JP2010033370A - Entering/leaving management device - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an entering/leaving management device preventing a person other than a card holder from performing an operation by using a card acquired in an unauthorized manner. <P>SOLUTION: When a card that allows a person to enter is used, a shift is made to a password input mode (S30) to confirm whether a card user is the person himself/herself. In the password input mode, control that flickers a digits part of an input target of an input password displaying part is performed, and an instruction is made to show what digit of the password a number to be input from now on is (S31). When the entering/leaving management device detects that the card is touched (S32), whether the card is the same as the card checked in the S30 is checked (S33), and when it is checked that they are same, measurement of a time when the card is touched is started. Even after a password input determination time elapses after the card touch is detected in the S32, whether the card is touched is determined (S35), and when the card does not exist any more, the numerical number of the password of the present input target digit is added by +1 (S36). <P>COPYRIGHT: (C)2010,JPO&INPIT

Description

  The present invention relates to an entrance / exit management device using a contactless IC (Integrated Circuit) card, and inputs information that only the cardholder knows besides reading the card information, so that a person other than the user can enter the card. It is related with the entrance / exit management apparatus which prevents performing operation using.

  In conventional entry / exit management devices using contactless IC cards, in addition to reading card information by card touch operations, as a method of controlling the device by card operations, touch the card multiple times within a certain time. A technique for switching the operation of the entry / exit management device according to the number of touches is known (see Patent Document 1).

  That is, in Patent Document 1, an operation card is touched at least once within a predetermined time in order to switch between locking / unlocking of doors and switching of a warning mode by an entrance / exit management device, and the card operation is determined from the number of touches. Disclosure of identifying an operation content that a person is trying to execute.

  Although it is possible to determine the operation content that the card user is trying to execute from the content disclosed in Patent Document 1, it is not possible to determine whether or not the card user is a legitimate card holder.

However, a well-known technique for determining that a card user is a legitimate card holder is to have the device enter a PIN that is known only to the card user. An ATM (Automatic Tellers Machine) is known as an example of an apparatus employing such a method. Therefore, the operation of the entrance / exit management device shown in FIG. 7 is configured by simply introducing the well-known password input device into the entrance / exit management device using the non-contact IC card to be improved by the present invention. -It is a figure which shows schematic structure of a display part. In FIG. 7, when a card (not shown) is placed on the card touch antenna unit 101, the operation / display unit 100 of the entry / exit management device requests the card user to input a personal identification number (PIN), When a card user enters a password using the numeric keypad 102, the entered password is displayed on the entered password display 103, and at the same time, the card that uses the password entered by the system (not shown) is supported. If it corresponds to the card used, it can be determined that it is the legitimate cardholder who knows the password.
JP-A-10-124634

  Like the operation / display unit 100 of the entrance / exit management device shown in FIG. 7, the numeric keypad 102 is provided as an input device for inputting the password, or a touch panel (not shown) is used instead of the numeric keypad. ), There is a problem that the entrance / exit management device is too limited in terms of installation space and cost.

  Therefore, an object of the present invention is to provide a new special input device in an entrance / exit management device using a non-contact IC card in order to prevent operations other than the card owner from using the card illegally obtained. It is an object of the present invention to provide an entrance / exit management apparatus capable of inputting information for identifying an individual card user corresponding to a password without providing a password.

  In order to solve the above-described problems, one aspect of the present invention is an entry / exit management apparatus that reads out information recorded in a contactless IC card and determines the contents of the card user by determining the contents thereof. Communication means for communicating with the card via an antenna unit, display means for displaying an input digit of a personal identification number to be inputted and a number inputted in the digit, and control of the display in the display means Display function control means for controlling the communication function, and central processing means for controlling the display function control means, respectively. The central processing means is based on a combination of the number of times the card is touched and the touch time. The card user is provided with a card owner judging means for judging whether or not the card user is an authorized card owner. In that case, when it is determined that the card user is an authorized card user, it is desirable to permit the operation permitted to the card user as an operation related to the entrance / exit control. Furthermore, when it is determined that the card user is an authorized card user, it is desirable to permit the operation permitted to the card user as a setting operation related to entrance / exit management.

  As another mode, the touch operation of the card is used for the input operation of the security code, and each time the card touch operation is performed on the entry / exit management device, the digits of the security code to be displayed are sequentially integrated, and the touch time If the password is long, it is determined that there is an intention to confirm the displayed digit number, and then the card touch operation is performed again to determine that the next digit of the security code has been input. By repeating the above, it is possible to input a password without providing a special input device for inputting the password.

