JP5107768B2 - Permission management system - Google Patents

Description

  The present invention relates to an authority management system that manages authority to use devices in various facilities, and particularly when there is a plan for a change work such as addition or removal of facilities, the authority is corrected (added or deleted) for personnel before and after the change. It is related with the authority management system which can reduce the work burden of a manager at the time, and a work mistake.

  Conventionally, in various facilities where it is necessary to regulate the access of people to the management area, for example, ID cards such as employee ID cards and biometric information such as fingerprints are used for personal authentication, and only authorized persons are managed areas An entry / exit management system that enables entry / exit and operation of a specific device has been put to practical use in Patent Document 1 below.

  This kind of access management system stores the equipment configuration information in the facility managed by the management center and an authority setting table that sets whether or not to allow access to each door for each person. Based on the setting table, permission for opening / closing of a door of an employee or the like is determined.

  By the way, if a facility change plan such as adding or removing a room or door occurs in the facility, the authority setting table stored in the above management center is used for the equipment after the change work after the change work is completed. Need to be updated.

  In general, when a system is changed, as shown in Patent Document 2 below, after the change work is planned, the system information after the change work is prepared until the change work is completed, It is executed by changing.

The same applies to the entry / exit management system, and during the planning of the change work, prepare the authority setting table after the change work separately from the current authority setting table, and prepare after confirming the completion of the change work. Replace the active authority setting table with the existing authority setting table.
JP 2007-323262 A Japanese Patent Laid-Open No. 5-113832

  However, even during the period from when the planned change work is completed to when the change work is completed, the authority setting table that is currently in operation is frequently changed due to personnel changes, etc., and a new authority setting table is ready. Later, when the authority setting table that is currently movable is changed, the administrator must sequentially determine whether or not the change information needs to be reflected in the new authority setting table and make corrections.

  Therefore, there is a problem that not only the work burden of the administrator is imposed, but also that the authority change during the planned change work is forgotten to be reflected in the authority setting table after the change work, or erroneously reflected. For example, even if the right to enter a person at the door during the planned change work is granted, if the new permission setting table is reflected after the change work is completed, it will return to the right before granting the right and it will not be possible to enter the room. To do.

  Therefore, the present invention has been made to solve the above-mentioned problems, and only necessary changes in authority before and after the change work of facilities managed by the system are quickly reflected in the system, and the change work The purpose is to provide an authority management system that can reflect the authority change during the planning of the system in the system after the completion of the change work and can reduce the burden on the administrator and realize a system with few errors. To do.

In order to achieve the above object, an authority management system according to claim 1 of the present invention is an authority management system for setting authority information of a device connected to a local apparatus from a center apparatus,
The center device is
A storage unit that stores an authority setting table that classifies the devices that are to be connected to or planned to be connected to the local device as storage / expansion / removal, and sets the user authority to each;
A communication unit that transmits an operation table to the local device and receives a construction completion signal from the local device;
An authority setting table creating unit that rewrites the authority setting table according to the plan information of the changed work to be input;
When the plan information of the changed construction is reflected in the authority setting table, an operation table is created for the equipment classified as being stored or removed, and transmitted from the communication unit to the local device, and the construction completion signal is transmitted to the communication device. An operation table creation unit that creates a new operation table for the devices classified into the storage and addition of the authority setting table and transmits from the communication unit to the local device,
The local device controls equipment according to the operation table received from the center device, and transmits a construction completion signal to the center device when the construction is completed.

The authority management system according to claim 2 is the authority management system according to claim 1,
The authority setting table creation unit stores a device whose device configuration included in the input plan information of the changed work is common with the authority setting table, and is included in the plan information and is not in the authority setting table. Update the authority setting table by adding equipment, classifying the equipment in the authority setting table that is not included in the plan information and removing it,
When the construction completion signal is received, the equipment classified as removed in the authority setting table is deleted from the authority setting table, and the equipment classified as addition and storage of the authority setting table is classified as indwelling. Features.

The authority management system according to claim 3 includes an input unit for inputting plan information of the changed work,
A storage unit that stores an authority setting table that classifies devices as retention / expansion / removal and sets user authority for each,
An authority setting table creating unit that rewrites the authority setting table according to the input plan information of the changed work;
When the changed construction plan information is reflected in the authority setting table from the input section, an operation table is created for the equipment classified as alive or removed, and when the construction is completed, the operation setting table is classified into retention and extension of the authority setting table. An operation table creation unit for creating a new operation table for the device
And a control unit that controls the device according to the operation table.

