JP2016191991A - Authentication system and program for authentication control device - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide an authentication system capable of suppressing complication of authentication processing.SOLUTION: An authentication system 1 comprises: a gate device 40 which can open/close a passage having first and second entrances; a first detection device 200 which detects an authentication signal from an authentication medium 10 at the first entrance to acquire authentication information and signal intensity information; a second detection unit 300 which detects an authentication signal from the authentication medium 10 at the second entrance to acquire authentication information and signal intensity information; and an authentication control device 23 which transmits the authentication information acquired by the first or second detection device to an authentication server. The authentication system controls opening/closing of the gate device 40 on the basis of the authentication result of the authentication server. The authentication control device 23 transmits the authentication information acquired by the first detection device 200 or the second detection device 300 to the authentication server on the basis of the signal intensity information associated with the authentication information when the first detection device 200 and the second detection device 300 acquire the same authentication information.SELECTED DRAWING: Figure 1

Description

  The present invention relates to an authentication system and an authentication control apparatus program used for authentication such as a security gate.

  In recent years, there has been proposed an authentication system that performs communication with an authentication medium held by a user and authenticates a user who attempts to pass through a security gate (hereinafter also referred to as “gate”). For example, an authentication system that acquires authentication information by electric field communication from an authentication medium held by a user has been proposed (see Patent Documents 1 and 2).

JP 2011-191890 A JP 2011-120145 A

  In an authentication system that communicates with an authentication medium held by a user, if the authentication information acquired on the entrance side of the gate is correct, the gate is opened and the user can pass. However, when the user approaches the entrance side of the gate, the user authentication information may be acquired not only on the entrance side but also on the exit side. In that case, since the same authentication information acquired on each of the input side and the output side is duplicated and transmitted to the authentication side, the authentication process becomes complicated. Such an event may occur not only in electric field communication but also in an authentication system that acquires user authentication information by short-range wireless communication.

  An object of the present invention is to provide an authentication system and an authentication control apparatus program that can suppress the complexity of authentication processing.

The present invention solves the above problems by the following means. In addition, in order to make an understanding easy, although the code | symbol corresponding to embodiment of this invention is attached | subjected and demonstrated, it is not limited to this. In addition, the configuration described with reference numerals may be improved as appropriate. Moreover, you may substitute at least one part for another structure.
The first invention provides an authentication signal from a gate device (40) capable of opening and closing a passage having a first passageway and a second passageway, and an authentication medium (10) held by an authentication target at the first passageway. A first detection device (200) for detecting and acquiring authentication information based on the authentication signal and signal strength information relating to the signal strength of the authentication signal; and an authentication signal from an authentication medium held by the authentication target at the second passage. A second detection device (300) that detects and acquires authentication information based on the authentication signal and signal strength information related to the signal strength of the authentication signal; and the authentication information acquired by the first detection device or the second detection device An authentication control device (23) for transmitting to the authentication server, wherein the opening and closing of the gate device is controlled based on an authentication result of the authentication server with respect to the authentication information. When the same authentication information is acquired by the first detection device and the second detection device, the authentication control device, based on the signal strength information associated with each authentication information, An authentication system (1), wherein authentication information acquired by either the detection device or the second detection device is transmitted to the authentication server.
-2nd invention is the authentication system of 1st invention, The said authentication control apparatus (23) acquires the same authentication information by the said 1st detection apparatus (200) and the said 2nd detection apparatus (300). In the authentication system (1), the authentication information associated with the signal strength information having a stronger signal strength is transmitted to the authentication server.
-3rd invention is the authentication system of 1st or 2nd invention, The said authentication control apparatus (23) is the same by either the said 1st detection apparatus (200) or the said 2nd detection apparatus (300). In the authentication system (1), when the authentication information is continuously acquired, transmission of the authentication information acquired after the second time to the authentication server is canceled.
-4th invention uses electric field communication as a communication means between the said authentication medium (10) and the said authentication control apparatus (23) in the authentication system of any invention from 1st to 3rd. An authentication system (1) characterized by
The fifth invention is the authentication system of the fourth invention, wherein the authentication medium (10) is a reader that transmits and receives information between an IC card (30) that holds unique authentication information and the IC card. Electric field communication for communicating between the writer (11), the signal electrode (121) for inducing a modulation electric field in the authentication target, and the authentication control device via the authentication target by the modulation electric field induced by the signal electrode Unit (12) and communication for converting the authentication information received by the reader / writer from the IC card into an authentication signal for electric field communication and transmitting the authentication signal from the electric field communication unit to the authentication control device (23) It is an authentication system (1) provided with a control part (15).
In a sixth aspect of the present invention, in the authentication system in which the opening / closing of the gate device is controlled based on the determination result of the authentication server for the authentication information, the authentication information acquired from the authentication medium (10) held by the authentication target is stored in the authentication server. The authentication control device program of the authentication control device (23) to be transmitted to the computer, when the same authentication information is acquired by the two detection devices at different positions, the signals associated with the respective authentication information An authentication control apparatus program that causes authentication information acquired by one of the two detection apparatuses to function as control means for transmitting to the authentication server based on intensity information.

