JPH09319836A - Authentication card issue device and passage management system - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide the passage management system and the authentication card issue device which ensure high security for issuance of an authentication card and determination of rejection/permission of passage to each passage area. SOLUTION: A passage pattern is registered in a host computer 2 by a confirmation terminal 3, and personal data is registered in the host computer 2 by an input terminal 1. Thereafter, issue approval is registered by the confirmation terminal 3, and the authentication card is issued by a card issue device regarding personal data for which issue approval is registered as 'OK'. Further, the host computer 2 distributes the registered passage pattern to card readers 5 and generates register data of the passage pattern for each card reader and register data based on personal data already issued and registered in the host computer 2, and these register data are respectively downloaded to plural card readers 5 through a card reader controller 6.

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to, for example, an entrance management system for managing entrance and entrance to a room or facility requiring security by using a portable recording medium such as an IC card as an individual authentication card. The present invention relates to a traffic management system such as a management system and a card issuing device for issuing a personal authentication card used in such a traffic management system.

[0002]

2. Description of the Related Art In recent years, due to the importance of ensuring security in the company due to computerization, entering a room or facility,
Various traffic management systems such as an entrance management system and an entrance management system for checking entrance have been developed.

Such a traffic management system is a host computer for registering personal data of a passerby who is about to enter or enter a room or facility, and is connected to this host computer so that each individual can register the registered personal data. Issuing machines that record and issue on portable recording media such as IC cards, magnetic cards, etc. that are carried, installed at various places where traffic control is required, and for example, from a magnetic card carried by a passerby who intends to enter or enter the room Based on the read personal identification number and the personal data downloaded from the host computer, it is composed of a plurality of card readers for judging whether or not the passerby can pass.

The personal data of each individual registered in the host computer includes an identification number (ID number, serial number automatically issued) of the individual, an expiration date, a passage code designating a place where the person can pass, and the like. included.

The pass code indicates whether or not the place is managed by each of the card readers, and is designated by, for example, 99 codes "01" to "99". That is, for example, 3 of A, B, and C
In the traffic management system in which traffic is controlled by one card reader at each place, when the traffic code is "01", it is determined that the card reader A can pass the traffic, the card reader B cannot pass the traffic, and the card reader C can pass the traffic. .

When the personal data registered in the host computer is downloaded to each of the plurality of card readers, the pass code of the registered individual is assigned to each individual and each card reader. As a result, passability information for determining whether or not each registered individual is passable by each card reader is downloaded to each card reader as registration data together with other personal data. Has become. For example, when the passage code of one registered personal data is "01" as described above, the card reader A indicates "1" as the passage permission information corresponding to the identification number of the individual. Is assigned to the card reader B, and "0" is assigned as passability information in correspondence with the identification number of the individual, and in the card reader C, passability is assigned according to the identification number of the individual. As information, “1” indicating that the vehicle is allowed to pass is assigned.

In the card issuing machine, an individual identification number, an expiration date and the like are recorded on a magnetic stripe of a magnetic card based on the personal data registered in the host computer. At this time, no information for determining whether or not the vehicle can pass is not recorded on the magnetic card.

A passerby carrying such a magnetic card inserts the magnetic card into a card reader provided at various places, and when the card reader accepts the magnetic card, the card reader records on the magnetic stripe. The personal identification number is read, and the passability of the passerby is determined based on the passability information stored corresponding to the personal identification number.

[0009]

When an authentication card used in a conventional traffic management system is issued by a card issuing machine, issuance authorization approval records necessary information when the authentication card base is made of paper. I did it by directly putting the approval stamp on the authentication card that I did, but I can not put the approval stamp on the authentication card that has been widely used recently such as plastic, so it is a means to authorize and approve issuance. Did not exist. That is, there is a possibility that the issuance of the authentication card may be easily performed without the approval of the authorized person, despite the traffic management requiring security.

Further, since the pass code which designates a passable place (gate) assigned to each passer-by uses a limited pattern created in advance, the pass code is limited to a highly secure limited area. When performing traffic management, there is a problem that only a person with special authority can perform advanced security management such as determining and allocating traffic to such areas.

