JP2010112002A - Authentication device and security system - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To inexpensively construct a security system which gives a report when a suspicious person intrudes until a door is locked. <P>SOLUTION: A user causes a card reader 201 of an authentication terminal device 200 to read ID to enter a room, and causes a fingerprint reader 211 of an exist-side authentication terminal device 210 in the room to read fingerprint information within a predetermined time. A first authentication part 110 collates, upon input of a read ID 201a, the read ID 201a with a registered ID 191, and determines to perform authentication permission. When the first authentication 110 determines the authentication permission, an unlocking part 130 unlocks an electric lock 221, and a timer part 140 sets a timer. A second authentication part 120 collates, upon input of read fingerprint information 211a, the read fingerprint information 211a with registered fingerprint information 192, and determines to perform authentication permission. When the time is out before the authentication permission is determined by the second authentication part 120, an announcement part 150 transmits an alarm report 151 to a center device 230. <P>COPYRIGHT: (C)2010,JPO&INPIT

Description

  The present invention relates to an authentication device and a security system that detect unauthorized entry, for example.

  Patent Document 1 discloses a method for making a notification by performing a special operation on an authentication terminal device when entering a room in an improper situation such as intimidation.

However, if a suspicious person is intruded before the door is unlocked by performing a proper operation on the authentication terminal device to enter the room and the opened door is closed and locked, a notification cannot be made. This can be prevented by a co-detection system that detects and reports the entrance of multiple people. However, since a camera is required to detect the number of people entering the room, the accompanying detection system is expensive.
JP-A-6-17565

  An object of the present invention is, for example, to be able to construct a security system that makes a report at a low cost when a suspicious person is intruded before the door is locked.

  The authentication device according to the present invention is an authentication device that approves entry into a room locked by an electric lock, and whether or not predetermined first data is input to a first authentication terminal device provided outside the room. A first authentication unit that is determined by using the first authentication unit, an unlocking unit that unlocks the electric lock when the first authentication unit determines that predetermined first data has been input, and the unlocking unit. Whether predetermined second data has been input to a timer unit that detects the elapse of a predetermined time after the electric lock is unlocked by using a CPU and a second authentication terminal device provided inside the room A second authentication unit that is determined using a CPU, and the timer unit detects entry of a predetermined time before the second authentication unit determines that predetermined second data has been input. Notification of non-approval using the specified device And a notification unit.

  According to the present invention, for example, even when a suspicious person is invaded before the door is closed and locked, a report can be made. Moreover, since a camera and a shared detection system are unnecessary, a security system can be constructed at a low cost.

Embodiment 1 FIG.
An authentication device and a security system for approving entry (entrance) into a room (building) locked by an electric lock will be described.

FIG. 1 is a configuration diagram of a security system 900 according to the first embodiment.
The configuration of the security system 900 according to the first embodiment will be described below with reference to FIG.

The security system 900 includes a controller 100 (authentication device), an entry-side authentication terminal device 200 (first authentication terminal device), an exit-side authentication terminal device 210 (second authentication terminal device), a door 220, and a center device 230 (notification). Device).
The controller 100 is connected to the incoming authentication terminal device 200, the outgoing authentication terminal device 210, and the center device 230 via a communication cable or a communication line.

  The door 220 of the room is locked with an electric lock 221.

The entry-side authentication terminal device 200 includes a card reader 201 and is installed beside the door outside the room.
The card reader 201 is a device that reads an ID from an ID card in which an ID for identifying a specific person (an example of identification data) is recorded in advance. For example, the card reader 201 reads an ID from an ID card by an RFID (Radio Frequency Identification) communication method.
The ingress authentication terminal device 200 outputs an ID read by the card reader 201 (hereinafter referred to as “read ID 201a”) to the controller 100.

The exit-side authentication terminal device 210 includes a fingerprint reading device 211 and is installed beside the door inside the room.
The fingerprint reader 211 is a device that reads fingerprint information (an example of identification data) from a user's finger.
The outgoing authentication terminal device 210 outputs the fingerprint information read by the fingerprint reading device 211 (hereinafter referred to as “read fingerprint information 211 a”) to the controller 100.
The fingerprint reading device 211 is an example of a device that reads biological information from a user. The outgoing authentication terminal device 210 may include a device that captures a user's face image, a device that reads iris information from the eyes, and the like instead of the fingerprint reading device 211.