  ADVANTAGE OF THE INVENTION According to this invention, the authentication system and the program for authentication control apparatuses which can suppress the complexity of an authentication process can be provided.

It is a block diagram which shows the whole structure of the entrance management system 1 in embodiment. 1 is an external view of a card holder 10. FIG. It is a figure explaining the whole structure of the gate apparatus. 4 is a flowchart showing a procedure of a gate opening / closing process executed in the authentication controller 20.

Hereinafter, an embodiment in which an authentication system and an authentication control apparatus program according to the present invention are applied to an entrance management system will be described.
FIG. 1 is a block diagram showing the overall configuration of a room entry management system 1 in the present embodiment. FIG. 2 is an external view of the card holder 10.
As shown in FIG. 1, the room entry management system 1 includes a card holder 10, an authentication controller 20, a gate device 40, an authentication server 50, and a gate opening / closing management unit 60.

First, the configuration of the card holder 10 will be described.
The card holder 10 is a portable terminal held by a user of the room entry management system 1. As shown in FIG. 2, the card holder 10 includes a box frame-shaped housing 100. Inside the case 100, electronic components such as a reader / writer 11 described later are arranged. The housing 100 has a first surface 101 capable of holding an IC card 30 (described later) and a second surface 102 opposite to the first surface 101.

  In the casing 100, a plurality of holding pieces 103 that hold the side surfaces of the inserted IC card 30 are provided in the outer peripheral area of the first surface 101. A user of the card holder 10 can hold the IC card 30 in the card holder 10 by inserting the IC card 30 along the first surface 101 from one end side of the housing 100. The IC card 30 and the card holder 10 constitute an authentication medium in the present embodiment.

  The IC card 30 is an IC tag in which a loop antenna, an IC chip, etc. (all not shown) are built. The loop antenna is an antenna capable of transmitting and receiving information by electromagnetic waves in the NFC (Near Field Communication) standard band. The IC chip transmits / receives information to / from the reader / writer 11 built in the housing 100 via the loop antenna. The IC chip includes a CPU, a memory, etc. (all not shown). Authentication information for identifying the user of the IC card 30 is stored in the memory of the IC chip.

  Communication between the IC card 30 and the reader / writer 11 uses, for example, 13.56 MHz electromagnetic waves based on NFC standards ISO / IEC1802 (NFC IP-1) and ISO / IEC1481 (NFC IP-2). Done. Communication between the IC card 30 and the reader / writer 11 is possible at a distance of several millimeters to several tens of millimeters. When the IC card 30 is held by the card holder 10, the distance between the IC card 30 and the reader / writer 11 is about several millimeters.

  As shown in FIG. 2, the signal electrode 121 is disposed on the second surface 102 of the housing 100. The signal electrode 121 is an electrode that induces a modulated electric field in a user (human body) in electric field communication. The signal electrode 121 is formed in a substantially square shape so as to substantially cover the second surface 102 of the housing 100 in plan view. The signal electrode 121 is electrically connected to a terminal-side communication unit 12 (not shown) described later built in the housing 100.

As shown in FIG. 1, the card holder 10 includes a reader / writer 11, a terminal-side communication unit (electric field communication unit) 12, a storage unit 13, a power supply unit 14, and a terminal-side control unit (communication control unit) 15. .
The reader / writer 11 is a reader / writer compliant with the NFC standard that transmits and receives information to and from the IC card 30 without contact. When the IC card 30 is held by the card holder 10, information is transmitted and received by electromagnetic induction between the IC card 30 and the reader / writer 11, and authentication information stored in the memory of the IC card 30 is received by the reader / writer 11. Read. The authentication information read by the reader / writer 11 is stored in the storage unit 13 (described later).

  The terminal-side communication unit 12 supplies a signal modulated in accordance with information to be transmitted to the signal electrode 121 to induce a modulated electric field in the human body, and sends a signal to the authentication controller 20 (described later) by electric field communication via the human body. Send. In addition, the terminal-side communication unit 12 receives a modulated electric field induced in the human body by the signal electrode 121 based on a signal (for example, a communication start signal) transmitted from the authentication controller 20, and receives an electric field from the authentication controller 20 via the human body. A signal is received by communication. The terminal-side communication unit 12 includes an electric field communication I / F, an electric field communication control driver, and the like (all not shown).

The storage unit 13 stores data such as authentication information read from the IC card 30 via the reader / writer 11 and various application software executed by the terminal-side control unit 15.
The power supply unit 14 supplies power to the reader / writer 11, the terminal-side communication unit 12, the storage unit 13, the terminal-side control unit 15, and the like. The power supply unit 14 includes a battery main body, a battery control driver, and the like (all not shown).

The terminal-side control unit 15 controls communication in the reader / writer 11 and the terminal-side communication unit 12, writing and reading operations of authentication information and the like in the storage unit 13, and other operations. The terminal-side control unit 15 is configured by a microprocessor (all not shown) including a CPU, a memory, and the like.
When the IC card 30 is inserted into the card holder 10, the terminal side control unit 15 reads out the authentication information from the IC card 30 via the reader / writer 11 and stores the read authentication information in the storage unit 13. Further, when the IC card 30 is extracted from the card holder 10, the terminal-side control unit 15 deletes the authentication information stored in the storage unit 13.

