JP2008208580A - Entrance/exit management system - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a system which enables a user to continue to use a card as usual, even if information on a present location does not correspond to his/her actual present one because the user does not get into a specific area, for example, by taking notice of leaving a thing behind, after he/she is authenticated and a door is unlocked. <P>SOLUTION: This entrance/exit management system comprises a first authentication device 2-1 which authenticates the user when he/she gets into a second area B from a first one A, and a second authentication device 2-3 which authenticates the user when he/she gets into a third area C from the first area A. The first and second authentication devices are connected together via a network 5. The first authentication device authenticates the user when he/she gets into the second area from the first one, and transmits information, indicating that the he/she does not get into the second area, to the second authentication device. The second authentication device authenticates the user on the basis of the information when he/she gets into the third area from the first one. <P>COPYRIGHT: (C)2008,JPO&INPIT

Description

  The present invention relates to an entrance / exit management system for managing entry / exit of a user to / from a specific area.

  2. Description of the Related Art Conventionally, when a user enters and exits a specific area, a system is used that authenticates whether or not the user is a valid user by an authentication device.

  Here, when one user is authenticated, another user passes through the door together without authenticating. In order to deal with the problem of “companion”, the current location is placed in the card owned by the user. There is known a method of writing and updating the current location information in the card at the time of authentication (see Patent Document 1). For example, when the legitimate user A enters the specific area, the current location information in the card is rewritten from “outside area” to “specific area”. Therefore, when A leaves the specific area, the current location information in the card matches the actual current location of A, so A can go out of the specific area. On the other hand, since the unauthorized user B who has entered the specific area after A has not been authenticated, the current location information in the card remains “out of area”. Therefore, even if B tries to leave the specific area, B cannot leave the area because the current location information in the card does not match B's actual current location.

Japanese Patent Laid-Open No. 2005-146652

  According to Patent Document 1, a problem occurs when a user does not enter a specific area after authentication. In other words, the current location information in the card is updated to the “specific area” when authentication is successful when the user holds the card, so the user did not enter the specific area because he noticed something left behind after unlocking the door. In this case, the current location information in the card does not match the actual user's current location, so that it is considered that an illegal movement has been performed.

  Accordingly, an object of the present invention is to provide a system that can continue to use the card as usual even when the user does not enter the area after authentication.

  In order to solve the above problems, one of the desirable embodiments of the present invention is as follows.

  A first authentication device that performs authentication when a user enters the second area from the first area, and a second authentication device that performs authentication when the user enters the third area from the first area. In the entrance / exit management system in which the first and second authentication devices are connected via a network, the first authentication device performs authentication when the user enters the second area from the first area, and , Information indicating that the user has not entered the second area is transmitted to the second authentication device, and the second authentication device receives the information when the user enters the third area from the first area. Based on the above, the user is authenticated.

  According to the present invention, it is possible to provide a system that can continue to use the card as usual even when the user does not enter the area after authentication.

  Hereinafter, an embodiment of an entrance / exit management system will be described with reference to the drawings.

  FIG. 1 is a configuration diagram of an entrance / exit management system.

  The entrance / exit management system includes a living room 1 (1-1, 1-2), an authentication device 2 (2-1, 2-2, 2-3, 2-4), and a movement detection device 3 (3-1, 3- 2), the door 4 (4-1, 4-2), and the network 5 (LAN, serial cable, etc.), and the authentication device 2 and the movement detection device 3 are connected via the network 5. The authentication devices 2-1 and 2-3 are respectively installed at the door 4-1 and the door 4-2 for entrance of the living room 1-1 and the living room 1-2, respectively. 4 are respectively installed in the doors 4-1 and 4-2 for exits to the living rooms 1-1 and 1-2. The movement detection device 3 is installed in each door and detects whether or not the authenticated person has passed through the door using a camera, a sensor, or the like. The authentication devices 2-1 and 2-3, 2-2 and 2-4 may be the same authentication device. In that case, one authentication apparatus is composed of two card readers and one processing apparatus. Further, the authentication device 2 may have the function of the movement detection device 3.

  FIG. 2 is a hardware configuration diagram of the authentication device 2.

  The authentication device 2 includes a CPU 201, a main memory 202, an EPROM 203 for storing a boot program, a peripheral control device 204, a nonvolatile storage device 205 (magnetic disk, FROM, etc.), a LAN I / F 206, an RTC (real time) for acquiring the current time Lock) 207, an electronic lock I / F 208 connected to the electronic lock 212, a movement detection device I / F 209 connected to the movement detection device 3, and a card reader I / F 210 connected to the card reader 214, These are connected via a communication line such as the internal bus 211. Note that the number of I / Fs is not limited, and increases or decreases according to the number of authentication devices and control target devices.

  After the authentication device 2 is activated, the CPU 201 executes a boot program, loads the OS kernel from the storage device 205 to the main memory 202, and activates the OS. Then, a program for controlling the authentication device 2 is executed.

