JP2005036627A - Entrance/exit management system, reader control device, and host control device - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an entrance/exit management system capable of suppressing a lowering of a security level by minimizing an affected range by partial degenerate operation when trouble arises in a part of the system. <P>SOLUTION: In the entrance/exit management system wherein anti-pass back control and path determination control over a plurality of readers are operated, in the case one or more readers become inoperative due to a failure or the like, an unlocking flag is reset based on a table showing the transmission destination readers of the unlocking flag, and a grouping table 127 showing the relation of the readers to minimize degenerate operation so as not to affect all the readers in the transmitting/receiving relation of the unlocking flag to the troubled reader. A range of degenerate operation for temporarily stopping anti-pass back control and path determination control can thereby be minimized. <P>COPYRIGHT: (C)2005,JPO&NCIPI

Description

  The present invention relates to an entrance / exit management system, and more particularly to a technique effectively applied to an entrance / exit management system suitable for entrance / exit management such as anti-passback and route determination in a complex room configuration composed of a plurality of readers. .

  According to a study by the present inventor, regarding the entrance / exit management system, the simplest method of anti-passback control is that if the entrance is not authenticated at the entrance, the exit is not performed at the exit. It is a management method that cannot. However, in order to increase the security level, there are cases where anti-passback control and route setting control for a plurality of doors are applied, which is very complicated entrance / exit management.

  Here, the anti-passback control for a plurality of doors will be described with a simple example using FIGS. In addition, it is assumed that a card is used for authentication, and the user has the authority to enter all compartments (rooms).

  2 and 3, when a card is held from outside the compartment to the reader R0 and enters the compartment A, the readers permitted to be authenticated next are the readers R1, R2, and R4 installed in the compartment A. Authentication is not permitted. This is realized by disabling the unlock flags of the readers R0, R3, R5, R6, and R7 and disabling the unlock flags of the readers R1, R2, and R4 when the card is held over the reader R0. Is done.

  Here, the meaning of the permission state of the unlocking flag does not mean “immediately unlocking”, but the personal identification information is properly authenticated by the reader. As a result, if the authentication is OK, “unlocked”. It means that it is in the state. On the other hand, the non-permitted state means a state where no authentication operation or unlocking operation is accepted. The same applies to the following description.

  Similarly, when the card is passed from the section A to the reader R2 and enters the section B, the next authentication-permitted reader is the readers R3 and R6 installed in the section B, and the other readers are not permitted to authenticate. It becomes. Further, when the card is passed from the section B to the reader R6 and enters the section D, the next reader to be authenticated is the reader R7 installed in the section D, and the other readers are not permitted to authenticate.

  Thus, in anti-passback control, a plurality of readers operate in cooperation to ensure security. Also, with respect to the route determination control, a predetermined route can be observed in the same manner as the anti-passback control. As known examples of the invention related to such anti-passback control and route determination control, there are technologies described in Patent Documents 1 to 10. The outline of typical known examples will be described below.

  Patent Document 1 is a publicly known example of realizing so-called anti-passback control and route determination control by writing permission / non-permission at the time of passing through a gate to a card. It is described that even if it is only a device configuration, it is possible to enter and leave the room accurately. However, the method of writing data to the card cannot be realized with a write-inhibited (read-only) card.

  Patent Document 2 is an entrance / exit management system that allows a card user who cannot pass through anti-passback control to operate the card using a password from a telephone and can freely cancel the pass disabled state on an individual level.

  Patent Document 3 is different from the invention related to the anti-passback control and the route determination control, but considers the concept of grouping. The grouping in this publicly known example does not control the electric locks one by one, but collects the locks that are operated simultaneously (grouping) to prevent forgetting operation or erroneous operation.

  Patent Document 4 describes a method of controlling the route of entering and leaving the room, a method of providing a passage time limit, and limiting the number of people in the room.

  Patent Document 9 describes that the entrance control information is registered in the central control unit and automatically distributed, so that it is not possible to freely enter and exit in a plurality of security areas, and entrance / exit control is strict.

Patent Document 10 discloses an entrance / exit management system that automatically corrects missing information in a passing route so as to allow passage after a certain period of time with respect to a method for realizing so-called anti-passback control and route determination control. It is described.
JP-A-5-79231 JP-A-5-197890 JP-A-7-293070 JP 2000-242819 A JP 2000-259968 A JP 2000-268219 A JP 2000-276622 A JP 2000-315290 A JP 2000-33272 A JP 2003-44891 A

  By the way, in the technology of the entrance / exit management system as described above, when the anti-passback control and the route determination control over a plurality of readers are operating, one or a plurality of readers becomes inoperable due to a failure or the like. In this case, all the readers that are in a transmission / reception relationship with the unlocked leader and the unlock flag are affected, so the transition to the degenerate operation that temporarily stops the anti-passback control and the route determination control will affect the entrance / exit. It must not be.

  However, in any of the above-mentioned known examples, when anti-passback control and route determination control are applied, how is security when one or more readers fail or a line failure occurs? There is no description of whether to pass while maintaining In addition, the degenerate operation is for all readers that are in a transmission / reception relationship with the unlocked reader and the unlocking flag, and has a wide range of influence, and temporarily has a problem that the security level is lowered.

  Accordingly, an object of the present invention is that when anti-passback control and route determination control over a plurality of sections are operating, a part of the system such as one or a plurality of readers becomes inoperable due to a failure or the like. In this case, it is to provide an entrance / exit management technology capable of continuously operating the entrance / exit management system while minimizing the range of degenerate operation.