The authority management system described in claim 4 includes an input unit for inputting plan information of the changed work,
A storage unit that stores an authority setting table that classifies devices as retention / expansion / removal and sets user authority for each,
An authority setting table creating unit that rewrites the authority setting table according to the input plan information of the changed work;
When the change construction plan information is reflected in the authority setting table from the input unit, the first operation table for the equipment classified as resident or removed, and the equipment classified as the resident and expanded of the authority setting table An operation table creation unit for creating the second operation table of
Before completion of the construction, the apparatus is controlled according to the first operation table, and when the construction is completed, a control unit that controls the apparatus according to the second operation table is provided.

The authority management system according to claim 5 is the authority management system according to any one of claims 1 to 4,
The device is an access control device.

  According to the present invention, when a change work is scheduled, the equipment is classified into “retain”, “addition”, and “removal” before and after the change work, and the authority setting is changed during the change work plan. When this is done, changes to devices whose classification information is “Keep” are automatically reflected in the authority setting table after the change work, so that it is possible to prevent setting mistakes and omission of processing by the administrator.

  In addition, when authority settings are changed during the change work plan, changes to settings that are valid for the system in operation are immediately reflected in the system, and changes to settings that are valid after the change work are not reflected in the system. Wasteful communication can be reduced.

Hereinafter, an authority management system according to the present invention will be described with reference to the drawings.
FIG. 1 is a block diagram of an authority management system according to the present invention, and FIGS. 2A to 2D are diagrams showing examples of equipment layouts and equipment configuration information before and after change work in the authority management system according to the present invention. FIGS. 3A to 3E are diagrams showing an example of an authority setting table and an operation table associated with processing before and after registration of a changed construction plan in the authority management system according to the present invention, and FIG. FIG. 5 is a flowchart related to the modified construction planning process in FIG. 4, and FIG. 6 is a flowchart related to the operation table transfer process in FIG.

  As shown in FIG. 1, an authority management system 1 according to the present invention is a system for managing authority to use equipment in various facilities, and includes an input terminal 2, a center apparatus 3, and a local apparatus 4. .

  In the authority management system 1, the input terminal 2 and the center device 3 and the center device 3 and the local device 4 are communicably connected via a communication network 5 such as the Internet or an intranet. Further, the local device 4 includes a device (in / out management device) 6 in which user authority is set.

  In the example of FIG. 1, the input terminal 2 and the local device 4 are connected to the center device 3 two by two via the communication network 5, but the present invention is not limited to this. One or a plurality of input terminals 2 and local devices 4 can be connected to the center device 3 according to the system configuration. Hereinafter, each configuration will be described in detail.

  The input terminal 2 as an input unit is communicably connected to the center apparatus 3 via the communication network 5 and is configured by a terminal such as a personal computer. The input terminal 2 remotely inputs the plan information of the changed work due to the addition / removal of various facilities such as doors in small to large buildings, and accesses the center device 3 by the operation of the administrator, and the local device Input of user information 31a and device configuration information 31b for every four, and authorization for users in the authority setting table 31d. The user information 31a, device configuration information 31b, and authority setting table 31d will be described later.

  The center device 3 is realized by a general-purpose computer, and centrally manages user information 31a regarding the devices 6 for each local device 4 and the authority setting table 31d, and remotely integrates and manages the devices 6 for each local device 4. This is a system that provides a reference / update function of various information to an administrator via a communication network 5 such as the Internet / intranet.

  As shown in FIG. 1, the center device 3 includes a storage unit 31, a device classification unit 32, an authority setting table creation unit 33, an operation table creation unit 34, a communication unit 35, and a control unit 36. In FIG. 1, the center device 3 may include a configuration corresponding to the input terminal 2 described above as an input unit.

  The storage unit 31 stores user information 31a, device configuration information 31b, device classification information 31c, an authority setting table 31d, and the like. Hereinafter, the information content stored in the storage unit 31 will be described.

  The user information 31 a is information on users belonging to each local device 4, and information such as name, affiliation, and responsibility is stored in the storage unit 31 in association with the user ID.

  The device configuration information 31b is information that stores a target that should be given authority to the user. In this example, the device 6 includes a card reader 42 as an access control device and an electric lock door 43. When the card reader 42 is a target for authority setting, as shown in FIGS. 2 (c) and 2 (d). In addition, the electric lock door 43 and the installation location in association with the card reader 42 are stored in the storage unit 31 as device configuration information 31b.

