JP4899711B2 - Management system, server and program - Google Patents

Description

  The present invention relates to a management system that manages the use of managed objects such as electronic devices and equipment provided in a room in a facility where entry is managed.

  When an operator uses an electronic device or facility in a predetermined room, it may be a condition that the administrator is in the room from the viewpoint of preventing information leakage. In this case, in order for an operator to use an electronic device or facility, “the administrator who entered the room must make the electronic device or facility available” or “when the operator uses the electronic device or facility, "When the administrator uses the electronic device or facility, the operator receives a medium for making the electronic device or the like available from the administrator, and the operator makes the electronic device or the like available." Is set to a state where the electronic device or the like can be used. Similarly, in order to stop the use of an electronic device or facility, a method such as “the administrator puts the electronic device or facility into a use stop state” is used.

  However, in the conventional method, in order to make an electronic device or facility available or in a suspended state, it is necessary for the administrator himself to deal with it each time. Therefore, when the number of electronic devices and facilities is large, there has been a problem that a great burden is placed on the administrator.

  On the other hand, a security technique using an information storage medium such as an IC card has already been known as a security technique for preventing unauthorized use of a computer by a third party who does not have the use authority. In one example, when a computer is used, identification information is read from an information storage medium such as an IC card in which identification information for authenticating the person in advance is stored, and the person is identified by a matching process based on the read identification information. When authentication is performed and the authentication is established, the computer can be used (see, for example, Patent Documents 1 and 2).

JP 2003-30155 A JP 2004-70542 A

  The present invention has been made in view of the above points, and uses an information storage medium to easily and automatically perform electronic equipment only while the administrator is in the room without bothering the administrator. It is an object of the present invention to provide a management system that can use facilities and facilities.

One aspect of the present invention is a management system that manages the use of a management target device installed in a facility using an information storage medium possessed by a user, the management system including the management target device And an entrance / exit management device for managing entrance / exit to / from the facility by the user so as to be communicable via a network, and the information storage medium identifies the user according to each user. The entrance / exit management device includes a storage unit that stores identification information of an administrator, and when entering, an information reading unit that reads information from the information storage medium, and the information reading unit includes when the read information is permitted as the entrance authority information, and admission control means allowing entry to the facility of the user, information which the information reading means has read it is identified as the management right information If the administrator identification means for identifying the administrator the user, if the administrator identification means has identified the administrator the user, the use permission information for permitting use of the management target device Usage permission information transmitting means for transmitting to the management target device, exit information reading means for reading information from the information storage medium when leaving, and information read by the exit information reading means are permitted as the management authority information In this case, an exit manager specifying means for specifying the user as an administrator, and use stop information for transmitting use stop information for stopping use of the management target device to the management target device when the administrator leaves the room. and a transmitting unit, the management target device, and the utilization permission information receiving means for receiving the use permission information from the entering and exit management device, use permission of the use permission information receiving means receives Based on the broadcast, the reception management and availability control unit target apparatus is controlled to be available, and use stop information receiving means for receiving the usage stop information from the entering and exit management apparatus, the use stop information In such a case, an unusable control unit that controls the device to be managed to be unusable is provided.

  The management system configured as described above can automatically use the management target device only while a person having management authority is in the facility. Examples of the facility include a building such as a building, its floor, and a room. Examples of the management target include electronic devices such as personal computers and printers, time recorders having an electronic control function, equipment such as cabinets and lockers, and rooms inside buildings. In this system, a user possesses an information storage medium, and manages the usage state of the management object based on information read from the information storage medium. As the information storage medium, a medium capable of reading information, such as an IC card, is used.

Specifically, in this system, an entrance / exit management device is provided in the vicinity of the entrance / exit of the facility. The entrance / exit management device reads information from an information storage medium possessed by the user when the user enters / exits the facility. User identification information is stored in the information storage medium. Entrance and exit management apparatus, when the information read from the information storage medium is permitted as entrance permission information, such as by opening the entrance door to allow entry of the user who owns the information storage medium. On the other hand, entrance and exit management apparatus, when the information read from the information storage medium is identified as the entrance authority information, without opening the entrance door, it does not allow entrance. In addition, the entrance / exit management device includes a storage unit that stores the identification information of the administrator, and manages use permission information that permits the use of the management target device in the facility when the user is identified as the administrator. Send to the target device.

  One or a plurality of management target devices are provided in the facility. When receiving the usage permission information from the entrance / exit management device, the management target device controls the management target device to be in a usable state. According to this, when the manager enters the facility, the management target apparatus can be automatically used. Therefore, it is not necessary to perform a special operation for making the management target device available, and the burden on the administrator can be reduced.

  In the management system configured as described above, the entrance / exit management device determines that the user who exits is an administrator if the management authority information is included in the information read from the information storage medium at the time of exit. Then, use stop information for stopping use of the management target device in the facility is transmitted to the management target device. When receiving the use suspension information from the entrance / exit management device, the management target device controls the management target device so that it cannot be used. According to this, when the manager leaves the facility, the management target device cannot be used automatically. Therefore, it is not necessary to perform a special operation for making the management target device unusable, and the burden on the administrator can be reduced.