  When the terminal-side control unit 15 needs to transmit authentication information to the authentication controller 20 while the IC card 30 is inserted in the card holder 10, that is, when a communication start signal is received from the authentication controller 20. The authentication information read from the storage unit 13 is transmitted to the authentication controller 20 via the terminal side communication unit 12. As described above, by storing the authentication information read from the IC card 30 in the storage unit 13 in advance, when it becomes necessary to transmit the authentication information to the authentication controller 20, the authentication information can be acquired more quickly. Can do. Note that the authentication information may be read from the IC card 30 via the reader / writer 11 whenever it is necessary to transmit the authentication information to the authentication controller 20.

Next, the authentication controller 20 will be described.
The authentication controller 20 controls opening and closing of the gate device 40 (described later) based on authentication information acquired from the card holder 10 by electric field communication via a human body. As illustrated in FIG. 1, the authentication controller 20 includes an authentication side communication unit (first detection device, second detection device) 21, a storage unit 22, and an authentication side control unit (authentication control device) 23. In FIG. 1, the functional configuration of the authentication controller 20 is schematically shown. The authentication-side communication unit 21 is installed outside the authentication controller 20 as shown in FIG.

  The authentication-side communication unit 21 communicates with the card holder 10 (terminal-side communication unit 12) held by the user by electric field communication through the user's human body. The authentication-side communication unit 21 is configured by electrode mats (described later) installed at two passages of the gate device 40, respectively. As will be described later, when the user steps on an electrode mat placed in front of any one of the entrances, via the signal detection antenna (described later) of the authentication side communication unit 21, the card holder 10, Transmission / reception of signals by electric field communication through the user's human body is started. The card holder 10 can receive a communication start signal from the authentication controller 20 by electric field communication via the user's human body. Further, the card holder 10 can transmit an authentication signal to the authentication controller 20 by electric field communication via the user's human body. The authentication side communication unit 21 acquires authentication information based on the authentication signal transmitted from the card holder 10 and transmits it to the authentication side control unit 23.

  The authentication-side communication unit 21 includes a first electrode mat (first detection device) 200 and a second electrode mat (second detection device) 300. The first electrode mat 200 detects an authentication signal transmitted from the card holder 10 held by the user, acquires first authentication information based on the authentication signal, and first signal related to the signal strength of the detected authentication signal. Get strength information. Then, the first electrode mat 200 associates the first authentication information with the signal strength information and transmits it to the authentication-side control unit 23. Further, the second electrode mat 300 detects an authentication signal transmitted from the card holder 10 held by the user, acquires second authentication information based on the authentication signal, and a signal related to the signal strength of the detected authentication signal. Get strength information. Then, the authentication-side control unit 23 associates the second authentication information with the signal strength information and transmits it to the authentication-side control unit 23. The configurations of the first electrode mat 200 and the second electrode mat 300 will be described later.

The first electrode mat 200 is installed at a first passage W <b> 1 (described later) of the gate device 40. The second electrode mat 300 is installed at a second passage W2 (described later) of the gate device 40.
The authentication information transmitted from each electrode mat to the authentication-side control unit 23 may be the same or different. In the following description, the first authentication information and the second authentication information are collectively referred to as “authentication information”. The first electrode mat 200 and the second electrode mat 300 are also collectively referred to as “electrode mats”.

The storage unit 22 temporarily stores the authentication information and signal strength information acquired by the authentication side communication unit 21, and stores an operating system (OS), application programs, various data, and the like executed by the authentication side control unit 23. Remember. For example, an authentication controller program (authentication control device program) is stored in the storage unit 22.
When the same authentication information is acquired by the first electrode mat 200 and the second electrode mat 300, the authentication controller program causes the authentication-side control unit 23 as a computer to use signal intensity information associated with each authentication information. Based on this, it is a program for functioning as a control means for transmitting only the authentication information acquired by one of the two electrode mats to the authentication server 50.

  The authentication side control unit 23 comprehensively controls the operation of the authentication controller 20. The authentication-side control unit 23 is configured by a microprocessor (all not shown) including a CPU, a memory, and the like. The authentication-side control unit 23 reads and executes an application program such as an operating system (OS) and an authentication controller program stored in the storage unit 22, thereby cooperating with each hardware, and Implement various functions related to authentication.

The authentication side control unit 23 transmits a communication start signal periodically (for example, every 200 ms) via the authentication side communication unit 21. The communication start signal is a signal that requests the card holder 10 that is a portable terminal to transmit an authentication signal. The card holder 10 can receive a communication start signal when the user holding the card holder 10 steps on the electrode mat.
The authentication-side control unit 23 sends authentication information acquired by the first electrode mat 200 or the second electrode mat 300 to the authentication server 50 (described later), and entrusts authentication (validity verification) of the received authentication information. To do.
Further, when the same authentication information is acquired by the first electrode mat 200 and the second electrode mat 300, the authentication-side control unit 23 sends authentication information associated with signal strength information having a stronger signal strength to the authentication server 50. And the transmission of other authentication information to the authentication server 50 is cancelled. The process of transmitting authentication information to the authentication server 50 in the authentication-side control unit 23 will be described later.

