JP4223243B2 - Access control device - Google Patents

Description

[0001]
BACKGROUND OF THE INVENTION
The present invention relates to an entry / exit management apparatus that manages the entry / exit of a person or an object.
[0002]
[Prior art]
In recent years, access control devices and access control devices that have card readers and electric locks on buildings and building doors and permit or prohibit the passage of people and things by the card ID number have become widespread.
[0003]
In addition, biometrics technology that identifies human characteristics (for example, fingerprints, faces, irises, palm shapes, voiceprints, etc.) to identify individuals has been developed, and traffic is managed by biometrics instead of cards. Management devices and access control devices have also been put into practical use.
[0004]
A conventional access control apparatus will be described with reference to the drawings. FIG. 7 is a diagram showing a configuration of a conventional access control apparatus. FIG. 7 shows a general access management system using biometric authentication.
[0005]
In FIG. 7, 1 (1A, 1B) is a personal identification controller, 2 (2A, 2B) is a personal identification device, 3 (3A, 3B) is an electric lock, 4 is a data setting terminal, 5 is a biometrics authentication server, 6 Is a general-purpose network such as Ethernet (registered trademark). A single personal identification controller 1 is connected to a plurality of personal identification devices 2.
[0006]
A plurality of personal identification controllers 1 connected to a general-purpose network 6 such as Ethernet (registered trademark) are connected to a personal identification device 2 and an electric lock 3 for extracting features on the body of each person. The personal identification controller 1 determines whether or not an authenticated individual can pass through the door, and manages traffic by unlocking and locking the electric lock 3.
[0007]
In general, the personal identification controller 1 that performs access control uses a microcomputer-controlled controller because of setting space and ease of handling. The personal identification controller 1 includes personal data that allows passage of the door, and the data is set by a data setting terminal 4 connected to the general-purpose network 6. In the case of a system using a card or a system in which biometric authentication can be authenticated in the personal identification controller 1, the system can be realized with this configuration.
[0008]
However, when the biometrics authentication is an advanced function or the number of people to be authenticated is large, the authentication process cannot be completed in the personal identification controller 1, and a dedicated biometrics authentication server 5 is separately installed on the general-purpose network 6. There is a need.
[0009]
Next, the operation of the conventional access control apparatus will be described with reference to the drawings. FIG. 8 is a flowchart showing the operation of a conventional access control apparatus.
[0010]
FIG. 8 is a flowchart showing the processing operation of the personal identification controller 1 when the biometrics authentication server 5 is installed.
[0011]
First, in step 901, the personal identification controller 1 extracts personal feature information by the personal identification device 2.
[0012]
Next, in step 902, the personal characteristic information extracted by the personal identification device 2 is transmitted to the biometric authentication server 5 through the general-purpose network 6. The biometrics authentication server 5 that has received the personal characteristic information authenticates and returns the specified personal number.
[0013]
Next, in step 903, the personal identification controller 1 waits for a response from the biometrics authentication server 5. If there is a response, the process proceeds to the next step 904.
[0014]
Next, in step 904, based on the personal number returned from the biometrics authentication server 5, the access permission / prohibition setting table shown in FIG. 2 is referred to and it is determined whether or not the corresponding door can be unlocked. If the passage is permitted, that is, if the corresponding door number of the corresponding personal number is marked with a circle in the passage permission / inhibition setting table, the process proceeds to the next step 905. On the other hand, if it is impossible to pass, that is, if the corresponding door number of the corresponding personal number is “X” in the passability setting table, the process proceeds to step 908.
[0015]
Next, in step 905, if the passage is permitted, the personal identification controller 1 unlocks the electric lock 3 and displays that the personal identification device 2 can pass.
[0016]
Next, in step 906, the personal identification controller 1 waits for passage by opening and closing the corresponding door, and when the passage is completed, the process proceeds to the next step 907.
[0017]
In step 907, when the traffic is completed, the personal identification controller 1 locks the electric lock 3 to end the process, and waits for the next operation.
