JP2012221379A - Authentication system and authentication method - Google Patents

Abstract

PROBLEM TO BE SOLVED: To eliminate an overhead of converting a card ID of a temporary lending card to an individual ID and to instantaneously execute an authentication procedure using the temporary lending card.SOLUTION: An authentication system 1 according to this invention includes: a temporary lending card 50; a lending device 40 for writing a card ID to the temporary lending card 50 and issuing it; a server device 10 for storing enterable area information of a user; and an entry/leaving device 20 having an enterable area table 211 for storing the card ID of a card that can be used for entering for each area. When the utilization of the temporary lending card is requested from the user, the server device 10 provides the lending device 40 with the enterable area information of the user, and the lending device 40 refers to the enterable area, registers the card ID to be written to the temporary lending card 60 in the enterable area table 211 of the area that the user can enter, then writes the card ID to the temporary lending card 60 and issues it.

Description

  The present invention relates to an authentication system and an authentication method, and more particularly to an authentication system and an authentication method for authenticating a temporary loan card.

  In the authentication system for entrance / exit management by IC card, the conventional temporary lending card was operated independently of the original IC card system, so the information on the temporary lending card and the borrower is not linked, Forgotten people were limited in their range of action using cards. For example, when a company forgets an IC card employee ID card, it is impossible to log in to a business terminal, which causes a problem in the day's business. On the other hand, when lending a temporary lending card, the card ID of the temporary lending card is stored in the LDAP server in association with the principal ID (portal ID), and the LDAP server is inquired at the time of use. A technique of converting to a personal ID has been devised (see, for example, Patent Document 1).

JP 2008-97207 A

  In the technique described in Patent Document 1 in which the card ID of the temporary loan card is stored in the LDAP server in association with the principal ID, it is necessary to inquire the LDAP server when using the temporary loan card and to convert the card ID of the temporary loan card into the principal ID. There is a problem that it takes time for authentication due to the overhead of this conversion and is not suitable for applications that require immediacy such as entrance and exit.

  In view of the above problems, an object of the present invention is to provide an authentication system and an authentication method that can eliminate the overhead of converting a card ID of a temporary loan card into a principal ID and can immediately execute an authentication process using the temporary loan card. That is.

  An authentication system according to the present invention includes a temporary lending card lent to a user, a lending device that writes and issues a card ID to the temporary lending card, a server device that stores information on the area where the user can enter, and each area And an entrance / exit device having an entrance area table for storing card IDs of cards that can be entered in the case where the server device has an application for use of the temporary lending card from the user. Providing the lending device with the information on the area where the user can enter, and the lending device refers to the area where the user can enter, and the temporary lending card in the area where the user can enter The card ID to be written in is registered, and then the card ID is written and issued to the temporary lending card.

  In the authentication system according to the present invention, after the issuance of the temporary lending card, the lending device transmits the card ID of the temporary lending card to the server device, and the server device communicates with the user and the temporary lending card. It is preferable to store the card ID of the loan card in association with the card ID.

  In the authentication system according to the present invention, the entrance / exit device transmits history information including the card ID of the temporary loan card to the server device when there is an entrance / exit by the temporary loan card, and the server It is preferable that the device acquires the user associated with the card ID and records the history information of the temporary loan card as the history information of the user.

  In the authentication system according to the present invention, when the lending device has an application for returning the temporary lending card from the user, the card ID of the temporary lending card from the entrance area table of the entry / exit device. And deleting the card ID from the temporary lending card.

  An authentication method according to the present invention includes a temporary lending card that is lent to a user, a lending device that writes and issues a card ID to the temporary lending card, a server device that stores the user's admissible area information, and each area And an entrance / exit device having an entrance area table for storing a card ID of a card that can be entered, wherein the processing procedure by the server device is performed by the user from the temporary lending card. If there is an application for use, the method includes providing the lending device with the information on the area where the user can enter, and the processing procedure by the lending device refers to the area where the user can enter and allows the user to enter. Registering a card ID to be written in the temporary lending card in the admissible area table of the area; Characterized in that it comprises the steps of issuing write the output card.

  Further, in the authentication method according to the present invention, the processing procedure by the lending device includes a step of transmitting the card ID of the temporary lending card to the server device after issuance of the temporary lending card, and the processing by the server device The procedure preferably includes a step of storing the user and the card ID of the temporary lending card in association with each other.

  In the authentication method according to the present invention, the processing procedure by the entrance / exit device transmits history information including the card ID of the temporary loan card to the server device when there is an entrance / exit by the temporary loan card. And the processing procedure by the server device includes a step of acquiring the user associated with the card ID, and a step of recording the history information of the temporary loan card as the history information of the user. It is preferable.

