JP2005126992A - Business system with authentication function - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a business system with an authentication function of high security and low cost, capable of controlling the use (locking and unlocking) of a storage part along with the use of a terminal only with one-time authentication. <P>SOLUTION: This business system 2 with the authentication function is provided with lock mechanisms K1, K2, K3, K4 for locking and unlocking storage parts (a plurality of drawers S1, S2, S3, S4 of a desk 4 for business); a sample authentication information registering means 12 for previously registering various kinds of sample authentication information for use in authenticating a terminal user; an authentication information acquiring means 14 for acquiring various kinds of authentication information for specifying the user when the user uses the terminal; an authentication means 16 for comparing the authentication information acquired by the authentication information acquiring means, with the sample authentication information previously registered in the sample authentication information registering means, to authenticate whether the user can use the terminal; and a control means 18 for switchingly controlling locking and unlocking of the lock mechanisms based on the authentication result of the authentication means. <P>COPYRIGHT: (C)2005,JPO&NCIPI

Description

  The present invention relates to a business system with an authentication function having a terminal (such as a computer or an IP (Internet Protocol) telephone) associated with a storage unit (for example, a business desk), and in particular, together with the use of the terminal with only one authentication. The present invention relates to a business system with an authentication function capable of controlling use (locking and unlocking) of a storage unit.

  2. Description of the Related Art Conventionally, various systems are known in which a storage unit (for example, a business desk) and a terminal are associated with each other and combined. For example, Patent Document 1 discloses a system in which a terminal (computer) is incorporated as a component of a business desk. In such a system, a person using the computer has access to the right to use the computer and / or various networks. It is designed to authenticate whether or not it has the right to do so.

By the way, a plurality of drawers provided on a business desk may be provided with a lock part for opening and closing each drawer in order to ensure security for the materials stored therein. A specific drawer can be locked and unlocked by inserting a key into the lock hole.
However, in the system of Patent Document 1, only personal authentication of a person using a terminal (computer) is performed, and the result of personal authentication is not considered when opening and closing each drawer. Occurs.

Even when personal authentication is performed by the terminal, it is inconvenient that the intended drawer cannot be opened unless an authentication unit for opening each drawer has a key corresponding to the lock portion of each drawer. For example, if you forget to bring your key or lose it, you cannot open the intended drawer.
In addition, since the key is easily imitated or stolen, even if the access right is not recognized by personal authentication by the terminal, each drawer may be opened by the forged key, and it is difficult to ensure high security.
Furthermore, when each drawer of one business desk is assigned to a plurality of people and used, keys must be prepared separately for the number of people, resulting in troublesome management of a plurality of keys. In addition to this, the cost required for system construction increases by the number of keys.
JP 2003-241850 A

  The present invention has been made in order to solve such a problem, and its purpose is to provide high security capable of controlling the use (locking and unlocking) of the storage unit as well as the use of the terminal with only one authentication. The purpose is to provide a low-cost business system with an authentication function.

In order to achieve such an object, the present invention provides a business system 2 with an authentication function that includes a terminal having an authentication function and a lockable storage unit, and includes a storage unit (a plurality of drawers S1 of the business desk 4). , S2, S3, S4), and lock mechanism K1, K2, K3, K4 for locking and unlocking, and sample authentication information registering means 12 for previously registering various sample authentication information used when authenticating the user of the terminal, When the user uses the terminal, the authentication information acquisition means 14 for acquiring various kinds of authentication information that can identify the user, the authentication information acquired by the authentication information acquisition means, and the sample authentication information registration means The authentication means 16 for comparing whether or not the user can use the terminal by comparing with the sample authentication information registered in advance, and switching between locking and unlocking of the lock mechanism based on the authentication result of the authentication means Control means 18 for controlling, and this According to Una configuration, it is possible to control the use of the housing portion with the use of the terminal by a single authentication.
Further, the control means collates the use condition setting table 20 in which various conditions for using the accommodating portion are set with the authentication result of the authenticating means and the use condition setting table, so that the use of the user for the accommodating portion is confirmed. And a collation determination unit 22 for determining whether the lock is permitted or not, and switches and controls locking and unlocking of the lock mechanism based on the determination result of the collation determination unit.
Further, it is assumed that the housing portion is provided with a plurality of drawers. In this case, each drawer is provided with a lock mechanism. And based on the determination result of a collation determination part, a control means carries out switching control of locking and unlocking of the lock mechanism of a specific drawer from a plurality of drawers.
In the above invention, the sample authentication information includes at least a voice print, a face pattern, a palm print, a fingerprint, an iris, a vein, a writing exercise pad, an identification number, and a user keying the terminal. Various information regarding the timing and pressure of the keys and buttons are included. In the use condition setting table, at least whether or not the user can use the storage unit, the start and end of use of the storage unit, and the allowable use period are set.

