JP5181745B2 - Protective area management device and computer program - Google Patents

Description

  The present invention relates to a protection area management device and a computer program for managing entry into a protection area that restricts the entry of outsiders and operations in the protection area, and in particular, whether or not to allow outsiders to enter. The present invention relates to a protection area management apparatus and a computer program that can determine a work permitted in a protection area for an outsider permitted to enter and a device to be a work target and output document information about the device.

  2. Description of the Related Art Conventionally, a data center lends a device or data storage area and undertakes management tasks such as incident management, problem management, change management, and release management. Therefore, outsiders such as system engineers or custom engineers frequently come in and out of the data center.

However, allowing unlimited access to outsiders causes important data such as personal information or corporate information to be leaked, and security is being enhanced in data centers. For example, a management apparatus and a system have been proposed in which an area where entry is permitted according to the purpose of visit is determined and a person in charge is guided to the determined area (for example, Patent Document 1).
JP 2005-316945 A

  In addition to enhancing security, the data center manages documents such as operation instructions and operation procedures as part of management work. However, since the management device described in Patent Document 1 manages human units and cannot be managed in units of work such as relocation or addition of devices, updating of documents generated with work, etc. Can not support the management of.

  As described above, since the conventional data center management apparatus needs to be constructed by independent systems for entrance / exit management and operation management, it is difficult to be connected to each other and lacks stability. Yes.

  The present invention has been made in view of such circumstances, and compares the received outsider information with the entry permission rule to determine whether or not to allow outsider entry, and to enter the outsider. When permitting, compare the received outsider information with the work permission rules to identify the work in the protection area that allows outsiders, compare the identified work with the work target rules, By selecting device information related to the identified device to be worked from the database, entry / exit management is performed within one system, and work permitted to outsiders who have been permitted to enter is performed. It is an object of the present invention to provide a protective area management apparatus and a computer program capable of executing operation management to be managed.

  In the protection area management apparatus according to the present invention, in the protection area management apparatus that manages the entry into the protection area that restricts the entry of outsiders and the work in the protection area, Access permission rules that stipulate identification information, work permission rules that stipulate each work permitted in the protection area in association with the attributes of outsiders, and work targets among the devices installed in the protection area. A target object rule that associates each device with each operation, a database that stores a plurality of device information related to devices installed in the protection area, and attributes and identification information of outsiders. Whether or not to allow outsiders by comparing the receiving means for receiving outsider information, and comparing the identification information included in the received outsider information with the identification information defined in the access permission rules. judge When permitting access to outsiders and entry of outsiders, the attributes of the outsider information received and the attributes specified in the work permission rules are compared to allow outsiders within the protected area. From the database, a work identification means for identifying a work, a work target identification means for identifying a device to be a work target by comparing the identified work with a work target rule, and device information related to the identified work target device are selected from the database. It is a requirement to include an information selecting unit for outputting and an output unit for outputting the selected device information.

  In the protective area management apparatus according to the present invention, the work is required to be any one of expansion or relocation of equipment, expansion or relocation of equipment components, or expansion or relocation of equipment accessories. .

  In the protection area management apparatus according to the present invention, the device information is information on any of a device installation location, an operation procedure or an operation procedure, or a list of a plurality of devices installed in the protection area. Is a requirement.

  In the protection area management device according to the present invention, an update attribute rule that defines, for each piece of device information, an attribute of information to be updated with work, and a candidate that stores the same candidate as the attribute according to the update attribute rule It is a requirement to further comprise storage means.

  In the protection area management apparatus according to the present invention, when the state detection means for detecting the state of the device to be worked and the change of the state of the device is detected, the stored candidate is changed. It is a requirement to further comprise update means for updating to information indicating the status.

  In the protection area management apparatus according to the present invention, it is a requirement that the information selection unit does not select the device information from which the candidate is extracted until the candidate is updated by the updating unit.

