CN108780601B

CN108780601B - Access management system

Info

Publication number: CN108780601B
Application number: CN201680081969.3A
Authority: CN
Inventors: 长南隆之
Original assignee: Mitsubishi Corp
Current assignee: Mitsubishi Corp
Priority date: 2016-04-04
Filing date: 2016-04-04
Publication date: 2020-01-21
Anticipated expiration: 2036-04-04
Also published as: JPWO2017175268A1; WO2017175268A1; JP6489285B2; CN108780601A

Abstract

The entrance and exit management system of the present invention includes a normal user determination unit that determines whether or not a user having a right to pass through the door and provided with a wireless communication device is a normal user of the door. The normal user determination unit determines whether or not the user is a normal user based on the past authentication date and time of the user stored in the history storage unit. The electronic lock is unlocked when the normal user determination unit determines that the user is a normal user, and the electronic lock is unlocked when the button of the wireless communication device is pressed when the user is determined not to be a normal user.

Description

Access management system

Technical Field

The present invention relates to an access management system for managing access of a user.

Background

As an example of a conventional entry and exit management system, for example, patent document 1 proposes an ID security device as follows: when a transmission button of the card-type transmitter is pressed, a password and other ID information are transmitted from the card-type transmitter, the password or the like received by the reception processor is checked, and when the result of the check is that the password or the like allowing entry is confirmed, the door lock is released when the password or the like is confirmed. Patent document 2 proposes an entry/exit management device including intention indicating means for indicating an intention of a user carrying a wireless medium to enter or exit so as to prevent useless door control caused by reading information of a wireless medium having no intention of entry/exit, and determination means for determining whether entry/exit is possible based on an output of the intention indicating means and a result of collation by the collation means. Further, patent document 3 proposes an entry and exit management device as follows: the method includes the steps of registering whether a user is a normal user of a door for each user having a right to pass the door, changing a reception range of a reading unit from a 1 st area to a 2 nd area close to the door when the user of identification information read by the reading unit is not the normal user, and unlocking the door when the identification information of a user who has successfully authenticated is read by the reading unit in the 2 nd area.

Documents of the prior art

Patent document

Patent document 1: japanese laid-open patent publication No. 7-219987

Patent document 2: japanese laid-open patent publication No. 8-254050

Patent document 3: japanese patent laid-open publication No. 2014-214572

Disclosure of Invention

Problems to be solved by the invention

However, in the ID security device described in patent document 1 and the entrance/exit management device described in patent document 2, an operation (such as a button operation) indicating a pass intention is always required when unlocking the door, and convenience is low for a user who frequently uses the door. In the entry and exit management device described in patent document 3, although it is possible to indicate the intention of passage of the door without taking the user who frequently uses the door as a normal user of the door, when there is a need to review whether the user is a passing user, it is inconvenient because it is necessary to change the setting of whether the user is a normal user.

An object of the present invention is to provide a highly convenient entry and exit management system capable of automatically setting whether a user is a normal user of a door or not in accordance with a change in the traffic status and frequency of the user by referring to the past authentication history of the user.

Means for solving the problems

An access management system according to the present invention is characterized by comprising: a wireless communication device that is carried by a user and stores user identification information for identifying the user; reading means for reading the corresponding user identification information transmitted by the wireless communication device located within the reception range; a right of passage storage unit that stores the user identification information for each user having a right of passage of a door; a right-of-passage authentication unit that authenticates whether or not a user of the user identification information read by the reading device has a right of passage to the door, based on each of the user identification information stored in the right-of-passage storage unit; a history storage unit that stores the user identification information authenticated by the authentication unit in association with an authentication date and time; an input unit for the user to operate; an electronic lock control unit that issues an unlocking instruction to an electronic lock provided in the door; a normal user determination unit configured to determine whether or not the user is a normal user of the door based on past authentication dates and times of the user stored in the history storage unit; and a traffic intention determination unit that causes the electronic lock control unit to issue an unlock command and causes the history storage unit to store the user identification information in association with a date and time at which the user identification information was authenticated, when the intention determination unit determines that the user operated the input unit after the user was authenticated, or when the normal user determination unit determines that the user was a normal user of the door, in a case where the normal user determination unit determines that the user was not a normal user of the door.

Effects of the invention

The access management system of the present invention is configured as described above, and therefore, exhibits the following effects: by referring to the past authentication history, it is possible to automatically set whether or not the user is a normal user of the door in accordance with a change in the traffic status or frequency of the user.

Drawings

Fig. 1 is a schematic diagram of an entrance and exit management system according to embodiment 1 of the present invention.

Fig. 2 is an internal configuration diagram of an entrance/exit management system according to embodiment 1 of the present invention.

Fig. 3 is a configuration diagram of a passage authority storage unit of the entry and exit management system according to embodiment 1 of the present invention.

Fig. 4 is a configuration diagram of a history storage unit of the entry and exit management system according to embodiment 1 of the present invention.

Fig. 5 is a flowchart showing the operation of the normal user determination unit of the entry and exit management system according to embodiment 1 of the present invention.

Fig. 6 is a flowchart showing the operation of authentication and unlocking in the access management system according to embodiment 1 of the present invention.

Fig. 7 is an internal configuration diagram of an entrance/exit management system according to embodiment 2 of the present invention.

Fig. 8 is a flowchart showing the operation of authentication and unlocking in the access management system according to embodiment 2 of the present invention.

Fig. 9 is an internal configuration diagram of an entrance and exit management system according to embodiment 3 of the present invention.

