JP2000113133A - Entering/leaving management support system - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide an entering/leaving management support system capable of keeping security and further improving convenience for both insider and outsider. SOLUTION: An entering/leaving managing host 10 for controlling the opening/closing of an entering/leaving gate at the timing of certifying the recorded information on an IC card carried by the outsider with him and a card issue terminal 40 for issuing the IC card 50 are connected by a public network L. The entering/leaving managing host 10 generates an entering/leaving permission ID according to authority during a period determined by itself, holds it for certification and sends this entering/leaving permission ID to the card issue terminal 40. The card issue terminal 40 records the entering/leaving permission ID on the IC card 50.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to an entry / exit management assistance system that permits passage through an entrance / exit gate upon reading recorded information on an IC card, for example.

[0002]

2. Description of the Related Art A card reading mechanism is provided near an entrance door (entrance / exit gate) of a company, and an IC card is read by the card reading mechanism to perform personal authentication, thereby controlling opening / closing of an entrance / exit gate (locking / unlocking). ) Has been put to practical use. In this type of conventional entry / exit management assisting system, for example, an insider such as an employee is allowed to hold an IC card in which permission information for giving permission to enter / exit unconditionally is stored. Persons were allowed to enter and leave only under the following conditions: (1) An insider holding an IC card attends when an outsider enters or leaves. (2) Lending an IC card in which the permission information is recorded to an outsider.

[0003]

In the conventional entry / exit management assistance system, when an outsider enters / exits an IC,
If you do not lend a card, insiders must be present, which is inconvenient for insiders. on the other hand,
The above-mentioned permission information of the IC card is assigned in a fixed-length field or recorded by applying a general-purpose encryption method. Therefore, if the IC card is lent to an outsider, the information on the IC card is decrypted and illegal. There was a risk of being used. In particular, when the security of the permission information is lost, the permission information of all the IC cards read by the card reading mechanism may need to be updated, which has a problem with danger. When using the IC card, it is possible to open and close the entry / exit gate by confirming the validity by inputting a password that is changed as needed, but in such a case, there is a risk that the password is leaked through the IC card, and the password is frequently used. Doing so had another problem: legitimate cardholders could not remember their passwords.

An object of the present invention is to provide an entry / exit management assistance system that is highly convenient for both insiders and outsiders while ensuring security.

[0005]

According to the present invention, there is provided an entry / exit management assisting system for controlling opening / closing of an entrance / exit gate upon authentication of permission information recorded on a card-shaped recording medium; Card issuance means for performing issuance processing of a recording medium. The management control means generates the permission information indicating the openable / closable period of the entrance / exit gate and the entrance / exit authority, holds the information for authentication, and notifies the card issuing means of the permission information. The means records the notified permission information on the card-shaped recording medium.

The management control means generates the permission information by encrypting the permission information irregularly and in a different data format each time, preferably by a different encryption method each time. In order to enhance security, the permission information is generated as a bit string of a random length.

Another entry / exit management assistance system according to the present invention comprises:
A card-shaped recording medium on which predetermined authority information is recorded, and a management control unit that reads recorded information including the authority information from the card-shaped recording medium, wherein the management control unit acquires the authority information in advance, Means for holding the acquired authority information and the openable / closable period of the corresponding entrance / exit gate for the authentication, collating the read authority information with the retained authority information, and when the collation result is positive. Means for executing opening / closing control of the entrance / exit gate within the openable / closable period.

The upper limit of the number of times that the opening and closing of the entrance / exit gate can be controlled may be held, and the number may be subtracted each time the opening / closing of the entrance / exit gate is controlled. Alternatively, the cumulative value of the opening time of the entrance / exit gate is held, and
The opening / closing control may be avoided when the accumulated value exceeds a predetermined value.

[0009]

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS Hereinafter, an embodiment in which the entry / exit management assistance system of the present invention is applied to security management of an apartment will be described in detail.

FIG. 1 is a block diagram showing an embodiment of an entry / exit management assistance system according to the present invention. The entry / exit management assistance system 1 is provided in an entry / exit management host 10 disposed in a condominium management room or the like, a card reader / writer (R / W) 20 disposed near an entrance / exit gate of the condominium, and in each room. User terminal 30 and a card issuing terminal 40 arranged in a store. The card issuing terminal 40 is connected online to the entry / exit management host 10 via the public network L, records information on the IC card 50 through the R / W 41, and performs a required issuing process.

The IC card 50 includes a CPU, a RAM, an RO,
M, a general-purpose memory having an EEPROM. The ROM stores a program read and executed by the CPU, for example, an authentication program and an encryption algorithm. The EEPROM stores an entry / exiter ID. An entry / exit permission ID including the ID is recorded. RAM is CP
U is a work area.

