JP2015183356A - Entry control system - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide an entry control system for controlling entry into a room, a building, an area etc. capable of at least either one of preventing congestion and enhancing security at an entrance.SOLUTION: An authentication device 30 acquires a piece of identification information from a communication terminal 10 which has entered a first communication area and determines whether the acquired identification information is included in the identification information of the communication terminal 10 permitted to enter, which is transmitted from an entrance management server 20. When the acquired identification information is included, the authentication device 30 transmits a piece of identification information to a locking/unlocking device 40. The locking/unlocking device 40 acquires the identification information from the communication terminal 10 which has entered a second communication area and determines whether the acquired information is included in the identification information transmitted from the authentication device 30. When the acquired identification information is included, a door is unlocked.

Description

  The present invention relates to a technique for managing entrance to a room, building, area, or the like.

  In buildings such as buildings, the doors of each room are generally locked so that only those who have the door key can enter the room. Recently, a mechanism for using an IC (Integrated Circuit) card or the like as a door key has been widely introduced. Patent Document 1 describes using a smartphone as a door key.

JP 2013-185346 A

  In a conventional system that uses an IC card or a smart phone as a door key, authentication processing is performed at that time when the IC card is held over a reader near the door to be unlocked. And if authentication is successful, it will be unlocked and will be able to enter the room. When a plurality of people enter the room, it is necessary for each person to hold the IC card over the reader and receive authentication, so the front of the door may be crowded.

  In addition, in buildings and the like, there are guards near the official entrance, and the entrance to the building is sometimes monitored by human eyes. However, in the conventional system, an intruder who obtains the key illegally enters the room if he / she reaches the door from another route, avoiding the official entrance where the guards are located.

  An object of the present invention is to realize at least one of suppressing the occurrence of congestion at an entrance and enhancing security in entrance management to a room, a building, an area, or the like.

The admission management system according to this invention is
An admission management system comprising an authentication device and a locking / unlocking device,
The authentication device
A terminal information storage unit that stores identification information of communication terminals that are permitted to pass;
A first acquisition unit that acquires identification information from a communication terminal that has entered the first communication area;
A first determination unit for determining whether or not the identification information acquired by the first acquisition unit is included in the identification information stored by the terminal information storage unit;
A first identification information transmission unit that transmits the identification information acquired by the first acquisition unit to the locking / unlocking device when it is determined that the first determination unit is included;
The locking and unlocking device is
A second acquisition unit that acquires identification information from a communication terminal that has entered a second communication area different from the first communication area;
A second determination unit that determines whether or not the identification information acquired by the second acquisition unit is included in the identification information transmitted from the first identification information transmission unit;
When it determines with the said 2nd determination part being included, the unlocking part which unlocks a door is provided, It is characterized by the above-mentioned.

The second communication area is an area closer to the door than the previous first communication area.

The second communication area is narrower than the previous first communication area.

The locking / unlocking device further includes:
A second identification information transmission unit that transmits the identification information acquired by the second acquisition unit to the authentication device;
The first acquisition unit acquires identification information from a communication terminal that has entered a third communication area that is an area ahead of the door,
Whether the identification information acquired by the first acquisition unit from the communication terminal that has entered the third communication area is included in the identification information transmitted from the second identification information transmission unit. It is characterized by determining.

The terminal information storage unit stores user authentication information together with identification information of a communication terminal,
When the first determination unit determines that it is included, the first determination unit authenticates the user based on the authentication information stored together with the identification information acquired by the first acquisition unit,
The first identification information transmission unit transmits the identification information acquired by the first acquisition unit to the locking / unlocking device when the first determination unit succeeds in user authentication.

In the admission management system according to the present invention, first, it is determined whether the communication terminal is a permitted communication terminal when the communication terminal enters the first communication area, and then, when the communication terminal enters the second communication area, It is determined whether the communication terminal is determined to be permitted in the first communication area.
Therefore, in the second communication area, the determination is completed by collating with a small amount of information, and the processing load in the second communication area is small. Also, security can be increased depending on how the first communication area and the second communication area are set.

