JP2012103744A - Information processor, id data management method and program - Google Patents

Abstract

PROBLEM TO BE SOLVED: To more easily integrate a plurality of existing systems.SOLUTION: An information processor capable of communicating with a plurality of systems extracts pieces of ID data from association information stored in a storage device that associates user identification data identifying a user with the plurality of types of ID data for the plurality of systems, then generates ID information including the extracted pieces of ID data for each system, and distributes the generated ID information to each system.

Description

  The present invention relates to an information processing apparatus, an ID data management method, and a program.

  Conventionally, IC cards of different authentication methods are used in systems such as an entrance / exit management system, an attendance management system, a PC login management system, and a locker management system. In each system, each IC card is provided with a dedicated reader / writer (reading device), and the IC card is read and written.

  In recent years, there has been disclosed a technology for realizing efficient system operation by reading and writing different types of cards with a single reader / writer and using the cards of different types for common purposes (see Patent Document 1). .

JP 2010-165192 A

  However, in the technology described in Patent Document 1, efficient system operation is realized by newly constructing a system. Therefore, in order to integrate a plurality of existing systems adopting different authentication methods, the existing system Even if exists, there is a problem that a new system must be constructed.

  The present invention has been made in view of such problems, and an object thereof is to more easily integrate a plurality of existing systems.

Therefore, an information processing apparatus according to the present invention is an information processing apparatus capable of communicating with a plurality of systems, and a plurality of types in the plurality of systems with respect to user identification data for identifying a user stored in a storage device ID data is extracted from the association information in which the ID data is associated, generating means for generating ID information including the extracted ID data for each system, and distributing the ID information generated by the generating means to each system And a distribution means.
Here, the generation unit corresponds to an ID information generation unit (ID information generation unit A113 to ID information generation unit D116) described later. The distribution means corresponds to an ID information distribution unit 117 described later.

An information processing apparatus according to the present invention is an information processing apparatus capable of communicating with a plurality of systems and a plurality of ID data processing apparatuses provided corresponding to the plurality of systems, wherein the plurality of ID data processing apparatuses When the ID data is read by one of the ID data processing devices, a plurality of types of ID data in the plurality of systems are linked to the user identification data for identifying the user stored in the storage device. Identification means for identifying the ID data of the system corresponding to the one ID data processing apparatus associated with the read ID data, and ID information including the ID data identified by the identification means. Transmitting means for transmitting to a system corresponding to the one ID data processing apparatus.
Here, the specifying means corresponds to an ID data conversion unit (ID data conversion unit A503 to ID data conversion unit E507) to be described later. Further, the transmission means corresponds to an ID information transmission unit 509 described later.

  According to the present invention, a plurality of existing systems can be more easily integrated.

It is a figure which shows an example of a structure of ID integrated management system. It is a figure which shows an example of tied information. It is a figure which shows an example of the hardware constitutions of an ID integrated management apparatus, and a function structure. It is a figure which shows an example of the flowchart which concerns on the process in ID integrated management apparatus. It is a figure which shows an example of a structure of ID integrated management system. It is a figure which shows an example of a function structure of ID integrated management apparatus. It is a figure which shows an example of the flowchart which concerns on the process in ID integrated management apparatus.

  Hereinafter, embodiments of the present invention will be described with reference to the drawings.

<First Embodiment>
(Configuration of ID integrated management system)
FIG. 1 is a diagram illustrating an example of a configuration of an ID integrated management system according to the present embodiment. As shown in FIG. 1A, the ID integrated management system includes an ID integrated management device 10, a personnel system 11, an IC card issue management system 12, a plurality of subsystems, and a plurality of ID readers.
As subsystems, an IDa authentication system 20, an IDb authentication system 21, an IDc authentication system 22, and an IDd authentication system 23 will be described as examples. As an ID reader, an IDa reader 30, an IDb reader 31, an IDc reader 32, and an IDd reader 33 will be described as examples.
Here, the ID reader is an example of an ID data processing apparatus having a function capable of reading ID data and the like from an IC card. Note that the ID data processing device may be a reader / writer (reading device) further having a writing function capable of writing data to the IC card. Each subsystem includes one or a plurality of information processing apparatuses.

