JP2006227756A - Cooperation controller - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To separate a facility-system network and an information-system network to manage them, and to cooperate the networks in time of abnormal situation occurrence. <P>SOLUTION: When a user is present inside a high security level area, this cooperation controller 30 performs control to transmit a first opening instruction instructing to open a door separating the high security level area and a low security level area to the facility-system network 10 according to detection of an abnormal situation, and performs control to transmit a notification instruction instructing to notify a client PC 22 accessing the information-system network 20 that the abnormal situation occurs. <P>COPYRIGHT: (C)2006,JPO&NCIPI

Description

  The present invention relates to entrance / exit management between a low security level area and an advanced security level area, and information management in an advanced security level area, and more specifically, an equipment network responsible for entrance / exit management and an information system responsible for information management The present invention relates to a cooperation control device for cooperation with a network.

  In companies that frequently handle confidential information or specific departments within the company, it is possible to prevent leakage of confidential information in advance by applying an entrance management system that manages the entrance of workers who handle confidential information. ing.

  Generally, an entrance management system is used for entrance management using information that uniquely identifies a user, such as a user ID incorporated in an IC (Integrated Circuit) card given to the user, or biometric information (fingerprint, iris, voiceprint, etc.). The personal computer is used for personal authentication, and when it is verified that the user is a registered legitimate user, the locked entrance door is unlocked to enter the advanced security level area that handles confidential information. Management such as permitting entry.

  By the way, the above-described confidential information is managed by a confidential information management system constructed on a network different from the entrance management system, and the confidential information is received from the information terminal device installed in the area where the entrance management is performed. It can be used in response to access to the management host computer. When accessing the host computer for managing confidential information, an authentication process similar to the personal authentication in the above-described entrance management system is required.

  As described above, since the entrance management system and the confidential information management system are constructed on completely different networks, it is very difficult for the user to use the authentication process twice before using the confidential information. Complicated operations were required.

  Therefore, cooperation between such an entrance management system and a confidential information management system is required, and authentication processing at the time of entering a region that handles confidential information and authentication at the start of use of the information terminal device after entering the room A method for associating the processing with the processing has been devised (see, for example, Patent Document 1 and Patent Document 2).

In addition, to deal with the problem caused by the passage of time from entering the room to logging on to the information terminal device, which has not been considered in Patent Document 1 and Patent Document 2, dealing with forgetting to log off the information terminal device when leaving the room A technique for realizing it has also been devised (for example, see Patent Document 3).
JP 2000-259878 A JP 2002-41469 A JP 2004-302875 A

  As described above, the techniques disclosed in Patent Documents 1 and 2 managed only the entrance processing into the high security level area, but the techniques disclosed in Patent Document 3 have a high security level. Management when leaving the area is also necessary to prevent leakage of confidential information.

  In a system in which entry / exit is managed as in such a high security level area, once entry is made, the entry cannot be made unless a predetermined authentication procedure is performed. Therefore, even if a person suffers a danger due to a disaster or the like, it is very difficult to leave the room quickly only by the will of the user.

  Therefore, the entrance / exit management system has detected an abnormal situation so that when an abnormal situation such as a disaster or a crime occurs, it can be quickly exited from an isolated area such as an advanced security level area. Accordingly, it is desirable to have a panic open function in which the electric lock is automatically unlocked.

  However, the conventional panic open function functions only in the entrance / exit management system such as unlocking the electric lock when an abnormal situation is detected as described above. There was a problem in that it was not possible to prevent unauthorized access to the confidential information management system by a third party who took advantage of the confusion of the abnormal situation because it was not coordinated.

  Therefore, the present invention has been devised to solve the above-described problems, and includes an equipment network that is a network of an entrance / exit management system and an information network that is a network of a confidential information management system. It is an object of the present invention to provide a linkage control device that can be individually separated and managed, and can appropriately link networks even when an abnormal situation such as a disaster occurs.