FIG. 3 is a schematic explanatory diagram of an admission management system 1 according to the first embodiment. 1 is a functional configuration diagram of an admission management system 1 according to Embodiment 1. FIG. The figure which shows the information which the connection information storage part 22 of the immigration server 20 memorize | stores. The figure which shows the information which the connection information storage part 35 of the authentication apparatus 30 memorize | stores. FIG. 3 is a process flow diagram of the admission management system 1 according to the first embodiment. The figure which shows the information which the connection information storage part 12 of the communication terminal 10 memorize | stores. The figure which shows the information which the terminal information storage part 31 of the authentication apparatus 30 memorize | stores. The figure which shows the information which the terminal information storage part 41 of the locking / unlocking apparatus 40 memorize | stores. FIG. 3 is a schematic explanatory diagram of an admission management system 1 according to a second embodiment. The function block diagram of the admission management system 1 which concerns on Embodiment 2. FIG. The figure which shows the information which the connection information storage part 22 of the immigration server 20 memorize | stores. FIG. 10 is a process flow diagram of the admission management system 1 according to the second embodiment. The figure which shows the information which the terminal information storage part 31 of the authentication apparatus 30 memorize | stores. The figure which shows the example of the hardware constitutions of the communication terminal 10, the immigration server 20, the authentication apparatus 30, and the locking / unlocking apparatus 40 shown in Embodiment 1,2.

Embodiment 1 FIG.
FIG. 1 is a schematic explanatory diagram of an admission management system 1 according to the first embodiment.
Here, an example of managing entrance to a building room will be described.
The user transmits an entrance application to the designated room from the communication terminal 10 such as a smartphone to the immigration server 20 (1). When admission is permitted for the admission application, the immigration server 20 transmits a permission response to the communication terminal 10 (2) and transmits identification information of the communication terminal 10 to the authentication device 30 (3).
The user carries the communication terminal 10 and enters the building, and enters a communication area (first communication area) of an access point of a wireless LAN (Local Area Network) installed near the entrance of the building (4). Then, the communication terminal 10 transmits identification information to the authentication device 30 via the wireless LAN (5). The authentication device 30 determines whether or not the identification information received from the communication terminal 10 is included in the identification information received from the immigration server 20 (6). If included, the authentication device 30 transmits the identification information received from the communication terminal 10 to the locking / unlocking device 40 (7).
The user goes to the room and enters the communication area (second communication area) of the access point of the wireless LAN installed in front of the room (8). Then, the communication terminal 10 transmits identification information to the locking / unlocking device 40 via the wireless LAN (9). The locking / unlocking device 40 determines whether the identification information received from the communication terminal 10 is included in the identification information received from the authentication device 30 (10). If included, the locking / unlocking device 40 unlocks the door (11).

FIG. 2 is a functional configuration diagram of the admission management system 1 according to the first embodiment.
The admission management system 1 includes a communication terminal 10, an immigration server 20, an authentication device 30, and a locking / unlocking device 40.
The communication terminal 10 is a smartphone, for example, and is connected to a mobile phone network via an antenna 50 and can be connected to a wireless LAN. The immigration server 20 is connected to the in-house network 51. Immigration server 20 and authentication device 30 are connected via network 52. The authentication device 30 and the locking / unlocking device 40 are connected via a network 53. The authentication device 30 is connected to a first wireless LAN 54 provided for each building, and the locking / unlocking device 40 is connected to a second wireless LAN 55 provided for each room (for each door).
The communication terminal 10 can access the immigration server 20 by connecting to the internal network 51 via a mobile phone network or a wireless LAN.

  The communication terminal 10 includes an admission application unit 11, a connection information storage unit 12, and an identification information transmission unit 13. The immigration server 20 includes an entrance authentication unit 21 and a connection information storage unit 22. The authentication device 30 includes a terminal information storage unit 31, an acquisition unit 32 (first acquisition unit), a determination unit 33 (first determination unit), an identification information transmission unit 34 (first identification information transmission unit), and a connection information storage unit 35. Is provided. The locking / unlocking device 40 includes a terminal information storage unit 41, an acquisition unit 42 (second acquisition unit), a determination unit 43 (second determination unit), and an unlocking unit 44.

