JP5127429B2 - Admission restriction system and relay device - Google Patents

Description

  The present invention relates to a system for managing entrance at, for example, an entrance of an office building, an apartment, a hospital, or the like.

In order to improve security in office buildings, condominiums, hospitals, etc., a gate is provided at the entrance, and a biometric authentication device such as a numeric keypad, card reader with numeric keypad, and fingerprint authentication is placed near the gate as an authentication terminal. At the time of authentication, the user is authenticated by pressing the PIN code using the numeric keypad, holding the IC (Integrated Circuit) card etc. over the card reader, and reading the biometric information into the biometric authentication device. There is an entrance / exit management system that allows only successful users to enter.
The gate is, for example, a traffic lane type flapper gate, a door provided with an electric lock, or an automatic door.

Also, for example, Japanese Patent Application Laid-Open No. 2005-076377 discloses a technique related to the use of a combination of a card reader with a numeric keypad and a personal identification number. Is increasing.
JP 2005-076377 A

  As described above, in the technique disclosed in Japanese Patent Application Laid-Open No. 2005-076377, a password is used together to cope with theft or loss of a card. However, there is a threat that the password is also stolen. If the password is stolen, there is a problem that a suspicious person can enter a security area such as a building.

  The main object of the present invention is to solve such problems, eliminate the possibility of entry of a suspicious person into the security area due to leakage of a password, and attempt to enter the security area. The main purpose is to alleviate the burden of authentication.

The entrance restriction device according to the present invention is:
An entry restriction device that restricts entry into the security area,
A password generation unit that generates a one-time password for ID (Identification) information;
A password storage unit for storing the one-time password generated by the password generation unit and the ID information in association with each other;
A password receiving unit for receiving ID information and a password of an entrance attempter who tries to enter the security area;
Determine whether the ID information and the password received by the password receiving unit match the ID information and the one-time password stored in the password storage unit, and enter the security area of the entrance trial person And an admission / rejection determination unit for determining admission / rejection.

  According to the present invention, since a one-time password is used, the possibility of entry of a suspicious person into a security area due to leakage of a personal identification number is eliminated, and authentication of a person who attempts to enter the security area is required. The burden can be reduced.

Embodiment 1 FIG.
FIG. 1 shows a configuration example of an entrance / exit management system (admission restriction system) according to the present embodiment.

The mail server device 100 (hereinafter also referred to as the mail server 100) relays communication between the mobile phone 300 (mobile communication device) carried by the user and the electric lock control panel 200.
The mail server device 100 receives an e-mail including a password issuance request from the mobile phone 300 carried by the user (hereinafter also simply referred to as mail), transmits the password issuance request to the electric lock control panel 200, The one-time password generated by the electric lock control panel 200 is notified to the mobile phone 300 by e-mail.
The mail server 100 is an example of a relay device.

When a user (hereinafter also referred to as a user) carries the mobile phone 300 and tries to enter a security area (such as inside a building), the user is authenticated at an entrance or the like. At the time of authentication, the one-time password transmitted from the mail server device 100 to the mobile phone 300 is used.
In addition, the user carries an IC card or the like in which ID (Identification) information is stored.
The user is an example of an entrance trial person.

The electric lock control panel 200 is connected to the electric lock door 400 and the numeric keypad terminal 500 with a card reader, and performs authentication of the user who intends to enter the security area through the numeric keypad terminal 500 with a card reader. The electric lock door 400 is unlocked.
The electric lock control panel 200 issues a one-time password in response to a password issuance request from the mail server 100, and authenticates the user using the issued one-time password.
The electric lock control panel 200 is an example of an entrance restriction device.

The electric lock door 400 is a gate device that restricts entry into the security area.
The electric lock door 400 is disposed, for example, at the entrance of a building.

The numeric keypad terminal with card reader 500 includes a card reader device, and inputs user ID information stored in the IC card from the card reader device when the user holds the IC card. The numeric keypad terminal with card reader 500 includes a numeric keypad device and accepts input of a user password.
The numeric keypad terminal with card reader 500 is generally disposed in the vicinity of the electric lock door 400.
The numeric keypad terminal 500 with a card reader is an example of an input device.

  Next, with reference to FIG. 1, an outline of the operation of entering and leaving in this embodiment and the data flow are shown below.