[0018]
In step 908, if it is determined in step 904 that the passage is impossible, the personal identification controller 1 displays on the personal identification device 2 that the passage is impossible, and the processing is completed.
[0019]
[Problems to be solved by the invention]
In the conventional entrance / exit management apparatus as described above, when the number of doors is large and the number of personal identification controllers 1 is large, there is a problem that the processing is concentrated on the biometrics authentication server 5 and the response becomes slow.
[0020]
Further, when the biometrics authentication server 5 goes down, there is a problem that the entire system goes down.
[0021]
Furthermore, none of the biometrics systems are yet complete, and there are problems such as differences in the accuracy of authentication depending on the authentication algorithm and difficulty in authenticating individuals with specific conditions.
[0022]
The present invention has been made to solve the above-mentioned problems. A plurality of biometric authentication servers are installed, and an authentication request is transmitted from each personal identification controller to a plurality of appropriate biometric authentication servers. Thus, it is possible to determine whether or not the vehicle can pass based on the returned result. Accordingly, an object of the present invention is to obtain an entry / exit management device that can speed up the response and improve the accuracy of authentication by combining the logic of the personal identification controller and the biometrics authentication server.
[0023]
In addition, when some biometric authentication servers are down, changing the logic of the personal identification controller or the combination of biometric authentication servers can prevent the entire system from going down. The purpose is to obtain.
[0024]
[Means for Solving the Problems]
The access control apparatus according to claim 1 of the present invention is based on a personal number corresponding to personal feature information with reference to a passability setting table, to which a personal identification device and an electric lock for extracting personal physical features are connected. A personal identification controller that locks and unlocks the electric lock by determining whether or not it can be passed, a plurality of biometrics authentication servers that authenticate the personal feature information extracted by the personal identification device and return the identified personal number; The personal identification controller and a network connecting the plurality of biometric authentication servers to each other, and the personal identification controller sends personal feature information extracted by the personal identification device to the plurality of biometric authentication servers. When the authentication result is returned from a predetermined number of the plurality of biometric authentication servers Is to determine whether the traffic.
[0025]
The access management apparatus according to claim 2 of the present invention is connected to a personal identification device and an electric lock for extracting personal features on an individual, and is based on a personal number corresponding to personal feature information with reference to a passability setting table. A personal identification controller that determines whether or not the vehicle can pass and locks and unlocks the electric lock, and performs verification authentication of the personal feature information registered using the personal number as a key and the personal feature information extracted by the personal identification device, A plurality of biometric authentication servers that determine whether they match and return an authentication result, the personal identification controller, and a network that interconnects the plurality of biometric authentication servers, the personal identification controller comprising: The plurality of biometrics authentication servers that receive the input personal number and personal feature information extracted by the personal identification device Transmitted to, when the authentication result of a predetermined number of the plurality of biometric authentication server is returned is to determine whether the traffic.
[0026]
According to a third aspect of the present invention, the access control apparatus includes a server table in which the personal identification controller describes a biometric authentication server to which the personal characteristic information should be transmitted for each personal identification apparatus.
[0027]
According to a fourth aspect of the present invention, there is provided the access control apparatus, wherein the personal identification controller is matched based on any one of the predetermined number of authentication results, or when the predetermined number of authentication results all match. Based on the authentication result, whether or not the passage is permitted is determined .
[0028]
In the access control apparatus according to claim 5 of the present invention, the personal identification controller changes the predetermined number when a part of the plurality of biometrics authentication servers goes down.
[0029]
According to a sixth aspect of the present invention, there is provided the access control apparatus according to any one of the predetermined number of authentication results when the personal identification controller is down when a part of the plurality of biometrics authentication servers is down. In this case, whether or not the passage is permitted is determined .
[0030]
DETAILED DESCRIPTION OF THE INVENTION
Embodiment 1 FIG.