  As a premise of the process of the entrance management system 1, information stored in the connection information storage unit 22 of the immigration server 20 and information stored in the connection information storage unit 35 of the authentication device 30 will be described.

FIG. 3 is a diagram illustrating information stored in the connection information storage unit 22 of the immigration server 20.
The connection information storage unit 22 stores an SSID (Service Set Identifier) and PIN (Personal Identification Number) of the access point of the first wireless LAN 54 for each building.

FIG. 4 is a diagram illustrating information stored in the connection information storage unit 35 of the authentication device 30.
The connection information storage unit 35 stores the SSID and PIN of the access point of the second wireless LAN 55 for each building room.

FIG. 5 is a process flow diagram of the admission management system 1 according to the first embodiment.
The admission application unit 11 of the communication terminal 10 transmits to the immigration server 20 an admission application including designation information specifying a building and a room to be entered and identification information of the communication terminal 10 in accordance with a user operation (S101). Then, the admission authentication unit 21 of the immigration server 20 determines whether or not admission is permitted for the admission application (S102). For example, the admission authentication unit 21 transfers an admission application to the administrator by e-mail or the like, and determines whether or not to permit admission according to a reply from the administrator.
When admission is permitted (permitted in S102), the admission authentication unit 21 transmits a permission response to the communication terminal 10 (S103), and the room information indicating the identification information of the communication terminal 10 and the building and room permitted to enter. Is transmitted to the authentication device 30 (S104). Here, the permission response includes the room information indicating the building and the room permitted to enter, and the SSID and PIN of the first wireless LAN 54 stored in the connection information storage unit 22 in association with the building permitted to enter. Is included. As shown in FIG. 6, the connection information storage unit 12 of the communication terminal 10 stores the SSID and PIN of the first wireless LAN 54 (S105). Further, as shown in FIG. 7, the terminal information storage unit 31 of the authentication device 30 stores the transmitted room information and identification information in association with each other (S106).

The user carries the communication terminal 10 and enters the building, and enters the communication area (first communication area) of the access point of the first wireless LAN 54 installed near the entrance of the building. Then, the communication terminal 10 is connected to the first wireless LAN 54 using the PIN stored in the connection information storage unit 12 (S107). The identification information transmitter 13 of the communication terminal 10 transmits the identification information to the authentication device 30 via the first wireless LAN 54 (S108). In connection with the connection of the first wireless LAN 54 and the transmission of the identification information, the user does not need to operate the communication terminal 10, and for example, the communication terminal 10 itself can be set to perform automatically.
The acquisition unit 32 of the authentication device 30 acquires the identification information transmitted from the communication terminal 10 (S109). Then, the determination unit 33 of the authentication device 30 determines whether or not the acquired identification information is included in the identification information stored in the terminal information storage unit 31 (S110). When it is determined that it is included (included in S110), the identification information transmitting unit 34 of the authentication device 30 transmits the first authentication information to the communication terminal 10 (S111), and the identification information and entrance of the communication terminal 10 are included. The room information indicating the permitted building and room is transmitted to the locking / unlocking device 40 (S112). Here, the first authentication information includes the SSID and PIN of the second wireless LAN 55 corresponding to the room stored in the terminal information storage unit 31 in association with the identification information. As shown in FIG. 6, the connection information storage unit 12 of the communication terminal 10 stores the SSID and PIN of the second wireless LAN 55 (S113). As shown in FIG. 8, the terminal information storage unit 41 of the locking / unlocking device 40 stores the transmitted room information and identification information in association with each other (S114).