Next, the configuration of the gate device 40 will be described. FIG. 3 is a diagram for explaining the overall configuration of the gate device 40.
As shown in FIG. 3, the gate device 40 is a device that can open and close a passage W having a first passage W1 and a second passage W2. The gate device 40 includes gate side walls 41 and 42 and a gate 43.

  The gate side walls 41 and 42 are structures for partitioning a range in which the user P can pass, and are arranged in parallel along the traveling direction of the user P. A range partitioned by the gate side walls 41 and 42 is a passage W for the user P. In this embodiment, in FIG. 3, the passage located on the back side of the passage W is defined as a first passage W1, and the passage located on the front side of the passage W is defined as a second passage W2. The first passage W1 and the second passage W2 are opposite to each other when viewed from the user P. That is, if the first passage W1 is an entrance-side passage, the second passage W2 is an exit-side passage. In addition, if the second passage W2 is an entrance-side passage, the first passage W1 is an exit-side passage. Thus, the gate device 40 of the present embodiment is configured to be able to enter and exit from two directions. In addition, the human side sensor (not shown) which detects the user who passes the gate apparatus 40 is arrange | positioned at the gate side walls 41 and 42. FIG. This human sensor is connected to a gate opening / closing manager 60 (described later). When the human sensor detects a user passing through the gate device 40, the human sensor transmits a detection signal to the gate opening / closing management unit 60.

  In FIG. 3, when the user P enters the gate device 40 from the first passage W1, the first passage W1 becomes the entrance passage. In this case, the first electrode mat 200 is an input electrode mat, and the second electrode mat 300 is an output electrode mat. Further, when the user P enters the gate device 40 from the second passage W2, the second passage W2 becomes the entrance passage. In this case, the second electrode mat 300 is an input electrode mat, and the first electrode mat 200 is an output electrode mat.

  An authentication controller 20 (see FIG. 1) is installed on the gate side wall 42. In the present embodiment, a configuration in which the first electrode mat 200 and the second electrode mat 300 are connected to one authentication controller 20 will be described. However, the first electrode mat 200 and the second electrode mat 300 are respectively dedicated authentication controllers. 20 may be connected.

  The gate 43 is composed of a pair of gate bars (reference numerals omitted) that open and close the passage W. One gate bar of the gate 43 is provided on the gate side wall 41. The other gate bar of the gate 43 is provided on the gate side wall 42. The gate 43 is disposed substantially at the center of the passage W. Each gate bar of the gate 43 is rotated in the direction of the arrow in the drawing by a drive mechanism (not shown). The rotation of the gate 43 by the drive mechanism is controlled by an opening operation signal and a gate closing operation signal transmitted from the gate opening / closing management unit 60 (see FIG. 1).

  When receiving the opening operation signal from the gate opening / closing management unit 60, the driving mechanism rotates the respective gate bars of the gate 43 downward to open the passage W. When the gate bar is opened and the passage W is opened, the user P can pass from the first passage W1 to the second passage W2. Further, when the driving mechanism receives a closing operation signal from the gate opening / closing management unit 60, the driving mechanism rotates each gate bar of the gate 43 upward to close the passage W. By closing the gate bar and closing the passage W, the user P is restricted from moving from the first passage W1 to the second passage W2.

  A first electrode mat 200 is installed at the first passage W1 of the gate device 40. The first electrode mat 200 includes a signal detection antenna 201 and a transmission / reception device 202. The signal detection antenna 201 detects the authentication signal of the IC card 30 from the card holder 10 of the user P who has stepped on the first electrode mat 200. The transmission / reception device 202 is a circuit that communicates with the card holder 10 of the user P by electric field communication via the human body of the user P who has stepped on the first electrode mat 200. The transmission / reception device 202 amplifies the detected authentication signal to a predetermined signal level, and acquires authentication information based on the authentication signal. Further, the transmission / reception device 202 acquires the amplification degree (amplification factor) when the detected authentication signal is amplified to a predetermined signal level as signal intensity information related to the signal intensity. Then, the transmission / reception device 202 associates the authentication information based on the detected authentication signal with the signal strength information related to the signal strength, and transmits it to the authentication-side control unit 23.

  A second electrode mat 300 is installed at the second passage W2 of the gate device 40. The second electrode mat 300 includes a signal detection antenna 301 and a transmission / reception device 302. The signal detection antenna 301 is an antenna that detects the authentication signal of the IC card 30 from the card holder 10 of the user P who has stepped on the second electrode mat 300. The transmission / reception device 302 is a circuit that performs communication with the card holder 10 of the user P by electric field communication via the human body of the user P who has stepped on the second electrode mat 300. Since the function of the transmission / reception device 302 is the same as that of the transmission / reception device 202 of the first electrode mat 200, description thereof is omitted. The transmission / reception device 302 associates the authentication information based on the detected authentication signal with the signal strength information related to the signal strength, and transmits it to the authentication-side control unit 23.

  Note that the identification information assigned to each electrode mat is added to the authentication information transmitted from the first electrode mat 200 and the second electrode mat 300 to the authentication-side control unit 23. The authentication-side control unit 23 can determine which electrode mat is the authentication information based on the identification information added to the authentication information.

