JP2015064820A - Entry-exit management system - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide an entry-exit management system including even an administration zone such as a server room where a zone-specific administrator is present in management targets, capable of ensuring minute security management.SOLUTION: An entry-exit management system of the present invention includes: a door provided for each entry-exit management zone and including an electric lock; a personal identification information reader provided to correspond to the door; a first storage device storing, for each electric lock, unlocking operation conditions constituted of whether a two-person collation process is valid or invalid, the number of two-person-collation authorized people, and an input order of the two-person-collation authorized people; a second storage device storing, for each door, pass-through authority conditions constituted of attributes whether a person has a pass-through authority and whether the person has the two-person collation authority to correspond to the personal identification information; and a control device unlocking or setting the electric lock of the door of each management zone on the basis of the pass-through authority conditions stored in the second storage device and corresponding to the acquired personal identification information and the door and the unlocking operation conditions stored in the first storage device.

Description

  The present invention relates to an entrance / exit management system, and more particularly, to an entrance / exit management system suitable for performing fine security management for each management section.

In the entrance / exit management system, personal identification information such as a card reader is used to obtain personal identification information from the IC card of the visitor, and based on this personal identification information, control is performed to control the database of the server or the personal identification device and the electric lock. Referring to the entry / exit availability information for each personal identification information stored in the device, using the entry / exit availability information, the door of the management zone is unlocked if it is allowed to pass, and if it is not allowed, it is locked. By performing electric lock control such as holding, entry / exit of a specific section is managed.
In particular, in the server room and the important document storage room, illegal visitors are excluded, and at least two people are allowed to enter the room to prevent illegal activities in the room. Such an entrance / exit management system is disclosed in Patent Document 1, for example.

Specifically, in Patent Document 1, in an entrance authentication system having a multiple-person authentication function, the number of persons who can determine the number of persons required for entering a room can be set as room entry conditions in the room data. Entry authority that indicates whether or not there is an authority to enter the room, and single entry privilege that indicates the authority to enter the room ignoring the entry condition even when the number of authenticated persons set in the room is plural. An entrance / exit management technique that enables the user to set the password is disclosed.
Further, in the personal ID data, the presence or absence or size of a privilege level can be set separately from the entry authority and the individual entry privilege. In addition to the number of authenticated persons, the room data can be set as the entry permission condition. Thus, it is disclosed that a privilege level condition for determining the number of persons having the privilege level required for entering a room or the size and number of the privilege level required for entering a room can be set.

JP 2011-80279 A

According to the technique of Patent Document 1, the presence / absence / size of the privilege level can be set in the personal ID data, and the presence / absence / size and the number of people in the privilege level are set in the room data as the privilege level condition. Easy entry of the conditions for entering the room.
However, in an entrance / exit management system that manages many management sections with different confidential contents, it may not be preferable to set a high privilege level for the personal ID. For example, when there are a plurality of management sections with a high security level, IDs having a high privilege level exist in all of them, so that the risk of losing an IC card in which the ID is recorded increases. As described above, the technique of Patent Document 1 may cause a security vulnerability.

Further, as described above, entry / exit management may be performed by collating two persons in an important room such as a server room, but it may be difficult to operate the collation of two persons in an emergency or at night or on holidays. In such a case, an administrator of the server room often performs admission attendance. In addition, when entering or leaving the server room, there is a three-person verification operation in which the administrator of the server room is always present. However, the technique of Patent Document 1 cannot cope with this because there is no distinction between the administrator and the user.
An object of the present invention relates to an entrance / exit management system that also manages a management section having a manager specific to the section, such as a server room, and provides a system that solves the above problems and performs fine security management. There is.

In order to solve the above-mentioned problem, the entrance / exit management system of the present invention includes:
A reading device for personal identification information provided corresponding to each door having an electric lock in the management section of the entrance / exit, and the validity / invalidity of two-person verification processing for performing verification for two persons for each electric lock In correspondence with the personal identification information, a first storage device for storing unlocking operation conditions comprising the number of two verification authorities having the right to be verified and the input order of the two verification authorities, A second storage device that stores a passage authority condition including attributes of presence / absence of passage authority and presence / absence of two-person verification privilege, and the second storage device corresponding to the acquired personal identification information and door And a control device for unlocking or locking the electric lock of the door of the management section based on the passage authority condition and the unlocking operation condition of the first storage device.