The controller 100 includes a first authentication unit 110, a second authentication unit 120, an unlocking unit 130, a timer unit 140, a notification unit 150, and an authentication device storage unit 190.
The controller 100 determines whether to approve the user's entry based on the reading ID 201a output from the entry-side authentication terminal device 200 and the read fingerprint information 211a output from the exit-side authentication terminal device 210. If the second authentication unit 120 performs “authentication permission” based on the read fingerprint information 211a within a predetermined time after the first authentication unit 110 performs “authentication permission” based on the reading ID 201a, the controller 100 uses Approve the person entering the room. If the second authentication unit 120 does not “authenticate” based on the read fingerprint information 211a within a predetermined time after the first authentication unit 110 “authenticates” based on the read ID 201a, the controller 100 Do not approve user entry (not approved).

The first authentication unit 110 collates the read ID 201a output from the ingress authentication terminal device 200 with the registration ID 191 (predetermined first data) and performs the first authentication process.
Hereinafter, the result of the first authentication process when there is a registration ID 191 that matches the reading ID 201a is “authentication permitted”, and the result of the first authentication process when there is no registration ID 191 that matches the reading ID 201a is “not authorized”. And

The second authentication unit 120 performs the second authentication process by comparing the read fingerprint information 211a output from the outgoing authentication terminal device 210 with the registered fingerprint information 192 (predetermined second data).
Hereinafter, the result of the second authentication process when there is registered fingerprint information 192 that matches the read fingerprint information 211a is “authentication permitted”, and the second authentication process when there is no registered fingerprint information 192 that matches the read fingerprint information 211a The result is “authentication not permitted”.

When the result of the first authentication process is “authentication permitted”, the unlocking unit 130 unlocks the electric lock 221 of the door 220.
When the result of the first authentication process is “authentication not permitted”, the unlocking unit 130 does not unlock the electric lock 221 of the door 220.

  The timer unit 140 detects the passage of a predetermined time after the unlocking unit 130 unlocks the electric lock 221.

When the timer unit 140 detects the elapse of a predetermined time before the result of the second authentication process becomes “authentication permitted”, the notification unit 150 denys the user's entry and the unauthorized entry has occurred. Is sent to the center device 230.
When the result of the second authentication process becomes “authentication allowed” before the elapse of the predetermined time is detected by the timer unit 140, the notification unit 150 approves the user's entry and notifies the alarm notification 151 to the center device. 230 is not transmitted.

The authentication device storage unit 190 stores data (for example, registration ID 191, registration fingerprint information 192, timeout value 193) used by the controller 100 using a storage medium.
The registration ID 191 is an ID assigned to a person who is allowed to enter the room, and is registered (stored) in the authentication device storage unit 190 in advance.
The registered fingerprint information 192 is fingerprint information acquired from a person who is allowed to enter the room, and is registered in the authentication device storage unit 190 in advance.
The timeout value 193 indicates a predetermined time detected by the timer unit 140 and is stored in the authentication device storage unit 190 in advance.

The center device 230 is installed in a management center where an administrator is stationed.
When the alarm notification 151 is transmitted from the controller 100, the center device 230 outputs the alarm notification 151 to an output device (for example, a display, a speaker, or a printer) to notify the administrator of unauthorized entry.

The controller 100 includes a CPU (Central Processing Unit), ROM, and RAM (not shown). The CPU is connected to the ROM and RAM via the bus and controls them.
In the ROM or RAM, a program for executing a function described as “˜unit” in the embodiment and data used in “˜unit” are stored.
In the embodiment, what is described as “to part” may be “to circuit”, “to apparatus”, and “to device”, and “to step”, “to procedure”, and “to processing”. It may be. That is, what is described as “to part” may be realized by any of hardware, a program, and a combination of hardware and a program.
The program is read by the CPU and executed by the CPU. The program causes the computer to function as “to part”, and causes the computer to execute the procedures and methods of “to part”.