In another aspect of the present invention, a management system that manages the use of a management target device installed in a facility using an information storage medium storing user identification information, the management system includes: The management target device and an entrance / exit management device that manages entrance / exit to the facility by the user are connected via a network so that the entrance / exit management device is allowed to enter the user. The admission authority information storage means for storing the admission authority identification information that is identification information indicating the management authority information storage means for storing the management authority identification information that is the identification information indicating the user who is the administrator, at the time of admission The admission identification information reading means for reading the identification information from the information storage medium, the identification information read by the admission identification information reading means, and the admission authority identification information are collated, and if they match, The admission control means that allows the user to enter the facility, the identification information read by the admission identification information reading means, and the management authority identification information are collated, and if they match, the user is designated as an administrator. Admission manager specifying means for specifying, admission manager information storage means for storing the identification information of the user specified as an administrator by the admission manager specifying means as admission manager information, and the admission manager specifying means When the user is identified as an administrator, the use permission information transmitting means for transmitting the use permission information for permitting the use of the managed device to the managed device, and the information storage medium upon leaving The exit identification information reading means for reading the identification information, the identification information read by the exit identification information reading means, and the management authority identification information are collated, and if they match, the user is identified as an administrator. And exit management user identification means, if the administrator leaving, and a usage termination information transmitting means for transmitting the use stop information for stopping use of the management target device to the management target device, the management target device Based on the use permission information receiving means for receiving the use permission information from the entrance / exit management device and the use permission information received by the use permission information receiving means, control is performed so that the managed device can be used. An availability control unit, a usage suspension information receiving unit that receives the usage suspension information from the entrance / exit management device, and a control so that the managed device becomes unusable when the usage suspension information is received. And an unusable control means .

  The management system configured as described above can automatically use the management target device only while a person having management authority is in the facility. Specifically, in this system, an entrance / exit management device is provided in the vicinity of the entrance / exit of the facility. The entrance / exit management device reads information from an information storage medium possessed by the user when the user enters / exits the facility. Identification information for identifying each user is stored in the information storage medium. In addition, the entrance / exit management device includes entrance authority identification information that is identification information of a user having entrance authority that can enter the facility, and identification information of a user having management authority that can manage the managed device. Management authority identification information is stored in advance. The entrance / exit management device determines that the user has the entry authority if the identification information read from the information storage medium at the time of entry matches the entry authority identification information, and opens the entrance door. to approve. On the other hand, when the identification information read from the information storage medium does not match the entry authority identification information, the entrance / exit management device does not open the door of the entrance and does not allow entry. Furthermore, when the identification information read from the information storage medium matches the management authority identification information, the entrance / exit management apparatus determines that the user has management authority and permits the use of the management target apparatus in the facility. The usage permission information is transmitted to the management target device. When receiving the usage permission information from the entrance / exit management device, the management target device controls the management target device to be in a usable state. According to this, when the manager enters the facility, the managed device can be automatically used. Therefore, it is not necessary to perform a special operation for making the management target device available, and the burden on the administrator can be reduced.

  In the management system configured as described above, the entrance / exit management device, when the identification information read from the information storage medium at the time of exit matches the management authority identification information, the exiting user has management authority. Then, it determines that it is used, and transmits use stop information for stopping use of the management target device in the facility to the management target device. When receiving the use suspension information from the entrance / exit management device, the management target device controls the management target device so that it cannot be used. According to this, when the manager leaves the facility, the management target device cannot be used automatically. Therefore, it is not necessary to perform a special operation for making the management target device unusable, and the burden on the administrator can be reduced. In other words, the management target apparatus can be automatically used only while the manager is in the room, without bothering the manager.

In another aspect of the management system, the management authority information storage unit stores the management authority identification information and the level of the administrator in association with each other, and the entrance / exit management device is configured to store the administrator's level. A permission range information storage unit that stores permission range information that associates a level with a permission range that is permitted to be used in the management target device, and the admission manager specifying unit specifies the user as an administrator. The management authority information is referred to based on the matched identification information, the level specifying means for specifying the level of the administrator, and the permission range information based on the level of the administrator specified by the level specifying means. A permission range specifying means for specifying the permission range by referring to the usage permission information transmitting means for use within the permission range specified by the permission range specifying means. To send a use permit information to be allowed to the managed device.

In the management system configured as described above, the entrance / exit management device stores management authority identification information and a manager's level in association with each other as management authority information in advance. Here, the level of the manager is, for example, a job title. In addition, the entrance / exit management device stores in advance, as permission range information, the level of the administrator and the range permitted to be used in the management target device in association with each other. Specifically, for example, at the department manager level, all electronic devices installed in the facility can be used, and at the section manager level, only some electronic devices installed in the facility can be used. It is conceivable that the type and number of electronic devices permitted to be used vary depending on the level of the administrator. When the entry / exit management device identifies that the user is an administrator having administrator authority based on the identification information read at the time of entry, the entry / exit management device refers to the administrator authority information to determine the administrator level of the user. Identify. In addition, the entrance / exit management device identifies the permitted range permitted to be used in the managed device by referring to the permitted range information based on the identified administrator level. Then, the entrance / exit management device transmits use permission information permitting use within the specified permission range to the management target device. The managed device can use the managed device according to the permission range based on the received use permission information. As described above, according to the present invention, the usable range of the management target device can be freely set according to the level of the manager entering the room. Therefore, it is possible to automatically use only managed devices within the permitted range according to the level of the manager entering the room.

