JP4752547B2 - Printing machine management device - Google Patents

Description

  The present invention relates to security level area entry / exit management and information management in a security level area, and more particularly to a printing press management apparatus and a printing press that perform usage management of a printing press installed in a predetermined security level range.

  In companies that frequently handle confidential information or specific departments within the company, leakage of confidential information can be prevented in advance by applying an entry / exit management system that manages entry / exit of workers who handle confidential information. I am doing so.

  Generally, an entrance / exit management system uses information that uniquely identifies a user, such as a user ID (IDentification) incorporated in an IC (Integrated Circuit) card given to the user, or biometric information (fingerprint, iris, voiceprint, etc.). Advanced authentication that handles confidential information by unlocking the locked door for entry / exit when personal authentication is performed by the host computer for entrance / exit management and it is authenticated that the user is a registered valid user. Management such as permitting entry into the security level area.

In addition, by linking such an entrance / exit management system with a network authentication system that manages confidential information, authentication processing at the time of entering / exiting into an area that handles confidential information and use of an information terminal device after entering the room A technique for associating the authentication process with the start time has been devised (for example, see Patent Document 1). According to the method of Patent Document 1, security can be further strengthened by cooperation between authentication processing at the time of entering and leaving and authentication processing at the start of use of the information terminal device after entering the room. Further, it can be prevented.
JP 2002-41469 A

  By the way, in a general office space, a printer having a composite function such as a copying function, a network printing function, and a FAX function is permanently installed. Such a printing machine is installed not only in a low security level area but also in a high security level area that always handles confidential information in consideration of user convenience.

  The above-described printing machine can easily print information on a paper medium or transfer information to a remote place by using a FAX function. Strict usage management within the high security level domain is required.

  Therefore, the present invention has been proposed in view of the above-described circumstances, and only a user who is permitted to move to a predetermined security level area is permitted to use a printing press installed in this security level area. It is an object of the present invention to provide a printing press management apparatus and a printing press capable of providing

The printing press management apparatus according to the present invention sets the predetermined security level area in response to the fact that the user is permitted to move into the predetermined security level area by the authentication process using the authenticated information that uniquely identifies the user. Dynamic storage means for storing first area information uniquely specified in association with the authentication target information, and printing press identification information for uniquely specifying a printing press installed in a predetermined security level area And static storage means for storing in association with the second area information for uniquely specifying the predetermined security level area where the printing machine is installed, and a user who has moved into the predetermined security level area The information acquisition means for acquiring the authentication target information and the printing press identification information every time use of the printing press is requested by, and the information acquisition means Stored in the static storage unit in association with the first area information stored in the dynamic storage unit in association with the authenticated information and the printing press identification information acquired by the information acquisition unit. Control means for controlling to give permission to use the printing machine when the second area information matches, and the static storage means physically stores the predetermined security level area. For each door ID that identifies the door to be separated, the entry side room number information for specifying the predetermined security level area in the entrance direction is associated with the exit side room number information for specifying the predetermined security level area in the exit direction . Memorize door information.

  According to the present invention, only a legitimate user permitted to move to a predetermined security level area can be given permission to use a printing machine installed in this security level area. It is possible to surely eliminate unauthorized use of the printing press by an intruding unauthorized user.

  Hereinafter, embodiments of the present invention will be described with reference to the drawings.

[Configuration of printing press management system]
First, the configuration of a printing press management system 1 shown as an embodiment of the present invention will be described with reference to FIG. As shown in FIG. 1, the printing press management system 1 includes an entrance card reader 11, an exit card reader 12, and an entrance / exit control unit 13. From the low security level area (low security level area) to the confidential information The access control system for managing entry / exit to a high security level area (high security level area) and the printing machine 21 installed in the high security level area are connected to each other by an interface unit 30. ing.

  The entry / exit management system may be of any form that manages entry / exit from the low security level area to the high security level area. For example, as shown in FIG. The security level area and the low security level area are separated by a door, etc., and an entrance / exit management system that allows movement to each area according to the authentication process, or a physical barrier such as a door (not shown) An entry / exit management system that recognizes users in the security level area and the low security level area can be applied.

  The entrance / exit management system performs authentication processing for all users who wish to enter the advanced security level area, authenticates only legitimate users registered in advance, and permits entry into the advanced security level area. Further, the entrance / exit management system performs an authentication process on a user who wishes to leave the high security level area as necessary, and permits the user to leave the high security level area. The low security level area and the high security level area are separated from each other by a door provided with an electric lock that can be locked and unlocked by an electric action.

