CN108780601B - Access management system - Google Patents

Abstract

The access control system of the present invention includes a normal user determination unit that determines whether or not a user who has access authority to the door and is equipped with a wireless communication device is a normal user of the door. The normal user determination unit determines whether or not the user is a normal user based on the past authentication date and time of the user stored in the history storage unit. The electronic lock is unlocked when the normal user determination unit determines that the user is a normal user, and the electronic lock is unlocked when the button of the wireless communication device is pressed when it is determined that the user is not a normal user.

Description

Access management system

technical field

The present invention relates to an access management system for performing access management of users.

Background technique

As an example of a conventional access management system, Patent Document 1, for example, proposes an ID security device that transmits a password and other ID information from the card-type transmission device by pressing the transmission button of the card-type transmission device, and processes the reception process. The password or the like received by the device is checked, and if the result of the check is that it is a password that allows entry, the door lock is released when it is confirmed. Patent Document 2 proposes an access management device including a willingness indicating unit and a determining unit, and the willingness expressing unit expresses the entering and leaving of a user who carries a wireless medium, in order to prevent the occurrence of reading information of a wireless medium that does not have a willingness to enter or leave. The useless door control, the judgment unit judges whether the access is allowed or not according to the output of the willingness expressing unit and the checking result of the checking unit. In addition, Patent Document 3 proposes an access control device in which whether or not a normal user of the door is registered in advance for each user having the access authority of the door, and the use of the identification information read by the reading unit If the user is not a normal user, change the reception range of the reading unit from the first area to the second area near the door, and when the reading unit reads the identification information of the user who has successfully authenticated in the second area , unlock the door.

prior art literature

Patent Literature

Patent Document 1: Japanese Patent Application Laid-Open No. 7-219987

Patent Document 2: Japanese Patent Application Laid-Open No. 8-254050

Patent Document 3: Japanese Patent Laid-Open No. 2014-214572

SUMMARY OF THE INVENTION

Invention to solve problem

However, in the ID security device described in Patent Document 1 and the access control device in Patent Document 2, it is always necessary to perform an operation (such as a button operation) indicating the willingness to pass when unlocking the door, and the use of the door is frequently used. In other words, the convenience is low. In addition, in the access control device described in Patent Document 3, by setting the user who frequently uses the door as the normal user of the door, it is possible to eliminate the need to express a willingness to pass through the door. When it is necessary for a passing user, it is necessary to change whether it is a setting of a normal user, which is inconvenient.

An object of the present invention is to provide a convenient access management system that can automatically determine whether the door is a door by referring to the user's past authentication history according to changes in the user's traffic situation and frequency. Usually set by the user.

means to solve the problem

The access management system of the present invention is characterized in that the access management system has: a wireless communication device, which is carried by the user and stores user identification information identifying the user; The corresponding user identification information sent by the wireless communication device; the access authority storage part, which stores the user identification information of each user who has the access authority of the door; the access authority authentication part, which is stored in the Each of the user identification information in the access authority storage unit verifies whether or not the user of the user identification information read by the reading device has the access authority for the door; and a history record storage unit, which The user identification information authenticated by the authentication unit and the date and time of authentication are associated and stored; an input unit for the user to operate; an electronic lock control unit for electronic locks installed in the door. The lock issues an unlock instruction; a normal user determination unit determines whether the user is a normal user of the door according to the past authentication date and time of the user stored in the history storage unit; and A passing willingness judgment unit, when the normal user judgment unit judges that the user is not a normal user of the door When the user operates the input unit, or when the normal user determination unit determines that the user is a normal user of the door, the passage willingness determination unit causes the electronic lock control unit to issue an unlock command , and cause the history storage unit to associate and store the date and time when the user identification information was authenticated and the user identification information.

Invention effect

The access control system of the present invention is configured as described above, and thus has the effect of automatically determining whether or not the user is a normal user of the door based on changes in the user's traffic situation or frequency by referring to the past authentication history. set up.

Description of drawings

FIG. 1 is a schematic diagram of an access control system according to Embodiment 1 of the present invention.

2 is an internal configuration diagram of the access control system according to Embodiment 1 of the present invention.

3 is a configuration diagram of an access authority storage unit of the access control system according to Embodiment 1 of the present invention.

4 is a configuration diagram of a history storage unit of the access control system according to Embodiment 1 of the present invention.

5 is a flowchart showing an operation of a normal user determination unit of the access control system according to Embodiment 1 of the present invention.

6 is a flowchart showing operations of authentication and unlocking of the access management system according to Embodiment 1 of the present invention.

7 is an internal configuration diagram of an access control system according to Embodiment 2 of the present invention.

8 is a flowchart showing operations of authentication and unlocking of the access management system according to Embodiment 2 of the present invention.

9 is an internal configuration diagram of an access management system according to Embodiment 3 of the present invention.

10 is a flowchart showing operations of authentication and unlocking of the access management system according to Embodiment 3 of the present invention.

11 is a schematic diagram of an access control system according to Embodiment 4 of the present invention.

12 is an internal configuration diagram of an access control system according to Embodiment 4 of the present invention.

13 is a hardware configuration diagram of an access management device of the access management system according to Embodiments 1 to 4 of the present invention.

Detailed ways

Embodiment 1

Next, the configuration and operation of the access control system according to the present embodiment will be described with reference to FIGS. 1 to 6 . In addition, the input part described in this specification means the button 103 mentioned later in this embodiment.

FIG. 1 is a schematic diagram of an access management system according to the present embodiment. The access management system is composed of a wireless communication device 1 , a reading device 2 , an access management device 3 and an electronic lock 4 . In addition, a door 5 is provided at the entrance and exit of the room 8 that is an access control object of the access control system, and the electronic lock 4 provided on the door 5 performs locking or unlocking.