Returning to FIG. 1 again, the configuration of the entrance management system 1 will be described.
The authentication server 50 is, for example, a server managed and operated by a management company of the room entry management system 1 and is connected to the room entry management system 1 via the communication network 2. Data relating to authentication information and the like of the user P registered in advance is stored in a database (not shown) of the authentication server 50. In the authentication server 50, management of data stored in the database and transmission / reception of data to / from the authentication-side control unit 23 (authentication controller 20) are executed by a control unit (not shown).

  The control unit of the authentication server 50 searches the database based on the authentication information received from the authentication controller 20, and transmits a gate opening signal to the gate opening / closing management unit 60 when matching authentication information exists. The control unit of the authentication server 50 cancels transmission of the gate opening signal to the gate opening / closing management unit 60 when authentication information that matches the authentication information received from the authentication controller 20 does not exist in the database.

  The gate opening / closing management unit 60 manages the opening / closing of the gate device 40. The gate opening / closing manager 60 is connected to the gate device 40 and the authentication server 50, respectively. When the gate opening / closing management unit 60 receives a gate opening signal from the control unit of the authentication server 50, the gate opening / closing management unit 60 transmits an opening operation signal to the gate device 40 to open the closed gate bar.

Further, when the gate opening / closing management unit 60 receives a detection signal notifying that a user has been detected from a human sensor provided in the gate device 40, the gate opening / closing management unit 60 starts measuring time by a timer function. And the gate opening / closing management part 60 will transmit a closing operation signal to the gate apparatus 40, and will close the open gate bar, if predetermined time passes after starting time-measurement. In addition, the gate opening / closing management unit 60 transmits an opening operation signal to the gate device 40, and then starts measuring time using a timer function. If the gate opening / closing management unit 60 does not receive a detection signal from the human sensor until a predetermined time has elapsed since the start of timing, the gate opening / closing management unit 60 transmits a closing operation signal to the gate device 40 to open the gate bar. Close.
The gate opening / closing management unit 60 and the authentication server 50 may be connected via a dedicated line, or may be connected via the communication network 2 or another communication network (not shown).

Next, the basic operation of the room entry management system 1 will be described.
As shown in FIG. 3, when the user P steps on the first electrode mat 200 installed at the first passage W1 of the gate device 40 with each gate bar of the gate 43 closed, the first electrode mat is formed. Transmission / reception of the signal by the electric field communication via the user's human body is started between the signal detection antenna 201 and the card holder 10 (terminal-side communication unit 12) built in 200. Thereby, the communication start signal emitted from the authentication side communication unit 21 of the authentication controller 20 is transmitted from the authentication controller 20 to the card holder 10 by electric field communication via the user's human body. Further, the authentication information read from the IC card 30 and the signal strength information related to the signal strength of the authentication information are transmitted from the card holder 10 to the authentication controller 20 by electric field communication via the user's human body.

  The authentication-side control unit 23 sends the authentication information acquired from the card holder 10 via the authentication-side communication unit 21 to the authentication server 50 and entrusts authentication of the user P's authentication information. The control unit of the authentication server 50 searches the database based on the authentication information received from the authentication controller 20, and transmits a gate opening signal to the gate opening / closing management unit 60 when matching authentication information exists. When the gate opening / closing management unit 60 receives a gate opening signal from the control unit of the authentication server 50, the gate opening / closing management unit 60 transmits an opening operation signal to the gate device 40. Thereby, in the gate apparatus 40, each gate bar of the closed gate 43 is opened, and the passage W is opened. Therefore, the user P can enter the room through the passage W.

  Note that the card holder 10 of the present embodiment can also be applied to an entrance management system (not shown) (hereinafter also referred to as “entrance management system 1A”) that acquires authentication information by non-contact short-range communication. This entrance management system 1A is based on the point that the communication between the card holder 10 and the authentication side communication unit 21 is not an electric field communication via a human body but a non-contact near field communication by electromagnetic induction. And different.

  The basic configuration of the authentication controller in the entrance management system 1A is the same as that of the authentication controller 20 shown in FIG. The entrance management system 1A is different from the authentication side communication unit 21 of the authentication controller 20 shown in FIG. 1 in that the authentication side communication unit is a reader / writer that transmits and receives information by electromagnetic induction.

  In the entrance management system 1A, the authentication-side communication unit 21 (see FIG. 1) of the authentication controller is a reader / writer that transmits and receives information to and from the IC card 30 of the card holder 10 of the user P by electromagnetic induction. The authentication information received by the authentication side communication unit 21 is transmitted to the authentication side control unit 23. Description of the opening / closing of the gate 43 in the authentication-side control unit 23 and the gate opening / closing management unit 60 is omitted.

  In this room entrance management system 1A, the authentication-side communication unit 21 is installed at a position where the user P can easily hold the card holder 10. In the entrance management system 1A, when the user P holds the card holder 10 over the authentication-side communication unit 21, information by electromagnetic induction between the IC card 30 held in the card holder 10 and the authentication-side communication unit 21. The authentication information stored in the IC chip (memory) of the IC card 30 is read by the authentication-side communication unit 21. Subsequent processing is the same as that of the above-described embodiment, and thus description thereof is omitted.