First, (1) the user sends a password issuance request mail from the mobile phone 300.
The information included in the mail by the user is a mail address of the transmission source and ID information for specifying an individual by the entrance / exit management system.

Next, (2) upon receiving this mail, the mail server 100 notifies the electric lock control panel 200 to issue a one-time password for the ID information corresponding to this user.
That is, the mail server 100 notifies the electric lock control panel 200 of ID information for which a password generation request has been made.

Next, (3) upon receiving this notification, the electric lock control panel 200 generates a one-time password.
At this time, the electric lock control panel 200 stores the user ID information notified from the mail server 100 in association with the one-time password.

(4) The electric lock control panel 200 notifies the mail server 100 of the content of the password generated for the target ID information.
Specifically, when the one-time password is generated, the electric lock control panel 200 notifies the mail server 100 of the ID information and the password.

  Next, (5) the mail server 100 notifies the received password by e-mail to the password requester. That is, when the mail server 100 receives the password notification, the mail server 100 transmits the password set in the password request source by e-mail.

Next, (6) the user who has received the password verifies the card at the numeric keypad terminal with card reader 500, and (7) uses the numeric keypad of the numeric keypad terminal with card reader 500 to receive the next one-time password received by mail. input.
In the electric lock control panel 200, if the ID information read from the card and the password set inputted from the numeric keypad match the stored ID information and the password set, the user is allowed to enter, and the user has security. Admission to the area is possible.

  Next, a configuration example of the mail server 100 will be described with reference to FIG.

The mail receiving unit 11 receives a password issuance request including the mail address (communication address) of the mobile phone 300 and the ID information of the user of the mobile phone from the mobile phone 300.
The mail receiver 11 is an example of a password issue request receiver.

The setting database 17 stores the registered mail address of the mobile phone 300 and the ID information of the registered mobile phone 300 user as the setting information 16.
The setting database 17 is an example of a registered address ID storage unit.

The mail analysis unit 12 determines whether or not the mail address and ID information included in the password issue request received by the mail reception unit 11 matches the mail address and ID information stored as the setting information 16 in the setting database 17. to decide.
The mail analysis unit 12 is an example of an address ID determination unit.

The electric lock control panel communication unit 13 determines that the e-mail analysis unit 12 determines that the e-mail address and ID information included in the password issuance request match the communication address and ID information stored in the setting database 17. A password issuance request including ID information is transmitted to the electric lock control panel 200, and a one-time password generated in response to the password issuance request is received from the electric lock control panel 200.
The electric lock control panel 200 is an example of an entrance restriction device communication unit.

  The mail creation unit 14 generates a mail including the one-time password received from the electric lock control panel 200.

  The mail sending unit 15 sends a mail including the one-time password generated by the mail creating unit 14 to the mobile phone 300. The mail transmission unit 15 is an example of a password transmission unit.

  Next, a configuration example of the electric lock control panel 200 according to the present embodiment will be described with reference to FIG.

The mail server communication unit 21 receives a password issuance request from the mail server 100 and transmits the one-time password generated for the password issuance request to the mail server 100.
The mail server communication unit 21 is an example of a communication unit and a relay device communication unit.

  The reception data analysis unit 22 determines whether the reception data received by the mail server communication unit 21 is a password issue request.

  The personal data setting unit 23 instructs the password generation unit 25 to issue a one-time password when the data received from the mail server 100 is a password issuance request.

When the one-time password is generated by the password generation unit 25, the setting database 24 stores the generated one-time password and the ID information included in the password issuance request in association with each other as setting information 27.
The setting database 24 is an example of a password storage unit.

  The password generation unit 25 generates a one-time password in response to a password issuance request in accordance with an instruction from the personal data setting unit 23.

  The transmission data creation unit 26 generates transmission data including the one-time password generated by the password generation unit 25.

The numeric keypad communication unit 31 receives ID information and a password of a user who is an entrance trial person from the numeric keypad terminal with card reader 500.
The numeric keypad communication unit 31 is an example of a password receiving unit.

  The reception data analysis unit 32 determines whether the reception data received by the numeric keypad communication unit 31 is a request for unlocking the electric lock door 400.