  As yet another aspect, the operation determination timing based on the touch time length can be set as a parameter, and the setting value can be set to match the individual timing of the user according to the operation tendency of the user.

  According to the present invention, in an entrance / exit management device using a non-contact IC card, a person other than the card owner illegally operates without providing a special input / output device other than the card communication function and the display function for communicating with the card. When an attempt is made to enter the prohibited entry area using a card, it is possible to restrict entry other than the card owner by requesting a PIN number that only the card owner can know. Alternatively, when a person other than those authorized to perform regular entry / exit management device settings attempts authentication using a card for setting operations and attempt to change the device settings, the operation should be similarly restricted. Is possible.

  In addition, it is possible to set the touch timing according to the user's proficiency in the password input operation, so entry / exit management can be performed while preventing the user's convenience from being hindered and the cost of the device from being increased by adding functions It becomes possible to improve the security of the system.

Hereinafter, embodiments of the present invention will be described with reference to the drawings.
FIG. 1 is a schematic diagram showing a configuration of an operation / display unit of a contactless IC card entrance / exit management device according to an embodiment of the present invention.

  As shown in FIG. 1, the operation / display unit of the contactless IC card entry / exit management device according to the embodiment of the present invention is a card touch antenna that communicates with a contactless IC card (not shown) that performs a touch operation. Unit 22 and an input code number display unit 23 for displaying the code number input by the card touch operation. The configuration shown in FIG. 1 is merely an example, and the positional relationship between the card touch antenna unit 22 and the display unit 23 is not limited to this example. The same applies to FIG. 2 shown in this specification.

  FIG. 2 is a diagram showing an example of the internal functional configuration of the contactless IC card entrance / exit management device according to the embodiment of the present invention. In FIG. 2, a contactless IC card entrance / exit management device 20 according to an embodiment of the present invention includes a reader / writer (R / W) 21 for communicating with a contactless IC card, and an associated device. An antenna unit 22 for performing wireless communication with the user card 10 to be displayed, a display device 23 for displaying the input personal identification number (PIN), a control unit 24 for its display function, and the entrance / exit management device The communication control unit 25 and its connection I / F 26 when linking with a host device such as a server that integrates a system such as an entry / exit management system server, and a door control unit that is locked and unlocked by the entry / exit management device Connection I / F 27 and its control unit 28, a CPU (Central Processing Unit) 29 and program memory 30 for controlling the entire entrance / exit management device, and a data memory 31 for storing setting data, recording information, etc. Has been.

  FIG. 3 is a diagram illustrating a first operation sequence example for explaining the operation of the contactless IC card entrance / exit management device according to the embodiment of the present invention. That is, the first operation sequence example shown in FIG. 3 assumes entry / exit management operation in which the door is locked and unlocked by a combination of the user's card touch and the touch time, and entrance by card is assumed. The operation will be described as an example.

  When a card user tries to enter the entrance / exit management area, when the user touches the card touch antenna unit 22 with the card 10 used for entrance / exit management, the entrance / exit management device 20 is necessary for entrance / exit management in the card. Information is read and checked, and it is determined whether the card is permitted to enter. These processes can be realized by using the R / W 21, CPU 29, program memory 30, and data memory 31 of the entrance / exit management device 20. Note that the determination method in this case is not the subject of the present invention, but for example, the CPU 29 reads the card ID (Identification: individual identification) or the user ID recorded in the card, and the ID permits entry. For example, the ID is compared with a list of permission IDs recorded in the in-device data memory 31, and if there is a matching ID, it is determined that the card is permitted to enter. When a card that can be entered is used, the mode shifts to a personal ID number (PIN) input mode in order to confirm whether the card user is the user (step S30).

  When the personal identification number input mode is entered, control is performed to blink the digit part to be input of the input personal identification number display unit 23, and it is instructed what digit of the personal identification number the number to be input from now on (step S31). The entrance / exit management device 20 enters a card touch waiting state, waits for the card user to touch the card, and when the card is touched, detects that the card is touched by communication between the antenna and the card (step S32). ). When the card is touched, it is checked whether it is the same as the card checked in step S30 (step S33). If the card is different, the process is stopped (step S34) and entry is not permitted.

  When it is confirmed that the touched card is the same as the card checked in step S30, measurement of the time during which the card is touched is started. The method for measuring the time that the card is touched (also referred to as the card touch time) is not the subject of the present invention and will not be described in detail. For example, a read operation is continuously performed on the card, and a response from the card is not received. When the card does not return, it can be determined that the card has been removed from the antenna (touch is ended).