In this ID integrated management system, the ID data of each subsystem is associated with user identification data (user name, etc.) that can identify the user and is centrally managed by the ID integrated management apparatus 10, and each subsystem has a user. ID data to be used for such authentication is distributed in advance. Each subsystem authenticates the user based on the ID data distributed in advance and the ID data read from the IC card by the ID reader.
Here, the ID integrated management device 10, the personnel system 11, the IC card issuance management system 12, and the plurality of subsystems are connected via a network so that they can communicate with each other. In addition, each subsystem and each ID reader are connected via a dedicated line (RS-232C, LAN cable, etc.) so that they can communicate with each other (it may be wireless).

(Generation of pegging information)
The HR system 11 manages (inputs, stores, outputs, etc.) personal information such as the user's name, date of birth, employee number, face photo, card stop information, etc. (collectively referred to as HR information). . In addition, the personnel system 11 transmits personnel information to the ID integrated management apparatus 10 in response to an output operation of personnel information, an update operation of personnel information, and the like by an administrator.
The ID integrated management device 10 receives personnel information from the personnel system 11. The ID integrated management device 10 issues and manages personnel information in a format (processable format) that can be read by the IC card issuance management system 12 in response to reception of personnel information, output operation of issuance management information by an administrator, and the like. The information is converted into information and transmitted to the IC card issue management system 12.
Further, the ID integrated management apparatus 10 performs one or more types of ID data by performing a predetermined ID data generation process on the personnel information, and generates issuance management information including the generated ID data. In the present embodiment, the ID integrated management device 10 will be described by taking as an example a configuration that creates IDc and IDd described later as ID data.
The ID integrated management apparatus 10 has a linking DB 13 and stores the linking information generated by the IC card issuance management system 12 based on the issuance management information in the linking DB 13.

Then, the IC card issue management system 12 receives issue management information from the ID integrated management apparatus 10. The IC card issuance management system 12 generates association information based on the issuance management information and sends it to the ID integrated management apparatus 10 in response to reception of issuance management information and an IC card issuance operation by the administrator. The association information will be described with reference to FIG.
The IC card issue management system 12 issues an IC card. The IC card issued by the IC card issue management system 12 includes one or more types of ID data. In the present embodiment, the IC card issuance management system 12 will be described by taking as an example a configuration for issuing an IC card including IDa and IDb described later as ID data.

The present embodiment is not limited to the configuration described above. For example, the IC card issue management system 12 may issue an IC card including ID data (IDa, IDb, IDc, and IDd) of all subsystems.
In this case, the user can use all the subsystems with one IC card, and does not need to have a plurality of existing IC cards in order to use each subsystem. In this case, for example, when the IC card is held over the IDa reader 30, the IDa reader 30 reads IDa corresponding to the IDa reader 30 from the IC card and transmits the IDa to the IDa authentication system 20.

  Here, the IC card may be a contact type IC card or a non-contact type IC card. Moreover, as an IC card, an IC card used for an arbitrary application can be adopted. For example, when a traffic IC card is employed, the IC card issue management system 12 issues a traffic IC card.

Further, the configuration for generating the association information is not limited to the configuration described above. In the present embodiment, the configuration in which the IC card issuance management system 12 generates the association information is shown. However, the present invention is not limited to this configuration, and is different from the IC card issuance management system 12 (ID integrated management device 10). Other information processing apparatuses (not shown) can generate the association information.
For example, when the ID integrated management device 10 generates the association information, the ID integrated management device 10 transmits information from the IC card issuance management system 12 about the user who owns the issued IC card (for example, a user name). And the association information is generated based on the ID data included in the issued IC card and the personnel information.
Further, for example, when another information processing apparatus generates the association information, the other information processing apparatus is transmitted from the IC card issuance management system 12 and the information of the user who owns the issued IC card is issued. The association information is generated based on the ID data included in the IC card and the personnel information transmitted from the personnel system 11. Then, the other information processing apparatus stores the generated association information in a storage medium (external file), for example.

Further, for example, as shown in FIG. 1B, when the ID integrated management device 10 generates the association information via a screen (card registration) for inputting information of an IC card, the ID integrated management device 10 A configuration that further includes the information management unit 14 can be employed.
The association information management unit 14 manages association information in the association DB 13. More specifically, the associating information management unit 14 receives the ID data (for example, IDa and IDb) of the IC card read from the ID reader, the user name input via the screen, and the input via the screen. Association information is generated from ID data (for example, IDc and IDd) generated from the employee number, and the generated association information is newly registered in the association DB 13. Further, the linking information management unit 14 updates the linking information in the linking DB 13 according to a set value in response to a user operation (via a screen output by the output device 105 described later).
In this embodiment, the IC card issuance management system 12 generates the association information, the ID integrated management device 10 generates the association information, and the association information is generated by a device different from the ID integrated management device 10. It is also possible to employ a combination of a configuration that is stored in an external file and that retrieves association information from the external file.