  Specifically, the entrance / exit management system contacts or does not contact information stored in the semiconductor memory of an IC card (Integrated Circuit) 2 owned by the user with the card reader 11 for entrance provided outside the high security level area. When it is authenticated as a valid user based on the card ID which is the information to be authenticated among the read information, the electric lock which is locked by the control of the entrance / exit control unit 13 is unlocked. To allow entry into the advanced security level area.

  In addition, when leaving the high security level area, the access control system reads the above-mentioned information on the IC card 2 by the card reader 12 for leaving the high security level area and is authenticated as a valid user. In such a case, the user can leave the high security level area by unlocking the electric lock that has been locked under the control of the entry / exit control unit 13.

  In FIG. 1, the security levels in the security level area are classified as level 0 (Lv0), level 1 (Lv1), level 2 (Lv2), level 3 (Lv3), and level 4 (Lv4) in order from the lowest security level. is doing. Level 0 having the lowest security level is set as a low security level area, and level 1 or higher is set as a high security level area. Note that the concept of entering and leaving the room differs depending on whether the low security level area or the high security level area is considered as the center, so moving from a low security level area to a high area is considered as an entrance room. Movement from a high level area to a low area is defined as leaving the room.

  When the access control system unlocks the locked electric lock by such an authentication process, the card ID that uniquely identifies the IC card 2 among the information stored in the IC card 2 owned by the user. Then, the door ID unique to the unlocked door and information (entrance / exit information) indicating whether to enter or exit the room are transmitted from the entrance / exit control unit 13 to the interface unit 30 described later. The entry / exit information may be indicated by, for example, a device ID that uniquely identifies the entry card reader 11 or the exit card reader 12.

  The printing machine 21 is a printing apparatus having a composite function of finally executing printing on a paper medium such as a copying function, a network printing function, and a FAX function. As shown in FIG. 1, the printing machine 21 is installed in the high security level area, and can be used when the use permission is given by the authentication process by the interface unit 30. The printing machine 21 may be installed not only in the high security level area but also in the low security level area.

  The printer 21 is for a printer that reads information stored in the semiconductor memory of the IC card 2 owned by the user who has moved to a predetermined security level area such as an advanced security level area where the printer 21 is installed. A card reader 22 is connected. The printer card reader 22 reads information stored in the IC card 2 and transmits a card ID, which is authentication information, of the read information to the printer 21.

  Upon receiving this card ID, the printing machine 21 transmits the card ID to the interface unit 30 together with the printing machine ID that is identification information for uniquely identifying itself. In response to receiving the card ID and the printing press ID, the interface unit 30 starts an authentication process for granting usage permission to the printing press 21.

  Next, the configuration of the interface unit 30 will be described with reference to FIG. As shown in FIG. 2, the interface unit 30 includes a control unit I / F (interface) 31, a printing press I / F (interface) 32, an internal database 33, and a control unit 34.

  The interface unit 30 updates the stay status of the authenticated user in the predetermined security level area in response to the movement to the predetermined security level area being authenticated by the entrance / exit control unit 13 of the access control system. Thus, it functions as a cooperative control device that controls the access control system and the printing press 21 in a coordinated manner.

  The interface unit 30 uses the information transmitted from the access management system to grasp changes in the user access status in the access management system, such as movement from the low security level area to the high security level area. It is determined whether or not the use of the printing press 21 is permitted according to the change in the state.

  The control unit I / F 31 is a communication interface for connecting the access management system and the interface unit 30. Communication between the access control system and the interface unit 30 via the control unit I / F 31 can use a communication standard such as Ethernet (registered trademark), for example. Communication between the access control system and the interface unit 30 via the control unit I / F 31 is not limited to TCP / IP-based communication, and a non-IP field bus or the like can also be used.

  The printing machine I / F 32 is a communication interface for performing communication between the interface unit 30 and the printing machine 21.

  The internal database 33 is a database that stores various types of information used in the interface unit 30, and includes an equipment information storage unit 33A that stores information defined regarding equipment of the printing press management system 1 such as the access control system and the printing press 21; A user information storage unit 33B that stores information defined for each user who uses the printing press management system 1;

  FIG. 3 shows an example of information stored and held in the facility information storage unit 33A and the user information storage unit 33B.