The entry / exit management host 10 includes a user terminal 30
And a general-purpose workstation or personal computer having a network communication environment established with the card issuing terminal 40, and formed by cooperative execution of an OS (Operating System) and a predetermined business program. Unit 11, an authentication processing unit 12, a permission information generation unit 13, and a gate control unit 14.
Further, a user management database (hereinafter, the database is abbreviated as “DB”) 15 for recording management information of residents and outsiders who are insiders, and gate management in which position information of entrance / exit gates is recorded. DB 16, a history information management DB 17 for recording an entry / exit permission application of an outsider from a resident and an issuance history of an entry / exit permission ID, etc., and recording key information used for encrypting transmission information and decrypting reception information. The key information management DB 18 is provided.

The user management section 11 has a user management DB 15
Based on the record information, the information of the resident who operates each user terminal 30 and the information of the outsider are managed. Also,
At the time of login of each user terminal 30, an application screen addressed to the user terminal 30 is generated and transmitted, and the application information input through this application screen is registered. In the user management DB 15, a resident ID, a room number, and a password are recorded for each resident, and further, an entry / exiter ID (or card ID) at the request of the resident, and a generated entry / exit. The permission ID is recorded.

The authentication processing unit 12 authenticates a resident or an outsider based on information recorded in the user management DB 15.

When the result of the user authentication by the authentication processing unit 12 is positive, the permission information generation unit 13 generates an entry / exit permission ID as permission information and sends it to the card issuing terminal 40. . When generating the entry / exit permission ID,
Using a key recorded in the key information management DB 18, a key that can be decrypted only by the entry / exit management server 10 or the IC card 50 can be encrypted by a different encryption method each time.

When the authentication result of the record information of the IC card 50 read through the R / W 20 is positive, the gate control unit 14 opens the entrance / exit gate of the apartment for a predetermined time based on the record information of the gate management DB 16. Control for

The user terminal 30 is connected to the entry / exit management host 10
The card issuing terminal 40 has a login function to the entry / exit management host 10 and an IC card 50 (EEPR).
OM) has a recording function of an entry / exit permission ID or the like.

The business program in the entry / exit management host 10 is stored in an internal storage device such as a workstation or an external storage device in any recording form capable of forming the above functional blocks, and is read and executed as needed. It has become so. However, portable recording media such as CD-ROMs and FDs that can be separated from workstations, etc.
Alternatively, the program may be stored in a computer readable form in a program server or the like connected to a private network, installed in the internal storage device or the external storage device at the time of use, and provided for execution at any time.

In the entry / exit management assistance system 1 configured as described above, when an outsider is allowed to enter the apartment, the entry / exit permission is given to the IC card 50 possessed by the outsider in a network communication environment. Record the ID. Outsiders permitted to enter and exit can carry the IC card 50 and enter the condominium only during the permitted period. Since there is no need for a resident to be present at the time of entry, it is possible to realize a highly convenient entry / exit management assistance system for both insiders and outsiders while ensuring security.

[0020]

Next, a method of operating the entry / exit management assistance system 1 will be described in detail. Here, apartment resident A
However, there is an example in which a pizza is ordered and a delivery person enters the apartment. The user terminal 30 is located in the room of the resident A, and the card issuing terminal 40 is located at a pizza shop. The IC card 50 is used when a delivery member enters an apartment. The entry / exit management host 10 records in advance the maximum number of times of entry allowed based on the IC card 50 and the cumulative value of the opening time of the entry / exit gate. The recording area is the user management DB 15, the history information management D
B17 or another file. The number of times of entry is decremented every time entry is permitted, and when the value becomes zero, the opening / closing gate opening / closing control is avoided. The cumulative value of the opening time is accumulated each time the opening / closing control is performed, and when exceeding a predetermined value, the opening / closing gate opening / closing control is avoided.

(First Embodiment) FIG. 2 is a diagram showing an example of a procedure from generation of permission information for outsider entry / exit to recording on the IC card 10. The resident A informs the pizza shop that he / she wants to order pizza by telephone or the like, and the pizza shop sends the entry / exit ID and the scheduled entrance time to the resident A (U11). The resident A logs in to the entry / exit management host 10 via the user terminal 30, and inputs a resident ID, a room number, a password, and the like (U12). The entry / exit management host 10 performs user authentication with reference to the user management DB 15 (H11), and returns an authentication result to the user terminal 30 (H12). Here, it is assumed that the authentication result is positive. The user terminal 30 displays the outsider entry / exit permission application on a display device (not shown), and the entry / exit management host 1
0 is requested (U13). Access control host 10
Generates an application screen based on the application request and sends it to the user terminal 30 (H13). Resident A inputs application information through the application screen. The application information includes an entry / exit person ID obtained from the pizza shop, identification information of a gate through which a delivery person passes, and an entry / exit permission period.