  In order to solve the above-described problem, the present invention enters a room from a low security level area to a high security level area according to an authentication processing result based on first authenticated information that uniquely identifies a user, An equipment network that manages exit from the high security level area to the low security level area, and an authentication processing result based on the second authentication information that is constructed in the high security level area and uniquely identifies the user Accordingly, when the user exists in the high security level area, the abnormal control situation occurs when the user is in cooperation with the information network that restricts access to the information network of the user. The high security level area and the low security level area according to the detection. Control to send a first opening command for instructing to open the door separating the equipment to the equipment network, and an abnormal situation occurs for the information terminal device accessing the information network. It is characterized by comprising control means for controlling to transmit a notification command instructing the user to be notified.

  When the user exists in the high security level area, the cooperative control apparatus of the present invention opens the door that separates the low security level area from the high security level area in response to the detection of an abnormal situation. By controlling the information system network and controlling the information system network so as to notify the user that an abnormal situation has occurred for the information terminal device connected to the information system network, While avoiding the danger of the user, it is also possible to avoid unauthorized access to the information system network by a third party or other legitimate users who have taken advantage of confusion during an abnormal situation, and prevent leakage of confidential information.

  Hereinafter, embodiments of the present invention will be described with reference to the drawings. The information leakage prevention system shown as an embodiment of the present invention will be described with reference to FIG. As shown in FIG. 1, the information leakage prevention system is configured by connecting an equipment network 10 and an information network 20 to each other by a cooperation control device 30.

  The facility network 10 manages intrusions from a low security level area (low security level area) to a high security level area (high security level area) that handles confidential information. In the equipment network 10, authentication processing is performed for all users who wish to enter the advanced security level area and for all users who wish to exit the advanced security level area. Authenticate only to allow entry into and exit from the area.

  The information system network 20 is a network constructed in a high security level area managed by the facility network 10. For example, the information network 20 manages confidential information, and only an authenticated user is allowed to log on from an information terminal device connected to the network and is allowed to access the confidential information.

  The facility network 10 and the information network 20 are separated from each other and can be managed independently. The linkage control device 30 prevents the leakage of confidential information managed at a high security level by interoperating between the equipment network 10 and the information network 20, while maintaining a high security level area. To help users work smoothly.

  Next, the configuration of the equipment network 10, the information network 20, and the cooperation control device 30 that configure the information leakage prevention system will be described using FIG. 1.

(Configuration of equipment network 10)
First, the configuration of the equipment network 10 will be described. The equipment network 10 includes a plurality of control units 12 connected to the hubs 11 and a plurality of gateway units 14 connected to the control units 12 via the hubs 13.

  Each control unit 12 is a minimum unit for controlling the entrance / exit management of the high security level area and the low security level area executed in the facility network 10. Each control unit 12 is centrally controlled by a management PC 18 that is a general-purpose PC (Personal Computer) also connected to the hub 11. An administrator who manages the equipment network 10 detects and manages an entry / exit processing error by each control unit 12 from the management PC 18.

  As described above, in the facility network 10, the entrance / exit management process is distributed by the entrance / exit management by the plurality of control units 12, thereby greatly improving the operating rate of the entire facility network 10 and the facility network 10. Even in a small scale, it can be easily applied by appropriately changing the combination of the control units 12 according to the installation environment. In addition, a dedicated management device is not required.

  An entrance card reader 15 is provided below each gateway unit 14 and is provided outside the high security level area, and reads information stored in the semiconductor memory of the IC card owned by the user when entering the high security level area. A plurality of exit card readers 16 that are provided in the advanced security level area and read the above-described information of the IC card when leaving the advanced security level area are connected.

  The IC card owned by the user is, for example, a non-contact IC card or the like, and by using radio waves / electromagnetic waves with the entrance card reader 15 or the exit card reader 16, information can be read out without contact. Can write.

  The gateway unit 14 is provided at an entrance when entering the high security level area from the low security level area or exiting from the high security level area to the low security level area. The door) is connected to an electric lock 17 that can be locked and unlocked by an electric action. The electric lock 17 normally locks the door.