  Further, in the authentication method according to the present invention, the processing procedure by the lending device is such that when there is an application for returning the temporary lending card from the user, the temporary lending card is stored in the entrance area table of the entrance / exit device. Preferably, the method includes a step of deleting the card ID and a step of deleting the card ID from the temporary loan card.

  According to the authentication system and the authentication method according to the present invention, it is possible to eliminate the overhead of converting the card ID of the temporary loan card into the principal ID, and to immediately execute the authentication process using the temporary loan card.

It is a figure which shows schematic structure of the authentication system which concerns on one Embodiment of this invention. It is a figure which shows an example of the registration information of a normal card table. It is a figure which shows an example of the registration information of a rental card table. It is a figure which shows an example of the registration information of a usage history table. It is a figure which shows an example of the registration information of an entranceable area table. It is a processing sequence of the lending process of an authentication system. It is a processing sequence of the entrance / exit processing of an authentication system. It is a processing sequence of the return process of an authentication system.

  Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings.

  FIG. 1 is a diagram showing a schematic configuration of an authentication system according to an embodiment of the present invention. The authentication system 1 includes a server device 10, an entrance / exit device 20, a reception terminal 30, a lending device 40, a gate 50, and a temporary lending card 60. The server device 10 includes an identity verification processing unit 101, a lending history writing processing unit 102, an ID matching processing unit 103, a history writing processing unit 104, a normal card table 111, a lending card table 112, and a usage history. And a table 113. The entrance / exit device 20 includes an admissible area information verification processing unit 201, a history transmission processing unit 202, and an admissible area table 211. The lending device 40 issues a temporary lending card 60 and includes an entranceable area information writing / issuing processing unit 401.

  A card ID for identifying the card is stored in each of the temporary lending card 60 and a card that is normally used by the user (normal card, not shown). The temporary lending card 60 is a card that is temporarily lent to a user who has forgotten the normal card.

  FIG. 2 is a diagram illustrating an example of registration information in the normal card table 111. In the normal card table 111, a card ID, a principal ID, a name, a password, and information on the admissible area are registered in advance. The card ID in the normal card table 111 indicates the card ID of the user's normal card. The principal ID is an identifier for identifying the user.

  FIG. 3 is a diagram illustrating an example of registration information in the lending card table 112. In the lending card table 112, a card ID, a card lending date, an expiration date, a card return date, a principal ID, a name, and a password are registered. The card ID in the lending card table 112 indicates the card ID of the temporary lending card 60. When lending the temporary lending card 60, the card ID, the card lending date, the expiration date, the principal ID, the name, and the password of the temporary lending card 60 are registered. When the temporary lending card 60 is returned, the card return date is registered in the corresponding card ID row.

  FIG. 4 is a diagram illustrating an example of registration information in the usage history table 113. In the specification history table 113, the use date, use time, principal ID, card ID, and use history are registered. The card IDs in the use history table 113 are those in which both the normal card and the temporary lending card 60 can be registered. That is, regardless of whether the card is a normal card or a temporary lending card 60, the date of use, time of use, personal ID, card ID, and usage history are registered when the card is used.

  FIG. 5 is a diagram illustrating an example of registration information in the admissible area table 211. As shown in FIGS. 5A to 5C, the admissible area table 211 is provided for each area, and card IDs of cards that can be entered for each area are registered in each table. The card IDs in the entranceable area table 211 can be registered for both the normal card and the temporary lending card 60. That is, the card ID of a card that can be entered in each area is registered regardless of whether the card is a regular card or a temporary lending card 60.

  Hereinafter, the operation of each component will be described together with the processing sequence related to authentication.

(Lending phase)
FIG. 6 is a processing sequence of the authentication system 1 when a user who has forgotten his / her normal card makes a use application for the temporary lending card 60. The reception terminal 30 transmits the name, principal ID, and password input by the user to the principal confirmation processing unit 101 of the server device 10 (step S101). The personal identification processing unit 101 refers to the normal card table 111 and confirms whether the name, personal ID, and password received from the receiving terminal 30 match the name, personal ID, and password registered in the normal card table 111. (Step S102). If the password and the like match, the identity verification processing unit 101 further obtains the admissible area information from the normal card table 111, and the name, the identity ID, the password, and the admissible area information are entered into the admission area information document of the lending device 40. This is provided to the inclusion / issuance processing unit 401 (step S103).