  As a more specific example, if the plan for changing the layout of the device 6 from the state shown in FIG. 2A to the state shown in FIG. Before registration of the construction plan, as shown in FIG. 2C, the card reader CR1-electric lock door D1-installation location: living room C, card reader CR2-electric lock door D2-installation location: office room A, card reader CR3-electric lock door D3-installation location: device configuration information 31b associated with the president's office is stored in the storage unit 31.

  After registration of the changed construction plan, as shown in FIG. 2 (d), the card reader CR1-electric lock door D1-installation location: living room C, the card reader CR2-electric lock door D2-installation location: office A , Card reader CR4-electric lock door D4-installation location: device configuration information 31b associated with office room B is stored in the storage unit 31 together with the device configuration before the above-described change work plan.

  In the device configuration information 31b, when the device configuration and change work for the currently operating system are planned, the device configuration after the change work is input from the input terminal 2 and stored as the plan information of the change work. be able to. The center device 1 determines that the changed construction plan is registered when the device configuration after the change work is stored in the device configuration information 31b. 2 (c) and 2 (d), the card reader 42 is a target for authority setting, but security zone setting / cancellation, error recovery, and the like can also be a target for authority setting.

  The device classification information 31c is the device 6 that is connected to or planned to be connected to the local device 4 and (1) is valid only in the currently operating system (the device configuration is not included in the inputted change work plan information). (Devices in the authority setting table 31d), (2) effective in the system after the change work (apparatus configuration included in the inputted change work plan information and not in the authority setting table 31d), (3 ) Each category classified as either one that is common and valid both at the present time and after the changed work (equipment configuration included in the input plan information of the changed work is shared with the authority setting table 31d). This is information stored in the storage unit 31 in association with the device 6.

  Specifically, when the classification target is the card reader 42, for example, as shown in FIG. 3B, the left two columns of “card reader” and “classification” are the device classification information 31c. Each of them is stored as three types of classification information of “removal”, “expansion”, and “retention”. Then, the card reader 42 that is effective only in the system that is currently movable, that is, the card reader 42 that is scheduled to be removed after the change work, is “removed”, and the card reader 42 that is valid only after the change work, that is, the card reader that is scheduled to be added in the change work. 42 is “addition”, and the card reader 42 common before and after the change work is “placed”, and classification information is given.

  If no change work plan is registered from the input terminal 2, the classification information “keep” is given to all the card readers 42. In addition, the electric lock doors 43 arranged in pairs with the card reader 42 can be classified. Furthermore, in this example, the card reader 42 and the electric lock door 43 are configured separately, but the electric lock door 43 may be integrated with the function of the card reader 42. In this case, the card reader 42 and the electric lock door 43 can be handled as one device 6.

  The authority setting table 31 d is information in which the authority to use the device 6 is set in a table for each local device 4. In this example, the authority setting table 31d is configured by a table storing the relationship between each card reader 42 included in the device configuration information 31b and the authority granted to each user stored in the user information 31a, and the changed work plan Is registered, the classification information of the device 6 is also stored in the storage unit 31.

  Specifically, as shown in FIG. 3B, for example, an authority setting table 31d is configured by a table in which the device classification information 31c and the authority (ID code) given to each user are associated with each other. In the authority setting table 31d of FIG. 3B, regarding the card reader CR1 and the card reader CR2, the classification information is “exist” and the ID codes ID1 to ID6 have the authority to use. Further, regarding the card reader CR3, the classification information is “removal”, and the ID codes of ID2, ID3, and ID6 have usage authority. Further, regarding the card reader CR4, the classification information is “additional” and the ID codes of ID1, ID4, ID5 have usage authority.

  As described above, the authority setting table 31d is stored in the storage unit 31 for each local device 4 connected to the center device 3 as a table in which the device classification information 31c and the authority granted to each user are associated with each other. .

  3 shows the authority setting table 31d related to only one local device 4, the authority setting table in which the device classification information 31c and the authority granted to each user are associated with each local device 4. 31d is stored. In the example of FIG. 3, the authority setting table 31d includes classification information. However, the classification information is not included in the authority setting table 31d, and both the authority setting table 31d and the device classification information 31b are referred to. Then, an operation table 51 to be described later may be created.

  When the device configuration information after the change work is input as plan information (construction schedule) from the input terminal 2 separately from the device configuration information of the system currently operating in the local device 4, the device classification unit 32 controls the control unit 36. The device configuration information currently in operation is compared with the device configuration information after the change work input from the input terminal 2 according to the command from the device, and the device is effective only in the above-described current system (the card reader 42 to be removed). Is classified as either “removal”, a device that is effective only after the change work (added card reader 42) as “addition”, and a device that is common to both is classified as “retained”. It has a function of storing in the storage unit 31 as device classification information 31c in association with each card reader 42.

