JP2015185061A - Entry/exit bi-directional distribution system and method - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide an entry/exit information bi-directional distribution system and a method capable of unitary management of entry/exit information over plural footholds and biometric authentication information by a management server and capable of comprehending entry/exit information among plural footholds at real time.SOLUTION: The entry/exit information bi-directional distribution system includes: an entry/exit integration management server that has an entry/exit integration database for storing entry/exit information linked with a personal information database; plural entry/exit servers disposed in the respective footholds, which has a foothold entry/exit database storing the entry/exit information; and a biometric authentication information server that has a biometric authentication information database storing a biometric authentication information.

Description

  The present invention relates to an entry / exit information interactive delivery system and method.

  In recent years, leakage of personal information has been regarded as a problem in enterprises, and there is an increasing tendency to strengthen physical security that can be said to be the basis of all security.

  In entrance / exit management, biometric information such as an entrance / exit IC card and finger vein information is mainly used. Entrance / exit management is performed at each site or building, and the entrance / exit management system is often configured as a stand-alone. Patent Document 1 discloses entrance / exit management using biometric authentication technology.

  FIG. 9 shows a case where the management server is connected to the entrance / exit system at each site. An entrance / exit information file is created based on the entrance / exit information in the management database holding the entrance / exit IC card information, and a plurality of locations are created. It is a block diagram of the system which can be cooperated automatically with no entrance / exit system. The entrance / exit management system of FIG. 9 includes an entrance / exit information database 901, an entrance / exit information file 902, a management server 903, a network 904, an entrance / exit server 905, and a biometric authentication information server 906.

  In the entrance / exit management system configured as shown in FIG. 9, the entrance / exit information file 902 created based on the entrance / exit information in the entrance / exit information database 901 is automatically transmitted at regular intervals from the entrance / exit server 905 via the network 904. Acquired (PULL type distribution). For example, when an entry / exit IC card issuance operation is performed on the management server 903 for a new visitor, a new addition distribution file is created, and the distribution file is taken in by the entry / exit server 905 side, so that the card Will be available. Further, by setting the management server 903, the distribution destination bases can be assigned according to the type, company, affiliation, etc. of the IC card, and entrance / exit management according to the security level of each base can be performed.

JP 2009-169553 A

  By the way, in the case of the entrance / exit management system configured as shown in FIG. 9, even if the information in the entrance / exit information database 901 is updated and the entrance / exit information file 902 is created in response to the update event, the delivery file is stored in real time. It cannot be taken into the entry / exit server 905. For example, when the entry / exit IC card is lost, it is necessary to delete the data from the immediate entry / exit server 905, but the entry / exit IC card is deleted until the distribution file is acquired from the entry / exit server 905. Since it is not used, it is in a usable state and may be impersonated by a third party who has picked up the entrance / exit IC card.

  This is because if the entry / exit information of the entry / exit IC card is deleted directly in the entry / exit server 905, entry / exit is disabled and spoofing damage can be avoided, but the entry / exit IC card is distributed to a plurality of locations. In this case, it is difficult to delete data immediately because the system administrator is different and there is no operation authority.

  Furthermore, since the entry / exit information is not centrally managed in the management server 903, it is difficult or impossible for an entry / exit system administrator to check and operate the use status in the entry / exit server 905 at another base. For example, it is not possible to confirm on the system what kind of permission group is assigned to an entrance / exit IC card at another base and which area can be passed through, but there is no choice but to confirm with the person in charge at the other base. In particular, large companies with many group companies and affiliated companies are often inconvenient because they may manage entry and exit across multiple locations.

  Checking and operating the usage status at other sites is possible if the access right is granted to the entrance / exit system administrator, but the usage status must be checked and operated for each site. Efficiency.

  In addition, when personal information such as name and affiliation is managed in association with entry / exit IC card information, manual information correction work occurs when the personal information is changed due to a transfer event or the like. In addition, when leaving or retiring, deletion of entry / exit IC card information also occurs. These manual information updating operations are time-consuming for the system administrator. There is also a security risk that not only will it be time-consuming, but if the deletion work is neglected, a person who does not have the authority to enter or leave the site will pass.

  The security risk of not deleting the entry / exit IC card information can be avoided if the system administrator collects the entry / exit IC card itself from the user, but there may be a time lag before collection. Because it depends on the operation of the system administrator at the site, it is not an optimal management method.