  According to the present invention, it is possible to realize a high-security and low-cost business system with an authentication function that can control the use (locking and unlocking) of the accommodation unit as well as the use of the terminal with only one authentication.

Hereinafter, a business system with an authentication function according to an embodiment of the present invention will be described with reference to the accompanying drawings.
As shown in FIG. 1 (a), the business system 2 with an authentication function according to the present embodiment uses a terminal (for example, a computer or an IP phone) by one-time (one-time) authentication (person authentication). For example, it is constructed so as to be able to control the use of a storage unit that stores materials and articles in a releasable manner. Note that, as the accommodating portion, for example, a business desk having a plurality of drawers, a bookshelf, various cases, and the like are applicable, but here, a plurality of drawers (in this embodiment, for example, four drawers S1, S2, S3 , S4) will be described as an example. As a terminal, a desktop computer having a terminal body 6, a keyboard 8, and a monitor 10 is assumed, and the computer is set on the business desk 4.

  Such a business system 2 with an authentication function is provided for each drawer S1, S2, S3, S4 in order to lock and unlock a plurality of drawers S1, S2, S3, S4 of the business desk 4 as a storage section. A plurality of lock mechanisms K1, K2, K3, K4, sample authentication information registration means 12 for registering in advance various sample authentication information used for authenticating a user of the terminal (computer), and the user In use, the authentication information acquisition means 14 for acquiring various kinds of authentication information capable of specifying the user, the authentication information acquired by the authentication information acquisition means 14 and the sample authentication information registration means 12 are registered in advance. And authenticating means 16 for authenticating whether or not the user can use the terminal, and based on the authentication result of the authenticating means 16, the lock mechanisms K1, K2, K3, K4 And control means 18 for switching and controlling locking and unlocking.

In this case, in the business system 2 with an authentication function, the sample authentication information registration unit 12 and the authentication unit 16 are constructed in the terminal body 6 and the control unit 18 is constructed in the business desk 4.
Each of the locking mechanisms K1, K2, K3, K4 can be controlled by the control means 18 so as to switch and control the locking and unlocking of the drawers S1, S2, S3, S4 of the business desk 4. In this case, the drawers S1, S2, S3, and S4 can be locked and unlocked by manual operation (for example, key operation using a key not shown).

  The authentication information for identifying the user when the user uses the terminal includes, for example, the telephone number or email address of a mobile phone carried by the user, or an electronic seal stamp or driver's license. A security code, ID (Identification) card, various keys, etc. can be assumed. However, since it is necessary to always bring these terminals when using the terminal, and the contents may be forgotten, management is troublesome. Furthermore, since these are easily imitated or stolen, it is difficult to ensure high security.

Therefore, in the business system 2 with an authentication function according to the present embodiment, personal authentication is performed based on specific physical characteristics of each person by biometrics (biometric authentication) as an example. In biometrics, as various kinds of authentication information that can specify a user when the user uses the terminal, for example, a voice print, a face type, a palm print, a fingerprint, an iris that can specify the user. Various kinds of authentication information relating to veins, writing motion keys, identification numbers, and the timing and pressure of keys and buttons when the user presses the terminal (keyboard 8) can be used.
In actual authentication, when using the terminal, various types of authentication information (for example, voice print, face type, palm print, etc.) representing the physical characteristics of the user are acquired, and the acquired authentication information is registered in advance. By comparing with the sample authentication information, the presence or absence of the user's access right when using the terminal is authenticated.

  In order to realize such biometrics, in the business system 2 with an authentication function of the present embodiment, various kinds of authentication information as described above are registered in advance in the sample authentication information registration unit 12 as sample authentication information. In this case, in the sample authentication information registration means 12, for example, as shown in FIG. 2A, sample authentication information (for example, voice print, face type, palm print, etc.) is registered for each user. Here, as an example of a user, a company president (△ × Taro President), Senior Managing Director (□ × Jiro Senior Managing Director) and personnel department member (× □ Saburo General Manager, ○ △ Hanako Division Manager, ×× X. Junichi Chief) etc., and when these members use the terminal, personal authentication is performed by biometrics.