Therefore, an object of the present invention is to provide a passage management system and an authentication card issuing device which can ensure high security in issuing an authentication card and determining whether or not to pass each passage area.

[0012]

An authentication card issuing device of the present invention is at least an authentication card issuing device for issuing an authentication card of each passerby used for judging whether or not a passerby can pass through a passing area. First registration means for registering identification information necessary for identifying each passerby and personal data including a passcode designating a passable place of the passerby, and a pass designated by the passcode The setting means for setting a possible location, the second registration means for registering the authorization information for authorizing the issuance of the authentication card corresponding to the personal data registered by the registration means, and the second registration means. Of the personal data in which the authorization information is registered, at least the identification information of the passerby is recorded in a predetermined portable recording medium, and an issuing means for issuing the authentication card is provided. When accepting the authentication card issued by the issuing means and determining whether or not the passerby can pass, the personal data of each passerby registered by the registering means and a place where the setting means can pass through Issuance of the authentication card and determination of passability to each pass area by judging passability of the passerby from the identification information read from the accepted authentication card based on the set pass code High security can be secured.

Further, in the traffic management system of the present invention, at least each passenger is identified in a traffic management system that accepts an authentication card possessed by a passer and determines whether or not the passerby can pass the traffic area. First registration means for registering personal information including identification information necessary for the traffic and a pass code for designating a passable place of the passerby, and setting for setting a passable place designated by the pass code Means, second registration means for registering authorization information for authorizing the issuance of the authentication card in correspondence with the personal data registered by the registration means, and an individual for whom the authorization information is registered by the second registration means. Of the data, at least the identification information of the passerby is recorded in a predetermined portable recording medium and issuance means for issuing the authentication card, and provided in each passage area,
A plurality of card readers that accept the authentication card issued by the issuing means and determine whether or not the passerby is allowed to pass;
Each of the plurality of card readers is provided with a reading means for reading at least the identification information from the accepted authentication card, a personal data registered by the registration means, and a place where the setting means can pass through. And a determination means for determining whether or not the passerby is allowed to pass based on the identification information read out by the reading means based on the passcode. High security can be secured in the decision of.

[0014]

BEST MODE FOR CARRYING OUT THE INVENTION An embodiment of the present invention will be described below with reference to the drawings. FIG. 1 schematically shows the configuration of the traffic management system according to the present embodiment. When a passerby enters or enters a room or facility requiring security, for example, a passerby possesses it. Passing is judged based on the recorded contents of an authentication card such as an IC card, a magnetic card, etc., and the passage is managed so that only a person who is permitted to pass can enter and enter the room.

In FIG. 1, this traffic management system is
An input terminal 1 for inputting personal data of a passerby who is entering or entering a room or facility, a host computer 2 for storing personal data input by the input terminal 1, and a host computer 2 which is connected to the host computer 2 and mainly Confirmation terminal 3 for permitting the issuance of an authentication card based on the registered personal data and for registering a traffic pattern that determines a passable place designated by a traffic code, and personal data registered in host computer 1 A card issuing device 4 for issuing an authentication card by recording on a portable recording medium, a personal identification number read from an authentication card carried by a passerby who intends to enter or enter a room installed in each place where traffic control is required Etc. and a plurality of judgments as to whether or not the passerby is allowed to pass based on personal data downloaded from the host computer 2 and the pass pattern. The card reader 5, and a card reader controller 6 that controls the communication interface to be supplied to each of the plurality of card readers 5 according personal data and traffic patterns a predetermined protocol that is registered in the host computer 2.

In the following description of the embodiments, the plurality of card readers 5 connected to the host computer 2 via the card reader control device 6 are the card reader A,
In some cases, four card readers such as B, C, and D will be described.

When the personal data is registered through the input terminal 1 and the traffic pattern is registered through the confirmation terminal 3, the host computer 2 stores the information in a predetermined table format. Then, based on these registered personal data and traffic patterns, a plurality of card readers 5
Registration data to be downloaded to each of the above, or issuance data to be recorded in a predetermined portable recording medium.