  In addition, although entrance / exit management using biometric information such as finger vein information is described in Patent Document 1, a single biometric information server is used as a stand-alone configuration for one site, and multiple sites It is configured so that entrance / exit management cannot be performed across. Therefore, when there are users who enter or leave multiple locations, such as large companies with many group companies and affiliated companies, biometric authentication information registration and deletion work occurs depending on the number of locations, and the burden on the workers in charge It has become.

  An object of the present invention is to allow entry / exit information and biometric information across multiple bases to be centrally managed by a management server, and to allow entry / exit information to be grasped in real time between a plurality of bases. It is to provide a distribution system and method.

  In order to solve the above problems, for example, the configuration described in the claims is adopted. The present application includes a plurality of means for solving the above-described problems. To give an example, the entrance / exit integrated management server including an entrance / exit integrated database for storing entrance / exit information linked to a personal information database, and the entrance / exit An entry / exit information bi-directional distribution system comprising a plurality of entry / exit servers arranged at each site, comprising a site entry / exit database for storing information, and a biometric information server comprising a biometric information database for storing biometric information Is provided. In the entry / exit information interactive distribution system, the entrance / exit integrated management server updates the entrance / exit information in the entrance / exit integrated database, and DB update means for updating the entrance / exit information in the entrance / exit integrated database. And an online processing means for creating a differential delivery file indicating update information of the entrance / exit information at a timing, and a transmission / reception means for transmitting / receiving the differential delivery file to / from the entrance / exit server, DB update means for updating the entrance / exit information in the exit database, local processing means for creating the differential delivery file at the timing when the entrance / exit information in the base entrance / exit database is updated, and the differential delivery file before An entry / exit integrated management server and transmission / reception means for transmitting and receiving, and the biometric information server is registered. Comprising a receiving means for receiving the biometric information, and the DB update means for updating the biometric information, and authenticating means for the biometric authentication request from the entering and leaving server authentication.

  According to another example, each base comprising an entrance / exit integrated management server including an entrance / exit integrated database for storing entrance / exit information linked to a personal information database, and a base entrance / exit database for storing the entrance / exit information. There is provided a two-way entry / exit information delivery method using a plurality of entry / exit servers arranged in the biometric authentication information server including a biometric information database storing biometric authentication information. The entry / exit information interactive delivery method includes an update step of updating the entrance / exit information in the entrance / exit integrated database by the entrance / exit integrated management server, and a timing when the entrance / exit information in the entrance / exit integrated database is updated. In the online processing step of creating a differential delivery file indicating updated information of the entrance / exit information by the entrance / exit integrated management server, the differential delivery file is transmitted to the entrance / exit server by the entrance / exit integrated management server. In the transmission step, the entry / exit server updates the entry / exit information in the base entry / exit database by the entry / exit server, and the entry / exit server updates the entry / exit information in the base entry / exit database by the entry / exit server, A local processing step of creating the differential delivery file; The transmission step of transmitting the differential distribution file to the entrance / exit room integrated management server by the bus, the receiving step of receiving the biometric information registered by the biometric information server, and the biometric information server An update step of updating biometric authentication information, and an authentication step of authenticating a biometric authentication request from the entry / exit server by the biometric authentication information server.

According to the present invention, entrance / exit information and biometric information that span multiple bases can be centrally managed by the management server, and entrance / exit information between the multiple bases can be grasped in real time.
Further features related to the present invention will become apparent from the description of the present specification and the accompanying drawings. Further, problems, configurations and effects other than those described above will be clarified by the description of the following examples.

1 is a system configuration diagram showing an embodiment of the present invention. It is a block diagram of the entrance / exit information stored in the entrance / exit integrated database and the entrance / exit database. It is a figure which shows an example of a personal information table. It is a figure which shows an example of a card information table. It is a figure which shows an example of a biometrics information table. It is the figure which showed the structure of the entrance / exit integrated management server. It is the figure which showed the structure of the entrance / exit server. It is the figure which showed the structure of the biometric information server. It is a frame block diagram of the delivery transmitted / received between an entrance / exit integrated management server and an entrance / exit server. It is a flowchart which shows the outline | summary of the data delivery process of an entrance / exit integrated management server. It is a flowchart which shows the outline | summary of the data update process in the entrance / exit server performed after the process of FIG. 7A. It is a flowchart which shows the outline | summary of the data delivery process of an entrance / exit server. It is a flowchart which shows the outline | summary of the data update process in the entrance / exit integrated management server performed after the process of FIG. 8A. It is a schematic block diagram of the conventional entrance / exit management system.

