JP2007086896A - Security system - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To prevent information leakage from a section partitioned by gate means of access control, and restrict photographing in a security area partitioned by the gate means by automatically writing to a contactless IC means whether or not he or she is in the security area. <P>SOLUTION: A security system having a plurality of gate means each having a reader/writer function of reading/writing information stored in the contactless IC means interconnects the gate means by a network to provide access control when the security area is accessed through the gate means. When the security area is accessed, a flag is automatically set in the contactless IC means in a digital camera to show that he or she is in the area. When he or she exits the security area, the flag in the contactless IC means in the digital camera is cleared automatically. <P>COPYRIGHT: (C)2007,JPO&INPIT

Description

  In a security system that uses a contactless IC such as RFID for entry / exit management, the recording operation of the information recording means in the security system is restricted.

Conventionally, a security system that performs entry / exit management by contact / non-contact authentication means has been used, and it has been used for clearing, device control, etc. using a storage area in the authentication means.
However, the recording operation of the information storage means in the security system has not been restricted.

For example, Patent Document 1 and Patent Document 2 can be cited as conventional examples.
JP 2000-306130 A Japanese Patent Laid-Open No. 08-95882

  In recent years, there has been an increase in opportunities to perform authentication work using contactless ICs such as RFID, but it is possible to store confidential information in the storage area of this contactless IC and utilize the confidential information in the security area. Can be considered.

  However, it is possible to take confidential information within the security area with, for example, a digital camera and take the information out of the security area.

  In a security system having a plurality of gate means having a reader / writer function for reading / writing information stored in the non-contact IC means, the gate means are interconnected by a network, and the security area is moved in and out through the gate means. In addition to performing entry / exit management, an in-area flag is automatically set in the non-contact IC means in the digital camera when entering from outside the security area. Also, when going out of the security area, the in-area flag in the non-contact IC means in the digital camera is automatically cleared.

  When a digital camera user intends to perform a photographing operation within the security area, the digital camera user cannot photograph because the in-area flag in the non-contact IC means is set.

  With the above control, it is possible to automatically perform shooting restriction within the security area.

  Alternatively, the photographing operation itself is permitted at the time of photographing, but it is automatically set in the non-contact IC means that the confidential information is stored in the digital camera as a confidential information flag, and when passing through the gate By giving a warning, it is possible to prevent confidential information from leaking outside.

  The above means can set the shooting restriction or confidential information flag in the non-contact IC means, so that security can be applied even if the digital camera body is trying to pass through the gate with the power off. It is.

(Example 1)
The overall system of the present invention is shown in FIG. In this system, a security area 100 is defined that is separated from the outside by a plurality of gates 101 and walls (not shown) that are physical partitions. Within the security area, confidential information can be exchanged. Each of the plurality of gates 101 has reader / writer means 500 capable of reading / writing information stored in the RFID means 105 inside, and exchanges information without contact. The gates 101 are connected to each other by the first network means 102, and exchange confidential information with the security server 103 connected to the first network means 102. In order to improve confidentiality, the first network means is preferably separated from the external network (Internet), but has a configuration in which information is separated by a separation means (not shown) such as a gateway. You may take it.

  When the user passes through the gate means 101 and enters the security area 100, the reader / writer means 500 sends information indicating the entrance state to the RFID 105 means stored in the digital camera. Write automatically without contact. Also, when the user leaves the security area, the reader / writer means 500 automatically deletes the information indicating the entrance state without contact in order to indicate that the user has entered.

  In the above system, if the user tries to take a picture with the digital camera in the security area 100, the digital camera recognizes that the entrance state information is stored in the non-contact IC means, and takes a picture. Is not done.

  For example, the user is notified that shooting cannot be performed by preventing the shutter of the digital camera from being released or displaying a warning sound or warning message on the display unit.

  FIG. 2 illustrates the exchange of information performed between the RFID 105 means and the reader / writer means 500 in the security system implemented by this system.

  A user ID 201 and individual data 202 are stored in the RFID 105 means.

  The unique user ID 201 is assigned a unique numerical value to each RFID 105 means, and an individual who owns the RFID 105 can be recognized based on the user ID 201.

  The individual data 202 differs in the number of data stored by each user, but one or a plurality of individual data 202 is stored in one RFID means 105. The configuration of the individual data 202 includes an individual data ID 203, a data body 204, and a confidential flag 205.

  An arbitrary number of individual data IDs 203 is allocated to each individual data, and by combining with the user ID information 201, transmission / reception of various data can be started.