(Pegging information structure)
Here, the details of the association information will be described with reference to FIG. FIG. 2 is a diagram illustrating an example of the association information (association information 131).
In the association information 131, ID data (IDa, IDb, IDc, IDd) of a plurality of types of subsystems and name data (user name) indicating the name of the user are associated. The association information 131 includes personal information and card stop information in association with the user name.
Here, the ID data includes ID data that requires authentication when reading data from the IC card and ID data that does not require authentication. In the present embodiment, ID data that requires authentication is employed as IDa, and ID data that does not require authentication is employed as IDb, IDc, and IDd. IDa, IDb, IDc, and IDd are ID data of different types. In addition, the type and number of ID data associated with the association information are not limited to the examples described above, and can be changed as appropriate.

(Distribution of pegging information)
The ID integrated management apparatus 10 converts the association information stored in the association DB 13 into information in a format corresponding to each subsystem (ID information: IDa information, IDb information, IDc information, IDd information), Deliver to the subsystem. For example, the ID integrated management apparatus 10 converts the association information stored in the association DB 13 into IDa information “IDa, name 1, OK,...” In a format corresponding to the IDa authentication system 20 and converts the IDa information to IDa. Delivered to the authentication system 20.
The ID integrated management device 10 distributes ID information to each subsystem by batch processing or real-time processing. The distributed ID information is managed by each subsystem.

As described above, in this embodiment, by providing the ID integrated management device 10 at the upper level of each subsystem, the cooperation of the personnel system 11 becomes one, and the load on the existing system can be reduced. It becomes like this. Further, by providing the ID integrated management apparatus 10 at the upper level of each subsystem, the cost required for development can be reduced by reducing the modification to the existing system.
However, the present embodiment is not limited to the above-described configuration, and an existing system may have a part or all of the configuration of the ID integrated management device 10. For example, the personnel system 11 and the IC card Either one of the issue management systems 12 (or shared by both) may have it.

  In the present embodiment, the ID integrated management device 10 has the association DB 13 in which association information is stored. However, the present invention is not limited to this configuration. For example, an apparatus (such as a file server not shown) different from the ID integrated management apparatus 10 may have the association DB 13. Note that the association information is not limited to the configuration stored in the database, and may be, for example, a configuration stored in a file.

(Hardware configuration of ID integrated management device)
FIG. 3A is a diagram illustrating an example of a hardware configuration of the ID integrated management device 10. The ID integrated management device 10 is an example of an information processing device (computer), and includes a central processing unit (CPU) 101, a random access memory (RAM) 102, a read only memory (ROM) 103, an input device 104, an output device 105, A storage device 106 and an I / F (interface) 107 are included. The CPU 101, the RAM 102, the ROM 103, the input device 104, the output device 105, the storage device 106, and the I / F 107 are configured to be able to communicate with each other via the bus 108.

The CPU 101 governs overall control in the ID integrated management apparatus 10. For example, the CPU 101 executes an application program, an OS, and the like stored in the ROM 103, and performs control to temporarily store information, files, and the like necessary for executing the program in the RAM 102.
The RAM 102 functions as a main memory, work area, and the like for the CPU 101. The RAM 102 is an example of a temporary storage unit that temporarily stores various data.

The ROM 103 stores programs such as a basic I / O program and various data. The ROM 103 is an example of a storage unit that stores various data.
The input device 104 is a mouse, a keyboard, buttons, or the like, and inputs various instructions from the user. The output device 105 is a liquid crystal panel, an external monitor, or the like, and outputs various types of information. The storage device 106 is an HDD (Hard Disk Drive) or the like, and is an example of an external storage unit that stores various data such as the association DB 13.
The I / F 107 is a communication interface for performing wired or wireless communication. For example, the ID integrated management apparatus 10 is connected to each subsystem via a LAN cable.