FIG. 2 is a flowchart showing an authentication method of controller 100 in the first embodiment.
The authentication method of the controller 100 in Embodiment 1 is demonstrated below based on FIG.
Each “˜unit” of the controller 100 executes the following processing using the CPU.

Before describing the authentication method of the controller 100, the operation of the user will be described.
In order to obtain the approval for entering the room, the user receives authentication permission by the first authentication (ID authentication) outside the room before entering the room, and the second authentication (fingerprint authentication) in the room within a predetermined time after entering the room. Authenticate by
In order to receive the first authentication (ID authentication), the user brings the ID card close to the card reader 201 of the entry-side authentication terminal device 200 installed beside the door 220, and enters the entry-side authentication terminal device 200. Enter your ID. The card reader 201 reads the ID from the ID card, and the ingress authentication terminal device 200 outputs the ID (read ID 201a) read by the card reader 201 to the controller 100. The first authentication unit 110 of the controller 100 inputs the reading ID 201a output from the incoming authentication terminal device 200.
In order to receive the second authentication (fingerprint authentication), the user sets a finger on the fingerprint reading device 211 of the outgoing authentication terminal device 210 installed in the room and the fingerprint on the outgoing authentication terminal device 210. Enter information. The fingerprint reader 211 reads fingerprint information from the finger, and the outgoing authentication terminal device 210 outputs the fingerprint information (read fingerprint information 211 a) read by the fingerprint reader 211 to the controller 100. The second authentication unit 120 of the controller 100 inputs the read fingerprint information 211 a output from the outgoing authentication terminal device 210.

An outline of the authentication method of the controller 100 will be described.
When the first authentication unit 110 inputs the reading ID 201a (S110), the first authentication unit 110 checks the reading ID 201a against the registration ID 191 (S111), and determines whether to permit authentication (S112).
When the first authentication unit 110 permits authentication, the unlocking unit 130 unlocks the electric lock 221 (S120), and the timer unit 140 sets a timer (S130).
When the read authentication information 211a is input (S140), the second authentication unit 120 compares the read fingerprint information 211a with the registered fingerprint information 192 (S141), and determines whether authentication is permitted (S142).
When a time-out occurs before authentication is permitted by the second authentication unit 120 (S150), the notification unit 150 transmits an alarm notification 151 to the center device 230 (S151).

  Next, details of each process (S110 to S151) will be described.

  In order to receive the first authentication (S110 to S112), the user brings the ID card closer to the card reader 201 of the entrance authentication terminal device 200 installed beside the door 220, and enters the entrance authentication terminal device 200. Enter the ID. The card reader 201 reads the ID from the ID card, and the ingress authentication terminal device 200 outputs the ID (201a) read by the card reader 201 to the controller 100. The first authentication unit 110 of the controller 100 inputs the reading ID 201a output from the incoming authentication terminal device 200.

<S110>
The first authentication unit 110 waits for input of the reading ID 201a.
When the reading ID 201a is input (YES), the process proceeds to S111.

<S111>
When the reading ID 201a is input in S110 (YES), the first authentication unit 110 checks the input reading ID 201a against each registered ID 191. The registration ID 191 is stored in advance in the authentication device storage unit 190 for each person who is permitted to enter the room.
After S111, the process proceeds to S112.

<S112>
After collating the reading ID 201a with the registration ID 191 in S111, the first authentication unit 110 determines whether there is a registration ID 191 that matches the reading ID 201a based on the collation result.
When there is a registration ID 191 that matches the reading ID 201a, the result of the first authentication is “authentication permitted”, and when there is no registration ID 191 that matches the reading ID 201a, the result of the first authentication is “authentication not permitted”. .
When the result of the first authentication is “authentication not permitted”, the first authentication unit 110 instructs the input-side authentication terminal device 200 to display “authentication not permitted”, and the input-side authentication terminal device 200 that has received the command Displays on the display (not shown) that “authentication is not permitted” and prompts the user to re-enter the ID.
If the result of the first authentication is “authentication permitted” (YES), the process proceeds to S120. If the result of the first authentication is “authentication not permitted” (NO), the process returns to S110.

