JP2016224552A - Entry/exit control system and entry/exit control method - Google Patents

Abstract

PROBLEM TO BE SOLVED: To ensure a security level against an unauthorized passage even in the circumstances where an entry/exit control device in an off-line state and an entry/exit control device in an on-line state are mixed.SOLUTION: An entry/exit control system includes an entry/exit control device for controlling an entry/exit of a passing person on the basis of an ID card storing first whereabouts information and a calculator server storing second whereabouts information. The IC card stores latest passage mode information. When the person passes through an entry/exit control device in an off-line, the calculator server identifies and records the second whereabouts information. The entry/exit control device has a passage determination processing part which executes a first determination action to determine whether or not to permit the passage of the person on the basis of the second whereabouts information when the latest passage mode information indicates an on-line state, while executing a second determination action to determine whether or not to permit the passage of the person on the basis of the first whereabouts information when the latest passage mode information indicates an off-line state.SELECTED DRAWING: Figure 1

Description

  Embodiments described herein relate generally to an entry / exit management system and an entry / exit management method.

  The entry / exit management system is a system for preventing the passage of unauthorized persons, and in general, the entry / exit management device that manages the entry / exit of the passer-by based on the ID card possessed by the passer-by, and the entry / exit management It is comprised with the computer server which can communicate with an apparatus. The entry / exit management device collates the information recorded on the ID card with the information recorded on the computer server, and determines whether or not to allow traffic based on the collation result. Thereby, it becomes possible to allow only those who are permitted to pass through.

Japanese Patent No. 5117063

  In the above-described entry / exit management device system, the entry / exit management device uses the information of the computer server to determine the passage, thereby preventing unauthorized passage such as falsification of the ID card. However, the entry / exit management device may be in an offline state incapable of communicating with the computer server due to a failure or maintenance. In this case, even if the other entry / exit management device is in an online state in which communication with the computer server is possible, as with the entry / exit management device in the offline state, the passage determination is made without using the information of the computer server. For this reason, in the above-described entry / exit management apparatus system, it is difficult to ensure a security level against unauthorized traffic in an environment where an offline entry / exit management apparatus and an online entry / exit management apparatus coexist.

  Therefore, the problem to be solved by the present invention is to provide access control that can secure a security level against unauthorized traffic even in an environment in which an offline access control device and an online access control device coexist. It is an object to provide a system and an access control method.

According to one embodiment, the access management device that manages the access of the passer-by based on the ID card in which the identification information for identifying the passer-by and the first location information indicating the current location of the passer-by are recorded. When,
A computer server on which second whereabouts information indicating the current or past whereabouts of the passerby is recorded,
The ID card records the previous pass mode information indicating whether the access control device that the passer was previously passed was in an online state in which communication with the computer server was possible or in an offline state incapable of communication with the computer server. And
When the passerby passes through the online access control device, the computer server specifies the second location information of the passer based on the location where the access control device is installed. Record
The access control device includes a traffic determination processing unit that determines whether to allow the passer to pass based on the previous traffic mode information read from the ID card, and the traffic determination processing unit When the traffic mode information indicates the online state, a first determination operation is performed to determine whether the passer is permitted to pass based on the second location information recorded in the computer server. And determining whether to allow the passer to pass based on the first location information recorded in the ID card when the previous pass mode information indicates the offline state. An entry / exit management system for performing the operation is provided.

  Even in an environment in which an offline access management device and an online access management device coexist, it is possible to ensure a security level against unauthorized traffic.

It is a block diagram which shows the schematic structure of the access control system which concerns on 1st Embodiment. It is a figure which shows the layout of the entrance / exit management apparatus shown in FIG. It is a figure for demonstrating operation | movement of the entrance / exit management system which concerns on 1st Embodiment when a passer-by passes the entrance / exit management apparatus of an offline state. It is a figure for demonstrating operation | movement of the entrance / exit management system which concerns on 1st Embodiment when a passer-by passes the online-entrance management apparatus. It is a block diagram which shows the schematic structure of the entrance / exit management system which concerns on 2nd Embodiment. It is a figure for demonstrating operation | movement of the entrance / exit management system which concerns on 2nd Embodiment when the entrance / exit management apparatus of an offline state switches to an online state after a passerby passes. It is a figure for demonstrating operation | movement of the entrance / exit management system which concerns on 2nd Embodiment when a passer-by passes through the online state entrance / exit management apparatus. It is a block diagram which shows the schematic structure of the entrance / exit management system which concerns on 3rd Embodiment. It is a figure for demonstrating operation | movement of the entrance / exit management system which concerns on 3rd Embodiment when a passer-by passes the entrance / exit management apparatus of an offline state. It is a figure for demonstrating operation | movement of the entrance / exit management system which concerns on 3rd Embodiment, when a passer-by passes an online entrance / exit management apparatus. It is a block diagram which shows the schematic structure of the entrance / exit management system which concerns on 4th Embodiment. It is a figure for demonstrating operation | movement of the entrance / exit management system which concerns on 4th Embodiment when a passer-by passes an online entrance / exit management apparatus. It is a block diagram which shows the schematic structure of the entrance / exit management system which concerns on 5th Embodiment. It is a figure for demonstrating operation | movement of the entrance / exit management system which concerns on 5th Embodiment when a passer-by passes the online-entrance management apparatus.