  The present invention includes a reader control device that controls a plurality of readers, including a plurality of readers that read personal authentication, and a host control device that is connected to the reader control device via a communication line and monitors and controls the reader control device The present invention is applied to an entrance / exit management system having (overall control device, host device, or a device in which these are integrated). In the configuration of this entry / exit management system, the host controller corresponds to each authenticated reader, and enters / leaves a sequence table indicating readers that are allowed to be authenticated next, and each individual authentication performed Corresponding to the personal identification code, the unlock flag database in which the reader that is allowed to be authenticated next is set, and further corresponding to each reader that reads the personal authentication, the personal authentication by each reader is performed. As a result, the sequence information corresponding to a plurality of readers that can be allowed to authenticate next is indexed from the entrance / exit sequence table, and a grouping table in which the plurality of sequence information is combined is provided. In addition, the reader control device corresponds to each personal identification code for which personal authentication has been performed, and corresponds to a reader under the control of the reader control device in which a reader to which authentication can be permitted is set. It has a lock flag database.

  Specifically, the entrance / exit permission determination is performed by a combination of the personal identification code assigned to each card or biometric authentication data and the unlock flag information set in the reader that reads and authenticates the personal identification code. In addition, in a configuration that realizes an anti-passback function and a route determination function by dynamically changing the setting state of the unlocking flag according to the entry / exit of the card, a reader, a reader control device, a general control device, Alternatively, when a failure occurs in the communication line, the entrance / exit management system is operated without affecting the entrance / exit by degenerating the failure occurrence part.

  For example, when anti-passback control and route determination control across multiple readers are operating, if one or more readers become inoperable due to a failure, etc., the failed reader and the unlock flag To prevent all readers in the transmission / reception relationship from being affected, the unlocking sequence is based on the entrance / exit sequence table indicating the destination reader of the unlocking flag and the grouping table indicating the reader relationship for minimizing the degeneration operation. By resetting the lock flag, it is possible to minimize the range of the degenerate operation that temporarily stops the anti-passback control and the route determination control.

  The grouping reduction function for reducing only the (group) entrance / exit leader related to the location where the failure has occurred, even if it extends over a plurality of central control devices, the leaders under this general control device and The state of the reader control device can be communicated with each other to perform a degeneration function by grouping.

  Also, if the unlocking flag cannot be delivered due to a failure between the reader control device and the overall control device, when the overall control device sets the entry / exit sequence table from the host device, it is related to each reader control device. By setting the entry / exit sequence table to the reader control device, the leader control device itself avoids the entry / exit impossible state by distributing the unlocking flag according to the entry / exit sequence table set by the overall control device. Can do.

  As a result, entry / exit management can be performed in places other than the faulty part without any restriction even when a fault occurs, and further, degeneration can be suppressed to a minimum range, thus preventing a decrease in security level. A system can be realized.

  According to the entrance / exit management system of the present invention, when anti-passback control and route determination control by a plurality of readers are executed, even if the operation becomes impossible due to some hardware failure, the entire system is affected. Without giving, the system can be operated by partial degenerate operation.

  Further, according to the present invention, since the system can be operated by partial degenerate operation, it is possible to realize entrance / exit management that can minimize a decrease in security level.

  Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings.

  First, an example of a basic configuration of an entrance / exit management system according to an embodiment of the present invention will be described with reference to FIG. FIG. 1 is a configuration diagram showing a basic configuration of an entrance / exit management system. Note that the entrance / exit management system in this embodiment is assumed to use a card, and a user is assigned a unique identification code for each card, but biometric authentication is used instead of the card. It can also be applied to a method of reading data.

  The basic configuration of the entrance / exit management system according to the present embodiment includes a host device 1 that monitors and controls the entire system, a display device 2 connected to the host device 1, a plurality of readers 50 to 5n that read cards, A plurality of reader control devices 40 to 4n that are connected to these readers 50 to 5n to control the readers 50 to 5n, and the host device 1 are connected to the reader device 40 to 4n via a communication line (network or the like). Are composed of a plurality of overall control devices 30, 31 and the like.

  In this entrance / exit management system, a unique identification code is assigned to each card, and the identification codes are downloaded from the host device 1 to the plurality of readers 50 to 5n, and an unlock flag is set for each identification code. The function of locking or unlocking the electric lock according to the collation determination result of the identification code and the state of the unlocking flag is provided, and the reader control devices 40 to 4n record the identification code read by the readers 50 to 5n to be integrated. The control devices 30 and 31 have a function of collecting identification codes from the reader control devices 40 to 4n and setting an unlock flag for the readers 50 to 5n.

  In describing the entrance / exit management system according to the present embodiment, the configuration shown in FIG. 1 is used. However, the configuration in FIG. 1 is merely an example, and the overall control device and the reader control device are the same device. However, the method of the present invention is effective even if the host device has the functions of the overall control device and the reader control device.

  Next, an example of the entrance / exit management system for realizing the anti-passback control in FIG. 2 will be described according to the layout of FIG. 2 and referring to FIGS. 3 to 10 and 21. FIG. 2 is a layout diagram for explaining the anti-passback control, FIG. 3 is an explanatory diagram for explaining the transition of the anti-passback control using the card, and FIG. 4 is for realizing the anti-passback control in FIG. FIG. 5 and FIG. 6 are explanatory diagrams showing the table structure of the overall control device (FIG. 5 is an entry / exit sequence table, FIG. 6 is an unlocking flag database), and FIG. 7 to FIG. Explanatory diagram showing the transition of the unlocking flag state in the reader control device (FIG. 7 is the reader control device 0, FIG. 8 is the reader control device 1, FIG. 9 is the reader control device 2, and FIG. 10 is the reader control device 3), 21 is an explanatory diagram showing a table configuration of the overall control device and the reader control device.

  The anti-passback control method in the entrance / exit management system of the present embodiment will be described based on the method disclosed in Patent Document 5 (Japanese Patent Laid-Open No. 2000-259968), for example, but is not limited thereto.

  In the layout of FIG. 2, there are four sections A, B, C, and D, and all sections are configured to be in / out, and readers R0 to R7 are installed at each entrance / exit. The doors D0 to D3 are provided with electric locks EK0 to EK3.

  In the anti-passback control in FIG. 2, as shown in FIG. 3, when a card is held from outside the compartment to the reader R0 and enters the compartment A, the reader to be authenticated next is the reader installed in the compartment A. R1, R2, and R4, and other readers are not permitted to authenticate. This is realized by disabling the unlock flags of the readers R0, R3, R5, R6, and R7 and disabling the unlock flags of the readers R1, R2, and R4 when the card is held over the reader R0. Is done.