The entry / exit management host 10 registers the application information (H14), generates an entry / exit permission ID based on the application information, and stores it in the user management DB15. Also, it is stored in the history information management DB 17 together with the reception time (H15). Since the entry / exit permission ID only needs to be recognized in the host, a different ID is used every time with a bit string of random length. In addition, in order to ensure security, encryption is performed using the public key of the IC card 50. The encryption may be performed by a different encryption method using a different key each time.

At an appropriate time, the card issuing terminal 40 logs in to the entry / exit management host 10 and inputs an outsider ID, a password and the like (B11). The entry / exit management host 10
Outsider authentication, that is, authentication of the card issuing terminal 40 is performed (H16). If the authentication result is affirmative, an entry / exit permission ID is transmitted to the card issuing terminal 40 (H1).
7).

The card issuing terminal 40 sends the received entry / exit management ID to the IC card 50. The IC card 50 decrypts the entry / exit management ID using its own secret key and
The data is recorded in the ROM (B12). When the recording is completed normally, the IC card 50 is issued from the R / W 41 (B1).
3).

FIG. 3 is a diagram showing a procedure until a delivery person carrying the issued IC card 50 passes through the gate of the apartment. When the delivery person arrives at the apartment and inserts the IC card 50 into the R / W near the entrance / exit gate (N11), the R / W 20 reads the entry / exit permission ID from the IC card 50 and decodes the contents. The data is transmitted to the entry / exit management host 10 (G11, G12). The entry / exit management host 10 performs entry / exit person authentication. That is, the entry / exit permission ID stored in the user management DB 15 is compared with the entry / exit permission ID recorded on the IC card 50.
If the authentication is affirmative, the R / W 20 is notified of entry permission, and the IC card 50 is ejected and control for opening the corresponding gate is performed (H18, G13, G14).
The entry / exit management host 10 also subtracts the number of times of entry and records the time of entry (H19).

As described above, in the first embodiment, the entry / exit permission ID is generated as a bit string having a different random length every time and the IC
Since the information is recorded on the card 50, even if a malicious third party attempts to read the recorded information on the IC card 50, it does not make sense to do so. Further, since all information required for authentication is managed by the entry / exit management host 10, the gate identification information, the entry / exit permission period, the entry / exit person ID, etc.
There is no need to record on the card 50. Therefore, operation with enhanced security becomes possible.

(Second Embodiment) In the above example, an entry / exit permission ID (permission information) is sent from the entry / exit management host 10 to the card issuing terminal 40, and the card issuing terminal 40 records the entry / exit permission ID on the IC card 50. This is an example of the case where the entry / exit management host 10 manages the information for permitting the entrance of the entrance / exit gate. FIG. 4 shows an example of a procedure for generating and managing outsider entry / exit permission information in this case, and shows an example of a procedure until the delivery person actually passes through the gate. Is shown in FIG.

As a premise, the delivery person is required to use the IC card 50
In the (EEPROM), the own ID or the pizza shop ID (authority information) is recorded. In FIG. 4, procedures U21 to U24 on the user terminal 30 side and procedures H21 to H25 on the entry / exit management host 10 side are almost the same as the corresponding procedures U11 to U14 and H11 to H15 in the first embodiment, respectively. In contrast to the first embodiment, which generates and stores the entry / exit permission ID (H15), in this embodiment, the entry / exit person ID (or the pizza store ID) heard from the pizza store by telephone is stored. The point (H25) that this is used for outsider authentication is different. Another difference is that it is not necessary to log in from the card issuing terminal 40 to the entry / exit management host 10 and transmit and record the entry / exit permission ID from the entry / exit management host 10 to the card issuing terminal 40 (B11 to B13 are unnecessary. Become).

The procedure from when the delivery person arrives at the apartment to pass through the entrance / exit gate (FIG. 5) is basically similar to the procedure in FIG. 3 according to the first embodiment.
The difference is that an entry / exit person ID is sent from the R / W 20 near the gate to the entry / exit management host 10 instead of D.

In this embodiment, since the ID is fixed, it can be said that the security of the first embodiment is better than that of the first embodiment. However, it is necessary to connect the entry / exit management host 10 and the card issuing terminal 40 via a network. Since there is no configuration, the configuration is simpler than that of the first embodiment, and the operation becomes easier.