The personal information verification unit 33 sets the ID information and the password received from the numeric keypad terminal 500 with a card reader when it is determined by the received data analysis unit 32 that the data requesting the unlocking of the electric lock door 400 has been received. It is determined whether or not the ID information and the one-time password stored in the database 24 coincide with each other, and whether or not the user who is an entrance attempter is allowed to enter the security area is determined.
The personal information verification unit 33 is an example of an admission / rejection determination unit.

  The electric lock control unit 34 transmits a control signal to the electric lock door 400 when the user's entry into the security area is permitted by the personal information verification unit 33, and unlocks the electric lock door 400.

  Next, an operation example of the mail server 100 will be described with reference to FIG.

First, the mail receiving unit 11 receives a mail from the mobile phone 300 (S401), and the mail analyzing unit 12 analyzes the received mail and determines whether it is a password issue request (S402).
If it is not a password issuance request (NO in S402), processing corresponding to the mail content is performed (S403). If it is a password issuance request (YES in S402), the mail analysis unit 12 sends the mail address included in the password issuance request. And whether the ID information is registered in the setting database 17 (S404).
If the e-mail address and ID information are not registered (NO in S404), an error process such as sending an error message to the source mobile phone 300 is performed (S405).
On the other hand, when the mail address and ID information are registered (YES in S404), the mail analysis unit 12 transmits a password issuance request to the electric lock control panel 200 via the electric lock control panel communication unit 13 (S406). ). This password issue request includes at least user ID information.

When the password setting is completed on the electric lock control panel 200, the electric lock control panel communication unit 13 receives the one-time password from the electric lock control panel 200 (S407).
Based on the received content, the mail creation unit 14 creates mail data for notifying the one-time password (S408), and the mail transmission unit 15 sends a mail to the mobile phone 300 that is the password request source (S409).

  Next, an operation example of the electric lock control panel 200 will be described with reference to FIG.

When the mail server communication unit 21 receives data from the mail server 100 (S501), the received data analysis unit 22 analyzes whether the data is a password issue request (S502).
If it is not a password issuance request (NO in S502), processing corresponding to the data content is performed (S503). If it is a password issuance request (YES in S502), the personal data setting unit 23 sends a password to the password generation unit 25. Instructing the generation, the password generation unit 25 generates a one-time password using a pseudo-random number or the like (S504).
Next, the setting database 24 stores the one-time password generated by the password generation unit 25 in association with the ID information included in the password issuance request (S505).
Next, the transmission data creation unit 26 generates transmission data including the one-time password, and the mail server communication unit 21 transmits the transmission data including the one-time password to the mail server 100 (S506).

  Through the above procedure, the user receives a mail including the one-time password from the mail server 100, performs card verification on the numeric keypad terminal 500 with a card reader at the entrance of the building, and enters the one-time password.

  Next, an operation example of the electric lock control panel 200 in the user authentication process will be described with reference to FIG.

First, the numeric keypad communication unit 31 receives the user ID information and password from the numeric keypad terminal 500 with card reader (S601).
Next, the received data analysis unit 32 recognizes that the data received by the numeric keypad communication unit 31 is data requesting the unlocking of the electric lock door 400, and the personal information verification unit 33 receives the received ID information and password. Is compared with the contents of the setting database 24 (S602).
If the ID information and password received from the numeric keypad terminal with card reader 500 are not registered in the setting database 24 (NO in S602), the verification is failed, and error processing such as output of an error message notifying the verification failure is performed. (S603).
On the other hand, if the ID information and password received from the numeric keypad terminal with card reader 500 are registered in the setting database 24 (YES in S602), the collation is successful, and the electric lock control unit 34 sends a control signal to the electric lock door 400. And the electric lock door 400 is unlocked (S604).
At this time, the personal data setting unit 23 deletes the one-time password stored in the setting database 24 so that it cannot be used in the subsequent entry / exit.

  As described above, according to the present embodiment, it is possible to realize an entrance / exit management system using a one-time password with less threat of password theft.

Embodiment 2. FIG.
In the first embodiment, an example has been described in which the mail server 100 collates the mail address of the mobile phone 300 with the ID information and transmits a password issuance request to the electric lock control panel 200 only when the collation is successful.
In the present embodiment, the mail server 100 does not perform collation, the electric lock control panel 200 collates the mail address of the mobile phone 300 and ID information, and generates a one-time password only when collation is successful. explain.