  Similarly, when the card is passed from the section A to the reader R2 and enters the section B, the next authentication-permitted reader is the readers R3 and R6 installed in the section B, and the other readers are not permitted to authenticate. It becomes. Further, when the card is passed from the section B to the reader R6 and enters the section D, the next reader to be authenticated is the reader R7 installed in the section D, and the other readers are not permitted to authenticate. Further, when the card is passed from the outside of the section to the reader R0 and enters the section A, and further from the section A to the reader R4 and enters the section C, the next authentication-permitted reader is installed in the section C. Reader R5, and other readers are not allowed to authenticate.

  FIG. 4 shows an example of the configuration of the entrance / exit management system for realizing the anti-passback control in FIG. 2, and the reader number, electric lock number, and door number in FIG. 4 are the same as those in FIG. .

  That is, the entrance / exit management system according to the present embodiment has a host device 10, a display device 11, eight (four pairs) readers R0 to R7, and four units, compared to the basic configuration shown in FIG. Doors corresponding to the readers R0 to R7 that are configured by the reader control devices (0) 13, (1) 14, (2) 15, (3) 16 and one integrated control device 12 and are installed at the respective entrances / exits. The sensors D0 to D3 and the electric locks EK0 to EK3 are connected to the reader control devices 13 to 16.

  As shown in FIG. 21, in the table configuration of the overall control device 12 and the reader control device, in this example, the reader control device (0) 13, the overall control device 12 includes an entry / exit sequence table 120, an unlocking flag database 123. A grouping table 127 grouped for each reader and a reader abnormality detection table 128 indicating an abnormality for each reader are provided.

  In particular, the entry / exit sequence table 120 stores a combination of locking and unlocking control for performing locking and unlocking control of other readers as sequence information for a held reader.

  The unlock flag database 123 indicates which ID card is under what lock / unlock control state.

  The grouping table 127 is, for example, a reader R0 reference grouping table. When the reader R0 is held over, the grouping table 127 is a sequence table (sequence information) for the reader to be locked and unlocked in the next held reader. In other words, the contents of the sequence table related to the readers to be locked and unlocked two steps ahead are set. Thereby, when the next reader is out of order, locking and unlocking control can be further performed based on the data for the previous locking and unlocking target reader.

  The reader control device (0) 13 is provided with an unlocking flag database 130 and an internal entry / exit sequence table 170. The unlocking flag database 130 and the internal entry / exit sequence table 170 have the reader R0 and the reader R1 related to the reader control device (0) 13, and the unlocking flag database 123 of the overall control device 12, respectively. Information similar to that in the leaving sequence table 120 is stored. In particular, the internal entry / exit sequence table 170 is used for degeneration when communication between the overall control devices described later is abnormal.

  As shown in FIGS. 5 and 6, in the overall control device 12, a plurality of entry / exit sequence tables 120 for instructing a transmission destination leader of the unlocking flag, and an unlocking flag held in the reader control devices 13 to 16. And an unlocking flag database 123 for managing the same data as the above.

  The entrance / exit sequence table 120 stores a sequence pattern 122 of a reader number 121 over which a card is held and destination leader numbers R0 to R7. The unlock flags of the transmission destination leader numbers R0 to R7 corresponding to the leader numbers R0 to R7 are set as 0: OFF and 1: ON. Note that when the unlocking flag is turned off, entry / exit is not permitted even if the ID card is held up, and when the unlocking flag is turned on, if the ID card is held up, the entry / exit is performed. Means to allow.

  The unlock flag database 123 stores a card identification code 124, an entry / exit sequence table number 125, an unlock flag group 126 of reader numbers R0 to R7, and a reader number that holds the card. In FIG. 6, in the card identification codes ID1, ID2 and ID3, ID1 and ID2 are examples of the same entry / exit sequence table number 1, and ID3 is a different entry / exit sequence table number 2, of which the card identification code ID1 , The transition of the unlocking flag when entering and leaving the room using ID2 is shown in the order of the reader number holding the card from the initial state (1230 to 1333, 1234 to 1238).

  As shown in FIGS. 7 to 10, unlocking flag databases 130, 140, 150, and 160 are provided in the reader control devices 13 to 16. Each unlocking flag database 130, 140, 150, 160 stores a reader control device number and a reader number. 7 to 10 show transitions of the unlock flag when entering and leaving the room using ID1 and ID2 out of the card identification codes ID1, ID2 and ID3 (1300 to 1308, 1400 to 1408, 1500). 1508, 1600-1608).

  As a method for managing the state transition of the unlocking flag, the unlocking flag database 123 in the overall control device 12 has one table entry for each card identification code 124, and each reader has the unlocking flag group 126. The state is managed by setting the state. In this figure, for convenience of explanation, the situation in which the contents of the corresponding entry sequentially change is illustrated. As another method, it is also possible to have a plurality of state tables in one table entry and to flag the current state at each state transition.

  Specifically, the transition of the unlock flag when entering and leaving the room using the card identification code ID1 will be described.

  (1) When the card is placed over the reader R0 and enters the compartment A, the readers that are permitted to be authenticated next by the sequence pattern 122 of the entry / exit sequence table 120 are the readers R1, R2, installed in the compartment A. It is R4, and it is understood that other readers are not permitted to authenticate. The unlocking flag distribution process is executed for the reader that has changed in the unlocking flag group 126 of the unlocking flag database 123, so that the unlocking flag OFF of the readers R0, R3, R5, R6, and R7 is turned off. It transmits to 13-16. The unlock flag group 126 of the unlock flag database 123 at this time transitions to a state where the unlock flag is 1231. In addition, the unlock flags in the unlock flag databases 130, 140, 150, and 160 in the reader control device transition to states of 1301, 1401, 1501, and 1601, respectively.