  The door (door) that separates the low security level region and the high security level region may be, for example, a door (door) that separates rooms from each other, or an elevator door (door). Good.

  The gateway unit 14 obtains a card ID, which is authentication information for uniquely identifying the IC card, from the information of the IC card read by the entrance card reader 15 or the exit card reader 16, and this card ID Performs authentication processing to determine whether or not the card ID is registered in advance. The gateway unit 14 performs control so that the locked electric lock 17 is unlocked for a predetermined time when the card ID is authenticated as a valid pre-registered card ID. On the other hand, if the card ID is not a valid card ID registered in advance, the gateway unit 14 leaves the locked electric lock 17 as it is and controls a notification means such as an alarm device (not shown) to perform an authentication process. Notify the user that the result is an error.

  In order to prevent the processing load in the entrance / exit processing from increasing, the gateway unit 14 is used for entrance / exit processing including, for example, the entrance card reader 15, exit card reader 16, and electric lock 17. For example, only 4 units are required at the maximum.

  Further, the gateway unit 14 is provided with an alarm device 19. This alarm device 19 is provided at various locations in the building where the facility network 10 is laid, and sensors that automatically detect abnormal conditions, and by people in the building that have witnessed and detected abnormal conditions. It is connected to an operating notification device or the like, and issues an alarm to a user in the high security level area in response to the detection of an abnormal situation such as a fire, an earthquake, or an intruder.

  Further, the alarm device 19 notifies the cooperation control device 30 to that effect via the gateway unit 14 and the control unit 12 in response to the detection of the abnormal situation, and the facility network 10 and the information network Tie up with 20. The cooperation control device 30 notified of the abnormal situation controls the gateway unit 14 to unlock the locked electric lock 17. Further, the cooperation control device 30 notified of the abnormal state controls the client PC 22 to notify the user of the abnormal state. Then, the cooperation control device 30 controls the client PC 22 to forcibly shut it down.

  In addition, the control unit 12 is notified of the abnormal situation, and the control unit 12 controls the gateway unit 14 to unlock the locked electric lock 17 in place of the cooperation control device 30. Also good.

  The facility network 10 communicates with the cooperation control device 30 by the control unit 12 via the hub 11, but since the amount of information to be communicated is not so large, in communication with the cooperation control device 30, for example, It can be covered by relatively low speed communication such as 10BASE-T which is a communication standard of Ethernet (registered trademark).

(Configuration of information network 20)
Next, the configuration of the information network 20 will be described. The information network 20 is operated by a switching hub 21 that controls communication with the cooperation control device 30 in the information network 20 in which traffic increases, and a user who enters the high security level area connected to the switching hub 21. And a plurality of PCs (Personal Computers) 22 and ACL (Access Control List) servers 24.

  Each client PC 22 is connected to a card reader 23 that reads information stored in a semiconductor memory of an IC card owned by a user who has entered the high security level area. The card is stored in the IC card from the card reader 23 when the user activates the client PC 22 and, for example, browses, uses, or uses confidential information whose access is managed in the information network 20. It is required to read the ID and perform authentication processing.

  The ACL server 24 is a server that registers an account of a registered user who can access the information network 20 and manages the user who accesses the information network 20. The account registered in the ACL server 24 is normally invalidated, and validated in response to notification from the cooperation control device 30 that the account is valid. That is, the ACL server 24 manages the user so as to permit access to the information network 20 in response to the notification from the cooperation control device 30. Therefore, for example, in a state where the ACL server 24 has not received a message to validate the account, it is not possible to log on to the information network 20 from the client PC 22.

  The ACL server 24 also functions as a log server, and records a log when the user whose account is validated accesses the information network 20 through the client PC 22. This log server does not necessarily have to be configured the same as the ACL server 24, and the cooperation control device 30 may have the function of the log server.

  The ACL server 24 is connected to a card reader 25 that reads information stored in a semiconductor memory in an administrator IC card owned by only the network administrator of the information network 20. For example, the network administrator refers to the account information of the user stored in the ACL server 24 for maintenance or security management, or the log recorded in the log server. Is required to read and authenticate the card ID stored in the IC card owned by.

