JP2007247141A - Entering/leaving control system - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an entering/leaving control system capable of sufficiently securing security and sufficiently suppressed in cost for constructing the system. <P>SOLUTION: When a host device 1 receives a signal for requesting a determination on entering/leaving a room 2 including an ID read from a card 9 by a reader 5, it determines whether the electronic lock 3 of the room 2 must be unlocked or not. When the host device determines that the electronic lock 3 must not be unlocked, it notifies the cellular phone 6 of an authorization person which issues the card 9 used about it. When the host device 11 receives a signal for response from the cellular phone 6, it determines the validity of the response. When the response is valid, it performs a treatment requested by the cellular phone 6. <P>COPYRIGHT: (C)2007,JPO&INPIT

Description

  The present invention relates to an entrance / exit management system that manages the entry and exit of people in a management area.

  The entrance / exit management system is a system that manages the entrance and exit of people in the management area. A controlled area is an area that restricts unauthorized access (hereinafter referred to as unpermitted persons) and allows only authorized persons (hereinafter referred to as authorized persons) to enter and exit. It is. The management area is set, for example, for the entire building or for each room in the building. In a general entrance / exit management system, a medium such as a card storing identification information (hereinafter referred to as ID) is issued to an authorized person. An electronic lock is attached to the door provided at the entrance / exit of the management area. On both sides of the door, that is, inside the management area and outside the management area, a reader such as a card reader for reading ID from the medium is provided. Has been placed. The electronic lock on the door is normally locked, and is temporarily unlocked when the permitter enters and exits the management area. Specifically, a person who enters or exits the management area causes the reader to read the ID of the medium he possesses. The host device determines whether or not the electronic lock can be unlocked using the ID read from the medium by the reading device. When the host device determines that the electronic lock can be unlocked, the electronic lock is temporarily unlocked, allowing a person to enter and exit the management area.

  In addition, an entrance / exit management system provided with an anti-passback function and improved security has been proposed (see Patent Document 1). As is well known, the anti-passback function is a function that pays attention to the fact that the same person does not enter or exit the management area continuously. To put it simply, a person who enters the controlled area must enter the controlled area again before leaving the controlled area, or vice versa. Focusing on the point that it does not come out, it is a function that, when such a contradiction occurs, it is determined that anti-passback has occurred and the electronic lock is determined to be unlocked. One of the reasons why the so-called companion that enters or leaves the management area following another authorized person without causing the reader to read the ID of his / her medium causes anti-passback. It is. In addition, anti-passback may occur even when a forged medium is used.

The authorized person who has caused the anti-passback cannot enter or leave the management area until the cause of the anti-passback is resolved. On the other hand, as described above, even when a counterfeit medium is used, an anti-passback occurs. Therefore, whether the person who generated the anti-passback is a permitter or a person who used the counterfeit medium (unauthorized person) ) And only when it is confirmed that the person is a permitter, it is necessary to perform the processing related to the release. Manipulating this confirmation or release operation increases the operating cost of the system. Therefore, in Patent Document 1, an authorized person who has generated an anti-passback uses a telephone set in a management area to access a host apparatus and operate the telephone according to voice guidance from the host apparatus. Therefore, a configuration that can eliminate the cause of the anti-passback is proposed.
JP-A-5-197890

  However, since the configuration shown in Patent Document 1 allows anyone to access the host device using a telephone and perform operations related to canceling the cause of the occurrence of anti-passback, unauthorized persons can also cancel this The operation concerning can be performed. In Patent Document 1, the person who performs this operation is confirmed by using a password. However, if an unauthorized person also obtains the password of the permitter, the cause of the anti-passback has been canceled. Can be done.

  In addition, in the configuration of Patent Document 1, a telephone for performing an operation for canceling the cause of the occurrence of the anti-passback must be installed for each management area, which increases the cost for system construction. It was.

  An object of the present invention is to provide an entrance / exit management system capable of sufficiently securing security and sufficiently suppressing the cost for system construction and operation.

The entrance / exit management system of this invention
Identification information reading means for reading identification information stored in the medium; and
The identification information reading means has identification information output means for outputting identification information read from a medium, and is arranged on both sides of a door provided at the entrance / exit of the management area, and a reading device,
An electronic lock control device having an electronic lock provided on the door, an unlocking means for unlocking, and an unlocking means;
As determination information used for determining whether the electronic lock can be unlocked, invalid medium determination information used for determining whether the medium is an invalid medium from identification information of the medium, and identification information related to entering / exiting the management area Determination information storage means for storing the traffic history information in which the history is registered,
Determination for acquiring identification information read by the identification information reading unit of the reading device, and determining whether the electronic lock can be unlocked with respect to the identification information acquired this time using the determination information stored in the determination information storage unit means,
Determination result notification means for notifying the electronic lock control device of the determination result of the determination means;
For each identification information, when the determination means determines that the electronic lock is unlocked or not, contact information storage means for storing contact information for registering a contact for each reason determined to be unlocked, and
When the determination means determines that the electronic lock is unlocked, the contact information stored in the contact information storage means is used to unlock the electronic lock for the corresponding contact. A host device having a contact means for notifying that it has been determined,
It has.