FIG. 7 shows an outline of entry / exit operation and a data flow in the entry / exit management system according to the present embodiment.
In FIG. 1, the password issue request from the mail server 100 to the electric lock control panel 200 includes only ID information, but in FIG. 7, the password issue request includes the mail address and ID information. .
Other parts are the same as those shown in FIG.

FIG. 8 shows a configuration example of the mail server 100 according to the present embodiment.
In FIG. 2, the setting database 17 exists, and the setting database 17 stores the mail address and user ID information of the mobile phone 300 registered as the setting information 16. However, in FIG. 8, the setting database 17 exists. do not do.
Further, the mail analysis unit 12 shown in FIG. 2 collates the mail address and ID information included in the password issuance request with the setting information 16 of the setting database 17, but the mail analysis unit 12 shown in FIG. Without verification, the password issuance request mail received by the mail receiving unit 11 is transmitted from the electric lock control panel communication unit 13 to the electric lock control panel 200 as it is.

FIG. 9 shows a configuration example of the electric lock control panel 200 according to the present embodiment.
In the present embodiment, the setting database 24 stores in advance the mail address (communication address) of the registered mobile phone 300 and the ID information of the registered mobile phone 300 user. In the present embodiment, the setting database 24 corresponds to an example of a registered address ID storage unit.
In the present embodiment, the mail server communication unit 21 receives from the mail server 100 a password issuance request mail including the mail address of the mobile phone 300 and the ID information of the user of the mobile phone 300.
Further, in the present embodiment, the personal data setting unit 23 collates the ID information included in the password issuance request with the ID information stored in the setting database 24. Instruct to issue a one-time password.
The setting database 24 stores the one-time password generated by the password generation unit 25 as the setting information 27 in association with the mail address of the mobile phone 300 and the user ID information included in the password issuance request. .

  Next, an operation example of the electric lock control panel 200 according to the present embodiment will be described with reference to FIG.

FIG. 10 is substantially the same as FIG. 5 except that S1001 and S1002 are added.
That is, when the mail server communication unit 21 receives data from the mail server 100 (S501), the received data analysis unit 22 analyzes whether the data is a password issue request (S502).
If it is not a password issuance request (NO in S502), processing corresponding to the data content is performed (S503). If it is a password issuance request (YES in S502), the personal data setting unit 23 sends an email included in the password issuance request. It is determined whether the address and ID information are registered in the setting database 24 (S1001).
If the mail address and ID information are not registered (NO in S1001), error processing such as sending an error message to the mail server 100 is performed (S1002).
On the other hand, if the mail address and ID information are registered (YES in S1001), the personal data setting unit 23 instructs the password generation unit 25 to generate a password, and the password generation unit 25 uses a pseudo-random number or the like. A one-time password is generated (S504).
Next, the setting database 24 stores the one-time password generated by the password generation unit 25 in association with the mail address and ID information included in the password issuance request (S505).
Next, the transmission data creation unit 26 generates transmission data including the one-time password, and the mail server communication unit 21 transmits the transmission data including the one-time password to the mail server 100 (S506).

By the above procedure, the user receives an email including the one-time password from the mail server 100 from the mail server 100, performs card verification on the numeric keypad terminal 500 with a card reader at the entrance of the building, and enters the one-time password. To do.
The operation of the electric lock control panel 200 in user authentication is the same as that shown in FIG.

  As described above, according to the present embodiment, it is possible to realize an entry / exit management system using a one-time password with less threat of password theft, and it is possible to omit verification of the mail address and ID information in the mail server. The load on the mail server can be reduced.

Embodiment 3 FIG.
In the present embodiment, an entrance / exit management system in which a plurality of electric lock doors 400 are arranged at a plurality of locations will be described.