  (2) Next, when the card is passed from the section A to the reader R2 and enters the section B, the next authentication-permitted reader is installed in the section B by the sequence pattern 122 of the entrance / exit sequence table 120. Readers R3 and R6, and other readers are not authorized. The unlocking flag distribution process is executed for the reader that has changed in the unlocking flag group 126 of the unlocking flag database 123, so that the unlocking flag ON of the readers R3 and R6 is set to the reader control devices 14 and 16. And the unlock flags OFF of the readers R0, R1, R2, and R4 are transmitted to the reader control devices 13-15. At this time, the unlock flag group 126 of the unlock flag database 123 transitions to a state where the unlock flag is 1232. In addition, the unlock flags in the unlock flag databases 130, 140, 150, and 160 in the reader control device transition to states 1302, 1402, 1502, and 1602, respectively.

  (3) Next, when the card is passed from the section B to the reader R6 and enters the section D, the reader permitted to be authenticated next is set in the section D by the sequence pattern 122 of the entrance / exit sequence table 120. The other reader R7 is not allowed to authenticate. The unlock flag distribution process is executed for the reader that has changed in the unlock flag group 126 of the unlock flag database 123. Therefore, the unlock flag ON of the reader R7 is transmitted to the reader controller 16, and the reader An unlock flag OFF of R3 and R6 is transmitted to the reader control devices 14 and 16. At this time, the unlock flag group 126 of the unlock flag database 123 transitions to a state where the unlock flag is 1233. In addition, the unlock flags in the unlock flag databases 130, 140, 150, and 160 in the reader control device transition to states 1303, 1403, 1503, and 1603, respectively.

  (4) Here, if another person leaves the section D and leaves the room, the reader R3 with the unlock flag set to 1233 is OFF, so the electric lock EK1 is held even if the card is held over the reader R3. Remains locked and cannot leave the compartment B. At this time, the host device 10 which is the host device is notified that an anti-passback violation has occurred, and the system administrator can check the display device 11.

  Subsequently, similarly, the transition of the unlocking flag when entering and leaving the room using the card identification code ID2 will be described.

  (1) When the card is placed over the reader R0 and enters the compartment A, the readers that are permitted to be authenticated next by the sequence pattern 122 of the entry / exit sequence table 120 are the readers R1, R2, installed in the compartment A. It is R4, and it is understood that other readers are not permitted to authenticate. The unlocking flag distribution process is executed for the reader that has changed in the unlocking flag group 126 of the unlocking flag database 123, so that the unlocking flag OFF of the readers R0, R3, R5, R6, and R7 is turned off. It transmits to 13-16. At this time, the unlock flag group 126 of the unlock flag database 123 transitions to a state where the unlock flag is 1235. In addition, the unlock flags in the unlock flag databases 130, 140, 150, and 160 in the reader control device transition to states 1305, 1405, 1505, and 1605, respectively.

  (2) Next, when the card is passed from the section A to the reader R4 and enters the section C, the reader whose authentication is permitted next is set in the section C by the sequence pattern 122 of the entrance / exit sequence table 120. The other reader is R5, and other readers are not permitted to authenticate. The unlocking flag distribution process is executed for the reader that has changed in the unlocking flag group 126 of the unlocking flag database 123. Therefore, the unlocking flag ON of the reader R5 is transmitted to the reader controller 15, and the reader An unlock flag OFF of R1, R2, R4 is transmitted to the reader control devices 13-15. At this time, the unlock flag group 126 of the unlock flag database 123 transitions to a state where the unlock flag is 1236. In addition, the unlock flags in the unlock flag databases 130, 140, 150, and 160 in the reader control device transition to states 1306, 1406, 1506, and 1606, respectively.

  (3) Next, when the card is passed from the section C to the reader R5 and enters the section A, the next authentication-permitted reader is installed in the section A by the sequence pattern 122 of the entrance / exit sequence table 120. Readers R1, R2, and R4, and other readers are not allowed to authenticate. Since the unlock flag distribution process is executed for the reader that has changed in the unlock flag group 126 of the unlock flag database 123, the unlock flags ON of the readers R1, R2, and R4 are set to the reader control devices 13 to 15. The unlocking flag OFF of the reader R5 is transmitted to the reader control device 15. At this time, the unlock flag group 126 of the unlock flag database 123 transitions to a state where the unlock flag is 1237. In addition, the unlock flags in the unlock flag databases 130, 140, 150, and 160 in the reader control device transition to states 1307, 1407, 1507, and 1607, respectively.

  (4) Furthermore, when the card is moved from the section A to the reader R1 and the user leaves the section, the reader who is permitted to be authenticated next by the sequence pattern 122 of the entry / exit sequence table 120 is the reader installed outside the section. R0, and other readers are not allowed to authenticate. Since the unlock flag distribution process is executed for the reader that has changed in the unlock flag group 126 of the unlock flag database 123, the unlock flag ON of the reader R0 is transmitted to the reader controller 13, and the reader An unlock flag OFF of R1, R2, R4 is transmitted to the reader control devices 13-15. At this time, the unlock flag group 126 of the unlock flag database 123 transitions to a state where the unlock flag is 1238. In addition, the unlock flags in the unlock flag databases 130, 140, 150, and 160 in the reader control device transition to states 1308, 1408, 1508, and 1608, respectively. Looking at the state where the unlock flag is 1238, it can be seen that the card identification code ID2 cannot be unlocked even if the card is held over a reader other than the reader R0.

  In this way, the anti-passback control of the entrance / exit management system composed of a plurality of readers is realized. Needless to say, the route determination control is also realized by the same method.

  The basic method of the anti-passback control has been described above. Next, the grouping degeneration operation at the time of failure occurrence, which is one feature of the present invention, will be described with reference to FIGS. FIG. 11 to FIG. 14 are explanatory diagrams showing table structures in the overall control device (FIG. 11 is an entrance / exit sequence table, FIG. 12 is an unlock flag database, and FIG. Reference grouping table, FIG. 14 is a reader abnormality detection table, FIG. 15 to FIG. 18 are explanatory diagrams showing the transition of the unlock flag state in the reader control device (FIG. 15 is the reader control device 0, FIG. 16 is the reader control device) 1 and 17 show the reader control device 2 and FIG. 18 shows the reader control device 3).