Fig. 10 is a flowchart showing the operation of authentication and unlocking in the access management system according to embodiment 3 of the present invention.

Fig. 11 is a schematic diagram of an entrance and exit management system according to embodiment 4 of the present invention.

Fig. 12 is an internal configuration diagram of an entrance/exit management system according to embodiment 4 of the present invention.

Fig. 13 is a hardware configuration diagram of an access management device of the access management system according to embodiments 1 to 4 of the present invention.

Detailed Description

Embodiment mode 1

Next, the configuration and operation of the entry and exit management system according to the present embodiment will be described with reference to fig. 1 to 6. The input unit described in the present specification is a button 103 described later in the present embodiment.

Fig. 1 is a schematic diagram of an entry and exit management system according to the present embodiment. The access management system is composed of a wireless communication device 1, a reader 2, an access management device 3, and an electronic lock 4. A door 5 is provided at an entrance/exit of a room 8 to be subjected to entrance/exit management in the entrance/exit management system, and the door 5 is locked or unlocked by an electronic lock 4 provided in the door 5.

The wireless communication device 1 is carried by a user 6. The wireless communication device 1 is provided with a button 103. The reading device 2 is arranged near the door 5. As shown in fig. 1, the reading apparatus 2 receives an upstream electric wave 92 transmitted by the wireless communication device 1 located in the reception range 7.

The wireless communication device 1 is, for example, an active RFID (Radio Frequency Identification) tag. That is, the user identification information stored in the wireless communication device 1 itself can be included in the uplink radio wave 92 and transmitted. For example, a so-called semi-active RFID tag of a standby communication system (a system in which the radio communication device 1 transmits the uplink radio wave 92 only when the radio communication device 1 receives the downlink radio wave 91 transmitted from the reader 2) can be used. By using the semi-active type RFID tag, the opportunity of transmitting the uplink radio wave 92 from the wireless communication device 1 can be limited to only when necessary, thereby suppressing wasteful consumption of the battery built in the wireless communication device 1.

The entry/exit management device 3 controls locking and unlocking of the electronic lock 4 based on the user identification information included in the uplink radio wave 92 read (received) by the reading device 2. The entrance/exit management apparatus 3 is installed in a room 8 or a management room not shown. The electronic lock 4 is provided in the door 5, and is controlled to be locked and unlocked by the entrance and exit management device 3.

Fig. 2 is an internal configuration diagram of the entrance and exit management system according to the present embodiment. The wireless communication device 1 includes a downlink radio wave receiving unit 101, a user identification information storage unit 102, a button 103, a button press determination unit 104, a button press identification information storage unit 105, a superimposing unit 106, and an uplink radio wave transmitting unit 107.

The downlink radio wave receiving unit 101 receives the downlink radio wave 91 transmitted from the reader 2. The user identification information storage unit 102 stores user identification information (for example, a code for identifying a user, which is composed of a character string in which a limited number, a letter, a symbol, or the like is combined, or a binary code string, or the like) for identifying the user 6 in advance.

The downlink electric wave 91 contains a signal to start the wireless communication apparatus 1. When the downlink radio wave receiving section 101 receives the downlink radio wave 91, the radio communication device 1 is activated, and the uplink radio wave transmitting section 107 transmits the uplink radio wave 92 including the user identification information stored in the user identification information storage section 102.

The button 103 is provided in the wireless communication device 1 and can be pressed and released. The button press determination unit 104 determines whether or not the button 103 is pressed. The button-press identification information storage unit 105 stores in advance button-press identification information for identifying that the button 103 is determined to be pressed by the button-press determination unit 104.

When the downlink radio wave receiving unit 101 receives the downlink radio wave 91, the uplink radio wave transmitting unit 107 transmits the uplink radio wave 92 including the user identification information stored in the user identification information storage unit 102. When the button-press determination unit 104 determines that the button 103 is pressed, the uplink radio wave 92 including the button-press identification information and the user identification information superimposed by the superimposition unit 106 is transmitted.

The button press identification information is a code for identifying a pressed button, and is composed of, for example, a character string in which a limited number, letter, mark, or the like is combined, a binary code string, or the like. Further, the access management apparatus 3 can recognize which button 103 of the wireless communication device 1 is pressed based on the combination with the user identification information stored in the user identification information storage unit 102, and therefore the button pressing identification information does not need to be unique for each wireless communication device 1.

The reader 2 is composed of a downlink radio wave transmitting unit 201 and an uplink radio wave receiving unit 202.

The downlink radio wave transmitting unit 201 transmits the downlink radio wave 91 including a signal for activating the wireless communication device 1 at a predetermined interval (for example, at intervals of 0.3 seconds). The uplink radio wave receiving section 202 receives the uplink radio wave 92 transmitted by the uplink radio wave transmitting section 107 of the wireless communication device 1. The uplink radio wave receiving unit 202 transmits the user identification information and the button-pressed identification information included in the received uplink radio wave 92 to the access management apparatus 3 described later.

The access management apparatus 3 includes a passage authority storage unit 301, a history storage unit 302, an authentication unit 303, a normal user determination unit 304, and an electronic lock control unit 305. The right-of-passage storage unit 301 stores user identification information of a user having the right of passage of the door 5. Fig. 3 is a configuration diagram of the passage authority storage unit 301 according to the present embodiment, and shows a case where each unlocking pattern is stored in association with each user identification information. According to the example of fig. 3, the locking mode of the user identification information A, B, D indicates a mode in which confirmation of the will of pass is unnecessary, and the locking mode of the user identification information C, E indicates a mode in which confirmation of the will of pass is necessary.