  The information system network 20 communicates with the cooperation control device 30 via the switching hub 21, but the amount of information to be communicated increases and traffic increases compared to the facility system network 10. For example, it is desirable to perform high-speed communication such as 100BASE-TX, which is a communication standard of Ethernet (registered trademark).

  The cooperation control device 30 is a device provided for the purpose of linking the equipment network 10 and the information network 20. The cooperation between the equipment network 10 and the information system network 20 executed by the cooperation control device 30 can be managed as a system in which the existing network called the equipment network 10 and the information system network 20 is closed, This is a collaboration that strengthens security by exchanging information with each other.

  The cooperation control device 30 cooperates so as to permit access to the information system network 20 in accordance with the authentication processing result by the equipment network 10. Specifically, the cooperation control device 30 includes a storage unit (not shown), and in order to link the facility network 10 and the information network 20 stored in the storage unit, an IC card owned by the user A card ID that uniquely identifies the IC card stored in the semiconductor memory, and a device ID that uniquely identifies all the entry card readers 15 and the exit card readers 16 that are configured in the equipment network 10 The equipment network 10 and the information network 20 are linked using a table in which the reader ID and the user ID, which is authentication information for uniquely identifying the user in the information network 20, are associated with each other. ing.

  The tables stored in the storage unit included in the cooperation control device 30 are, for example, two tables as illustrated in FIGS.

  The table shown in FIG. 2A is a gateway unit 14 that manages the entry card reader 15 and the exit card reader 16 for each reader ID that is the device ID of the entry card reader 15 and the exit card reader 16. This is a table in which card IDs given to IC cards that are allowed to enter the high security level area that is the jurisdiction of the are associated with each other. That is, the table shown in FIG. 2A includes an entrance card reader 15 and an exit card reader 16 attached to the entrance and exit of the high security level area and the low security level area, and an IC that can enter and exit the room. A table that associates cards.

  Since one card ID is registered in a plurality of entry card readers 15 and a plurality of exit card readers 16, one card ID is associated with a plurality of reader IDs as shown in FIG. Will be.

  The table shown in FIG. 2B is a card ID that is authentication information stored in a semiconductor memory of an IC card used to uniquely identify a user in the equipment network 10, and in the information network 20. It is the table which matched user ID which is the information to be authenticated which specifies a user uniquely.

  When the cooperation control device 30 receives the reader ID and the card ID as the room entry information via the control unit 12 of the equipment network 10, the reader ID and the card ID correspond from the table shown in FIG. Judge whether or not. Then, in the case where it corresponds, the user ID corresponding to the card ID is acquired using the table shown in FIG. 2B, and the information network 20 is made to validate the account corresponding to this user ID. Notice.

  When the correspondence between the reader ID and the card ID cannot be taken, the cooperation control device 30 does not cooperate with the equipment network 10 and the information network 20, so the user has entered the advanced security level area. However, the access authority to the information network 20 is not given.

  Further, the cooperation control device 30 may be provided with a log server function for recording an access log from the client PC 22 in the information network 20 given to the ACL server 24 described above.

  Next, using the timing chart shown in FIG. 3, in the information leakage prevention system having such a configuration, an emergency operation when an abnormal situation is detected while the user stays in the high security level area. Will be explained. This emergency operation is in the state after step S16 in the timing chart of FIG. 4 described later, that is, in the state where the user has entered the advanced security area and is logged on to the information network 20 via the client PC 22. Executed.

  First, in step S51, the alarm device 19 detects some abnormal situation. An abnormal situation detected by the alarm device 19 is, for example, a fire, an earthquake, or a person intrusion. When the alarm device 19 detects an abnormal situation, the alarm device 19 issues an alarm to notify the user in the high security level area that the abnormal situation has been detected, and notifies the gateway unit 14 of the abnormal situation. Then, the gateway unit 14 notifies the control unit 12 of the abnormal situation, and further, the control unit 12 notifies the cooperation control apparatus 30 of the abnormal situation.