  Embodiments of the present invention will be described below with reference to the drawings. This embodiment does not limit the present invention.

(First embodiment)
FIG. 1 is a block diagram illustrating a schematic configuration of an access control system according to the first embodiment. As shown in FIG. 1, the access management system 11 according to the present embodiment includes an access control apparatus 101 and a computer server 201.

  FIG. 2 is a diagram illustrating a layout of the access control apparatus 101. As shown in FIG. 2, the entrance / exit management device 101 is installed between location A to location E. In the present embodiment, one entry / exit management device 101 is installed between locations A to E, but a plurality of entry / exit management devices 101 may be installed. The entry / exit management device 101 manages the entry / exit of passers-by based on the ID card 301.

  Here, returning to FIG. 1, the ID card 301 will be described. In the ID card 301, personal identification information 302, previous pass mode information 303, and whereabouts information 304 are recorded. The personal identification information 302 is information for identifying a passerby. The previous traffic mode information 303 is information indicating whether the access management device 101 that the passer-by last traveled was in an online state in which communication with the computer server 201 was possible or in an offline state in which communication with the computer server 201 was impossible. The whereabouts information 304 is first whereabouts information indicating the current whereabouts of the passerby.

  The above is the description of the ID card 301. Next, the configuration of the access management apparatus 101 will be described with reference to FIG. 1 again. The entrance / exit management apparatus 101 includes a personal identification information recording unit 102, a traffic history information recording unit 103, a management information recording unit 104, and a traffic determination processing unit 105.

  In the personal identification information recording unit 102, personal identification information of a person who is permitted to pass the access management apparatus 101 is recorded. This personal identification information is periodically downloaded from the computer server 201 when the access management apparatus 101 is online.

  Offline traffic history information is recorded in the traffic history information recording unit 103. This offline traffic history information indicates a traffic history of a passer-by passing through the access management apparatus 101 when the access management apparatus 101 is in an offline state.

  In the management information recording unit 104, management information for managing the entry and exit of passers-by is recorded. This management information includes, for example, information indicating the installation location of the entry / exit management device 101, in other words, the location where the entry / exit management device 101 manages entry / exit of passers-by, and whether the entry / exit management device 101 is online or offline Information indicating whether or not the current state is present.

  The traffic determination processing unit 105 includes a personal authentication processing unit 106, a traffic mode determination unit 107, a location determination unit 108, and a traffic history update unit 109. The personal authentication processing unit 106 reads the personal identification information 302 from the ID card 301 and determines whether or not the read personal identification information 302 is permitted to pass through the access management apparatus 101. The traffic mode determination unit 107 reads the previous traffic mode information 303 from the ID card 301 and sends the read previous traffic mode information 303 to the location determination unit 108. The whereabouts determination unit 108 determines whether or not the passerby is permitted to pass based on the previous pass mode information 303. The traffic history update unit 109 updates the location information 304 and the previous traffic mode information 303, respectively, when a passerby is allowed to pass. Further, the traffic history updating unit 109 sends a traffic history of a passer-by passing through the access management device 101 to the computer server 201 when the access management device 101 is in an online state.

  The above is the description of the access control apparatus 101. Next, the configuration of the computer server 201 will be described. The computer server 201 has a personal identification information database 202, a whereabouts information database 203, and a traffic history information database 204.

  The personal identification information database 202 includes personal identification information of a person who is permitted to pass the access management apparatus 101. This personal identification information is periodically downloaded to the personal identification information recording unit 102 of the access control apparatus 101.

  The whereabouts information database 203 has second whereabouts information indicating the current or past whereabouts of all passers-by who have passed through the access control device 101. The second whereabouts information is updated based on the installation location of the access management apparatus 101 when the passerby passes through the access management apparatus 101.

  In the traffic history information database 204, traffic history information indicating the traffic history of the access control apparatus 101 of all passers-by is stored. This traffic history information is updated based on the traffic history sent from the traffic history information recording unit 103 of the access control apparatus 101.

  Hereinafter, an example of the operation of the access management system 11 according to the present embodiment will be described with reference to FIGS. 3 and 4. Here, it is assumed that a passer-by goes through another entry / exit management apparatus 101 in the online state shown in FIG. 4 after passing through the offline entry / exit management apparatus 101 shown in FIG. 3.

  First, based on FIG. 3, the operation of the access management system 11 when a passer-by passes through the access control apparatus 101 in an offline state will be described.

  First, the personal authentication processing unit 106 of the offline access control apparatus 101 reads the personal identification information 302 from the ID card 301 (step S1). Subsequently, the personal authentication processing unit 106 inquires of the personal identification information recording unit 102 whether or not the read personal identification information 302 is recorded. The personal identification information recording unit 102 searches the personal identification information 302 and notifies the search result to the personal authentication processing unit 106 (step S2).