The user goes to the room and enters the communication area (second communication area) of the access point of the second wireless LAN 55 installed in front of the room. Then, the communication terminal 10 is connected to the second wireless LAN 55 using the PIN stored in the connection information storage unit 12 (S115). The identification information transmitting unit 13 of the communication terminal 10 transmits the identification information to the locking / unlocking device 40 via the second wireless LAN 55 (S116). In connection with the connection of the second wireless LAN 55 and the transmission of the identification information, the user does not need to operate the communication terminal 10, and for example, the communication terminal 10 itself can be set to perform automatically.
The acquisition unit 42 of the locking / unlocking device 40 acquires the identification information transmitted from the communication terminal 10 (S117). Then, the determination unit 43 of the locking / unlocking device 40 determines whether or not the acquired identification information is included in the identification information stored in the terminal information storage unit 41 (S118). When it is determined that it is included (included in S118), the unlocking unit 44 of the locking / unlocking device 40 unlocks the door (S119).

As described above, in the admission management system 1 according to Embodiment 1, authentication is performed by the authentication device 30 in the first communication area, and authentication is performed by the locking / unlocking device 40 in the second communication area.
Therefore, even if the user reaches the front of the door without passing through the first communication area set at the entrance of the building where the guards are present, the door is not unlocked. Therefore, high security is realized.
In addition, the locking / unlocking device 40 has only the identification information authenticated by the authentication device 30 and the amount of data is small, so that the authentication does not take time. Therefore, the front of the door can be prevented from being crowded. Since the authentication process in the authentication device 30 may be completed before the user arrives in front of the door, it may take some time.

  In the above description, an example of managing entrance to a building room has been described. However, for example, the admission management system 1 may be used when managing admission of a building on the site. When managing the entrance of a building on the site, the first communication area may be set near the entrance of the site, and the second communication area may be set at the entrance of the building.

  In the above description, when managing entrance to a building room, the vicinity of the entrance of the building is defined as the first communication area, and the front of the room is defined as the second communication area. However, the present invention is not limited to this, and an area in the vicinity of the room may be the second communication area, and an area that passes (desired to pass) before the second communication area may be the first communication area. If the purpose is to shorten the authentication time in front of the door, the area near the room is the second communication area, and an area wider than the second communication area including the second communication area is the first communication area. It is good.

In the above description, the first communication area is the communication range of the access point of the first wireless LAN 54, and the second communication area is the communication range of the access point of the second wireless LAN 55. However, the first communication area and the second communication area may not be the communication range of the wireless LAN access point, but may be communication areas defined by other communication methods.
For example, for the first communication area, a designated range such as near the entrance of a building may be determined in advance as the first communication area. Then, when the position of the communication terminal 10 is specified by the radio wave of the base station of the mobile phone network and the communication terminal 10 enters the predetermined designated range, the communication terminal 10 passes to the authentication device 30 via the mobile phone network. The identification information may be transmitted.
The second communication area may be a Bluetooth (registered trademark) of the locking / unlocking device 40 or a communication area for infrared communication. Then, when the communication terminal 10 is connected to the locking / unlocking device 40 by Bluetooth (registered trademark) or infrared communication, identification information may be transmitted to the locking / unlocking device 40 by Bluetooth (registered trademark) or infrared communication. .

In the above description, authentication in the first communication area is also based only on the identification information. However, in the first communication area, other authentication such as face authentication may be performed together.
For example, in S101 of FIG. 4, the user's face photograph is included in the entrance application. In S104, the entrance authentication unit 21 of the immigration server 20 transmits the user's face photograph to the authentication device 30 together with identification information and the like. In S110, when the identification unit 33 includes identification information, the determination unit 33 of the authentication device 30 takes a photograph of the user's face with a camera installed near the entrance of the building, and the photographed face photograph is transmitted in S104. Comparison with a face photograph is performed to determine whether or not they are the same person. Accordingly, it is possible to prevent a user who is not permitted to enter the room by lending the communication terminal 10 to another person or illegally acquiring the communication terminal 10.

  Here, in the first communication area, even if authentication requiring processing time is performed in addition to the authentication based on the identification information, the authentication processing in the authentication device 30 should be completed before the user arrives in front of the door. Because it is good, there is no congestion in front of the door.

