JP2008176493A - Equipment access management system - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an equipment access management system capable of preventing equipment from being illicitly accessed. <P>SOLUTION: An information storage medium includes a storage means for storing authentication information. A building entrance/exit management apparatus includes a means for reading the authentication information, an authentication processing means for processing the read authentication information, a means for controlling user's entrance in an available state when authentication is received, and a means for writing entrance information in the storage means of the information storage medium. A room entrance/exit management apparatus includes a means for reading the entrance information from the information storage medium, an entrance information authentication processing means for the entrance information, a means for controlling user's entrance in an available state when the authentication is received by the entrance information authentication processing means, and a means for writing room entrance information in the storage means of the information storage medium. The equipment includes a means for reading the room entrance information from the information storage medium, a room entrance information authentication processing means for the read room entrance information, and a means for controlling the equipment in a usable state when the authentication is received. <P>COPYRIGHT: (C)2008,JPO&INPIT

Description

  The present invention relates to a device access management system for preventing a device such as a personal computer provided in a room in a building from being illegally accessed by a third party who does not have usage rights.

  Conventionally, when a device such as a personal computer is illegally accessed by a third party who does not have usage rights, there is a risk that personal information or confidential information will be leaked, or that data will be altered, destroyed, or deleted Various techniques for preventing such unauthorized access have been developed and are publicly known. (For example, see Patent Documents 1 to 5)

JP-A-5-176374 JP-A-10-301655 JP 2001-27911 A JP 2006-293508 A JP 2006-309281 A

For example, in a company that uses a company building with many rooms in a building such as a high-rise building, entrance management using an employee ID card is performed at the entrance and exit when entering the building. In order to unlock the door when entering the room, the entrance management using the employee ID card is performed.
In this way, in order to prevent internal crimes and strengthen security measures, employees cannot enter rooms that are not related to their work even if they are employees.

However, in the conventional technology for preventing unauthorized access, there is a system that effectively uses a management system that combines entrance management when entering a building as described above and entrance management when entering an individual room. The current situation has not been proposed.
Therefore, it takes a technical burden and cost to add a new complicated technology and system to the device to prevent unauthorized access, and a system that prevents unauthorized access cannot be easily introduced. There was a problem.

  Therefore, the present invention uses the building entrance / exit management device provided at the entrance of the building and the room entrance / exit management device provided at the entrance of the room provided in the building, Provided is a device access management system that can prevent unauthorized access to a device by a third party who does not have the authority to use the device without incurring costs as much as possible.

  In order to achieve the above object, the device access management system of the present invention includes a building entrance / exit management device provided at the entrance of a building and a room entrance / exit management provided at the entrance of a room provided in the building. A device access management system comprising an apparatus, a device placed in the room, and an information storage medium possessed by a user of the device, wherein the information storage medium stores storage information for authentication The building entrance / exit management device is authenticated by the means for reading authentication information from the information storage medium, the authentication processing means for performing authentication processing based on the read authentication information, and the authentication processing means. The room entry / exit management device includes a means for controlling entry of the user to a possible state and a means for writing entry information in the storage means of the information storage medium. Means for reading admission information from a storage medium, admission information authentication processing means for performing authentication processing based on the read admission information, and entry of the user when authentication is received by the admission information authentication processing means And a means for writing the entry information into the storage means of the information storage medium, and the device performs an authentication process based on the read entry information and a means for reading the entry information from the information storage medium. And a means for controlling the device to be usable when authentication is received by the room information authentication processing means.

  Further, in the equipment access management system of the invention, the building entrance / exit management device has means for erasing the entrance information stored in the storage means of the information storage medium possessed by the user exiting from the entrance of the building. It is characterized by.

  Further, in the device access management system of the invention, the room entrance / exit management device has means for erasing the room entrance information stored in the storage means of the information storage medium possessed by the user exiting from the entrance / exit of the room. It is characterized by.

  Therefore, the device access management system of the present invention is authenticated by the building entrance / exit management device provided at the entrance of the building and the room entrance / exit management provided at the entrance of the room provided in the building. Since it is systemized so that devices in the room can be used only when two authentications have been received by the device, technologies such as adding new complex technologies and systems There is an effect that it is possible to prevent the device from being illegally accessed by a third party who does not have the usage authority without incurring a burden or cost.