  When the personal identification information 302 is recorded in the personal identification information recording unit 102, the personal authentication processing unit 106 notifies the passage mode determination unit 107 to that effect (step S3). When the personal identification information 302 is not recorded in the personal identification information recording unit 102, the personal authentication processing unit 106 indicates that the passer-by who owns the ID card 301 is not a person who is permitted to pass through the access management apparatus 101. And passers-by will not be allowed.

  Subsequent to step S3, the traffic mode determination unit 107 reads the previous traffic mode information 303 from the ID card 301 (step S4), and sends the read previous traffic mode information 303 to the location determination unit 108 (step S5).

  Subsequent to step S5, the location determination unit 108 reads the location information 304 from the ID card 301 (step S6). Thereafter, the whereabouts determination unit 108 reads the management information from the management information recording unit 104 (step S7), and determines whether or not the passerby is permitted based on the management information and the whereabouts information 304. Here, the determination operation of the whereabouts determination unit 108 will be described in detail.

  As described above, the management information recorded in the management information recording unit 104 indicates a place where the access management apparatus 101 manages the entry and exit of passers-by. For example, when the access management apparatus 101 manages the passage of passers-by from the place B to the place C shown in FIG. 2, the whereabouts determination unit 108 determines whether or not the whereabouts information 304 is the place B. . That is, the whereabouts determination unit 108 determines whether the whereabouts information 304 is correct based on the traffic management place of the access management apparatus 101.

  If the location information 304 is location B, the location determination unit 108 determines that the location information 304 is correct and permits the passerby to pass. On the other hand, if the whereabouts information 304 is not the place B, the whereabouts determination unit 108 determines that the whereabouts information 304 is not correct and does not allow the passerby to pass.

  When the whereabouts determination unit 108 permits the passerby to pass, the passing history update unit 109 updates the previous passing mode information 303 and the whereabouts information 304 of the ID card 301 (steps S8 and S9). Further, the traffic history update unit 109 sends information indicating that this passer-by has passed this access management apparatus 101 to the traffic history information recording unit 103 (step S10). The traffic history information recording unit 103 records this information as offline traffic history information.

  Next, based on FIG. 4, the operation of the access management system 11 when a passer-by passes through another access management apparatus 101 in an online state will be described.

  First, the personal authentication processing unit 106 reads the personal identification information 302 from the ID card 301 (step S11). Subsequently, the personal authentication processing unit 106 inquires of the personal identification information database 202 of the computer server 201 whether or not the personal identification information 302 read from the ID card 301 is recorded (step S12). The personal identification information database 202 searches the personal identification information 302 and notifies the personal authentication processing unit 106 of the search result (step S13).

  When the personal identification information 302 is recorded in the personal identification information database 202, the personal authentication processing unit 106 notifies the passage mode determination unit 107 to that effect (step S14). On the other hand, when the personal identification information 302 is not recorded in the personal identification information database 202, the personal authentication processing unit 106 determines that the passer is not a person permitted to pass the access control apparatus 101, and this pass Traffic is not permitted.

  Subsequent to step S14, the traffic mode determination unit 107 reads the previous traffic mode information 303 from the ID card 301 (step S15), and sends the read previous traffic mode information 303 to the location determination unit 108 (step S16). In the present embodiment, the previous traffic mode information 303 indicates an offline state.

  Subsequent to step S <b> 16, the whereabouts determination unit 108 reads the whereabouts information 304 from the ID card 301 (step S <b> 17), and allows the passerby to pass based on the read whereabouts information 304 and the previous passage mode information 303. Judge whether or not. Here, the determination operation of the whereabouts determination unit 108 will be described in detail.

  When the previous pass mode information 303 indicates an online state, the second whereabouts information recorded in the whereabouts information database 203 of the computer server 201 is updated to the current location of the passerby. Therefore, the whereabouts determination unit 108 inquires of the whereabouts information database 203 whether or not the whereabouts information 304 is recorded (step S18). The location information database 203 searches the location information 304 and notifies the location determination unit 108 of the search result (step S19). When the whereabouts information 304 is recorded in the whereabouts information database 203, the whereabouts determination unit 108 determines that the whereabouts information 304 is correct and permits the passerby to pass. On the other hand, if the whereabouts information 304 is not recorded in the whereabouts information database 203, the whereabouts determination unit 108 determines that the whereabouts information 304 is not correct and does not allow the passerby to pass. This is the first determination operation in this embodiment.

  On the other hand, if the previous pass mode information 303 indicates an offline state, the second whereabouts information recorded in the whereabouts information database 203 is not updated to the passer's current whereabouts, and the passer's past whereabouts are displayed. Show. In this case, the whereabouts determination unit 108 reads the management information from the management information recording unit 104 (step S20), and performs traffic determination based on the read management information and the whereabouts information 304. For example, when the access control device 101 manages the passage of passers-by from the place C shown in FIG. 2 to the place E shown in FIG. 2, the whereabouts determination unit 108 determines whether or not the whereabouts information 304 is the place C. To do. That is, the whereabouts determination unit 108 determines whether the whereabouts information 304 is correct based on the traffic management place of the access management apparatus 101. If the location information 304 is location C, the location determination unit 108 determines that the location information 304 is correct and permits the passerby to pass. On the other hand, when the whereabouts information 304 is not the place C, the whereabouts determination unit 108 determines that the whereabouts information 304 is not correct and does not allow the passerby to pass. This is the second determination operation in the present embodiment.