  The authority setting table creation unit 33 changes or updates the authority setting table 31 d based on input information from the input terminal 2. More specifically, the authority setting table creation unit 33 registers the changed construction plan information from the input terminal 2 and generates the device classification information 31c after the modification work by the device classification unit 32. Based on this, the authority setting table 31d is changed. Further, when the addition or deletion of the user information 31a is registered from the input terminal 2, the authority setting table creation unit 33 updates the authority setting table 31d based on the registered contents.

  Also, when the authority setting table creation unit 33 receives a construction completion signal from the communication unit 35 from the local device 4 after new or changed construction, the authority setting table 31d itself also matches the operation table created by the operation table creation unit 34. It is updated to the one after the change construction.

  When the authority change (addition / deletion of ID) on the authority setting table 31d is input from the input terminal 2 to the operation table creating unit 34, and the changed construction plan information is reflected in the authority setting table 31d, the operation table creation unit 34 Alternatively, an operation table 51 is created for the card readers 42 classified as “removal”.

  Further, when the operation table creation unit 34 receives the construction completion signal from the local device 4 from the communication unit 35, the operation table 51 becomes “effective” and “addition” of the authority setting table 31d as the operation table 51 effective in the local device 4 after the change work. The operation table 51 is created for the card readers 42 classified as "."

  As the created operation table 51, the authority setting table 31d including the classification information as shown in FIG. 3 is used, and the effectiveness of the operation on the card reader 42 and the electric lock door 43 by the person is determined based on the classification information. You may make it do.

  The communication unit 35 provides a user interface related to device configuration (card reader 42, electric lock door 43) input from the input terminal 2 and authority on the authority setting table 31d. Further, the communication unit 35 functions as a communication interface for transferring the operation table 51 necessary only for each local device 4 or transmitting / receiving a construction completion signal from the local device 4 when a changed construction plan is registered. .

  The control unit 36 is a CPU, and performs overall control of the entire center apparatus 3 including processing shown in FIGS. The processing contents related to authority setting will be described later.

  The local device 4 is a system that stores the operation table 51 related to the local device 4 transmitted from the center device 3 by connecting to the center device 3 and provides the authority management system 1 to the device 6.

  The local device 4 includes a controller 41, and a card reader 42 and an electric lock door 43 are connected to the controller 41 as a device (in / out management device) 6.

  The controller 41 manages the devices 6 connected to each local device 4, and includes a storage unit 41a, a communication interface 41b, an electric lock control unit 41c, a lock monitoring unit 41d, a door opening / closing monitoring unit 41e, and a control unit 41f. ing. In addition, as the device 6, a card reader 42 and an electric lock door 43 arranged in association with the card reader 42 are provided as a set, the card reader 42 is connected to the control unit 41f, and the electric lock door 43 is controlled by electric lock. Connected to the portion 41c.

  The storage unit 41 a stores an operation table 51 related to the local device 4 transferred from the center device 3. The operation table 51 is created and transferred from the authority setting table 31d in the center device 3 with effective settings based on the classification information of the device 6 of the local device 4 currently in operation. For example, if the changed construction plan is being registered, an operation table 51 including a card reader 42 whose classification information of the device 6 is “retained” and “removed” is created in the center apparatus 3, and the created operation table 51 is created. Transferred to the local device 4.

  The communication interface 41 b is an interface for communicating with the lower-level card reader 42 and the center device 3 connected to the LAN.

  The electric lock control unit 41 c sends a control signal for locking / unlocking the electric lock door 43 to the electric lock door 43 to be controlled under the control of the control unit 41 f.

  The locking monitoring unit 41d monitors the locking / unlocking state of the electric lock of the electric lock door 43 to be controlled, and outputs a monitoring signal indicating the locking / unlocking state of the electric lock to the control unit 41f.

  The door open / close monitoring unit 41e monitors the open / closed state of the door part of the electric lock door 43 to be controlled, and outputs a monitoring signal indicating the open / closed state of the door unit to the control unit 41f.

  The control unit 41f is configured by a CPU or the like, and transmits / receives information to / from the center device 3, the state determination of the device 6 based on monitoring signals from the locking monitoring unit 41d and the door opening / closing monitoring unit 41e, and the device 6 based on the operation table 51. The overall control of the local device 4 is controlled. In addition, the control unit 41f transmits a work completion signal indicating that the change work is completed to the center device 3 via the communication interface 41b after the button operation or self-check after the change work is completed.