The wireless communication device 1 is carried by the user 6 . The wireless communication device 1 is provided with a button 103 . The reading device 2 is provided near the door 5 . As shown in FIG. 1 , the reading device 2 receives the uplink radio wave 92 transmitted by the wireless communication device 1 located in the reception range 7 .

In addition, the wireless communication device 1 is, for example, an active RFID (Radio Frequency Identification, radio frequency identification) tag. That is, the user identification information stored in the wireless communication device 1 itself can be included in the uplink radio wave 92 and transmitted. In addition, for example, a so-called semi-active RFID tag of a standby communication method (a method in which the wireless communication device 1 transmits the upstream radio wave 92 only when the wireless communication device 1 receives the downstream radio wave 91 transmitted by the reader 2) can also be used. By using the semi-active type RFID tag, the opportunity to transmit the uplink radio wave 92 from the wireless communication device 1 can be limited to only when necessary, thereby suppressing useless consumption of the battery built in the wireless communication device 1 .

The access control device 3 controls the locking and unlocking of the electronic lock 4 based on the user identification information included in the upward radio wave 92 read (received) by the reading device 2 . The access control device 3 is installed in the room 8 or a management room (not shown) or the like. The electronic lock 4 is installed on the door 5 , and is locked and unlocked by the access management device 3 .

FIG. 2 is an internal configuration diagram of the access control system according to the present embodiment. The wireless communication device 1 includes a downstream radio wave reception unit 101 , a user identification information storage unit 102 , a button 103 , a button press determination unit 104 , a button press identification information storage unit 105 , a superimposition unit 106 , and an upstream radio wave transmission unit 107 .

The downlink radio wave receiving unit 101 receives the downlink radio wave 91 transmitted by the reading device 2 . The user identification information storage unit 102 stores in advance user identification information for identifying the user 6 (for example, a character string composed of a combination of numbers, letters, symbols, etc. of a limited length, or a binary code string for identifying the user 6 ) user's code).

The downlink radio wave 91 includes a signal for activating the wireless communication device 1 . When the downlink radio wave receiving unit 101 receives the downlink radio wave 91 , the wireless communication device 1 is activated, and the uplink radio wave transmission unit 107 transmits the uplink radio wave 92 including the user identification information stored in the user identification information storage unit 102 .

The button 103 is provided in the wireless communication device 1, and can be pressed and released. The button press determination unit 104 determines whether or not the button 103 is pressed. The button-pressing identification information storage unit 105 stores in advance the button-pressing identification information for identifying that the button 103 has been pressed by the button-pressing determining unit 104 .

The uplink radio wave transmission unit 107 transmits the uplink radio wave 92 including the user identification information stored in the user identification information storage unit 102 when the downlink radio wave reception unit 101 receives the downlink radio wave 91 . Then, when it is determined by the button press determination unit 104 that the button 103 is pressed, the uplink radio wave 92 including the button press identification information and the user identification information superimposed by the superimposition unit 106 is transmitted.

The button pressing identification information is a code for identifying the pressing of a button, and is composed of, for example, a character string combining numbers, letters, symbols, etc. of a limited length, a binary code string, or the like. In addition, the access control apparatus 3 can identify which button 103 of the wireless communication device 1 was pressed based on the combination with the user identification information stored in the user identification information storage unit 102, and thus the button depression identification information is used for each wireless communication device. The communication device 1 need not be unique.

The reading device 2 includes a downstream radio wave transmission unit 201 and an upstream radio wave reception unit 202 .

The downlink radio wave transmission unit 201 transmits the downlink radio wave 91 including a signal for activating the wireless communication device 1 at predetermined intervals (for example, every 0.3 seconds). The uplink radio wave reception unit 202 receives the uplink radio wave 92 transmitted by the uplink radio wave transmission unit 107 of the wireless communication device 1 . Then, the uplink radio wave receiving unit 202 transmits the user identification information and the button pressing identification information included in the received uplink radio wave 92 to the access control device 3 described later.

The access control device 3 includes an access authority storage unit 301 , a history storage unit 302 , an authentication unit 303 , a normal user determination unit 304 , and an electronic lock control unit 305 . The access authority storage unit 301 stores the user identification information of the user who has the access authority of the door 5 . FIG. 3 is a configuration diagram of the access authority storage unit 301 according to the present embodiment, and shows a case where each unlocking mode is associated and stored for each user identification information. According to the example of FIG. 3 , the lock modes of the user identification information A, B, and D indicate the modes that do not require confirmation of the willingness to pass, and the lock modes of the user identification information C and E indicate the modes that require confirmation of the willingness to pass.

The history storage unit 302 stores the authentication date and time for each user. FIG. 4 is a configuration diagram of the history storage unit 302 according to the present embodiment, and shows a case where the unlock date and time are associated with each user identification information and stored.

The authentication unit 303 includes a passage authority authentication unit 3031 and a passage intention determination unit 3032 . The access authority authentication unit 3031 refers to the user identification information stored in the access authority storage unit 301, and performs verification with the user identification information of the user 6 included in the uplink radio wave 92 received by the uplink radio wave receiving unit 202 of the reading device 2. By checking, it is authenticated whether or not the user 6 has the authority to pass through the door 5 .

The permission to pass determination unit 3032 refers to the access authority storage unit 301 and confirms the unlock mode stored in association with the user identification information of the user 6 authenticated by the access authority authentication unit 3031 . When the confirmed unlocking mode is the willingness-to-traffic confirmation mode, the willingness-to-traffic determination unit 3032 issues an unlocking command of the electronic lock 4 to the electronic lock control unit 305 described later, and causes the history storage unit 302 to store the user 6's The user identification information is stored in association with the authentication date and time.