The history storage unit 302 stores authentication dates and times for each user. Fig. 4 is a configuration diagram of the history storage unit 302 according to the present embodiment, and shows a case where the unlock date and time and each user identification information are stored in association with each other.

The authentication unit 303 includes a traffic authority authentication unit 3031 and a traffic will determination unit 3032. The right-of-passage authentication unit 3031 refers to the user identification information stored in the right-of-passage storage unit 301 and verifies the user identification information of the user 6 included in the uplink radio wave 92 received by the uplink radio wave receiving unit 202 of the reader 2, thereby authenticating whether the user 6 has the right of passage of the door 5.

The will-of-passage determination unit 3032 refers to the passage authority storage unit 301, and confirms the unlock mode stored in association with the user identification information of the user 6 authenticated by the passage authority authentication unit 3031. When the confirmed unlock mode is the will-go-no-confirmation mode, the will-go-no-go determination unit 3032 issues an unlock instruction of the electronic lock 4 to the electronic lock control unit 305 to be described later, and causes the history storage unit 302 to store the user identification information of the user 6 and the authentication date and time in association with each other.

On the other hand, when the confirmed unlock mode is the intended passage confirmation-required mode, the intended passage determination unit 3032 checks whether or not the button pressing identification information transmitted from the uplink radio wave reception unit 202 is predetermined button pressing identification information. When it is confirmed within a predetermined time (for example, within 10 seconds) from the authentication of the user 6 by the permission authentication unit 3031 that the button-pressed identification information transmitted from the uplink radio wave receiving unit 202 is the predetermined button-pressed identification information, it is determined that the user 6 has operated the button 103, that is, the user 6 indicates the will to pass through the door 5, and the pass-through intention determination unit 3032 issues an unlock instruction of the electronic lock 4 to the electronic lock control unit 305 to be described later, and causes the history storage unit 302 to store the user identification information of the user 6 in association with the authentication date and time. If it is not confirmed that the result of the comparison between the button-pressed identification information transmitted from the uplink radio wave receiving unit 202 and the predetermined button-pressed identification information matches within a predetermined time (for example, 10 seconds or longer) from the time when the permission authentication unit 3031 authenticates that the user 6 has permission, it is determined that the user 6 does not operate the button 103, that is, the user 6 does not intend to pass through the door 5, and the electronic lock control unit 305 described later maintains the lock of the electronic lock 4 and the history storage unit 302 does not store the authentication history of the user 6.

The normal user determination unit 304 determines whether or not the user 6 is a normal user of the door 5 based on the authentication date and time stored in the history storage unit 302, and causes the passage authority storage unit 301 to store the result of the determination in association with the user identification information of the user 6. When the normal user determination unit 304 determines that the user is a normal user, the normal user determination unit 304 causes the permission storage unit 301 to store the unlock mode of the user as the will-of-pass non-confirmation mode. When the normal user determination unit 304 determines that the user is not a normal user, the normal user determination unit 304 causes the permission storage unit 301 to store the unlock mode of the user as the willingness-to-pass confirmation mode.

In the present embodiment, the normal user determination unit 304 executes the setting of the unlock mode as a timing process (for example, 0 hour 00 per day or the like) of the entry and exit management apparatus 3. The normal user determination unit 304 refers to the authentication date and time for each user of the door 5 stored in the history storage unit 302, and counts the number of authentications in a predetermined period in the past (for example, a period of 30 days in the past based on the present day). As a result of this counting, when the number of authentication operations for the user 6 in the past predetermined period is equal to or greater than the predetermined number (for example, the number of unlocking operations in the past 30 days based on the current day is equal to or greater than 50), the normal user determination unit 304 determines that the user 6 is a normal user of the door 5, and stores the unlocking mode of the user 6 in the traffic authority storage unit 301 in association with the will-of-pass non-confirmation mode. As a result of this counting, when the number of authentication operations for the user 6 in the past predetermined period is within the predetermined number (for example, the number of unlocking operations in the past 30 days based on the present day is within 50), the normal user determination unit 304 determines that the user 6 is not a normal user of the door 5, and stores the unlock mode of the user 6 in the access permission storage unit 301 in association with the user's will-of-pass confirmation mode.

The electronic lock control unit 305 controls the electronic lock 4 to unlock and maintain the lock according to the instruction of the will-of-pass determination unit 3032. The electronic lock 4 is unlocked or kept locked according to an instruction of the electronic lock control unit 305.

Next, the operation of the present embodiment will be described. Fig. 5 is a flowchart showing the operation of the normal user determination unit 304 of the entry and exit management system. As described above, the normal user determination unit 304 executes the setting of the unlock mode as the timing processing (for example, 0 hour 00 per day or the like) of the entry and exit management system 3.

The normal user determination unit 304 refers to the authentication date and time of each user in the history storage unit 302 (S101).

The normal user determination unit 304 counts the number of times each user has unlocked in the past predetermined period (for example, which of 50 or more and less than 50 times the number of times authentication has been performed in the past 30 days on the basis of the present day) by the above-described reference, and determines whether or not each user 6 is a normal user of the door 5 (S102).

When the number of times of unlocking in the past predetermined period is equal to or more than a predetermined number of times (for example, the number of times of authentication in the past 30 days period based on the present day is 50 times) (yes in S102), the normal user determination unit 304 determines that the user 6 is a normal user of the door 5, and causes the permission storage unit 301 to store the unlocking pattern of the user as the will-of-pass unconfirmed pattern (S103).