Embodiment 2. FIG.
In the second embodiment, processing when a user enters a room without receiving authentication in the second communication area will be described.
In the second embodiment, the description will focus on the parts different from the first embodiment.

For example, when multiple users enter the room at the same timing, the door is opened by the authentication of the previous user, so it is possible that the user enters the room without receiving authentication in the second communication area. It is done.
There may be a mechanism (anti-passback) in which the door cannot be opened from inside the room unless the communication terminal 10 has been authenticated. In such a case, a user who enters the room without receiving authentication cannot open the door when leaving the room. Therefore, it is necessary to authenticate the communication terminal 10 of the user in the room in a follow-up manner.

FIG. 9 is a schematic explanatory diagram of the admission management system 1 according to the second embodiment.
When the door is unlocked, the locking / unlocking device 40 transmits the identification information received from the communication terminal 10 to the authentication device 30 (1).
The user carries the communication terminal 10, enters the room, and enters the communication area (third communication area) of the wireless LAN access point set in the room (2). Then, the communication terminal 10 transmits identification information to the authentication device 30 via the wireless LAN (3). The authentication device 30 determines whether the identification information received from the communication terminal 10 is included in the identification information received from the immigration server 20, and the identification information received from the locking / unlocking device 40 from the communication terminal 10 It is determined whether the received identification information is included (4).
The identification information received from the immigration server 20 includes the identification information received from the communication terminal 10, and the identification information received from the locking / unlocking device 40 does not include the identification information received from the communication terminal 10. In this case, the authentication device 30 authenticates the communication terminal 10 in a follow-up manner (5). That is, the authentication device 30 determines that the communication terminal 10 has entered the room without being authenticated in the second communication area, and authenticates the communication terminal 10 by following it.

FIG. 10 is a functional configuration diagram of the admission management system 1 according to the second embodiment.
The entrance management system 1 shown in FIG. 10 differs from the entrance management system 1 shown in FIG. 2 in that the authentication device 30 is connected to the third wireless LAN 56. Further, the locking / unlocking device 40 is different in that it includes an identification information transmission unit 45 (second identification information transmission unit).

Information stored in the connection information storage unit 22 of the immigration server 20 will be described as a premise of processing of the admission management system 1.
FIG. 11 is a diagram showing information stored in the connection information storage unit 22 of the immigration server 20.
The connection information storage unit 22 stores the SSID and PIN of the access point of the first wireless LAN 54 for each building, and stores the SSID and PIN of the access point of the third wireless LAN 56 for each room of the building.

FIG. 12 is a process flow diagram of the admission management system 1 according to the second embodiment.
In S103 shown in FIG. 5, the permission response includes the SSID and PIN of the third wireless LAN 56 stored in the connection information storage unit 22 in association with the building and room permitted to enter. In S105, the connection information storage unit 12 of the communication terminal 10 stores the SSID and PIN of the third wireless LAN 56.
When the unlocking unit 44 of the locking / unlocking device 40 unlocks the door in S119 illustrated in FIG. 5, the identification information transmitting unit 45 transmits the identification information acquired in S117 illustrated in FIG. 5 to the authentication device 30 (S201). . As illustrated in FIG. 13, the terminal information storage unit 31 of the authentication device 30 stores that the transmitted identification information has been authenticated by the locking / unlocking device 40 (S202).