  After the first determination operation or the second determination operation, the traffic history update unit 109 updates the previous traffic mode information 303 and the location information 304 of the ID card 301 (steps S21 and S22). Further, the traffic history update unit 109 sends the traffic history of the passer through the access management apparatus 101 to the traffic history information database 204 of the computer server 201 (step S23). The traffic history information database 204 records this traffic history as the traffic history information of this passer.

  According to the present embodiment described above, the presence / absence determination is performed when the previous traffic mode information 303 indicates an online state even in an environment where the offline state management device 101 and the online state management device 101 are mixed. The unit 108 executes a traffic determination operation using the information of the computer server 201. Therefore, the security level against unauthorized traffic is improved as compared with the case where the online access management apparatus 101 in the above environment performs the same traffic determination operation as that of the offline management apparatus 101. Is possible.

(Second Embodiment)
Hereinafter, the access management system according to the second embodiment will be described focusing on differences from the first embodiment. FIG. 5 is a block diagram showing a schematic configuration of an access control system according to the second embodiment. As shown in FIG. 5, the access management system 12 according to the present embodiment includes an access management device 121 and a computer server 221.

  The access management apparatus 121 is different from the access management apparatus 101 according to the first embodiment in that it includes a location comparison unit 110. The location comparison unit 110 identifies the current location of the passerby, compares the identified location with the location information 304 read from the ID card 301, and performs a determination operation based on the comparison result. To instruct.

  The computer server 221 is different from the computer server 201 according to the first embodiment in that it includes an offline traffic history information recording unit 205 and an offline traffic history information extracting unit 206. The offline traffic history information recording unit 205 records offline traffic history information indicating the traffic histories of all passers-by when the access control device 121 is offline. The offline traffic history information extraction unit 206 extracts the offline traffic history information of the passer by which the traffic is determined from the offline traffic history information recording unit 205.

  Hereinafter, an example of the operation of the access management system 12 according to the present embodiment will be described with reference to FIGS. 6 and 7. Here, it is assumed that the offline access control apparatus 121 shown in FIG. 6 is switched to the online state after the passerby passes. In FIG. 6, the components of the access management apparatus 121 excluding the traffic history information recording unit 103 are not directly related to the operations described below, and thus are not described.

  When the entry / exit management device 121 switches from the offline state to the online state, the traffic history information recording unit 103 sends the offline traffic history information to the traffic history information database 204 of the computer server 221 (step S31). The traffic history information database 204 records the offline traffic history information in the offline traffic history information recording unit 205 (step S32), and updates its own traffic history information based on the offline traffic history information. Subsequently, the traffic history information database 204 sends the updated traffic history information to the location information database 203 (step S33). The location information database 203 updates the second location information based on the traffic history information.

  Next, the operation of the access management system 12 when the passer-by passes through the online access control apparatus 121 shown in FIG. 7 will be described.

  As shown in FIG. 7, the operation of this embodiment is different from the operation of the first embodiment shown in FIG. 4 in that it includes Steps S <b> 34 to S <b> 38. Therefore, here, the description will focus on steps S34 to S38, and the description of the same steps as in the first embodiment will be omitted.

  In step S34 subsequent to step S13 described in the first embodiment, the personal identification information database 202 notifies the personal identification information 302 to the offline traffic history information recording unit 205. The offline traffic history information recording unit 205 searches for the offline traffic history information of the passer identified by the personal identification information 302.

  When the corresponding offline traffic history information is found, the offline traffic history information is extracted by the offline traffic history information extraction unit 206 (step S35). Thereafter, the offline traffic history information extraction unit 206 sends the extracted offline traffic history information to the location comparison unit 110 of the access management apparatus 121 (step S36).

  The whereabouts comparison unit 110 specifies the current place of the passerby based on the offline passage history information. For example, when the offline traffic history information indicates that the passer-by has entered the location C from the location B through the offline access control device 121, the location comparison unit 110 displays the current location of the passer-by as the location. Specify C. That is, the whereabouts comparison unit 110 identifies the destination of the passerby indicated in the offline pass history information as the current location of the passerby.

  Subsequently, the whereabouts comparison unit 110 reads the whereabouts information 304 from the ID card 301 (step S37). Then, the whereabouts comparison unit 110 compares the read whereabouts information 304 with the current location of the identified passerby and instructs the passage mode determination unit 107 to perform a determination operation based on the comparison result (step S38). . Hereinafter, step S38 will be described in detail.

  When the whereabouts information 304 matches the current whereabouts of the identified passerby, the whereabouts comparison unit 110 determines whether or not to allow the passerby to pass based on the second whereabouts information recorded in the computer server 221. To determine whether or not That is, the whereabouts comparison unit 110 instructs the passage mode determination unit 107 to execute the first determination operation described in the first embodiment. On the other hand, when the whereabouts information 304 and the current whereabouts of the specified passerby do not match, the whereabouts comparison unit 110 determines whether to allow the passerby to pass based on the whereabouts information 304 and the management information. To instruct. That is, the whereabouts comparison unit 110 instructs the passage mode determination unit 107 to execute the second determination operation described in the first embodiment.