  According to the present invention, since entry conditions can be set for each management section or electric lock, fine security management is possible.

It is a system configuration diagram of an embodiment. It is a table | surface which shows the data structure of personal identification information. It is a table | surface which shows an example of the authority which can be provided to an IC card. It is a table | surface which shows the list of the number of authorized persons which can be set with a 2 person collation function. 10 is a table showing a list of authentication results when the number of authorized persons is “no authorized person required”. It is a table | surface which shows the list of the authentication result in case the number of authorized persons is "only 1st authorized person". It is a table | surface which shows the list of the authentication result in case the number of authorized persons is "only 2nd authorized person". 10 is a table showing a list of authentication results when the number of authorized persons is “only one authorized person”. 10 is a table showing a list of authentication results when the number of authorized persons is “authorized person for both first and second person”. It is a flowchart which shows the process outline | summary of a 2 person collation function. It is a flowchart which shows the process outline | summary of the 2 person collation function in the other system configuration | structure of an Example. It is a flowchart which shows the process outline | summary of the two person collation function including duplication collation.

  Embodiments of the present invention will be described below with reference to the drawings. In each drawing and each embodiment, the same or similar components are denoted by the same reference numerals and description thereof is omitted.

  FIG. 1 is a system configuration diagram of an entrance / exit management system according to an embodiment of the present invention. The entrance / exit management system is installed in a building, and includes an entrance / exit management system server 1, a database 2, a monitoring PC 3, a control device 4, a monitoring PC card reader 5A, and a door passage card reader 5B. Each of the doors 10 for entering / exiting a management section (not shown) in which the entrance / exit management system of the embodiment performs entrance / exit management is provided with an electric lock 6. The unlocking and locking of the electric lock 6 is controlled. In FIG. 1, the control device 4, the door passage card reader 5 </ b> B, and the electric lock 6 are shown one by one, but the control device 4 controls the plurality of door passage card readers 5 </ b> B and the electric lock 6. In addition, the control device 4 may be provided for each management section, or may be provided according to the facility status of the door 6.

The server 1, the monitoring PC 3, and the control device 4 are connected via a LAN network 100, and communicate authentication information and entry / exit management information. The database 2 stores personal identification information (personal identification information DB) registered in the entry / exit management system, history information such as card operation history and alarm history (history DB), and the like.
The personal identification information includes, for each IC card, the IC card identification number, the ID number of the IC card owner (entrance / exit), information such as the affiliation / name of the IC card owner, and the authority of traffic for each section (see FIG. 4 for details). Information).
Further, the database 2 is provided with another DB for storing unlocking operation conditions set for each door 10 described later.

Each control device 4 distributes and stores personal identification information (IC card identification number, ID number, traffic authority information, etc.), history information, etc., with personal identification information registered in the database 2 as a master. As a result, the information acquired from the IC card can be collated only by the control device 4 without network communication, so that collation can be speeded up. When the personal identification information is corrected / updated, the information registered in the database 2 is corrected / updated. As a result, management of personal identification information data is facilitated, and security can be improved by limiting the personal identification information data distributed to the control device 4.
Similarly, the door unlocking operation conditions stored in the DB 2 of the database 2 are distributed from the database 2 to each control device 4.

In the system configuration diagram of FIG. 1, one electric lock 6 of the door 10 and a card reader (C / R) 5 </ b> B are set and connected to the control device 4. In an actual entrance / exit management system, the control device 4 may manage a plurality of sections. Further, a plurality of doors 10 may be provided in one management section, and an electric lock 6 and a card reader (C / R) 5B are provided corresponding to each door. In this case, a plurality of electric locks 6 and card readers (C / R) 5B are connected to the control device 4 so as to control a plurality of electric locks 6.
FIG. 1 shows one set of electric lock 6 and a card reader (C / R) 5B, and the flowcharts described below also explain the operation of this configuration. The actual operation of the entrance / exit management system can be realized by repeating the operations described below for the number of sets of the electric lock 6 and the card reader (C / R) 5B.