  In the computer program according to the present invention, in a computer program for causing a computer to manage entry into a protection area that restricts access by outsiders and work in the protection area, attributes and identification information of outsiders are displayed. The step of accepting outsider information, the identification information included in the accepted outsider information, and the entry permission rule that specifies the identification information of outsiders who are permitted to enter are compared. When allowing outsiders to enter, and defining the outsider information received, each work permitted within the protection area is defined in association with the attributes of the outsider. Comparing the work permission rules to allow outsiders to identify the work in the protection area, the identified work, and the equipment to be worked out of the multiple devices installed in the protection area. Compare the work target rules defined in association with the work to identify the equipment to be worked, and the equipment information about the equipment installed in the protection area. It is a requirement that the computer execute a step of selecting from a database that stores a plurality of items in association with each work.

  In the present invention, a determination is made as to whether or not an outsider is permitted to enter by comparing the received identification number of the outsider and an entry permission rule that defines the identification information of the outsider permitted to enter. Thus, entrance / exit management in units of people is executed. Also, when allowing outsiders to enter, when allowing outsiders to enter, the attributes of outsiders accepted and each work permitted within the protection area are defined in association with the attributes of outsiders. The operation of the work is managed by comparing the work permission rules to be performed and identifying the work permitted to outsiders. In addition, by managing the identified work and the work target rules that define the work target device in association with each work, the operation target device is managed by identifying the work target device. To do. Further, by selecting and outputting device information related to the identified work device from the database, the operation of the information device required for the work is managed.

  In the present invention, entry / exit management and operation management can be executed jointly in one system, and stable processing can be executed.

  Hereinafter, an information processing apparatus and a computer program serving as a protection area management apparatus according to the present invention will be described with reference to the drawings illustrating embodiments. FIG. 1 is a conceptual diagram showing the overall configuration of a system using an information processing apparatus, and FIG. 2 is a schematic diagram for explaining a protection area.

  In the figure, reference numeral 1 denotes an information processing apparatus serving as a protection area management apparatus according to the present invention. The information processing apparatus 1 includes a contractor database DB1 that stores information about contractors, and a work plan database DB2 that stores information about projects. And a document database DB3 for storing documents related to the devices. The information processing apparatus 1 is installed in a data center and operated by an administrator.

  The information processing apparatus 1 restricts outsiders from entering the protection area SA. The protection area SA is an area that divides a plurality of rooms (booths) provided in the data center into a plurality. The outsiders are, for example, contractors entrusting management operations to the data center or persons in charge such as system engineers (hereinafter referred to as “SE”) and custom engineers (hereinafter referred to as “CE”) outsourced by the contractors. It is. The contractor database DB1 stores information regarding this outsider.

  The information processing apparatus 1 is connected to an operating device 2 installed in each protection area SA. The controller 2 receives the identification information input by the person in charge and transmits it to the information processing apparatus 1. The information processing apparatus 1 performs identity authentication by comparing the identification information received from the controller 2 with the data in the contractor database DB1. The information processing apparatus 1 permits only the person in charge who has succeeded in authentication to enter.

  The information processing apparatus 1 specifies the work permitted in the protection area SA based on the data in the work plan database DB2, and specifies the device 30 to be a work target. The device 30 corresponds to, for example, a server, communication device, video device, experimental device, or the like.

  The devices 30 are intensively stored in the rack 3. The rack 3 is installed in the protection area SA, and transmits device information including the state of each device 30 to the information processing apparatus 1. For example, when the person in charge adds the accessory 31 to the device 30, the information processing apparatus 1 receives the device information from the rack 3 and detects that the accessory 31 has been added. The information processing apparatus 1 updates the document in the document database DB3 according to the detected state, and holds the document in the latest state.

  The information processing device 1 transmits the document in the document database DB3 to the communication terminal device 4. The communication terminal device 4 corresponds to a mobile phone or a personal computer, and is operated by each person in charge to output a document on the screen W.

  FIG. 3 is a block diagram illustrating the configuration of the information processing apparatus 1, and FIG. 4 is a diagram illustrating the storage contents of the auxiliary storage unit and the functional blocks of the CPU. The information processing apparatus 1 stores an external storage unit 10 that reads a program or the like recorded in a recording medium 10a, a communication unit 11 that communicates with the outside, a RAM 12 that temporarily stores data, and a program and data. Auxiliary storage unit 13, a database communication unit 14 for communicating with each database, an operation unit 15 for receiving an input by an administrator, an information output unit 16 for outputting information, and a program stored in the auxiliary storage unit 13 And a CPU 17 for controlling each hardware and executing various processes. Each hardware is connected to each other via a bus 18.