  In the personal authentication by biometrics, various types of authentication information representing the physical characteristics of the user who uses the terminal are acquired by the authentication information acquisition means 14. In this case, as the authentication information acquisition means 14, for example, a sound collecting microphone 14a for acquiring a voice print, an image pickup device (CCD (Charge Coupled Device) camera) 14b for acquiring a face shape or an iris, a palm print or a fingerprint is used. A commercially available image pressure reading device (not shown) for acquisition, a writing pressure sensor 14c for acquiring a writing pen (writing pressure, writing speed, etc.) when writing a personal signature with a predetermined pen (not shown), etc. Things can be used. Further, the keyboard 8 constituting the terminal can be used as the authentication information acquisition means 14, and the stamping timing and stamping pressure at the time of key input can be acquired. Note that such authentication information acquisition means 14 is connected to the terminal body 6 of the terminal (computer).

Then, the authentication information (for example, voice print, face type, palm print, etc.) acquired by the authentication information acquisition means 14 and sample authentication information (FIG. 2 (a)) registered in advance in the sample authentication information registration means 12 Are compared by the authentication means 16 to authenticate whether or not the user can use the terminal. When such a terminal is linked to another network, it may be authenticated whether the user has an access right to the other network when the terminal is used.
In this case, when the acquired authentication information and the pre-registered sample authentication information coincide with each other and it is authenticated that the user can use the terminal, the lock mechanism K1, K2, K3, Unlocking control of K4 is performed and each drawer S1, S2, S3, S4 can be opened freely. That is, it is possible to control the use (locking and unlocking) of the drawers S1, S2, S3, and S4 of the work desk (accommodating unit) 4 together with the use of the terminal by one authentication.

  Assuming a case where each drawer S1, S2, S3, S4 of one business desk 4 is assigned to a plurality of users, the use permission for each drawer S1, S2, S3, S4 is assumed. Need to manage. Therefore, in the present embodiment, the control means 18 of the business system 2 with an authentication function is used in which various conditions for using the drawers S1, S2, S3, S4 of the work desk (accommodating section) 4 are set. A collation determination unit 22 that determines whether or not each of the drawers S1, S2, S3, and S4 is allowed to use by collating the condition setting table 20 with the authentication result of the authentication means 16 and the use condition setting table 20. Is provided. And based on the determination result of the collation determination part 22, switching and unlocking of each lock mechanism K1, K2, K3, K4 are controlled. Specifically, based on the determination result of the collation determination unit 22, the control means 18 locks the locking mechanism K1 of a specific drawer (for example, drawer S1) from among the plurality of drawers S1, S2, S3, and S4. Controls switching of unlocking. As a result, it is possible to manage the use permission for each drawer S1, S2, S3, S4 with high security for each user.

As shown in FIG. 2B, the use condition setting table 20 includes, for example, whether or not the user can use the drawers S1, S2, S3, and S4 of the work desk 4, and each drawer S1 of the work desk 4. , S2, S3, S4 can be arbitrarily set to the start and end of use, the allowable use period, and the like.
As for the permission of use of the user for each drawer S1, S2, S3, S4, for example, the drawer S1 is permitted to be used by all users who have access rights, and the drawer S2 is less than the section manager. It can be set so that the use of the person in charge is denied.
For the start and end of use of each drawer S1, S2, S3, S4, for example, if the director of X □ Saburo retires waiting for December 30, 2003, the designated withdrawal S1, Can be set to allow the use of S2. In addition, XX Junichi is scheduled to be transferred to the Human Resources Department as of November 1, 2003. However, if he / she conducts business before that, all the withdrawals S1, S2, Although the use of S3 and S4 is rejected, it can be set to permit the use of the predetermined drawer S1 after the scheduled transfer date (H15.11.01).
The allowable usage period can be set, for example, so that the chief of the xx is allowed to use predetermined drawers S1 and S3 only during a predetermined time period (PM 1:00 to 5:00) during daily work.
In addition, this is an example of use conditions, and it cannot be overemphasized that arbitrary use conditions can be set according to a use purpose or use environment.

  Next, operation | movement of the business system 2 with an authentication function of this Embodiment is demonstrated according to the flowchart of FIG. Here, as an example, a case is assumed in which the manager △ Hanako uses the drawers S1 and S4 of the business desk 4.