FIG. 11 shows an outline of entry / exit operation and a data flow in the entry / exit management system according to the present embodiment.
In FIG. 11, a plurality of electric lock doors 400 are arranged, and a door number is set for each electric lock door 400. A plurality of numeric keypad terminals 500 with card readers are arranged corresponding to the plurality of electric lock doors 400.
In addition, the user designates the door number (door number 1 in FIG. 11) in the mail at the time of password issuance, and transmits a password issuance request. This door number is the number of the electric lock door 400 that the user wants to pass.
The mail server 100 transmits a password issuance request including the door number designated by the user to the electric lock control panel 200.
As with the first embodiment, the electric lock control panel 200 generates a one-time password, transmits the one-time password to the mail server 100, and stores ID information and a door number in association with the one-time password.
Then, the electric lock control panel 200 determines from which door the ten-key operation is performed when checking the password input by the user through the numeric keypad terminal 500 with a card reader, and the door is associated with the one-time password. It is determined whether or not the stored door number matches, and if the one-time password, ID information, and door number match, the user is allowed to enter.

FIG. 12 shows a configuration example of the electric lock control panel 200 according to the present embodiment.
In the present embodiment, the mail server communication unit 21 receives a password issuance request including the ID information and the door number of the user of the mobile phone 300 from the mail server 100.
Then, the setting database 24 stores the one-time password generated by the password generation unit 25, the user ID information included in the password issuance request, and the door number as setting information 27.
Further, in the present embodiment, the numeric keypad communication unit 31 receives the ID information and password of the user who is an entrance trial person from any of the numeric keypad terminals 500 with a card reader, and the personal information verification unit 33 is the numeric keypad communication unit 31. The door number of the electric lock door 400 provided with the card reader-attached numeric keypad 500 to which the ID information and password received by the keypad are input is specified, and the ID information, password, and specified electric received by the numeric keypad communication unit 31 are specified. It is determined whether or not the door number of the lock door 400 matches the ID information, the one-time password and the door number stored in the setting database 24 to determine whether or not the entry trial person is allowed to enter the security area.

  As described above, according to the present embodiment, even when there are a plurality of electric lock doors 400, user authentication is performed for each electric lock door 400, and therefore, only the electric lock door 400 that the user wants to enter is unlocked. The entrance of suspicious persons from other doors can be avoided.

Embodiment 4 FIG.
In the present embodiment, an entrance / exit management system capable of specifying a time at which the electric lock door 400 can be unlocked will be described.

FIG. 13 shows an outline of entry / exit operation and a data flow in the entry / exit management system according to the present embodiment.
In this embodiment, the user designates the start date and time (12:34 on September 20, 2007 in FIG. 13) in the password issuance email and transmits a password issuance request. This start date / time is the start date / time of the expiration date of the one-time password.
The mail server 100 transmits a password issuance request including the start date and time designated by the user to the electric lock control panel 200.
As in the first embodiment, the electric lock control panel 200 generates a one-time password, transmits the one-time password to the mail server 100, and stores ID information and a start date / time in association with the one-time password.
Then, the electric lock control panel 200 determines whether or not the start date / time has come when the password entered by the user through the numeric keypad terminal 500 with a card reader is verified, and the one-time password and ID information are stored. If the contents match and the start date / time has arrived, the user is allowed to enter.

FIG. 14 shows a configuration example of the electric lock control panel 200 according to the present embodiment.
In the present embodiment, the mail server communication unit 21 receives from the mail server 100 a password issuance request including the ID information of the user of the mobile phone 300 and the start date and time.
The setting database 24 stores the one-time password generated by the password generation unit 25, the user ID information included in the password issuance request, and the start date and time as setting information 27.
Further, in the present embodiment, the numeric keypad communication unit 31 receives the ID information and password of the user who is an entry trial person from the numeric keypad terminal 500 with card reader, and the personal information verification unit 33 receives the user ID information and password. The received time (current time) is acquired from the clock 35, and it is determined whether or not the ID information and password received by the numeric keypad communication unit 31 match the ID information and one-time password stored in the setting database 24. At the same time, it is determined whether or not the current time corresponds to the start date and time stored in the setting database 24 (whether or not the start date and time has arrived), and it is determined whether or not the entrance trial person is allowed to enter the security area. To do.

  In the above description, only the start time of the expiration date of the one-time password is specified, but the end time of the expiration date may be specified. For example, in the password issuance request shown in FIG. 13, when 12:34 on September 20, 2007 is specified as the start date and time, and 12:37 on September 20, 2007 is specified as the end date and time, After 12:37 on September 20, 2007, the electric lock control panel 200 may delete the one-time password. In this case, even if the user inputs ID information and a one-time password to the numeric keypad terminal with card reader 500 at 12:38 on September 20, 2007, for example, the electric lock door 400 is not unlocked.