  In this configuration, the reading device reads the identification information from a medium possessed by a person who enters or exits the management area. The medium may be of any type as long as it can store identification information, such as a magnetic card, a contact IC card, a non-contact IC card, and a wireless tag. The reader may be configured to read identification information from a plurality of types of media.

  The host device acquires the identification information read from the medium by the reading device. The host device may be configured to directly acquire the identification information from the reading device, or may be configured to acquire indirectly through another device (for example, an electronic lock control device). The host device uses the determination information stored in the determination information storage unit to determine whether or not the electronic lock of the door provided at the entrance / exit of the management area can be unlocked with respect to the acquired identification information. The host device notifies the electronic lock control device of the determination result that determines whether or not the electronic lock can be unlocked. The electronic lock control device temporarily unlocks the electronic lock when notified by the host device that the electronic lock can be unlocked, and does not unlock the electronic lock when notified of whether or not the electronic lock is unlocked.

  In addition, when the host device determines that the electronic lock of the door is unlocked or not in the determination means, the host device determines whether the electronic lock is unlocked or not to the contact information corresponding to the identification information and the reason why the electronic lock is determined to be unlocked. Notify that the decision has been made. The contact information storage unit stores, as contact information, a contact corresponding to the reason why the electronic lock is determined to be unlocked for each identification information. Therefore, when an invalid medium is used or when an anti-passback occurs, it is possible to promptly notify the contact person according to the situation. For example, if invalid media is used, contact the administrator of the management area or the security room, etc., and if an anti-passback occurs, the owner of the media, the boss of the owner, etc. Can contact.

From the medium identification information, the invalid medium determination information used for determining whether the medium is an invalid medium is:
For each invalid medium, it may be information in which identification information is registered,
For each valid medium, it may be information registered with the identification information,
It may be information in which each issued medium is associated with whether it is a valid medium or a valid medium.

  Also, if an anti-passback occurs, the host will contact the pre-registered contact information (contact information stored in the contact information storage means). When an unauthorized person impersonating an authorized person generates an anti-passback, the authorized person can recognize the existence of the unauthorized person. Therefore, security for entering and exiting the management area can be improved. Also, if the permitter himself / herself has an anti-passback, by allowing the permitter who has received this notification to perform the anti-passback cancel operation, the anti-passback cancel operation can be performed. The operating cost can be reduced without requiring an operator to perform the operation.

  In addition, when an anti-passback occurs, if the contact information is a portable terminal having a wireless communication function, such as a mobile phone of the person who owns the medium, the reason ( Prompt notification of anti-passback). In addition, if there is a response from the contact who has notified that the electronic lock has been determined to be unlocked or not, using a password or the like to determine the legitimacy of this response, Password authentication can be performed for the person who is, and security is not reduced.

  Further, a warning may be given to a user who has a high occurrence frequency of anti-passback. As a result, it is possible to call attention to an authorized person who is likely to cause companion (that is, a user with a high occurrence frequency of anti-passback). Further, even if this warning is given, the permitter who causes the anti-passback may be notified to the supervisor of the permitter. At this time, the anti-passback may not be canceled only by the authorized person. For example, if the contact is received and the supervisor is not collaborating, the anti-passback may not be forcibly canceled until the supervisor's approval is obtained.

  Also, if a contact that determined that the electronic lock was unlocked was sent by e-mail and a response destination such as a host device was associated with this e-mail, the person who received this contact, that is, an anti-passback occurred. The time required for releasing the anti-passback by the permitter can be reduced.

  Further, when the permitter receives an e-mail from the host device when the reader does not read the identification information of the medium by himself / herself, for example, when the forgery medium is used or the permitter If the user is unaware of the loss or theft, an e-mail that can select a response type may be transmitted from the host device so that the response can be quickly made. The response type is, for example, cancellation of anti-passback for the host device, loss of medium, or notification of theft to the administrator or the like. Thereby, the security of the system can be further improved.

  Moreover, it is good also as a structure which replaces with the above-mentioned electronic mail and performs a call to a mobile telephone etc. by an automatic telephone response.

  According to the present invention, the cost for the construction and operation of the system can be sufficiently suppressed without lowering the security for the management of people entering and leaving the management area.

  Hereinafter, the entrance / exit management system which is this Embodiment is demonstrated.