When the number of times of unlocking in the past predetermined period is less than the predetermined number of times (for example, the number of times of authentication in the past 30 days period based on the present day is 50 times) (S102: no), the normal user determination unit 304 determines that the user 6 is not a normal user of the door 5, and causes the permission storage unit 301 to store the user' S unlocking pattern as the willingness-to-pass confirmation pattern (S104).

Fig. 6 is a flowchart showing the operation of authenticating and unlocking the access management device 3 when the user 6 passes through the door 5 in the access management system according to the present embodiment.

When the user 6 carrying the wireless communication device 1 enters the reception range 7 of the reader device 2 and the reader device 2 reads the user identification information included in the uplink radio wave 92 transmitted from the wireless communication device 1 (yes in S111), the process proceeds to S112. When the reader 2 does not read the user identification information included in the uplink radio wave 92 transmitted from the wireless communication device 1 (no in S111), the process in S111 is repeated.

The permission authentication unit 3031 of the authentication unit 303 checks the user identification information included in the uplink radio wave 92 received by the reader 2 with the user identification information stored in the permission storage unit, and determines whether or not the user 6 has the permission of the door 5 (S112). If the user 6 does not have the right of passage of the door 5, the process returns to S111 (S112: no).

When the user 6 has the right to pass through the door 5 (yes in S112), the will-of-pass determination unit 3032 of the authentication unit 303 checks the right-of-pass storage unit 301 to see whether or not the lock mode stored in association with the user identification information of the user 6 is the will-of-pass non-confirmation mode (S113).

If the lock mode stored in association with the user identification information of the user 6 is the will-of-pass no-confirmation mode (yes in S113), the will-of-pass determination unit 3032 causes the electronic lock control unit 305 to transmit an unlock instruction to the electronic lock 4 (S115). Then, the will-of-pass determination unit 3032 causes the authentication storage unit 302 to store the user identification information of the user 6 in association with the authentication date and time (S116), and ends the process.

If the lock mode stored in association with the user identification information of the user 6 is not the will-of-pass no-confirmation mode, that is, if the lock mode is the will-of-pass-confirmation-required mode (no in S113), the will-of-pass determination unit 3032 determines whether the user 6 has pressed the button 103. That is, the will-of-traffic determination unit 3032 checks the button-press identification information included in the uplink radio wave 92 transmitted by the wireless communication device 1 and received by the reader device 2 when the user 6 presses the button 103 against the predetermined button-press identification information (S114).

If it is not confirmed that the user 6 has pressed the button 103, that is, if the button-press identification information included in the uplink radio wave 92 received by the reader 2 is not checked against the predetermined button-press identification information (no in S114), the process returns to S111.

When it is confirmed that the user 6 has pressed the button 103, that is, when the button-press identification information included in the uplink radio wave 92 received by the reader device 2 is checked against the predetermined button-press identification information (yes in S114), the will-of-passage determination unit 3032 causes the electronic lock control unit 305 to transmit an unlock instruction to the electronic lock 4 (S115). Then, the will-of-pass determination unit 3032 causes the authentication storage unit 302 to store the user identification information and the authentication date and time in association with each other (S116), and ends the processing.

As described above, in the present embodiment, the following effects are exhibited: by referring to the past authentication history in the history storage unit 302 at predetermined intervals, it is possible to automatically and appropriately set whether or not the user is a normal user of the door in accordance with the change in the traffic status and/or frequency of the user, and it is possible to obtain an entrance/exit management system with high convenience.

A display device (not shown) (for example, an LED or an LCD) may be provided at a position where the user 6 can visually recognize, such as near the main body of the reading device 2 or the door 5. The information as to whether or not the user 6 is a normal user of the door 5 determined by the will-of-pass determination unit 3032 may be transmitted to the display device (not shown) and displayed (the LED may be turned on/off depending on whether or not the user is a normal user, the LED may be distinguished by the color of the LED turned on, or the LED may be displayed as text information on the LCD), thereby notifying the user 6. Note that, instead of the display, a speaker, not shown, may be provided near the door 5 to notify the user by sound or alarm sound. By notifying the user 5, the following further effects are exhibited: if it is determined that user 6 is not the normal user of door 5, it is presented with an indication of the intention to enter by pressing button 103 in order to prevent confusion.

It is considered that the same effects as those of the present embodiment are exhibited even when a part of the structure is modified or omitted.

Embodiment mode 2

Next, the structure and operation of the present embodiment will be described with reference to fig. 7 to 8. In fig. 7, the same reference numerals as those in fig. 2 denote the same or corresponding parts, and in fig. 8, the same reference numerals as those in fig. 6 denote the same or corresponding processes. The input unit described in the present invention is also referred to as a button 103 in the present embodiment.

Fig. 7 is an internal configuration diagram of the entrance and exit management system according to the present embodiment. The access management system according to the present embodiment is configured by the wireless communication device 1, the reader 2, the access management apparatus 3, and the electronic lock 4, as in embodiment 1.

The entry and exit management apparatus 3 according to the present embodiment includes a passage right storage unit 301, a history storage unit 302, an authentication unit 303, a normal user determination unit 314, and an electronic lock control unit 305.