  As described above, in the present embodiment, since the validity period of the one-time password can be designated, the time risk of intrusion by a suspicious person can be limited.

Embodiment 5 FIG.
In this embodiment, an example in which an upper limit is set for the number of times that the same user can enter the security area will be described.

FIG. 15 shows an outline of entry / exit operation and a data flow in the entry / exit management system according to the present embodiment.
In the present embodiment, the user designates the effective number of times (12 times in FIG. 15) in the password issuance mail and transmits a password issuance request. This start date and time is the number of times that the one-time password can be used, that is, the number of times that the same user can enter the security area using a different password each time.
The mail server 100 transmits a password issuance request including the valid count to the electric lock control panel 200.
As in the first embodiment, the electric lock control panel 200 generates a one-time password, transmits the one-time password to the mail server 100, and stores ID information and the number of effective times in association with the one-time password.
Then, the electric lock control panel 200 determines whether or not the effective number is 1 or more when the password entered by the user through the numeric keypad terminal 500 with a card reader is verified, and the one-time password and ID information are stored. If the number of valid times is 1 or more, the user is permitted to enter.
When the user is allowed to enter, the effective count is decremented by one.

FIG. 16 shows a configuration example of the electric lock control panel 200 according to the present embodiment.
In the present embodiment, the mail server communication unit 21 receives a password issuance request including the ID information of the user of the mobile phone 300 and the number of valid times from the mail server 100. The valid number is required only when the first password issuance request is made, and only the ID information is required after the second password issuance request.
The setting database 24 stores the one-time password generated by the password generation unit 25, the user ID information included in the password issuance request, and the number of effective times as setting information 27.
Further, in the present embodiment, the numeric keypad communication unit 31 receives the ID information and password of the user who is an entrance trial person from the numeric keypad terminal 500 with card reader, and the personal information verification unit 33 is received by the numeric keypad communication unit 31. Whether the ID information and password stored in the setting database 24 match the ID information and one-time password, and whether or not the number of effective times stored in the setting database 24 is one or more. Judgment is made to determine whether or not the entry trial person is allowed to enter the security area.
In addition, when the user's admission is permitted, the personal information collation unit 33 decrements the effective number by -1, and stores the updated effective number (effective number after decrementing by 1) in the setting database 24.

  Thus, in this embodiment, for example, a person who is not a resident of a condominium, but who needs to enter the condominium several times (such as a courier delivery person or a remodeling company) is allowed to enter and the number of entrances Restrictions can be added.

Embodiment 6 FIG.
In this embodiment, an entrance / exit management system using a WEB server will be described.

FIG. 17 shows an outline of entry / exit operation and a data flow in the entry / exit management system according to the present embodiment.
In the present embodiment, a WEB server device 600 (hereinafter also simply referred to as WEB server 600) is used instead of the mail server 100. In the present embodiment, the WEB server 600 is an example of a relay device.
Other elements shown in FIG. 17 are the same as those shown in the first to fifth embodiments.

Here, an outline of operation of entry / exit and data flow in the entry / exit management system according to the present embodiment will be described.
First, (1) when the user accesses the password issuing WEB server 600 from the mobile phone 300, an authentication page is displayed.
Next, (2) the user inputs the user name and password from the mobile phone 300 to access the system.
Next, (3) the user designates the target door, (4) sets the password validity start date, (5) designates the number of validity, and (6) clicks the password issuance request button.
Next, (7) the WEB server 600 notifies the electric lock control panel 200 to issue a one-time password for the ID information corresponding to this user.
(8) Upon receiving this notification, the electric lock control panel 200 generates a one-time password.
(9) The electric lock control panel 200 notifies the WEB server 600 of the content of the password generated for the target ID information.
(10) The WEB server 600 displays the received password on the screen of the mobile phone 300.
Next, (11) the user who has received the password verifies the card at the numeric keypad terminal 500 with a card reader, and (12) then inputs a one-time password, and if the password is OK, the user can pass.