  The storage device 205 includes a device control unit that controls the electronic lock 212, the movement detection device 213, and the card reader 214, a program such as a movement status notification unit that notifies other devices of the movement status of the user, and a card management table. (FIG. 3) and data such as an area ID table (FIG. 4) are stored.

  FIG. 3 is a diagram illustrating an example of a card management table.

  The card management table is used as authentication information when a card ID 31, which is an identifier for uniquely identifying a card, an exception processing flag 32 indicating whether or not to perform exception processing at the time of card authentication, and exception processing is performed. Area ID33. Note that “0” in the “exception processing flag” indicates that exception processing is not performed during card authentication, and “1” indicates that exception processing is performed.

  FIG. 4 is a diagram illustrating an example of the area ID table.

  The area ID table includes a belonging area ID 41 that is an identifier for uniquely identifying an area where the authentication device is installed, and an after-passing area ID 42 that is an identifier for uniquely identifying an area after passing through the door.

  FIG. 5 is a flowchart of the entrance / exit management system.

  First, when the user holds the card over the authentication device 2, the authentication device 2 reads the card ID and the area ID stored in the card (step 501).

  Next, the authentication device 2 determines whether or not there is a card ID that matches the read card ID in its own card management table (step 502). If it is determined that the card is not a card, the process ends. If there is a match, it is determined whether an exception processing flag corresponding to the card ID is set (“1”) or not (“0”). (Step 503). When the exception processing flag is “0”, the own area ID is read from the area ID table, and the area ID read is compared with the area ID read in step 501 to determine whether or not they match ( Step 504). If they do not match, it is considered that the held card has been illegally moved due to a companion or the like, a penalty such as suspension of use is given to the card (step 506), and the process is terminated. If they match, the area ID after passing through the area ID table is written in the card (step 507), the door is unlocked (step 508), and the movement detection device 3 is activated (step 509).

  If the exception processing flag is “1” in step 503, the area ID is read from the card management table, the area ID is compared with the area ID read in step 501, and it is determined whether or not they match (step 503). Step 505). If they match, the process proceeds to step 507, and if they do not match, the process ends as an invalid card.

  The movement detection device 3 determines whether or not the authenticated user passes through the door (step 510). If the user has passed, the movement detection device 3 transmits “OK” to the authentication device 2 (step 511). , "NG" is transmitted (step 515).

  Upon receiving “OK”, the authentication device 2 checks whether or not the exception processing flag in step 503 is “0” (step 512). If it is “0”, the processing is terminated. If it is “1”, the card ID is transmitted to another authentication device 2 (step 513), and the exception processing flag corresponding to the card ID in the card management table is changed from “1” to “0”. The ID is updated to “null” (step 514), and the process is terminated.

  Upon receiving “NG”, the authentication device 2 checks whether or not the exception processing flag in step 503 is “0” (step 516). If it is “0”, the card ID and area read from the card are checked. The ID is transmitted to the other authentication device 2 (step 517), and the exception processing flag corresponding to the card ID in the card management table is updated from “0” to “1”, and the area ID is updated to the received area ID. (Step 518), the process ends. If it is “1”, the process is terminated.

  FIG. 6 is a flowchart of the authentication apparatus when data is transmitted from another authentication apparatus.

  First, when the authentication device 2 receives data including a card ID from another authentication device 2 (step 61), the authentication device 2 determines whether or not an area ID is included in the data (step 62). If the area ID is included, it indicates that the user has not passed the door to the area after authentication, and the exception processing flag corresponding to the received card ID in the card management table is set to “1”. The ID is updated to the received area ID (step 63). If the area ID is not included, it indicates that the current location information of the card has returned to normal (the area ID in the card matches the area ID of the user's actual current location). The exception processing flag corresponding to the card ID is updated to “0” and the area ID is updated to “null” (step 64).

  Next, the flow of FIG. 5 will be described using a specific example.

In FIG. 1, a living room whose area ID is “Area B” and a living room whose area ID is “Area C” are adjacent to a passage whose area ID is “Area A”. There is a legitimate user in the aisle who owns the card. In this case, the following patterns (1) to (4) are assumed.
(1) The user holds the card in which “Area A” is written over the authentication device 2 and enters the room 1-1.
(2) The user holds the card in which “Area A” is written over the authentication device 2 but does not enter the room 1-1.
(3) After (2), the card written as “Area B” is held over the authentication device 2 and enters the room 1-2.
(4) After (2), the card written as “Area B” is held over the authentication device 2 but does not enter the room 1-2.