<S120>
When the result of the first authentication is “authentication permitted” in S112 (YES), the unlocking unit 130 controls the electric lock 221 of the door 220 to unlock.
By unlocking the electric lock 221, the user can enter the room through the door 220.
After S120, the process proceeds to S130.

<S130>
After the electric lock 221 is unlocked in S120, the timer unit 140 sets a timer for detecting the passage of a predetermined time. A predetermined time (3 minutes, 10 minutes, etc.) detected by the timer is stored in advance in the authentication device storage unit 190 as a timeout value 193.
After S130, the process proceeds to S140.

  In order to receive the second authentication (fingerprint authentication) (S140 to S142), the user sets his / her finger on the fingerprint reading device 211 of the output side authentication terminal device 210 installed in the room, and performs the output side authentication. Fingerprint information is input to the terminal device 210. The fingerprint reader 211 reads fingerprint information from the finger, and the outgoing authentication terminal device 210 outputs the fingerprint information (read fingerprint information 211 a) read by the fingerprint reader 211 to the controller 100. The second authentication unit 120 of the controller 100 inputs the read fingerprint information 211 a output from the outgoing authentication terminal device 210.

<S140>
The second authentication unit 120 determines whether the read fingerprint information 211a has been input.
If the read fingerprint information 211a is input (YES), the process proceeds to S141. If the read fingerprint information 211a is not input (NO), the process proceeds to S150.

<S141>
When the read fingerprint information 211a is input in S140 (YES), the second authentication unit 120 compares the input read fingerprint information 211a with the registered fingerprint information 192, and searches for the registered fingerprint information 192 that matches the read fingerprint information 211a. To do. The registered fingerprint information 192 is stored in advance in the authentication device storage unit 190 for each person who is allowed to enter the room.
After S141, the process proceeds to S142.

<S142>
After collating the read fingerprint information 211a with the registered fingerprint information 192 in S141, the second authentication unit 120 determines whether there is registered fingerprint information 192 that matches the read fingerprint information 211a based on the collation result.
When there is registered fingerprint information 192 that matches the read fingerprint information 211a, the result of the second authentication is “authentication permitted”, and when there is no registration ID 191 that matches the read fingerprint information 211a, the result of the second authentication is “ “Authentication not permitted”.
If the result of the second authentication is “authentication not permitted”, the second authentication unit 120 instructs the outgoing authentication terminal device 210 to display “authentication not allowed”, and the outgoing authentication terminal device 210 that has received the command. Displays on the display (not shown) that “authentication is not permitted” and prompts the user to re-enter fingerprint information.
If the second authentication result is “authentication permitted” (YES), the process ends. If the second authentication result is “authentication not permitted” (NO), the process proceeds to S150.

<S150>
If the read fingerprint information 211a is not input in S140 (NO) or if the second authentication result is “authentication not permitted” (NO) in S142, the timer unit 140 determines whether the timer set in S130 has timed out. judge. The time-out means that a predetermined time has elapsed since the electric lock 221 was unlocked.
If timed out (YES), the process proceeds to S151. If timed out (NO), the process returns to S140.

<S151>
When time-out occurs in S150 (YES), the notification unit 150 determines that the unlocking of the electric lock 221 in S120 is unauthorized entry, and transmits an alarm notification 151 for notifying that the unauthorized entry has occurred to the center device 230.
Unauthorized entry means that the person entering the room has not been approved for entry for some reason (non-approval of entry).
When the center device 230 receives the alarm notification 151 from the notification unit 150, the center device 230 outputs the alarm notification 151 to an output device (for example, a display, a speaker, or a printer) to notify the administrator of unauthorized entry.
Moreover, the alerting | reporting part 150 may alert | report that there existed unauthorized entry by sounding an alarm device (illustration omitted).
After S151, the process ends.

  Through S110 to S151, the controller 100 can manage the user's entry and detect and notify the unauthorized entry.