  The external storage unit 10 includes an insertion slot (not shown; the same applies hereinafter). The external storage unit 10 reads out the program recorded on the recording medium 10 a inserted from the insertion slot and outputs it to the auxiliary storage unit 13.

  The communication unit 11 is connected to a communication network such as the Internet and communicates with the rack 3 under the control of the CPU 17. In addition, the communication unit 11 transmits the document in the document database DB3 to the communication terminal device 4.

  The RAM 12 is a semiconductor storage device that stores a plurality of information and can read and write regardless of the storage order, storage position, and the like, and temporarily stores data generated during execution of processing.

  The auxiliary storage unit 13 corresponds to, for example, a magnetic storage type hard disk, and stores the following data. The auxiliary storage unit 13 includes a computer program that gives the CPU 17 a function as a protection area management device according to the present invention, a work permission table TA1 that stores information related to work, work target data DA1 that defines work targets, and a device 30. A document-by-work correspondence table TA2 that prescribes documents corresponding to the document, a document-by-document update state table TA3 that stores the update state of the document, and a document-by-document update attribute table TA4 that prescribes the attributes of words to be updated with work The phrase candidate data DA2 for storing the phrase to be updated and the device management table TA5 for storing the device information are stored. The contents of each table or data will be described later.

  The database communication unit 14 is connected to the contractor database DB1, the work plan database DB2, and the document database DB3, and communicates with each database under the control of the CPU 17. A storage example of each database will be described later.

  The operation unit 15 includes, for example, a keyboard and a mouse, and receives an input from the administrator and outputs it to the CPU 17.

  The information output unit 16 includes, for example, a liquid crystal display and a speaker, and outputs information as video or sound.

  The CPU 17 functions as a control unit 170 that controls the hardware described above according to a program stored in the auxiliary storage unit 13.

  Further, the CPU 17 functions as an entry permission determination unit 171 that determines whether or not entry of a person in charge is permitted based on data in the contractor database DB1.

  Further, the CPU 17 functions as work specifying means 172 for specifying work permitted in the protection area SA based on the data in the work plan database DB2 and the work permission table TA1 as a result of the entry permission determining means 171.

  Further, the CPU 17 functions as a work target specifying unit 173 that specifies the device 30 that is a work target based on the results of the on-line permission determination unit 171 and the work specifying unit 172 and the work target data DA1.

  Further, the CPU 17 functions as a document selection unit 174 that selects a document based on data in the work-specific document correspondence table TA2 and the document-specific update state table TA3 as a result of the work target specifying unit 173.

  Further, the CPU 17 functions as a candidate extraction unit 175 that extracts words / phrases to be updated based on the result of the document selection unit 174 and the data in the document-specific update attribute table TA4.

  Further, the CPU 17 functions as a candidate storage unit 176 that stores a word / phrase to be updated as word / phrase candidate data DA2 based on the result of the candidate extraction unit 175.

  Further, the CPU 17 functions as a state detection unit 177 that detects the state of the device 30 based on the device management table TA5.

  Further, the CPU 17 functions as an update unit 178 that updates the document in the document database DB3 based on the results of the candidate storage unit 176 and the state detection unit 177.

  Thus, the CPU 17 has various functions based on various databases, tables, or data. Therefore, the contents of various databases, tables, and data will be described below.

  FIG. 5 is a diagram showing a storage example of the contractor database DB1. The contractor database DB1 stores a plurality of contractor tables T1, T1,... Serving as access permission rules that define identification information of persons in charge who are permitted to enter. Each contractor table T1 includes the system ID and name entrusted by the contractor, the contractor ID, the person in charge ID, the system operation start date, the scheduled end date of the contract, the entry permission area, and the presence / absence of the right to unlock the rack 3 Are stored in association with each other. The entry permission area corresponds to one of the protection areas SA. The contractor table T1 is created by the administrator every time the data center undertakes management work.

  FIG. 6 is a diagram showing a storage example of the work plan database DB2. The work plan database DB2 stores a plurality of work plan tables T2, T2,. Each work plan table T2 correlates the project ID and name, the system ID to which the project belongs, the ID of the person in charge of the project, the start date and end date of the project, the entry permission area, and the presence or absence of the unlocking authority for the rack 3. Store. The work plan table T2 is created by an administrator every time a project notification is received from a contractor.