  In the case of (1), the authentication device 2-1 reads the card ID and the area ID (“area A”) from the user's card (step 501). In this case, a card ID that matches the read card ID exists in the card management table (step 502), and the exception processing flag is “0” (step 503). Since the authentication device 2-1 exists on the passage side, the belonging area described in its own area ID table is “area A”. Therefore, the area ID read from the card matches the affiliation area ID of the area ID table (step 504). Since the previous room that passed through the door 4-1 is “Area B”, the area ID after passage described in the area ID table is “Area B”. Therefore, the authentication device 2-1 writes the post-passage area ID (“area B”) in the area ID table on the card (step 507), unlocks the door (step 508), and moves the movement detection device 3-1. Start (step 509). In this case, since the user passes through the door (step 510), the movement detection device 3-1 transmits “OK” to the authentication device 2-1 (step 511), and the authentication device 2-1 performs exception processing. It is confirmed that the flag is “0” (step 512), and the process is terminated.

  In the case of (2), since the authenticated user does not pass through the door (step 510), the movement detection device 3-1 transmits “NG” to the authentication device 2-1 (step 515). In this case, since the exception processing flag is “0” (step 516), the authentication device 2-1 assigns the card ID and area ID (“area A”) of the card to the other authentication devices 2-2 to 2-2. 4 (step 517). Then, each of the authentication devices 2-1 to 2-4 sets the exception processing flag corresponding to the card ID in its own card management table to “1” and updates the area ID to “area A” (step 518). 63).

  In the case of (3), the authentication device 2-3 reads a card ID and an area ID (“area B”) from the card (step 501). Here, in step 518 in the case of (2), the exception processing flag is updated to “1” (step 503). Therefore, instead of the area ID in the card, the area ID of the card management table (“area A” in step 518 in the case of (2)) is assigned to the area ID of the area ID table (“area A”). ) (Step 505). Since both IDs match, the post-passage area ID (the post-passage area ID is “area C” because the previous room that passed through the door 4-2 is “area C”) is written in the card (step 507). . Thereafter, since the authenticated user passes through the door (step 510), the movement detection device 3-2 transmits “OK” to the authentication device 2-3 (step 511), and the authentication device 2-3 passes. In order to notify the other authentication devices 2 that the current location information of the card has returned to normal, the card ID of the card is transmitted to the authentication devices 2-1, 2-2, 2-4, and the authentication devices 2-1 to 2-1 2-4 returns the exception processing flag of the card ID to “0” and updates the area ID to “null” (steps 514 and 64).

  In the case of (4), since the authenticated user has not passed through the door (step 510), “NG” is transmitted to the authentication device 2-3 (step 515), and the authentication device 2-3 has the exception processing flag “ 1 "(step 516), the process is terminated.

The block diagram of an entrance / exit management system. The hardware block diagram of an authentication apparatus. The figure which shows an example of a card management table. The figure which shows an example of an area ID table. System flow diagram. The flowchart of an authentication apparatus when data are transmitted from another authentication apparatus.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 ... Living room, 2 ... Authentication apparatus, 3 ... Movement detection apparatus, 4 ... Door, 5 ... Network

Claims (7)

A first authentication device that performs authentication when the user enters the second area from the first area, and a second authentication device that performs authentication when the user enters the third area from the first area In an entrance / exit management system in which the first and second authentication devices are connected via a network,
The first authentication device performs authentication when the user enters the second area from the first area, and information indicating that the user has not entered the second area, Send to the second authentication device;
The second authentication device is an entry / exit management system that authenticates the user based on the information when the user enters the third area from the first area. The information indicates a card ID for uniquely identifying the user's card and a first area ID for uniquely identifying the first area,
When the second authentication device receives the information from the first authentication device, the second authentication device stores the card ID included in the information in association with the first area ID, and performs exception processing on the card ID. The entrance / exit management system of Claim 1 which raises the flag which shows that.   When performing authentication of the user, the second authentication device determines whether the card ID read from the user's card matches the card ID included in the information. It is determined whether or not the flag is set for the card ID. If the flag is set, it is determined whether or not the first area ID is associated with the card ID The entrance / exit management system according to claim 2, wherein the user is determined to be valid if the user is present.   4. The entrance / exit of claim 3, wherein when the second authentication device determines that the user is valid, the second authentication device writes a second area ID for uniquely identifying the third area on the user's card. Management system.   The second authentication device performs authentication when the user enters the third area from the first area, and when the user enters the third area, the card ID of the user The entrance / exit management system according to claim 4, wherein the third area ID is transmitted to the first authentication device.   The second authentication device performs authentication when the user enters the third area from the first area, and when the user does not enter the third area, The entrance / exit management system of Claim 4 which notifies NG to an authentication apparatus. Authentication that is connected via a network to another authentication device that performs authentication when the user enters the third area from the first area, and performs authentication when the user enters the second area from the first area In the device
Authentication is performed when the user enters the second area from the first area, and information indicating that the user has not entered the second area is transmitted to the other authentication device. Means,
Authentication is performed when the user enters the third area from the first area, and information indicating that the user has not entered the third area is received from the other authentication device. An authentication device comprising means.

Images