  As shown in FIG. 3, the facility information storage unit 33 </ b> A includes door information D <b> 1 related to a door that physically separates the low security level region and the high security level region, and physically by the door. It has room information D2 related to a room which is a low security level area and a high security level area separated from each other, and printing machine information D3 related to the printing machine 21. The information stored in the facility information storage unit 33A is all static information, and once set, it is held without being changed until there is a system change or the like.

  The door (door) information D1 is an information group in which room number information for specifying the security level area in the entrance direction and room number information for specifying the security level area in the exit direction are associated with each door ID unique to the door. is there.

  The room information D2 includes, for each room number information that is an identification number for uniquely identifying each security level area of the access management system, name information indicating the name of the room, availability start time information, and availability end. It is the information group which linked | related time information and occupancy time information.

  The available start time information is information indicating the start time of a time zone in which use of this security level area is permitted.

  The usable end time information is information indicating the end time of a time zone in which use of this security level area is permitted.

  The occupancy time information is information indicating the maximum time in which the user can stay in the room after entering the security level area. If the user stays in the security level area for more than the time specified by the available room time information, the information indicating that he / she is in the room is invalidated and the user is not an authorized legitimate user.

  The printing press information D3 includes, for each printing press ID that is an identification number for uniquely identifying each printing press 21 installed in the security level area of the access control system, type information indicating the type of printing press, and printing. This is a group of information associated with (installation destination) room number information, which is an identification number for uniquely identifying the security level area in which the machine 21 is installed. The printing machine ID may be the IP address of the printing machine 21 installed in the security level area.

  As described above, the door information D1, the room information D2, and the printing press information D3 stored in the facility information storage unit 33A are linked to each other by the room number information that uniquely specifies the security level area of the access control system. Associated. Therefore, when the control unit 34 of the interface unit 30 acquires any information by any method, it can acquire other information by tracing the room number information.

  As shown in FIG. 3, the user information storage unit 33B includes user information D4 related to a user registered in advance using the printing press management system 1, and card information D5 related to an IC card 2 held by the registered user. And user account information D6 defining the user account of the registered user. The information stored in the user information storage unit 33B is static information except that the room number information described later (in-room) is dynamic information, and once set, it is not changed until there is a registration change or the like. Retained.

  The user information D4 includes name information indicating the name of the user, occupancy time information, and the like for each user ID that is an identification number that uniquely identifies the user registered in advance using the printing press management system 1. Occupancy) is a group of information in which room number information is associated with room entry time information.

  The occupancy time information is information indicating a time during which the user can continuously stay in the security level area. The occupancy time information may be the same regardless of the security level area, or may be set for each security level area, for example, for each security level in the security level area.

  (Room occupancy) Room number information is identification information for specifying a security level area where the user is currently occupying the room, for example, an advanced security level area and a low security level area. The control unit 34 identifies which security level area the user is currently in from information notified when a state change occurs in the access control system, and obtains the room number information for identifying the security level area. The information is stored in the information storage unit 33B.

  In the entrance / exit management system, when there is a change in state, the entrance / exit control unit 13 enters the door ID and entrance / exit information indicating whether the entrance or exit (for example, the equipment ID of the entrance card reader 11 or the exit card reader 12). The control unit 34 uses this information to obtain room number information for identifying the security level area stored in association with the door ID as the door information D1 of the facility information storage unit 33A. Acquired and writes this room number information as (in-room) room number information in the user information D4 of the user information storage unit 33B.

  That is, the (room occupancy) room number information is dynamic information and is updated as needed by the control unit 34 according to the user's access status managed by the access control system.

  The room entry time information is information indicating the time at which the user can enter the security level area. The room entry time information may be the same regardless of the security level area, or may be set for each security level area, for example, for each security level in the security level area.

  The card information D5 is an identification number that uniquely identifies the IC card 2 held by a user registered in advance using the printing press management system 1, and uniquely identifies the card ID that is the authentication information and the user himself / herself. This is a group of information associated with a user ID that is an identification number to be identified. As shown in FIG. 3, since the card ID and the user ID correspond one-to-one, the card ID can be paraphrased as identification information that uniquely identifies the user.

  The user account information D6 is used for uniquely specifying and managing a user who uses the printing press 21, and a user account that is information including the usage authority of the printing press 21 and an identification for uniquely specifying the user himself / herself. It is the information group which linked | related the user ID which is a number. This user account is used when, for example, charging processing is performed for each user who uses the printing press 21, and is used for recording and managing a usage log of the printing press 21 for each user.