  Subsequent to step S38 described above, steps S15 to S17 described in the first embodiment are executed. In step S <b> 16, the traffic mode determination unit 107 sends the previous traffic mode information 303 read from the ID card 301 and the instruction from the location comparison unit 110 to the location determination unit 108.

  The whereabouts determination unit 108 executes a determination operation based on the previous passage mode information 303 and the instruction of the whereabouts comparison unit 110. This determination operation will be described below.

  When the previous traffic mode information 303 indicates an online state, the whereabouts determination unit 108 executes the first determination operation described in the first embodiment (steps S18 and S19). That is, the whereabouts determination unit 108 determines whether or not the passerby is permitted to pass using the information of the computer server 221.

  Further, also when the previous traffic mode information 303 indicates an offline state and the instruction of the whereabouts comparison unit 110 is execution of the first determination operation, the whereabouts determination unit 108 executes the first determination operation.

  However, if the previous traffic mode information 303 indicates an offline state and the instruction of the whereabouts comparison unit 110 is execution of the second determination operation, the whereabouts determination unit 108 executes the second determination operation (step S20).

  After the first determination operation or the second determination operation, the traffic history update unit 109 executes the operations of steps S21 to S23 described in the first embodiment. As a result, the previous pass mode information 303 and the whereabouts information 304 are updated in the ID card 301, and the passage history information and the whereabouts information are updated in the computer server 221.

  According to the present embodiment described above, the previous pass mode information 303 is online even in an environment in which the offline access management device 121 and the online access management device 121 are mixed, as in the first embodiment. When indicating the state, the whereabouts determination unit 108 executes a traffic determination operation using the information of the computer server 221. Therefore, the security level against unauthorized traffic is improved as compared with the case where the online access control device 121 in the above environment performs the same traffic determination operation as that of the offline access control device 121. Is possible.

  In particular, in this embodiment, when the access management apparatus 121 returns from the offline state to the online state, offline traffic history information is sent from the access management apparatus 121 to the computer server 221. As a result, the information on the computer server 221 is updated, so that the location determination unit 108 can determine the traffic using the information on the computer server 221 even when the previous traffic mode information 303 is offline. Therefore, it is possible to further improve the security level against unauthorized traffic.

(Third embodiment)
Hereinafter, the access management system according to the third embodiment will be described focusing on differences from the first embodiment. FIG. 8 is a block diagram illustrating a schematic configuration of an access control system according to the third embodiment. As shown in FIG. 8, the access management system 13 according to the present embodiment includes an access management device 131 and a computer server 201. Since the configuration of the computer server 201 is the same as that of the first embodiment, the description thereof will be omitted, and only the configuration of the access management apparatus 131 will be described.

  The entry / exit management device 131 is different from the entry / exit management device 101 according to the first embodiment in that it includes a determination result writing unit 111 and a determination result reading unit 112. The determination result writing unit 111 records, in the ID card 301, the passage determination information 305 indicating that the passerby is not permitted by the whereabouts determination unit 108. On the other hand, the determination result reading unit 112 reads the traffic determination information 305 from the ID card 301 and sends the read traffic determination information 305 to the location determination unit 108.

  Hereinafter, an example of the operation of the access management system 13 according to the present embodiment will be described with reference to FIGS. 9 and 10. Here, it is assumed that a passer-by passes through another entry / exit management device 131 shown in FIG. 10 after the passerby is not permitted to pass through the entry / exit management device 131 in the offline state shown in FIG. 9.

  First, based on FIG. 9, the operation of the access management system 13 when a passer-by passes through the access management device 131 in an offline state will be described. In FIG. 9, the determination result reading unit 112 is omitted because it is not directly related to the operation described below.

  As shown in FIG. 9, the operation of this embodiment is different from the operation of the first embodiment shown in FIG. 3 in that it has Steps S7a and S7b. Therefore, here, step S7a and step S7b will be mainly described, and description of the same steps as those in the first embodiment will be omitted.

  In step S7a following step S6 described in the first embodiment, the whereabouts determination unit 108 notifies the determination result writing unit 111 that the passerby has not been permitted to pass. In step S7b following step S7a, the determination result writing unit 111 writes in the ID card 301 traffic determination information 305 indicating that the passer's traffic is not permitted. In this embodiment, the pass history update unit 109 updates the location information 304 of the ID card 301 to the location where the passer-by tried to enter. For example, when the passage from the place B to the place C is not permitted, the whereabouts information 304 is updated to the place C.

  Next, based on FIG. 10, the operation of the access management system 13 when a passer-by passes through another access management device 131 in an online state will be described. In FIG. 10, the personal identification information recording unit 102, the traffic history information recording unit 103, and the determination result writing unit 111 are not described because they are not directly related to the operation described below.