In the present embodiment, the CPU 101 performs processing according to the procedure of the program stored in the ROM 103, thereby realizing the functions and flowcharts in the ID integrated management device 10.
Note that the ID integrated management device 10 is not limited to the configuration described above. For example, the ID integrated management device 10 may acquire various types of information from a recording medium such as a CD-ROM, or may download the information via a network or the like.

(Functional configuration of ID integrated management device)
FIG. 3B is a diagram illustrating an example of a functional configuration of the ID integrated management device 10. The ID integrated management apparatus 10 includes an issuance management information generation unit 111, an association information management unit 112, an ID information generation unit (ID information generation unit A113, ID information generation unit B114, ID information generation unit C115, and ID information generation unit D116). , And an ID information distribution unit 117.
The issue management information generation unit 111 generates issue management information based on personnel information. In the present embodiment, the issuance management information generation unit 111 generates issuance management information by converting the employee number information of the personnel information into IDc and IDd. More specifically, the issuance management information generation unit 111 converts the employee number “123” included in the personnel information into IDc “000000012” that is ID data conforming to the IDc format, and conforms to the IDd format. Issuance management information is generated by converting the ID data into IDd “00000001123”.
The issue management information includes personal information such as the user's name, date of birth, employee number, face photo, card stop information, IDc, IDd, etc., but is not limited to this configuration.

The association information management unit 112 stores the association information received from the IC card issue management system 12 in the association DB 13. In addition, when the association information management unit 112 receives data indicating addition or deletion of personal information or data indicating addition or deletion of card stop information from the personnel system 11, the association information management unit 112 updates the association information in the association DB 13.
The ID information generation unit is provided corresponding to the subsystem. More specifically, the ID information generation unit A113 is provided corresponding to the IDa authentication system 20, the ID information generation unit B114 is provided corresponding to the IDb authentication system 21, and the ID information generation unit C115 is provided with the IDc. The ID information generation unit D116 is provided corresponding to the IDd authentication system 23.
For example, the ID information generation unit A113 extracts information used in the IDa authentication system 20 (ID data used for authentication, etc.) from the association information stored in the association DB 13 and forms an ID corresponding to the IDa authentication system 20 As information, IDa information “IDa, name 1, OK,...” Is generated.

Here, when a subsystem that employs the IDa authentication method, which is different from the IDa authentication system 20, is allowed to participate in the ID integrated management system, an ID information generation unit corresponding to the subsystem to be joined is added. The added ID information generation unit generates ID information in a format corresponding to the subsystem to participate. For example, the added ID information generation unit extracts information used in the subsystem to participate from the association information stored in the association DB 13 and generates, for example, ID information “name 1, IDa, OK,. .
Therefore, according to the above-described configuration, when an existing subsystem is to participate in the ID integrated management system, basically, it is only necessary to add an ID information generation unit corresponding to the subsystem to be joined. Can be integrated more easily.

  The ID information distribution unit 117 distributes the ID information generated by the ID information generation unit to each subsystem. The timing at which the ID information distribution unit 117 distributes the ID information is when the set time (fixed time) is reached, or when the association information is accumulated by a specified amount (fixed amount), and the IC card issuance management system 12 Can be employed in appropriate combination, for example, when the association information is received from.

(Processing in ID integrated management device)
An example of the ID data management method will be described with reference to FIG. FIG. 4 is a diagram illustrating an example of a flowchart relating to processing in the ID integrated management apparatus 10.
First, in step S <b> 105, the issue management information generation unit 111 determines whether or not personnel information has been received from the personnel system 11. At this time, if the issuance management information generation unit 111 determines that the personnel information has been received from the personnel system 11, the process of step S110 is performed. On the other hand, when the issue management information generation unit 111 determines that no personnel information has been received from the personnel system 11, the process of step S120 is performed.

In step S110, the issue management information generation unit 111 determines whether the received personnel information is newly added information (new information) or updated information (update information). At this time, if the issuance management information generation unit 111 determines that the information is new information, the process of step S115 is performed. On the other hand, if the issuance management information generation unit 111 determines that the information is update information, the process of step S125 is performed.
In step S115, the issue management information generation unit 111 generates issue management information based on the personnel information, and transmits the generated issue management information to the IC card issue management system 12.