  FIG. 3 is a flowchart for explaining exchange of information between the RFID means 105 in the digital camera 104 and the reader / writer means 500 in the gate means 101 when leaving the security area 100 to the outside. I will explain in order.

When the user leaves the security area, the contactless RFID unit 105 is held over the reader / writer 500 installed in the gate unit 101 when passing through the gate unit 101. (S301)
Next, a radio wave for power supply is transmitted from the reader / writer means 500, power is supplied to the RFID means 105 in the digital camera 104, and the user ID 201 is read from the internal nonvolatile memory means. (S302)
In S303, the security server 103 connected to the reader / writer means via the first network means 102 is queried based on the read user ID 201. Specifically, the user ID 201 confirms whether it is a registered ID and whether it is currently in the security area.

  The RFID means 105 needs to be registered in advance in the security server 103 before being operated for the security system. When the RFID means 105 having the unregistered user ID 201 is detected by the reader / writer means 500 in the gate means 101, it is a security violation.

  In addition to input / output management, it manages whether or not the user is in the security area when passing through the gate. Therefore, in this flowchart description, the user should have been in the security area 100 before passing through the gate, and the security server 103 records that the history information of the user ID was not in the area. In this case, it is determined that the gate means 101 has been illegally avoided at the time of entry at any time in the past.

  If it is determined in S303 that the user ID is an unauthorized user ID, the RFID is a security violation, so a warning is issued in S304. The means for warning is not important in the present embodiment, and will not be described in detail.For example, a display unit (not shown) installed in the gate means displays that an authentication error has been detected, sounds a warning sound, etc. Can be considered. At the same time, the gate means 101 may be temporarily closed.

  If the authentication is successful in S303, the user ID 201 is recorded in the history as the withdrawal status to the security server 103 in S305. As a result, it is determined that the user having the RFID means 105 may leave in terms of exit management. In this case, the confidential information protection operation is continued.

  Next, in S307, it is recorded that “exit” in the confidential flag 205 in the RFID means.

  Finally, all exit management operations are terminated in S308.

  Since writing and reading of data to and from the RFID means 104 is performed by wireless power from an external reader / writer, it can be performed without any problem even if the power of the digital camera 104 is turned off.

  FIG. 4 is a flowchart for explaining the exchange of information between the RFID means 105 and the reader / writer means 500 in the gate means 101 when entering from the security area 100 to the inside. .

When the user enters the inside from the outside of the security area 100, the non-contact RFID unit 105 is held over the reader / writer 500 installed in the gate unit 101 when passing through the gate unit 101. (S401)
Next, a radio wave for supplying power to the reader / writer unit 500 is transmitted, power is supplied to the RFID unit 105, and the user ID 201 is read from the internal nonvolatile memory unit. (S402)
In S403, the security server 103 connected to the reader / writer means via the first network means 102 is queried based on the read user ID 201. Specifically, the user ID 201 confirms whether it is a registered ID and whether it is currently outside the security area.

  The RFID means 105 needs to be registered in advance in the security server 103 before being operated for the security system. When the RFID means 105 having the unregistered user ID 201 is detected by the reader / writer means 500 in the gate means 101, it is a security violation.

  In addition to input / output management, it manages whether or not the user is in the security area when passing through the gate. Therefore, in the explanation of this flowchart, the user should have been outside the security area before passing through the gate, and the security server 103 stores that the history information of the user ID was not outside the area. It is determined that the gate means 101 was illegally avoided at the time of exit at any time in the past.

  If it is determined in S403 that the user ID is an unauthorized user ID, the RFID is a security violation, so a warning is issued in S404. The warning means is not important in the present embodiment, so detailed description will not be given.For example, a display unit (not shown) installed in the gate means displays that an authentication error has been detected, or a warning sound is sounded. Can be considered. At the same time, the gate means 101 may be temporarily closed.

  If the authentication is successful in S403, the external user ID 201 is recorded in the history as an entrance state to the security server 103 in S405. As a result, it is determined that the user having the RFID means 105 may enter in terms of entrance management.

  Next, in S406, it is recorded that “entering” for the confidential flag 205 in the RFID means 105.

  Finally, all admission management operations are terminated in S407.

  Since writing and reading of data to and from the RFID means 104 is performed by wireless power from an external reader / writer, it can be performed without any problem even if the power of the digital camera 104 is turned off.