An access control apparatus according to Embodiment 1 of the present invention will be described with reference to the drawings. FIG. 1 is a diagram showing a configuration of an access control apparatus according to Embodiment 1 of the present invention. In addition, in each figure, the same code | symbol shows the same or equivalent part.
[0031]
In FIG. 1, 1 (1A, 1B) is a personal identification controller, 2 (2A, 2B) is a personal identification device, 3 (3A, 3B) is an electric lock, 4 is a data setting terminal, 5A is a biometric authentication server, 5B Is a biometrics authentication server, and 6 is a general-purpose network such as Ethernet (registered trademark). A single personal identification controller 1 is connected to a plurality of personal identification devices 2.
[0032]
A plurality of personal identification controllers 1 connected to a general-purpose network 6 such as Ethernet (registered trademark) are connected to a personal identification device 2 for extracting features on a human body and an electric lock 3 for authentication. It is determined whether the individual can pass through the door, and traffic is managed by unlocking and locking the electric lock 3.
[0033]
The personal identification controller 1 includes personal data (for example, a pass / fail setting table) that allows the door to pass, and the data is set by the data setting terminal 4 connected to the general-purpose network 6. .
[0034]
The biometric authentication server 5 for biometric authentication is installed in an appropriate number depending on the scale of the system, the number of registered persons, the type of biometrics, and the like. A plurality of biometric authentication servers 5 may be executed as programs on the same hardware.
[0035]
Similarly, when using a plurality of methods of biometrics in one system, the bametrics authentication server 5 corresponding to each individual identification device 2 may be set. Further, even with the same biometric method, biometrics authentication servers 5 having different algorithms and tuning can be installed to complement each other.
[0036]
Next, the operation of the access control apparatus according to the first embodiment will be described with reference to the drawings.
[0037]
FIG. 2 is a diagram showing the configuration of the pass / fail setting table of the access control apparatus according to Embodiment 1 of the present invention. FIG. 3 is a diagram showing the structure of the server table of the access control apparatus according to Embodiment 1 of the present invention.
[0038]
4 to 6 are flowcharts showing the operation of the access control apparatus according to Embodiment 1 of the present invention.
[0039]
4 and 5 are flowcharts showing the processing operation of the personal identification controller 1 when a plurality of biometrics authentication servers 5 are installed. FIG. 4 is a flowchart showing a processing operation when an individual is identified only by biometrics technology. FIG. 5 shows whether the individual and physical characteristics match after the individual is identified by a numeric keypad or a card. It is a flowchart which shows the processing operation in the case of judging.
[0040]
FIG. 6 is a flowchart showing a processing operation when some of the biometric authentication servers are down.
[0041]
First, in step 101, the personal identification controller 1 extracts personal feature information by the personal identification device 2.
[0042]
Next, in step 102, the personal feature information extracted by the personal identification device 2 is transmitted through the general-purpose network 6 to each biometric authentication server 5 specified in the server table of FIG. . For example, when the personal identification device 2 is the fingerprint verification device A, as shown in FIG. 3, the personal feature information is transmitted to the servers 1 (biometrics authentication server 5A) and 2 (biometrics authentication server 5B). .
[0043]
In order to speed up data transmission, it is possible to use multicast or broadcast communication that can be simultaneously transmitted to a plurality of parties. The biometrics authentication server 5 that has received the personal characteristic information authenticates and returns the specified personal number.
[0044]
Next, in step 103, the personal identification controller 1 waits for a response from the biometric authentication server 5. If there is a response, the process proceeds to the next step 104.
[0045]
Next, in step 104, the personal identification controller 1 determines whether or not a predetermined number of authentication results set in advance have been returned among the biometrics authentication servers 5 specified in the server table of FIG. . If the predetermined number has not been reached, the process returns to step 103 and waits for a reply. On the other hand, if a predetermined number of replies have been received, the process proceeds to the next step 105.