  As described above, the user information D4, the card information D5, and the user account information D6 stored in the user information storage unit 33B are identification numbers that uniquely identify the users registered in advance who use the printing press management system 1. The user IDs are associated with each other. Therefore, when the control unit 34 of the interface unit 30 acquires any information by any method, it can acquire other information by tracing this user ID.

  The control unit 34 is a control unit that comprehensively controls the interface unit 30. Specifically, the control unit 34 determines whether the card ID, the door ID, and the room entry that are transmitted from the entrance / exit control unit 13 via the control unit I / F 31 in accordance with the change in the entrance / exit state of the user in the entrance / exit management system. Based on the entrance / exit information indicating whether the user has left the room, the (in-room) room number information in the user information storage unit 33B is updated.

  Then, when using the printing press 21, the control unit 34 uses the card ID transmitted from the printing press 21 as a key to identify the security level area in which the user is currently present from the user information storage unit 33B (present location). Room) Acquires room number information and specifies the security level area where the printing machine 21 that the user is currently using is installed from the equipment information storage unit 33A using the printing machine ID as a key (installation destination) room Get number information.

  If the acquired (residential) room number information matches the (installation destination) room number information, the control unit 34 determines that the request is for a use of the printing press 21 by a legitimate user authenticated by the access control system. Then, the user account is transmitted to the printing machine 21 and the use permission is given to the printing machine 21.

[Processing operation of the printing press management system 1]
Next, the processing operation of the printing press management system 1 shown as the embodiment of the present invention will be described using the flowchart shown in FIG.

  For the sake of explanation, in the flowchart of FIG. 4, it is assumed that the user enters and exits the entrance / exit state in the entrance / exit management system, but the entry from the low security level area to the high security level area is assumed. The processing is also the same when leaving the room to the low security level area or entering / leaving between the high security level areas with different security levels as a change in the entry / exit state.

  In step S1, the user enters the card reader 11 for entering the room from the door managed by the entrance / exit control unit 13 from the low security level area to the high security level area where the printing machine 21 is installed. Hold the IC card 2. In response to this, the entry card reader 11 reads information including the card ID stored in the semiconductor memory of the IC card 2 and transmits it to the entry / exit control unit 13.

  Then, the entrance / exit control unit 13 performs authentication processing of the card ID of the IC card 2 transmitted from the entrance card reader 11.

  In step S2, if the card ID is authenticated by the entry / exit control unit 13, the process proceeds to step S3. If the card ID is not authenticated, the process proceeds to step S11.

  In step S3, the entrance / exit control unit 13 unlocks the electric lock of the locked door in response to the authentication of the card ID. Then, the entrance / exit control unit 13 transmits to the interface unit 30 the card ID read from the IC card 2, the door ID that uniquely identifies the door that unlocked the electric lock, and the entrance / exit information indicating entry.

  In step S4, the control unit 34 of the interface unit 30 refers to the user information storage unit 33B using the card ID of the IC card 2 transmitted from the entrance / exit control unit 13, and is stored in association with this card ID. The user ID is acquired.

  Further, the control unit 34 refers to the facility information storage unit 33A using the door ID transmitted from the entrance / exit control unit 13 and the entrance / exit information indicating entry, and associates the door ID with the entrance / exit information. The room number information that identifies the security level area stored in the room (the entrance side) is acquired.

  In step S5, the control unit 34 indicates that the room number information acquired from the facility information storage unit 33A (room entry side) is the security level area in which the user is currently occupying (room occupancy) room number information. As such, the user information D4 in the user information storage unit 33B is stored in association with the user ID acquired in step S4.

  In step S6, the user who has entered the advanced security level area places the IC card 2 on the printer card reader 22 and makes a use request to use the printing machine 21 installed in the advanced security level area. The printer card reader 22 reads information including the card ID stored in the semiconductor memory of the IC card 2 and transmits the information to the printer 21. In response to receiving the card ID, the printing machine 21 transmits the card ID and the printing machine ID, which is identification information for uniquely identifying itself, to the interface unit 30.

  In step S <b> 7, the control unit 34 of the interface unit 30 determines whether the card ID and the printing press ID transmitted from the printing press 21 have been received. If the card ID and the printing press ID have been received, the process proceeds to step S8. If not received, the process returns to step S6.

  In step S8, the control unit 34 of the interface unit 30 refers to the user information storage unit 33B using the received card ID as a key, and identifies the security level area in which the user is currently occupying (room occupancy). Get information. At this time, if the user ID corresponding to the card ID does not exist, the process is terminated assuming that an unauthorized IC card not registered in the interface unit 30 is used.