  As shown in FIG. 10, the operation of the present embodiment is different from the operation of the first embodiment shown in FIG. 4 in that steps S17a to S17c are provided instead of step S17. Therefore, here, the description will focus on steps S17a to S17c, and the description of the same steps as in the first embodiment will be omitted.

  In steps S17a and 17b following step S16 described in the first embodiment, the determination result reading unit 112 reads the location information 304 and the traffic determination information 305 from the ID card 301. In step S <b> 17 c following steps S <b> 17 a and 17 b, the determination result reading unit 112 sends the location information 304 and the traffic determination information 305 to the location determination unit 108.

  After the step S17c, the whereabouts determination unit 108 determines whether or not the passerby is permitted based on the previous passage mode information 303, the whereabouts information 304, and the passage determination information 305. The determination operation of the whereabouts determination unit 108 will be described in detail below.

  When the previous traffic mode information 303 indicates an online state, the whereabouts determination unit 108 executes Step S18 and Step S19 described in the first embodiment, that is, the first determination operation.

  When the previous traffic mode information 303 indicates an offline state and the traffic determination information 305 indicates that the passer's traffic is not permitted, the location determination unit 108 specifies the location information immediately before the location information 304. To do. For example, when the whereabouts information 304 is the place C, the whereabouts determination unit 108 specifies the place B immediately before the place C. Subsequently, the whereabouts determination unit 108 reads the management information from the management information recording unit 104 (step S20), and performs passage determination based on the read management information and the specified whereabouts information. This is the third determination operation in the present embodiment.

  Although not shown in FIG. 10, after the first determination operation or the third determination operation, the traffic history update unit 109 performs the previous traffic of the ID card 301 in the same manner as in the first embodiment. The mode information 303 and the location information 304 are updated.

  According to the present embodiment described above, as in the first embodiment, the previous traffic mode information 303 is online even in an environment in which the offline access management device 131 and the online access management device 131 coexist. When indicating a state, the whereabouts determination unit 108 executes a traffic determination operation using information of the computer server 201. Therefore, the security level against unauthorized traffic can be improved as compared to the case where the online access management device 131 in the above environment performs the same traffic determination operation as that of the offline access management device 131. Is possible.

  In particular, in this embodiment, even if the passerby's passage is not permitted, even if the location information 304 of the ID card 301 is updated, the location determination unit 108 performs the third determination operation. It is possible to judge traffic after correctly grasping the whereabouts.

(Fourth embodiment)
Hereinafter, the access management system according to the fourth embodiment will be described focusing on differences from the first embodiment. FIG. 11 is a block diagram showing a schematic configuration of an access control system according to the fourth embodiment. As shown in FIG. 11, the access management system 14 according to the present embodiment includes an access management device 141 and a computer server 231.

  The entry / exit management device 141 is different from the entry / exit management device 101 according to the first embodiment in that a passage history collection unit 113 is included in the passage determination processing unit 105. The traffic history collection unit 113 reads the traffic history information 306 from the ID card 301 and sends the read traffic history information 306 to the traffic history update unit 109. Further, the traffic history collection unit 113 updates the traffic history information 306 of the ID card 301. The traffic history information 306 indicates the traffic history of the access control device that the passerby who has the ID card 301 has passed.

  The computer server 231 is different from the computer server 201 according to the first embodiment in that it includes a traffic history comparison unit 207 and a traffic history unmatch information recording unit 208. The traffic history comparison unit 207 compares the offline traffic history information sent from the entry / exit management device 141 switched from the offline state to the online state, and the traffic history information sent from another online management device 141. As a result, when there is a passerby whose offline pass history information is not included in the pass history information, information indicating the passer is notified to the pass history unmatch information recording unit 208. The traffic history unmatch information recording unit 208 records information sent from the traffic history comparison unit 207 as traffic history unmatch information.

  Hereinafter, an example of the operation of the access management system 14 according to the present embodiment will be described with reference to FIG. Here, it is assumed that a passer-by passes through another entry / exit management device 141 in an online state after passing through the entry / exit management device 141 in an offline state.

  Note that the operation of the access management system 14 when the passer-by passes through the offline access control device 141 is the same as that of the first embodiment, so the description is omitted, and the passer-by passes through the online access control device 141. Only the operation of the access control system 14 at the time of performing will be described.

  In FIG. 12, in the entrance / exit management device 141 switched from the offline state to the online state, the components other than the traffic history information recording unit 103 are not directly related to the operation described below, and thus are not described. Further, in the online entry / exit management device 141, the personal identification information recording unit 102 and the traffic history information recording unit 103 are not described because they are not directly related to the operations described below.

  As shown in FIG. 12, the operation of this embodiment includes step S21a and step S22a instead of step S21 and step S22, and further includes step S24 and steps S32a to S34a. This is different from the operation of the first embodiment shown. Therefore, these steps will be mainly described here, and the description of the same steps as those in the first embodiment will be omitted.

  In step S <b> 21 a subsequent to step S <b> 20 described in the first embodiment, the traffic history collection unit 113 reads the traffic history information 306 from the ID card 305. Subsequently, the traffic history collection unit 113 sends the read traffic history information 306 to the traffic history update unit 109 (step S22a).