FIG. 1 is a diagram showing an entrance / exit management system according to an embodiment of the present invention. The entrance / exit management system according to the embodiment of the present invention includes:
A host device 1 installed in the center;
For each room 2 (2A, 2B,...) That is a management area, an electronic lock 3 (3A, 3B,...) Attached to a door (not shown) of the room,
An electronic lock control device 4 (4A, 4B,...) That is provided for each electronic lock 3 and controls locking and unlocking of the corresponding electronic lock 3;
A reading device 5 (5A, 5B,...) That reads identification information (hereinafter referred to as ID) stored in the card from a card issued to the permitter;
It has. One reading device 5 is installed inside and outside the room 2 with a door (not shown) interposed therebetween. There may be one room 2 managed as a management area, or there may be two or more rooms. Here, a case where there are a plurality of rooms 2 managed as management areas is taken as an example. Moreover, in FIG. 1, although the room 2 with one door to enter / exit is shown, there may be a plurality of doors. In this case, one reading device 5 is installed for each door, inside and outside the room 2 across the door. An electronic lock 3 is attached to each door. The electronic lock control device 4 may have a configuration in which one unit is provided for each door, a configuration in which one unit is provided for each room, or one unit for each of the plurality of rooms 2. It may be a configuration. The electronic lock control device 4 controls locking and unlocking for each electronic lock 3 when controlling locking and unlocking of the electronic lock 3 attached to a plurality of doors. Connected to the electronic lock control device 4 are an electronic lock 3 that controls locking and unlocking, and a reading device 5 that is installed inside and outside the room 2 across a door to which the electronic lock 3 is attached. Is done. The host device 1 is connected to an electronic lock control device 4 in each room 2 that manages entry / exit by the host device 1. The host device 1 and the electronic lock control device 4 may be connected by wire or may be connected wirelessly. Also, the connection between the electronic lock control device 4 and the reading device 5 and the connection between the electronic lock control device 4 and the electronic lock 3 may be wired or wireless. Further, FIG. 1 illustrates an example in which the reading device 5 is connected to the host device 1 via the electronic lock control device 4, but the reading device 5 is directly connected to the host device 1. Also good. Further, the cellular phone 6 shown in FIG. 1 can be connected to a wide area network such as the Internet, and electronic mail can be transmitted and received using this wide area network. The mobile phone 6 is personally owned by the permitter.

  FIG. 2 is a diagram showing the configuration of the main part of the host device in the entry / exit management system of this embodiment. The host 1 includes a control unit 11 that controls the operation of the main body, a storage unit 12 that stores management information for managing persons entering and exiting each room 2 that is a management area, and a transmission / reception unit 13 that communicates with the electronic lock control device 4. And a communication unit 14 that communicates with the mobile phone 6 and other devices (for example, a terminal device installed in a security room or a management room not shown) via a LAN, a public line network, or a mobile phone network. And. The storage unit 12 stores an entrance / exit history database 16, an entrance / exit qualification database 17, a contact database 18, and a negative database 19.

  As shown in FIG. 3 (A), the entry / exit history database 16 is a chronologically registered history of permitters entering and exiting each room 2 which is a management area. This is a database in which records that associate IDs, names of permitted persons, dates and times of entry / exit, rooms that have entered / exited, distinction of entry / exit, determination results (passback check) for antipassback, and the like are registered. In this embodiment, not only when the same authorized person is going to enter the same room 2 continuously or when going out of the same room 2 continuously, but also enters a certain room 2 (for example, room 2A). If it is confirmed that the authorized person has not been confirmed to have left this room 2 (eg, room 2A), he / she will enter another room 2 (eg, room 2B). If it is, it is determined that anti-passback has occurred. In FIG. 3A, when the authorized person whose ID is “00001” detects that he / she tries to leave the room 2A continuously, anti-passback occurs (passback check becomes NG). Is illustrated.

  As shown in FIG. 3B, the entry / exit qualification database 17 registers a record that associates the name of the permitter and the availability of entry / exit for each room 2 for each ID. In FIG. 3B, the permitter with ID “00001” is allowed to enter and exit the rooms A, B and C, and the permitter with ID “00002” is allowed to enter and exit the room A. In this example, the permitter with ID “00003” is allowed to enter and exit the rooms A and C, and the permitter with ID “00004” is allowed to enter and exit the rooms A and B. In addition, although not shown in the figure, the cumulative number of times of occurrence of anti-passback described later is stored for each ID in the entrance / exit qualification database 17.

  As shown in FIG. 3 (C), the contact database 18 includes, for each ID, a contact at the time of occurrence of an anti-passback (contact for the authorized person), a lost or stolen card (hereinafter collectively referred to as an invalid card). This is a database that records records that correspond to the contact information of the boss of the permitter and the contact person of the permitter. As for the contact information when the invalid card is used, FIG. 3C shows a case where they are all the same, but they may be different for each ID. The entrance / exit qualification database 17 and the contact information database 18 may be configured as one database. The contact information of the authorized person is the e-mail address of the mobile phone 6 owned by the authorized person. The negative database 19 is a database in which the ID is registered for each card invalidated due to loss, theft, or the like. This negative database 19 corresponds to invalid medium discrimination information referred to in the present invention.