  Even after the password input determination time has elapsed since the card touch was detected in step S32, it is determined whether the card is touched (step S35). Is incremented by 1 (step S36). The decision to detect that there was no card is the time when the card touch status is continuously checked after card touch detection (step S32) and it is determined that the card is gone (separated). However, the method of proceeding to step S36 may be used because the time of the password has not reached the password input determination time. After the number of digits to be input is added by +1, the process again waits for a card touch, and when a card touch is detected (step S32), the determination is repeated from step S33 above. If it is detected in step S35 that the card is still touched, the card touch status is continuously checked to determine whether the card is still touched after the input number determination time has elapsed ( In step S37), if the card is continuously touched, it is determined that the user has selected a process for confirming the digit of the entered password with the current number. On the other hand, if there is no card at this time (step S37), the user determines that the intention display of the operation content by the touch operation is unclear, and the card is touched again without accumulating or confirming the numbers. Wait.

If it is detected in step S37 that the card is still touched, depending on whether a digit is entered in the digit of the currently entered personal identification number (step S38), if a number has already been entered, The process proceeds to a process of determining the digit number of the currently input number (step S39). In step S39, the digit of the digit being entered is fixed, and the digit for entering the password is moved to the next digit. As a result (step S31), the next input target digit part blinks. (At this time, since the number to the next input target digit part has not been input yet, it is blinking in a state where the number is not displayed.)
If no digit has been entered in the digit of the PIN number currently being entered in step S38 above, the PIN number entered up to that point and the digits displayed in each digit are entered. It is determined that the user has selected to be confirmed as a number, and the process proceeds to a determination process (step S40) as to whether or not the series of passwords is the correct password.

  Although not described in this operation sequence, if it is determined that the security code is correct after step S40, for example, the door is unlocked to allow the user to enter, and if it is not correct, the door is unlocked. do not do. Alternatively, when it is determined that the card user is an authorized card user, the operation permitted to the card user is permitted as an operation related to the entry / exit control, and further, when the card user is determined to be an authorized card user. The operation permitted to the card user is permitted as the setting operation related to the entrance / exit management. Examples of setting operations related to entrance / exit management include changing the settings so that entry is not allowed after the final exit operation, or the security level is changed so that general entrance / exit cards cannot be entered. It assumes operations that cannot be performed without a card with special privileges. In addition, the regular password for checking the validity of the password is set for each card, and if the value is recorded in the entry / exit management device, it is recorded in the card. When the information in the card is read from the card is also assumed. Or, it may not be unique for each card but may be common, but a method for judging the validity of the password is out of the subject of the present invention and will not be mentioned here.

  FIG. 4 is a diagram showing a second operation sequence example for explaining the operation of the contactless IC card entrance / exit management device according to the embodiment of the present invention. This operation sequence example is a sequence example when the IC card is touched for a predetermined time or more beyond the touch time for determining the number described above, and the PIN code input so far is recognized as a series of PIN numbers. is there. The second operation sequence example shown in FIG. 4 is basically the same as the first operation sequence example shown in FIG. 3, but the card validity is checked in step S41, and the card is valid. If it is confirmed that the password is entered, the process proceeds to the password input mode, and in step S49, a time for determining whether to enter the entire password is set, and it is checked whether or not the card is still touched when the time is reached. If there is no card before that (step S49: No), the process proceeds to step S50, confirms the numeric input to the digit currently being entered, and proceeds to the password entry process for the next digit. However, if the card is still touched (step S49: Yes), it is determined that the user has selected to confirm with the all-digit password entered so far, and the entered password is correct. Whether or not Sense so as to shift (step S51) are made different judgment contents in the operation Sea Case 1 shown in FIG. Since the processing after step S51 is the same as described above, it will not be described again here.

  FIG. 5 is a diagram for explaining operation switching according to a determination time set under a setting parameter in the contactless IC card entrance / exit management device according to the embodiment of the present invention. That is, FIG. 5 shows a password number input determination time setting value (parameter A) and an input number determination determination time setting value (parameter B) as setting parameters, and shows three examples of time zones defined by these setting parameters. Is. In this embodiment, as shown in FIGS. 3 and 4, after the card touch is detected (timing A), the entrance / exit management device continuously communicates with the card. Through this continuous communication operation, the entrance / exit management device can determine whether the card is present in the vicinity of the card touch antenna unit or has been separated.

  A time period from the timing A to the determination time designated by the setting parameter A is defined as a personal identification number input determination time period 51. If the card is disconnected from the card touch antenna during this time period and communication with the card is interrupted, the user intends to add 1 to the digits of the PIN number currently being entered. Judge that there is.