The user carries the communication terminal 10 and enters the room, and enters the communication area (third communication area) of the access point of the third wireless LAN 56 installed in the room. Then, the communication terminal 10 is connected to the third wireless LAN 56 using the PIN stored in the connection information storage unit 12 (S203). The identification information transmission unit 13 of the communication terminal 10 transmits the identification information to the authentication device 30 via the third wireless LAN 56 (S204). In connection with the connection of the third wireless LAN 56 and the transmission of the identification information, the user does not need to operate the communication terminal 10 and can be set so that the communication terminal 10 itself automatically performs, for example.
The acquisition unit 32 of the authentication device 30 acquires the identification information transmitted from the communication terminal 10 (S205). Then, the determination unit 33 of the authentication device 30 determines whether or not the acquired identification information is included in the identification information stored as having been authenticated by the terminal information storage unit 31 (S206). Thereby, the determination unit 33 determines whether or not the communication terminal 10 has been authenticated in the second communication area. If it is included (included in S206), since the authentication is received in the second communication area, the process is terminated.
On the other hand, if it is not included (not included in S206), the determination unit 33 includes the acquired identification information in the identification information stored by the terminal information storage unit 31 (not authenticated), and The terminal information storage unit 31 determines whether or not the identification information and the identification information of the room where the third wireless LAN 56 is installed are stored in association with each other (S207). Thereby, the determination unit 33 determines whether or not the communication terminal 10 is permitted to enter the room. If permitted (permitted in S207), the terminal information storage unit 31 stores that the identification information has been authenticated by the locking / unlocking device 40 (S208). In other words, the authentication device 30 performs authentication afterward.

  In addition, when not permitted in S207, the determination unit 33 may issue a notification to the security guard that a user who is not permitted to enter is entering, for example. In addition, a notification that a user who is not permitted to enter the communication terminal 10 of another user in the same room may enter.

  As described above, in the admission management system 1 according to Embodiment 2, follow-up authentication is performed in the third communication area. Therefore, if anti-passback based on information stored in the terminal information storage unit 31 of the authentication device 30 is introduced, even if the authentication in the second communication area is not performed for some reason, the user cannot leave the room. Can be prevented.

  When a plurality of users enter the room at the same timing, it is conceivable that they enter the room without being authenticated in the second communication area. Therefore, a sensor is provided in the vicinity of the door, and the number of passing people detected by the sensor is compared with the number of communication terminals 10 authenticated in the second communication area, so that a warning is issued if there is a mismatch. Also good.

In the above description, the third communication area is the communication range of the access point of the third wireless LAN 56. However, the third communication area may not be the communication range of the wireless LAN access point, but may be a communication area defined by another communication method or the like.
For example, similarly to the first communication area, a method of specifying the position of the communication terminal 10 by radio waves of a base station of a mobile phone network may be used.

  In addition, the admission management system 1 described in the above embodiment is configured to include one authentication device 30 and one locking / unlocking device 40. However, the authentication device 30 may be provided for each building. Moreover, the locking / unlocking device 40 may be provided for each door or for each floor of the building.

Further, in the admission management system 1 described in the above embodiment, it is possible to apply for entry from the communication terminal 10.
Conventionally, in an office or the like, the door may be unlocked by an IC card distributed to each employee only on business days. In this case, employees who want to enter the office on non-business days (hereinafter referred to as temporary residents) obtain an IC card for non-business days (hereinafter referred to as temporary card) that can be unlocked even on non-business days. It is necessary to keep. However, on the day before the non-business day, etc., the window for issuing temporary cards was crowded, placing a burden on the temporary residents. However, in the admission management system 1 described in the above embodiment, the admission permission can be obtained only by operating the communication terminal 10, and the burden on the temporary occupant can be reduced.

  Further, the authentication device 30 and a vending machine such as a beverage in a building may be connected via a network, and some service may be provided to a user who carries the communication terminal 10 permitted to enter the room.

FIG. 14 is a diagram illustrating an example of a hardware configuration of the communication terminal 10, the immigration server 20, the authentication device 30, and the locking / unlocking device 40 described in the first and second embodiments.
The communication terminal 10, the immigration server 20, the authentication device 30, and the locking / unlocking device 40 are computers. Each element of the communication terminal 10, the immigration server 20, the authentication device 30, and the locking / unlocking device 40 can be realized by a program.
As a hardware configuration of the communication terminal 10, the immigration server 20, the authentication device 30, and the locking / unlocking device 40, the arithmetic device 901, the external storage device 902, the main storage device 903, the communication device 904, and the input / output device 905 are connected to the bus. Has been.

  The arithmetic device 901 is a CPU (Central Processing Unit) that executes a program. The external storage device 902 is, for example, a ROM (Read Only Memory), a flash memory, a hard disk device, or the like. The main storage device 903 is, for example, a RAM (Random Access Memory). The communication device 904 is, for example, a communication board. The input / output device 905 is, for example, a mouse, a keyboard, a display device, or the like.