Next, the unlocking control method of the door 10 performed by the control device 4 will be described, and the determination conditions at that time will be described with reference to FIGS. 2, 3, 4, 5a, 5b, and 5c. To do.
First, the control device 4 controls the card reader 5B to obtain an IC card identification number of the IC card. Next, the control device 4 searches the personal identification information distributed from the database 2 using the acquired IC card identification number.

When there is no data related to the acquired IC card identification number in the personal identification information, the owner of the IC card is determined to have no authority to pass through the door 10 controlled by the control device 4, and the electric lock 6 The locked state of is maintained.
When there is data related to the acquired IC card identification number in the personal identification information, the passage authority of the section recorded in the personal identification information is referred to and compared with the unlocking operation conditions of the door 10, The unlocked state and the locked state of the lock 6 are controlled.

FIG. 2 is a table showing the data structure of the personal identification information in the personal identification information DB of the database 2. The personal identification information includes, for each IC card, an IC card identification number, an ID number of the IC card owner, an affiliation and name of the IC card owner, and a plurality of management sections or passage authority for each door. The passage authority includes presence / absence of passage authority, presence / absence of two-person verification privilege, and presence / absence of duplicate verification privilege. When adding control such as three-person verification, an attribute indicating whether or not there is a three-person verification privilege may be added to this area.
FIG. 2 shows an example in which different traffic authorities are defined for each management section. However, when a common traffic authority is defined for the management section, a single set of traffic authorities may be defined as a representative.

  The personal identification information corresponding to the ID number having the authority to pass through the management section controlled by the control device 4 is distributed from the database 2 to the control device 4. Furthermore, distribution may be limited to the passage authority of the section managed by the control device 4. Of course, it goes without saying that all data in the database 2 may be distributed to the control device 4.

  FIG. 3 is a table showing types of traffic authority set according to attributes of presence / absence of traffic authority, presence / absence of two-person verification privilege, and presence / absence of duplicate verification privilege. The first type in which no attribute is set (No in FIG. 3 is 1) indicates a state where there is no passage authority for the management partition. The second type (No in FIG. 3) in which only the attribute of presence / absence of the passage authority is set to “Yes” indicates that the management section has the general passage authority. The third type (No in FIG. 3) in which the attribute of presence / absence of passage authority and presence / absence of two-person verification privilege is set to “Yes”, presence / absence of passage authority, presence / absence of two-person verification privilege, and attribute of duplicate privilege The fourth type (No in FIG. 3 is 4) in which “Yes” is set indicates administrator traffic authority A and B.

The two-person verification privilege is an authority to be verified when two-person verification is set to be effective in the unlocking operation condition for each door described later. The two-person verification privilege is to enter and leave the server room by collating with the resident server administrator on nights and holidays where there are many secret matters such as server rooms, etc. It is to make. This can be expected to prevent fraud in the server room.
Furthermore, the duplicate verification privilege enables single entry even if the two-person verification is enabled in the unlocking operation conditions. As a result, among the managers having the two-person verification privilege, it is possible to operate with a senior administrator who has the dual verification privilege and can enter the server room alone. Specifically, the same IC card is allowed to be read twice, so that one person can enter and leave the room without changing the processing flow of the two-person verification.

FIG. 4 shows a list of unlocking operation conditions of the door 10 when the validity / invalidity of the two-person verification and the number / location of the two-person verification authority are selected. Any one unlocking operation condition is selected and set in the control device 4.
Further, although not shown in FIG. 4, the unlocking operation condition includes a setting as to whether or not the IC card duplication verification is permitted for the unlocking control of the door 10.

  The unlocking operation condition and the personal identification information described above may be stored in a storage device that can be referred to from the control device 4 in addition to the database 2 and the control device 4.

  The control device 4 may set the unlocking operation conditions different for each time zone. For example, it is set so that two-person verification without a two-person verification authority is performed in the daytime and two-person verification with a two-person verification authority is performed only for the second person at night. As described above, at night when there are few users of the server room, the manager room is entered together with the administrator to prevent illegal actions in the server room.