  The admission area information writing / issuing processing unit 401 refers to the received admission area information and the like, and in the admission area table 211 of the admission device 20, the admission area table 211 of the area where the user can enter is entered. The unique card ID to be written on the temporary lending card 60 is registered (step S104). When the writing is normally completed, the admissible area information writing / issuing processing unit 401 writes the above-described card ID into the temporary lending card 60 and issues the temporary lending card 60 (step S105). When the issuance is normally completed, the admission area information writing / issuance processing unit 401, the card ID written in the temporary lending card 60, the card lending date, the expiration date (for example, 24 hours from the issuance), the user ID, The name and password are transmitted to the lending history writing processing unit 102 of the server device 10 (step S106).

  The lending history writing processing unit 102 writes the received card ID, card lending date, expiration date, user ID, name, and password in the lending card table 112 (step S107). That is, the server device 10 stores the user (person ID) and the card ID of the temporary lending card 60 in association with each other.

(Entrance / exit phase)
FIG. 7 is a processing sequence of the authentication system 1 when a user who borrows the temporary lending card 60 enters or leaves the building. When the user performs an entry / exit operation such as holding the temporary lending card 60 over the entrance / exit device 20, the temporary lending card 60 is temporarily rented to the entrance area information verification processing unit 201 of the entrance / exit device 20. 60 card IDs are transmitted (step S201). The admissible area information verification processing unit 201 checks whether the card ID received from the temporary lending card 60 exists in the admissible area table 211 of the area where the user enters and leaves (step S202). When the card ID of the temporary lending card 60 is present in the admissible area table 211, the admissible area information verification processing unit 201 permits the user to enter and exit and opens the gate 50 (step S203).

  When the gate 50 is normally opened, the entrance area information verification processing unit 201 transmits the card ID, the use date, the use time, and the use history to the history transmission processing unit 202, and the history transmission processing unit 202. Transmits the card ID, use date, use time, and use history to the ID collation processing unit 103 of the server device 10 (step S204). That is, the entrance / exit device 20 transmits history information including the card ID of the temporary loan card 60 to the server device 10 when there is an entrance / exit by the temporary loan card 60.

  The ID verification processing unit 103 first checks whether or not the received card ID exists in the normal card table 111 (step S205). In the case of entrance / exit using the temporary lending card 60, since the received card ID does not exist in the normal card table 111, the ID verification processing unit 103 determines whether the received card ID exists in the lending card table 112 subsequently. Is confirmed (step S206). When the existence can be confirmed, the ID collation processing unit 103 reads the principal ID from the lending card table 112 and transmits the use date, the use time, the principal ID, the card ID, and the use history to the history writing processing unit 104. (Step S207). The history writing processing unit 104 writes the received use date, use time, principal ID, card ID, and use history in the use history table 113 (step S208). That is, the server device 10 acquires the user associated with the card ID and records the history information of the temporary lending card 60 as the user history information.

(Return phase)
FIG. 8 is a processing sequence of the authentication system 1 when a user who borrows the temporary loan card 60 returns the temporary loan card 60. The reception terminal 30 transmits the card ID of the returned temporary lending card 60 to the entranceable area information writing / issuing processing unit 401 of the lending device 40 (step S301). The entrance area information writing / issuing processing unit 401 deletes the received card ID from the entrance area table 211 of the entrance / exit device 20 (step S302). Next, the admissible area information writing / issuance processing unit 401 deletes the card ID written in the temporary lending card 60 (step S303). Thereafter, the admissible area information writing / issuance processing unit 401 transmits the deleted card ID and card return date to the lending history writing processing unit 102 of the server device 10 (step S304). The lending history writing processing unit 102 checks the lending card table 112 and writes the card return date in the row corresponding to the received card ID (step S305).

  Thus, according to the present embodiment, when there is an application for use of the temporary lending card 60 from the user, the server device 10 provides the lending device 40 with information on the area where the user can enter the lending device 40. The card ID to be written to the temporary lending card 60 is registered in the admissible area table 211 of the area included in the admissible area, and then the card ID is written to the temporary lending card 60 and issued. Thereby, the overhead which converts the card ID of the temporary lending card 60 into the principal ID can be eliminated, and the authentication process using the temporary lending card 60 can be immediately executed. Even when the temporary lending card 60 is used, it is possible to act without feeling inconvenience such as waiting for entry / exit.

  Further, after issuing the temporary lending card 60, the lending device 40 transmits the card ID of the temporary lending card 60 to the server device 10, and the server device 10 stores the user and the card ID of the temporary lending card 60 in association with each other. To do. As a result, the server device 10 can manage the correspondence between the temporary lending card 60 and the user.