  The local device 4 is not limited to the configuration shown in FIG. For example, a system in which a card reader 42, an electric lock control unit 41c that controls locking / unlocking of the electric lock door 43 (including a lock monitoring unit 41d and a door opening / closing monitor 41e), and a control unit 41f that controls the entire local device 4 are separated. Other forms are also conceivable.

  Next, the operation of the authority management system 1 configured as described above will be described with reference to FIGS. The storage unit 41 a of the local device 4 stores an operation table 51 that is currently in operation, and it is assumed that the local device 4 is operating according to the operation table 51.

  First, as shown in FIG. 4, the card reader 42 for operating the local device 4 after the change work is registered as device configuration information as registration of the change work plan information for any local device 4 from the input terminal 2 by the administrator. It is determined whether or not it is stored in 31b (ST1). If it is determined that there is a registration (ST1-YES), the process shifts to a process during planned change work in FIG. On the other hand, if it is determined that there is no registration (ST1-NO), it is determined whether there is an update registration of the authority setting table 31d stored in the center device 3 (ST2).

  If the authority is changed (added or deleted) to any of the local devices 4 and it is determined that there is an update registration of the authority setting table 31d (ST2-YES), the operation table 51 for the updated local device 4 is displayed. Create (ST3). Then, the created operation table 51 is transferred to the corresponding local device 4 (ST4), and the current operation table 51 of the local device 4 is replaced with the transferred operation table 51.

  Next, the modified construction planning process will be described with reference to FIG. When the new device configuration after the change work is stored in the device configuration information 31b, the device classification unit 32 of the center device 3 stores the device configuration currently in operation stored in the device configuration information 31b and the device after the change work. Compared with the configuration, the card reader 42 that is valid only in the current device configuration is “removed”, the card reader 42 that is valid only in the device configuration after the change work is “added”, and the device configuration after the current / change work is common The card reader 42 is classified as “placed”, and the classification is associated with the card reader 42, and the device classification information 31c in the storage unit 31 is updated as a new device configuration classification (ST11).

  Next, the authority setting table creation unit 33 updates the authority setting table 31d using the device classification information 31c including the card reader 42 after the change work updated in ST11 (ST12). When the authority setting table 31d is updated, the authority can be set for the card reader 42 newly added by the administrator. For example, in the example of FIG. 2, the authority for the office B to be newly added is not set in the initial state.

  In the input terminal 2, the authority setting table 31d can be displayed as an input screen as it is. The administrator adds authority since each authority is not set to the card reader 42 effective only after the change work from the input terminal 2, and at the same time, corrects authority for each person to the card reader 42 currently in operation. (Addition and deletion) can also be performed.

  Next, it is determined whether or not a construction completion signal is received from the local device 4 (ST13). If it is determined that the construction completion signal has not been received (ST13-NO), it is determined whether or not the authority setting table 31d has been updated (ST14). When it is determined that there is an update registration of the authority setting table 31d during the changed construction plan registration (ST14-YES), the process proceeds to the operation table transfer process of FIG. On the other hand, if it is determined that there is no update registration of the authority setting table 31d during the changed construction plan registration (ST14-NO), the process returns to the determination process of ST13 again.

  The operation table transfer process will be described with reference to FIG. If it is determined in ST14 that there is an update registration of the authority setting table 31d during the changed construction plan registration (ST14-YES), whether or not the updated contents of the authority setting table 31d are reflected in the local device 4, that is, the authority setting table. It is determined whether or not the updated content of 31d is a valid part for the current setting (ST21). If it is determined that the updated contents of the authority setting table 31d are valid for the current setting (ST21-YES), the operation table 51 of the corresponding local device 4 is created (ST22), and the created operation table 51 is converted into the corresponding local table. The data is transferred to the device 4 (ST23).

  Now, as shown in FIG. 3C, it is assumed that the personnel ID 7 is added during the registration of the changed construction plan, the authority is given to the card reader CR1, the card reader CR2, and the card reader CR4, and the authority setting table 31d is updated. In ST14, it is determined that there is an update registration of the authority setting table 31d, and the process proceeds to the operation table transfer process of FIG.

  In ST21 of the operation table transfer process, it is determined whether or not the update of the authority setting table 31d detected in ST14 is valid for the currently operating system. That is, it is determined whether the classification information of the device 6 is “removal” scheduled to be removed after the change work or “remaining” in common. In the example of FIG. 3C, the card reader CR3 in the authority setting table 31d corresponds to “removal”, and the card reader CR1 and the card reader CR2 correspond to “keep”. In this case, the process proceeds to ST22, and the operation table 51 in which the classification information of the device 6 is “removal” and “retention” is created from the authority setting table 31d. An example of this operation table 51 is shown in FIG. Then, the operation table 51 created in ST22 is transferred to the corresponding local device 4 (ST23).