On the other hand, when the confirmed unlocking mode is the willingness-to-traffic confirmation mode, the willingness-to-traffic determination unit 3032 checks whether the button-pressing identification information transmitted from the uplink radio wave receiving unit 202 is predetermined button-pressing identification information. When it is confirmed within a predetermined time (for example, within 10 seconds) after the access authorization authentication unit 3031 authenticates that the user 6 has access authorization, the button press identification information transmitted from the uplink radio wave reception unit 202 is the predetermined button press identification information In this case, it is determined that the user 6 has operated the button 103, that is, the user 6 has expressed the intention to pass through the door 5, and the pass intention determination unit 3032 issues an unlock command of the electronic lock 4 to the electronic lock control unit 305 described later, and The history storage unit 302 stores the user identification information of the user 6 in association with the authentication date and time. If the identification information of the button press and the predetermined button press transmitted from the uplink radio wave receiving unit 202 are not confirmed for a predetermined time or more (for example, 10 seconds or more) after the access authorization authentication unit 3031 authenticates that the user 6 has access authorization If the result of the comparison of the identification information is the same, it is determined that the user 6 has not operated the button 103, that is, the user 6 has not expressed the intention to pass through the door 5, so that the electronic lock control unit 305 described later keeps the electronic lock 4 on. lock, and the history storage unit 302 does not store the authentication history of the user 6 .

The normal user determination unit 304 determines whether or not the user 6 is a normal user of the door 5 based on the authentication date and time stored in the history storage unit 302, so that the access authority storage unit 301 associates the result of the determination with the user 6's User identification information is associated and stored. When the normal user determination unit 304 determines that the user is a normal user, the normal user determination unit 304 causes the access authority storage unit 301 to store the unlocking mode of the user as the permission-to-access mode without confirmation. When the normal user determination unit 304 determines that the user is not a normal user, the normal user determination unit 304 causes the access authority storage unit 301 to store the unlocking mode of the user as the access intent confirmation mode.

In the present embodiment, the user determination unit 304 normally executes the above-described setting of the unlocking mode as a timing process (for example, at 0:00 every day) of the access control device 3 . The normal user determination unit 304 refers to the authentication date and time for each user of the door 5 stored in the history storage unit 302, and counts the number of authentications in the past predetermined period (for example, the past 30 days based on today). When the result of the count is that the number of times of authentication for the user 6 in the past predetermined period is a predetermined number or more (for example, the number of unlocking times in the past 30 days based on the current day is 50 or more), the normal user determination unit 304 determines that the user 6 is a normal user of the door 5 , sets the unlocking mode of the user 6 to the permission-to-pass mode without confirmation, and stores it in the access authority storage unit 301 in association with it. When the result of the count is that the number of times of authentication for the user 6 in the past predetermined period is within a predetermined number (for example, the number of unlocking times in the past 30 days based on the current day is within 50 times), the normal user determination unit 304 judges that the user 6 is not a normal user of the door 5 , sets the unlocking mode of the user 6 to the permission-to-pass confirmation mode, and stores it in the access authority storage unit 301 in association with it.

The electronic lock control unit 305 controls the electronic lock 4 to unlock and maintain the lock according to the instruction of the pass willingness determination unit 3032 . The electronic lock 4 is unlocked or maintained locked according to the instruction of the electronic lock control unit 305 .

Next, the operation of this embodiment will be described. FIG. 5 is a flowchart showing the operation of the normal user determination unit 304 of the access control system. As described above, normally, the user determination unit 304 executes the setting of the unlock mode as a timing process of the access control system 3 (for example, at 0:00 every day, etc.).

The normal user determination unit 304 refers to the authentication date and time of each user in the history storage unit 302 (S101).

Normally, the user determination unit 304 counts the number of unlocking times of each user in the past predetermined period by the above-mentioned reference (for example, whether the number of times of authentication in the past 30 days based on the current day is 50 times or more/less than 50 times) , it is judged whether each user 6 is a normal user of the door 5 (S102).

When the number of times of unlocking in the past predetermined period is a predetermined number or more (for example, the number of times of authentication in the past 30 days based on the current day is 50 times) or more ( S102 : Yes), the normal user determination unit 304 determines that the use is The user 6 is a normal user of the door 5, and the access authority storage unit 301 is caused to store the unlocking mode of the user as the access willingness-not-confirmation mode (S103).

When the number of unlocking times in the past predetermined period is less than the predetermined number (for example, the number of times of authentication in the past 30 days based on today is 50 times) ( S102 : NO), the normal user determination unit 304 determines that the use is If the user 6 is not a normal user of the door 5, the access authority storage unit 301 stores the unlocking mode of the user as the access willingness confirmation mode (S104).

FIG. 6 is a flowchart showing operations of authentication and unlocking of the access management device 3 when the user 6 passes through the door 5 in the access management system of the present embodiment.

When the user 6 carrying the wireless communication device 1 enters the reception range 7 of the reading device 2 and the reading device 2 reads the user identification information included in the uplink radio wave 92 transmitted by the wireless communication device 1 ( S111 : Yes ), and the process proceeds to S112. When the reading device 2 does not read the user identification information included in the uplink radio wave 92 transmitted by the wireless communication device 1 ( S111 : NO), the process of S111 is repeated.

The access authority authentication unit 3031 of the authentication unit 303 checks the user identification information included in the uplink radio wave 92 received by the reading device 2 with the user identification information stored in the access authority storage unit, and determines whether the user 6 has Access authority of door 5 (S112). When the user 6 does not have the access authority to the door 5, the process returns to S111 (S112: NO).