In step S <b> 120, the association information management unit 112 determines whether association information has been received from the IC card issue management system 12. At this time, when the association information management unit 112 determines that association information has been received from the IC card issuance management system 12, the association information management unit 112 performs the process of step S125. On the other hand, when the association information management unit 112 determines that the association information has not been received from the IC card issuance management system 12, the process of step S130 is performed.
In step S125, the linking information management unit 112 updates the linking information in the linking DB 13. More specifically, when it is determined that the association information management unit 112 is update information (NO in step S110), the information (personal information, card stop information) changed using the user name or the like as a key Etc.) is reflected in the association information. Further, when it is determined that the association information has been received (YES in the determination in step S120), the association information management unit 112 adds the received association information to the association DB 13.

In step S130, the ID information distribution unit 117 determines whether or not a predetermined time has been reached based on information indicating the distribution time (distribution time information). At this time, if the ID information distribution unit 117 determines that the predetermined time has been reached, the ID information generation unit is called, and the process of step S135 is performed. On the other hand, if the ID information distribution unit 117 determines that the predetermined time has not been reached, the process ends. In the present embodiment, it is assumed that the distribution time information is read from the setting file stored in the storage device 106.
In step S135, the ID information generation unit generates ID information corresponding to each subsystem with reference to the association DB 13. The ID information generation unit may generate ID information based on the modified or added association information among the association information stored in the association DB 13, or generate ID information for all association information. May be.
In step S140, the ID information distribution unit 117 distributes the generated ID information to each subsystem, and the process ends.

  As described above, in the present embodiment, a generation device (such as an IC card issue management system) that generates association information, a storage device (such as an ID integrated management device 10), and a distribution device (such as an ID integrated management device 10). An integrated ID management system having a plurality of subsystems and a plurality of ID data processing devices, wherein the generation device transmits the generated association information to the storage device, and the storage device is the generation device When the association information transmitted from the storage device is received, the received association information is stored, the distribution device extracts the ID data from the association information stored in the storage device, and includes the extracted ID data. ID information is generated for each system in a format specific to each subsystem corresponding to the authentication method, and the generated ID information is distributed to each system. When the ID data read from is notified to the corresponding subsystem, the corresponding subsystem has been described as an example the ID integrated management system for authentication.

According to the configuration described above, since ID information can be distributed in a format unique to each subsystem corresponding to the authentication method of the existing subsystem, when integrating the existing subsystem, as a target subsystem to be integrated, The situation is not limited to subsystems that employ a specific authentication method. That is, it is possible to reduce the limitation of the authentication method when integrating the existing subsystems (releasing subsystem selection conditions).
Further, according to the configuration described above, the existing subsystem can be used as it is. Furthermore, ID data with different levels of security can be adopted depending on the subsystem.

<Second Embodiment>
(Configuration of ID integrated management system)
FIG. 5 is a diagram illustrating an example of the configuration of the ID integrated management system according to the present embodiment. The ID integrated management system includes an ID integrated management device 50, a plurality of subsystems (IDa authentication system 20, IDb authentication system 21, IDc authentication system 22, IDd authentication system 23, etc.), and IDs provided corresponding to each subsystem. It includes a reader (an ID reader that reads the same type of ID data, such as an ID reader 62 and an ID reader 63 described later). In addition, about the structure same as the structure shown in 1st Embodiment, the same code | symbol is attached | subjected and description is abbreviate | omitted suitably.
In the ID integrated management system, basically, ID data read from the IC card by the ID reader 62 is converted into ID data corresponding to a subsystem provided corresponding to the ID reader 62 by the ID integrated management device 50. The converted information including the converted ID data is transmitted to the subsystem. In the subsystem, the user is authenticated using the converted ID data.

More specifically, the ID integrated management device 50 includes an association DB 501, an association information management unit 502, an ID data conversion unit (ID data conversion unit A 503, ID data conversion unit B 504, ID data conversion unit C 505, ID data conversion unit D 506). And an ID data conversion unit E507) and an authentication request unit 508.
The association DB 501 is an example of a database that stores association information. As in the association information shown in FIG. 2, at least ID data (IDa, IDb, IDc, IDd, etc.) of a plurality of subsystems and user identification data (user name, etc.) are associated with the association information. Yes.