[0046]
Next, in step 105, it is determined whether the determination logic of the authentication result is OR or AND. Which logic is to be determined is set for each individual identification controller 1 in advance. If the authentication logic is OR, the process proceeds to the next step 106. On the other hand, if the authentication logic is AND, the process proceeds to step 107.
[0047]
Next, in step 106, if the authentication logic is OR, the access number setting table shown in FIG. 2 is sequentially referred to based on the personal numbers returned from the plurality of biometrics authentication servers 5, and the personal number Judge whether it is okay to unlock the door. If it is allowed to pass, that is, if the corresponding door number of any corresponding personal number in the pass / fail setting table is a circle, the process proceeds to the next step 109. On the other hand, if it is impossible to pass, that is, if the corresponding door number of any corresponding personal number is X in the pass / fail setting table, the process proceeds to step 112.
[0048]
Next, in step 109, if the passage is permitted, the personal identification controller 1 unlocks the electric lock 3 and displays that the personal identification device 2 can pass.
[0049]
Next, in step 110, the personal identification controller 1 waits for passage by opening and closing the corresponding door, and when the passage is completed, the process proceeds to the next step 111.
[0050]
In step 111, when the traffic is completed, the personal identification controller 1 locks the electric lock 3 to end the process, and waits for the next operation.
[0051]
In step 112, if it is determined in step 106 that the traffic cannot be made, the personal identification controller 1 displays on the personal identification device 2 that the traffic cannot be passed, and the processing is completed.
[0052]
In step 107, if the authentication logic is AND, it is determined whether the personal numbers authenticated and returned by a plurality of biometrics authentication servers 5 match. If they match, the process proceeds to the next step 108. On the other hand, if they do not match, the process proceeds to step 112.
[0053]
Next, if all the personal numbers match in step 108, it is determined based on this personal number whether or not the corresponding door can be unlocked by referring to the passability setting table shown in FIG. . If it is allowed to pass, that is, if the corresponding door number of the corresponding personal number is marked with a circle in the passability setting table, the process proceeds to step 109. On the other hand, if it is not possible to pass, that is, if the corresponding door number of the corresponding personal number is “X” in the pass / fail setting table, the process proceeds to step 112.
[0054]
Here, if the predetermined number in step 104 is set to 1, the determination can be made with the earliest authentication result, and the processing prioritizes the operation speed.
[0055]
If some of the biometric authentication servers 5 are down, the personal identification controller 1 changes (reduces) the predetermined number (waiting for response) in step 104 of FIG. 4 by performing the processing shown in FIG. ) Or changing the authentication logic (authentication condition) in step 105 (or setting it to OR), so that the operation can be performed with the function reduced.
[0056]
Further, when personal identification devices 2 of a plurality of types of biometrics are connected to the personal identification controller 1, body characteristic information input from each personal identification device 2 is obtained, and the server shown in FIG. By transmitting the feature information to the biometric authentication server 5 of each method according to the table, complex biometric authentication can be easily realized.
[0057]
Next, with reference to FIG. 5, description will be given of the processing operation in the case where an individual is specified by a numeric keypad or a card, and it is then determined whether the individual and the physical characteristics match.
[0058]
Since it is similar to the processing operation of FIG. 4, differences will be described.
[0059]
First, in step 201, the personal identification controller 1 inputs a personal number with a numeric keypad or a card reader, for example.
[0060]
Next, in step 202, the personal identification device 2 extracts feature information on the individual's body.
[0061]
Next, in step 203, the personal number and personal characteristic information are combined and transmitted to the biometrics authentication server 5. In other words, each personal identification device 2 is transmitted through the general-purpose network 6 to each biometric authentication server 5 specified in the server table of FIG.
[0062]
The biometrics authentication server 5 collates the already-registered personal feature information with the personal number as a key and the personal feature information extracted by the personal identification device 2 this time, and determines whether or not they match. Reply.
[0063]
Steps 204 to 206 are the same as steps 103 to 105 in FIG.