When the user 6 has the access authority of the door 5 ( S112 : YES), the access intention determination unit 3032 of the authentication unit 303 checks the access authority storage unit 301 and confirms that the user identification information stored in association with the user identification information of the user 6 Whether or not the lock mode is the willingness-to-pass mode is not confirmed (S113).

When the locking mode stored in association with the user identification information of the user 6 is the willingness-to-pass confirmation mode ( S113 : YES), the willingness-to-pass judgment unit 3032 causes the electronic lock control unit 305 to transmit a request to the electronic lock 4 Unlock instruction (S115). Then, the willingness to pass determination unit 3032 causes the authentication storage unit 302 to associate and store the user identification information of the user 6 with the authentication date and time ( S116 ), and ends the process.

When the lock mode stored in association with the user identification information of the user 6 is not the willingness-to-traffic confirmation mode, that is, the willingness-to-traffic confirmation mode ( S113 : NO), the traffic willingness judgment unit 3032 judges the user 6 Whether the button 103 is pressed. That is, the willingness to travel determination unit 3032 associates the button press identification information included in the uplink radio wave 92 transmitted by the wireless communication device 1 and received by the reader 2 when the user 6 presses the button 103, and a predetermined button press. The identification information is checked (S114).

When it is not confirmed that the user 6 pressed the button 103, that is, when the button pressing identification information included in the uplink radio wave 92 received by the reader 2 has not been checked with the predetermined button pressing identification information ( S114: NO), the process returns to S111.

When it is confirmed that the user 6 pressed the button 103, that is, when the button pressing identification information included in the uplink radio wave 92 received by the reading device 2 is checked with the predetermined button pressing identification information (S114) : Yes), the willingness to pass determination unit 3032 makes the electronic lock control unit 305 transmit an unlock command to the electronic lock 4 ( S115 ). Then, the willingness to pass determination unit 3032 causes the authentication storage unit 302 to associate and store the user identification information and the authentication date and time ( S116 ), and ends the process.

As described above, in the present embodiment, by referring to the past authentication history in the history storage unit 302 every predetermined period, it is possible to automatically and By appropriately setting whether or not the door is a normal user, a convenient access control system can be obtained.

In addition, a display device (eg, LED, LCD, etc.), not shown, may be provided in a position where the user 6 can see visually, such as the main body of the reading device 2 and the vicinity of the door 5 . The information on whether or not the user 6 is a normal user of the door 5 determined by the willingness to pass determination unit 3032 may be transmitted to the display device (not shown) and displayed (LEDs are turned on/ When it is turned off, it is distinguished by the color of the lighted LED, or it is displayed as a text message on the LCD), and the user 6 is notified thereby. In addition, instead of being displayed, a speaker (not shown) may be provided near the door 5, and a sound or an alarm sound may be used for notification. By notifying the user 5 , when it is determined that the user 6 is not a normal user of the door 5 , an indication of the intention to press the button 103 to enter is presented to prevent confusion.

In addition, it is considered that the same effects as those of the present embodiment can be exhibited even when a part of the configuration is modified or omitted.

Embodiment 2

Next, the configuration and operation of the present embodiment will be described with reference to FIGS. 7 to 8 . In addition, in FIG. 7 , the same reference numerals as in FIG. 2 denote the same or corresponding parts, and in FIG. 8 , the same reference numerals as in FIG. 6 denote the same or equivalent processing. In addition, the input unit described in the present invention also refers to the button 103 in this embodiment.

FIG. 7 is an internal configuration diagram of the access control system according to the present embodiment. The access management system of the present embodiment is constituted by a wireless communication device 1 , a reading device 2 , an access management device 3 , and an electronic lock 4 as in the first embodiment.

The access control device 3 of the present embodiment includes an access authority storage unit 301 , a history storage unit 302 , an authentication unit 303 , a normal user determination unit 314 , and an electronic lock control unit 305 .

In the present embodiment, the normal user determination unit 314 executes the process every time the access authority authentication unit 3031 authenticates the user 6 . The normal user determination unit 314 refers to the authentication date and time for each user of the door 5 stored in the history storage unit 302, and confirms that there is a predetermined time (for example, within 24 hours) from the current time when the user 6 is authenticated. No certification. If the result of the confirmation is that the authentication date and time for the user 6 within a predetermined time (for example, within 24 hours) from the current time of authentication is stored, the normal user determination unit 314 determines that the user 6 is the The normal user of the door 5 notifies the willingness-to-pass determination unit 3032 to set the locking mode of the user 6 to the willingness-to-pass confirmation mode. If the result of the confirmation is that the authentication date and time for the user 6 within a predetermined time (for example, within 24 hours) from the current time when the user 6 is authenticated is not stored, the normal user determination unit 314 determines that the user is the user 6 is not a normal user of the door 5, and notifies the willingness-to-pass determination unit 3032 to set the locking mode of the user 6 to the confirmation mode of the willingness to pass.

The access authority storage unit 301 of the present embodiment does not necessarily need to store the lock mode for each user (the mode of not requiring confirmation of the willingness to pass or the mode of requiring confirmation of the willingness to pass). However, as in the first embodiment, the normal user determination unit 314 may cause the access authority storage unit 301 to store the lock mode for each user (the mode of no confirmation of the willingness to pass or the mode of confirmation of the willingness to pass), and the determination of the willingness to pass may be made. The unit 3032 refers to the unlock mode of the user 6 in the access authority storage unit 301 . The other structures are the same as those in the first embodiment.