  Instead of the negative database 19, a database may be used that is an issued card, in which an ID is registered for a valid card and an invalid card ID is not registered, or an issued card. A database in which an ID and a flag indicating validity or invalidity are associated with each other may be used.

  The transmission / reception unit 13 receives a request for determining whether or not the electronic lock 3 is unlocked transmitted from the electronic lock control device 4 and transmits a determination result for the determination request to the electronic lock control device 4. The communication unit 14 transmits an e-mail to an address registered in the contact database 18 and communicates with the accessed mobile phone 6 or the like.

  FIG. 4 is a diagram showing the configuration of the main part of the electronic lock control device in the entrance / exit management system of this embodiment. The electronic lock control device 4 includes a control unit 41 that controls the operation of the main body, a locking / unlocking unit 42 that locks and unlocks the electronic lock 3, a transmission / reception unit 43 that communicates with the host device 1, and a reading device 5. And a receiving unit 44 that receives the ID transmitted from. The locking / unlocking unit 42 normally locks the electronic lock 3, and temporarily unlocks the electronic lock 3 when an instruction to unlock is received from the host device 1. The transmission / reception unit 43 transmits a determination request for determining whether the electronic lock 3 can be unlocked to the host apparatus 1 and a determination result for the request for determining whether the electronic lock 3 is unlocked transmitted from the host apparatus 1. The receiving unit 44 receives the card ID transmitted from the reading device 5.

  FIG. 5 is a diagram showing the configuration of the main part of the reading device in the entrance / exit management system of this embodiment. The reading device 5 includes a control unit 51 that controls the operation of the main body, a reading unit 52 that reads an ID recorded on the card 9, and a transmission unit that transmits the ID read from the card 9 by the reading unit 52 to the electronic lock control device 4. 53. The reading unit 52 may be configured to be able to read the ID from the card 9. For example, if the card 9 is a magnetic card, the reading unit 52 includes a magnetic head, and the magnetic head stores the magnetic data stored in the card 9. is there. If the card 9 is a non-contact medium having a wireless communication function, the card 9 is configured to perform wireless communication. The transmission unit 53 transmits the ID read from the card 9 in the reading unit 52 to the electronic lock control device 4.

  In the following description, the card 9 will be described as a non-contact medium having a wireless communication function.

  Next, the operation of the entrance / exit management system according to the embodiment of the present invention will be described. FIG. 6 is a flowchart showing the operation of the reading device of this embodiment, FIG. 7 is a flowchart showing the operation of the electronic lock control device of this embodiment, and FIG. 8 shows the operation of the host device of this embodiment. It is a flowchart.

  When the reading unit 52 reads the ID from the card 9 in the reading unit 52 (s1), the reading unit 5 transmits the read ID from the transmission unit 53 to the electronic lock control device 4 (s2). In the reading device 1, the reading unit 52 polls the card 9 located in the wireless communication area at regular time intervals. The wireless communication area of the reading unit 52 is within a range of several centimeters from an antenna (not shown). An authorized person entering and leaving the management area holds the card 9 over the wireless communication area. As a result, the card 9 responds to the polling of the reading unit 52. By receiving this response, the reading unit 52 detects the presence of the card 9 located in the wireless communication area. The reading unit 52 reads the ID stored in the card 9 through wireless communication with the card 9 located in the wireless communication area. The reading device 1 uses the ID (hereinafter, referred to as a card ID to be distinguished from the ID of the reading device 5) that is read from the card 9 in s1 in the transmission unit 53, as well as the ID (hereinafter, referred to as a card ID). In order to distinguish it from the card ID, the reading device ID is transmitted to the electronic lock control device 4. The reading device ID is added so that the host device 1 and the electronic lock control device 4 can determine which reading device 5 has read the card ID.

  The electronic lock control device 4 receives the card ID transmitted from the reading device 5 at the reception unit 44 or receives the determination result of whether or not the electronic lock 3 is transmitted from the host device 1 at the transmission / reception unit 43. Waiting to do (s11, s12). When receiving the card ID and the reading device ID at the receiving unit 44, the electronic lock control device 4 creates a request for determining whether or not the electronic lock 3 can be unlocked, including the card ID and the reading device ID received this time (s13). ), The created determination request is transmitted from the transmission / reception unit 43 to the host device 1 (s14).

  In addition, the host device 1 receives a request for determining whether or not the electronic lock 3 is unlocked transmitted from the electronic lock control device 4 in the transmission / reception unit 13 or receives a response from the mobile phone 6 or the like in the communication unit 14. (S31, s32). When the transmission / reception unit 31 receives the determination request transmitted from the electronic lock control device 4, the host device 1 performs a determination process for determining whether or not the electronic lock 3 can be unlocked in response to this determination request (s33).