  First, as a precondition for the description, in FIG. 2 described above, it is assumed that the reader R2 has failed and cannot be read even if the card is held over, and at this time, the reader control device 14 is operating normally. . Since the reader R2 breaks down, the door D1 is temporarily opened for operation. If the anti-passback control is operated as it is in this state, the card cannot be placed over the reader R2, and therefore it becomes impossible to enter the section D.

  Therefore, as shown in FIGS. 11 to 14, in addition to the above-described entry / exit sequence table 120 and unlock flag database 123, the unification flag (0 of the group leader number corresponding to the leader number) is included in the overall control device 12. : OFF (locked), 1: ON (unlocked)) grouping table 127 with reference to reader R0, and reader abnormality detection table in which abnormal state (0: normal operation, 1: inoperable) is set 128 is provided to realize partial degenerate operation.

  The reader R0 reference grouping table 127 has a table indicating grouping for degeneration for each reader. For example, when a card is held over the reader R0, the reader to be unlocked is determined, and further, An unlocking control target reader when held over a predetermined target reader is required. That is, the readers to be unlocked controlled in two stages are grouped from the reader over which the card is placed. Hereinafter, the grouping table referred to by the reader R0 is simply referred to as a grouping table.

  Here, the contents of the grouping table 127 will be described.

  When the card is held over the reader R0, the reader R0 entry of the sequence pattern 122 in the entry / exit sequence table 120 indicates that the readers R1, R2, and R4 are the next readers that are permitted to be authenticated.

  Further, when the card is held over the reader R1 among them, the reader to be authenticated next is the reader R0. Therefore, in the grouping table 127 referred to by the reader R0, “1” is set to R0, and “ 0 '. Further, since the readers that are permitted to authenticate when the card is held over the reader R2 among them are R3 and R6, they are set to "1". Further, since the reader that is permitted to authenticate when the card is held over the reader R4 among them is R5, it is set to “1”.

  That is, when there is one overall control device 12, for example, the grouping table 127 referred to by the reader R0 corresponds to the reader in which the row entry value of the reader R0 in the entry / exit sequence table 120 is set to “1”. In this example, the contents of each row entry of the reader R1, the reader R2, and the reader R4 are set.

  Hereinafter, the details of the grouping degenerate operation when a failure occurs will be described.

  When entering the section A with the card of the identification code ID1 over the reader R0, the readers R1 and R2 installed in the section A are the next readers permitted to be authenticated by the sequence pattern 122 of the entry / exit sequence table 120. , R4, and it is understood that other readers are not permitted to authenticate. Originally, the unlock flag distribution processing is executed for the reader that has changed in the unlock flag group 126 of the unlock flag database 123, so the unlock flags of the readers R0, R3, R5, R6, and R7. OFF is transmitted to the reader control devices 13-16.

  At this time, the reader abnormality detection table 128 checks whether there is an inoperable reader. Since the reader R2 is not operable, the sequence pattern 122 of the reader abnormality detection table 128 and the entry / exit sequence table 120 is ANDed to confirm whether the reader R2 is the next reader permitted to be authenticated. In this case, since the reader R2 is a reader whose authentication is permitted next, information on the reader R2 in the grouping table 127 is referred to next. Since the readers R3 and R6 are "1", the reader unlocking flag ON is transmitted to the reader control devices 14 and 16.

  Here, when a failure occurs in the reader control device itself or another integrated control device described later, a plurality of readers under the control are displayed as “1” on the reader abnormality detection table 128. become. In this case, the logical sum of the corresponding readers in the grouping table 127 is set in the reader number field of the corresponding identification code in the unlock flag database 123 of FIG.

  At this time, the unlock flag group 126 of the unlock flag database 123 of FIG. 12 transitions to a state where the unlock flag in FIG. Also, the unlock flags in the unlock flag databases 130, 140, 150, and 160 in the reader control device of FIGS. 15 to 18 transition to the states of 1301, 1401, 1501, and 1601, respectively.

  Thereby, even if the card is not held over the reader R2, authentication is permitted by the reader R6, and the user can enter the section D. Moreover, since the unlocking flag is transmitted as usual, leaving the room in the reverse direction can leave the room without any problem. In this way, by realizing partial degenerate operation, it is possible to continue the operation of the anti-passback control and the route determination control while minimizing the influence range.

  In the above description, an example in which a failure has occurred in the reader has been described. Subsequently, a case in which the reader has recovered from the failure will be described. Here, it is assumed that the person who possesses the card with the identification code ID1 has recovered the reader R2 while in the room in the innermost section D, for example.

  First, the reader R2 of the reader abnormality detection table 128 is set to the normal state “0”. The unlock flag group 126 of the unlock flag database 123 of FIG. 12 has the unlock flag 1233 in FIG. 12 for the card with the identification code ID1, so when the card is moved over the reader R7 and exits the section D, The unlock flag changes to the state 1234 according to the sequence pattern 122 of the leaving sequence table 120.

  Further, when the card is held over the reader R3 and exits the section B, the unlock flag is changed to the state 1235, and it is understood that the next readers permitted to be authenticated are R1, R2, and R4. Thereby, it can be proved that the person who has the card with the identification code ID1 can move to any section as normal.

  In other words, even in the event of a failure, even if it corresponds to the failure leader according to the entry / exit sequence table 120, the reader unlocking flag control related to this reader is performed. be able to.

  Next, in the entrance / exit management system according to the present embodiment, referring to FIGS. 19 and 20, the reader control device and the overall control device are made the same device as an integrated control device, and a plurality of these integrated control devices are connected. The case where this is done will be described. FIG. 19 is a configuration diagram showing a case where a plurality of integrated control devices are connected, and FIG. 20 is an explanatory diagram showing a table structure in the integrated control device and how to prepare each table.