[Reader / Writer]
FIG. 5 illustrates an internal configuration of the reader / writer unit 500 that reads / writes data in the RFID unit 104. The reader / writer unit 500 includes a transmission antenna unit 501 for transmitting radio waves to a 600 non-contact IC unit, a modulation circuit 502 for modulating radio waves transmitted from the transmission antenna, and a 600 non-contact IC unit. Demodulation circuit 504 for demodulating a signal received from the reception antenna unit of reception antenna units 503 and 503 for receiving radio waves transmitted from 501, transmission antenna unit of 501, modulation circuit of 502, reception of 503 Control unit 505 for controlling the demodulation circuit of the antenna unit and 504, an I / F unit that communicates with the host device, and a power source that is connected to the transmission antenna unit 501 and supplies power to 600 non-contact ICs Consists of 507.

  The control unit 505 modulates a radio wave for supplying power and data to be transmitted using a modulation circuit 502 in accordance with an instruction from the outside, and transmits the radio wave from the transmission antenna unit 501 to the outside. Further, a radio signal received from the outside can be received by the receiving antenna unit 503, demodulated by the demodulation circuit 504, and then converted so that it can be handled as a data signal.

[RFID part]
In FIG. 6, the configuration of the RFID 104 means itself will be described. The RFID 104 includes a non-contact IC unit 600. In this embodiment, a card-type RFID means is assumed, and a non-contact IC portion 600 is included in the card.

  The non-contact IC unit 600 includes a non-volatile memory 601, an antenna unit for transmitting and receiving a radio wave 602, a resonance capacitor unit 603, a power forming unit for rectifying and smoothing a power source 604, and a radio wave 605 Are composed of a post-modulation unit for performing modulation and demodulation, and a control unit for 606.

  The antenna portion 602 is combined with a resonance capacitor 603 so that a resonance circuit can be configured. When a radio signal for supplying power is sent from the outside, it is received by the resonance circuit and supplied to the power generation unit shown in 604, and the power generation unit of 604 operates 600 non-contact ICs Therefore, it becomes possible to supply electric power. The power is supplied to a non-volatile memory 601 and a post-modulation circuit 605. The control unit 606 is for controlling the 600 non-contact IC unit.

  Along with radio waves for supplying power from the outside, data for reading or writing from the non-contact IC unit is also transmitted and received at the same time, and the signal sent to the 600 non-contact IC unit is 605 demodulated. The signal is demodulated by the circuit and stored in the nonvolatile memory 601 via the control unit 606. The data read from the non-volatile memory 601 by the control unit 606 is modulated by the post-modulation circuit 605 and can be transmitted as a radio wave signal from the antenna unit 602.

  FIG. 7 is a flowchart for explaining photographing control of the digital camera implemented in the present embodiment.

  In S701, it is determined whether or not the user has pressed the shutter to take a picture after the digital camera 104 is turned on.

  If it is determined that the shutter has been pressed, in S702, the inside of the RFID means 105 is confirmed by a determination unit such as a CPU (not shown) in the digital camera.

  In step S703, it is determined whether the digital camera 104 is currently in the security area 100.

  If it is determined that the user is outside the security area 100, the photographing is possible, so the photographing is performed in S704.

  If it is determined that the user is in the security area 100, it is impossible to shoot, so the shooting operation is interrupted in S705, and a warning is displayed on the display unit (not shown) of the digital camera 104 in S706. Do.

  Next, the flow moves to S701, and the photographing control operation is continued.

  In the present embodiment, the configuration is described in which the photographing operation with a digital camera is restricted within the security area. However, it goes without saying that the same restriction can be used for a silver halide camera, a movie camera, a voice recorder, and the like.

(Example 2)
Although the first embodiment has been described with the configuration that restricts the photography in the security area, another configuration will be described in the present embodiment.

  In this embodiment, access to the confidential flag in the RFID means 105 when entering or leaving the security area is the same as in the first embodiment. However, in this embodiment, another data field (not shown) in the RFID 105 is used to hold location information indicating whether the user is currently in or out of the security area 100.

  In the present embodiment, when an attempt is made to perform a shooting operation with the digital camera 104 within the security area 100, the shooting operation itself can be performed. If you are in the security area 100 when you take a picture, check the confidential flag in the RFID means 105 in the digital camera to see if the photographed image contains confidential information. The reader / writer means 500 of the gate means 101 determines that the confidential information flag is read in a non-contact manner, and if confidential information is included in the RFID means, a warning or the like is given when leaving the security area. Do.