In the present embodiment, the normal user determination unit 314 executes processing each time the permission authentication unit 3031 authenticates the user 6. The normal user determination unit 314 refers to the authentication date and time for each user of the door 5 stored in the history storage unit 302, and confirms whether or not authentication is performed within a predetermined time (for example, within 24 hours) from the current time at which the user 6 is authenticated. If the result of this confirmation is that the authentication date and time within a predetermined time (for example, within 24 hours) from the current time of authentication for the user 6 is stored, the normal user determination unit 314 determines that the user 6 is a normal user of the door 5, and notifies the willingness-to-pass determination unit 3032 to set the lock mode of the user 6 to the willingness-to-pass non-confirmation mode. If the result of this confirmation is that the authentication date and time within a predetermined time (for example, within 24 hours) for the user 6 from the current time at which the user 6 is authenticated is not stored, the normal user determination unit 314 determines that the user 6 is not a normal user of the door 5, and notifies the willingness-of-passage determination unit 3032 that the lock mode of the user 6 is the willingness-to-pass confirmation mode.

The traffic authority storage unit 301 according to the present embodiment does not necessarily need to store the lock mode for each user (the mode requiring no confirmation of will of traffic or the mode requiring confirmation of will of traffic). However, as in embodiment 1, the normal user determination unit 314 may store the lock mode (the will-not-be-checked mode or the will-be-checked mode) for each user in the passage authority storage unit 301, and the will-be-checked determination unit 3032 may refer to the unlock mode of the user 6 in the passage authority storage unit 301. The other structures are the same as those in embodiment 1.

Next, the operation of the present embodiment will be described. Fig. 8 is a flowchart showing the operation of authenticating and unlocking the access management device 3 when the user 6 actually passes through the door 5 in the access management system according to the present embodiment.

The permission authentication unit 3031 of the authentication unit 303 checks the user identification information included in the uplink radio wave 92 received by the reader 2 with the user identification information stored in the permission storage unit 301, and determines whether or not the user 6 has the permission of the door 5 (S112). If the user 6 has the right of passage of the door 5 (yes in S112), the process proceeds to S201.

The normal user determination unit 314 refers to the authentication date and time of the user 6 with respect to the door 5 stored in the history storage unit 302 (S201).

The normal user determination unit 314 confirms whether or not authentication is performed within a predetermined time (for example, within 24 hours) from the current time at which the user 6 is authenticated (S202). If the result of this confirmation is that the authentication date and time within a predetermined time (for example, within 24 hours) from the current time of authentication with the user 6 is stored (yes in S202), the normal user determination unit 314 determines that the user 6 is a normal user of the door 5, notifies the willingness-to-pass determination unit 3032 that the lock mode of the user 6 is the willingness-to-pass non-confirmation mode, and proceeds to the process of S115.

If the result of this confirmation is that the authentication date and time within a predetermined time (for example, within 24 hours) from the current time of authentication with the user 6 is not stored (no in S202), the normal user determination unit 314 determines that the user 6 is not a normal user of the door 5, notifies the willingness of passage determination unit 3032 to set the lock mode of the user 6 to the willingness of passage confirmation required mode, and proceeds to the process of S114. The other processes are the same as those in embodiment 1.

As described above, the present embodiment also exhibits the following effects as in embodiment 1: by referring to the past authentication history in the history storage unit 302 at predetermined intervals, it is possible to automatically and appropriately set whether or not the user is a normal user of the door in accordance with the change in the traffic status and/or frequency of the user, and it is possible to obtain an entrance/exit management system with high convenience.

In the present embodiment, as in embodiment 1, a display device (not shown) (for example, an LED or an LCD) may be provided at a position where the user 6 can visually recognize, such as near the main body of the reading device 2 and the door 5. The information as to whether or not the user 6 is a normal user of the door 5 determined by the will-of-pass determination unit 3032 may be transmitted to the display device (not shown) and displayed (the LED may be turned on/off depending on whether or not the user is a normal user, the LED may be distinguished by the color of the LED turned on, or the LED may be displayed as text information on the LCD), thereby notifying the user 6. Note that, instead of the display, a speaker, not shown, may be provided near the door 5 to notify the user by sound or alarm sound. By notifying the user 5, the following effects are further exhibited: if it is determined that user 6 is not the normal user of door 5, it is presented with an indication of the intention to enter by pressing button 103 in order to prevent confusion.

In the present embodiment, the predetermined time for which the normal user determination unit 314 checks the presence or absence of authentication may be changed as appropriate, and may be set for each day of the week, for example. For example, the case where the entrance/exit management system according to the present embodiment is applied to entrance/exit of a room in an office building on saturday or holiday. When the normal user determination unit 314 determines whether or not the user 6 is a normal user always based on the presence or absence of authentication within 24 hours, if the user wants to pass through the door 5 on monday, almost all the persons are determined not to be normal users of the door 5. Therefore, the predetermined time for the monday normal user determination unit 314 to determine whether or not the normal user is present can be set to a time (for example, within 72 hours) that spans saturday or day, and the following further advantages are exhibited: the normal user determination unit 314 can determine whether or not the user is a normal user with higher accuracy, which is suitable for the use situation of the user in the office building.

In the case where the predetermined time is set to a short period such as 3 hours, for example, in an on-duty period from 7 to 9 am, the predetermined time may be set to a time such as a time that spans an idle period at night (for example, 17 hours obtained by adding 14 hours from 17 to 7 am on the next day to 3 hours). The following further effects are exhibited in the same manner: the normal user determination unit 314 can determine whether or not the user is a normal user with higher accuracy, which is suitable for the use situation of the user in the office building.

It is also considered that the same effects as those of the present embodiment are exhibited even when a part of the structure is modified or omitted.