  FIG. 9 is a flowchart illustrating the determination process according to s33. The host device 1 determines whether or not the card ID included in the determination request received this time is registered in the negative database 19 (s51). If the card ID is registered in the negative database 19, the host device 1 determines that the electronic lock 3 is unlocked in response to the current determination request (s55). That is, in s51, it is determined whether or not an invalid card is used. If the host device 1 determines that the card ID is not registered in the negative database 19 in s51, it is a determination request for requesting the unlocking of the electronic lock 3 in the permitted room 2 for this card ID. Is determined (s52). In s52, the room 2 in which the electronic lock 3 for which unlocking is requested is attached is determined from the reading device ID included in the determination request received this time. Then, it is determined whether the card ID included in the current determination request is permitted to enter or leave the room 2 determined earlier. This determination is performed using the entry / exit qualification database 17. If the host device 1 determines that the room 2 is not permitted in s52, the host device 1 determines that the electronic lock 3 is not unlocked in response to the current determination request in s55. If the host device 1 determines that the room 2 is permitted in s52, it determines whether or not anti-passback has occurred (s53). In s53, it is also determined from the reading device ID included in the determination request received this time whether the room 2 is entered or left. Whether the host device 1 has not entered into or exited from the same room 2 continuously or whether or not there is a contradiction such as whether the person entering the other room 2 has entered or left the room at this time. Judgment is made here. If the host apparatus 1 determines that any contradiction has occurred in s53 (determines that the passback check is NG), the host apparatus 1 determines that the electronic lock 3 is not unlocked in response to the current determination request in s55. On the other hand, if the host device 1 determines that no contradiction has occurred in s53 (determines that the passback check is OK), the host device 1 determines in s54 that the electronic lock 3 can be unlocked in response to the current determination request. Perform (s54). The host device 1 determines the reason for determining whether or not to unlock the electronic lock 3 based on whether the electronic lock 3 is determined to be unlocked or not in any of s51, s52, and s53.

  When the determination processing related to s33 is completed, the host device 1 transmits the determination result to the electronic lock control device 4 that has transmitted the determination request in the transmission / reception unit 13 (s34). In addition, a record indicating the entry / exit history based on the current determination request is created and registered in the entry / exit history database 16 (s35). In s35, not only when it is determined that the electronic lock 3 is unlockable, but also when it is determined that the electronic lock 3 is unlocked, a record is created and registered in the entry / exit history database 16.

  Although not particularly shown in FIG. 3 (A), whether the electronic lock 3 is determined to be unlockable or not to be unlocked is determined in the record registered in the entry / exit history database 16. Information to indicate is also included. The history that the electronic lock 3 is not unlocked indicates that the room 2 has not been entered or exited.

  Furthermore, when it is determined that the electronic lock 3 is unlocked or not at this time, the host device 1 performs a contact process for contacting a contact corresponding to the reason for determining that the electronic lock 3 is unlocked (s36, s37). This contact process will be described later.

  When the electronic lock control device 4 receives the determination result transmitted by the host device 1 in s34 in s12, the determination result in the host device 1 is whether the electronic lock 3 can be unlocked or not. Is determined (s15). If the electronic lock control device 4 determines that unlocking is not permitted in s15, the electronic lock control device 4 ends this processing without unlocking the electronic lock 3. As a result, an unauthorized person who is not permitted to enter or leave the room 2 is restricted from entering or leaving the room 2. If the determination result received in s12 is that the electronic lock 3 can be unlocked, the electronic lock control device 4 unlocks the corresponding electronic lock 3 (s16). When the electronic lock control device 4 detects that the door to which the electronic lock 3 unlocked in s16 is attached is opened and the permitter enters and exits the room 2 (s17), the electronic lock 3 is unlocked in s16. Locking is performed (s18), and this process is terminated. In s17, for example, a sensor for detecting the opening / closing of the door is arranged, and after detecting the opening of the door with this sensor, the closing of the door is detected, thereby detecting that the authorized person has entered and exited the room 2. Further, a plurality of sensors may be arranged near the door so that the passage of a person entering and exiting the room 2 can be detected, and the plurality of sensors may be used to detect that the permitter has entered and exited the room 2.

  Next, the contact process concerning s37 mentioned above is demonstrated. FIG. 10 is a flowchart showing this contact processing. If the reason for determining that the electronic lock 3 is unlocked is the use of an invalid card, the host device 1 notifies the security room that the invalid card has been used (s61, s62). This communication includes information indicating the room 2 where the invalid card is used, the ID of the invalid card used, and the like. Therefore, the security guard can respond quickly when receiving this communication in the security room. That is, it is possible to ensure sufficient security against the use of invalid cards. Further, when an invalid card is used, a known alarm device or the like may be used to sound an alarm near the room 2 where the invalid card is used.