[0064]
In step 207, if the authentication logic is OR, the personal identification controller 1 determines whether an authentication OK is returned from any of the biometric authentication servers 5. If authentication OK is returned, the process proceeds to step 209. On the other hand, if the authentication OK is not returned, the process proceeds to step 213.
[0065]
In step 208, the personal identification controller 1 determines whether authentication OK is returned from all the biometrics authentication servers 5 when the authentication logic is AND. If authentication OK is returned, the process proceeds to step 209. On the other hand, if the authentication OK is not returned, the process proceeds to step 213.
[0066]
In step 209, based on the personal number, it is determined whether or not the corresponding door can be unlocked by referring to the passability setting table shown in FIG. If it is allowed to pass, that is, if the corresponding door number of the corresponding personal number is marked with a circle in the passability setting table, the process proceeds to step 210. On the other hand, if it is impossible to pass, that is, if the corresponding door number of the corresponding personal number is “X” in the passability setting table, the process proceeds to step 213.
[0067]
Hereinafter, steps 210 to 213 are the same as steps 109 to 112 in FIG. 4.
[0068]
As described above, the access management apparatus according to the first embodiment of the present invention installs a plurality of biometrics authentication servers 5 in accordance with the demands of the system size, reliability, responsiveness, composite authentication, etc. The feature information is transmitted from the identification controller 1 to an appropriate biometrics authentication server 5, the authentication result is judged, and the individual can be identified.
[0069]
Further, the access management apparatus according to Embodiment 1 of the present invention can continue to operate even if some biometric authentication servers 5 are down.
[0070]
In addition, an individual can be identified by collation using a combination of a plurality of biometric techniques or an authentication result by a combination of authentication methods with different algorithms and tuning.
[0071]
As a result, it is possible to realize an entry / exit management device with good responsiveness, high reliability, and high functionality.
[0072]
【The invention's effect】
As described above, the access control device according to claim 1 of the present invention is connected to a personal identification device and an electric lock for extracting personal features on an individual, and corresponds to personal feature information with reference to a pass / fail setting table. A personal identification controller that determines whether or not to pass based on a personal number to be used and locks and unlocks the electric lock; and a plurality of biometrics that authenticate personal feature information extracted by the personal identification device and return the identified personal number A metrics authentication server, the personal identification controller, and a network interconnecting the plurality of biometrics authentication servers, wherein the personal identification controller receives the individual feature information extracted by the personal identification device Sent to a biometric authentication server and authenticated from a predetermined number of the plurality of biometric authentication servers If the result is returned, since it is determined whether the traffic, it is possible to quickly respond, an effect that it is possible to improve the authentication accuracy.
[0073]
As described above, the access control device according to claim 2 of the present invention is connected to the personal identification device and the electric lock for extracting the personal features of the individual, and corresponds to the personal feature information with reference to the passability setting table. A personal identification controller that determines whether or not to pass based on a personal number and locks and unlocks the electric lock, personal feature information registered using the personal number as a key, and personal feature information extracted by the personal identification device A plurality of biometric authentication servers that perform verification authentication, determine whether or not they match, and return an authentication result; the personal identification controller; and a network that interconnects the plurality of biometric authentication servers. The personal identification controller uses the input personal number and the personal feature information extracted by the personal identification device as the plurality of biometrics. When the authentication result is returned from a predetermined number of the plurality of biometric authentication servers sent to the trick authentication server, it is possible to speed up the response and determine the accuracy of authentication. There is an effect that it can be improved.
[0074]
As described above, the access control apparatus according to claim 3 of the present invention has a server table in which the personal identification controller describes a biometric authentication server to which the personal characteristic information should be transmitted for each personal identification apparatus. Therefore, it is possible to speed up the response and to improve the accuracy of authentication.
[0075]
In the access control apparatus according to claim 4 of the present invention, as described above, the personal identification controller is based on any one of the predetermined number of authentication results, or the predetermined number of authentication results all match. Since it is determined whether or not the passage is permitted based on the authentication result that matches , the response can be quickened and the accuracy of authentication can be improved.