  In step S <b> 52, in response to the notification of an abnormal situation from the alarm device 19 via the gateway unit 14 and the control unit 12, the cooperative control device 30 locks the gateway unit 14 with the electric lock that is locked. Command 17 to unlock. In response to this, the gateway unit 14 unlocks the electric lock 17.

  The release control command for the electric lock 17 in step S52 may be a command from the control unit 12 as in step S52a shown below. In step S52a, the control unit 12 instructs the gateway unit 14 to unlock the locked electric lock 17 in response to the notification of an abnormal situation from the alarm device 19. In response to this, the gateway unit 14 unlocks the electric lock 17.

  As a result, the user can leave the room from the high security level area.

  In step S <b> 53, in response to the notification of an abnormal situation from the alarm device 19 via the gateway unit 14 and the control unit 12, the cooperation control apparatus 30 indicates that an abnormal situation has occurred to the client PC 22. Notice. In response to this, for example, the client PC 22 displays a message indicating that an abnormal situation has occurred on the user using the client PC 22 through the display screen.

  In step S54, the cooperation control apparatus 30 notifies the client PC 22 that an abnormal situation has occurred, and then automatically shuts down the client PC 22. In this way, the cooperation control device 30 cooperates with the information system network 20 in response to being notified from the alarm device 19 of the equipment network 10 that an abnormal situation has been detected, and the client PC 22 is automatically activated. By shutting down, it is possible to prevent unauthorized access to the information network 20 and leakage of confidential information by a third party who has been confused during an abnormal situation, or a regular user permitted to enter the room.

  Next, the user, which is executed before the emergency operation described above, enters the high security level area from the low security level area, and logs on to the information network 20 from the client PC 22 in the high security level area. And a series of linkage processes centered on the linkage control device 30 until leaving the room from the high security level area to the low security level area when the emergency operation described above is not executed. The operation will be described with reference to the timing chart shown in FIG.

  Note that the cooperation processing operation shown in the timing chart of FIG. 4 is an example, and the present invention is not limited to this cooperation processing operation. That is, the user only needs to enter the high security level area in which the information system network 20 is constructed by some method. If an abnormal situation occurs while in the high security level area, the user can install the equipment by the linkage control device 30. The system network 10 and the information system network 20 are linked, and the emergency operation as described above is executed.

(Entry processing to the advanced security level area)
The entrance processing to the high security level area is executed by management by the equipment network 10. First, the user carries the IC card that he owns to a position where the radio wave from the room card reader 15 can be received, and reads the card ID stored in the semiconductor memory (step S1).

  The entrance card reader 15 reads the card ID from the IC card and transmits it to the gateway unit 14 (step S2).

  The gateway unit 14 performs authentication processing in the facility network 10 by comparing the transmitted card ID with a pre-registered card ID. When the transmitted card ID matches the registered card ID, the gateway unit 14 authenticates the card ID and permits entry by unlocking the locked electric lock 17 (step). S3).

  On the other hand, if the card IDs do not match and are not authenticated, the gateway unit 14 authenticates via an alarm device (not shown) or a liquid crystal display provided on the low security level area side, for example. Control to output an error notification indicating that it was not done.

  When the transmitted card ID is authenticated, the gateway unit 14 records a log indicating that the user has entered the high security level area from the low security level area in the gateway unit 14 (step S4). ). In addition, when the transmitted card ID is authenticated, the gateway unit 14 transmits the card ID and a reader ID, which is a device ID that uniquely identifies the gateway unit 14, to the control unit 12 as room entry information. . Then, the control unit 12 notifies the link control device 30 of this room entry information (step S5).

  The linkage control device 30 uses the entry information notified from the gateway unit 14 and is stored in a storage unit (not shown), as described with reference to FIG. 2, and a table associated with the card ID and the reader ID. The reader ID, the card ID, and the user ID are matched using a table in which the card ID is associated with the user ID registered in advance for authentication processing in the information network 20. That is, the cooperation control apparatus 30 verifies whether the reader ID transmitted as the room entry information and the card ID are the correct combination recognized by using the table shown in FIG. If it is, the user ID corresponding to the card ID is acquired using the table shown in FIG. 2B (step S6).