  The traffic history update unit 109 sends the traffic history information 306 to the traffic history information database 204 of the computer server 231 (step S23). In step S <b> 24 following step S <b> 23, the traffic history collection unit 113 adds to the traffic history information 306 of the ID card 301 the traffic history that the passer has passed through the online access control device 141.

  After step S23, the entrance / exit management device 141 switched from the offline state to the online state sends the offline traffic history information recorded in the traffic history information recording unit 103 to the traffic history information database 204 (step S31). The traffic history information database 204 updates the traffic history information based on the offline traffic history information and the traffic history information 306 sent from the traffic history update unit 109. At this time, the traffic history comparison unit 207 compares the offline traffic history information with the traffic history information 306 (step S32a). As a result, when there is a passerby whose offline pass history information is not included in the pass history information 306, the pass history comparison unit 207 extracts information indicating the passer (step S33a), and the pass history unmatch The data is sent to the information recording unit 208 (step S34a). Thereby, the traffic history unmatch information is recorded in the traffic history unmatch information recording unit 208.

  According to the present embodiment described above, as in the first embodiment, the previous pass mode information 303 is online even in an environment where the offline state management device 141 and the online state management device 141 coexist. When indicating the state, the whereabouts determination unit 108 executes the traffic determination operation using the information of the computer server 231. Therefore, it is possible to improve the security level against unauthorized traffic even when the online access control device 141 in the above environment performs the same traffic determination operation as that of the offline access control device 141. It becomes.

  In particular, in this embodiment, the traffic history information 306 is recorded on the ID card 306, and this traffic history information 306 is sent to the computer server 231 via the online access management device 141. Therefore, when a passer-by passes through another online management apparatus 141 after passing through the offline management apparatus 141, even if the offline management apparatus 141 does not return to the online status, the computer Information of the server 231 is updated. Therefore, since the traffic determination can be performed using the information of the computer server 231, the security level against unauthorized traffic can be further improved.

(Fifth embodiment)
Hereinafter, the access management system according to the fifth embodiment will be described focusing on differences from the fourth embodiment. FIG. 13 is a block diagram illustrating a schematic configuration of an access control system according to the fifth embodiment.

  As shown in FIG. 13, the access management system 15 according to the present embodiment includes an access management device 151 and a computer server 231. Since the configuration of the computer server 231 is the same as that of the fourth embodiment, the description thereof will be omitted, and only the configuration of the access management apparatus 151 will be described.

  The income management device 151 differs from the access management device 141 according to the fourth embodiment in that it includes a traffic restriction determination unit 114. When the traffic restriction determining unit 114 receives the traffic history unmatch information from the computer server 231, the traffic restriction determining unit 114 instructs the traffic determination processing unit 105 not to allow the passer to pass.

  Hereinafter, an example of the operation of the access management system 15 according to the present embodiment will be described with reference to FIG. Here, it is assumed that a passer-by passes through another entry / exit management device 151 in an online state after passing through the entry / exit management device 151 in an offline state. The operation of the entrance / exit management system 15 when the passer-by passes through the off-line entrance / exit management device 151 is the same as that of the fourth embodiment, and thus the description thereof will be omitted. Only the operation of the access control system 15 will be described.

  In the present embodiment, it is assumed that the entry / exit management device 151 in the offline state is switched to the online state before the passerby passes the other entry / exit management device 151 in the online state. In other words, when the passer-by passes through another online management apparatus 151 in the online state, the offline traffic history information is already sent to the computer server 231. Further, the computer server 231 has a traffic history based on this offline traffic history information. Unmatch information is recorded.

  As shown in FIG. 14, the operation of the present embodiment is different from the operation of the fourth embodiment shown in FIG. 12 in that it includes Steps 35a to S37a. Therefore, step 35a to step S37a will be mainly described here, and description of steps similar to those in the fourth embodiment will be omitted.

  The first personal identification information database 202 notifies the personal authentication processing unit 106 of the search result of the personal identification information 302 (step S13), and then sends the personal identification information 302 to the travel history unmatch information recording unit 208 (step S35a). ).

  The traffic history unmatch information recording unit 208 searches for traffic history unmatch information corresponding to the personal identification information 302. As a result, when corresponding traffic history unmatch information is found, the traffic history unmatch information recording unit 208 sends the traffic history unmatch information to the traffic restriction determining unit 114 (step S36a).

  The traffic history unmatch information indicates a passer by whom the offline traffic history information is not included in the traffic history information 306. Since the traffic history information 306 normally includes the traffic history of the entry / exit management device 151 in the offline state, the traffic history information 306 and the offline traffic history information overlap. However, for example, when the ID card 301 has been tampered with, the passage history information 306 does not include offline passage history information. A passerby who possesses such an ID card 301 is likely to be a person who is not permitted to pass.

  Therefore, when the passage restriction determination unit 114 receives the passage history unmatch information from the computer server 231, the passage restriction determination unit 114 instructs the personal authentication processing unit 105 not to permit the passage of the passer-by (step S37a). Upon receiving this instruction, the personal authentication processing unit 105 does not allow the passer-by to pass. At this time, the personal authentication processing unit 105 may permit passage in the exit direction in order to prompt the passer to leave.

