the office layout 30 shown in FIG. 6 and the gate ID information stored in all the gate devices that pass when entering each room. Has been.
In the gate database 26, rooms that are managed in advance and gate ID information of gate devices provided for each room are registered in association with each other.
As shown in FIG. 6, even in a single room, there may be a plurality of entrances / exits that can enter the room, and thus a single room may be provided with a plurality of gate devices.

Next, the device database 27 will be described.
FIG. 8 shows information of the mobile device management sheet 32 as an example of registration information in the device database 27.
In the mobile device management sheet 32, device ID information 33 that can identify a device that is a fixed asset such as a personal computer, installation location information 34 of a device such as a personal computer, and the like are registered.
The device installation location information 34 may be any information as long as the location can be specified. For example, in the case of a company organization, the department name of the sales department, planning department, general affairs department, etc. Etc. are registered.
The installation location information 34 of the device is registered by processing when the installation is completed after a device such as a personal computer is actually installed in the room.
Therefore, it is possible to grasp in which room all devices are efficiently installed by checking the registration information of the mobile device management sheet 32 in the device database 27 even when managing fixed assets of the devices. It has become.

Next, a processing procedure of the device management system according to the embodiment will be described.
First, based on the flowchart shown in FIG. 9, a processing procedure until the personal computer 5, which is a device to be installed, is carried into the room 2 and installed will be described.
First, the employee 1 causes the gate device 3 to read the card ID information 9 stored in the storage unit 8 of the IC card 6. (Step S1)
The gate device 3 performs an authentication process on the read card ID information 9. (Step S2)
In this authentication process, when the authentication is received, the gate ID information stored in the gate device 3 is transmitted from the gate device 3 to the IC card 6, and the storage means 8 of the IC card 6 is transmitted. Are written and stored in the pass gate ID information storage area 10. (Step S3)
Further, the opening / closing door 3a of the gate device 3 is opened, and the employee 1 can carry the personal computer 5 into the room 2. The personal computer 5 is installed at a predetermined position in the room. (Step S4)

Next, a processing procedure after the personal computer 5 is installed in the room 2 will be described based on the flowchart shown in FIG.
The employee 1 installs the personal computer 5 at a predetermined position in the room 2, and then activates an installation completion program 21 installed in the authentication device 5 a provided in the personal computer 5. (Step S5)
The gate ID information stored in the storage means 8 of the IC card 6 is read by the authentication device 5a. (Step S6)
The authentication device 5a causes the server 7 to transmit the gate ID information read from the IC card 6 and the device ID information stored in the storage unit 23 of the authentication device 5a. (Step S7)

The server 7 specifies registration information that matches the received gate ID information from the received gate ID information and the registration information of the gate database 26. (Step S8)
The server 7 transmits all registered gate ID information related to the registration information specified from the gate database 26 to the authentication device 5a. (Step S9)
Further, the server 7 registers the registered room information associated with the registration information specified from the gate database 26 in the device database 27 in association with the received device ID information. (Step S10)

In addition, the authentication device 5a that has received all the registered gate ID information related to the specified registration information from the gate database 26 has received the information in the gate ID information storage area 20 of the storage unit 23. All gate ID information is stored. (Step S11)
With the above processing, the processing based on the installation completion program ends.
If the personal computer 5 that has completed the processing based on the installation completion program has entered the room after receiving authentication using the IC card 6 by the two gate devices 3 and 4 used when entering the installed room 2 The two gate ID information “GATE1-4” and “GATE1-5” are stored in the gate ID information storage area 20 of the storage means 23 of the authentication device 5a as authentication verification information when the personal computer 5 is used. be registered.
Therefore, when the personal computer 5 is moved to an unauthorized room, the gate ID information written in the IC card 6 when entering the other room is the gate ID information for verification registered in the personal computer 5. It cannot be used because it does not match.

Next, the processing procedure based on the use management program when using the personal computer 5 installed in the room 2 and having completed the processing based on the installation completion program will be described with reference to the flowchart shown in FIG. To do.
First, the employee 1 causes the card ID information 9 stored in the storage unit 8 of the IC card 6 to be read by one of the two gate devices 3 and 4 for entering the room 2. (Step S21)
The gate devices 3 and 4 perform an authentication process on the read card ID information 9. (Step S22)
In this authentication process, when authentication is received, the gate ID information stored in the gate device 3 is transmitted from the gate devices 3 and 4 to the IC card 6 to store the IC card 6. The information is written and stored in the passing gate ID information storage area 10 of the means 8. (Step S23)
Furthermore, the open / close doors 3a and 4a of the gate devices 3 and 4 are opened so that the employee 1 can enter the room 2. (Step S24)

When the employee 1 uses the personal computer 5, the employee 1 activates the usage management program 22 installed in the authentication device 5 a. (Step S25)
And the gate ID information memorize | stored in the memory | storage means 8 of IC card 6 is read by the device 5a for authentication with which the personal computer 5 is equipped. (Step S26)
The authentication device 5a includes the gate ID information read from the IC card 6 and the gate ID information “GATE1-4” and “GATE1” stored in the gate ID information storage area 20 of the storage unit 23 of the authentication device 5a. -5 "and perform authentication processing. (Step S27)
When the gate ID information verified in the authentication process matches, the personal computer 5 is controlled to be usable. (Step S28)
If the gate ID information verified in the authentication process does not match, the process ends without using the personal computer 5. (Step S29)

  As described above, when the device management system of the present invention installs the device in a predetermined room, the gate ID information that identifies the gate device that passes when the device enters the room by the processing by the installation completion program 21. When the device is used and the device is used, the registered gate ID information is used as verification information for authentication processing so that the device cannot be illegally moved to another room for use. can do.