The personal data of each passerby registered in the host computer 2 includes an individual identification number (ID number or serial number automatically issued at the time of registration), expiration date, and a place where the person can pass. The specified pass code etc. are included.

The pass code indicates whether or not each place managed by each card reader 5 is passable, and is designated by, for example, 99 codes "01" to "99".

The traffic pattern is a combination of the contents of the traffic code, that is, one possible location designated by the traffic code. Issuing authorization and registration of traffic patterns at the confirmation terminal 3 can be performed only by a person having a predetermined authority. That is, when accessing the host computer 2 via the confirmation terminal 3, the confirmation terminal 3 requests the input of identification information of the person who performs the operation,
It may be possible to determine whether or not to permit access based on the input identification information.

The card issuing device 4 records and issues a personal identification number, an expiration date, etc. on a predetermined portable recording medium (hereinafter simply referred to as a card). At this time, it is not particularly necessary to record the information such as the traffic code for judging whether or not the individual can pass.

FIG. 2 concretely shows the configuration of the main part of the traffic management system shown in FIG. In FIG. 2, the input terminal 1 is composed of a personal computer, and the host computer 2 is connected to the personal computer 2a equipped with a large-capacity recording device for storing personal data, traffic patterns, and the like. , A page printer 2b for printing operation history information and the like.

The confirmation terminal 3 is a personal computer 3
a and a page printer 3b connected to the personal computer 3a for printing operation history information and the like. The confirmation terminal 3 is preferably installed in a place where only a limited number of people can enter in advance, such as an operation management office.

The card issuing device 4 comprises a personal computer 4a, a scanner 4c connected to the personal computer 4a, a serial printer 4b and a printing unit 4d. The scanner 4c reads an image such as a photograph to be printed on a card. The personal data read from the host computer 2 by operating the personal computer 4a and the image read by the scanner 4c are recorded or printed on a predetermined portable recording medium by the printing unit 4d to issue an authentication card. It is like this. At that time, the issuance history of the authentication card is printed by the serial printer 4b.

The card reader control device 6 is composed of a personal computer having a plurality of communication interfaces, and is connected to a plurality of card readers 5 via the communication interfaces so as to communicate with the plurality of card readers 5. By doing so, the personal data and the traffic pattern registered in the host computer 2 are downloaded.

A personal computer forming the input terminal 1, a personal computer 2a forming the host computer 2, a personal computer 3a forming the confirmation terminal 3, a personal computer 4a forming the card issuing device 4, and a card reader control device 6 are formed. The personal computers are connected to a LAN such as Ethernet so that they can communicate with each other.

FIG. 3 shows an example of storage of traffic patterns registered in the host computer 2 via the confirmation terminal 3, and corresponds to 99 traffic codes of "01" to "99", for example. A passable gate designated by the pass code, specifically, an identifier of the card reader 5 that manages the gate is stored.

The example of the storage of the traffic pattern is not limited to that shown in FIG. 3, and, for example, in a traffic management system in which traffic control is performed at various places by three card readers A, B, and C, the traffic code is In the case of "01", the card reader A may pass the traffic, the card reader B may not pass the traffic, and the card reader C may pass the traffic.

Here, the setting and changing of the traffic patterns for the traffic codes of "91" to "99" can be performed only by the person having a predetermined special authority through the confirmation terminal 3. , To those without such authority,
Of course, it is not possible to refer to the traffic patterns corresponding to "91" to "99" and to set or change them.

Further, only a person having a predetermined special authority can set and change the passage pattern for the passage codes of "01" to "90", only through the confirmation terminal 3. Even a person without such authority can refer to or search for a traffic pattern for traffic codes of “01” to “90” from the input terminal 1 or the like, for example.

At the confirmation terminal 3, in order to determine whether or not the person who has the authority to access the traffic patterns of "91" to "99" is requested to input the identification information of the person who performs the operation, the information is input. Access may be permitted only when the identification information is the identification information of a person who has a special authority registered in advance.