  In the device access management system of the present invention, the building entry / exit management device deletes the entry permission information stored in the storage means of the information storage medium possessed by the user exiting from the entrance of the building. Since it is impossible to read what information is used from the information storage medium taken outside, it is possible to prevent unauthorized access to the device by making counterfeit information storage media. There is an effect that can be.

  In the device access management system of the present invention, the room entry / exit management device deletes the room entry permission information stored in the storage means of the information storage medium possessed by the user leaving the room entrance / exit. Since it is impossible to read what information is used from the information storage medium taken outside, it is possible to prevent unauthorized access to the device by making counterfeit information storage media. There is an effect that can be.

Hereinafter, a device access management system according to an embodiment of the present invention will be described in detail with reference to the drawings.
FIG. 1 is a diagram illustrating an outline of a device access management system according to an embodiment of the present invention, FIG. 2 is a block diagram illustrating a system configuration of the device access management system according to the embodiment of the present invention, and FIG. It is a flowchart figure which shows the process sequence of the apparatus access management system which concerns on embodiment of this invention.

The apparatus access management system according to the embodiment of the present invention includes a building entrance / exit management device 2 provided at the entrance of the building 1, a room entrance / exit management device 4 provided at the entrance of the room 3 in the building 1, A personal computer 5 which is a device placed in the room 3 and an IC card 7 which is an information storage medium possessed by a user 6 of the personal computer 5 are included.
The building entrance / exit management device 2, the room entrance / exit management device 4, and the personal computer 5, which is a device placed in the room 3, are communicably connected via a communication line 11.
When the user 6 of the personal computer 5 enters the building 1, the user 6 must pass through the opening / closing gate 8 of the building entrance / exit management device 2, and the user cannot use the room 2 provided in the building 1. When entering, the door 9 cannot be opened unless the lock by the room entrance / exit management device 3 is unlocked.

That is, when the opening / closing gate 8 of the building entrance / exit management device 2 is opened, predetermined information stored in the IC card 7 is read by the building entrance / exit management device 2, and authentication is performed by an authentication process based on the predetermined information. If it cannot be received, the gate 8 is opened to prevent entry into the building.
Further, the unlocking of the door 9 by the room entry / exit management device 4 is performed by causing the room entry / exit management device 4 to read predetermined information stored in the IC card 7 and authenticating it by an authentication process based on the predetermined information. If it cannot be received, the door 9 is unlocked so that it cannot enter the room.

Further, when using the personal computer 5 placed inside the room 3, the predetermined information stored in the IC card 7 is read by the IC card reader / writer 10 provided in the personal computer 5, and the predetermined information read is read. When the authentication process is performed with the information in the above, and the authentication is not received, the personal computer 5 cannot be used. In normal conditions, the personal computer 5 cannot be used. Yes.
The use restriction of the personal computer 5 is configured to be switched between a usable state and an unusable state by various known physical mechanisms or systems such as program software.

  Also, in FIG. 1, a user 6 of a personal computer 5 enters the room 1 by opening the door 9 at the entrance / exit of the room 3 provided in the building 1 after entering the building 1. The flow of behavior is shown in which the personal computer 5 placed in the room 1 is used, then the door 9 of the entrance / exit of the room 3 is opened to leave the room, and the exit from the entrance / exit of the building 1 is further exited.

Next, the system configuration of the device access management system according to the embodiment of the present invention will be described with reference to FIG.
First, the non-contact type IC card 7 as an information storage medium is provided with a transmission / reception means 12, a storage means 13, and a control means 14.
The storage means 13 stores in advance authentication information for causing the building entrance / exit management device 2 to read when passing through the open / close gate 8 of the building entrance / exit management device 2.

Next, the building entrance / exit management device 2 includes an entrance IC card reader / writer 15 and an exit IC card reader / writer 16, and further includes an authentication processing means 17, a gate opening / closing control means 18, a storage means 19, and an entrance. Information writing means 20, entrance information erasing means 21, communication means 22, interfaces (I / F) 23, and 24 are provided.
The entrance IC card reader / writer 15 and the exit IC card reader / writer 16 are provided with transmission / reception means 25, 26, storage means 27, 28, control means 29, 30, and interfaces (I / F) 31, 32. ing.