In still another aspect of the management system, the management target device determines whether or not the management target device is being used at the time when the use stop information receiving unit receives the use stop information. And when the use determining unit determines that the managed device is being used, the busy information indicating that the managed device is being used is transmitted to the entrance / exit management device. An in-use information transmitting means, wherein the entrance / exit management device receives the in-use information from the managed device, and the exit management device receives the in-use information when the in-use information is received. and exit control means administrator specifying means and not the exit from the facility of the user identified with the administrator, further wherein the unavailable control unit receives the use stop information A case, when the management target device is determined not to be utilized by the usage determination unit, the managed device is controlled to be unavailable.
In the management system configured as described above, the management target device determines whether or not the management target device is being used when receiving the use stop information from the entrance / exit management device. When the management target device is used, the management target device transmits in-use information. When the in-use information is received, the entrance / exit management device performs control such as not opening the door so that a user having management authority cannot leave the facility. On the other hand, when the management target device is not used, the management target device performs control so that it cannot be used based on the use stop information. According to this, the managed device suddenly stops during use by a user who does not have management authority, or a user who does not have management authority even though the administrator is not in the facility is managed device It is possible to solve problems such as using.

In still another aspect of the management system, when the entrance manager information indicates the presence of a plurality of managers, the permission range specifying unit is configured to determine the permission range based on the level of the highest manager. Is identified. According to this, when there are multiple users with management authority, that is, there are multiple managers in the facility, and the level of each manager is different, the level of the highest-ranking manager is met. The managed device can be made available. Specifically, when a manager at the manager level and a manager at the manager level exist in the facility, all electronic devices installed in the facility can be used according to the highest manager level. In this way, even in a facility where a plurality of managers with various levels set in and out, the management system can be used to automatically select the optimum managed device without burdening the manager. Can be made available.

In another aspect of the present invention, a server that manages the use of a management target device installed in a facility using an information storage medium storing user identification information , the management target device and the management device An entrance authority that is connected to an entrance / exit management device for managing entrance / exit to the facility by a user through a network and stores entrance authority identification information that is identification information indicating a user permitted to enter. Information storage means, management authority information storage means for storing management authority identification information that is identification information indicating a user who is an administrator, and identification read from the information storage medium at the time of entry from the entrance / exit management device The admission identification information acquisition means for acquiring information, the identification information acquired by the admission identification information acquisition means, and the admission authority identification information are collated, and if they match, the user enters the facility. The admission information transmitting means for transmitting admissible information to be enabled to the admission / exit management device, the identification information acquired by the admission identification information acquisition means, and the management authority identification information are collated, and if they match, Admission manager specifying means for specifying a user as an administrator, and an availability control for controlling the managed device to be usable when the admission manager specifying means specifies the user as an administrator Exit identification information acquisition means for acquiring identification information read from the information storage medium at the time of exit, identification information acquired by the exit identification information acquisition means, and the management authority identification If the information matches, the exit manager identifying means for identifying the user as an administrator when they match, and the management target device is controlled to be unusable when the manager leaves the room. And a unavailable control unit.

In the server configured as described above, the entrance / exit management device reads identification information from an information storage medium possessed by the user when the user enters / exits the facility. Identification information for identifying each user is stored in the information storage medium. The entrance / exit management device transmits the identification information read from the information storage medium to the server via the network. The server is management information that is identification information of the user who has the authority to enter the facility, and is identification information of the user who has the authority to manage the device to be managed. Authority identification information is stored in advance. Therefore, when the identification information received from the entrance / exit management device matches the entrance authority identification information, the server determines that the user has the entrance authority, and enters the entrance enable information that allows entry into the entrance / exit management device. Send to. The entrance / exit management device that has received the admission information permits the user to enter the facility by opening an automatic door or the like. Further, when the identification information received from the entrance / exit management device matches the management authority identification information, the server determines that the user has management authority and permits the use of the management target device in the facility. Information is transmitted to the management target device. When receiving the usage permission information from the entrance / exit management device, the management target device controls the management target device to be in a usable state. According to this, when the manager enters the facility, the management target apparatus can be automatically used. Therefore, it is not necessary to perform a special operation for making the management target device available, and the burden on the administrator can be reduced.
Furthermore, when the identification information acquired from the entrance / exit management device coincides with the management authority identification information when the user leaves, the server identifies that the user leaving the office is an administrator having management authority, The management target device is controlled so that it cannot be used. Therefore, the administrator does not need to be aware of other administrators, and no special operation is required for each administrator to make the managed device unusable, reducing the burden on the administrator. In other words, the management target apparatus can be automatically used only while the manager is in the room, without bothering the manager.

In yet another aspect of the present invention, a program executed by a computer that manages the use of a management target device installed in a facility using an information storage medium in which identification information of a user is stored , An admission authority identification, which is identification information indicating a user who is allowed to enter the network, and is connected to the management target device and an entrance / exit management device that manages entrance / exit to the facility by the user via a network. An entry authority information storage means for storing information, a management authority information storage means for storing management authority identification information which is identification information indicating a user who is an administrator, and the information storage medium upon entry from the entrance / exit management device The admission identification information acquisition means for acquiring the identification information read from the identification information acquired by the admission identification information acquisition means and the admission authority identification information The admission information transmitting means for transmitting admission information that enables the user to enter the facility to the admission / exit management device, the identification information acquired by the admission identification information acquisition means, and the management authority identification information The admission manager specifying means for specifying the user as an administrator when they match, and when the admission administrator specifying means specifies the user as an administrator, the managed device can be used. The available control means for controlling to be, the exit identification information acquiring means for acquiring the identification information read from the information storage medium at the time of leaving from the entrance / exit management device, the identification acquired by the exit identification information acquiring means Information and the management authority identification information are collated, and if they match, an exit manager specifying means for specifying the user as an administrator. When the administrator leaves the room, the managed device is not used. Unavailable control means for controlling such that the ability as to function the computer.