  In this way, the card holder 10 that holds the IC card 30 is not only the entrance management system 1 that performs authentication based on the authentication information acquired by electric field communication through the human body, but also the authentication acquired by non-contact near field communication. It can also be used for an entrance management system 1A that performs authentication based on information.

  Next, the gate opening / closing process in the entrance management system 1 will be described. FIG. 4 is a flowchart showing the procedure of the gate opening / closing process executed in the authentication controller 20. In the following description, when both or one of the first authentication information and the second authentication information is indicated, “authentication information” is described. Further, it is assumed that the “authentication information” is associated with signal strength information even when there is no description.

In step S (hereinafter, also referred to as “S”) 101 illustrated in FIG. 4, the authentication-side control unit 23 determines whether authentication information has been acquired with an electrode mat installed on the user's entry side. If the determination in S101 is YES, the process proceeds to S102. If the determination in S101 is NO, the process returns to S101. When the user P holding the card holder 10 steps on the electrode mat installed on the entry side, the authentication information is acquired by the authentication-side communication unit 21, so the process proceeds to S102.
Note that the authentication information acquired in S101 is usually one piece of authentication information acquired by either the first electrode mat 200 or the second electrode mat 300. However, when the user P steps on the input side electrode mat, the authentication information of the same user P may be acquired by the output side electrode mat. In that case, authentication information is acquired by the first electrode mat 200 and the second electrode mat 300 in S101.

In S <b> 102, the authentication side control unit 23 stores the acquired authentication information in the storage unit 22.
In S103, the authentication-side control unit 23 determines whether the acquired authentication information is the first authentication information acquired by the first electrode mat 200 and the second authentication information acquired by the second electrode mat 300. judge. If the determination in S103 is YES, the process proceeds to S104. If the determination in S103 is NO, that is, the acquired authentication information is either the first authentication information acquired by the first electrode mat 200 or the second authentication information acquired by the second electrode mat 300. If there is, the process proceeds to S109 (described later).

In S104, the authentication side control unit 23 determines whether or not the acquired first authentication information and second authentication information are the same authentication information. If the determination in S104 is yes, the process proceeds to S105. If the determination in S104 is NO, the process proceeds to S109 (described later).
In S105, the authentication side control unit 23 compares two pieces of signal strength information respectively associated with the first authentication information and the second authentication information. Here, when the signal strength of the authentication signal detected by the electrode mat is low, the degree of amplification necessary to amplify to a predetermined signal level increases. For this reason, when the signal strength of the authentication signal is low, the value (amplification degree) of the signal strength information becomes large. Further, when the signal strength of the authentication signal detected by the electrode mat is high, the amplification necessary for amplification up to a predetermined signal level is small. For this reason, when the signal strength of the authentication signal is high, the value of the signal strength information is small.

  In S106, the authentication side control unit 23 determines whether or not the authentication information associated with the signal strength information having a stronger signal strength is the first authentication information. If the determination in S106 is YES, the process proceeds to S107. If the determination in S106 is NO, the process proceeds to S108 (described later).

In S <b> 107, the authentication side control unit 23 transmits the first authentication information acquired by the first electrode mat 200 to the authentication server 50.
In S106, when it is determined that the authentication information associated with the signal strength information having a stronger signal strength is the first authentication information, the user P enters from the first electrode mat 200 side (first passage W1). At that time, it can be presumed that the authentication information of the same user P has been acquired by the second electrode mat 300 located farther from the first electrode mat 200. In this case, it is not necessary to transmit the second authentication information acquired by the second electrode mat 300 to the authentication server 50. Therefore, in the process of S107, only the first authentication information acquired by the first electrode mat 200 is transmitted to the authentication server 50, and the second authentication information acquired by the second electrode mat 300 is transmitted to the authentication server 50. Canceled.
When the process of S107 ends, the authentication-side control unit 23 deletes the authentication information stored in the storage unit 22 in S102, and ends the process of this flowchart.

Here, processing on the authentication server 50 side that has received the first authentication information will be described.
The control unit of the authentication server 50 executes an authentication process based on the received first authentication information. If the authentication is successful, the control unit of the authentication server 50 transmits a gate opening signal to the gate opening / closing management unit 60. Then, an opening operation signal is transmitted from the gate opening / closing management unit 60 to the gate device 40, whereby the gate 43 is opened. Thus, in the case of successful authentication, the gate 43 of the gate device 40 is opened, so that the user can pass through the passage W. On the other hand, if the authentication is unsuccessful, the gate opening signal is not transmitted to the gate opening / closing management unit 60, so the gate 43 is not opened. Thus, in the case of authentication failure, the gate 43 of the gate device 40 is not opened, and the user cannot pass through the passage W. Such processing on the authentication server 50 side is the same in the entrance management system 1A that acquires authentication information by the non-contact short-range communication described above.