  Further, if the reason why the electronic lock 3 is determined to be unlocked is the occurrence of anti-passback, the host device 1 generates anti-passback for the authorized person who has generated the anti-passback this time. The possibility level is estimated (s63, s64). For example, the estimation is performed at three levels of high, medium, and low. This level is estimated based on the number of times that anti-passback has occurred in the past, the frequency of occurrence (hereinafter referred to as period frequency), and the like. For example, if the cumulative number of occurrences is 10 times (corresponding to the second number in the present invention) or more, it is determined as a high level, and the cumulative number of occurrences is five (corresponding to the first number in the present invention). If it is above, it is determined to be a medium level, and if the cumulative number of occurrences is less than 5, it is determined to be a low level. In addition, the cumulative number of occurrences may be reset when no anti-passback is generated for a predetermined period such as half a year or one year. The cumulative number of occurrences of this anti-passback is registered in the entrance / exit qualification database 17.

  If the host device 1 determines that the level is low in s64, it is notified by e-mail that an anti-passback has occurred for the permitter's mobile phone 6 associated with the ID of the card 9 used this time. Transmit (s65, s66). The e-mail address of the permitter's mobile phone 6 is registered in the contact database 18. FIG. 11A shows an example of a display screen on the mobile phone 6 that has received the e-mail sent by the host device 1 in s65. The permitter can check when and where the anti-passback has occurred by viewing this e-mail. Further, the e-mail is associated with a contact address for responding to the anti-passback notified this time. Therefore, the permitter can quickly respond to the notification when the occurrence of the anti-passback is notified. Processing related to the response of the permitter will be described later.

  If the host device 1 determines that it is at the middle level in s64, the electronic device indicates that an anti-passback has occurred for the permitter's mobile phone 6 associated with the ID of the card 9 used this time. It transmits by mail (s67, s68). In s68, a message warning that there are many occurrences of anti-passback is added to the email sent (see FIG. 11B). In other words, a permitter with a relatively high occurrence of anti-passback is cautioned by attaching a warning message. Further, when the host device 1 determines that the level is high in s64, the electronic device indicates that an anti-passback has occurred for the permitter's mobile phone 6 associated with the ID of the card 9 used this time. It transmits by mail (s69, s70). In s70, not only a message that warns that anti-passback is frequently generated in the e-mail to be sent, but also that the supervisor of the permitter needs to be approved to cancel the anti-passback described later. A message to be notified is also added (see FIG. 11C). When the host device 1 transmits an e-mail to the permitter's mobile phone 6 in s70, the host device 1 transmits the e-mail to the boss of the permitter (s71). The e-mail address of the supervisor of the permitter is registered in the contact database 18.

  In addition, the host device 1 determines that the electronic lock 3 is determined to be unlocked for reasons other than the use of the above-described invalid card or anti-passback, for example, to enter a room where the card 9 is not permitted. If it is used, an e-mail is sent to the permitter's mobile phone 6 as to why the electronic lock 3 is determined to be unlocked (s72).

  Since the host device 1 transmits an e-mail to the mobile phone 6 owned by the permitter, the electronic lock 3 is used in the use of the card 9 to the permitter corresponding to the ID of the card 9 used this time. The reason why it is determined that unlocking is possible can be communicated. The authorized person who has confirmed the e-mail from the host device 1 notices that the card 9 is lost or stolen or if there is a counterfeit card if he / she is in a completely different place. Can take action. On the other hand, the permitter can take action corresponding to his / her own action.

  When the permitter accesses the response destination (here, the host device 1) associated with the electronic mail transmitted from the host device 1 to the mobile phone 6, an anti-passback is displayed on the display unit of the mobile phone 6. A screen for selecting whether to make a response for cancellation or to report to the security room is displayed (see FIG. 12A). Here, when the permitter wishes to cancel the anti-passback, the permitter performs an input operation for selecting cancellation of the anti-passback. When the card 9 is lost or stolen, or when it is noticed that there is a counterfeit card, an input operation for selecting a report to the security room is performed. When the permitter makes this selection, a password input screen is displayed on the display unit of the mobile phone 6 (see FIG. 12B). The authorized person further inputs a password. The password is entered twice and is valid only when the two entered passwords match. The content input by the permitter using the mobile phone 6 is received by the communication unit 14 of the host device 1 which is a response destination.

  When the host device 1 receives the response in s32, if the content of the response received this time is cancellation of anti-passback, the host device 1 performs processing related to cancellation of anti-passback (s38, s39). FIG. 13 is a flowchart according to the anti-passback cancellation process. The host device 1 determines whether or not the password is appropriate for the authorized person who performs the anti-passback cancellation process this time (s81). If it is determined here that the password is inappropriate, the fact is notified to the security room (s82). As a result, when a person who does not know the password uses the mobile phone 6, this is notified to the security room. Thus, just as if the invalid card was used, the security guard can respond quickly when receiving this communication at the security room.