On devices other than the confirmation terminal 3, for example, on the display of the input terminal 1, the traffic patterns of "91" to "99" are always masked and not displayed.

As described above, by newly providing the confirmation terminal 3 so that only a person having a special authority can set or change the traffic pattern, whether or not the traffic is allowed to the restricted area having a particularly high security. High security can be secured when determining and allocating.

FIG. 4 shows an example of the storage of personal data registered in the host computer 2 via the input terminal 1. For example, one piece of personal data is the serial number, name, etc. of the individual. It consists of detailed data, expiration date, and pass code, and all registered people are stored in a table format. Further, the table shown in FIG. 4 is provided with a column for registering the approval approval of the authentication card corresponding to each personal data and a column for registering the issuance code indicating whether or not the authentication card has been issued.

The registration of the issuance approval can be performed from the confirmation terminal 3 only by a person having a special authority. For example, when "OK" is registered as the issuance approval,
The card issuing device 4 can create an authentication card,
When "NG" is registered, the authentication card cannot be created.

Host computer 2 via confirmation terminal 3
When you access to and approve issuance, on the confirmation terminal 3,
The input of the identification information of the person who performs the operation may be requested, and the access may be permitted only when the input identification information is the identification information of the person who has the special authority registered in advance.

As described above, by newly providing the confirmation terminal 3 so that only the person who has the special authority can register the issuance approval, a high security can be secured when the authentication card is issued.

As described above, in the host computer 2, after the issuance approval is registered through the confirmation terminal 3 in the personal data registered through the input terminal 1, the card issuing device 4 Issue an authentication card. At this time, the processing target is only the personal data whose issuance approval is registered as “OK”. In the host computer 2, the issue code corresponding to the issued personal data is set to "1" and registered in the table shown in FIG.

Next, the host computer 2 creates registration data for the plurality of card readers 5 from the personal data and the traffic pattern of the passer-by who issued the authentication card, and each card reader is controlled via the card reader control device 6. Download to 5. At that time, in the card reader control device 6,
Each address of the card reader 5 is added to the registration data and supplied to a desired card reader.

Each card reader 5 is downloaded from the host computer 2 via the card reader controller 6.
The registration data of the personal data stored in is composed of, for example, the serial number (identification number) of each passer-by who has already issued the authentication card, the expiration date, and the pass code. It is supposed to be remembered.

Further, the registration data of the traffic pattern that is downloaded from the host computer 2 via the card reader control device 6 and stored in each card reader 5 corresponds to the traffic code and the traffic code, for example, as shown in FIG. It is composed of passability information (“1” when passable and “0” when passable) and is stored in a predetermined table format.

The host computer 2 is registered in FIG.
The traffic pattern as shown in (1) is assigned to each card reader 5 corresponding to the pattern. That is, when the traffic patterns as shown in FIG. 3 are assigned to the card readers A, B, C, and D, the card reader A has the traffic permission / prohibition information for the traffic code “01” as shown in FIG. 1 ”, the pass / fail information for the pass code“ 02 ”is assigned as“ 0 ”, the pass / fail information for the pass code“ 03 ”is assigned as“ 1 ”, and the pass / fail information for the pass code“ 99 ”is assigned as“ 1 ”. .

When the traffic pattern as shown in FIG. 3 is assigned to the card reader D, the traffic code "01"-
The pass / fail information for "90" is assigned "0", and the pass / fail information for pass codes "91" and "99" is assigned "1".

Next, an example of the flow of the registration processing operation of the traffic management system of FIG. 1 will be briefly described. First, the confirmation terminal 3 registers the traffic pattern in the host computer 2 as shown in FIG. 3, and the input terminal 1 registers the personal data in the host computer 1. After that, the issuance approval is registered at the confirmation terminal 3, and for example, in FIG. 4, the card issuing device 4 issues an authentication card for personal data for which the issuance approval is registered as “OK”. At this time, the pass code is not recorded on the card.
Further, the host computer 2 distributes the registered traffic patterns to the card readers 5, and the card readers 5
Registration data based on the traffic pattern for each of the above, and registration data based on the issued personal data registered in the host computer 2 as well, and these are stored in each of the plurality of card readers 5 via the card reader control device 6. to download.