  As shown in FIG. 19, in a configuration in which a plurality (two in the figure) of integrated control devices (A) 20 and (B) 21 are connected, readers R0 and R1 are connected to the integrated control device 20 as integrated control devices. 21 are connected to readers R2, R3, and R4, respectively.

  As shown in FIG. 20, in the integrated control apparatus 20, an entry / exit sequence table 201 of the self-integrated control apparatus 20, a grouping table 202 referring to the reader R0, and an entry / exit sequence table 211 of the other integrated control apparatus 21 are provided. Yes.

  As a method of preparing the entry / exit sequence table 201, all readers (R0, R1) under the self-integrated control device 20 are set as row entries, and column entries are all connected under all the integrated control devices 20, 21. A sequence table having readers (R0, R1, R2, R3, R4) as column entries is prepared. That is, when the authentication card is held over the reader under the self-integrated control device 20, the target reader of the unlock flag associated therewith needs to control even the reader under the other integrated control device 21. Because there is.

  Subsequently, in order to cope with degeneration, for example, as an example of a method of creating the grouping table 202 related to the reader R0 reference, the readers related to the row entry when the card is held over the reader R0 are R1, R2, and R4. I know that there is. Since the reader R1 is connected in the self-integrated control device 20, first, the grouping table 202 of the self-integrated control device 20 is set in the procedure 1 as in FIG. Set to R1 line entry.

  Since the readers R2 and R4 are connected under the integrated control device 21, in step 2, the row entries of R2 and R4 in the entry / exit sequence table 211 in the integrated control device 21 are read, and the values are read as the procedure. 3 is completed by setting it in the row entries of R2 and R4 of the grouping table 202. Furthermore, if there is a system-specific degeneration condition, it is possible to further manipulate the values in this table.

  Here, when a failure that makes it impossible to communicate with other integrated control devices occurs, all readers under the target integrated control device are regarded as failed. In this example, the readers R2 and R4 By setting the reader abnormality detection table in the self-integrated control device and performing the degenerate operation while referring to the corresponding grouping table, the same operation as when the single integrated control device is used becomes possible.

  By setting this grouping table as described above and having it in the integrated control apparatus, it is possible to enter the next section without holding the card over the reader where the failure has occurred.

  The grouping table is used for anti-passback control and route determination control while maintaining security when the next authentication-permitted reader breaks down against the reader holding the card. This is to continue driving.

  Until now, when a failure occurred in each reader, the example of path control was shown without substantially reducing the security function. Next, the communication function between the reader control device and the higher-level integrated control device will be described. An example when a failure occurs will be described with reference to FIGS. FIG. 22 is a flowchart showing an initial delivery method of the entrance / exit sequence table in the overall control device, FIG. 23 is an explanatory diagram showing the format of the internal entrance / exit sequence table in the reader control device, and FIG. 24 has an internal unlocking flag. FIG. 25 is an explanatory diagram showing an unlocking flag database, FIG. 25 is an explanatory diagram showing transition of a table when communication between the reader control device and the overall control device is abnormal, and FIG. 26 is a flowchart showing an operation of the reader control device.

  As shown in FIG. 22, in the example of the initial delivery method of the entrance / exit sequence table 120 in the overall control device 12, the entrance / exit sequence table 120 is displayed on each building while looking at the layout structure of the room, hall, door, etc. The manager in charge decides the contents of the table according to a predetermined security policy. Therefore, it cannot be the same pattern just because the buildings have the same layout.

  The determined entry / exit sequence table 120 is loaded into the host device 10 that covers the control device of the entire building, and when initialization processing such as power-on of each integrated control device is executed, the host device 10 Received (S2201).

  Next, the overall control device 12 extracts connected readers for each reader control device under control, that is, extracts a degenerate operation sequence table for the corresponding readers (S2202). Then, it is distributed to each reader control device (S2203). Here, in S2202, only relevant readers are extracted. However, the entire table may be received and extraction processing may be performed by each received reader controller.

  As shown in FIG. 23, for example, in the format of the internal entry / exit sequence table 170 in the reader controller (0) 13, based on the data received in S2203, the reader R0, which is related to this reader controller, A sequence table is created for R1. Similarly to the entry / exit sequence table 120, reference numeral 171 indicates a reader number holding the card, and 172 indicates unlocking flag data to be transmitted to the readers R0 and R1 corresponding to the destination reader number.

  As shown in FIG. 24, the unlock flag database 130 is obtained by adding the internal unlock flag 133 to the unlock flag database 130 cited in FIG. In this transition (6101 → 6102 →...), The internal unlocking flag 133 is used to perform a degenerate operation in the reader control device 0 (13) when communication with the overall control device is impossible.

  For example, the initial value of the internal unlocking flag 133 related to ID1 of the identification code 131 of the card being held is R0 = 1 and R1 = 0, and the room can be entered from R0 (6101). This value is determined according to the security policy.

  Next, when an ID1 card is held over R0, first, the internal unlocking flag 133 is updated to the state of 6102 according to the value of the internal entry / exit sequence table 170. At the same time, information “ID1 card is held over R0” is sent to the overall control device 12. Based on the sent data, the overall control device 12 refers to the entry / exit sequence table 120 corresponding thereto, updates the unlocking flag database 123, and sends the corresponding R0 and R1 data to the reader control device ( 0) will be sent to 13.

  The received reader control device (0) 13 updates the information of the unlock flag 132 of the identification code 131 of the corresponding ID1 card and makes a transition (6103).

  As a result, when communication with the host is normal, the unlock flag 132 is set to the latest value based on the data from the host.

  As shown in FIG. 25, similarly to the above-described FIG. 24, in the table transition when the communication between the reader control device (0) 13 and the overall control device 12 is abnormal, similarly, an ID1 card is placed over R0. First, the internal unlocking flag 133 is updated to the state of 6202 according to the value of the internal entry / exit sequence table 170. At the same time, when the information “ID0 card is held over R0” is sent to the general control device 12, it is a communication error (transmission error), or the general control device 12 responds to it based on the sent data. With reference to the entry / exit sequence table 120, the unlocking flag database 123 is updated, and the corresponding R0 and R1 data is sent back to the reader control device (0) 13. If a communication error (reception error) occurs at this time, the state cannot be changed from 6202 to 6203.