  By executing the above program by a computer, the above-described server can be realized. Moreover, each aspect of the above-described server can be realized in the same manner.

  According to the present invention, it is possible to use an electronic device and equipment automatically and simply while the administrator is in the room, without using the information storage medium, and without bothering the administrator.

  Preferred embodiments of the present invention will be described below with reference to the drawings.

  The present invention uses an information storage medium to manage the use of management objects provided in a facility without bothering an administrator.

  FIG. 1 shows an outline of a management system that manages the use of electronic devices in the present embodiment. The facility in the present invention includes, for example, a room, a building, a floor in a building, a specific place, a specific area, a specific area, a specific area, and the like. In the description of the present embodiment, an electronic apparatus is given as an example. Describe the room equipped with.

  The scanner 50, which is an electronic device provided in the room 4, can be used by the operator 2 only while the administrator 1 having authority to manage the electronic device is present in the room. The manager 1 has the right to enter the room 4 and the right to manage the scanner 50, and has a non-contact IC card 3a that is an information storage medium. On the other hand, the operator 2 has the right to enter the room 4 and has a non-contact IC card 3b which is an information storage medium. The non-contact IC card 3 includes both the non-contact IC cards 3a and 3b.

  An entrance management device 6 is provided in the vicinity of the entrance 5a of the room 4. The entrance management device 6 controls the open / close state of the automatic door 7 provided at the entrance 5a. The room entrance management device 6 is configured to be able to transmit information wirelessly to and from the non-contact IC card 3 and can read information stored in the non-contact IC card 3. Further, an exit management device 10 is provided in the vicinity of the outlet 5b of the room 4, and the open / close state of the automatic door 7 is controlled by the exit management device 10. Further, the leaving management apparatus 10 is configured to be able to transmit information wirelessly to and from the non-contact IC card 3 and can read information stored in the non-contact IC card 3. That is, in this embodiment, the non-contact IC card 3 is used as access control for entering and leaving the room.

  The entrance management device 6 and the exit management device 10 are connected to the scanner 50 and the server 70 via the network 60 so as to be communicable. The server 70 is a device that controls the usage state of the scanner 50 based on information received from the room entry management device 6 and the room exit management device 10.

  In addition, there are a case where the entrance 5a and the exit 5b are separately provided in the room 4, and a case where the entrance 5a and the exit 5b are combined as one entrance, but FIG. 1 shows a case where one entrance is used. It is shown. Further, the entrance / exit management device 6 and the exit management device 10 may be integrated into a single unit, and may be provided on a part of the wall separating the outside and the inside of the room. Here, the entrance / exit management device is, for example, an IC card reader / writer that can read information from the non-contact IC card 3.

  For example, as shown in FIGS. 2 to 4, the non-contact IC card 3 as an information storage medium has a configuration in which a non-contact IC tag 8 is built in card bases 30 and 31. The non-contact IC tag 8 is also referred to as, for example, a non-contact data carrier or RFID, and as shown in FIG. 4, a transmission / reception unit 88 formed of a coil pattern is formed on a base material 81 such as plastic. The non-contact IC tag 8 receives and transmits a radio wave having a constant frequency by forming a resonance circuit with a coil and a capacitive element. As another method, power transmission and data transmission may be performed by electromagnetic induction of a carrier wave from a reader / writer. Generally, a frequency band of 135 kHz (medium wave), 13.56 MHz, and 2.45 GHz (microwave) is used.

  In the case of the illustrated example, the transmitting / receiving unit 88 formed of a coil pattern forms a jumping circuit on the back surface of the base material 81 by the conductive member 84 and is connected to the bumps on the back surface of the IC chip 82 by the coil connection terminals 88C. The IC chip 82 includes a control unit 89 that is a CPU and a storage unit 90 that is a memory.

  In the illustrated example, the capacitive element is built in the IC chip 82. Such a non-contact IC tag 8 is formed by forming a coil pattern by photo etching or etching after resist printing on a metal foil such as an aluminum foil laminated on a resin base material, mounting an IC chip 82, and for protection. It is formed by providing a coating. The size can also be set to about 30 mm × 30 mm or less.

  As the resin base material 81 used for the non-contact IC tag 8, various materials such as PET, polypropylene, polyethylene, polystyrene, and nylon can be used, and paper may be used. Although thickness can be 15-300 micrometers, 20-100 micrometers is more preferable from points, such as intensity | strength, workability | operativity, and cost. Although copper foil, aluminum foil, or iron foil can be used as the metal foil, aluminum foil is preferable from the viewpoint of cost and workability, and the thickness is preferably about 6 to 50 μm.

  In reading and writing information recorded on these non-contact IC tags 8, a calling signal that resonates from the IC card reader / writer to the non-contact IC tag 8 is transmitted, and non-contact is performed at a distance of several cm to several tens of cm. The response signal from the contact IC tag 8 is read. Thereby, the information recorded in the memory which is a memory | storage part of IC chip 82 of the non-contact IC tag 8 can be read, or information can be written. In addition, ID information (identification information) for authenticating the person himself / herself is registered in advance in a memory that is a storage unit of the IC chip 82.

  Next, the system configuration will be described in detail with reference to the functional block diagram of FIG. FIG. 5 shows a system configuration including the non-contact IC card 3, the entrance / exit management device, the scanner 50, and the server 70. The entrance / exit management device, the scanner 50, and the server 70 are communicably connected via the network 60. One preferred example of the network 60 is the Internet, but it may be wired or wireless as long as data can be exchanged.