  Further, the control unit 34 refers to the facility information storage unit 33A using the received printing press ID as a key, and specifies the security level area where the printing press 21 that the user is currently using is installed (installation destination). Get room number information.

  Then, the control unit 34 compares the acquired (in-room) room number information with the (installation destination) room number information, so that the user who has requested the use of the printing machine 21 installs the printing machine 21. Authenticates whether the user is a valid user who has entered the advanced security level area.

  In step S <b> 9, the control unit 34 of the interface unit 30 advances the process to step S <b> 10 assuming that the acquired (in-room) room number information matches the (installation destination) room number information and is authenticated. In addition, when the acquired (residential) room number information and the (installation destination) room number information do not match, the control unit 34 advances the processing to step S11 because it is not authenticated.

  In step S10, the control unit 34 of the interface unit 30 responds that the user who has requested use of the printing press 21 has been authenticated as a valid user who has entered the high security level area where the printing press 21 is installed. Then, the user account stored in association with the user ID in the user account information D6 of the user information storage unit 33B is acquired and transmitted to the printing press 21 to give usage permission.

  In step S11, the control unit 34 of the interface unit 30 does not authenticate the user who tried to enter the high security level area in step S2 and is not a valid user registered in the printing press management system 1. To finish all processing.

  Further, the control unit 34 does not authenticate the user who has requested use of the printing press 21 in step S9, and is determined not to be a valid user who has entered the high security level area where the printing press 21 is installed. All the processes are terminated without giving the use permission to the printing press 21.

[Effect of the embodiment]
As described above, the printing press management system 1 shown as the embodiment of the present invention has an authentication process in response to a use request of the printing press 21 installed in a predetermined security level area where the user's entrance / exit management is performed by the entrance / exit management system. Is performed in conjunction with changes in the user's access state.

  As a result, only the use request of the printing press 21 made by the user who has properly entered the predetermined security level area is authenticated, so that it is reliably excluded that the user who has illegally entered the room uses various functions of the printing press 21. can do.

  In addition, since the user who uses the printing machine 21 can be managed in an integrated manner for each user account transmitted from the interface unit 30 to the printing machine 21, the cost generated by using the printing machine 21 is performed. Billing processing and the like can be facilitated.

  In addition, since a log can be taken for each user account each time the printing press 21 is used, the effect of suppressing the leakage of confidential information in the high security level area to the outside, and information when leaking to the outside The spill source can be easily identified.

  The above-described embodiment is an example of the present invention. For this reason, the present invention is not limited to the above-described embodiment, and according to the design or the like, as long as the technical idea according to the present invention is not deviated from other embodiments. Of course, various modifications are possible.

It is a figure for demonstrating the structure of the printing press management system shown as embodiment of this invention. It is a figure for demonstrating the structure of the interface unit with which the said printing press management system is provided. It is a figure for demonstrating the various information memorize | stored in the internal database with which the said interface unit is provided. 4 is a flowchart for explaining a processing operation of the printing press management system.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 Printing machine management system 2 IC (Integrated Circuit) card 11 Entrance card reader 12 Exiting card reader 13 Entrance / exit control unit 21 Printing machine 22 Printing machine card reader 30 Interface unit 33 Internal database 33A Facility information storage unit 33B User information Storage unit 34 Control unit

Claims (1)

First area information for uniquely identifying the predetermined security level area in response to the user's movement into the predetermined security level area being permitted by the authentication process using the authenticated information for uniquely identifying the user Dynamic storage means for storing the information in association with the authentication target information,
Printing machine identification information for uniquely specifying a printing machine installed in a predetermined security level area, and second area information for uniquely specifying the predetermined security level area in which the printing machine is installed Static storage means for storing in association;
Information acquisition means for acquiring the authentication target information and the printing press identification information each time a use of the printing press is requested by a user who has moved into the predetermined security level area;
The first area information stored in the dynamic storage means in association with the authentication information acquired by the information acquisition means, and the static storage in association with the printing press identification information acquired by the information acquisition means. Control means for controlling to give permission to use the printing press when the second area information stored in the means matches,
The static storage means, for each door ID that identifies a door that physically separates the predetermined security level area, entrance side area information that specifies the predetermined security level area in the entrance direction, and the predetermined direction in the exit direction. The printing press management apparatus , wherein the exit side area information for specifying the security level area is stored in association with the second area information .

Images