  This traffic authority, two-person verification privilege, and duplicate verification privilege are set independently for each door 10. Thereby, it is possible to limit privileged server rooms even among server room managers. Further, it is possible to easily prevent the administrator of the server room from being given the privilege of the management section other than the server room.

  As described above, the control device 4 according to the embodiment performs unlocking control of the door 10 based on the passage authority of the occupant specified by the IC card and the unlocking conditions of the door 10. FIG. 5a shows a two-person verification result when the unlocking condition shown in FIG. 4 is “no two-person verification authority required”. The circled column indicates that the two-person verification result is OK and the door is unlocked. In the case of being locked, the x column shows a case where the result of the two-person verification is NG and the door remains locked without being unlocked. Similarly, FIG. 5b shows a two-person verification result when the unlocking condition shown in FIG. 4 is “Only the first person is a two-person verification authority”, and FIG. 5c is an unlocking condition shown in FIG. FIG. 5d shows the result of the two-person verification when “the second person is the two-person verification authority”. FIG. 5d shows that the unlocking condition shown in FIG. FIG. 5e shows a two-person verification result when the unlocking condition shown in FIG. 4 is “two-person verification authority” for both the first person and the second person. The results are shown.

  Here, the case where the unlocking condition shown in FIG. 5C is “the second person only has two verification authorities” will be described. In the above-described embodiment, it is assumed that the IC card is sequentially read by the card reader (C / R) 5B corresponding to the electric lock 6 and two-person verification is performed. When a server administrator who has two-person verification authority accompanies entry / exit, the administrator needs to go to the door card reader (C / R) 5B. If there is already a visitor in the server room, and it is known that even if one person enters the site, it will not be a single task and there will be no security problem, the administrator's card verification will be sent to the monitoring PC 3 in FIG. You may make it carry out from the connected card reader (C / R) 5A.

When the card verification of the administrator is performed by the card reader (C / R) 5A, the card authentication of the administrator is performed after the first card authentication. It is preferable in terms of security to apply the unlocking conditions of “authorized person”.
The above-described method of checking the card of the administrator by the card reader (C / R) 5A connected to the monitoring PC 3 can be applied to the case of “only the first person who has two person verification authority” in FIG. It is preferable to unlock after confirming the authentication result of the visitors.

Details of the unlocking process will be described below with reference to FIGS.
FIG. 6 shows a processing flow in the case where two cards are authenticated by the card reader (C / R) 5B.

First, the first card operation is performed (S100). The control device 4 performs a card verification process based on the IC card identification number acquired by the card reader (C / R) 5B (S101). Based on the result of S101, it is determined whether or not the first card has the authority to pass the card (S102). If the card has no authority to pass, a verification NG display is displayed on the card reader (C / R) 5B for passing the door. (S110), and the process ends. If the card is authorized to pass, it is next determined whether the door is a two-person verification target door (S103).
If the door is not a target for two-person verification in S103, the door is unlocked (S111), and the process ends. In the case of a two-person verification target door, the card verification interval count is started (S104).

  This is a standby process between the first person collation and the second person collation. If there is no second card operation within the pre-designated standby time (interval time) (S105, S106), the verification process is interrupted, and verification is performed with respect to the door-passing card reader (C / R) 5B. NG is displayed (S110), and the process is terminated. When the second card operation is performed within the waiting time (interval time), the card verification process is performed for the second card (S107).

First, it is determined whether the IC card identification number of the second card is the same as the IC card identification number of the first card (S108). If the IC card identification numbers are the same (No in S108), the verification process is interrupted, a verification NG display is displayed on the door passage card reader (C / R) 5B (S110), and the process ends. To do.
If the IC card identification number of the second card is different from the IC card identification number ID of the first card (Yes in S108), the second card is authorized to pass based on the result of S107 (Yes ) / No (No) is determined (S109). When there is no traffic authority (No in S109), the verification process is interrupted, a verification NG display is displayed on the door-passing card reader (C / R) 5B (S110), and the process is terminated. When there is a passage authority (Yes in S109), an unlocking operation is performed on the corresponding door (S111), and the process is terminated.