  The entry / exit management device in the block diagram of FIG. 5 is an apparatus in which the entrance management device 6 and the exit management device 10 in FIG. 1 are integrated. In the present embodiment, it is assumed that there is one manager for each room and a plurality of operators.

  The entrance / exit management device provided in the vicinity of the entrance / exit 5 includes a transmission / reception unit 11, an authority determination unit 12, a door opening / closing unit 13, a storage unit 14, a communication unit 15, and a control unit 16. Each unit is controlled by the control unit 16.

  The transmission / reception unit 11 transmits and receives information wirelessly with the transmission / reception unit 88 of the non-contact IC card 3.

  Based on the identification information received from the non-contact IC card 3 at the time of entry / exit and the authority table stored in the storage unit 14 in advance, the authority determination unit 12 can enter the room. It is determined whether the user has authority. Further, the authority determination unit 12 determines whether the person possessing the non-contact IC card is based on the identification information received from the non-contact IC card 3 at the time of entering or leaving the room and the authority table stored in the storage unit 14 in advance. It is determined whether or not the user has administrative authority.

  Here, the authority table stored in the storage unit 14 will be described with reference to FIG. FIG. 6 is a diagram schematically showing the data structure of the authority table. In the present embodiment, the contactless IC card 3 includes an employee ID as identification information.

  As shown in the figure, the authority table includes items of employee ID, room entry authority, management authority, and post. The employee ID is information for identifying each user such as an administrator or an operator. The entry authority is an authority to enter the room 4, and a circle (◯) is stored in the entry authority item corresponding to the employee ID having the entry authority in the authority table. The management authority is an authority capable of managing the scanner 50 in the room 4, and a circle (◯) is stored in the management authority item corresponding to the employee ID having the management authority in the authority table. The operator can use the scanner 50 only while an administrator having management authority is in the room 4. The job title is information indicating the level of the manager, and in the privilege table, job titles such as “department manager” and “section manager” are stored in the job title item corresponding to the employee ID having the management privilege. The authority determination unit 12 refers to the authority table based on the identification information read from the non-contact IC card, that is, the employee ID, so that the person who owns the non-contact IC card has the authority to enter the room and / or the management authority. It can be easily determined whether or not.

  When it is determined by the processing by the authority determining unit 12 that the person who has the non-contact IC card has the authority to enter the room when entering or leaving the door, the door opening / closing unit 13 opens the automatic door 7. Further, when it is determined by the processing by the authority determination unit 12 that the person who has the non-contact IC card has the management authority when entering the room, the use permission information is sent to the server 70 via the communication unit 15. Send. The usage permission information is information for requesting that the scanner 50 in the room 4 be used. On the other hand, when it is determined by the processing by the authority determination unit 12 that the person who has the non-contact IC card has the management authority when leaving the room, the use stop information is sent to the server 70 via the communication unit 15. Send. The use stop information is information for requesting the scanner 50 in the room 4 to be used.

  In this embodiment, the data structure of the authority table stored in the storage unit 15 is as shown in FIG. 6, but the present invention is not limited to this, and is read from the non-contact IC card 3. If the presence / absence of room entry authority and management authority can be determined based on the identification information, the data structure can be arbitrarily set.

  The server 70 includes a usage determination unit 21, a scanner lock control unit 22, a communication unit 23, and a control unit 24. Each unit is controlled by the control unit 24.

  The usage determining unit 21 determines whether the scanner 50 is to be used or is to be stopped. Specifically, the use determination unit 21 determines that the scanner 50 is in a usable state when use permission information is received from the entry / exit management device via the communication unit 23. In addition, when the use determination unit 21 receives use stop information from the entrance / exit management device via the communication unit 23, the use determination unit 21 determines that the scanner 50 is in a use stop state.

  The scanner lock control unit 22 controls the usage state of the scanner 50 by transmitting a predetermined signal via the communication unit 23. Specifically, when the usage determining unit 21 determines that the scanner 50 is in a usable state, the scanner lock control unit 22 unlocks the scanner 50 and controls the scanner 50 to be in a usable state. On the other hand, when the usage determining unit 21 determines that the scanner 50 is to be stopped, the scanner lock control unit 22 locks the scanner 50 and controls the scanner 50 so that it cannot be used.

  In the present embodiment having the above configuration, the room 4 corresponds to a facility, and the entrance / exit management device functions as an entrance / exit management device. Further, the scanner 50 functions as a management target device.

  Next, room entry processing by the above management system will be described with reference to FIG. FIG. 7 is a flowchart of the room entry process.

  First, when entering the room 4 which is a facility where entry is managed, the administrator or operator who is a user enters and exits the non-contact IC card 3 which is an information storage medium in order to enter the room 4 from the entrance. Move closer to the management device. At this time, the entrance / exit management device reads the employee ID stored in the storage unit 90 of the non-contact IC card 3 (step S1). The authority determination unit 12 of the entry / exit management device allows the person who has the non-contact IC card 3 to enter the room based on the read employee ID and the authority table registered in advance in the storage unit 14 of the entry / exit management device. It is determined whether the user has authority (step S2). If the user does not have entry authority (step S2; No), the process ends without opening the automatic door 7. On the other hand, if the user has authority to enter the room (step S2; Yes), the authority determination unit 12 further determines whether the person who owns the non-contact IC card 3 has management authority (step S3). . If the user does not have management authority (step S3; No), the process proceeds to step S5. On the other hand, when it has management authority (step S3; Yes), use permission information is transmitted to the server 70 via the communication part 15 (step S4). Then, the door opening / closing unit 13 opens the automatic door 7 so that an administrator or an operator having entry authority can enter the room 4 (step S5). This completes the room entry process.