FIG. 18 shows a configuration example of the electric lock control panel 200 according to the present embodiment.
In the present embodiment, a WEB server communication unit 51 for communicating with the WEB server 600 is arranged, and a setting database 54 that stores ID information, door number, start date / time, number of effective times, and one-time password as setting information 27. Is the same configuration as the electric lock control panel 200 shown in the first to fifth embodiments.

  Thus, according to the present embodiment, it is easier to understand by the WEB server. With the user interface, it is possible to realize an entrance / exit management system with higher security.

  Further, instead of the WEB server, in response to a request from a mobile phone, a user name and password may be input by an automatic response system (input of a mobile phone numeric keypad) to issue a one-time password.

The mail server 100, the electric lock control panel 200, and the WEB server 600 shown in the first to sixth embodiments include a CPU (Central Processing Unit), a RAM (Random Access Memory), a ROM (Read Only Memory), and a magnetic disk. It can be realized by a computer having a storage device such as a device and a communication interface.
In this case, each element of the mail server 100, the electric lock control panel 200, and the WEB server 600 shown in the first to sixth embodiments can be realized by a program, for example. These programs are stored in a storage device such as a magnetic disk device, and read and executed by the CPU.
The RAM temporarily stores at least part of a program to be executed by the CPU.
The RAM stores various data necessary for processing by the CPU.
For example, in the description of the present embodiment, “determined”, “calculation of”, “comparison of”, “setting of”, “registration of”, “selection of”, etc. Information, data, signal values, variable values, and parameters indicating the results of the processing described in FIG.
Each element of the mail server 100, the electric lock control panel 200, and the WEB server 600 described in the first to sixth embodiments may be a circuit. Moreover, you may implement | achieve with the firmware memorize | stored in ROM. Alternatively, it may be implemented only by software, or only by hardware such as elements, devices, substrates, and wirings, by a combination of software and hardware, or by a combination of firmware.
In addition, each element of the mail server 100, the electric lock control panel 200, and the WEB server 600 shown in the first to sixth embodiments can be expressed as “˜step”, “˜procedure”, and “˜processing”. .

  Here, main features of the entrance / exit management system shown in the first to sixth embodiments will be described below.

  In the first to sixth embodiments, in the entrance / exit management system in which personal authentication is performed by a combination of an ID card and a personal identification number using a card reader with a numeric keypad device, the personal identification number changes to a valid personal identification number each time personal authentication is performed. The entrance / exit management system characterized by comprising means for issuing a one-time password and means for performing personal authentication by a combination of the ID card and the one-time password has been described.

  In the first to sixth embodiments, the means for issuing the one-time password is a means for issuing the one-time password in response to a request using the person's mobile phone, and the means for issuing the one-time password An entry / exit management system having a main feature of providing a means for notifying a mobile phone has been described.

  In the first to sixth embodiments, the means for issuing the one-time password includes the means for issuing the one-time password in response to a request by E-mail transmission of the person's mobile phone, and the issued one-time password. An entrance / exit management system that is characterized in that it is provided with means for notifying the user's mobile phone by E-mail.

  In the first to sixth embodiments, the entrance / exit management system whose main feature is that a place (door) where the one-time password can be used can be specified has been described.

  In the first to sixth embodiments, the entrance / exit management system whose main feature is that the start date and time when the one-time password can be used can be specified has been described.

  In the first to sixth embodiments, the entrance / exit management system whose main feature is that the number of times the one-time password can be used can be specified has been described.

  In the first to sixth embodiments, the entrance / exit management system that is mainly realized by using WEB has been described.