  In FIG. 3, for example, when the authority setting is updated only for the card reader CR4 whose classification information is “additional”, the determination in ST21 is NO, the operation table 51 is not created, and the local device 4 is not created. The operation table 51 is not transferred. As a result, even if the authority setting table 31d is updated, unnecessary information does not need to be reflected in the local device 4, so that the operation table 51 is not transferred, and the communication load can be reduced.

  On the other hand, in ST13, the change work is completed in the local device 4, and communication is possible by connecting to the center device 3, and a work completion signal is transmitted from the local device 4 to the center device 3, and this work completion signal is transmitted to the communication unit 35. Is received (ST13-YES), the changed operation table 51 corresponding to the local device 4 is created (ST15), and the created operation table 51 is transferred to the corresponding local device 4 (ST16). Specifically, an operation table 51 for the local device 4 is selected from the authority setting table 31 d when the classification information of the device 6 is “addition” and “exist”, and is transferred to the corresponding local device 4. .

  It should be noted that the update performed on the portion where the classification information of the device 6 is “kept” during registration of the changed work plan can be automatically reflected in the operation table 51 after the changed work without the intention of the administrator. Therefore, the burden on the administrator can be reduced.

  Then, when the transfer of the operation table 51 to the local device 4 is completed, the center device 3 performs a version update process (ST17). Here, the device configuration information after the change work is replaced with the information before the change work as the latest version, and the classification information of the device 6 is all in the state of “existing” valid in the current device configuration information. Further, the information portion of the removed card reader 42 is deleted in the authority setting table 31d. With the above processing, the processing related to the change work is completed.

  Next, the processing contents described above will be described with reference to specific examples of the authority setting table 31d and the operation table 51 in FIGS.

  In the center apparatus 3 before registration of the changed construction plan, an operation table 51 effective for the current local apparatus 4 is created on the authority setting table 31d shown in FIG. In the example of FIG. 3A, use authority is given to ID1 to ID6 for the card readers CR1 and CR2 whose classification information is “kept”, and is used for ID2, ID3 and ID6 for the card reader CR3 whose class information is “kept”. An operation table 51 is created by removing the classification information from the authority setting table 31d to which authority is given. Then, the created operation table 51 is transferred to the local device 4.

  Next, the card reader CR3 to which the use authority is given to ID2, ID3, and ID6 is removed, and the plan information of the change work for adding the card reader CR4 to which the use authority is given to ID1, ID4, and ID5 is input from the input terminal 2. Then, the center apparatus 3 registers the device configuration information after the change work (“removal of the card reader CR3,“ addition ”of the card reader CR4) from the current authority setting table 31d shown in FIG. As shown in FIG. 3B, a card reader CR4 column is added to the authority setting table 31d, and authority is set by setting usage authority to ID1, ID4, and ID5 for the card reader CR4 whose classification information is “additional”. The table 31d is updated. In this case, in the updated authority setting table 31d, there is no change in usage authority for the card readers CR1 and CR2 whose classification information is “kept” and the card reader CR3 whose classification information is “removed”, so the operation table 51 is not created. .

  Next, in the authority setting table 31d shown in FIG. 3B, the card reader 42 to which usage authority is given to ID4 is changed from CR1, CR2, CR4 to CR1, CR2, CR3, and the card readers CR1, CR2, CR4 are changed. In the case of newly adding ID7 to which use authority is given so that it can be used, the center apparatus 3 sets the card reader 42 to which use authority is assigned to ID4 in the authority setting table 31d as CR1, as shown in FIG. Change from CR2 and CR4 to CR1, CR2 and CR3, add a column for ID7, and set the card reader 42 which can use ID7 to CR1, CR2 and CR4. In this case, since the classification information “retained” and “removed” of the card reader 42 is changed, the operation table 51 relating to the card reader 42 whose classified information is “retained” and “removed” is created and transferred to the local device 4. .

  Next, when the construction work is completed and a construction completion signal is transmitted from the local device 4, the center apparatus 3 that has received this construction completion signal classifies it in the authority setting table 31d as shown in FIG. An operation table 51 relating to the card reader 42 whose information is “exist” and “addition” is created and transferred to the local device 4.

  Next, in the version update process after the change work, the authority related to the card reader 42 whose classification information in the authority setting table 31d is “removed” is deleted in the center device 3, and all the classification information is changed to “kept”.