  Moreover, when there is entrance / exit by the temporary lending card 60, the entrance / exit device 20 transmits history information including the card ID of the temporary lending card 60 to the server device 10, and the server device 10 is associated with the card ID. The user is acquired, and the history information of the temporary lending card 60 is recorded as the user history information. This makes it possible to record the entry / exit history of the temporary lending card 60 as the user's entry / exit history.

  The lending device 40 deletes the card ID of the temporary lending card 60 from the entrance area table 211 of the entry / exit device when the user applies for a return of the temporary lending card 60, and the card ID from the temporary lending card 60. Is deleted. Thereby, after the temporary loan card 60 is returned, the use of the temporary loan card 60 can be normally stopped.

  Although the present invention has been described based on the drawings and examples, it should be noted that those skilled in the art can easily make various modifications and corrections based on the present disclosure. Therefore, it should be noted that these variations and modifications are included in the scope of the present invention. For example, the functions included in each component, each step, etc. can be rearranged so that there is no logical contradiction, and multiple components, steps, etc. can be combined or divided into one It is.

  Further, in FIG. 1, for convenience of explanation, the connection relationship between each component is illustrated by a line. However, such a line represents only an example of a logical connection relationship and limits the configuration of the present invention. Note that it is not a thing.

DESCRIPTION OF SYMBOLS 1 Authentication system 10 Server apparatus 101 Identity confirmation process part 102 Lending history writing process part 103 ID collation process part 104 History writing process part 111 Normal card table 112 Lending card table 113 Usage history table 20 Entrance / exit apparatus 201 Entrance area Information collation processing unit 202 History transmission processing unit 211 Admissible area table 30 Reception terminal 40 Lending device 401 Admissible area information writing / issuing processing unit 50 Gate 60 Temporary lending card

Claims (8)

A temporary lending card to be lent to users;
A lending device for writing and issuing a card ID on the temporary lending card;
A server device for storing the user's accessible area information;
An entrance / exit device having an entrance area table for registering card IDs of cards that can be entered for each area, and an authentication system comprising:
The server device, when there is an application for the use of the temporary lending card from the user, provides the lending device with the admissible area information of the user,
The lending device refers to the admissible area, registers a card ID to be written in the temporary lending card in the admissible area table of the area where the user can enter, and then stores the card ID in the temporary lending card An authentication system characterized by writing to and issuing. The lending device transmits the card ID of the temporary lending card to the server device after issuance of the temporary lending card,
The authentication system according to claim 1, wherein the server device stores the user and the card ID of the temporary lending card in association with each other. The entrance / exit device transmits history information including the card ID of the temporary loan card to the server device when there is an entrance / exit by the temporary loan card,
The authentication according to claim 2, wherein the server device acquires the user associated with the card ID and records the history information of the temporary lending card as the history information of the user. system.   The lending device deletes the card ID of the temporary lending card from the entrance area table of the entry / exit device when there is an application for returning the temporary lending card from the user, and the temporary lending card The authentication system according to any one of claims 1 to 3, wherein the card ID is deleted from the card. A temporary lending card to be lent to users;
A lending device for writing and issuing a card ID on the temporary lending card;
A server device for storing the user's accessible area information;
An entrance / exit device having an entrance area table that stores card IDs of cards that can be entered for each area, and an authentication method by an authentication system comprising:
The processing procedure by the server device includes the step of providing the lending device with the admission area information of the user when there is an application for the temporary lending card from the user,
The processing procedure by the lending device includes a step of registering a card ID to be written in the temporary lending card in the admissible area table of the area where the user can enter with reference to the admissible area, and then the card ID And writing and issuing to the temporary lending card. The processing procedure by the lending device includes a step of transmitting the card ID of the temporary lending card to the server device after issuance of the temporary lending card,
6. The authentication method according to claim 5, wherein the processing procedure by the server device includes a step of storing the user and the card ID of the temporary lending card in association with each other. The processing procedure by the entrance / exit device includes a step of transmitting history information including the card ID of the temporary loan card to the server device when there is an entrance / exit by the temporary loan card,
The processing procedure by the server device includes a step of acquiring the user associated with the card ID, and a step of recording the history information of the temporary loan card as the history information of the user. The authentication method according to claim 6. The processing procedure by the lending device includes the step of deleting the card ID of the temporary lending card from the entrance area table of the entrance / exit device when there is an application for returning the temporary lending card from the user; The authentication method according to claim 5, further comprising a step of deleting the card ID from a temporary lending card.

Images