Next, the operation of this embodiment will be described. FIG. 8 is a flowchart showing operations of authentication and unlocking of the access management device 3 when the user 6 actually passes through the door 5 in the access management system of the present embodiment.

The access authority authentication unit 3031 of the authentication unit 303 checks the user identification information included in the uplink radio wave 92 received by the reading device 2 with the user identification information stored in the access authority storage unit 301, and determines whether the user 6 is It has access authority of door 5 (S112). When the user 6 has the access authority to the door 5 ( S112 : YES), the process proceeds to S201 .

The normal user determination unit 314 refers to the authentication date and time for the user 6 of the door 5 stored in the history storage unit 302 ( S201 ).

Normally, the user determination unit 314 confirms the presence or absence of authentication within a predetermined time (for example, within 24 hours) from the current time when the user 6 is authenticated ( S202 ). When the result of the confirmation is that the authentication date and time for the user 6 within a predetermined time (for example, within 24 hours) from the current time of authentication is stored ( S202 : YES), the normal user determination unit 314 determines that The user 6 is a normal user of the door 5 , and the user 6 is notified of the willingness to pass determination unit 3032 that the lock mode of the user 6 is set to the mode without confirmation of the willingness to pass, and the process proceeds to S115 .

When the result of the confirmation is that the authentication date and time for the user 6 within a predetermined time (for example, within 24 hours) from the current time of authentication is not stored (S202: NO), the normal user determination unit 314 determines that The user 6 is not a normal user of the door 5, and the user 6 is notified of the willingness to pass determination unit 3032 that the lock mode of the user 6 is set to the confirmation mode of the willingness to pass, and the process proceeds to S114. The other processes are the same as those in the first embodiment.

As described above, the present embodiment, like the first embodiment, also has the effect that by referring to the past authentication history in the history storage unit 302 every predetermined period, the user's traffic situation and/or frequency change can be changed. , it is possible to automatically and appropriately set whether or not the door is a normal user, so that a convenient access control system can be obtained.

In this embodiment, as in Embodiment 1, a display device (eg, LED, LCD, etc.), not shown, may be provided in a position visible to the user 6 such as the main body of the reading device 2 and the vicinity of the door 5 . The information on whether or not the user 6 is a normal user of the door 5 determined by the willingness to pass determination unit 3032 may be transmitted to the display device (not shown) and displayed (LEDs are turned on/ When it is turned off, it is distinguished by the color of the lighted LED, or it is displayed as a text message on the LCD), and the user 6 is notified thereby. In addition, instead of being displayed, a speaker (not shown) may be provided near the door 5, and a sound or an alarm sound may be used for notification. By notifying the user 5 , when it is determined that the user 6 is not a normal user of the door 5 , an indication of the intention to press the button 103 to enter is presented to prevent confusion.

In addition, in this embodiment, the predetermined time at which the normal user determination unit 314 confirms the presence or absence of authentication may be appropriately changed, for example, the predetermined time may be set according to the day of the week. For example, the case where the access control system of the present embodiment is applied to the access to and from a room in an office building on which Saturdays and Sundays are holidays will be described. When the normal user determination unit 314 always determines whether or not the user 6 is a normal user based on the presence or absence of authentication within 24 hours, when trying to pass through the gate 5 on Monday, almost all of the users may be determined. It is a problem that is not a normal user of the door 5. Therefore, the predetermined time at which the normal user determination unit 314 determines whether or not it is a normal user on Monday can be set to a time spanning Saturday and Sunday (for example, within 72 hours), and there is a further effect as follows: the normal user determination unit 314 is suitable for the use situation of the user of the office building, and can judge whether or not it is a normal user with higher accuracy.

In addition, when the predetermined time is set to a short period such as 3 hours, for example, in the commute time period from 7:00 to 9:00 in the morning, the predetermined time may be set to a time spanning a free time period at night, for example (For example, 17 hours obtained by adding 14 hours from 17:00 to 7:00 the next day to 3 hours). Similarly, there is a further effect that the normal user determination unit 314 can determine whether or not the normal user is a normal user with higher accuracy, which is suitable for the usage situation of the user of the office building.

In addition, it is considered that the same effects as those of the present embodiment can be exhibited even when a part of the configuration is modified or omitted.

Embodiment 3

Next, the configuration and operation of the present embodiment will be described with reference to FIGS. 9 to 10 . In addition, in FIG. 9 , the same reference numerals as in FIG. 2 denote the same or corresponding parts, and in FIG. 10 , the same reference numerals as in FIG. 6 denote the same or corresponding parts. In addition, the input unit described in the present invention also refers to the button 103 in this embodiment.

FIG. 9 is an internal configuration diagram of the access control system according to the present embodiment. The access management system of the present embodiment includes a wireless communication device 1 , a reading device 2 , an access management device 3 , an electronic lock 4 , and a door opening detection device 51 . The door opening detection device 51 is provided in the door 5 and detects the opening and closing of the door 5 . The door opening detection device 51 can detect the opening and closing of the door 5 by, for example, a mechanical means such as a switch (not shown) provided on a door frame (not shown) of the door 5 or an optical means such as a photoelectric sensor not shown.

For the user identification information of the user 6 authenticated by the authority authentication unit 3031, when the unlock mode stored in the access authority storage unit 301 is the permission-to-pass mode without confirmation, or when the unlock mode stored in the access authority storage unit 301 The unlocking mode in the unit 301 is the willingness-to-traffic confirmation mode, and when the willingness-to-traffic determination unit 3032 confirms that the user 6 has pressed the button 103 as in the first embodiment, the willingness-to-traffic determination unit 3032 issues a message to the electronic lock control unit 305 . The unlock command of the electronic lock 4 results in that the electronic lock 4 is unlocked. Then, the user 6 opens the door 5, and the door opening detection device 51 detects the door opening. The willingness-to-pass judgment unit 3032 causes the history storage unit 302 to associate and store the user identification information of the user 6 and the authentication date and time when the door opening detection device 51 has notified that the door has been detected. The other structures are the same as those in the first embodiment.