  FIG. 7 is a diagram showing a storage example of the work permission table TA1. The work permission table TA1 stores the contents of the work to be permitted and the presence or absence of the target device 30 in association with the attribute of the person in charge (for example, SE, CE, or sales). This is a work permission rule according to the present invention, which is created in advance by an administrator.

  FIG. 8 shows the data structure of the work target data DA1. The work target data DA1 includes device identification information related to the device 30, the room where the device 30 is installed, the area where the device 30 is installed, the rack 3 in which the device 30 is stored, the classification of the device 30, and the work of the device 30. The prohibited time zone, the operation classification of the device 30, the ID of the project for which the device 30 is the target, the ID of the person in charge of the device 30, and the work content for the device 30 are stored in association with each other. The area where the device 30 is installed is one of the protection areas SA. The work content for the device 30 corresponds to, for example, the expansion or relocation of the device 30, the expansion or relocation of the components of the device 30, or the expansion or relocation of an accessory of the device 30. The work target data DA1 is a work target rule of the present invention, and is created by the administrator every time a project report is received from a contractor.

  FIG. 9 is a diagram showing a storage example of the work-specific document correspondence table TA2. The work-specific document correspondence table TA2 stores the device 30 classification, work classification, presence / absence of automatic update, and document name in association with each other. The document corresponds to information on at least the installation location of the device 30, an operation procedure or an operation procedure, or a list of a plurality of devices 30 installed in the protection area SA. The work-specific document correspondence table TA2 is a rule that defines a document corresponding to the device 30, and is created in advance by the administrator.

  FIG. 10 is a diagram showing a storage example of the update state table TA3 for each document. The document-specific update state table TA3 stores the document name and ID, the ID of the project that requires the document, and the document update state in association with each other. The update status is divided into “update possible” indicating that update is possible, “provisional update (automatic)” indicating before automatic update, and “temporary update (manual)” indicating before manual update. The update state is “updatable” until it is selected by the document selection unit 174 of the CPU 17. When a document is selected by the document selection unit 174, it is “provisional update (automatic)” or “provisional update (manual)”. When the project ends and the update is confirmed, it returns to the “updatable” state.

  “Temporary update (automatic)” is displayed when the document name includes data in the automatic update of the work-specific document correspondence table TA2, and “temporary update (manual)” is displayed for other document names. Is displayed.

  When there is a “provisional update (automatic)” or “provisional update (manual)” document in the preceding project, the CPU 17 functioning as the work specifying unit 172 does not permit the work of another project that requires this document. As a result, in the present invention, it is possible to control so that updates accompanying different operations do not occur simultaneously for the same document.

  FIG. 11 is a diagram showing a storage example of the document-specific update attribute table TA4. The document-specific update attribute table TA4 stores the document ID, name, and phrase attribute to be updated in association with the work in association with each other. The update attribute table TA4 for each document is an update attribute rule of the present invention, and is created in advance by the administrator.

  FIG. 12 shows the data structure of word candidate data DA2. The word candidate data DA2 is data about a document in a “provisional update (automatic)” state, and the ID of the target document, the ID of the project that requires the document, the work classification in the project, and the automatic update of the document And the attribute of the word / phrase to be updated are stored in association with each other. The phrase candidate data DA2 is created by the CPU 17 based on the data in the document-specific update attribute table TA4 and stored in the auxiliary storage unit 13. The automatic update pattern is generated based on the data in the update state of the update state table TA3 for each document.

  FIG. 13 is a diagram showing a storage example of the device management table TA5. The device management table TA5 includes project ID, device 30 classification, device 30 type name, device 30 quantity, device 30 installation area, device 30 rack, device 30 operation category, and device 30 work prohibition time. The delivery date of the device 30 and other remarks are stored in association with each other. In the device management table TA5, a record created by the administrator is added every time a project notification is received from the contractor.

  In the newly added record, the operation classification is “scheduled to carry in”, and the carry-in date is “xxx / xxx / xxx”. When the device information is received from the rack 3, the CPU 17 sets the operation classification of the corresponding device 30 to “full operation”, and performs update to add the detection date to the carry-in date.