In the first embodiment, the following security system 900 has been described.
An authentication terminal is installed on the entrance side and the exit side of the door. After authenticating with the entrance side authentication terminal, if the authentication is not performed with the exit side authentication terminal within a certain period of time, an alarm is notified without determining that the operation is normal.
The security system 900 has the following suspicious person countermeasure effects.
1) When a user notices a suspicious person when entering a room, the user can notify an alarm by not performing authentication at the outgoing authentication terminal.
2) When the authentication method of the entry-side authentication terminal is card authentication, the suspicious person can enter the room if the card is illegally acquired by picking up or stealing the card. However, since the authentication method of the outgoing authentication terminal is biometric authentication such as fingerprint and face authentication, the security system 900 can notify the suspicious person as an authentication NG on the outgoing side and notify an alarm.
3) When the user is forced to authenticate on the entry side, the user can notify the alarm by not performing the authentication on the exit side after the authentication on the entry side authentication terminal.
The security system 900 can determine an accurate entry as follows.
4) Entering a room more accurately is determined by treating the user's authentication terminal operation as a normal operation (first authentication permission + second authentication permission within a certain period of time) and then treating the room as normal. it can.
5) By using the RFID for the entry side authentication terminal and automatically identifying the user without performing a complicated authentication operation, the user can be easily and reliably passed.

The security system 900 has the following features.
The data (ID) input to the ingress authentication terminal device 200 and the data (fingerprint information) input to the egress authentication terminal device 210 are different types of data.
Thereby, a plurality of different authentication processes are performed, and security is improved. For example, even if an ID card that has been illegally used is used and ID authentication is permitted, authentication is not permitted in fingerprint authentication, so that unauthorized entry can be reported.

The data (ID) input to the ingress authentication terminal device 200 is a type of data that takes less time to input than the data (fingerprint information) input to the egress authentication terminal device 210.
The data input to the ingress authentication terminal device 200 is a type of data that requires a shorter time for matching determination (collation) than the data input to the egress authentication terminal device 210.
Thereby, a user's entrance can be made smooth, the fall of convenience can be suppressed, and a user's safety can be improved. For example, the user can be prevented from being attacked by a suspicious person while being authenticated by the ingress authentication terminal device 200.

In the identification data (fingerprint information) input to the outgoing authentication terminal device 210, the reliability that guarantees the match between the input person of the identification data and the specific person identified by the identification data is input to the incoming authentication terminal device 200. This type of data is higher than the identification data (ID).
As a result, the reliability of the entrance approval result is increased and the security is improved.

  The combination of data input to the ingress authentication terminal device 200 and data input to the egress authentication terminal device 210 is not limited to a combination of ID and fingerprint information. For example, a combination of an ID and a password, a combination of fingerprint information and iris information, or a combination of a first password (numeric only) and a second password (alphanumeric + symbol) may be used.

Embodiment 2. FIG.
A mode in which a notification is made when a specific operation is performed on the authentication terminal device will be described.
Hereinafter, items different from the first embodiment will be mainly described, and items that will not be described are the same as those in the first embodiment.

  The configuration of the security system 900 in the second embodiment is the same as that in the first embodiment.

FIG. 3 is a flowchart illustrating an authentication method of the controller 100 according to the second embodiment.
The authentication method of the controller 100 in Embodiment 2 is demonstrated below based on FIG.

The flowchart shown in FIG. 3 is obtained by adding S160 and S161 to the flowchart of the first embodiment (see FIG. 2).
Hereinafter, S160 and S161 will be described.

<S160>
After the electric lock 221 is unlocked in S120 and the timer is set in S130, the second authentication unit 120 determines whether a specific operation has been performed on the outgoing authentication terminal device 210.
Specific operations include pressing a specific button (not shown), inputting fingerprint information of a specific finger, and the like.
For example, the outgoing authentication terminal device 210 notifies the second authentication unit 120 of a specific operation when a specific button is pressed, and the second authentication unit 120 receives the notification from the outgoing authentication terminal device 210. It is determined that a specific operation has been performed.
Further, for example, when the user wants to receive authentication permission for the second authentication (fingerprint authentication), the user sets the index finger on the fingerprint reader 211, and when he wants to report, the user sets the middle finger on the fingerprint reader 211. The authentication device storage unit 190 stores the registered fingerprint information 192 of the index finger and the registered fingerprint information 192 of the middle finger in advance, and the second authentication unit 120 specifies when the read fingerprint information 211a matches the registered fingerprint information 192 of the middle finger. It is determined that the operation has been performed.
If a specific operation has been performed (YES), the process proceeds to S161. If a specific operation has not been performed (NO), the process proceeds to S140.