  As described above, in the authority management system 1 of the above-described embodiment, the administrator accesses the center apparatus 3 from the input terminal 2 to input user information and device configuration information for each local apparatus 4, and in the authority setting table 31d. When the authority is given to the user, the input information from the input terminal 2 is stored in the storage unit 31 of the center device 3, and thereafter the local device 4 is read from the authority setting table 31d periodically or whenever the input content is updated. A valid operation table 51 is created, and the created operation table 51 is transferred to the corresponding local device 4 and stored in the storage unit 41 a of the local device 4. As a result, when a change work plan is generated, the equipment 6 (card reader 42, electric lock door 43) is classified as either “retained”, “addition”, or “removal” before and after the change work. When the authority setting is changed in the authority setting table 31d during the plan registration, the change to the card reader 42 whose classification information is “keep” is automatically reflected in the operation table 51 after the change work, It is possible to prevent an administrator from making a setting mistake or omission of processing.

  In addition, if the authority setting is changed while registering the changed work plan, the changes to the settings that are valid for the system in operation should be immediately reflected in the system, and changes to the settings that will be effective after the changed work must not be reflected to the system. Therefore, useless communication can be reduced.

  By the way, in the above-described embodiment, the configuration has been described in which, in the center device 3, an effective operation table 51 is created in the local device 4 from the authority setting table 31d, and the created operation table 51 is transferred to the corresponding local device 4. However, the present invention is not limited to this configuration, and may be a configuration described below.

  First, the local device 4 can be configured to have a function of creating an operation table 51 effective in the local device 4 from the authority setting table 31d. In this configuration, every time the authority setting table 31 d is updated in the center device 3, a copy of the authority setting table 31 d including the classification information is transferred from the center device 3 to the local device 4. Then, on the local device 4 side, an operation table 51 that matches the current device configuration is created from a copy of the authority setting table 31d.

  In the example of FIG. 3, when the authority setting table 31 d of the center device 3 is changed, a copy of the authority setting table 31 d is transmitted to the local device 4. Then, on the local device 4 side, the operation table 51 is created from a copy of the authority setting table 31d to which “retained” or “removed” is assigned as classification information. When the changed construction is completed, a construction completion signal is transmitted from the local device 4 to the center device 3 and notified, and the classification information is included in the copy of the authority setting table 31d stored in the storage unit 41a by the local device 4. As a result, the operation table 51 is created from the items with “kept” and “addition”.

  According to this configuration, since a copy of the authority setting table 31d including after the change work is transferred to the local device 4 in advance, it is not necessary to transfer the new operation table 51 from the center device 3 after the change work. In addition, even when transfer from the center apparatus 3 takes time, there is an advantage that it does not take time to switch to the new authority setting after the change work.

  Further, every time the authority setting table 31 d is updated in the center device 3, a copy of the authority setting table 31 d including the classification information may be transmitted as the operation table 51 to the local device 4. In this case, when the user performs a card operation, it is determined whether or not the authority is valid according to the classification information on the operation table 51. Then, before the changed construction plan registration and after the changed construction, only those with classification information “valid” are effective, and only those with “remaining” and “removal” are valid during the changed construction plan registration. After the completion of the change work, a new operation table 51 is created with the classification information “retained” and “additional”, and the classification information is all changed to “retained”.

  According to this configuration, since a copy of the authority setting table 31d including after the change work is transferred to the local device 4 as the operation table 51, the new operation table 51 is transferred from the center device 3 after the change work. It becomes unnecessary.

  Furthermore, as the operation table 51, a first operation table before the change work and a second operation table after the change work may be prepared in advance, and the operation table may be switched when the work is completed. In this case, the first operation table and the second operation table are created at the same time when the authority setting table 31d is updated.

  More specifically, during the change work plan registration, every time the authority setting table 31d is updated in the center apparatus 3, the first operation table from the classification information “retained” and “removed” in the authority setting table 31d is changed. Create and create a second operation table from the authority setting table 31d with the classification information “retained” and “addition”, and transfer the created first operation table and second operation table to the local device 4 To do. Then, the local device 4 operates using the first operation table until the change work is completed, and after the change work is completed, switches to the second operation table and starts operation.

  According to this configuration, since the operation table after the change work is transferred to the local device 4 in advance, the operation can be started immediately after the change work is completed.