The association information management unit 502 manages association information in the association DB 501. More specifically, the association information management unit 502 is created from the ID card IDa and IDb read from the ID reader, the user name input via the screen, and the employee number input via the screen. The association information is generated from the IDc and IDd thus created, and the generated association information is newly registered in the association DB 501. Further, the linking information management unit 502 updates the linking information in the linking DB 501 according to the set value (via the screen output by the output device 105) in response to a user operation.
In addition, about the structure which produces | generates tied information, the structure shown in 1st Embodiment is employable suitably.

The ID data conversion unit refers to the association information stored in the association DB 501, and the ID data read by the ID reader (in this embodiment, IDa will be described as an example as appropriate) will be described as the ID reader. Convert to corresponding subsystem ID data. In other words, the ID data conversion unit specifies the ID data of the subsystem corresponding to the ID reader linked to the ID data read by the ID reader from the linkage information stored in the linkage DB 501.
The authentication request unit 508 requests the remote reader 60 for authentication in order to obtain permission to read ID data by the ID reader 63 that is a remote ID reader. That is, the ID reader 63 reads the ID data after the remote reader 60 performs authentication. The remote reader 60 is an information processing apparatus or the like, performs a prescribed authentication process, and returns the result of the authentication process to the ID integrated management apparatus 50.

  In other words, the ID reader 62 has an authentication function for performing an authentication process when reading ID data from the IC card, but the ID reader 63 does not have an authentication function. In the present embodiment, the ID reader 62 is an example of a first ID data processing device that performs authentication processing and reads the ID data of the IC card, and the ID reader 63 corresponds to the result of the authentication processing of the remote reader 60. It is an example of the 2nd ID data processing apparatus which reads ID data from an IC card. As the ID reader, a third ID data processing device that reads ID data that does not require authentication when reading data from the IC card may be employed.

  Further, the present embodiment is not limited to the configuration described above. For example, instead of the ID integrated management device 50, a plurality of information processing devices having ID data conversion units corresponding to the subsystems may be employed. In this case, it is preferable that the tied DB 501 is provided in a device different from the plurality of information processing devices.

(Functional configuration of ID integrated management device)
FIG. 6 is a diagram illustrating an example of a functional configuration of the ID integrated management device 50. The ID integrated management device 50 includes an ID data receiving unit 500, an association information management unit 502, an ID data conversion unit A503, an ID data conversion unit B504, an ID data conversion unit C505, an ID data conversion unit D506, an ID data conversion unit E507, an authentication. A request unit 508 and an ID information transmission unit 509 are included.
The ID data receiving unit 500 receives ID data (IDa in this embodiment) read by the ID reader 62 and the ID reader 63, and notifies the received ID data to an ID data conversion unit corresponding to the ID reader.

  The ID data conversion unit A503 converts the ID data (IDa) notified from the ID data receiving unit 500 into IDd that is ID data for the IDd authentication system 23, and notifies the ID information transmission unit 509 of IDd. More specifically, when IDa is notified from the ID data receiving unit 500, the ID data conversion unit A503 first refers to the association information in the association DB 501 and identifies the association information corresponding to the notified IDa. Subsequently, the ID data conversion unit A503 extracts IDd used for authentication of the IDd authentication system 23 from the specified association information. The ID data conversion unit A503 notifies the ID information transmission unit 509 of the extracted IDd.

The ID data conversion unit B504 converts IDa notified from the ID data receiving unit 500 into IDc that is ID data for the IDc authentication system 22, and notifies the ID information transmission unit 509 of IDc. The details of this configuration are the same as those of the ID data conversion unit A503, and thus description thereof is omitted.
The ID data conversion unit C505 converts IDa notified from the ID data receiving unit 500 into IDb that is ID data for the IDb authentication system 21, and notifies the ID information transmission unit 509 of IDb. The details of this configuration are the same as those of the ID data conversion unit A503, and thus description thereof is omitted.
The ID data conversion unit D506 and the ID data conversion unit E507 notify the ID information transmission unit 509 of the IDa notified from the ID data reception unit 500 as it is. Note that IDa notified from the ID data receiving unit 500 is ID data (IDa) for the IDa authentication system 20, and therefore does not need to be converted.