Next, the operation of this embodiment will be described. FIG. 10 is a flowchart showing the operation of authentication and unlocking of the access management device 3 when the user 6 actually passes through the door 5 in the access management system of the present embodiment.

When the willingness-to-pass determination unit 3032 sends an unlock command to the electronic lock 4 from the electronic lock control unit 305 ( S115 ), the electronic lock 4 is unlocked. Then, when the door opening detection device 51 detects the door opening of the door 5 (S117: YES), the willingness to pass judgment unit 3032 causes the history storage unit 302 to associate the user identification information with the authentication date and time and store it (S116), and end processing.

When the willingness-to-pass determination unit 3032 sends the unlocking command to the electronic lock 4 from the electronic lock control unit 305 (S115), and the door-opening detection device 51 does not detect the door opening of the door 5 (S117: NO), the willingness-to-traffic determination unit 3032 The process of S117 is repeated until a predetermined time (for example, about 10 seconds after unlocking) has elapsed. After the above-mentioned predetermined time has elapsed ( S118 : NO), the willingness-to-pass determination unit 3032 causes the electronic lock control unit 305 to transmit a lock command for the electronic lock and ends the process. The other processes are the same as those in the first embodiment.

As described above, the present embodiment has the effect of referring to the past authentication history of the history storage unit 302 every predetermined period, so that the user's traffic conditions and/or frequency changes can be automatically In addition, it is possible to appropriately set whether or not the door is a normal user, so that a more convenient access control system can be obtained. Further, after the door opening detection device 51 detects the door opening, the history storage unit 302 stores the user identification information of the user 6 in association with the authentication date and time, thereby further exhibiting the effect that the user 6 is authenticated even though the user 6 is authenticated. The door 5 is unlocked, but when the door 5 is actually passed through, unnecessary authentication date and time are not kept, so the locking mode can be determined based on the actual situation at the time of passing.

In this embodiment, as in Embodiment 1, a display device (eg, LED, LCD, etc.), not shown, may be provided in a position visible to the user 6 such as the main body of the reader 2 and the vicinity of the door 5 . The information on whether or not the user 6 is a normal user of the door 5 determined by the willingness to pass determination unit 3032 may be transmitted to the display device (not shown) and displayed (LEDs are turned on/ When it is turned off, it is distinguished by the color of the lighted LED, or it is displayed as a text message on the LCD), and the user 6 is notified thereby. In addition, instead of being displayed, a speaker (not shown) may be provided near the door 5, and a sound or an alarm sound may be used for notification. By notifying the user 5 , when it is determined that the user 6 is not a normal user of the door 5 , an indication of the intention to press the button 103 to enter is presented to prevent confusion.

In addition, the door opening detection device 51 of the present embodiment may be added to the configuration of the second embodiment, and a further effect is also obtained in the case where the user 6 does not actually pass through the door 5 even though the user 6 is authenticated and unlocked In this case, unnecessary authentication date and time are not kept, so the lock mode can be determined based on the traffic situation that is closer to the actual situation.

In addition, it is considered that the same effects as those of the present embodiment can be exhibited even when a part of the configuration is modified or omitted.

Embodiment 4

Next, the configuration and operation of the present embodiment will be described with reference to FIGS. 11 to 12 . In addition, the input unit described in the present invention refers to the hand reaching detection device 10 described later in this embodiment.

FIG. 11 is a schematic diagram of the access control system according to the present embodiment. The access management system is composed of a wireless communication device 1 , a reading device 2 , an access management device 3 , an electronic lock 4 and a hand reaching detection device 10 .

FIG. 12 is an internal configuration diagram of the access control system according to the present embodiment. The wireless communication device 1 includes a downstream radio wave reception unit 101 , a user identification information storage unit 102 , and an upstream radio wave transmission unit 107 .

The downlink radio wave receiving unit 101 receives the downlink radio wave 91 transmitted by the reading device 2 to be described later. The user identification information storage unit 102 stores in advance user identification information for identifying the user 6 (for example, a character string composed of a combination of numbers, letters, symbols, etc. of a limited length, or a binary code string, etc., for identifying the user). code).

The downlink radio wave 91 includes a signal for activating the wireless communication device 1 . When the downlink radio wave receiving unit 101 receives the downlink radio wave 91 , the wireless communication device 1 is activated, and the uplink radio wave transmission unit 107 transmits the uplink radio wave 92 including the user identification information stored in the user identification information storage unit 102 .

The uplink radio wave transmission unit 107 transmits the uplink radio wave 92 including the user identification information stored in the user identification information storage unit 102 when the downlink radio wave reception unit 101 receives the downlink radio wave 91 .

The hand extension detection device 10 includes a photoelectric sensor 1001 and a hand extension detection control unit 1002 . The photoelectric sensor 1001 of the hand reaching detection device 10 generates light (for example, a wavelength of about 750 nm) not shown. When the user 6 extends his hand near the photoelectric sensor 1001 (for example, it is closer than 5 cm to 10 cm), the light (not shown) is reflected by the hand of the user 6 , and the reflected light is received by the photoelectric sensor 1001 .

The photoelectric sensor 1001 notifies the hand extension detection control unit 1002 that reception of reflected light has been detected. Then, the extended hand detection control unit 1002 transmits to the authentication unit 302 that the extended hand detection device 10 is blocked by a hand.