  In FIG. 7, the first person performs card authentication with the card reader (C / R) 5A connected to the monitoring PC 3, and the second person performs card authentication with the door passing card reader (C / R) 5B. The process flow in the case of performing two-person verification is shown. This corresponds to the case where the above-described card verification by the administrator is performed from the card reader (C / R) 5A connected to the monitoring PC 3 in FIG.

First, before performing the card verification of the administrator, the control device 4 that controls the door is changed from the monitoring PC 3 to the first person PC verification mode (S200).
Next, it is determined whether or not the corresponding door is a two-person verification target door (S201). If the door is not a two-person verification target door (S201 is No), an NG is displayed on the monitoring PC 3 (S202), and the process is terminated. To do. In the case of a two-person verification target door, polling of the card reader (C / R) 5A connected to the monitoring PC 3 is started (S203).

  When the first card operation of the door is performed by the card reader (C / R) 5A (S204), the monitoring PC 3 performs a card verification process based on the IC card identification number acquired by the card reader (C / R) 5A. Implement (S205). Based on the result of S205, it is determined whether or not the first card has the right to pass (S206). If the card does not have the right to pass (S206 is not present), NG is displayed on the monitoring PC 3 (S202), Exit. In the case of a card with passage authority (S206 is present), the card verification interval count by the door-passing card reader (C / R) 5B is started (S207).

  This is a standby process between the first person collation and the second person collation. If there is no second card operation within the pre-designated standby time (interval time) (S208, S209), the verification process is interrupted, and verification is performed with respect to the door-passing card reader (C / R) 5B. NG is displayed (S210), and the process is terminated. If there is a second card operation within the waiting time (interval time), the card verification process is performed for the second card (S211).

First, it is determined whether the IC card identification number of the second card is the same as the IC card identification number of the first card (S212). If the IC card identification numbers are the same (No in S212), the verification process is interrupted, a verification NG display is displayed to the door-passing card reader (C / R) 5B (S210), and the process ends. To do.
If the IC card identification number of the second card is different from the IC card identification number ID of the first card, whether the second card is authorized to pass (Yes) / No (No) based on the result of S211 Judgment is made (S213). If there is no passage authority, the verification process is interrupted, a verification NG display is displayed on the door-passing card reader (C / R) 5B (S210), and the process ends. If there is a passage authority, the door is unlocked (S214), and the process is terminated.

FIG. 8 shows a processing outline of the two-person verification function corresponding to the plurality of authorities given to the card shown in FIG. 3 and the authority number setting function at the time of two-person verification shown in FIG.
The first card operation is performed (S300). The control device 4 performs card verification processing based on the IC card identification number acquired by the card reader (C / R) 5B (S301).
Based on the result of S301, it is determined whether or not the first card has the right to pass (S302). If the card has no right to pass (if S302 is absent), the card reader (C / R) The verification NG is displayed on 5B (S315), and the process is terminated. If the card is authorized to pass, it is next determined whether the door is a two-person verification target door (S303).

If it is not a two-person verification target door (No in S303), the door is unlocked (S316), and the card verification process is terminated. In the case of a two-person verification target door (Yes in S303), the number of authorized persons required for the two-person verification of the corresponding door is confirmed (S304).
If the first card has two-person verification authority, or if the corresponding door is set to “no authority required”, the interval count is started in the case of Yes in S305 (S306).
If the first card does not have two-person verification authority and the corresponding door is set to “authorized person only for the first person” or “authorized person for both the first and second person”, the door passage is determined as No in S305. NG is displayed on the card reader 5B (S315), and the process is terminated.