  Further, the cooperation control apparatus 30 sends valid information for validating the user account registered in the ACL server 24 of the information system network 20 to which the acquired user ID is attached to the ACL server 24 via the switching hub 21. Transmit (step S7).

  As a result, the account in the information system network 20 of the user who entered the high security level area becomes valid, and the user has acquired the access authority to the information system network 20.

(Logon process)
The user who has entered the high security level area first activates the client PC 22 (step S11). Then, after the client PC 22 is activated, an IC card is set in the card reader 23 and a logon request is made to the client PC 22. The card reader 23 reads the card ID from the set IC card and transmits it to the PC 22 (step S12).

  The client PC 22 makes a logon permission request to the ACL server 24 using the card ID read from the card reader 23 (step S13).

  The ACL server 24 authenticates the transmitted card ID, and when authenticated, permits the logon from the client PC 22 (step S14). In response to this, the client PC 22 transmits a log of logon information including the user ID to the log server of the ACL server 24 in order to record which user logged on from which client PC 22 (step S15). . For example, the client PC 22 displays a message notifying that logon is permitted on the display screen and notifies the user that logon is permitted (step S16).

  In this way, a user who has entered the high security level area can access the information network 20 via the client PC 22. At this time, when the facility network 10 and the information network 20 are linked by the linkage control device 30, for example, when a regular user A enters a room with another regular user B, etc. When the user A enters the room without using the IC card, it is impossible to log on even if the client PC 22 has access authority, and more accurate access management can be performed.

  Further, even if a third party who has illegally entered the door through the door (door) where the electric lock 17 has been unlocked by a user who has just attempted to enter the high security level area accesses the PC 22, the access authority remains. Therefore, unauthorized access can be prevented.

  Therefore, the facility network 10 and the information system network 20 can be managed independently as systems that are closed to each other, but very high security can be ensured by cooperation by the cooperation control device 30.

(Logoff processing)
When the user leaves the high security level area, the user first logs off the logon from the client PC 22.

  The user makes a termination request to the client PC 22 (step S21). Upon receiving the termination request, the client PC 22 transmits logoff information including the user ID to the log server of the ACL server 24 in order to record which user has logged off from which client PC 22 (step S22). As a result, the client PC 22 is logged off from the information network 20 and shuts down (step S23).

(Exiting from the high security level area)
After the logoff is completed, the user exits from the high security level area to the low security level area.

  The exit processing from the high security level area is executed by management by the equipment network 10. First, the user carries the IC card that he owns to a position where the radio wave from the leaving card reader 16 can be received and reads the card ID stored in the semiconductor memory (step S41).

  The leaving card reader 16 reads the card ID from the IC card and transmits it to the gateway unit 14 (step S42).

  The gateway unit 14 performs authentication processing in the facility network 10 by comparing the transmitted card ID with a pre-registered card ID. When the transmitted card ID and the registered card ID match, the gateway unit 14 authenticates the card ID and permits the user to leave the room by unlocking the locked electric lock 17 (step). S43).

  On the other hand, if the card IDs do not match and are not authenticated, the gateway unit 14 is authenticated via, for example, an alarm device (not shown) or a liquid crystal display provided on the high security level area side. Control to output an error notification indicating that there was no error.

  When the transmitted card ID is authenticated, the gateway unit 14 records in the gateway unit 14 a log indicating that the user has left the high security level area to the low security level area (step S44). ). When the gateway unit 14 authenticates the transmitted card ID, the gateway unit 14 transmits the card ID and the reader ID, which is a device ID that uniquely identifies the gateway unit 14, as leaving information to the control unit 12. To do. And the control unit 12 notifies this leaving information to the cooperation control apparatus 30 (step S45).