The authentication request unit 508 requests the remote reader 60 to perform reading authentication by the ID reader 63 in response to a notification (authentication request notification) or the like requesting authentication from the ID reader 63. When receiving a request for authentication, the remote reader 60 performs an authentication process and returns the result of the authentication process to the authentication request unit 508.
The ID information transmission unit 509 generates ID information including the ID data notified from the ID data conversion unit, and the generated ID information is used as the ID data conversion unit (in other words, the ID data is read). To the subsystem corresponding to the ID reader). For example, when IDd is notified from the ID data conversion unit A503, the ID information transmission unit 509 generates ID information including IDd, and transmits the generated ID information to the IDd authentication system 23.
Note that the hardware configuration of the ID integrated management device 50 is the same as the hardware configuration of the ID integrated management device 10, and thus the description thereof is omitted.

(Processing in ID integrated management device)
An example of the ID data management method will be described with reference to FIG. FIG. 7 is a diagram illustrating an example of a flowchart relating to processing in the ID integrated management device 50.
First, in step S505, the ID data receiving unit 500 determines whether or not ID data is received from the ID reader. At this time, if the ID data receiving unit 500 determines that the ID data is received from the ID reader, the process of step S510 is performed. On the other hand, when the ID data receiving unit 500 determines that the ID data is not received from the ID reader, the process of step S520 is performed.

In step S510, the ID data conversion unit refers to the association information stored in the association DB 501 as necessary, converts the ID data read by the ID reader into ID data of the corresponding subsystem, and ID The ID data is notified to the information transmission unit 509.
In step S515, the ID information transmission unit 509 generates ID information including the notified ID data and transmits it to the corresponding subsystem.
In step S520, the association information management unit 502 determines whether a user operation for registering (or changing) association information (card information) has been performed. At this time, if the association information management unit 502 determines that a user operation has been performed, the process of step S525 is performed. On the other hand, when the association information management unit 502 determines that no user operation is performed, the process ends.

In step S525, the association information management unit 502 generates association information when it is determined that the card information is newly registered.
In step S530, the association information management unit 502 newly registers the association information in the association DB 501 when the association information is generated, and updates the corresponding association information in the association DB 501 when a change value of the association information is received in response to a user operation. Then, the process ends.

According to the configuration described above, when an existing subsystem is allowed to participate in the ID integrated management system, basically, it is only necessary to add an ID data conversion unit and an ID reader corresponding to the subsystem to be joined. Subsystems can be more easily integrated.
Further, according to the above-described configuration, the user can have one IC card without changing the authentication method in the existing subsystem (that is, the user can install an IC card for each system). No need to hold).
In other words, conventionally, there is no mechanism for enabling the use of a traffic IC card when integrating an existing system. On the other hand, according to this embodiment, the ID data of another IC card is linked to the ID data of the traffic IC card by the linkage information, so that the user can use the popular traffic IC card. Existing systems can be used.

Here, since the ID reader 62 is the same device as that used in an automatic ticket gate at a railway station, it has a high processing speed and is expensive because it has an authentication function. Therefore, when the ID reader 62 is employed, the time until the ID data is notified to the ID data conversion unit can be shortened, but it is expensive.
On the other hand, since the ID reader 63 does not have an authentication function or the like, it is inexpensive, but the ID data is notified to the ID data conversion unit through the processing of the remote reader 60. Therefore, when the ID reader 63 is employed, the time until the ID data is notified to the ID data conversion unit is longer than that in the case of the ID reader 62, but is inexpensive.
That is, according to the present embodiment, the ID reader 62 and the ID reader 63 can be appropriately adopted in consideration of processing performance and cost performance, so that integration of existing systems can be performed more flexibly.

<Modification>
The personnel information is not limited to the configuration described above. For example, it may be configured to include information on the user's affiliation group and position. In other words, the associating information may further include information on the user's affiliation group and post.
When this configuration is applied to the first embodiment, for example, the ID information generation unit generates ID information further including group information and post information, and the ID information distribution unit further displays group information and post information. The included ID information is distributed to each subsystem. With this configuration, each subsystem can manage groups (organizations) and job titles as well as individual units.
In addition, when personnel information is changed in the personnel system due to personnel changes or organizational changes, the ID information generation unit generates ID information including information on a new affiliation group and job title, and an ID information distribution unit Distributes the generated ID information to each subsystem. In this case, a configuration in which the ID information distribution unit distributes the generated ID information to each subsystem on the same day (the day when personnel changes or the like are performed) is preferable.