The figure which shows the structural example of the entrance / exit management system which concerns on Embodiment 1. FIG. FIG. 3 shows a configuration example of a mail server according to the first embodiment. The figure which shows the structural example of the electric lock control panel which concerns on Embodiment 1. FIG. FIG. 3 is a flowchart showing an operation example of the mail server according to the first embodiment. FIG. 4 is a flowchart showing an operation example of the electric lock control panel according to the first embodiment. FIG. 4 is a flowchart showing an operation example of the electric lock control panel according to the first embodiment. The figure which shows the structural example of the entrance / exit management system which concerns on Embodiment 2. FIG. The figure which shows the structural example of the mail server which concerns on Embodiment 2. FIG. The figure which shows the structural example of the electric lock control panel which concerns on Embodiment 2. FIG. The flowchart figure which shows the operation example of the electric lock control board which concerns on Embodiment 2. FIG. The figure which shows the structural example of the entrance / exit management system which concerns on Embodiment 3. FIG. FIG. 5 is a diagram illustrating a configuration example of an electric lock control panel according to a third embodiment. The figure which shows the structural example of the entrance / exit management system which concerns on Embodiment 4. FIG. The figure which shows the structural example of the electric lock control panel which concerns on Embodiment 4. FIG. The figure which shows the structural example of the entrance / exit management system which concerns on Embodiment 5. FIG. The figure which shows the structural example of the electric lock control panel which concerns on Embodiment 5. FIG. The figure which shows the structural example of the entrance / exit management system which concerns on Embodiment 6. FIG. The figure which shows the structural example of the electric lock control panel which concerns on Embodiment 6. FIG.

Explanation of symbols

  11 Mail receiving unit, 12 Mail analyzing unit, 13 Electric lock control panel communication unit, 14 Mail creating unit, 15 Mail transmitting unit, 16 Setting information, 17 Setting database, 21 Mail server communication unit, 22 Received data analyzing unit, 23 Individual Data setting unit, 24 setting database, 25 password generation unit, 26 transmission data creation unit, 27 setting information, 31 numeric keypad communication unit, 32 received data analysis unit, 33 personal information verification unit, 34 electric lock control unit, 35 clock, 51 WEB server communication unit, 54 setting database, 100 mail server, 200 electric lock control panel, 300 mobile phone, 400 electric lock door, 500 numeric keypad terminal with card reader, 600 WEB server.

Claims (2)

An admission restriction system having an admission restriction device that restricts admission to a security area, and a relay device that relays communication between the mobile communication device and the admission restriction device,
The relay device is
A registered address ID storage unit for storing a communication address of the registered mobile communication device and ID (Identification) information of the user of the registered mobile communication device;
A password issuance request receiving unit for receiving a password issuance request including a communication address of the portable communication device and ID information of a user of the portable communication device from the portable communication device ;
Address ID determination for determining whether or not the communication address and ID information included in the password issue request received by the password issue request reception unit matches the communication address and ID information stored in the registered address ID storage unit And
When the address ID determination unit determines that the communication address and ID information included in the password issue request match the communication address and ID information stored in the registered address ID storage unit, the password issue request is entered. An admission restriction device communication unit that transmits to the restriction device and receives a one-time password generated in response to the password issuance request from the admission restriction device;
A password transmission unit that transmits the one-time password received by the admission restriction device communication unit to the portable communication device;
The entrance restriction device is
A relay device communication unit that receives the password issue request from the relay device and transmits the one-time password generated for the password issue request to the relay device;
A password generation unit that generates a one-time password in response to the password issue request;
A password storage unit that stores the one-time password generated by the password generation unit in association with the ID information included in the password issue request;
A password receiving unit for receiving ID information and a password of an entrance attempter who tries to enter the security area;
Determine whether the ID information and the password received by the password receiving unit match the ID information and the one-time password stored in the password storage unit, and enter the security area of the entrance trial person And an admission / rejection determination unit for determining admission / rejection. A relay device that generates a one-time password in response to a password issuance request and relays communication between an entrance restriction device that restricts entry into a security area and a mobile communication device,
A registered address ID storage unit for storing a communication address of the registered mobile communication device and ID (Identification) information of the user of the registered mobile communication device;
A password issuance request receiving unit for receiving a password issuance request including a communication address of the portable communication device and ID information of a user of the portable communication device from the portable communication device;
Address ID determination for determining whether or not the communication address and ID information included in the password issue request received by the password issue request reception unit matches the communication address and ID information stored in the registered address ID storage unit And
When the address ID determination unit determines that the communication address and ID information included in the password issue request match the communication address and ID information stored in the registered address ID storage unit, the password issue request is entered. An admission restriction device communication unit that transmits to the restriction device and receives a one-time password generated in response to the password issuance request from the admission restriction device;
A relay device comprising: a password transmission unit that transmits the one-time password received by the admission restriction device communication unit to the portable communication device.

Images