  On the other hand, the server 70 receives use permission information from the entrance / exit management device via the communication unit 23. When the usage permission information is received, the usage determination unit 21 determines that the scanner 50 is in a usable state. Then, the scanner lock control unit 22 releases the lock of the scanner 50 to make it usable. Thus, when an administrator enters the room 4, the scanner 50 can be automatically used without any special action by the administrator.

  Next, the leaving process by the above management system will be described with reference to FIG. FIG. 8 is a flowchart of the leaving process.

  When leaving the room 4, the manager or operator who is a user brings the non-contact IC card 3, which is an information storage medium, close to the entrance / exit management device in order to leave the exit of the room 4. At this time, the entrance / exit management device reads the employee ID stored in the storage unit 90 of the non-contact IC card 3 (step S11). The authority determination unit 12 of the entrance / exit management device is managed by a person who possesses the non-contact IC card 3 based on the read employee ID and the authority table registered in advance in the storage unit 14 of the entrance / exit management device. It is determined whether the user has authority (step S12). If the user does not have management authority (step S12; No), the process proceeds to step S14. On the other hand, if the user has administrative authority (step S12; Yes), the use stop information is transmitted to the server 70 via the communication unit 15 (step S13). Then, the door opening / closing part 13 opens the automatic door 7 so that the manager or the operator can leave the room 4 (step S14). Thereby, the leaving process is completed.

  On the other hand, the server 70 receives use suspension information from the entry / exit management device via the communication unit 23. When the use stop information is received, the use determination unit 21 locks the scanner 50 to make it unusable. As a result, when the manager leaves the room 4, the use of the scanner is automatically stopped without any special action by the manager.

  In the present embodiment, the non-contact IC card 3 is used, but the present invention is not limited to this, and a mobile phone equipped with an information storage medium may be used. That is, in the present invention, any portable storage medium can be applied as long as it can be used as access control for entering and leaving the room.

  In the present embodiment, the non-contact IC card 3 has only identification information, and the entrance / exit management device refers to the authority table based on the read identification information, so that the presence / absence of entry authority and management authority is determined. Is going to be judged. However, the present invention is not limited to this, and the server 70 has an authority table in advance, and the server 70 has the authority to enter the room based on the identification information read from the non-contact IC card 3 by the entrance / exit management device. It is also possible to determine the presence or absence of management authority. Furthermore, the non-contact IC card 3 may have information indicating the presence / absence of entry authority and management authority. Specifically, the contactless IC card 3a possessed by the manager includes information (flags, etc.) indicating that there is authority to enter the room and management, and the contactless IC card 3b possessed by the operator Information indicating that the user has authority is included. In this case, the entrance / exit management device does not need to register an authority table in advance, and determines whether there is an entrance authority and management authority based on information read from the non-contact IC card.

  In this embodiment, the server 70 is included as a component of the management system, and the server 70 controls the usage state of the scanner 50. Therefore, the present invention can apply any electronic device or equipment other than the scanner 50 such as a printer or a locker as the management target device. However, the present invention is not limited to this, and the server 70 may not be included as a component of the management system. In this case, the entrance / exit management device transmits the use permission information and the use stop information directly to the management target device such as the scanner 50 via the network 60. A management object apparatus should just control itself to a usable state, when use permission information is received from an entrance / exit management apparatus. On the other hand, when the use suspension information is received from the entrance / exit management device, the management target device may control itself so that it cannot be used.

  As described above, according to the present invention, the information that the manager has entered the room 4 is automatically transmitted to the electronic devices and facilities in the room 4 via the entry / exit management device. It is possible to reduce an administrator's burden of performing an operation for making an electronic device or the like available to an operator.

[First modification]
In the above embodiment, the number of managers in each room is one. However, the present invention is not limited to this, and a plurality of managers may enter and leave each room. In this case, the entrance / exit management device stores the employee ID of the administrator in the storage unit 14 when a person having management authority enters the room. Further, the entry / exit management device deletes the employee ID of the manager stored in the storage unit 14 when a person having management authority leaves the room. Then, the entrance / exit management device refers to the storage unit 14, and transmits use stop information to the server 70 when all managers exit the room 4, that is, when there is no manager in the room 4. .

  In addition, when a plurality of managers enter and leave each room, the permitted range of use of electronic devices or the like installed in the room 4 may be limited according to the level of the manager. The manager level is, for example, a title such as “manager” or “section manager”. In this case, in the storage unit 14 of the entrance / exit management device, a permission range table in which an administrator level and a permission range of an electronic device or the like are associated is registered in advance.

  Here, the permission range table will be described with reference to FIG. FIG. 9 is a diagram schematically illustrating the data structure of the permission range table. As shown in the figure, the permission range table includes items such as an administrator level, a locker, a PC, and a scanner. The administrator level is information indicating the level of the administrator, and is a title in the above embodiment. Lockers, PCs, and scanners are electronic devices and equipment in the room 4, and in the permission range table, a circle (○) appears in the items of electronic devices that are permitted to be used when a manager at the corresponding management level enters the room. Stored.