  A time period from the determination time specified by the setting parameter A to the determination time specified by the setting parameter B is defined as an operation determination suspension time period 52. If communication with the card is interrupted during this time period, the digits of the entered password are not accumulated, and the display again shifts to the card touch wait state without changing the digit display of the entered password.

  The time zone after the setting parameter B is defined as the input number determination judgment time zone 53. If the card has been touched until this time, it is determined that the user wants to confirm the number entered and displayed in the digit of the PIN that is currently entered, and the current entry The number (number) in the middle digit is confirmed, and the next number digit is set as the password input target digit, and the process again waits for the card touch.

  These setting parameters are recorded in the entry / exit management device or the card as setting values having a variable data length, and can be adjusted to improve usability by changing the setting values as necessary. This will be described later.

  FIG. 6 is a diagram for explaining the change of the setting parameter used for switching the operation of the contactless IC card entrance / exit management device according to the embodiment of the present invention. That is, the example of FIG. 6 shows a state in which the user performs a card touch operation three times when accumulating the digits of the input target digits of the password. That is, in the first card touch operation, since the timing when the card is touched and released is the password input determination time zone 51, the number of the target digit of the password being input is incremented by one. It was. In the second card touch operation, the timing to release the card is slightly delayed, so the operation judgment hold time zone 52 is entered, and the number of the target digits of the entered security code is not accumulated, waiting for retouching. . Therefore, the user executes the card touch operation for the third time in order to add up the numbers of the target digits of the password being entered again, and the password is entered because the card is released in the password entry judgment time zone 51 for the third time. Accumulation of the numbers of the target digits of the number is to be executed.

  In this series of operations, the user performed a total of three touch operations in order to accumulate the numbers of the target digits of the entered password, but the second operation because the user's operation proficiency is low. Only the touch operation did not lead to the intended accumulation operation. The entrance / exit management device judges from the time zone when the three cards are released, that is, learns the time zone when the card is released, and for example, the next time it can be integrated even if the operation of releasing a little more is delayed Thus, the value of the setting parameter A is set to a large value, and the setting parameter B is increased accordingly, and the determined setting parameter is written to the user's card at the last card touch. Thus, when the user uses the device next time, when the card is first touched, the entry / exit management device reads the changed setting parameter stored in the card from the card and operates according to the setting parameter. Therefore, it is possible to reduce the possibility of the number input operation failing by surely accumulating the numbers of the target digits of the password being input next time.

  Similarly, for users who have become more proficient in operation, it is possible to reduce the value of the setting parameter A so that the digits of the PIN number being entered can be accumulated by advancing the timing of releasing the card. . Along with this, the setting parameter B can also be reduced, so that users with a high level of operation skill can spend less time touching when adding the digits of the target digits when entering the PIN, It becomes possible to improve the property.

  Note that the algorithm for determining these newly set parameters is outside the subject of the present invention. However, in the above example, for example, the method of simply calculating the average time of three touches, for example, the most operation is A method based on the timing at the time of delay (second timing in the example of FIG. 6) can be considered. In addition, by providing a mechanism for storing the history of touch time in the card, it becomes possible to analyze the operation proficiency level in more detail.

  The user's operation intention transmission method by card touch presented in the above-described embodiment of the present invention is not limited to the input of the personal identification number of the entrance / exit management device, but a contactless IC card utilization device other than the entrance / exit management device It is also applicable to a method for switching / determining various operations.

It is the schematic which shows the structure of the operation / display part of the non-contact IC card entrance / exit management apparatus which concerns on embodiment of this invention. It is a figure which shows the internal functional structural example of the non-contact IC card entrance / exit management apparatus which concerns on embodiment of this invention. It is a figure which shows the 1st example of an operation | movement sequence for demonstrating operation | movement of the non-contact IC card entrance / exit management apparatus which concerns on embodiment of this invention. It is a figure which shows the 2nd operation | movement sequence example for demonstrating operation | movement of the non-contact IC card entrance / exit management apparatus which concerns on embodiment of this invention. It is a figure for demonstrating the switching of the operation | movement by the judgment time set under the setting parameter in the non-contact IC card entrance / exit management apparatus which concerns on embodiment of this invention. It is a figure for demonstrating the change of the setting parameter used for switching of operation | movement of the non-contact IC card entrance / exit management apparatus which concerns on embodiment of this invention. It is a figure which shows schematic structure of the operation and the display part of the entrance / exit management apparatus anticipated from a prior art.