In S108 (NO determination in S106), the authentication side control unit 23 transmits the second authentication information acquired by the second electrode mat 300 to the authentication server 50.
When it is determined in S106 that the authentication information associated with the signal strength information having a stronger signal strength is the second authentication information, the user P enters from the second electrode mat 300 side (second passage W2). At that time, it can be estimated that the authentication information of the same user P is acquired by the first electrode mat 200 located at a position farther from the second electrode mat 300. In this case, it is not necessary to transmit the first authentication information acquired by the first electrode mat 200 to the authentication server 50. Therefore, in the process of S108, only the second authentication information acquired by the second electrode mat 300 is transmitted to the authentication server 50, and the transmission of the first authentication information acquired by the first electrode mat 200 to the authentication server 50 is performed. Canceled.
When the process of S108 ends, the authentication-side control unit 23 deletes the authentication information stored in the storage unit 22 in S102 and ends the process of this flowchart.
Note that the processing on the authentication server 50 side that has received the second authentication information is the same as that in the case of receiving the first authentication information described above, and a description thereof will be omitted.

In S109 (NO determination in S103), the authentication-side control unit 23 uses the first authentication information acquired by the first electrode mat 200 or the second authentication information acquired by the second electrode mat 300 as the authentication server 50. Send to.
When the process of S109 ends, the authentication-side control unit 23 deletes the authentication information stored in the storage unit 22 in S102 and ends the process of this flowchart.
In S104, if the authentication information acquired by the two electrode mats is different, the determination is NO. As a case where the determination in S104 is NO, for example, a case where another user enters from the opposite direction of the gate device 40 (exit side when viewed from the user P) almost simultaneously is considered. If such an event occurs, the authentication-side control unit 23 ends the processing of this flowchart after executing error processing in S110.

According to the entrance management system 1 of this embodiment mentioned above, there exist the following effects.
(1) In the room entrance management system 1, the authentication side control unit 23, when the same authentication information is acquired for the entrance and exit electrode mats, the authentication information associated with the signal strength information having a stronger signal strength. It transmits to the authentication server 50 and cancels transmission of the other authentication information to the authentication server 50. According to this, in the entrance management system 1, since the same authentication information acquired by each of the entrance side and the exit side is not redundantly transmitted to the authentication server 50, occurrence of unnecessary authentication processing can be suppressed. Therefore, in the entrance management system 1, the complexity of the authentication process can be suppressed.

(2) The IC card 30 held in the card holder 10 is used for an existing room management system that acquires authentication information by non-contact short-range communication. Therefore, when such an existing room management system is replaced with the room management system 1 that acquires authentication information by electric field communication via a human body, the installer newly sets the card holder 10 and the authentication controller 20 for electric field communication. What is necessary is just to introduce. The IC card 30, the authentication server 50, and the gate opening / closing management unit 60 can use the IC card and equipment in the existing room entry management system. Therefore, the installer can introduce the entrance management system 1 by electric field communication at the minimum necessary cost.

  As mentioned above, although embodiment of this invention was described, this invention is not limited to embodiment mentioned above. In addition, the effects described in the embodiments are merely a list of the most preferable effects resulting from the present invention, and are not limited to those described in the embodiments. In addition, although embodiment mentioned above and the deformation | transformation form mentioned later can also be used in combination suitably, detailed description is abbreviate | omitted.

(Deformation)
(1) In the entrance management system 1 of this embodiment, when the same authentication information is continuously acquired in either the first electrode mat 200 or the second electrode mat 300, the authentication acquired after the second time Transmission of information to the authentication server 50 may be canceled. By performing such control, it is possible to further suppress the occurrence of unnecessary authentication processing, thereby further reducing the complexity of the authentication processing.
In addition, when the same authentication information is continuously acquired with any electrode mat, the timer function starts time measurement when the authentication information is first acquired, and a predetermined time has elapsed since the time measurement started. You may make it cancel transmission to the authentication server 50 of the authentication information acquired until it passes.

(2) In this embodiment, the example which has arrange | positioned the gate opening / closing management part 60 outside the authentication controller 20 was demonstrated. Not limited to this, the gate opening / closing management unit 60 may be provided in the authentication controller 20. In this case, the control unit of the authentication server 50 searches the database based on the authentication information received from the authentication controller 20, and transmits the authentication result of successful authentication to the authentication controller 20 when there is matching authentication information. . Further, the control unit of the authentication server 50 transmits an authentication failure authentication result to the authentication controller 20 when authentication information that matches the authentication information received from the authentication controller 20 does not exist in the database.

  If the authentication-side control unit 23 determines that the room can be entered (authentication success) based on the received authentication information, the authentication-side control unit 23 transmits a gate opening signal to the gate opening / closing management unit 60. When the gate opening / closing management unit 60 receives a gate opening signal from the authentication-side control unit 23, the gate opening / closing management unit 60 transmits an opening operation signal to the gate device 40 to open the closed gate bar. Thereby, the user can pass through the passage W and enter the room. On the other hand, the authentication-side control unit 23 does not transmit a gate opening signal to the gate opening / closing management unit 60 when it is determined that room entry is impossible (authentication failure) based on the received authentication information. In this case, since the opening operation signal is not transmitted from the gate opening / closing management unit 60 to the gate device 40, the gate bar remains closed. Therefore, the user cannot pass through the passage W and enter the room.

(3) In this embodiment, in the transmission / reception device (202, 302), an example in which the amplification degree (amplification factor) when the detected authentication signal is amplified to a predetermined signal level is acquired as signal strength information related to the signal strength. explained. In addition to this, when the influence of noise or the like is small, the amplitude of the detected authentication signal may be acquired as signal strength information.