  When this error is detected, the reader control device (0) 13 uses the value of the internal unlock flag 133 set in 6202 as an emergency measure, and information on the unlock flag 132 of the identification code 131 of the corresponding ID 1 card. Is updated and transition is made (6203).

  As shown in FIG. 26, in the above-described operation of the reader control device (0) 13 of FIGS. 24 and 25, first, an ID1 card is placed over a reader under control, for example, R0 (S2601). Then, the internal unlocking flag 133 is updated according to the value of the internal entry / exit sequence table 170. In this example, a transition is made from “R0 = 1, R1 = 0” to “R0 = 0, R1 = 1” (S2602).

  Further, information on “which reader is held over which ID card” is sent to the overall control device 12 (S2603). In this example, “R0, ID1”. After the transmission, a new entry / exit sequence table for the held reader is received from the overall control device 12 (S2605). In this example, R0 = 0 and R1 = 1 in the case of holding R0. The received data is set and updated in the unlock flag 132 of the unlock flag database 130 (S2607). In this example, a transition is made from “R0 = 1, R1 = 0” to “R0 = 0, R1 = 1”.

  If an error occurs in the above transmission and reception operations (S2604-YES), (S2606-YES), since regular data cannot be received, the value of the internal unlock flag 133 in the unlock flag database 130 is used. The unlocking flag 132 is updated (S2608). In this example, a transition is made from “R0 = 1, R1 = 0” to “R0 = 0, R1 = 1”.

  In FIG. 24 and FIG. 25 described above, the sequence table between the reader control device and the overall control device is virtually not changed when the operation is started, and as a result, the unlock flag 132 and the internal unlock flag 133 are changed. Are consistent, so there is no practical problem.

  As described above, in this embodiment, the case where the host device and the overall control device are hierarchized is shown as an example. However, these hierarchies are not particular, and similar functions are divided by the function sharing of one or more units. It can be realized as a “high-order control device”.

  As described above, according to the entrance / exit management system of the present embodiment, some readers fail or a line abnormality occurs when anti-passback control and route determination control by a plurality of readers are realized. Even so, the system can be operated by partial degenerate operation without affecting the entire system.

It is a block diagram which shows the basic composition of the entrance / exit management system which is one embodiment of this invention. FIG. 5 is a layout diagram for explaining anti-passback control in an embodiment of the present invention. It is explanatory drawing explaining the transition of the anti-passback control using a card | curd in one embodiment of this invention. FIG. 3 is a configuration diagram showing an entrance / exit management system for realizing the anti-passback control in FIG. 2 in the embodiment of the present invention. In one embodiment of the present invention, it is an explanatory diagram showing a table structure (entrance / exit sequence table) of the overall control device. In one embodiment of the present invention, it is an explanatory diagram showing a table structure (unlock flag database) of the overall control device. In one embodiment of the present invention, it is an explanatory diagram showing the transition of the unlock flag state in the reader control device (reader control device 0). In one embodiment of this invention, it is explanatory drawing which shows the transition of the unlocking flag state in a reader control apparatus (reader control apparatus 1). In one embodiment of the present invention, it is an explanatory diagram showing the transition of the unlock flag state in the reader control device (reader control device 2). In one embodiment of this invention, it is explanatory drawing which shows the transition of the unlocking flag state in a reader control apparatus (reader control apparatus 3). In one embodiment of the present invention, it is an explanatory diagram showing a table structure (entrance / exit sequence table) in the overall control device in the grouping reduction operation when a failure occurs. In one embodiment of the present invention, it is an explanatory diagram showing a table structure (unlock flag database) in the overall control device in the grouping reduction operation when a failure occurs. In one embodiment of the present invention, it is an explanatory diagram showing a table structure (grouping table of the reader R0 reference) in the overall control device in the grouping reduction operation at the time of failure occurrence. In one embodiment of the present invention, it is an explanatory diagram showing a table structure (reader abnormality detection table) in the overall control device in the grouping reduction operation at the time of failure occurrence. In one embodiment of the present invention, it is an explanatory diagram showing the transition of the unlock flag state in the leader control device (leader control device 0) in the grouping reduction operation at the time of failure occurrence. In one embodiment of the present invention, it is an explanatory diagram showing the transition of the unlock flag state in the reader control device (reader control device 1) in the grouping reduction operation at the time of failure occurrence. In one embodiment of the present invention, it is an explanatory diagram showing the transition of the unlock flag state in the reader control device (reader control device 2) in the grouping reduction operation at the time of failure occurrence. In one embodiment of the present invention, it is an explanatory diagram showing the transition of the unlock flag state in the reader control device (reader control device 3) in the grouping reduction operation at the time of failure occurrence. In one embodiment of the present invention, it is a block diagram showing a case where a plurality of integrated control devices are connected. In one Embodiment of this invention, it is explanatory drawing which shows the table structure in an integrated control apparatus, and the preparation method of each table. In one embodiment of the present invention, it is explanatory drawing which shows the table structure of an integrated control apparatus and a reader control apparatus. In one embodiment of the present invention, it is a flow chart showing an initial delivery method of the entry / exit sequence table in the overall control device. In one embodiment of the present invention, it is explanatory drawing which shows the format of the internal entrance / exit sequence table in a reader control apparatus. In one embodiment of the present invention, it is an explanatory diagram showing an unlocking flag database having an internal unlocking flag. In one embodiment of the present invention, it is an explanatory diagram showing the transition of the table when the communication between the reader control device and the overall control device is abnormal. 5 is a flowchart showing the operation of a reader control device in an embodiment of the present invention.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 ... Host device, 2 ... Display apparatus, 30, 31 ... Overall control apparatus, 40-4n ... Reader control apparatus, 50-5n ... Reader,
DESCRIPTION OF SYMBOLS 10 ... Host device, 11 ... Display device, 12 ... Overall control device, 13-16 ... Reader control device, 120 ... Entrance / exit sequence table, 123 ... Unlock flag database, 127 ... Grouping table, 128 ... Reader abnormality detection table, 130, 140, 150, 160 ... Unlock flag database in reader control device, 131 ... Card identification code, 132 ... Unlock flag, 133 ... Internal unlock flag, 171 ... Reader number over card, 172 ... Unlock Lock flag,
20, 21 ... Integrated control device, 201, 211 ... Entrance / exit sequence table, 202 ... Grouping table.