  FIG. 8 shows a control flow on the digital camera 104 side performed in this embodiment.

  In S801, it is determined whether or not the shutter has been pressed. If it is determined that the shutter has been pressed, the location information in the RFID is confirmed in S802. Next, in S803, it is determined whether or not the user is currently in the security area 100 based on the read location information. If it is determined that the user is outside the security area 100, the photographing operation is performed without any particular restriction in S804.

  If it is determined that the user is in the security area, first in S805, confidential information is set for the confidential flag 205 for each image data. Next, a photographing operation is performed in S804.

  Finally, the flow proceeds to S801, and it is continuously confirmed whether or not the next photographing operation is performed.

  Next, FIG. 9 shows a control flow on the gate means 101 side.

  This control flow is an explanation when the user with the digital camera 104 leaves the security area 100 through the gate means 101 and exits. Therefore, the security control itself upon exit conforms to the first embodiment.

  In S901, the user holds the digital camera 104 over the reader / writer means 500 in the gate means 101. In S902, the confidential flag in which the location information described in the RFID means 105 in the digital camera 104 is stored is read out in a non-contact manner. Next, in S903, it is determined whether or not the confidential flag 205 is set in all the captured image data 202 in the RFID means 105 in the digital camera 104. If there is no secret flag 205 set, S904 can pass through the gate 101 without doing anything. If even one confidential flag 205 is set in all the image data 202, a warning is given in S905. For example, a warning such as displaying a warning message on a display unit (not shown) installed in the gate means 101 or outputting a warning sound is performed.

  In this case, since the user needs to erase the image data to which the confidential flag 205 is added in the digital camera, the individual data ID 203 is also displayed on the display unit in the gate means 101 at S906. In response to this, the image data designated by the user is deleted.

  In step S907, the reader / writer unit 500 in the gate unit 101 confirms again whether the image data 202 including all confidential data is stored in the RFID unit 105.

  If it is determined that there is no confidential data, the confidential information confirmation operation is terminated in S908. Thereafter, normal exit management is performed. If it is determined that there is still confidential data, in S909, the individual data ID 203 of the image data 202 including the confidential flag 205 is displayed on the display unit.

  In the present embodiment, the configuration has been described in which all captured image data is stored in the RFID means 105. However, there are cases where image data cannot be stored due to the capacity problem of the RFID means 105. In that case, in FIG. 2, only the ID information for referring to the user ID 201 and the individual data ID 203 and the confidential flag 205 are stored in the RFID, and in S903 of the flowchart of FIG. 9, the confidential information in the RFID means 105 is stored. A configuration may be adopted in which the flag 205 is checked for determination.

1 is an overall view of a security system described in the present embodiment. The figure which shows the structure of the separate data used by a present Example. The flowchart figure in the case of leaving from the inside of a security area. The flowchart figure in the case of entering from the outside of a security area. The figure explaining a reader / writer part. The figure explaining the inside of RFID. FIG. 3 is a flowchart for explaining a photographing restriction method described in the first embodiment. FIG. 9 is a flowchart for explaining control on the digital camera side described in the second embodiment. The flowchart figure explaining the control by the side of the gate means demonstrated in Example 2. FIG.

Claims (5)

Non-contact IC means, a plurality of gate means provided with reader / writer means for reading / writing information stored in the non-contact IC means in a non-contact manner, and network means for connecting the plurality of gate means respectively In the entrance / exit management security system consisting of
In the security area formed by the plurality of gate means, having an information terminal that exchanges information using confidential information stored in the non-contact IC means,
When exiting from the security area to the outside of the security area, the exit permission management and the exit management method of writing exit information in the non-contact IC means,
Security that consists of admission management that writes admission information into the non-contact IC means and information recording means equipped with the non-contact IC means when admission is managed from outside the security area. system.   When performing the recording operation, the information recording unit according to claim 1 confirms the exit / entry information mounted in the information recording unit, and performs the photographing operation only when the exit information is stored. Security system characterized by being able to.   The information recording means according to claim 1 automatically sets a confidential information flag in the non-contact IC means in the information recording means when performing a recording operation in the security area. system.   In the security system according to claim 3, a confidential information flag is stored in the non-contact IC means in the information recording means, and the information recording means tries to leave after passing through the gate means. A security system characterized by a warning when it is detected.   2. The security system according to claim 1, wherein the information recording means is a camera that records a still image.

Images