Embodiment 3

Next, the structure and operation of the present embodiment will be described with reference to fig. 9 to 10. In fig. 9, the same reference numerals as those in fig. 2 denote the same or corresponding portions, and in fig. 10, the same reference numerals as those in fig. 6 denote the same or corresponding portions. The input unit described in the present invention is also referred to as a button 103 in the present embodiment.

Fig. 9 is an internal configuration diagram of the entrance and exit management system according to the present embodiment. The access management system of the present embodiment is composed of a wireless communication device 1, a reader 2, an access management device 3, an electronic lock 4, and a door opening detection device 51. The door opening detection device 51 is provided in the door 5 and detects opening and closing of the door 5. The door opening detection device 51 can detect opening and closing of the door 5 by a mechanical means such as an unillustrated switch provided in an unillustrated door frame of the door 5 or an optical means such as an unillustrated photosensor.

In the case where the unlock mode stored in the passage authority storage unit 301 is the will-go-no-confirm mode or the case where the unlock mode stored in the passage authority storage unit 301 is the will-go-require-confirm mode and the user 6 has confirmed that the button 103 has been pressed by the will-go-judge unit 3032 as in embodiment 1, with respect to the user identification information of the user 6 authenticated by the authority authentication unit 3031, the will-go-judge unit 3032 issues an unlock command to the electronic lock control unit 305 to unlock the electronic lock 4, and as a result, the electronic lock 4 is unlocked. Then, the user 6 opens the door 5, and the door opening detection device 51 detects the opening of the door. When the detection of the door opening is notified by the door opening detection device 51, the will-of-traffic determination unit 3032 causes the history storage unit 302 to store the user identification information of the user 6 in association with the authentication date and time. The other structures are the same as those in embodiment 1.

Next, the operation of the present embodiment will be described. Fig. 10 is a flowchart showing the operation of authenticating and unlocking the access management device 3 when the user 6 actually passes through the door 5 in the access management system according to the present embodiment.

When the will-of-pass determination unit 3032 causes the electronic lock control unit 305 to transmit an unlocking instruction to the electronic lock 4 (S115), the electronic lock 4 is unlocked. When the door 5 is detected to be opened by the door opening detection device 51 (yes in S117), the will-of-traffic determination unit 3032 causes the history storage unit 302 to store the user identification information and the authentication date and time in association with each other (S116), and ends the processing.

If the door 5 is not detected to be opened by the door opening detection device 51 after the will-of-pass determination unit 3032 causes the electronic lock control unit 305 to transmit the unlock command to the electronic lock 4 (S115) (no in S117), the will-of-pass determination unit 3032 repeats the process in S117 until a predetermined time (for example, about 10 seconds after the unlock) elapses. After the predetermined time has elapsed (no in S118), the will-of-pass determination unit 3032 causes the electronic lock control unit 305 to transmit a lock instruction for the electronic lock, and then ends the processing. The other processes are the same as those in embodiment 1.

As described above, the present embodiment exhibits the following effects as in embodiment 1: by referring to the past authentication history in the history storage unit 302 at predetermined intervals, it is possible to automatically and appropriately set whether or not the user is a normal user of the door in accordance with the change in the traffic status and/or frequency of the user, and it is possible to obtain an entrance/exit management system with higher convenience. Further, when the door open detection device 51 detects that the door is open, the history storage unit 302 stores the user identification information of the user 6 and the authentication date and time in association with each other, thereby further exhibiting the following effects: when the user 6 is authenticated and unlocked but does not actually pass through the door 5, the lock mode can be determined from the situation at the time of passing closer to the actual situation without keeping the unnecessary authentication date and time.

In the present embodiment, as in embodiment 1, a display device (not shown) (for example, an LED or an LCD) may be provided in a place where the user 6 can view, such as the vicinity of the door 5 and the main body of the reading apparatus 2. The information as to whether or not the user 6 is a normal user of the door 5 determined by the will-of-pass determination unit 3032 may be transmitted to the display device (not shown) and displayed (the LED may be turned on/off depending on whether or not the user is a normal user, the LED may be distinguished by the color of the LED turned on, or the LED may be displayed as text information on the LCD), thereby notifying the user 6. Note that, instead of the display, a speaker, not shown, may be provided near the door 5 to notify the user by sound or alarm sound. By notifying the user 5, the following further effects are exhibited: if it is determined that user 6 is not the normal user of door 5, it is presented with an indication of the intention to enter by pressing button 103 in order to prevent confusion.

The door opening detection device 51 of the present embodiment may be added to the configuration of embodiment 2, and the following further effects are exhibited: when the user 6 is authenticated and unlocked but does not actually pass through the door 5, the locking mode can be determined based on the situation at the time of passing closer to the actual situation without keeping the unnecessary authentication date and time.

Embodiment 4

Next, the structure and operation of the present embodiment will be described with reference to fig. 11 to 12. The input unit described in the present invention is the hand-stretching detection device 10 described later in this embodiment.

Fig. 11 is a schematic diagram of the entry and exit management system according to the present embodiment. The access management system is composed of a wireless communication device 1, a reader 2, an access management device 3, an electronic lock 4, and an outstand detection device 10.

Fig. 12 is an internal configuration diagram of the entrance and exit management system according to the present embodiment. The wireless communication device 1 includes a downlink radio wave receiving unit 101, a user identification information storage unit 102, and an uplink radio wave transmitting unit 107.