  According to the present embodiment described above, as in the first embodiment, the previous traffic mode information 303 is online even in an environment in which the offline state management device 151 and the online state management device 151 coexist. When indicating the state, the whereabouts determination unit 108 executes the traffic determination operation using the information of the computer server 231. For this reason, the security level against unauthorized traffic can be improved as compared with the case where the online access control device 151 in the above environment executes the same traffic determination operation as that of the offline status management device 151. Is possible.

  In particular, in the present embodiment, since the passage is determined after confirming the validity of the passage history information 306 of the ID card 301, it is possible to further improve the security level against unauthorized passage.

  Although several embodiments have been described above, these embodiments are presented as examples only and are not intended to limit the scope of the invention. The novel system described herein can be implemented in various other forms. Various omissions, substitutions, and changes can be made to the system configuration described in the present specification without departing from the gist of the invention. The appended claims and their equivalents are intended to include such forms and modifications as fall within the scope and spirit of the invention.

11-15 Access control system, 101, 121, 131, 141, 151 Access control device, 105 Traffic determination processing unit, 110 Location comparison unit, 114 Traffic restriction determination unit, 201, 221, 231 Computer server, 301 ID card

Claims (6)

Based on an ID card in which identification information for identifying a passer-by and first location information indicating the current location of the passer-by are recorded, an access management device that manages the access of the passer-by,
A computer server on which second whereabouts information indicating the current or past whereabouts of the passerby is recorded,
The ID card records the previous pass mode information indicating whether the access control device that the passer was previously passed was in an online state in which communication with the computer server was possible or in an offline state incapable of communication with the computer server. And
When the passerby passes through the online access control device, the computer server specifies the second location information of the passer based on the location where the access control device is installed. Record
The access control device includes a traffic determination processing unit that determines whether to allow the passer to pass based on the previous traffic mode information read from the ID card, and the traffic determination processing unit When the traffic mode information indicates the online state, a first determination operation is performed to determine whether the passer is permitted to pass based on the second location information recorded in the computer server. And determining whether to allow the passer to pass based on the first location information recorded in the ID card when the previous pass mode information indicates the offline state. An access control system that performs operations. After the entry / exit management device is switched from the offline state to the online state, the computer server records offline passage history information indicating a passage history of passers-by who passed when the entry / exit management device was in the offline state. And
The access control device identifies the current location of the passer based on the offline traffic history information when the previous traffic mode information indicates the offline state, and is recorded in the identified location and the ID card. Is compared with the first whereabouts information, and when both match, the traffic determination processing unit is instructed to execute the first determination operation, and when both do not match, the traffic determination processing unit The access control system according to claim 1, further comprising a location comparison unit that instructs to execute the second determination operation. In the ID card, when the passer's passage is not permitted, pass determination information indicating that is recorded, and the place where the passer tried to go in and out is recorded as the first whereabouts information,
The traffic determination processing unit indicates that the previous traffic mode information read from the ID card indicates the offline state, and the traffic determination information read from the ID card indicates that the passer is not permitted to pass. A third determination operation for determining whether to allow the passer to pass based on the location information immediately before the first location information recorded on the ID card. The access control system according to claim 1. In the ID card, traffic history information indicating a history of the access control device that the passer has passed is recorded,
When the previous traffic mode information read from the ID card indicates the offline state, the traffic determination processing unit reads the traffic history information from the ID card and sends the read traffic history information to the computer server.
The access control system according to claim 1, wherein the computer server updates the pass history information of the passer recorded in the pass server based on the pass history information sent from the pass determination processing unit. The computer server includes offline traffic history information indicating a history of passage of the passer when the access control device is in the offline state, and the pass history information of the passer sent from the traffic determination processing unit. In comparison, when there is a passerby whose offline pass history information is not included in the pass history information, the pass history unmatch information indicating the passer is sent to the access control device,
Upon receipt of the traffic history unmatch information from the computer server, the access control device includes a traffic restriction determination unit that instructs the traffic determination processing unit not to permit a passer's traffic indicated in the traffic history unmatch information. The access control system according to claim 4, further comprising: Based on an ID card in which identification information for identifying a passer-by and first location information indicating the current location of the passer-by are recorded, an access management device that manages the access of the passer-by,
A computer server in which second whereabouts information indicating the current or past whereabouts of the passerby is recorded, and an access control method using the computer server,
The ID card is used to record the previous pass mode information indicating whether the access control device that the passer has previously passed is in an online state in which communication with the computer server is possible or in an offline state incapable of communication with the computer server. Steps,
When the passer-by passes the access management device in the online state, the computer server specifies the second location information of the passer based on the location where the access control device is installed. Recording steps,
When the access control device reads the previous traffic mode information from the ID card, and the read previous traffic mode information indicates the online state, the second location information recorded in the computer server is included in the second location information. A first determination operation for determining whether or not to allow the passer to pass is performed, and when the read previous pass mode information indicates the offline state, the first recorded in the ID card Executing a second determination operation for determining whether to allow the passer to pass based on the location information of 1;
An exit / entry management method.

Images