  The CPU 17 functioning as the state detection unit 177 determines whether or not the data in the device management table TA5 is different from the device information received from the rack 3, and when it is determined that they are different, the state of the device 30 is changed. Detect that

  FIG. 14 is a diagram showing a storage example of the document database DB3. The document database DB3 stores a plurality of document tables T3 that are device information. Although FIG. 14 shows a hardware list, the present invention is not limited to this, and examples include a rack mounting diagram, an operation instruction, an operation manual, an operation procedure manual, or a software list.

  In the document table T3, the phrase attribute is extracted according to the phrase candidate data DA2, and the extracted phrase of the attribute is updated to the device information received from the rack 3.

  The CPU 17 executes the protection area management process based on the various databases, tables, or data described above. The protection area management process includes an entry permission determination process, a temporary update process, and a main update process. Hereinafter, procedures of the on-line permission determination process, the temporary update process, and the main update process executed by the information processing apparatus 1 will be described.

  FIG. 15 is a diagram illustrating a display example of a notification output by the information processing apparatus 1, and FIG. 16 is a flowchart illustrating a procedure of an entry permission determination process performed by the information processing apparatus 1. The controller 2 connected to the information processing apparatus 1 receives the contractor ID input by the person in charge and transmits it to the information processing apparatus 1.

  The CPU 17 of the information processing apparatus 1 receives the contractor ID from the operation device 2 (S101), and determines whether the received contractor ID is stored in any of the contractor tables T1. It is determined whether or not to permit entry (S102). As a result, when it is determined that the received contractor ID is not stored in any of the contractor tables T1, that is, when it is determined that entry of the person in charge is not permitted (NO in S102), the CPU 17 enters the entry. A notification to the effect that it is not permitted is output via the controller 2, and the process is terminated.

  On the other hand, if the CPU 17 determines that the received contractor ID is stored in any one of the contractor tables T1, that is, if the person in charge is permitted to enter (YES in S102), the CPU 17 stores the contractor IDs in the contractor table T1. Using the system ID as a key, the work plan table T2 related to the contractor ID is extracted and stored in the RAM 12. The CPU 17 displays a list of the project names in the extracted work plan table T2 via the operation device 2 (S103), and ends the entry permission determination process.

  17 and 18 are flowcharts showing the procedure of the temporary update process executed by the information processing apparatus 1. The controller 2 accepts any of the project names to be displayed as a list by the input of the person in charge and transmits it to the information processing apparatus 1.

  The CPU 17 of the information processing apparatus 1 receives the project name from the operation device 2 (S201), and stores the project ID corresponding to the received project name in the RAM 12.

  The CPU 17 determines whether one or a plurality of person-in-charge IDs exist in the work plan table T2 corresponding to the received project name, that is, whether a person in charge is registered in advance (S202). If the CPU 17 determines that the person in charge is not registered in advance (NO in S202), the CPU 17 outputs a notification for prompting registration via the operation device 2, and ends the temporary update process.

  On the other hand, if the CPU 17 determines that the person in charge is registered in advance (YES in S202), the CPU 17 displays a notification for prompting the input of the person in charge through the operation device 2. The CPU 17 receives the person-in-charge ID input by the person in charge from the controller 2 (S203), and if the received person-in-charge ID matches any one of the person-in-charge IDs existing in the work plan table T2, the received person-in-charge The person ID is stored in the RAM 12.

  On the other hand, if the CPU 17 determines that the received person-in-charge ID does not correspond to any of the person-in-charge IDs existing in the work plan table T2, the CPU 17 sends a notification that the input person-in-charge ID cannot be permitted via the controller 2. And output the temporary update process.

  The CPU 17 extracts an attribute corresponding to the received person-in-charge ID from the list (S204). The list is data that is stored for each person in charge in association with the person-in-charge ID and attribute, and is created in advance by an administrator who has been contacted by the contractor.

  The CPU 17 displays a list of work contents corresponding to the extracted attributes among the work contents in the work permission table TA1 via the operation device 2 (S205). The CPU 17 specifies the work content permitted to the person in charge by receiving the work contents input by the person in charge from the controller 2 (S206). The CPU 17 stores the specified work content in the RAM 12.