Further, card status information may be adopted as the association information instead of the card stop information. The card status information includes information indicating whether the IC card can be used (usability information), information indicating that the IC card is newly registered (new registration information), and reissuing the IC card. Is included (information that is being reissued). For example, if the card status information includes reissuing information, a replacement card is given to the user in the IC card issuance management system, so the linking information management unit manages the linking information corresponding to the replacement card. ing. Note that the association information corresponding to the substitute card is distributed to each subsystem by the ID information distribution unit at an appropriate timing.
The card status information may include any of information indicating that the IC card has been lost, information indicating that the IC card has been lost, and information indicating that a failure has occurred in the IC card issuance management system or the like. Good. In any case, since the substitute card is given to the user, the linking information management unit manages the linking information corresponding to the replacement card, and the linking information corresponding to the replacement card is sent to each subsystem by the ID information distribution unit. Has been delivered.

  As described above, according to the configuration described above, a plurality of existing systems can be more easily integrated.

  The preferred embodiments of the present invention have been described in detail above, but the present invention is not limited to such specific embodiments, and various modifications can be made within the scope of the gist of the present invention described in the claims.・ Change is possible.

DESCRIPTION OF SYMBOLS 10 ID integrated management apparatus 11 Personnel system 12 IC card issue management system 20 IDa authentication system 21 IDb authentication system 22 IDc authentication system 23 IDd authentication system

Claims (9)

An information processing apparatus capable of communicating with a plurality of systems,
ID information including extracted ID data extracted from the association information in which a plurality of types of ID data in the plurality of systems are associated with the user identification data for identifying the user stored in the storage device Generating means for generating for each system;
Distribution means for distributing the ID information generated by the generation means to each system;
An information processing apparatus comprising: The generation means includes an ID information generation unit corresponding to each system,
The information processing apparatus according to claim 1, wherein each of the ID information generation units generates ID information in a format processed by each system.   The information processing apparatus according to claim 1, wherein the distribution unit distributes the ID information generated by the generation unit to each system for a certain period of time or a certain amount.   4. The information processing apparatus according to claim 1, wherein the plurality of types of ID data includes ID data attached to a traffic IC card. 5. An information processing apparatus capable of communicating with a plurality of systems and a plurality of ID data processing apparatuses provided corresponding to the plurality of systems,
When the ID data is read by one of the plurality of ID data processing devices, a plurality of types in the plurality of systems with respect to user identification data for identifying a user stored in a storage device Identifying means for identifying the ID data of the system corresponding to the one ID data processing device associated with the read ID data, from the association information associated with the ID data;
Transmitting means for transmitting ID information including ID data specified by the specifying means to a system corresponding to the one ID data processing device;
An information processing apparatus comprising: An ID data management method in an information processing apparatus capable of communicating with a plurality of systems,
ID information including extracted ID data extracted from the association information in which a plurality of types of ID data in the plurality of systems are associated with the user identification data for identifying the user stored in the storage device Generating process for each system;
A distribution step of distributing the ID information generated in the generation step to each system;
An ID data management method characterized by comprising: An ID data management method in an information processing apparatus capable of communicating with a plurality of systems and a plurality of ID data processing apparatuses provided corresponding to the plurality of systems,
When the ID data is read by one of the plurality of ID data processing devices, a plurality of types in the plurality of systems with respect to user identification data for identifying a user stored in a storage device A specific step of identifying the ID data of the system corresponding to the one ID data processing device associated with the read ID data from the association information associated with the ID data;
A transmitting step of transmitting ID information including the ID data specified in the specifying step to a system corresponding to the one ID data processing device;
An ID data management method characterized by comprising: A computer that can communicate with multiple systems
ID information including extracted ID data extracted from the association information in which a plurality of types of ID data in the plurality of systems are associated with the user identification data for identifying the user stored in the storage device Generating means for generating for each system;
Distribution means for distributing the ID information generated by the generation means to each system;
Program to make it work. A computer capable of communicating with a plurality of systems and a plurality of ID data processing devices provided corresponding to the plurality of systems,
When the ID data is read by one of the plurality of ID data processing devices, a plurality of types in the plurality of systems with respect to user identification data for identifying a user stored in a storage device Identifying means for identifying the ID data of the system corresponding to the one ID data processing device associated with the read ID data, from the association information associated with the ID data;
Transmitting means for transmitting ID information including ID data specified by the specifying means to a system corresponding to the one ID data processing device;
Program to make it work.

Images