  The linkage control device 30 uses the exit information notified from the gateway unit 14 and is stored in a storage unit (not shown), as described with reference to FIG. 2, and a table associated with the card ID and the reader ID. The reader ID, the card ID, and the user ID are matched using a table in which the card ID is associated with the user ID registered in advance for authentication processing in the information network 20. That is, the cooperation control device 30 verifies whether the reader ID transmitted as the leaving information and the card ID are the correct combination recognized by using the table shown in FIG. If it is, the user ID corresponding to the card ID is acquired using the table shown in FIG. 2B (step S46).

  Further, the cooperation control apparatus 30 sends invalid information for invalidating the user account registered in the ACL server 24 of the information network 20 to which the acquired user ID is attached to the ACL server 24 via the switching hub 21. Transmit (step S47).

  As a result, the account in the information system network 20 of the user who has left the low security level area becomes invalid, and the user has lost the access authority to the information system network 20.

  In the embodiment of the present invention, the user uses the card ID stored in the IC card owned by himself / herself as the authentication target information to perform the authentication processing of the equipment network 10. It is not limited, and the user only needs to be uniquely identified in the equipment network 10. For example, the equipment system can be obtained by performing biometric authentication processing using biometric information such as fingerprint information and iris information as authentication target information. Authentication processing in the network 10 may be performed.

  In addition, when logging on to the information network 20 from the client PC 22, biometric authentication processing using this biometric information may be executed.

  The above-described embodiment is an example of the present invention. For this reason, the present invention is not limited to the above-described embodiment, and various modifications can be made depending on the design and the like as long as the technical idea according to the present invention is not deviated from this embodiment. Of course, it is possible to change.

It is a figure for demonstrating the structure of the information leakage prevention system shown as embodiment of this invention. It is the figure which showed an example of the table stored in the memory | storage means with which a cooperation control apparatus is provided, (a) is a table which relates reader | leader ID and card ID, (b) is card ID and user ID. It is a related table. It is a timing chart for demonstrating the cooperation processing operation | movement at the time of receiving the notification from an alarm device. It is a timing chart for demonstrating the cooperation processing operation | movement regarding entrance / exit.

Explanation of symbols

10 Equipment network
12 Control Unit 14 Gateway Unit 15 Entrance Card Reader 16 Exit Card Reader 17 Electric Lock 20 Information Network 22 Client PC (Personal Computer)
24 ACL (Access Control List) Server 30 Cooperation Control Device

Claims (6)

Depending on the authentication processing result based on the first authenticated information that uniquely identifies the user, the entry from the low security level area to the high security level area, and the high security level area to the low security level area. In accordance with the authentication processing result based on the second authentication information that is constructed in the facility network for managing the exit and the high security level area and uniquely identifies the user, the user's access to the information network A cooperative control device that links information-related networks that restrict access to each other,
In response to the detection of an abnormal situation when a user is present in the high security level area,
Controlling to transmit a first opening instruction to open the door separating the high security level area and the low security level area to the facility network;
And a control means for controlling the information terminal device accessing the information network to transmit a notification command instructing the user to notify that an abnormal situation has occurred. Control device. 2. The control unit according to claim 1, wherein after the notification command is transmitted, the control unit controls the information terminal device to transmit a forced termination command for instructing the operation to be terminated. Cooperative control device. The facility network includes a control unit that transmits to the facility network a second opening instruction instructing to open the door in response to an abnormal situation being detected,
The control means notifies the information terminal device accessing the information network that an abnormal situation has occurred without transmitting the first release command to the facility network. The cooperative control device according to claim 1, wherein only the notification command instructing to perform the control is transmitted. The cooperative control apparatus according to claim 1, wherein the first authentication information is a card ID (IDentification) stored in a memory included in an IC (Integrated Circuit) card owned by the user. The cooperation control apparatus according to claim 1, wherein the first authenticated information is biometric information of a user. The cooperative control apparatus according to claim 1, wherein the second authenticated information is a user ID (IDentification) that uniquely identifies a user in the information network.

Images