[0076]
As described above, the access control apparatus according to claim 5 of the present invention responds because the personal identification controller changes the predetermined number when a part of the plurality of biometrics authentication servers is down. As a result, it is possible to improve the accuracy of authentication.
[0077]
As described above, the access control apparatus according to claim 6 of the present invention is the personal identification controller, in the case where some of the plurality of biometrics authentication servers are down , any of the predetermined number of authentication results. Since it is determined whether or not the passage is possible based on one , the response can be made faster, and the accuracy of authentication can be improved.
[Brief description of the drawings]
FIG. 1 is a diagram showing a configuration of an access control apparatus according to Embodiment 1 of the present invention.
FIG. 2 is a diagram showing a configuration of a pass / fail setting table of the access management apparatus according to Embodiment 1 of the present invention.
FIG. 3 is a diagram showing a configuration of a server table of the access control apparatus according to Embodiment 1 of the present invention.
FIG. 4 is a flowchart showing an operation of the access control apparatus according to Embodiment 1 of the present invention.
FIG. 5 is a flowchart showing the operation of the access control apparatus according to Embodiment 1 of the present invention.
FIG. 6 is a flowchart showing the operation of the access control apparatus according to Embodiment 1 of the present invention.
FIG. 7 is a diagram showing a configuration of a conventional access control apparatus.
FIG. 8 is a flowchart showing the operation of a conventional access control apparatus.
[Explanation of symbols]
1, 1A, 1B personal identification controller, 2, 2A, 2B personal identification device, 3, 3A, 3B electric lock, 4 data setting terminal, 5A biometric authentication server, 5B biometric authentication server, 6 general-purpose network.

Claims (6)

A personal identification device for extracting features on the body of the individual and an electric lock are connected, and the electric lock is applied by referring to the passability setting table and judging whether or not the pass is possible based on the personal number corresponding to the personal feature information. A personal identification controller to lock,
A plurality of biometrics authentication servers that authenticate the individual feature information extracted by the personal identification device and return the identified personal number;
A network connecting the personal identification controller and the plurality of biometric authentication servers to each other;
The personal identification controller transmits personal characteristic information extracted by the personal identification device to the plurality of biometrics authentication servers, and when an authentication result is returned from a predetermined number of the plurality of biometrics authentication servers. Determines whether the passage is permitted or not. A personal identification device for extracting features on the body of the individual and an electric lock are connected, and the electric lock is applied by referring to the passability setting table and judging whether or not the pass is possible based on the personal number corresponding to the personal feature information. A personal identification controller to lock,
A plurality of biometrics authentication servers that perform verification authentication of personal feature information registered using a personal number as a key and personal feature information extracted by the personal identification device, determine whether or not they match, and return an authentication result; ,
A network connecting the personal identification controller and the plurality of biometric authentication servers to each other;
The personal identification controller transmits the input personal number and personal characteristic information extracted by the personal identification device to the plurality of biometric authentication servers, and an authentication result is obtained from a predetermined number of the plurality of biometric authentication servers. In the case of a reply, the access control apparatus determines whether the passage is permitted. The access control apparatus according to claim 1, wherein the personal identification controller has a server table describing a biometric authentication server to which the personal characteristic information is to be transmitted for each personal identification apparatus. The personal identification controller determines whether the passage is permitted based on any one of the predetermined number of authentication results or based on a matching authentication result when the predetermined number of authentication results all match. access control apparatus according to claim 1 or 2, wherein that. The access control apparatus according to claim 1, wherein the personal identification controller changes the predetermined number when a part of the plurality of biometric authentication servers is down. The personal identification controller may determine whether the traffic is permitted based on any one of the predetermined number of authentication results when a part of the plurality of biometric authentication servers is down. The access control apparatus according to claim 1 or 2.

Images