  The authority determination unit 12 of the entrance / exit management device determines whether or not there is management authority by referring to the authority table as shown in FIG. 6 based on the employee ID read from the non-contact IC card 3, and also the administrator's Identify the level. Furthermore, when it is determined that the person carrying the non-contact IC card 3 has the management authority, the entrance / exit management device refers to the permission range table as shown in FIG. 9 based on the specified level of the administrator. The permitted range of the electronic device permitted to be used in the room 4, that is, the electronic device in the room 4 is specified. Then, the entrance / exit management device transmits use permission information including the specified permission range to the server 70. When the server 70 receives the use permission information, the server 70 can use the electronic device or the like within the permission range included in the use permission information.

  Specifically, as an example of the permission range according to the level of the manager, if it is a department manager level, all electronic devices installed in the room 4 can be used, and if it is a section manager level, it is installed in the room 4 It is conceivable that the type and number of electronic devices that can be used change depending on the level of the administrator, such as only a part of the electronic devices that can be used can be used. In addition, it is possible to execute both a large-volume production application and a small-lot production application in an electronic device installed in the room 4 if it is a department manager level, and it is possible to execute only a small-lot production application if it is a section manager level. For example, the types and number of applications that can be used may vary depending on the level of the administrator.

  In this modification, the permission range table as shown in FIG. 9 is used. However, the present invention is not limited to this, and the administrator level and permission of electronic devices in the room 4 are not limited. As long as the range is associated, the configuration can be arbitrary. Therefore, when two or more managers having a predetermined level or more are prepared, it is possible to set different permission ranges.

  Further, although separate tables are used in this modification, the authority table as shown in FIG. 6 and the permission range table as shown in FIG. 9 may be combined into one table.

[Second modification]
In the above embodiment, when the administrator leaves the room 4, the use of the scanner 50 is immediately stopped. However, the present invention is not limited to this, and the use of the scanner 50 is stopped. The timing to do can be set arbitrarily.

  For example, when the scanner 50 is in use, the automatic door 7 can be set not to open even if the manager holds the non-contact IC card over the entrance / exit management device. In this case, the server 70 determines whether the scanner 50 is being used via the communication unit 23 when receiving the use suspension information from the entrance / exit management device. If it is determined that the scanner 50 is in use, the server 70 transmits in-use information indicating that the scanner 50 is in use to the entry / exit management device via the communication unit 23. The entrance / exit management device prevents the automatic door 7 from being opened when the busy information is received from the server 70. Further, when the server 70 determines that the scanner 50 is not in use thereafter, the server 70 transmits use end information indicating that the scanner 50 is not in use to the entry / exit management device via the communication unit 23. When the entrance / exit management device receives the use end information from the server 70, the entrance / exit management device opens the automatic door 7 so that the manager can exit the room 4.

  According to this, the manager cannot leave the room 4 until the operator is alerted and the scanner 50 is not used. Therefore, problems such as the sudden stop of the scanner 50 during use of the operator and the use of the scanner 50 by the operator even though the manager is not in the room 4 can be solved.

  According to the present invention, a management system that uses an information storage medium and can automatically use electronic devices and facilities only while the administrator is in the room, without bothering the administrator. Can be used as

It is a figure explaining the outline | summary of a management system. It is a top view of a non-contact IC card. It is sectional drawing by the AA line of FIG. It is a top view of the IC tag built in the non-contact IC card. It is a functional block diagram of a management system. It is a figure which shows typically the data structure of an authority table. It is a flowchart which shows the room entry process by a management system. It is a flowchart which shows the leaving process by a management system. It is a figure which shows typically the data structure of a permission range table.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 ... Manager 2 ... Operator 3 ... Non-contact IC tag 4 ... Room 6 ... Entrance management device 10 ... Exit management device 50 ... Scanner 60 ... Network 70 ... Server

Claims (7)