<S161>
When a specific operation is performed in S160 (YES), the notification unit 150 transmits an alarm notification 151 to the center device 230 as in S151.
After S161, the process ends.

According to the second embodiment, the security can be further improved.
For example, when the user is forced to authenticate both the entry side and the exit side, the user can notify the alarm by performing a special operation on the exit side authentication terminal device 210.

  Similar to the second authentication unit 120, the first authentication unit 110 may transmit an alarm notification 151 to the center device 230 when a specific operation is performed on the entry-side authentication terminal device 200.

1 is a configuration diagram of a security system 900 according to Embodiment 1. FIG. 5 is a flowchart showing an authentication method of the controller 100 in the first embodiment. 9 is a flowchart showing an authentication method of the controller 100 in the second embodiment.

Explanation of symbols

  100 controller, 110 first authentication unit, 120 second authentication unit, 130 unlocking unit, 140 timer unit, 150 notification unit, 151 alarm notification, 190 authentication device storage unit, 191 registration ID, 192 registered fingerprint information, 193 Timeout value, 200 Incoming authentication terminal device, 201 Card reader, 201a reading ID, 210 Outgoing authentication terminal device, 211 Fingerprint reading device, 211a Reading fingerprint information, 220 Door, 221 Electric lock, 230 Center device, 900 Security system.

Claims (9)

An authentication device that approves entry into a room locked by an electric lock,
A first authentication unit that determines whether predetermined first data is input to a first authentication terminal device provided outside the room, using a CPU;
A second authentication unit that determines whether predetermined second data is input to a second authentication terminal device provided inside the room, using a CPU;
When it is determined that predetermined first data is input by the first authentication unit, an unlocking unit for unlocking the electric lock;
When it is not determined that the predetermined second data is input by the second authentication unit within a predetermined time after it is determined that the predetermined first data is input by the first authentication unit, the room is entered. An authentication device comprising: a notifying unit that notifies the non-approval of using a predetermined device. 2. The authentication apparatus according to claim 1, wherein the data input to the first authentication terminal apparatus and the data input to the second authentication terminal apparatus are different types of data. The data input to the first authentication terminal device is data of a type that requires a shorter time to input than data input to the second authentication terminal device. The authentication apparatus in any one. The first authentication unit determines whether data input to the first authentication terminal device matches the predetermined first data;
The second authentication unit determines whether the data input to the second authentication terminal device matches the predetermined second data,
The data input to the first authentication terminal device is data of a type that requires a shorter time for matching determination than data input to the second authentication terminal device. 3. The authentication device according to any one of 3. Identification data for identifying a specific person is input to the first authentication terminal device and the second authentication terminal device,
In the identification data input to the second authentication terminal device, the reliability that guarantees the match between the input person of the identification data and the specific person identified by the input identification data is input to the first authentication terminal apparatus. 5. The authentication device according to claim 1, wherein the authentication device is higher in type than identification data to be identified. The first authentication terminal device includes a card reader that reads the ID as data from an ID card in which an ID for identifying a user is recorded,
The authentication apparatus according to claim 1, wherein the first authentication unit determines whether an ID read by the card reader matches the predetermined first data. The second authentication terminal device includes a biometric information reader that reads biometric information from a user as data,
The said 2nd authentication part determines whether the biometric information read by the said biometric information reader is in agreement with the said predetermined 2nd data. Authentication device. The second authentication unit determines whether a specific operation has been performed on the second authentication terminal device,
The informing unit, when it is determined that a specific operation has been performed by the second authentication unit, notifies the non-approval of entering the room using a predetermined device. An authentication device according to any one of the above. An authentication device according to any one of claims 1 to 8,
An electric lock unlocked by the unlocking part;
A security system comprising: a notification device used for notification by the notification unit.

Images