The program is normally stored in the external storage device 902, and is loaded into the main storage device 903 and sequentially read into the arithmetic device 901 and executed.
The program includes an admission application unit 11, an identification information transmission unit 13, an admission authentication unit 21, an acquisition unit 32, a determination unit 33, an identification information transmission unit 34, an acquisition unit 42, a determination unit 43, an unlocking unit 44, and an identification information transmission unit. 45 is a program for realizing the function described as 45.
Furthermore, an operating system (OS) is also stored in the external storage device 902. At least a part of the OS is loaded into the main storage device 903, and the arithmetic device 901 executes the above program while executing the OS.
In the description of the first and second embodiments, the information described as being stored in the connection information storage unit 12, the connection information storage unit 22, the terminal information storage unit 31, the connection information storage unit 35, the terminal information storage unit 41, and the like Is stored in the main storage device 903 as a file.

  14 is merely an example of the hardware configuration of the communication terminal 10, the immigration server 20, the authentication device 30, and the locking / unlocking device 40. The communication terminal 10, the immigration server 20, the authentication device 30, and the solution The hardware configuration of the lock device 40 is not limited to the configuration illustrated in FIG. 14 and may be other configurations.

  DESCRIPTION OF SYMBOLS 1 Admission management system 10 Communication terminal 11 Admission application part 12 Connection information storage part 13 Identification information transmission part 20 Immigration server 21 Admission authentication part 22 Connection information storage part 30 Authentication apparatus 31 Terminal information storage part , 32 acquisition unit, 33 determination unit, 34 identification information transmission unit, 35 connection information storage unit, 40 locking / unlocking device, 41 terminal information storage unit, 42 acquisition unit, 43 determination unit, 44 unlocking unit, 45 identification information transmission unit , 50 antenna, 51 in-house network, 52, 53 network, 54 first wireless LAN, 55 second wireless LAN, 56 third wireless LAN.

Claims (5)

An admission management system comprising an authentication device and a locking / unlocking device,
The authentication device
A terminal information storage unit that stores identification information of communication terminals that are permitted to pass;
A first acquisition unit that acquires identification information from a communication terminal that has entered the first communication area;
A first determination unit for determining whether or not the identification information acquired by the first acquisition unit is included in the identification information stored by the terminal information storage unit;
A first identification information transmission unit that transmits the identification information acquired by the first acquisition unit to the locking / unlocking device when it is determined that the first determination unit is included;
The locking and unlocking device is
A second acquisition unit that acquires identification information from a communication terminal that has entered a second communication area different from the first communication area;
A second determination unit that determines whether or not the identification information acquired by the second acquisition unit is included in the identification information transmitted from the first identification information transmission unit;
An entrance management system comprising: an unlocking unit that unlocks the door when it is determined that the second determination unit is included. The admission management system according to claim 1, wherein the second communication area is an area closer to the door than the previous first communication area. The admission management system according to claim 1, wherein the second communication area is an area narrower than the previous first communication area. The locking / unlocking device further includes:
A second identification information transmission unit that transmits the identification information acquired by the second acquisition unit to the authentication device;
The first acquisition unit acquires identification information from a communication terminal that has entered a third communication area that is an area ahead of the door,
Whether the identification information acquired by the first acquisition unit from the communication terminal that has entered the third communication area is included in the identification information transmitted from the second identification information transmission unit. The admission management system according to any one of claims 1 to 3, wherein the admission management system is determined. The terminal information storage unit stores user authentication information together with identification information of a communication terminal,
When the first determination unit determines that it is included, the first determination unit authenticates the user based on the authentication information stored together with the identification information acquired by the first acquisition unit,
The said 1st identification information transmission part transmits the identification information which the said 1st acquisition part acquired to the said locking / unlocking apparatus, when the said 1st determination part succeeds in user authentication. To the admission management system according to any one of 4 to 4.

Images