The interval count is a standby process between the first person collation and the second person collation. If there is no second card operation within the standby time specified in advance (S307, S308), it is determined as verification NG, and verification NG is displayed on the door-passing card reader 5B (S315), and the process is terminated. To do. If there is a second card operation in S307, card verification processing is performed (S309).
First, it is determined whether or not the second card ID is different from the first card ID (S310). If they have the same card ID, it is determined whether the card has “duplicate matching authority” (S311). If the user does not have “duplicate verification authority”, the verification is set to NG, and verification NG is displayed on the door-passing card reader 5B (S315), and the process is terminated.
If it has “duplicate matching authority” (Yes in S311), the passage authority of the second card is confirmed (S312). Even if the card ID of the second person is different from the card ID of the first person, the presence / absence of passing authority of the second card is confirmed (S312).

When there is no passage authority (No in S312), it is set as verification NG, and verification NG is displayed on the door traffic card reader 5B (S315), and the processing is terminated.
When there is a passage authority (Yes in S312), the number of authorized persons required for the two-person verification of the corresponding door is confirmed (S313).
If the corresponding door is set to “No authority required” or “Only the first person is authorized”, the door is unlocked (S111), and the process is terminated as if Yes in S314.
In the case of setting “authorized person for both first and second person”, it is confirmed whether the second card has “two-person verification authority”. If yes, as in the case of Yes in S314, the unlocking operation is performed on the corresponding door (S316), and the process is terminated. If not, as No in S314, a verification NG display is displayed on the door passing card reader 5B (S315).

  Some entry / exit systems have an anti-passback function that controls entry by checking the entry history. In the above-described embodiment, the process at the time of entering the room has been described, but a two-person verification process using an IC card can also be performed when leaving the room. Although a detailed flowchart is not shown, after the steps of S102 and S109 in FIG. 6, S206 and S213 in FIG. 7, and S302 and S312 in FIG. A step of “determining whether or not” is added. If the IC card has a room entry history, the process is continued. If there is no room entry history, a step of interrupting the process (error) is added. Thereby, the present invention can be applied to the leaving process.

  In this embodiment, the IC card has been described as an authentication device. However, the present invention can be applied to an entrance / exit system using biometric information such as an iris or a fingerprint as identification information, or an entrance / exit system using RFID (Radio Frequency IDentification). Is possible.

1 Server 2 Database (DB)
3 Monitoring PC
4 Control device 5A, 5B Card reader (C / R)
6 Electric lock 10 Door 100 LAN network

Claims (4)

A reader for personal identification information provided corresponding to each door having an electric lock in the control section of the entrance and exit;
For each electric lock, it consists of the validity of the two-person verification process for performing verification for two persons, the number of two-person verification authorities having the right to be subject to the two-person verification process, and the input order of the two verification authorities A first storage device for storing unlocking operation conditions;
A second storage device for storing, for each door, a passage authority condition comprising attributes of presence / absence of passage authority and presence / absence of two-person verification privilege corresponding to the personal identification information;
Based on the acquired personal identification information, the passage authority condition of the second storage device corresponding to the door, and the unlocking operation condition of the first storage device, the electric lock of the door of the management section is unlocked or locked. A control device for performing
An entrance / exit management system characterized by comprising: In the entrance / exit management system of Claim 1,
The control device, when the two-person verification process of the unlocking operation condition is valid,
Obtain two pieces of personal identification information in sequence,
When any one of the passage authority conditions corresponding to the two personal identification information includes a two-person verification privilege and the passage authority is valid in both of the passage authority conditions corresponding to the two personal identification information, the management section An entrance / exit management system for unlocking the electric lock of the door. In the entrance / exit management system according to claim 2,
The passage authority stored in the second storage device includes a duplicate matching privilege,
The controller is
Obtain two pieces of personal identification information in sequence,
When the acquired two personal identification information is the same, and the duplication checking privilege and the passage authority of the passage authority condition corresponding to the personal identification information are valid, the electric lock of the door of the management section is unlocked. An entrance / exit management system characterized by performing. In the entrance / exit management system of Claim 1,
And a personal identification information reader connected to the control device via a network.
The controller is
The two-person verification process of the unlocking operation condition is effective, and
The two-person verification privilege of the passage authority condition corresponding to the personal identification information acquired by the network reader is valid, and
When the passage authority is valid under both the passage authority conditions corresponding to the two personal identification information acquired by the network reader and the reader, the electric lock of the door of the management section is unlocked. Entrance / exit management system.

Images