  Embodiments of the present invention will be described below with reference to the accompanying drawings. The accompanying drawings show specific embodiments in accordance with the principle of the present invention, but these are for the understanding of the present invention, and are never used to interpret the present invention in a limited manner. is not.

  The interactive entry / exit information distribution system of the present embodiment centrally manages the entrance / exit information of each base in the database of the management server, and realizes management of the entrance / exit card information linked with the personal information, Real-time transmission / reception is performed through two-way communication with the entrance / exit system on the site side, allowing entry / exit information to be synchronized at all times, and distributing biometric information registered at one site to other sites Is possible. A detailed configuration will be described below.

  FIG. 1 is a system configuration diagram showing an example of an embodiment of the present invention. This system includes an entrance / exit integrated management server 101, a biometric authentication information server 107, and entrance / exit servers 104, 105 installed at bases 102, 103. The entrance / exit integrated management server 101 includes an entrance / exit integrated database 1. The entrance / exit servers 104 and 105 include base entry / exit databases 2 and 3. The entrance / exit integrated management server 101 and the entrance / exit servers 104, 105 are connected via the network 106, and the entrance / exit information is synchronized by bidirectionally transmitting and receiving. The entrance / exit integrated database 1 centrally manages entrance / exit information for a plurality of bases in the base entrance / exit databases 2 and 3. Although FIG. 1 shows two entry / exit servers 104 and 105 at two sites, a larger number may be provided.

  The entrance / exit integrated management server 101 is operated from the management system operation terminals 108 and 109 via the network 106. The entrance / exit servers 104 and 105 are operated from operation terminals 110 and 111 connected to a local network in the base.

  A personal information database 4 is connected to the entrance / exit integrated database 1. The entrance / exit integrated management server 101 automatically and regularly fetches personal information stored in the personal information database 4 and is linked with the entrance / exit information in the entrance / exit integrated database 1. Personal information here refers to name, gender, affiliation, date of entry / retirement, contract type, and the like. Personal information is not limited to this example, and may include other information such as family register information. In the entrance / exit integrated database 1, entrance / exit information is created in accordance with the update of the personal information, and the entrance / exit integrated management server 101 stores the information created based on the entrance / exit information as the base entrance / exit databases 2, 3. Send to.

  The biometric authentication information server 107 includes a biometric authentication information database 5. The biometric authentication information server 107 is connected to the network 106, receives biometric authentication information registered from the biometric authentication information registration terminals 112 and 113 installed at the bases 102 and 103, and receives information about the users of the bases 102 and 103. Centrally manage biometric authentication information. In the biometric information database 5, information for identifying each individual (for example, name ID) and biometric information are stored in association with each other. Here, the biometric authentication information is information indicating physical characteristics for identity verification. For example, veins (finger, palm, back), fingerprint, eyeball iris, retina, voiceprint, face, palm shape ( Information such as finger length, thickness, and surface area). Such biometric information is usually managed by image data (for example, face authentication) or voice data (for example, voiceprint authentication).

  FIG. 2A is a diagram showing an example of entrance / exit information stored in the entrance / exit integrated database 1 and the base entrance / exit databases 2, 3. That is, the entrance / exit information of the same configuration is managed in the entrance / exit integrated database 1 and the base entrance / exit databases 2 and 3. As shown in FIG. 2A, the entry / exit information includes: name ID 201, name 202, gender 203, affiliation 204, entry date 205, retirement date 206, contract type 207, card number 208, card ID key No 209, card The expiration date 210, the permission group 211, the anti-passback 212, the authentication location information 213, the authentication disclosure flag 214, the base No. 215, and the like are included as configuration items. This entry / exit information is registered for each entry / exit IC card. The personal information 216 of the contract type 207 from the name ID 201 in FIG. 2A is configured by automatic cooperation from the personal information table of the personal information database 4.

  Also, the card information 217 from the card number 208 to the anti-passback 212 in FIG. 2A is registered / updated from the management system operation terminals 108 and 109 or locally registered / updated from the entry / exit servers 104 and 105. Consists of information. The permission group 211 is information indicating a range in which entry and exit are possible, for example. For example, an area of a certain base is assigned to the number, and here, it is indicated that the area specified by the number “301” can be entered and exited. The anti-passback 212 is information indicating whether to enable or disable the anti-passback function. Anti-passback function detects inconsistencies in entry / exit consistency by entering illegally due to sharing (piggyback) or passing in the entry / exit system using an IC card. Therefore, it is a function that prevents the user from entering or leaving the room twice with the same ID.