  When determining that the password is appropriate in s81, the host device 1 determines whether or not the possibility level of occurrence of the anti-passback estimated in s64 is high (s83). If the host device 1 is not at a high level, that is, if it is at a low level or an intermediate level, the host device 1 performs processing related to the release of anti-passback (s84). In s84, for example, a pseudo record of entry / exit history related to the entry / exit history is created and registered in the entry / exit history database 16. For example, when the permitter has entered the room 2 together, a pseudo record of entry / exit history indicating that the permitter has entered the room 2 is created and registered in the entry / exit history database 16. Further, the host device 1 increments the number of occurrences of anti-passback of the corresponding ID stored in the entry / exit qualification database 17 in s84. When the processing relating to s84 is completed, the host device 1 transmits an e-mail notifying the completion of the processing to the permitter's mobile phone 6 from the communication unit 14 (s85).

  The permitter recognizes that the anti-passback has been canceled by receiving the e-mail with the mobile phone 6. Thereafter, the permitter can enter and leave the room 2 by causing the reader 5 to read the ID of the card 9 again.

  If the host device 1 determines that the level is high in s83, the host device 1 determines whether the release of the current anti-passback has been approved by the supervisor of the permit (s86). If the host device 1 determines that the supervisor has not approved in s86, the host device 1 transmits an e-mail indicating that the supervisor is waiting for approval to the permitter's mobile phone 6 (s87). Thereafter, when the approval of the supervisor of the permitter is obtained (s88), processing relating to s84 and s85 is performed. As described above, the host device 1 communicates with the boss of the permitter about the high level permitter to notify the occurrence of the anti-passback. By receiving a response to this communication at the communication unit 14, it is determined that the approval of the supervisor of the permitter has been obtained.

  As described above, the permitter who is highly likely to generate the anti-passback is not released until the approval of the supervisor is obtained. Therefore, the high level permitter will act carefully to prevent future anti-passbacks. As a result, the frequency of occurrence of anti-passback in the entire system can be suppressed, and as a result, security can be improved.

  As described above, in the entrance / exit management system of this embodiment, when an anti-passback occurs, the permitter can perform an operation for releasing the anti-passback. There is no need to specifically arrange the operator to perform. Therefore, the cost for operating the system can be reduced.

  Further, since the host device 1 is configured to notify the permitter's mobile phone 6 of the occurrence of an anti-passback, the permitter can quickly recognize the loss or theft of the card 9 or the presence of a forged card. In addition, it is possible to quickly respond when the card 9 is lost or stolen, or when the presence of a counterfeit card is noticed. Thereby, the security of the entrance / exit management system can be further improved. Further, there is no need to place a telephone in each room 2, and the cost for system construction can be reduced.

  In the above-described embodiment, the case where notification to the permitter's mobile phone 6 is performed by e-mail has been described as an example. However, the automatic phone response system is used to call and notify the mobile phone 6. It may be configured.

  If the response received by the communication unit 14 is the card 9 lost or stolen, or if a counterfeit card is present (reported to the security room), the host device 1 loses the ID of the card 9 and the security room serves as a stolen card. And the ID is registered in the negative database 19 (s40, s41). As a result, security against the use of a lost or stolen card can be improved. Further, when receiving a response other than these, the host device 1 performs processing (other processing) in accordance with the received response (s42).

  Furthermore, the permitter may access the host device 1 and make some application to the host device 1 even when the e-mail from the host device 1 is not received. For example, the host device 1 may be able to make a registration application for loss or theft of the card 9 or an application for forgetting the card 9 from the mobile phone 6. Specifically, the host device 1 may make the application possible by publishing the processing application page on the Internet and accessing the page with the mobile phone 6. FIG. 14A shows an example of a display screen of the mobile phone 6 accessing this page. The permitter accesses this page with the mobile phone 6, selects the application content, and enters the selected application by inputting the ID, department code, and password on the screen shown in FIG. That is, the mobile phone 6 transmits the selected application content, ID, department code, and password to the host device 1. The host device 1 performs processing related to the application transmitted from the mobile phone 6. When the processing related to the application is completed, the host device 1 transmits an e-mail notifying the completion of the processing to the mobile phone 6. FIG. 14C shows an example of a display screen of the mobile phone 6 that has received this e-mail.

  In this manner, the card 9 can be registered as an invalid card before the authorized person lost or stolen is used illegally. As a result, the security against the use of the lost or stolen card can be further improved. In addition, an authorized person who has forgotten the card 9 at home or the like from the mobile phone 6 may request the host device 1 to issue a temporary card. In this way, an appropriate response can be taken even for an authorized person who has forgotten the card 9 at home. In addition, about a temporary card, the fall of security is suppressed by restricting the validity period to 1 day etc., and being issued.