  The CPU 17 extracts the work target data DA1 including the project ID, the person-in-charge ID, and the work content stored in the RAM 12 (S207), and stores the extracted work target data DA1 in the RAM 12. The CPU 17 specifies a work target based on the data in the extracted work target data DA1.

  The CPU 17 displays details of the scheduled work, that is, a notification that prompts the user to input a work category via the operation device 2. The CPU 17 receives the work category input by the person in charge from the controller 2 (S208), and stores the received work category in the RAM 12. The work classification may be a plurality of inputs.

  The CPU 17 displays a notification that prompts input of the work date and time via the operation device 2. The CPU 17 receives the work date and time input by the person in charge from the controller 2 (S209), and whether or not the received work date and time is outside the work prohibition time zone in the work target data DA1 stored in the RAM 12, That is, it is determined whether or not work is possible (S210). If the CPU 17 determines that the work is not possible (NO in S210), the CPU 17 outputs a notification indicating that it is a work prohibition time zone via the controller 2, and ends the temporary update process.

  On the other hand, if the CPU 17 determines that the work is possible (YES in S210), the document name corresponding to the work classification stored in the RAM 12 and the device classification in the work target data DA1 is obtained from the work-specific document correspondence table TA2. By extracting, the document name is specified (S211), and the document ID corresponding to the specified document name is stored in the RAM 12.

  The CPU 17 refers to the update state table TA3 for each document, determines whether or not the update state of the specified document name is updatable (S212), and determines that the update state is not updatable (NO in S212). Then, a notification indicating that the work is not permitted is output via the operation device 2, and the temporary update process is terminated.

  On the other hand, if the CPU 17 determines that the update status is updateable (YES in S212), the CPU 17 sets the update status to tentative update (S213), and the attribute of the word / phrase to be updated with the work corresponding to the specified document name. Are extracted from the document-specific update attribute table TA4 (S214). The CPU 17 generates phrase candidate data DA2 including the extracted phrase attributes, the document ID stored in the RAM 12, the project ID work classification, and the automatic update data (S215), and the generated phrase candidate data DA2 is auxiliary stored. Store in the unit 13.

  The CPU 17 outputs a notification that the person in charge is in the building (see FIG. 15A) to the administrator via the information output unit 16, and ends the temporary update process.

  At the end of the provisional update process, the CPU 17 determines that the document update state is provisional update when the same document name is specified in the provisional update process of another project executed in parallel. Do not allow work on this project. That is, the CPU 17 does not update the document in the temporary update state in another project until this update is executed. As a result, it is possible to prevent the update of different contents at the same time and to make device information consistent.

  Further, when receiving an output request from the communication terminal device 4, the CPU 17 transmits the phrase candidate data DA <b> 2 stored in the auxiliary storage unit 13 to the communication terminal device 4. The person in charge can confirm the attribute of the word / phrase to be updated along with the work.

  FIG. 19 is a flowchart showing the procedure of the update process executed by the information processing apparatus 1. After completing the temporary update process, the CPU 17 of the information processing apparatus 1 reads the device management table TA5 (S301) and sequentially receives device information including the state of each device 30 from the rack 3. The device information includes a phrase indicating the state of the device 30.

  The CPU 17 determines whether or not the received device information is different from the data in the device management table TA5, that is, whether or not a change in the state of the device 30 is detected (S302), and detects a change in the state of the device 30. If it is determined that it is not (NO in S302), step S302 is repeated. For example, the CPU 17 has received device information from the rack 3 that “an accessory of one model name TPCBL-B010 was added to the rack 3 installed in the protection area A01 on June 20, 2005.” In this case, when it is determined that this device information is already stored in the device management table TA5, it is determined that the state of the device 30 has not been changed.

  On the other hand, if the CPU 17 determines that a change in the state of the device 30 has been detected (YES in S302), the CPU 17 reads the document table T3 of the document ID stored in the RAM 12 (S303), and the word / phrase candidate from the read document table T3. The phrase that matches the attribute of the phrase in the data DA2 is extracted, and the extracted phrase is updated to a phrase that indicates the change state of the device 30 that has received the phrase (S304). For example, the CPU 17 has received device information from the rack 3 that “an accessory of one model name TPCBL-B010 was added to the rack 3 installed in the protection area A01 on June 20, 2005.” In this case, when it is determined that the device information is not yet stored in the device management table TA5, it is determined that a change in the state of the device 30 has been detected, and the candidate in the specified document is included in the phrase included in the device information. change.