  Further, the biometric authentication information 218 from the authentication position information 213 to the site No. 215 in FIG. 2A is information acquired from the biometric authentication information registration terminals 112 and 113 or the biometric authentication information server 107. For example, when biometric information is registered in the biometric information information server 107 by an operation on the biometric information registration terminals 112 and 113, the biometric information information 218 information is entered from the biometric information registration terminals 112 and 113 into the entrance / exit integrated management server. 101. Alternatively, when the biometric authentication information is registered in the biometric authentication information server 107, the entrance / exit integrated management server 101 may acquire the information of the biometric authentication information 218 in cooperation with the biometric authentication information server 107. The authentication position information 213 is position information (for example, a path to biometric authentication data) indicating where the biometric authentication information corresponding to the individual is stored in the biometric authentication information database 5. As a feature of the present embodiment, the entry / exit servers 104 and 105 make a biometric authentication request to the biometric authentication information server 107 using the authentication position information 213. That is, the biometric information itself is not managed by the entrance / exit information, but the position of the biometric information in the biometric information database 5 is managed. Accordingly, even when the base 102 changes to the base 103, it is not necessary to send the biometric authentication information itself to the base 103, and only the authentication position information 213 needs to be sent. Therefore, authentication via the biometric authentication information server 107 can be performed using the authentication position information 213.

  The authentication disclosure flag 214 is a flag indicating whether or not to release the biometric information registered in the biometric information database 5. For example, when the authentication disclosure flag 214 is “public” “0”, the authentication location information 213 is transmitted to the destination location when the location is moved. When the authentication disclosure flag 214 is “1” not disclosed, the authentication location information 213 is not transmitted to the destination site when the site is moved. In order to increase the security of biometric authentication information, such public flag information is also provided. The base No. 215 is information for identifying the base where biometric authentication information is registered. For example, when biometric authentication information is registered using the biometric authentication information registration terminal 112 of the base 102, the base No. 215 is information for identifying the base 102.

  Next, a configuration example of entry / exit information stored in the entry / exit integrated database 1 and the base entry / exit databases 2, 3 will be described. The entrance / exit information includes a personal information table, a card information table, and a biometric information table described below. In the following description, the information of the present invention will be described using a “table” structure. However, the information does not necessarily have to be represented by a table data structure, and may be represented by other data structures. good. Therefore, it may be simply referred to as “information” to indicate that it does not depend on the data structure.

  FIG. 2B is a diagram illustrating an example of a personal information table. The personal information table includes a name ID 201, a name 202, a gender 203, an affiliation 204, an entry date 205, a retirement date 206, and a contract type 207 as configuration items. The personal information database 4 may also be configured with the same table as in FIG. 2B.

  FIG. 2C is a diagram illustrating an example of a card information table. The card information table includes name ID 201, card number 208, card ID key No 209, card expiration date 210, permission group 211, and anti-passback 212 as configuration items.

  FIG. 2D is a diagram illustrating an example of a biometric authentication information table. The biometric authentication information table includes name ID 201, authentication location information 213, authentication disclosure flag 214, and base No. 215 as configuration items.

  In this embodiment, the entrance / exit integrated management server 101 transmits the difference distribution file to the entrance / exit servers 104 and 105 in real time at the timing when any item of the personal information 216 and the card information 217 is updated. To do. Here, the difference delivery file is information indicating update information of the leaving information, and details will be described later.

  In addition, the entry / exit servers 104 and 105 transmit the differential distribution file to the entrance / exit integrated management server 101 in real time at a timing when any item of the personal information 216 and the card information 217 is updated. Note that the entry / exit server cannot be updated by the operation terminal across the sites. (Example: The entry / exit server 105 cannot be updated by the operation terminal 110.)

  FIG. 3 is a diagram showing the configuration of the entrance / exit integrated management server 101. The entry / exit integrated management server 101 includes a DB update unit 301 that performs update processing of the entry / exit integrated database 1, an online processing unit 302 that performs online processing in response to requests from the management system operation terminals 108 and 109, and an entry / exit server. And a transmission / reception unit 303 that performs transmission / reception to / from 104 and 105.

  The entrance / exit integrated database 1 includes a personal information table 304, a card information table 305, and a biometric authentication information table 306. The personal information table 304 is the information shown in FIG. 2B. The card information table 305 is the information shown in FIG. 2C. The biometric authentication information table 306 is the information shown in FIG. 2D.