  Further, if the mobile phone 6 is configured to incorporate a non-contact medium, the mobile phone 6 may be used instead of the card 9. If it does in this way, the effort concerning the issue of a temporary card can be reduced. In this case, the ID of the non-contact medium built in the mobile phone 6 may be registered in the entrance / exit qualification database 17 in advance.

  As described above, according to this embodiment, it is possible to reduce the manpower required to operate the system without lowering the security of the system, and to reduce the operation cost. In addition, when an invalid card is used, the security room is immediately contacted, so that the response when the invalid card is used can be smoothly performed. Further, when the user notices that the card 9 is lost or stolen, it can be registered as an accident card immediately, and security against unauthorized use of the lost or stolen card can be sufficiently secured.

It is a figure which shows the entrance / exit management system concerning embodiment of this invention. It is a figure which shows the structure of the principal part of the host apparatus in the entrance / exit management system of this embodiment. It is a figure which shows the various databases which the host apparatus in the entrance / exit management system of this embodiment memorize | stores. It is a figure which shows the structure of the principal part of the electronic lock control apparatus in the entrance / exit management system of this embodiment. It is a figure which shows the structure of the principal part of the reader in the entrance / exit management system of this embodiment. It is a flowchart which shows operation | movement of the reader in the entrance / exit management system of this embodiment. It is a flowchart which shows operation | movement of the electronic lock control apparatus in the entrance / exit management system of this embodiment. It is a flowchart which shows operation | movement of the host apparatus in the entrance / exit management system of this embodiment. It is a flowchart which shows the determination process of the host apparatus in the entrance / exit management system of this embodiment. It is a flowchart which shows the contact processing of the host apparatus in the entrance / exit management system of this embodiment. It is a figure which shows the example of a display screen of the mobile telephone 6 which received the email. It is a figure which shows the example of a display screen of the mobile telephone 6 which received the email. It is a flowchart which shows the cancellation | release process of the anti-passback of the host apparatus in the entrance / exit management system of this embodiment. It is a figure which shows the example of a display screen of a mobile telephone.

Explanation of symbols

1-host device 2-room 3-electronic lock 4-electronic lock control device 5-reading device 6-mobile phone 9-card

Claims (6)

Identification information reading means for reading identification information stored in the medium; and
The identification information reading means has identification information output means for outputting identification information read from a medium, and is arranged on both sides of a door provided at the entrance / exit of the management area, and a reading device,
An electronic lock control device having an electronic lock provided on the door, an unlocking means for unlocking, and an unlocking means;
As determination information used for determining whether the electronic lock can be unlocked, invalid medium determination information used for determining whether the medium is an invalid medium from identification information of the medium, and identification information related to entering / exiting the management area Determination information storage means for storing the traffic history information in which the history is registered,
Determination for acquiring identification information read by the identification information reading unit of the reading device, and determining whether the electronic lock can be unlocked with respect to the identification information acquired this time using the determination information stored in the determination information storage unit means,
Determination result notification means for notifying the electronic lock control device of the determination result of the determination means;
For each identification information, when the determination means determines that the electronic lock is unlocked or not, contact information storage means for storing contact information for registering a contact for each reason determined to be unlocked, and
When the determination means determines that the electronic lock is unlocked, the contact information stored in the contact information storage means is used to unlock the electronic lock for the corresponding contact. A host device having a contact means for notifying that it has been determined,
Entrance / exit management system with In the host device,
The contact information stored in the contact information storage means is information in which a portable terminal having a wireless communication function is registered as a contact when the reason for determining that the electronic lock is unlocked is anti-passback. The entrance / exit management system according to claim 1. The host device further includes:
When a response to the contact is received from the contact that has notified that the contact means has determined that the door is unlocked, a validity determination unit that determines the validity of the response; and
The entrance / exit management system according to claim 1 or 2, further comprising response processing means for performing processing requested by the response when the validity determination means determines that the received response is valid. In the host device,
The determination information storage means stores, for each identification information, anti-passback occurrence information indicating an anti-passback occurrence history,
When the reason for determining that the electronic lock is unlocked is anti-passback, the contact means has an anti-passback occurrence number exceeding the first predetermined number in the identification number for this determination. The entrance / exit management according to any one of claims 1 to 3, which is means for notifying that the electronic lock is unlocked by attaching a message warning that anti-passback often occurs. system. In the host device,
When the reason for determining that the electronic lock is unlocked or not is anti-passback, the contact means determines in advance that the number of occurrences of anti-passback in the identification number for this determination is greater than the first number. The entrance / exit management system according to claim 4, which is means for contacting a plurality of contacts that the electronic lock is determined to be unlocked if the second number of times is exceeded. In the host device,
The entrance / exit management system according to any one of claims 1 to 5, wherein the contact means is means for performing transmission of an e-mail associated with a response destination when responding to a contact content or call by an automatic telephone response. .

Images