The permission to pass determination unit 3032 refers to the access authority storage unit 301 and confirms the unlock mode stored in association with the user identification information of the user 6 authenticated by the access authority authentication unit 3031 . In the case where the confirmed unlocking mode is the mode requiring confirmation of the willingness to travel, when the hand reaching detection control unit 1002 receives the information that the hand reaching detection device 10 is blocked by a hand, the traffic willingness judging unit 3032 makes the electronic lock control unit 305 issue an electronic lock 4, and when the door opening detection device 51 detects the door opening, the history storage unit 302 stores the user identification information of the user 6 in association with the authentication date and time. The other structures are the same as those in the first embodiment.

As described above, the present embodiment has the effect of referring to the past authentication history of the history storage unit 302 every predetermined period, in accordance with changes in the user's traffic situation and/or frequency, as in the first embodiment. Whether or not it is a normal user of the door is automatically and appropriately set, and a more convenient access control system can be obtained.

In this embodiment, as in Embodiment 1, a display device (eg, LED, LCD, etc.), not shown, may be installed at a position visible to the user 6 such as the main body of the reader 2 and the door 5 vicinity. The information on whether or not the user 6 is a normal user of the door 5 determined by the willingness to pass determination unit 3032 may be transmitted to the display device (not shown) and displayed (LEDs are turned on/ When it is turned off, it is distinguished by the color of the lighted LED, or it is displayed as a text message on the LCD), and the user 6 is notified thereby. In addition, instead of being displayed, a speaker (not shown) may be provided near the door 5, and a sound or an alarm sound may be used for notification. By notifying the user 5 , when it is determined that the user 6 is not a normal user of the door 5 , an indication of the intention to extend the hand to the reaching detection device 10 to enter is presented to prevent confusion. .

Moreover, when the reading apparatus 2 is provided in the position which the hand of the user 6 can reach in the vicinity of the door 5, the hand reaching detection apparatus 10 may be built in the reading apparatus 2.

In addition, the wireless communication device 1 of the present embodiment may have a button 103, and the user 6 may use the button 103 to express a desire to pass.

In addition, the hand reaching detection device 10 of the present embodiment may be added to the configurations of the second and third embodiments.

In addition, it is considered that the same effects as those of the present embodiment can be exhibited even when a part of the configuration is modified or omitted.

In addition, in Embodiment 1, Embodiment 2, Embodiment 3, and Embodiment 4, the button 103 and the hand reaching detection device 10 are applied to the input unit, but it is not limited to the button as long as the user 6 can express the willingness to pass. 103 and the hand reaching detection device 10 .

In addition, although the access control systems of Embodiment 1, Embodiment 2, Embodiment 3, and Embodiment 4 are applied to the electronic lock 4 that locks the door 5 installed at the entrance and exit, it can also be applied to the opening/closing control of automatic doors, and the access control system. Use the opening and closing control of the access control, etc.

In addition, the access control apparatus 3 of Embodiment 1, Embodiment 2, Embodiment 3, and Embodiment 4 can be constituted by a general computer terminal (and hardware having an equivalent configuration). FIG. 13 is a hardware configuration diagram of the access control device 3 .

The hard disk 353 stores an access management program 3531 having the functions of the authentication unit 303 , the normal user determination unit 304 , and the electronic lock control unit 305 . The CPU 351 copies the access management program 3531 stored in the hard disk 353 to the memory 352 . In addition, the hard disk 353 stores data of the access authority storage unit 301 and the history storage unit 302 . The CPU 351 copies various data stored in the hard disk 353 to the memory 352 . The memory may be either or both of a volatile memory such as RAM and a nonvolatile memory such as flash memory. The hard disk 353 may be an SSD (Solid-State-Drive).

By executing the access management program 3531 stored in the memory 352, the CPU 351 performs processing of each function of the authentication unit 303, the normal user determination unit 304, and the electronic lock control unit 305. Then, the CPU 351 executes the access management program 3531 stored in the memory 352 to update the data of the access authority storage unit 301 and the history storage unit 302 stored in the memory 352 as necessary. Then, the CPU 351 updates the data of the access authority storage unit 301 and the history record storage unit 302 previously stored in the hard disk 353 to the updated access authority storage unit 301 and the history record storage unit 302 stored in the memory 352. data. The CPU 351 may be hardware having the same function (for example, a microcomputer, a DSP, or the like having a function of performing arithmetic processing).

In addition, at least a part of each function of the access authority storage unit 301 , the history storage unit 302 , the authentication unit 303 , the normal user determination unit 304 , and the electronic lock control unit 305 can be realized by dedicated hardware not shown. The so-called dedicated hardware may be an ASIC (which may be a special-purpose IC, an IC including a processor and a memory inside), an FPGA, an on-chip CPU, or a hardware functional unit provided on a memory chip, and combinations thereof.

The optical drive 354 reads out data or programs stored in the optical medium 3541 . The access manager can be installed from optical media. The so-called optical medium is, for example, a CD-ROM or a DVD-ROM. The installation source of the access management program 3531 is not limited to an optical medium. For example, it may be downloaded to the hard disk 353 or the storage 352 via a network and then installed. In addition, at least a part of the program may be pre-assembled in the above-mentioned dedicated hardware (not shown).

The access management device 3 and the reading device 2 are connected via a connector 351, for example, by a USB cable, a network cable, or a serial cable. The access management device 3 and the hand reaching detection device 10 are connected by a connector 352 , for example, through a USB cable, a network cable, or a serial cable. The access management device 3 and the electronic lock 4 are connected via the connector 353, for example, through a USB cable, a network cable, or a serial cable. The access management device 3 and the door opening detection device 5 are connected via the connector 351, for example, through a USB cable, a network cable, or a serial cable.