Although the present invention has been described above, the scope of application of the present invention is not necessarily limited to the above embodiments and examples, and can be arbitrarily changed. For example,
In the first embodiment, the entry / exit management host 10 sets the entry / exit permission I
Although the case where the card issuing terminal 40 is authenticated when transmitting D is described above, the card issuing terminal 40 (R / W4
1) Authentication with the IC card 50 is performed, and when the authentication is affirmative, the entry / exit permission ID is directly entered into the IC card 50.
Is also possible. Such a configuration is convenient when transmitting the entry / exit permission ID through the Internet or the like. In the above description, an IC card is used as the card-shaped recording medium. However, another card-shaped recording medium on which an IC chip is mounted, such as a hybrid card, can be used. When the permission information and the authority information are encrypted and recorded on a recording medium so that they can be decrypted at the time of authentication, a magnetic card or the like can be used instead of an IC chip.

[0032]

As is clear from the above description, according to the present invention, the minimum necessary entry / exit permission can be given only to a limited number of persons. Further, since the information on the management side does not leak to the outside, there is no risk of data decoding by a malicious person. This makes it possible to realize a highly convenient entry / exit management assistance system for both insiders and outsiders while ensuring security.

[Brief description of the drawings]

FIG. 1 is a configuration diagram illustrating an entry / exit management assistance system according to an embodiment of the present invention.

FIG. 2 is a diagram showing an example of a procedure from generation of outsider entry / exit permission information to recording on an IC card in the first embodiment.

FIG. 3 is a diagram showing a procedure until a delivery person carrying an IC card passes through an entrance / exit gate of an apartment in the first embodiment.

FIG. 4 is a diagram showing an example of a procedure up to generation of outsider entry / exit authority information in the second embodiment.

FIG. 5 is a diagram showing a procedure until a delivery person carrying an IC card passes through an entry / exit gate of an apartment in the second embodiment.

[Explanation of symbols]

 DESCRIPTION OF SYMBOLS 1 Entry / exit management assistance system 10 Entry / exit management host 11 User management unit 12 Authentication processing unit 13 Permission information generation unit 14 Gate control unit 15 User management DB 16 Gate management DB 17 History information management DB 18 Key information management DB 20, 41 Card reader / writer (R / W) 30 User terminal 40 Card issuing terminal 50 IC card L Public network

Claims (11)

[Claims] 1. A management control means for controlling opening / closing of an entrance / exit gate in response to authentication of permission information recorded on a card-shaped recording medium, and a card issuing means for issuing processing of the card-shaped recording medium, The management control means generates the permission information indicating the openable / closable period of the entrance / exit gate and the entrance / exit authority, holds the information for authentication, and notifies the card issuing means of the permission information. The entry / exit management assistance system, wherein the issuing unit records the notified permission information on the card-shaped recording medium. 2. The entry / exit management assistance system according to claim 1, wherein said management control means generates said permission information irregularly and in a different data format each time. 3. The entry / exit management assistance system according to claim 2, wherein the management control means generates the permission information by encrypting it. 4. The entry / exit management assistance system according to claim 3, wherein said management control means generates said permission information by a different encryption method each time. 5. The entry / exit management assisting system according to claim 1, wherein said permission information comprises a bit string of a random length. 6. The management control means holds an upper limit value of the number of times that the opening and closing of the entrance / exit gate can be controlled based on the permission information, and each time the opening / closing gate of the entrance / exit gate is controlled by the permission information. The entry / exit management assistance system according to claim 1, wherein the number of times is subtracted. 7. The management control means holds a cumulative value of the opening time of the entrance / exit gate based on the permission information, and when the cumulative value corresponding to the permission information exceeds a predetermined value, 2. The entry / exit management assistance system according to claim 1, wherein opening / closing control is avoided. 8. The information processing apparatus according to claim 1, wherein said management control means and said card issuing means are independent information processing apparatuses, and are connected online via a communication path. Entry and exit management assistance system. 9. A card-shaped recording medium on which predetermined authority information is recorded, and management control means for reading recorded information including the authority information from the card-shaped recording medium, wherein the management control means has a function of: Means for acquiring information, and holding the acquired authority information and the opening / closing period of the corresponding entrance / exit gate for the authentication; collating the read authority information with the retained authority information; Means for executing opening / closing control of the entrance / exit gate within the openable / closable period when the authentication result based on the result is affirmative. 10. The management control means holds an upper limit value of the number of times that the opening and closing of the entrance / exit gate can be controlled based on the authority information, and each time the opening / closing gate is controlled by the permission information. The entry / exit management assistance system according to claim 9, wherein the number is subtracted. 11. The management control means holds an accumulated value of the opening time of the entrance / exit gate based on the authority information, and when the accumulated value corresponding to the authority information exceeds a predetermined value, 10. The entry / exit management assistance system according to claim 9, wherein opening / closing control is avoided.