The entrance IC card reader / writer 15 is provided for reading the authentication information stored in the IC card 7 when entering the building 1 from the outside, and the exit IC card reader / writer 16 is It is provided for reading the authentication information stored in the IC card 7 when going outside from the inside.
The authentication processing unit 17 compares the authentication information read from the IC card 7 by the IC card reader / writer 15 for admission with the verification information stored in the storage unit 19 in advance, so that the authentication is performed when the verification matches. It has a function to determine that it has been received.
The gate opening / closing control means 18 has a function of controlling the opening / closing gate 8 to be opened when it is determined that the authentication processing means 17 has received authentication.

When the authentication is received based on the authentication information read from the IC card 7, the entrance information writing means 20 transmits the unique entrance information indicating that the formal authentication procedure has been completed to the entrance IC card reader / writer 15. Thus, it has a function of writing to the storage means 13 of the IC card 7.
The entry information erasure means 21 is a function for erasing the entry information stored in the storage means 13 of the IC card 7 by the exit IC card reader / writer 16 when the user 6 of the personal computer 5 leaves the open / close gate. Have
When exiting, the entrance information is erased from the storage means 13 of the IC card 7, and when entering the building 1 again, the entrance IC card reader / writer 15 again enters the storage means 13 of the IC card 7. If the information cannot be written, the user cannot enter the room 3 after that.

Next, the room entry / exit management device 4 includes communication means 33, entry information writing means 34, entry information erasing means 35, entrance information authentication processing means 36, entrance side transmission / reception means 37, exit side transmission / reception means 38, locking control. Means 39, storage means 40, control means 41 and the like are provided.
The entrance-side transmitting / receiving means 37 is provided on the entrance side when entering from the door 9 of the room 3 in the building 1 and reads the entrance information written when entering from the storage means 13 of the IC card 7 when entering the room. In addition, when authentication based on the entrance information is received, unique entry information indicating that entry is officially permitted is written in the storage means 13 of the IC card 7.
Further, the entrance information authentication processing means 36 performs an authentication process based on the entrance information read from the IC card 7, and when the authentication is received, transmits a signal for unlocking the door by the lock control means 39. .
As a result, the door can be opened to enter the room, and the entry information can be stored in the storage means 13 of the IC card 7.

The room entry information erasure unit 35 has a function of erasing the room entry information stored in the storage unit 13 of the IC card 7 when the user 6 of the personal computer 5 leaves the room.
When leaving the room, the entry information is erased from the storage means 13 of the IC card 7, so that when entering the room 3 again, if the entry information is not written to the storage means 13 of the IC card 7 again, The personal computer 5 cannot be used.

Next, the personal computer 5 includes communication means 42, input means 43, storage means 44, use restriction processing means 45, interface (I / F) 46, room entry information authentication processing means 47, display means 48, and control means 49. It has been.
The IC card reader / writer 10 provided in the personal computer 5 is provided with a transmission / reception means 50, a storage means 51, a control means 52, an interface (I / F) 53, and the like.
When the user 6 of the personal computer 5 uses the personal computer 5, the entrance information authentication processing means 47 performs an authentication process based on the entrance information read from the IC card 7 by the IC card reader / writer 10 and receives the authentication. In such a case, the use restriction processing means 45 performs a process of switching the personal computer 5 to a usable state.
That is, in order to make the personal computer 5 usable, it is necessary that the room entry information is stored in the storage means 13 of the IC card 7 possessed by the user 6 of the personal computer 5.

Next, the processing procedure of the device access management system according to the embodiment of the present invention will be described based on the flowchart shown in FIG.
In the flow chart shown in FIG. 3, as shown in FIG. 1, the user 6 of the personal computer 5 enters the building 1 and enters the room 3 so that the personal computer 5 can be used. The process corresponding to the flow of actions up to is shown.
First, when the user 6 of the personal computer 5 enters the building 1, the building entry / exit management device 2 reads the authentication information stored in the IC card 7. (Step S1)
The building entrance / exit management device 2 performs an authentication process based on the authentication information. (Step S2)
When the authentication is received in this authentication process, the building entry / exit management device 2 writes the entrance information to the IC card 7. (Step S3)
Then, the open / close gate is opened. (Step S4)
Thereby, the user 6 of the personal computer 5 can enter the building 1.

Next, the user 6 of the personal computer 5 entering the building 1 uses an IC card by the entrance side transmission / reception means 37 of the room entrance / exit management device 3 provided on the entrance side of the door 9 of the room 3 where the personal computer 5 is located. 7 is read. (Step S5)
The room entrance / exit management device 3 performs an authentication process based on the read entrance information. (Step S6)
When authentication is received in this authentication process, the room entry / exit management device 3 writes the room entry information into the IC card 7. (Step S7)
Then, the door 9 is unlocked and the door 9 can be opened. (Step S8)
Thereby, the user 6 of the personal computer 5 can enter the room 3.