  As described above, the entrance / exit integrated management server 101 stores the personal information 216 obtained in cooperation with the personal information database in the personal information table 304. Further, the entrance / exit integrated management server 101 stores the card information 217 registered / updated from the management system operation terminals 108 and 109 or locally registered / updated from the entrance / exit servers 104 and 105 in the card information table 305. . Furthermore, the entrance / exit integrated management server 101 stores the biometric information 218 obtained from the biometric authentication information registration terminals 112 and 113 or the biometric information server 107 in the biometric information table 306.

  When a card status change operation such as card information search, card issuance, or card use suspension is performed from the management system operation terminals 108 and 109, the transmission / reception unit 303 receives the information. The online processing unit 302 processes requests from the management system operation terminals 108 and 109, and the DB update unit 301 updates the personal information table 304 and the card information table 305 of the entrance / exit integrated database 1. The online processing unit 302 creates a differential delivery file to be described later with the update of the entrance / exit integrated database 1. The transmission / reception unit 303 transmits the created differential distribution file to the entry / exit servers 104 and 105.

  In addition, the transmission / reception unit 303 receives the differential distribution file from the entry / exit servers 104 and 105. When the differential delivery file is received from the entrance / exit servers 104 and 105, the online processing unit 302 processes the differential delivery file from the entrance / exit servers 104 and 105, and the DB update unit 301 enters based on the differential delivery file. The exit integrated database 1 is updated.

  FIG. 4 is a diagram showing the configuration of the entry / exit servers 104 and 105. The entrance / exit servers 104 and 105 include a DB update unit 401 that performs update processing of the base entrance / exit databases 2 and 3, a local processing unit 402 that performs processing in response to requests from the operation terminals 110 and 111, and entrance / exit integrated management. A transmission / reception unit 403 that performs transmission / reception with the server 101 and the biometric authentication information server 107.

  When a card information change operation such as card information search, card issuance, or card use suspension is performed from the operation terminals 110 and 111, the processing is performed by the local processing unit 402, and the DB update unit 401 performs the base entry / exit databases 2, 3 Update processing is performed. The local processing unit 402 creates a differential delivery file to be described later with the update of the base entry / exit databases 2 and 3. The transmission / reception unit 403 transmits the difference delivery file automatically created by the local processing unit 402 to the entrance / exit integrated management server 101.

  In addition, the transmission / reception unit 403 receives the differential delivery file from the entrance / exit integrated management server 101. When the differential delivery file is received from the entrance / exit integrated management server 101, the local processing unit 402 processes the differential delivery file from the entrance / exit integrated management server 101, and the DB update unit 401 enters the base based on the differential delivery file. The retirement databases 2 and 3 are updated. The transmission / reception unit 403 also performs a process of sending a biometric authentication request to the biometric authentication information server 107 and receiving the result.

  FIG. 5 is a diagram showing the configuration of the biometric authentication information server 107. The biometric authentication information server 107 includes a DB update unit 501 that performs update processing of the biometric authentication information database 5, a reception unit 502 that receives biometric authentication information from the biometric authentication information registration terminals 112 and 113, and entry / exit servers 104 and 105. And an authentication unit 503 that performs authentication in response to a biometric authentication request from.

  FIG. 6 is an example of a distribution frame configuration transmitted and received between the entrance / exit integrated management server 101 and the entrance / exit servers 104 and 105. The above-described difference delivery file means data created in the format of FIG. The frames delivered from the entrance / exit integrated management server 101 and the frames delivered from the entrance / exit servers 104 and 105 use the same format. As shown in FIG. 6, the distributed frame includes a distribution command 601, a base No. 602, a name ID 603, an authentication position information 604, an authentication disclosure flag 605, personal information 606, and card information 607.

  The distribution command 601 indicates the type of data to be distributed, and “0” is designated for new addition, “1” for modification, and “2” for deletion. The entrance / exit integrated management server 101 identifies the connected base by the base No. 602 when transmitting / receiving the distribution file.

  The data distributed bi-directionally is taken into the entrance / exit integrated database 1 and the base entrance / exit databases 2, 3 by specifying the target record using the name ID 603 as a key item. In this example, the name ID 603 is used as a key item for registration / update in the entrance / exit integrated database 1 and the base entrance / exit databases 2, 3, but the key item is not limited to this. Other items such as a card ID key No. may be used.