The downlink radio wave receiving unit 101 receives a downlink radio wave 91 transmitted from the reader 2, which will be described later. The user identification information storage unit 102 stores user identification information (for example, a code for identifying a user, which is composed of a character string in which a limited number, a letter, a symbol, or the like is combined, or a binary code string, or the like) for identifying the user 6 in advance.

The downlink electric wave 91 contains a signal for activating the wireless communication apparatus 1. When the downlink radio wave receiving section 101 receives the downlink radio wave 91, the radio communication device 1 is activated, and the uplink radio wave transmitting section 107 transmits the uplink radio wave 92 including the user identification information stored in the user identification information storage section 102.

When the downlink radio wave receiving unit 101 receives the downlink radio wave 91, the uplink radio wave transmitting unit 107 transmits the uplink radio wave 92 including the user identification information stored in the user identification information storage unit 102.

The hand-stretching detection device 10 is composed of a photoelectric sensor 1001 and a hand-stretching detection control unit 1002. The photoelectric sensor 1001 of the arm detecting apparatus 10 generates light (having a wavelength of, for example, about 750nm) not shown. When the user 6 extends his or her hand (for example, closer to 5cm to 10 cm) near the photosensor 1001, the light beam (not shown) is reflected by the hand of the user 6, and the reflected light is received by the photosensor 1001.

The photoelectric sensor 1001 notifies the hand-reaching detection control unit 1002 that the reflected light is detected. Then, the hand-stretching detection control unit 1002 transmits to the authentication unit 302 that the hand-stretching detection device 10 is blocked by a hand.

The will-of-passage determination unit 3032 refers to the passage authority storage unit 301 and confirms the unlock mode stored in association with the user identification information of the user 6 authenticated by the passage authority authentication unit 3031. When the confirmed unlock mode is the intended-to-pass confirmation mode, and the hand detection control unit 1002 receives the information that the hand detection device 10 is blocked by the hand, the intended-to-pass determination unit 3032 causes the electronic lock control unit 305 to issue an unlock command for the electronic lock 4, and causes the history storage unit 302 to store the user identification information of the user 6 and the authentication date and time in association with each other after the door opening detection device 51 detects the door opening. The other structures are the same as those in embodiment 1.

As described above, the present embodiment exhibits the following effects as in embodiment 1: by referring to the past authentication history in the history storage unit 302 at predetermined intervals, it is possible to automatically and appropriately set whether or not the user is a normal user of the door in accordance with the change in the traffic status and/or frequency of the user, and it is possible to obtain an entrance/exit management system with higher convenience.

In the present embodiment, as in embodiment 1, a display device (not shown) (for example, an LED or an LCD) may be provided at a position visible to the user 6, such as near the main body of the reading device 2 and the door 5. The information as to whether or not the user 6 is a normal user of the door 5 determined by the will-of-pass determination unit 3032 may be transmitted to the display device (not shown) and displayed (the LED may be turned on/off depending on whether or not the user is a normal user, the LED may be distinguished by the color of the LED turned on, or the LED may be displayed as text information on the LCD), thereby notifying the user 6. Note that, instead of the display, a speaker, not shown, may be provided near the door 5 to notify the user by sound or alarm sound. By notifying the user 5, the following further effects are exhibited: when it is determined that the user 6 is not a normal user of the door 5, a will indication to reach the reach detection device 10 to enter is presented to prevent confusion.

When the reader device 2 is disposed in a position near the door 5 and accessible to the hand of the user 6, the outstretched hand detecting device 10 may be incorporated in the reader device 2.

The wireless communication device 1 of the present embodiment may have a button 103, and the user 6 may indicate a will of the passage using the button 103.

The hand-reaching detection device 10 of the present embodiment may be added to the configurations of

embodiments

2 and 3.

In embodiment 1, embodiment 2, embodiment 3, and embodiment 4, the button 103 and the reaching detection device 10 are applied to the input unit, but the input unit is not limited to the button 103 and the reaching detection device 10 as long as the user 6 can indicate the will of the user.

The entrance/exit management systems according to

embodiments

1, 2, 3, and 4 are applied to the electronic lock 4 that locks the door 5 provided at the entrance/exit, but may also be applied to opening/closing control of an automatic door, opening/closing control of an entrance/exit gate, and the like.

The entry and exit management device 3 according to

embodiments

1, 2, 3, and 4 can be configured by a general computer terminal (and hardware having the same configuration). Fig. 13 is a hardware configuration diagram of the access management apparatus 3.

Hard disk 353 stores access management program 3531 having the functions of authentication unit 303, normal user determination unit 304, and electronic lock control unit 305. The CPU 351 copies the access management program 3531 stored in the hard disk 353 into the memory 352. The hard disk 353 stores data of the passage authority storage unit 301 and the history storage unit 302. The CPU 351 copies various data stored in the hard disk 353 into the memory 352. The memory may be either or both of a volatile memory such as a RAM and a nonvolatile memory such as a flash memory. The hard disk 353 may be an SSD (Solid-State-Drive).

The CPU 351 executes the entry/exit management program 3531 stored in the memory 352, thereby performing processing of each function of the authentication unit 303, the normal user determination unit 304, and the electronic lock control unit 305. Then, the CPU 351 executes the access management program 3531 stored in the memory 352, thereby updating the data of the passage authority storage unit 301 and the history storage unit 302 stored in the memory 352 as necessary. The CPU 351 updates the data of the passage authority storage unit 301 and the history storage unit 302 stored in the hard disk 353 in advance to the updated data of the passage authority storage unit 301 and the history storage unit 302 stored in the memory 352. The CPU 351 may be hardware having the same function (for example, hardware having a function of performing arithmetic processing such as a microcomputer or a DSP).