  By the way, in the authority management system 1 described above, a card reader 42 that reads a user's ID card is installed in the vicinity of a door of a section where access to the property is restricted, and the user information 31a read from the card reader 42 is stored. An example of the access management system that checks the operation table 51 stored in the controller 41 in the local device 4 and manages the entrance and exit by controlling the unlocking of the electric lock door 43 when it is normally authenticated. It is not limited. In addition to the card reader 42 and the electric lock door 43, the device 6 for setting the user authority may be, for example, lighting or air conditioning.

  Further, the authority management system 1 according to the present invention is not limited to the above-described entry / exit management system, but can be applied to other systems managed using the authority setting table 31d. For example, the present invention is also effective when a database management system that can be accessed only by previously registered users and a change schedule of the system is registered.

  Furthermore, the authority management system 1 according to the present invention can also be applied to a system that is movable within one facility. For example, the present invention can be applied to a system including a management device (controller) that manages a plurality of blocks and a management center that performs overall control of each block. In this case, information such as authority setting registered in the management center is transferred to a management device (controller) that manages each block.

It is a block block diagram of the authority management system which concerns on this invention. (A)-(d) It is a figure which shows an example of the layout of apparatus before and behind the change construction in the authority management system which concerns on this invention, and apparatus structure information. (A)-(e) It is a figure which shows an example of the authority setting table and operation table accompanying the process before and after the change construction plan registration of the authority management system which concerns on this invention. It is a flowchart regarding the processing content of the whole authority management system which concerns on this invention. It is a flowchart regarding the process during change construction plan in FIG. It is a flowchart regarding the transfer process of the operation table of FIG.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 Authority management system 2 Input terminal 3 Center apparatus 4 Local apparatus 5 Communication network 6 Equipment 31 Storage part 31a User information 31b Equipment configuration information 31c Equipment classification information 31d Authority setting table 32 Equipment classification part 33 Authority setting table creation part 34 Operation table Creation unit 35 Communication unit 36 Control unit 41 Controller 41a Storage unit 41b Communication interface 41c Electric lock control unit 41d Locking monitoring unit 41e Door open / close monitoring unit 41f Control unit 42 Card reader 43 Electric lock door 51 Operation table

Claims (5)

An authority management system for setting authority information of a device connected from a center device to a local device,
The center device is
A storage unit that stores an authority setting table that classifies the devices that are to be connected to or planned to be connected to the local device as storage / expansion / removal, and sets the user authority to each;
A communication unit that transmits an operation table to the local device and receives a construction completion signal from the local device;
An authority setting table creating unit that rewrites the authority setting table according to the plan information of the changed work to be input;
When the plan information of the changed construction is reflected in the authority setting table, an operation table is created for the equipment classified as being stored or removed, and transmitted from the communication unit to the local device, and the construction completion signal is transmitted to the communication device. An operation table creation unit that creates a new operation table for the devices classified into the storage and addition of the authority setting table and transmits from the communication unit to the local device,
The authority management system, wherein the local device controls equipment according to an operation table received from the center device, and transmits a construction completion signal to the center device when construction is completed. The authority setting table creation unit stores a device whose device configuration included in the input plan information of the changed work is common with the authority setting table, and is included in the plan information and is not in the authority setting table. Update the authority setting table by adding equipment, classifying the equipment in the authority setting table that is not included in the plan information and removing it,
When the construction completion signal is received, the equipment classified as removed in the authority setting table is deleted from the authority setting table, and the equipment classified as addition and storage of the authority setting table is classified as indwelling. The authority management system according to claim 1, wherein: An input section for inputting the plan information of the changed construction;
A storage unit that stores an authority setting table that classifies devices as retention / expansion / removal and sets user authority for each,
An authority setting table creating unit that rewrites the authority setting table according to the input plan information of the changed work;
When the changed construction plan information is reflected in the authority setting table from the input section, an operation table is created for the equipment classified as alive or removed, and when the construction is completed, the operation setting table is classified into retention and extension of the authority setting table. An operation table creation unit for creating a new operation table for the device
An authority management system comprising: a control unit that controls devices according to the operation table. An input section for inputting the plan information of the changed construction;
A storage unit that stores an authority setting table that classifies devices as retention / expansion / removal and sets user authority for each,
An authority setting table creating unit that rewrites the authority setting table according to the input plan information of the changed work;
When the change construction plan information is reflected in the authority setting table from the input unit, the first operation table for the equipment classified as resident or removed, and the equipment classified as the resident and expanded of the authority setting table An operation table creation unit for creating the second operation table of
An authority management system comprising: a control unit that controls equipment according to the first operation table before completion of construction and controls equipment according to the second operation table when construction is completed. The authority management system according to any one of claims 1 to 4, wherein the device is an access control device.

Images