  The personal information 606 is information corresponding to the personal information 216 described with reference to FIG. 2A. The card information 607 is information corresponding to the card information 217 described with reference to FIG. 2A. The authentication location information 604 and the authentication disclosure flag 605 correspond to the authentication location information 213 and the authentication disclosure flag 214, respectively. In the authentication position information 604, the authentication disclosure flag 605, the personal information 606, and the card information 607, information to be updated is stored, and information that is not updated includes empty data, a symbol indicating that the information is not updated, and the like.

  Next, processing at the time of registration of biometric authentication information will be described by taking processing at the base 102 as an example. When the biometric authentication information α is registered in the biometric authentication information registration terminal 112, the biometric authentication information registration terminal 112 transmits the biometric authentication information α to the receiving unit 502 of the biometric authentication information server 107 via the network 106. . Thereby, the DB update unit 501 of the biometric authentication information server 107 stores the biometric authentication information α in the biometric authentication information database 5. At the same time, the biometric authentication information registration terminal 112 transmits the authentication position information β of the biometric authentication information α to the transmission / reception unit 403 of the entry / exit server 104, and the DB update unit 401 displays the item “authentication” in the base entry / exit database 2. The position information 213 "is updated. When biometric authentication information α is registered in the biometric authentication information registration terminal 112, a selection is made as to whether to permit or reject distribution of the biometric information α to another base (here, the base 103). At this time, if “permit” is selected, “0” is registered in the item “authentication disclosure flag 214”, and “1” is registered if “reject” is selected.

  Thereafter, the entry / exit server 104 sends a differential delivery file in which the authentication position information β is described to the entrance / exit integrated management server 101, and the entrance / exit integration management server 101 and the entrance / exit server 104 are synchronized. The amount of data communication is reduced by distributing authentication location information instead of distributing biometric authentication information. Since biometric authentication information is image data or audio data, considering that the file size is enlarged, in the bi-directional distribution between the entrance / exit integrated management server 101 and the entrance / exit servers 104, 105, the location information is exchanged. The amount of data communication is reduced.

  Hereinafter, the delivery operation of the differential delivery file of the system will be described.

  FIG. 7A is a flowchart showing an outline of data distribution processing of the entrance / exit integrated management server 101. First, in response to a request from the management system operation terminals 108 and 109 or an update in the personal information database 4, it is determined whether the entry / exit information in the entry / exit integrated database 1 has been changed (step 701). If yes, go to Step 702. If there is no change, it waits.

  The online processing unit 302 of the entrance / exit integrated management server 101 determines whether or not the affiliation 204 of the individual to be changed is changed in the entrance / exit information (step 702). If there is a change in the affiliation 204, the process proceeds to step 703 for determining whether or not the authentication position information 213 exists. If there is no change, the process proceeds to delivery file creation (step 706). Here, when the affiliation 204 is changed, it is assumed that the individual base to be changed moves to another base. Therefore, the determination in step 702 is performed. Step 702 may be changed or deleted as appropriate according to the contents of personal information to be managed.

  The online processing unit 302 determines whether the authentication location information 213 exists in the record of the person to be changed (Step 703). If the authentication location information 213 exists, the process proceeds to step 704 where the authentication disclosure flag 214 is determined. If it does not exist, the process proceeds to creation of a distribution file (step 706).

  The online processing unit 302 determines whether or not the authentication disclosure flag 214 is “0” in the individual record to be changed (step 704). If the authentication disclosure flag 214 is “0”, the process proceeds to step 705. In step 705, the online processing unit 302 creates “differential distribution file” by adding “authentication position information” to the distribution file of the transfer destination base. That is, if there is a change of affiliation in the personal record to be changed and possesses authentication location information and authentication disclosure is permitted, the authentication location information 213 is added to the distribution file to the transfer destination base. To create a differential delivery file.

  If the authentication disclosure flag 214 is “1” in step 704, the process proceeds to step 706. When the processing proceeds to step 706, the online processing unit 302 creates a differential delivery file without adding “authentication location information”.

  The differential distribution file created in step 705 or 706 is distributed to the entry / exit servers 104 and 105 by the transmission / reception unit 303 (PUSH distribution) (step 707).

  FIG. 7B is a flowchart showing an overview of the data update process in the entry / exit servers 104 and 105 performed after the process of FIG. 7A. First, the transmission / reception unit 403 of the entry / exit servers 104 and 105 receives the differential distribution file transmitted from the entrance / exit integrated management server 101 (step 711). Next, the received difference delivery file is processed by the local processing unit 402, and the base entry / exit databases 2 and 3 are updated by the DB update unit 401 with the contents of the difference delivery file (step 712).