The present invention is not limited to the personal computer shown in the above embodiment, but can be applied to other various devices.
Further, the information storage medium is not limited to the IC card shown in the above embodiment, and an information storage medium having the same function can be used.

In the embodiment, the authentication device of FIG. 5 is used. However, an IC card reader / writer may be connected to a personal computer, and an installation completion program, a use management program, and a device ID may be stored in the hard disk of the personal computer. .
As a personal computer protection, a hardware key may be connected to the personal computer, and a gate ID and a device ID may be stored in the hardware key.
The user holds the IC card over the IC card reader / writer, starts the installation completion program from the personal computer, and temporarily records the gate ID recorded in the memory of the personal computer in the hardware key.
Thereafter, when the user uses the personal computer, the user obtains the gate ID from the IC card, and compares the gate ID stored in the hardware key with the same ID so as to permit the use of the personal computer. Good.

It is a figure which shows the outline | summary of a structure of the apparatus management system which concerns on embodiment of this invention. It is a figure explaining the memory | storage information of the IC card used for the apparatus management system which concerns on embodiment of this invention. It is a figure explaining the memory | storage information of the IC card used for the apparatus management system which concerns on embodiment of this invention. It is a figure which shows the structure of the gate apparatus of the apparatus management system which concerns on embodiment of this invention, and the relationship with an IC card. It is a figure which shows the relationship between the device for authentication of the apparatus management system which concerns on embodiment of this invention, a server, and the relationship between an IC card and an authentication device. In the apparatus management system which concerns on embodiment of this invention, it is a figure which shows an office layout as an example of the relationship of the room managed by a gate apparatus. It is a figure which concerns on the apparatus management system which concerns on embodiment of this invention, and is a figure which shows the list of the rooms managed by a gate apparatus. In the device management system according to the embodiment of the present invention, information on a mobile device management sheet is shown as an example of registration information in the device database. It is a flowchart figure which concerns on the equipment management system which concerns on embodiment of this invention, and shows the process sequence at the time of entering into the room which installs equipment. It is a flowchart figure which concerns on the apparatus management system which concerns on embodiment of this invention, and shows the process sequence based on the installation completion program of an apparatus. It is a flowchart figure which shows the process sequence based on the use management program at the time of using the installed apparatus concerning the apparatus management system which concerns on embodiment of this invention.

Explanation of symbols

1 Employee
2 rooms
3,4 gate device
3a, 4a Open / close door
5 PC
5a Authentication device
6 IC card
7 server
8, 11, 23, 29 Storage means
9 Card ID information storage area
10 Passing gate ID information storage area
12 Reading / writing means
13 Entrance management means
14 Gate ID information
15 Control program
16 Reading means
17, 25 Communication means
18, 24 interface (I / F)
19 Device ID information storage area
20 Gate ID information storage area
21 Installation completion program
22 Usage management program
26 Gate database
27 Equipment database
28 Control program
30 Office layout
31 List of relationship between room and gate ID information
32 Mobile Device Management Sheet
33 Device ID information
34 Equipment location information

Claims (3)

Equipment management in a room with an entry management device that requires personal authentication as an entry condition when entering the room, so that it cannot be used if the equipment installed in the room is illegally moved to another room A system,
An information storage medium for room occupants in which medium-specific information is stored;
Storage means for storing entry unique information, means for reading the medium unique information from the information storage medium and writing entry unique information to the information storage medium, and means for switching to either the entry enabled state or the entry disabled state And a control program that performs an authentication process based on the read medium unique information and, when the authentication is received, allows the room to enter the room and further writes the room unique information to the information storage medium. A built-in entrance management device,
Storage means for storing medium specific information and room specific information stored in the information storage medium, means for communicating with the server, device specific information, installation completion program, and usage management program A device equipped with an authentication device comprising:
The relationship between the means for communicating with the device, the gate entry specific information, the gate database in which the relationship between the room information managed by the entrance management device is registered in advance, the device unique information, and the room where the device is installed. Comprising a server having a device database to be registered and a storage means in which a control program is stored;
The installation completion program installed in the device authentication device is activated after the installation of the device is completed, and transmits the room entry unique information and the device unique information read from the information storage medium to the server and receives them. The storage unit stores the entry unique information of all the entry management devices associated with the room information associated with the entry unique information, as authentication verification information used when the device is used,
Further, the use management program installed in the device is activated when the device is used, and all of the rooms stored as the entry specific information read from the information storage medium and the authentication verification information are stored. Check the unique information, and if it matches, perform processing to control the device to a usable state,
Further, when receiving the room entry specific information and the equipment specific information from the device, the control program of the server specifies room information registered in association with the received room entry specific information in the gate database. In addition, a device management system that causes the device to transmit the entry specific information of all the entry management devices associated with the specified room information.   The device management system according to claim 1, wherein the control program installed in the server causes the device database to perform processing for associating and registering the received device specific information with the specified room information. . The entrance management device is a gate device, the medium specific information is card ID information, the information storage medium is an IC card, the entrance specific information is gate ID information, and the device specific information is The device management system according to claim 1, wherein the device management information is device ID information.

Images