Label description

1 wireless communication device; 101 downlink radio wave receiving part; 102 user identification information storage part; 103 button; 104 button press determination part; 105 button press identification information storage part; 106 superimposition part; 201 Downlink radio wave transmission unit; 202 Uplink radio wave reception unit; 3 Access management device; 301 Access authority storage unit; 302 History record storage unit; 303 Authentication unit; User judgment part; 314 normal user judgment part; 305 electronic lock control part; 4 electronic lock; 5 door; 51 door opening detection device; 6 user; 7 reception range; 8 room; 10 Hand reaching detection device; 1001 Photoelectric sensor; 1002 Hand reaching detection control part.

Claims (6)

1. An access management system, wherein the access management system comprises:

a wireless communication device that is carried by a user and stores user identification information for identifying the user;

reading means for reading the corresponding user identification information transmitted by the wireless communication device located within the reception range;

a right of passage storage unit that stores the user identification information for each user having a right of passage of a door;

a right-of-passage authentication unit that authenticates whether or not a user of the user identification information read by the reading device has a right of passage to the door, based on each of the user identification information stored in the right-of-passage storage unit;

a history storage unit that stores the user identification information authenticated by the right-of-way authentication unit in association with the date and time of authentication;

an input unit for the user to operate;

an electronic lock control unit that issues an unlocking instruction to an electronic lock provided in the door;

a normal user determination unit configured to determine whether or not the user is a normal user of the door based on past authentication dates and times of the user stored in the history storage unit; and

a traffic intention determination unit that causes the electronic lock control unit to issue an unlock command and causes the history storage unit to store the user identification information in association with a date and time at which the user identification information is authenticated, when the normal user determination unit determines that the user is not a normal user of the door that the user has operated the input unit after the user authentication or when the normal user determination unit determines that the user is a normal user of the door,

the normal user determination unit determines that the user is a normal user of the door when the authentication history of the user is stored in the history storage unit a predetermined number of times or more in a predetermined period of time in the past since the user was authenticated by the right-of-passage authentication unit, and determines that the user is not a normal user of the door when the authentication history of the user is not stored in the history storage unit a predetermined number of times or more in a predetermined period of time in the past since the user was authenticated by the right-of-passage authentication unit.

2. The access management system of claim 1,

the input part is a button that the wireless communication apparatus has,

the wireless communication device transmits button-press identification information to the reading apparatus when the button is pressed by the user,

when the normal user determination unit determines that the user is not a normal user of the door, the will-of-pass determination unit causes the electronic lock control unit to issue an unlock command and causes the history storage unit to store the user identification information in association with a date and time at which the user identification information is authenticated, when the button-press identification information read by the reading device matches a predetermined button-press identification information.

3. The access management system of claim 1,

the input part is an outstretched hand detecting device provided in the vicinity of the door,

when the presence of a hand obstruction by the user's hand is detected by the outstretched person detecting device when the normal user determining unit determines that the user is not a normal user of the door, the traffic willingness determining unit causes the electronic lock control unit to issue an unlock command and causes the history storage unit to store the user identification information in association with a date and time at which the user identification information is authenticated.

4. An access management system, wherein the access management system comprises:

a wireless communication device that is carried by a user and stores user identification information for identifying the user;

reading means for reading the corresponding user identification information transmitted by the wireless communication device located within the reception range;

a right of passage storage unit that stores the user identification information for each user having a right of passage of a door;

a right-of-passage authentication unit that authenticates whether or not a user of the user identification information read by the reading device has a right of passage to the door, based on each of the user identification information stored in the right-of-passage storage unit;

a history storage unit that stores the user identification information authenticated by the right-of-way authentication unit in association with the date and time of authentication;

an input unit for the user to operate;

an electronic lock control unit that issues an unlocking instruction to an electronic lock provided in the door;

a normal user determination unit configured to determine whether or not the user is a normal user of the door based on past authentication dates and times of the user stored in the history storage unit; and

a traffic intention determination unit that causes the electronic lock control unit to issue an unlock command and causes the history storage unit to store the user identification information in association with a date and time at which the user identification information is authenticated, when the normal user determination unit determines that the user is not a normal user of the door that the user has operated the input unit after the user authentication or when the normal user determination unit determines that the user is a normal user of the door,

the normal user determination unit determines that the user is a normal user of the door when the authentication history of the user within a predetermined time since the user was authenticated by the right-of-passage authentication unit is stored in the history storage unit, and determines that the user is not a normal user of the door when the authentication history of the user within a predetermined time since the user was authenticated by the right-of-passage authentication unit is not stored in the history storage unit.

5. The access management system of claim 4,

the input part is a button that the wireless communication apparatus has,

the wireless communication device transmits button-press identification information to the reading apparatus when the button is pressed by the user,

when the normal user determination unit determines that the user is not a normal user of the door, the will-of-pass determination unit causes the electronic lock control unit to issue an unlock command and causes the history storage unit to store the user identification information in association with a date and time at which the user identification information is authenticated, when the button-press identification information read by the reading device matches a predetermined button-press identification information.

6. The access management system of claim 4,

the input part is an outstretched hand detecting device provided in the vicinity of the door,

when the presence of a hand obstruction by the user's hand is detected by the outstretched person detecting device when the normal user determining unit determines that the user is not a normal user of the door, the traffic willingness determining unit causes the electronic lock control unit to issue an unlock command and causes the history storage unit to store the user identification information in association with a date and time at which the user identification information is authenticated.

Images