  FIG. 8A is a flowchart showing an outline of data distribution processing of the entry / exit servers 104 and 105. The entrance / exit servers 104 and 105 first receive a request from the operation terminals 110 and 111, etc., and determine whether or not the entrance / exit information of the base entrance / exit databases 2 and 3 has been changed by the DB update unit 401 (step S100). 801) If there is a change, the process proceeds to step 802. If there is no change, it waits.

  The local processing unit 402 of the entry / exit servers 104 and 105 creates a difference delivery file (step 802). Next, the transmission / reception unit 403 of the entry / exit servers 104 and 105 delivers the difference delivery file created in step 802 to the entrance / exit integrated management server 101 (PUSH delivery) (step 803).

  FIG. 8B is a flowchart showing an outline of the data update process in the room entrance / exit integrated management server 101 performed after the process of FIG. 8A. First, the transmission / reception unit 303 of the entrance / exit integrated management server 101 receives the differential distribution file transmitted from the entrance / exit servers 104, 105 (step 811). Next, the received differential delivery file is processed by the online processing unit 302, and the DB update unit 301 updates the entry / exit integrated database 1 with the content of the differential delivery file (step 812).

  As described above, the entrance / exit information of each base is centrally managed in the database of the entrance / exit integrated management server, and the entrance / exit card information management in a form linked to personal information is realized, and the entrance / exit server at each base side By performing real-time transmission / reception through two-way communication, it is possible to always synchronize entry / exit information. Moreover, the entrance / exit information registered at one site and the biometric information can be distributed to other sites.

More specifically, according to the entry / exit information interactive delivery system of the present embodiment, the following effects can be obtained.
(1) Since the entrance / exit integrated management server and the entrance / exit server perform push delivery of the differential distribution file at the timing when the entrance / exit information is changed, it is possible to synchronize immediately and to enter / exit each base in real time. Information can be grasped.
(2) By centrally managing entry / exit information across multiple bases with the management server, the status of entrance / exit information between bases can be grasped and linked, and entrance / exit management becomes more efficient.
(3) By associating personal information with card information, it is possible to automatically manage cards according to changes in personal information, and to perform strict and flexible entrance / exit management.
(4) When biometric authentication information is registered at each site and biometric authentication information is used at multiple sites, registration is required for the number of sites. By doing so, biometric authentication information registered at one site can be utilized, so that the labor of registration at each site can be omitted.

  In addition, this invention is not limited to the Example mentioned above, Various modifications are included. For example, the above-described embodiments have been described in detail for easy understanding of the present invention, and are not necessarily limited to those having all the configurations described. In addition, a part of the configuration of one embodiment may be replaced with the configuration of another embodiment, and the configuration of another embodiment may be added to the configuration of one embodiment. Further, it is possible to add, delete, and replace other configurations for a part of the configuration of each embodiment.

  Further, the entrance / exit integrated management server 101, the entrance / exit servers 104 and 105, and the processing unit of the biometric authentication information server may be realized by a program code of software that realizes the functions of the embodiments. In this case, a storage medium in which the program code is recorded is provided to the information processing apparatus, and the information processing apparatus (or CPU) reads the program code stored in the storage medium. In this case, the program code itself read from the storage medium realizes the functions of the above-described embodiments, and the program code itself and the storage medium storing it constitute the present invention. As a storage medium for supplying such program code, for example, a flexible disk, CD-ROM, DVD-ROM, hard disk, optical disk, magneto-optical disk, CD-R, magnetic tape, nonvolatile memory card, ROM Etc. are used. In addition, each processing unit may be realized by hardware by designing a part or all of them, for example, by an integrated circuit.

  DESCRIPTION OF SYMBOLS 1 ... Entrance / exit information database, 2, 3 ... Base entrance / exit database, 4 ... Personal information database, 5 ... Biometric authentication information database, 101 ... Entrance / exit integrated management server, 102, 103 ... Base, 104, 105 ... Entrance / exit server , 106 ... network, 107 ... biometric authentication information server, 108, 109 ... management system operation terminal, 110, 111 ... operation terminal, 112, 113 ... biometric authentication information registration terminal

Claims (8)