Thereafter, the user 6 of the personal computer 5 entering the room 3 causes the IC card reader / writer 10 provided in the personal computer 5 to read the room entry information stored in the IC card 7. (Step S9)
The personal computer 5 performs an authentication process based on the read entry information. (Step S10)
When authentication is received in this authentication process, the use restriction of the personal computer 5 is released and the personal computer 5 can be used. (Step S11)
Through the above processing, the user 6 of the personal computer 5 can use the personal computer 5.

Then, when the user 6 of the personal computer 5 ends the use of the personal computer 5 and turns off the personal computer 5, the user 5 is again restricted to a state in which the personal computer 5 cannot be used.
Further, when the user 6 of the personal computer 5 returns, the exit information is erased from the entrance information stored in the IC card 7 by the exit side transmission / reception means 38 of the room entrance / exit management device 3.
Further, when the user 6 of the personal computer 5 leaves the building 1, the exit information stored in the IC card 7 is erased by the exit IC card reader / writer 16 of the building entrance / exit management device 2. .

Through these processes, once the user 6 of the personal computer 5 leaves the building 1 and uses the personal computer 5 again, the personal computer 5 must perform the entry information or the entry information writing process to the IC card 7. 5 cannot be used.
Moreover, since all the entry information and entry information written and stored in the IC card 7 are erased when leaving the building 1, the contents of the entry information and entry information are leaked outside. Security protection is made so that it will not be.

The device access management system according to the present invention is not limited to a personal computer, and can be applied to various devices such as printers, copiers, and telephones installed in a room.
The information storage medium is not limited to an IC card, and various information storage media having the same function can be used.

It is a figure explaining the outline | summary of the apparatus access management system which concerns on embodiment of this invention. It is a block diagram explaining the system configuration | structure of the apparatus access management system which concerns on embodiment of this invention. It is a flowchart figure which shows the process sequence of the apparatus access management system which concerns on embodiment of this invention.

Explanation of symbols

1 building
2 Building entry / exit management device
3 rooms
4 room entrance / exit management device
5 PC
6 PC users
7 IC card
8 Opening and closing gate
9 Door
10 IC card reader / writer
12, 25, 26, 50 Transmission / reception means
13, 19, 27, 28, 40, 44, 51 Storage means
14, 29, 41, 49, 52 Control means
15 IC card reader / writer for admission
16 IC card reader / writer for exit
17 Authentication processing means
18 Gate opening / closing control means
20 Admission information writing means
21 Entry information erasure means
22, 33, 42 Communication means
23, 24, 31, 32, 46, 53 Interface (I / F)
34 Entry information writing means
Entry information erasure means
36 Admission information authentication processing means
37 Entrance side transmission / reception means
38 Outlet side transmission / reception means
39 Locking control means
45 Usage restriction processing means
47 Entry information authentication processing means
48 Display means

Claims (3)

Building entrance / exit management device provided at the entrance of the building, room entrance / exit management device provided at the entrance of the room provided in the building, equipment placed in the room, and user of the equipment A device access management system comprising an information storage medium possessed by
The information storage medium has storage means for storing authentication information,
The building entrance / exit management device includes a unit that reads authentication information from the information storage medium, an authentication processing unit that performs an authentication process based on the read authentication information, and an authentication processing unit that receives authentication. , Means for controlling the entrance of the user to a possible state, and means for writing entrance information in the storage means of the information storage medium,
The room entrance / exit management device is authenticated by means for reading entrance information from the information storage medium, entrance information authentication processing means for performing authentication processing based on the read entrance information, and the entrance information authentication processing means. A means for enabling entry of the user and a means for writing room entry information in the storage means of the information storage medium,
When the device is authenticated by means for reading entry information from the information storage medium, entry information authentication processing means for performing authentication processing based on the read entry information, and entry information authentication processing means, A device access management system comprising: a unit configured to control the device to be usable.   2. The building entrance / exit management device has means for erasing entrance information stored in a storage means of an information storage medium possessed by the user exiting from a building entrance / exit. The device access management system described. 2. The room entry / exit management device includes means for deleting entry information stored in a storage means of an information storage medium possessed by the user exiting from a room entrance / exit. The device access management system described.

Images