Next, an example of the flow of the traffic management processing operation of the traffic management system of FIG. 1 will be briefly described. Card reader A set at the gate where a passerby tries to pass
In addition, the authentication card possessed by the passerby must be the card reader A.
When the card reader A accepts the card, the personal identification number (serial number) recorded on the card is read. At this time, the expiration date recorded on the card is also read, and it can be checked whether or not the expiration date has expired by collating with the date measured by the timer provided in the card reader 4. If the card has expired, the card is ejected and the process ends. Next, the individual identification number read out from the card is collated. That is, based on the individual identification number read from the card, the card reader A determines that the card reader control device 6
The registration code of the personal data downloaded from is referred to and the passage code corresponding to the identification number is obtained. On the other hand, as a result of collating the individual identification number, if the corresponding identification number is not found, the process is terminated and the card is ejected. The card reader A refers to the registration data of the traffic pattern downloaded from the card reader control device 6 to obtain the traffic permission / prohibition information corresponding to the traffic code. Based on this pass / fail information, the pass / fail of the passerby is determined. When the passability information is "1", the passerby is passable, and when the passability information is "0", the passerby is determined to be passable. After that, the authentication card is ejected from the card reader A, and the process ends.

As described above, according to the above-described embodiment, the confirmation terminal 3 is newly provided so that only the person who has the special authority can register the issue approval. By issuing the authentication card only, admission to the gate, which requires higher security, can be easily approved.

Further, by making it possible for only a person having special authority to set and change the passage pattern only by the newly provided confirmation terminal 3, passage to a limited area having a particularly high security can be performed. High security can be used to decide whether or not to pass and to assign to each individual a special pass area.

[0048]

As described above, according to the present invention,
High security can be ensured in issuing an authentication card and deciding whether to pass each traffic area.

[Brief description of drawings]

FIG. 1 is a block diagram schematically showing the overall configuration of a traffic management system of the present invention.

FIG. 2 is a diagram specifically showing a configuration of a main part of the traffic management system of FIG.

FIG. 3 is a diagram showing a storage example of a traffic pattern registered in a host computer via a confirmation terminal.

FIG. 4 is a diagram showing a storage example of personal data registered in a host computer via an input terminal and issuance approval registered in a host computer via a confirmation terminal.

FIG. 5 is a diagram showing a storage example of a traffic pattern downloaded from a host computer to each card reader via a card reader control device.

[Explanation of symbols]

1 ... Input terminal, 2 ... Host computer, 3 ... Confirmation terminal, 4 ... Card issuing device, 5 ... Card reader, 6 ... Card reader control device.

─────────────────────────────────────────────────── ─── Continuation of the front page (51) Int.Cl. ⁶ Identification code Internal reference number FI Technical display location G06F 17/60 G07C 9/00 Z G07C 9/00 G06F 15/21 K

Claims (6)