An entrance / exit integrated management server comprising an entrance / exit integrated database for storing entrance / exit information linked with a personal information database;
A plurality of entry / exit servers arranged at each site, comprising a site entry / exit database for storing the entrance / exit information;
An entry / exit information interactive delivery system comprising a biometric information server comprising a biometric information database for storing biometric information,
The entrance / exit integrated management server is:
DB update means for updating the entry / exit information in the entry / exit integrated database;
Online processing means for creating a differential delivery file indicating update information of the entrance / exit information at the timing when the entrance / exit information of the entrance / exit integrated database is updated;
A transmission / reception means for transmitting / receiving the differential delivery file to / from the entry / exit server;
The entrance / exit server is
DB update means for updating the entry / exit information in the base entry / exit database;
Local processing means for creating the difference delivery file at the timing when the entrance / exit information of the base entrance / exit database is updated;
A transmission / reception means for transmitting / receiving the differential delivery file to / from the entrance / exit integrated management server;
The biometric information server is
Receiving means for receiving the registered biometric authentication information;
DB update means for updating the biometric authentication information;
An entry / exit information interactive delivery system comprising: an authenticating unit that authenticates a biometric authentication request from the entry / exit server. In the entrance / exit information interactive delivery system according to claim 1,
The entrance / exit integrated management server updates the entrance / exit information in the entrance / exit integrated database based on the differential delivery file received from the entrance / exit server,
The entry / exit information interactive distribution system, wherein the entry / exit server updates the entry / exit information in the base entry / exit database based on the differential delivery file received from the entrance / exit integrated management server. In the entrance / exit information interactive delivery system according to claim 1 or 2,
The entrance / exit information includes authentication position information indicating a position of the biometric information in the biometric information database,
The entry / exit information interactive delivery system, wherein the entry / exit server makes the biometric authentication request to the authentication means of the biometric authentication information server using the authentication location information. In the entrance / exit information interactive delivery system according to claim 3,
The online processing means of the entrance / exit integrated management server is:
If disclosure of the biometric information is permitted in the entry / exit information, the differential delivery file is created so as to include information indicating the position of the biometric information,
When the entry / exit information does not permit the release of the biometric authentication information, the differential delivery file is created so as not to include information indicating the position of the biometric authentication information. system. A plurality of entrance / exit servers arranged at each base, including an entrance / exit integrated management server having an entrance / exit integrated database for storing entrance / exit information linked with a personal information database, and a base entrance / exit database for storing the entrance / exit information. And an entry / exit information interactive delivery method by a biometric information server including a biometric information database for storing biometric information,
An update step of updating the entrance / exit information in the entrance / exit integrated database by the entrance / exit integrated management server;
An online processing step of creating a differential delivery file indicating update information of the entry / exit information by the entry / exit integrated management server at a timing when the entry / exit information of the entry / exit integrated database is updated;
A transmission step of transmitting the differential distribution file to the entrance / exit server by the entrance / exit integrated management server;
An update step of updating the entrance / exit information of the base entrance / exit database by the entrance / exit server;
A local processing step of creating the differential delivery file by the entrance / exit server at the timing when the entrance / exit information of the base entrance / exit database is updated;
A transmission step of transmitting the difference delivery file to the entrance / exit integrated management server by the entrance / exit server;
Receiving the biometric information registered by the biometric information server; and
An update step of updating the biometric authentication information by the biometric authentication information server;
An authentication method for authenticating a biometric authentication request from the entry / exit server by the biometric information server, and an interactive entry / exit information delivery method. The entrance / exit information interactive delivery method according to claim 5,
Receiving the differential delivery file transmitted in the transmission step by the entrance / exit server by the entrance / exit integrated management server, and updating the entrance / exit information in the entrance / exit integrated database based on the differential delivery file; ,
Receiving the differential delivery file transmitted in the transmitting step by the entrance / exit integrated management server by the entrance / exit server, and updating the entrance / exit information in the base entrance / exit database based on the differential delivery file; The entry / exit information interactive delivery method further comprising: In the entrance / exit information interactive delivery method according to claim 5 or 6,
The entrance / exit information includes authentication position information indicating a position of the biometric information in the biometric information database,
The entry / exit information interactive delivery method, wherein the entry / exit server makes the biometric authentication request to the biometric information server using the authentication location information. In the entrance / exit information interactive delivery method according to claim 7,
The online processing step includes:
If disclosure of the biometric information is permitted in the entry / exit information, the differential delivery file is created so as to include information indicating the position of the biometric information,
When the entry / exit information does not permit the release of the biometric authentication information, the differential delivery file is created so as not to include information indicating the position of the biometric authentication information. Method.

Images