Claims (13)

A reader control device including a plurality of readers for reading personal authentication, and controlling the plurality of readers;
An entrance / exit management system connected to the reader control device via a communication line and having a host control device that monitors and controls the reader control device,
The host controller is
Corresponding to each reader that has performed authentication, an entry / exit sequence table indicating a reader to which authentication can be permitted next, and
An entry / exit management system having an unlock flag database in which a reader to which authentication can be permitted next is set corresponding to each personal identification code subjected to personal authentication. A reader control device including a plurality of readers for reading personal authentication, and controlling the plurality of readers;
An entrance / exit management system connected to the reader control device via a communication line and having a host control device that monitors and controls the reader control device,
The reader control device
Corresponding to each personal identification code for which personal authentication has been performed, corresponding to the reader under the control of the reader control device, it has an unlock flag database in which readers to which authentication can be permitted are set. An entrance / exit management system characterized by In the entrance / exit management system of Claim 1 or 2,
The host controller is
Corresponding to each reader that reads the personal authentication, the sequence information corresponding to the plurality of readers that can be allowed to authenticate next is indexed from the entrance / exit sequence table according to the result of the personal authentication by each reader, and the plurality of sequence information is An entrance / exit management system characterized by having a combined grouping table. A reader control device including a plurality of readers for reading personal authentication, and controlling the plurality of readers;
An entrance / exit management system connected to the reader control device via a communication line and having a host control device that monitors and controls the reader control device,
The host controller is
It has an entry / exit sequence table, an unlocking flag database, and a grouping table corresponding to the relevant reader.
When authentication is performed in the first reader, when a failure of the second reader or the reader control device that is the next target that can be authenticated by the authentication of the first reader is detected, the first reader From the grouping table, read out the read contents of the sequence information corresponding to the second reader in which the failure has been detected or the plurality of sequence information of a plurality of third readers under the reader control device, and An entrance / exit management system, wherein the unlocking flag information corresponding to the personal identification code of the unlocking flag database is updated with the logical sum of the sequence information. In the entrance / exit management system of Claim 4,
The host control device performs anti-passback control or route determination on the second reader or the plurality of third readers in which the failure is detected based on the unlock flag information in the updated unlock flag database. An entrance / exit management system characterized by degenerate operation under control. In the entrance / exit management system of Claim 5,
During the degeneration operation, the host control device continues to monitor the second reader or the plurality of third readers, and after recovery from a failure, the second reader or the plurality of third readers. An entrance / exit management system characterized by resetting sequence information and returning to normal operation. In the entrance / exit management system of Claim 6,
A plurality of the host control devices,
The entrance / exit management system, wherein the sequence information is communicated with each other between the plurality of host controllers to update the grouping table. In the entrance / exit management system of Claim 7,
When a communication line failure is detected between the plurality of higher-level control devices, the sequence information of the reader under the other higher-level control device or the reader under the own higher-level control device group-entry with the reader control device or the reader control device is obtained. An entrance / exit management system, which is set to the default value and operates in a reduced manner. In the entrance / exit management system of Claim 8,
During the degenerate operation, the host controller continues to monitor the other host controller or the subordinate reader or the reader controller that has failed, and after failure recovery, the sequence of the reader or the reader controller An entrance / exit management system characterized by resetting information and returning to normal operation. A reader control device that includes a plurality of readers for reading personal authentication and controls the plurality of readers,
The reader control device
It has an entry / exit sequence table and an unlock flag database,
When the first reader authenticates, when the first reader authentication detects a failure of the second reader as a target that can be allowed to be authenticated next, the first control device possesses the first reader. Updating the unlocking flag information corresponding to the personal identification code of the unlocking flag database with the content of the sequence information corresponding to the second reader in which the failure is detected from the grouping table of the reader A reader control device. A host control device that includes a plurality of readers for reading personal authentication, is connected to a reader control device that controls the plurality of readers via a communication line, and monitors and controls the reader control device;
It has an entry / exit sequence table, an unlocking flag database, and a grouping table corresponding to the relevant reader.
When authentication is performed in the first reader, if a failure of the second reader or the reader control device that is allowed to be authenticated next is detected by authentication of the first reader, the first reader From the grouping table, read the read contents of the sequence information corresponding to the second reader in which the failure has been detected, or read a plurality of sequence information of a plurality of third readers under the reader control device, The host controller updates the unlock flag information corresponding to the personal identification code in the unlock flag database with the logical sum of the sequence information. A host control device including a plurality of readers for reading personal authentication, connected to a reader control device for controlling the plurality of readers via a communication line, and monitoring and controlling the reader control device;
Connected to multiple reader controllers,
Has an entry / exit sequence table,
Of the authentication information set in the entry / exit sequence table, the sequence information related to the reader connected to each reader control device is set in each of the plurality of reader control devices. apparatus. A reader control device that includes a plurality of readers for reading personal authentication and controls the plurality of readers,
Connected to the host controller,
An internal entry / exit sequence table corresponding to a plurality of readers connected to the reader control device, and an unlock flag database;
The internal entry / exit sequence table is received from the host control device in advance, and when a failure is detected between the host control device and the reader control device, the unlocking is performed using the sequence information of the internal entrance / exit sequence table. A reader control device that updates unlocking flag information corresponding to a personal identification code in a flag database.

Images