[Claims] 1. An authentication card issuing device for issuing an authentication card of each passerby used for judging whether or not a passerby can pass through a passing area, and at least identification information necessary for identifying each passerby. First registration means for registering personal data including a passage code designating a passable place of the passerby, and authorization for issuing the authentication card corresponding to the personal data registered by the registration means Second registration means for registering information, and at least the identification information of the passerby among the personal data in which the authorization information is registered by the second registration means is recorded in a predetermined portable recording medium, and the authentication card A card issuing device comprising: an issuing means for issuing the. 2. In an authentication card issuing device for issuing an authentication card of each passerby used for judging whether or not a passerby can pass through a passing area, at least identification information necessary for identifying each passerby is provided. Registration means for registering personal data including a passage code designating a passage place of the passerby, setting means for setting a passage place designated by the passage code, and registration by the registration means. Among the personal data, at least the identification information of the passerby is recorded in a predetermined portable recording medium, and the issuing means is provided to issue the authentication card. The issuing means is provided in each passage area and is issued by the issuing means. The personal data of each passerby registered by the registration means and the passable place are set by the setting means when the passerby judges the passability of the passerby. Based on the traffic code, from the identification information read from the authentication card accepted, the card issuing apparatus characterized by determining the passage propriety of the passer. 3. An authentication card issuing device for issuing an authentication card for each passerby used to determine whether or not a passerby can pass through a traffic area, and at least identification information necessary for identifying each passerby. First registration means for registering personal data including a passage code designating a passage place of the passerby, setting means for setting a passageable place designated by the passage code, and the registration means At least the second registration means for registering the authorization information for authorizing the issuance of the authentication card in correspondence with the personal data registered in, and the personal data for which the authorization information is registered by the second registration means. And an issuing means for recording the identification information of a passerby on a predetermined portable recording medium to issue the authentication card. The authentication car is provided in each passage area and issued by the issuing means. When the passerby is accepted and the passerability of the passerby is judged, the passcode is set to the personal data of each passerby registered by the first registration means and the passable place by the setting means. Based on the identification information read from the accepted authentication card, the card issuing device determines whether or not the passerby is allowed to pass. 4. In a traffic management system which accepts an authentication card possessed by a passerby and judges whether or not the passerby is allowed to pass through the passport, identification information necessary for identifying at least each passerby and its identification information. First registration means for registering personal data including a passage code designating a passable place of a passerby, and authorization information for authorizing issuance of the authentication card corresponding to the personal data registered by the registration means. Second registration means for registering, and of the personal data for which the authorization information is registered by the second registration means, at least the identification information of the passerby is recorded in a predetermined portable recording medium and the authentication card is issued. And a plurality of card readers that are provided in each traffic area and that accept the authentication card issued by the issuing means and judge whether or not the passerby is allowed to pass. Each of the plurality of card readers reads out at least the identification information from the accepted authentication card, and the identification information read out by the reading means based on the personal data registered by the registration means. A traffic management system comprising: a judgment means for judging whether or not a passerby is allowed to pass. 5. In a traffic management system that accepts an authentication card possessed by a passerby and judges whether or not the passerby is allowed to pass through the passport, identification information necessary for identifying at least each passerby and its identification information. Registration means for registering personal data including a pass code designating a passable place of a passerby, setting means for setting a passable place designated by the pass code, and an individual registered by the registering means Among the data, at least the identification information of the passerby is recorded in a predetermined portable recording medium to issue the authentication card, and an authentication card provided in each passage area and accepted by the issuing means is accepted. And a plurality of card readers for judging whether or not the passerby is allowed to pass, each of the plurality of card readers being smaller than the accepted authentication card. Based on the reading means for reading out the identification information, at least the identification information read out by the reading means, based on the personal data registered by the registration means and the passage code in which a place where the setting means can pass is set. A traffic management system comprising: a judgment means for judging whether or not the passerby is allowed to pass. 6. In a traffic management system that accepts an authentication card possessed by a passerby and judges whether or not the passerby is allowed to pass through the passport, identification information necessary for identifying at least each passerby and its identification information. First registration means for registering personal data including a passage code designating a passable place of a passerby, setting means for setting a passable place designated by the passage code, and registration by the registration means Second registration means for registering authorization information for authorizing the issuance of the authentication card in correspondence with the personal data, and at least a passer-by of the personal data having the authorization information registered by the second registration means. Issuing means for recording the identification information of the above in a predetermined portable recording medium to issue the authentication card, and accepting the authentication card issued by the issuing means provided in each passage area. A plurality of card readers for judging whether or not the passerby can pass, each of the plurality of card readers being read by the reading means for reading at least the identification information from the accepted authentication card; and registered by the registration means. Based on the personal data and the passage code in which the passage place is set by the setting means, the determination means for determining whether or not the passerby can pass from the identification information read by the reading means. A traffic management system characterized by that.