(4) In the present embodiment, in the entrance management system 1 that acquires authentication information by electric field communication via a human body, the authentication side communication unit 21 is an electrode mat that is installed at the entrance of the gate device 40 or the like. explained. Not only this but the authentication side communication part 21 is good also as an electrode sheet installed in the wall surface of the gate side wall 41 or 42. FIG. In this case, when the user P holding the card holder 10 touches or approaches the electrode sheet when passing through the gate device 40, information can be transmitted and received by electric field communication through the human body.

  The present invention can be applied not only to electric field communication via a human body but also to an authentication system that acquires user authentication information by short-range wireless communication. For example, in an authentication system that acquires user authentication information by Bluetooth (registered trademark) communication as short-range wireless communication, signal strength information is added to the user authentication information acquired by an antenna. Therefore, in such an authentication system, the signal strength can be determined more accurately.

(5) In the present embodiment, the example in which the authentication information is read from the IC card 30 by the non-contact reader / writer 11 has been described. In addition to this example, a magnetic card may be used instead of the IC card 30. In this case, the authentication information can be read from the magnetic card by bringing the magnetic card (magnetic stripe) held in the card holder 10 into contact with the magnetic head of the magnetic card reader built in the card holder 10.

(6) In this embodiment, the example which uses the card holder 10 with an entrance management system was demonstrated. Not limited to this, it is possible to manage the entrance of the visitors to the facility by holding the card holder 10 in a commercial facility, public facility, specific management facility, etc., and installing a transmission / reception unit at the entrance of each facility. be able to. Moreover, in this embodiment, the example which made the authentication object the user (human body) was demonstrated. The authentication target is not limited to this, and may be an animal such as a pet or livestock, or may be an article or the like in which electricity easily passes through the surface layer.

(7) In this embodiment, the gate device 40 that can enter and exit from two directions has been described as an example. Not only this but the gate apparatus 40 may be the structure which can enter / exit only from one direction. The configuration of the gate device 40 is not limited to the example of the present embodiment, and any configuration is possible as long as the passage W can be switched between an open state where the user P can pass and a closed state where the user P cannot pass. May be.

DESCRIPTION OF SYMBOLS 1 Entrance management system 10 Card holder 11 Reader / writer 12 Terminal side communication part 13 Storage part 15 Terminal side control part 20 Authentication controller 21 Authentication side communication part 23 Authentication side control part 30 IC card 40 Gate apparatus 50 Authentication server 60 Gate opening / closing management part 121 Signal electrode 200 First electrode mat 201, 301 Signal detection antenna 202, 302 Transceiver 300 Second electrode mat

Claims (6)

A gate device capable of opening and closing a passage having a first passage and a second passage;
A first detection device that detects an authentication signal from an authentication medium held by an authentication target at the first passage, and acquires signal strength information related to the authentication information based on the authentication signal and the signal strength of the authentication signal;
A second detection device that detects an authentication signal from an authentication medium held by an authentication target at the second passage, and acquires authentication information based on the authentication signal and signal strength information related to the signal strength of the authentication signal;
An authentication control device that transmits authentication information acquired by the first detection device or the second detection device to an authentication server,
An authentication system in which opening and closing of the gate device is controlled based on an authentication result of the authentication server for the authentication information,
The authentication control device includes:
When the same authentication information is acquired by the first detection device and the second detection device, the first detection device or the second detection device is based on the signal strength information associated with the authentication information. Sending the authentication information acquired in any of the above to the authentication server,
An authentication system characterized by The authentication system according to claim 1,
The authentication control device includes:
When the same authentication information is acquired in the first detection device and the second detection device, transmitting the authentication information associated with the signal strength information of stronger signal strength to the authentication server,
An authentication system characterized by In the authentication system according to claim 1 or 2,
The authentication control device includes:
When the same authentication information is continuously acquired by either the first detection device or the second detection device, canceling transmission of the authentication information acquired after the second time to the authentication server,
An authentication system characterized by In the authentication system according to any one of claims 1 to 3,
Electric field communication is used as a communication means between the authentication medium and the authentication control device;
An authentication system characterized by The authentication system according to claim 4,
The authentication medium is
An IC card holding unique authentication information;
A reader / writer that transmits and receives information to and from the IC card;
A signal electrode for inducing a modulation electric field in the authentication target;
An electric field communication unit that communicates with the authentication control device via an authentication target by a modulated electric field induced by the signal electrode;
A communication control unit that converts the authentication information received from the IC card by the reader / writer into an authentication signal for electric field communication, and transmits the authentication signal from the electric field communication unit to the authentication control device;
An authentication system characterized by In an authentication system in which the opening / closing of the gate device is controlled based on the determination result of the authentication server for the authentication information, the authentication control device of the authentication control device that transmits the authentication information acquired from the authentication medium held by the authentication target to the authentication server A program for
Computer
When the same authentication information is acquired by two detection devices having different positions, the authentication information acquired by one of the two detection devices is based on the signal strength information associated with each of the authentication information. Control means for transmitting to the authentication server;
A program for an authentication control device, characterized in that the program is made to function as:

Images