A management system for managing the use of managed devices installed in a facility using an information storage medium possessed by the user,
In the management system, the management target device and an entrance / exit management device that manages entrance / exit to the facility by the user are communicably connected via a network,
The information storage medium has user identification information according to each user,
The entrance / exit management device includes:
A storage unit for storing the identification information of the administrator;
Information reading means for reading information from the information storage medium upon entry;
And admission control means for information by the information reading means has read is when permitted as the entrance authority information, to allow entrance to the facility of the user,
When the information said information reading means has read is identified as the management right information, and the administrator identifying means for identifying the administrator the user,
Use permission information transmitting means for transmitting use permission information for permitting use of the management target device to the management target device when the administrator specifying unit specifies the user as an administrator;
Exit information reading means for reading information from the information storage medium when leaving,
When the information read by the exit information reading means is permitted as the management authority information, an exit manager specifying means for specifying the user as an administrator,
When the manager leaves the room, use stop information transmission means for transmitting use stop information for stopping use of the management target device to the management target device , and
The managed device is:
Usage permission information receiving means for receiving the usage permission information from the entrance / exit management device;
Based on the use permission information received by the use permission information receiving means, an availability control means for controlling the managed device to be usable;
Usage suspension information receiving means for receiving the usage suspension information from the entrance / exit management device;
A management system comprising: an unusable control unit configured to control the device to be managed to be unusable when the use suspension information is received . A management system for managing the use of a management target device installed in a facility using an information storage medium storing user identification information,
In the management system, the management target device and an entrance / exit management device that manages entrance / exit to the facility by the user are communicably connected via a network,
The entrance / exit management device includes:
Admission authority information storage means for storing admission authority identification information which is identification information indicating a user permitted to enter;
Management authority information storage means for storing management authority identification information that is identification information indicating a user who is an administrator;
Upon entering, an entrance identification information reading unit that reads the identification information from the information storage medium;
Checking the identification information read by the admission identification information reading means and the admission authority identification information, and admission control means that enables admission to the facility of the user when they match,
The identification information read by the admission identification information reading means and the management authority identification information are collated, and if they match, an admission manager specifying means for specifying the user as an administrator,
Admission manager information storage means for storing the identification information of the user identified as an administrator by the admission manager specifying means as admission manager information;
Use permission information transmitting means for transmitting use permission information for permitting use of the management target device to the management target device when the admission manager specifying unit specifies the user as an administrator;
Upon leaving the exit identification information reading means for reading the identification information from the information storage medium,
An exit manager identifying means for collating the identification information read by the exit identification information reading means with the management authority identification information and identifying the user as an administrator when they match,
When the manager leaves the room, use stop information transmission means for transmitting use stop information for stopping use of the management target device to the management target device, and
The managed device is:
Usage permission information receiving means for receiving the usage permission information from the entrance / exit management device;
Based on the use permission information received by the use permission information receiving means, an availability control means for controlling the managed device to be usable;
Usage suspension information receiving means for receiving the usage suspension information from the entrance / exit management device;
A management system comprising: an unusable control unit configured to control the device to be managed to be unusable when the use suspension information is received . The management authority information storage means stores the management authority identification information and the level of the administrator in association with each other,
The entrance / exit management device includes:
Permission range information storage means for storing permission range information in which the level of the manager is associated with the permission range permitted to be used in the managed device;
When the admission manager specifying means specifies the user as an administrator, the level specifying means for specifying the level of the administrator by referring to the management authority information based on the matched identification information;
A permission range specifying means for specifying the permission range by referring to the permission range information based on the level of the administrator specified by the level specifying means;
The management system according to claim 2 , wherein the usage permission information transmitting unit transmits usage permission information permitting use within the permission range specified by the permission range specifying unit to the management target device. The managed device is:
When the usage suspension information receiving means receives the usage suspension information, usage determining means for judging whether or not the management target device is being used at that time;
In-use information transmission means for transmitting in-use information indicating that the management target device is used to the entrance / exit management device when the use determination unit determines that the management target device is used. And further comprising
The entrance / exit management device includes:
In-use information receiving means for receiving the in-use information from the managed device;
Exit control means for disabling the exit of the user identified by the exit manager specifying means as an administrator when receiving the in-use information, and
The unusable control unit receives the use suspension information, and determines that the managed device is unusable when the use determining unit determines that the managed device is not used. management system according to claim 2 or 3, wherein the controller controls so. When the admission manager information indicates the presence of a plurality of managers,
5. The management system according to claim 3, wherein the permission range specifying unit specifies the permission range based on a level of a highest manager . A server for managing the use of a management target device installed in a facility using an information storage medium storing user identification information ,
The management target device and the user are connected to an entrance / exit management device that manages entrance / exit to the facility via a network so as to be communicable,
Admission authority information storage means for storing admission authority identification information which is identification information indicating a user permitted to enter;
Management authority information storage means for storing management authority identification information that is identification information indicating a user who is an administrator;
From the entrance / exit management device, entrance identification information acquisition means for acquiring the identification information read from the information storage medium at the time of entrance,
The identification information acquired by the admission identification information acquisition means and the admission authority identification information are collated, and if they match, the admission information that enables the user to enter the facility is sent to the admission / exit management device. An admission information transmission means for transmitting;
The identification information acquired by the admission identification information acquisition means and the management authority identification information are collated, and if they match, an admission manager specifying means for specifying the user as an administrator,
When the admission manager specifying means specifies the user as an administrator, an available control means for controlling the managed device to be usable;
From the entrance / exit management device, exit identification information acquisition means for acquiring the identification information read from the information storage medium at the time of exit,
The exit manager identifying means for collating the identification information acquired by the exit identification information acquiring means with the management authority identification information and identifying the user as an administrator when they match,
A server comprising: an unusable control unit configured to perform control so that the management target device becomes unusable when the manager leaves the room . A program that is executed by a computer that manages the use of a management target device installed in a facility using an information storage medium in which user identification information is stored ,
The management target device and the user are connected to an entrance / exit management device that manages entrance / exit to the facility via a network so as to be communicable,
Admission authority information storage means for storing admission authority identification information which is identification information indicating a user permitted to enter;
Management authority information storage means for storing management authority identification information that is identification information indicating a user who is an administrator;
From the entrance / exit management device, entrance identification information acquisition means for acquiring the identification information read from the information storage medium at the time of entrance,
The identification information acquired by the admission identification information acquisition means and the admission authority identification information are collated, and if they match, the admission information that enables the user to enter the facility is sent to the admission / exit management device. Admission information transmission means to transmit,
The identification information acquired by the admission identification information acquisition means and the management authority identification information are collated, and if they match, an admission manager specifying means for specifying the user as an administrator,
An availability control means for controlling the managed device to be usable when the admission manager identifying means identifies the user as an administrator;
Exit identification information acquisition means for acquiring identification information read from the information storage medium at the time of exit from the entrance / exit management device,
An exit manager identifying means for collating the identification information acquired by the exit identification information acquiring means with the management authority identification information and identifying the user as an administrator if they match.
A program for causing the computer to function as an unusable control unit for controlling the management target device to be unusable when the manager leaves the room .

Images