Explanation of symbols

10 User Card 20 Contactless IC Card Entrance / Exit Management Device 21 Reader / Writer (R / W
22 Card touch antenna (antenna)
23 Security code display device (input security code display)
24 Security Code Display Function Control Unit 25 Host Device Communication Control Unit 26 Host Device Connection I / F
27 Door control unit connection I / F
28 Door lock / unlock control unit 29 CPU (Central Processing Unit)
30 Program memory 31 Data memory 51 Security code input judgment time zone 52 Operation judgment hold time zone 53 Input number decision judgment time zone

Claims (12)

In the entry / exit management device that determines whether the card user is allowed to enter or leave by reading the information recorded in the non-contact IC card and determining its contents, at least,
A communication means for communicating with the card via an antenna unit;
A display means for displaying an input digit of a personal identification number to be inputted and a number inputted in the digit;
Display function control means for controlling the display in the display means;
Central processing means for controlling the communication means and the display function control means,
With
The central processing means is
A card owner judging means for judging whether or not the card user is an authorized card holder from a combination of the number of times the card is touched and the touch time;
An entrance / exit management device characterized by that. The central processing means is
The operation permitted for the card user is permitted as an operation related to the entry / exit control when the card owner determination unit determines that the card user is an authorized card user. Entrance / exit management device. The central processing means is
2. The operation permitted to the card user is permitted as a setting operation related to entry / exit management when the card owner determination unit determines that the card user is an authorized card user. Entrance / exit management device. The central processing means is
The number of the code number is integrated and input according to the number of touches, and the input number is confirmed by detecting that the card is continuously touched for a predetermined time or more after the code number is input. Entrance / exit management device. The central processing means is
After entering the PIN number and confirming it, without touching the card corresponding to the integration of the PIN number, the card is kept touched for a certain period of time, so that one digit entered before that 5. The entrance / exit management apparatus according to claim 4, wherein the password is recognized as a series of passwords. The central processing means is
5. The personal identification number input so far is recognized as a series of personal identification numbers by continuously touching the card beyond a touch time for determining the number for a certain period of time. Entrance / exit management device. The central processing means is
7. The entrance / exit management apparatus according to claim 1, wherein when the card to be touched is changed during the password input, the processing operation is stopped. The central processing means is
The entrance / exit management device according to any one of claims 4 to 6, wherein when the card to be touched is changed during the password input / confirmation operation, the processing operation is stopped. . The central processing means is
The maximum value of the code number input determination time for detecting that the card is not detected within a certain time after detecting that the card is touched and determining that the number of the code number input is integrated. Means for registering as a first setting parameter; and a code number that is integratedly input so far by detecting that the card has been detected for a predetermined time or more after detecting that the card has been touched The entry / exit management device according to claim 1, further comprising: an input number determination determination time for determining that the input number is determined as a second setting parameter. The central processing means is
When the card is no longer detected between the time set as the password input determination time and the time set as the input number determination time, the integration of the numbers of the input password is 10. The entrance / exit management apparatus according to claim 9, wherein no determination is made. The central processing means is
The first and second setting parameters are registered in the card of a user, and the values of the first and second setting parameters are rewritten according to the operation timing tendency of the card user. The entrance / exit management apparatus according to claim 9 or 10. In the entry / exit management device that determines whether the card user is allowed to enter or leave by reading the information recorded in the non-contact IC card and determining its contents, at least,
A communication means for communicating with the card via an antenna unit;
A display means for displaying an input digit of a personal identification number to be inputted and a number inputted in the digit;
Display function control means for controlling the display in the display means;
Door locking / unlocking control means for locking and unlocking the door via the connection interface;
Central processing means for controlling the communication means, the display function control means, and the door locking / unlocking control means,
With
The communication means includes card touch detection means for detecting a card touch by the card user and transmitting it to the central processing means,
The central processing means is
It is determined whether the card touch detection means is a card that can be entered / exited by the card touch detected first, and if it is determined that the card can be entered / exited, the password input is made to shift to the password input mode. Transition means,
Card identity determination means for determining whether the card touch detected by the card touch detection means after transition to the password input mode is the same as the card that was first touched by the card;
When it is determined that the cards are the same, the personal identification number input judging means for judging whether or not a pre-registered personal identification number input is obtained from a combination of the number of times the card is touched and the touch time, and the personal identification number When the regular password input is obtained by the number input judging means, the door lock / unlock control means performs the entrance / exit control,
An entrance / exit management device characterized by that.

Images