  First, when Hanako Hanako performs an operation for starting up the terminal (computer) (for example, turning on the power) (process P1), for example, a voice guidance from the terminal main body 6 or a guidance screen on the monitor 10 is used. Authentication is performed. In this case, for example, a voiceprint of the user (Director Hanako) can be acquired by voice guidance “Please input your name and affiliation name toward the sound collection microphone 14”. In addition, by displaying an image on the monitor 10 such as “Please input your signature to the pressure sensor 14c with a predetermined pen” or “Please input the identification number or name from the keyboard 8 of the terminal”. The user's writing motion habit, stamping timing, etc. can be acquired. At the same time, the image sensor 14b or a pattern image reading device (not shown) may be guided to acquire the face type, iris, palm pattern, or fingerprint of the manager.

  Thereafter, the authentication information (for example, voice print, face type, palm print, etc.) acquired by each of the authentication information acquisition means 14 as described above, and the sample authentication information previously registered in the sample authentication information registration means 12 (FIG. )) Is compared by the authentication means 16 (process P2), and it is authenticated whether or not the user has the right to use the terminal (process P3). Processes P2 and P3 here are performed until authentication is confirmed and the user is authenticated as being able to use the terminal, and when it is authenticated that there is no use right, the use of the terminal is rejected ( End).

Then, when it is authenticated by the processes P2 and P3 that the user has the right to use the terminal, the terminal can be used (process P4), and the authentication result of the authentication means 16 is input / output unit 24 in synchronization therewith. To the collation determination unit 22 via the input / output unit 26 of the business desk 4.
At this time, the collation determination unit 22 collates the authentication result of the authentication unit 16 with the use condition setting table 20, and determines whether the user can use each of the drawers S1, S2, S3, and S4. According to the use condition setting table 20, since the drawers that can be used by Hanako are the S1 and S4, the collation determination unit 22 outputs permission to use the drawers S1 and S4 to the control means 18 as a determination result. (Process P5). If the user has the right to use the terminal but is not assigned the usable drawers S1, S2, S3, and S4, the collation determining unit 22 determines that the collation is not possible and determines each drawer S1, Use for S2, S3, S4 is denied (end).

Subsequently, the control means 18 performs unlocking control of the lock mechanisms K1, K4 of the specific drawers S1, S4 from among the plurality of drawers S1, S2, S3, S4 (process P6). As a result, the manager Hanako Han can open the drawers S1 and S4 to take out or store desired materials and articles.
Thereafter, when the section manager Hanako Hanada makes a terminal termination request (process P7), it is confirmed whether or not there is a drawer lock request (process P8). This is because, when the lock processing of the drawer is performed at the same time as the termination of the terminal, for example, when there is a material on the table that has been forgotten to be pulled out of the drawers S1 and S4, This is because the process of P6 has to be repeated and cannot be endured. Therefore, as long as the drawer lock request is not issued even if the terminal termination request is made, if the drawers S1 and S4 are kept open, for example, the forgotten materials can be easily pulled out in a short time. Can be accommodated.

  When it is confirmed that there is a drawer lock request, the control means 18 controls the lock mechanisms K1 and K4 in the unlocked state to lock the drawers S1 and S4 (process P9). At this time, terminal termination processing is completed (process P10). The confirmation process of the drawer lock request is performed based on an internal circuit (not shown) of the control means 18 based on a drawer lock request signal sent from the input / output unit 24 of the terminal body 6 via the input / output unit 26 of the work desk 4. No), or may be performed in an internal circuit (not shown) of the terminal body 6.

  As described above, according to the present embodiment, it is possible to switch and control the use (locking and unlocking) of the accommodation unit (the plurality of drawers S1, S2, S3, S4 of the business desk 4) together with the use of the terminal by one-time user authentication. Therefore, it is possible to realize a business system 2 with an authentication function that is higher in security and lower in cost than in the past. That is, in the past, personal authentication was performed when the terminal was used, and further, a lock and unlock key was separately required for use of the storage unit. In particular, in the personal authentication using biometrics, an authentication tool such as a key is required. The personal authentication can be performed on the basis of the unique physical characteristics of each person without requiring a separate password. For this reason, for example, if you forget to bring your key or lose it, you may not be able to open the desired drawer, the problem of the key pattern or security deterioration due to theft, or multiple withdrawals from one business desk. When using it by assigning it to people, it is necessary to prepare separate keys for the number of people. As a result, not only is management of multiple keys cumbersome, but the number of keys required for system construction. It is possible to solve problems such as an increase in cost.