At least a part of each function of the passage authority storage unit 301, the history storage unit 302, the authentication unit 303, the normal user determination unit 304, and the electronic lock control unit 305 may be realized by dedicated hardware not shown. The dedicated hardware may be an ASIC (may be an application specific IC, an IC including a processor and a memory therein), an FPGA, an on-chip CPU, or a hardware functional unit provided on a memory chip, or a combination thereof.

The optical drive 354 reads data or programs stored on the optical medium 3541. The access management program can be installed from an optical medium. The optical medium is, for example, a CD-ROM or a DVD-ROM. The installation source of the access management program 3531 is not limited to an optical medium, and may be downloaded to the hard disk 353 or the memory 352 via a network and installed. Further, at least a part of the program may be incorporated in advance in the above-mentioned dedicated hardware not shown.

The access management apparatus 3 and the reader 2 are connected to each other by a connector 351 through, for example, a USB cable, a network cable, or a serial cable. The entry/exit management apparatus 3 and the reach detection apparatus 10 are connected to each other by a connector 352 through, for example, a USB cable, a network cable, or a serial cable. The access management apparatus 3 and the electronic lock 4 are connected to each other by a connector 353 through a USB cable, a network cable, a serial cable, or the like. The entrance and exit management device 3 and the door opening detection device 5 are connected to each other by a connector 351 through, for example, a USB cable, a network cable, or a serial cable.

Description of the reference symbols

1 a wireless communication device; 101 a downlink radio wave receiving unit; 102 a user identification information storage unit; 103 buttons; 104 a button press judging section; 105 a button-pressed identification information storage unit; 106 a superposition unit; 107 an upstream radio wave transmitting unit; 2 a reading device; 201 a downlink radio wave transmitting unit; 202 an upstream radio wave receiving section; 3 an entrance and exit management device; 301 a passage right storage unit; 302 history record storage unit; 303 an authentication unit; 3031 a passage right authentication part; 3032 a traffic willingness judgment part; 304 a normal user determination unit; 314 a normal user determination unit; 305 an electronic lock control part; 4, an electronic lock; 5, a door; 51 a door opening detection device; 6 users; 7 within the receiving range; 8 rooms; 91 downlink electric waves; 92, an uplink electric wave; 10, a hand stretching detection device; 1001 photosensor; 1002 reach the hand detection control part.

Claims

1. An access management system, wherein the access management system comprises:

a wireless communication device that is carried by a user and stores user identification information for identifying the user;

reading means for reading the corresponding user identification information transmitted by the wireless communication device located within the reception range;

a right of passage storage unit that stores the user identification information for each user having a right of passage of a door;

a right-of-passage authentication unit that authenticates whether or not a user of the user identification information read by the reading device has a right of passage to the door, based on each of the user identification information stored in the right-of-passage storage unit;

a history storage unit that stores the user identification information authenticated by the right-of-way authentication unit in association with the date and time of authentication;

an input unit for the user to operate;

an electronic lock control unit that issues an unlocking instruction to an electronic lock provided in the door;

a normal user determination unit configured to determine whether or not the user is a normal user of the door based on past authentication dates and times of the user stored in the history storage unit; and

a traffic intention determination unit that causes the electronic lock control unit to issue an unlock command and causes the history storage unit to store the user identification information in association with a date and time at which the user identification information is authenticated, when the normal user determination unit determines that the user is not a normal user of the door that the user has operated the input unit after the user authentication or when the normal user determination unit determines that the user is a normal user of the door,

the normal user determination unit determines that the user is a normal user of the door when the authentication history of the user is stored in the history storage unit a predetermined number of times or more in a predetermined period of time in the past since the user was authenticated by the right-of-passage authentication unit, and determines that the user is not a normal user of the door when the authentication history of the user is not stored in the history storage unit a predetermined number of times or more in a predetermined period of time in the past since the user was authenticated by the right-of-passage authentication unit.

2. The access management system of claim 1,

the input part is a button that the wireless communication apparatus has,

the wireless communication device transmits button-press identification information to the reading apparatus when the button is pressed by the user,

when the normal user determination unit determines that the user is not a normal user of the door, the will-of-pass determination unit causes the electronic lock control unit to issue an unlock command and causes the history storage unit to store the user identification information in association with a date and time at which the user identification information is authenticated, when the button-press identification information read by the reading device matches a predetermined button-press identification information.

3. The access management system of claim 1,

the input part is an outstretched hand detecting device provided in the vicinity of the door,

when the presence of a hand obstruction by the user's hand is detected by the outstretched person detecting device when the normal user determining unit determines that the user is not a normal user of the door, the traffic willingness determining unit causes the electronic lock control unit to issue an unlock command and causes the history storage unit to store the user identification information in association with a date and time at which the user identification information is authenticated.

4. An access management system, wherein the access management system comprises:

an input unit for the user to operate;

the normal user determination unit determines that the user is a normal user of the door when the authentication history of the user within a predetermined time since the user was authenticated by the right-of-passage authentication unit is stored in the history storage unit, and determines that the user is not a normal user of the door when the authentication history of the user within a predetermined time since the user was authenticated by the right-of-passage authentication unit is not stored in the history storage unit.

5. The access management system of claim 4,

the input part is a button that the wireless communication apparatus has,

6. The access management system of claim 4,