  In addition, even if each drawer S1, S2, S3, S4 of one business desk 4 is assigned to multiple users, it is used for each drawer S1, S2, S3, S4 based on identity authentication. Therefore, it is possible to ensure high security.

In the embodiment described above, the use condition setting table 20 is provided in the business desk 4, and the sample authentication information registration means 12 is provided in the terminal body 6. However, the present invention is not limited to this. As shown in 1 (c), a business server 28 for managing the business system 2 with an authentication function may be added, and the sample authentication information registration unit 12 and the use condition setting table 20 may be constructed here. In this case, the business server 28 may be provided with an input / output unit 30 for transmitting and receiving various types of information. According to such a configuration, various types of highly confidential information can be centrally managed, so that it is possible to realize the business system 2 with an authentication function that ensures higher security.
Note that the modification of FIG. 1C is an example, and does not limit the present invention. The terminal can be used by a single authentication for all functions of the business system 2 with an authentication function including the business server 28. At the same time, it is only necessary to control the use of the housing. Therefore, for example, the arrangement of the sample authentication information registration unit 12 and the use condition setting table 20 is not limited to FIG.

  Further, the authentication information acquired when performing personal authentication may be controlled to acquire different authentication information at a predetermined timing. For example, if the authentication information to be acquired is irregularly changed, such as acquiring a fingerprint or a voiceprint as authentication information in a certain time zone, and acquiring a writing motion jar or iris in another time zone, the external information Even if a person tries to gain unauthorized access, it is impossible to grasp what kind of authentication is currently being performed, so that higher security can be achieved.

  The present invention can be used regardless of the premise or the premise as long as it is a system that considers the result of personal authentication when locking and unlocking the accommodating portion. For example, a system in which an IP telephone is set on a table having a storage unit on the premises, and a system in which a warehouse having an opening / closing door is controlled in an isolated control room is assumed outside the premises.

(a) is a diagram schematically showing the overall configuration of a business system with authentication function according to an embodiment of the present invention, (b) is a block diagram showing the internal configuration of the business system with authentication function, and (c) ) Is a block diagram showing an internal configuration of a business system with an authentication function according to a modification of the present invention. (a) is a figure which shows the example of registration of the sample authentication information previously registered by the sample authentication information registration means, (b) is a figure which shows the example of a setting of various conditions set to the use condition setting table. The figure which shows the operation | movement flow of the business system with an authentication function of this Embodiment.

Explanation of symbols

2 Business System with Authentication Function 4 Business Desk 12 Sample Authentication Information Registration Unit 14 Authentication Information Acquisition Unit 16 Authentication Unit 18 Control Unit 20 Use Condition Setting Table 22 Collation Determination Unit

Claims (5)

A business system with an authentication function comprising a terminal having an authentication function and a lockable container,
A locking mechanism for locking and unlocking the storage part;
Sample authentication information registration means for pre-registering various sample authentication information used when authenticating the user of the terminal;
When the user uses the terminal, authentication information acquisition means for acquiring various types of authentication information that can identify the user;
Authentication means for comparing whether the user can use the terminal by comparing the authentication information acquired by the authentication information acquisition means with the sample authentication information registered in advance in the sample authentication information registration means When,
And a control unit that switches and controls locking and unlocking of the lock mechanism based on an authentication result of the authentication unit. The control means further includes
A use condition setting table in which various conditions for using the housing portion are set;
A verification determination unit that determines whether or not the user can use the storage unit by comparing the authentication result of the authentication unit and the use condition setting table,
The business system with an authentication function according to claim 1, wherein switching control of locking and unlocking of the lock mechanism is performed based on a determination result of the verification determination unit.   The housing portion is provided with a plurality of drawers, and each drawer is provided with the lock mechanism. Based on the determination result of the collation determination portion, the control means 3. The business system with an authentication function according to claim 2, wherein the lock control and unlocking of a specific drawer lock mechanism are controlled to be switched from the drawer.   The sample authentication information includes at least a voice print, a face pattern, a palm print, a fingerprint, an iris, a vein, a writing exercise pad, an identification number, and a key used when the user presses the terminal. The business system with an authentication function according to any one of claims 1 to 3, characterized in that it includes various types of information related to the timing and pressure of stamping and buttons. 5. The use condition setting table includes at least permission / non-permission of use of the user for the storage unit, start and end of use of the storage unit, and use allowable period. The business system with an authentication function according to any one of the above.

Images