  The CPU 17 changes the update state in the document-by-document update state table TA3 from temporary update to updateable (S305), and performs initialization by erasing various data stored in the RAM 12 (S306).

  The CPU 17 outputs a notification (see FIG. 15B) that the person in charge finishes the work and leaves the room to the administrator via the information output unit 16, and ends the procedure of the update process.

  At the end of the update process, if the CPU 17 identifies the same document name by executing a temporary update process in another project, the CPU 17 permits the work in the other project. That is, when the CPU 17 detects a change in the state of the device 30, the device 17 can automatically update the content to be updated with the work, thereby achieving consistency of the device information.

  Further, when receiving an output request from the communication terminal device 4, the CPU 17 transmits the phrase candidate data DA <b> 2 stored in the auxiliary storage unit 13 to the communication terminal device 4. The person in charge can always view the document held in the latest state.

  The following additional notes are disclosed with respect to the embodiment described above.

(Appendix 1)
In the protection area management device that manages the entry into the protection area that restricts the access of outsiders and the work in the protection area,
An admission rule that stipulates the identification information of outsiders who are permitted to enter;
A work permission rule that prescribes each work permitted in the protection area in association with the attributes of outsiders;
A work target rule that specifies a work target device among a plurality of devices installed in a protection area in association with each work;
A database for storing a plurality of pieces of equipment information related to equipment installed in the protection area in association with each work;
Receiving means for receiving outsider information including attributes and identification information of outsiders;
An entry permission determination means for comparing whether the identification information included in the received outsider information is compared with the identification information defined in the entry permission rule, and whether to permit the entry of the outsider;
When permitting outsiders to enter, identify the work within the protected area that is permitted to outsiders by comparing the attributes of the outsider information received with the attributes specified in the work permission rules. Means,
A work target identifying means for comparing the identified work with the work target rules to identify a device to be worked on;
Information selecting means for selecting, from the database, device information relating to the identified device to be worked on;
A protective area management device comprising: output means for outputting selected device information.

(Appendix 2)
The protective area management apparatus according to appendix 1, wherein the work is any one of expansion or relocation of equipment, expansion or relocation of equipment components, or expansion or relocation of equipment accessories.

(Appendix 3)
The protection area according to appendix 1 or 2, wherein the device information is information on any of an installation location of the device, an operation procedure or an operation procedure, or a list of a plurality of devices installed in the protection area. Management device.

(Appendix 4)
An update attribute rule that specifies the attribute of information to be updated with work for each device information,
The protection area management device according to any one of appendices 1 to 3, further comprising candidate storage means for storing the same candidate as the attribute according to the update attribute rule.

(Appendix 5)
State detection means for detecting the state of the device to be worked; and
The protection area management device according to claim 4, further comprising: an update unit that updates a stored candidate with information indicating the changed state when it is detected that the state of the device has been changed. .

(Appendix 6)
The protection area management apparatus according to appendix 5, wherein the information selection unit is configured not to select the device information from which the candidate is extracted until the candidate is updated by the updating unit.

(Appendix 7)
The device information is document format data,
The update attribute rule defines an attribute of a word to be updated with work,
7. The protection according to appendix 6, wherein when the update unit detects that the state of the device has been changed, the stored candidate is updated to a phrase indicating the changed state. Area management device.

(Appendix 8)
In a computer program that causes a computer to manage access to and work in a protective area that restricts access by outsiders,
Accepting outsider information including outsider attributes and identification information; and
Comparing the identification information included in the accepted outsider information with the entry permission rule that defines the identification information of the outsider permitted to enter, and determining whether to permit outsider entry; and ,
When permitting outsiders to enter, the outsider information received is compared with the work permission rules that stipulate each work permitted in the protection area in association with the attributes of the outsider. Steps to identify work within the protected area to be permitted;
Comparing the identified work with a work target rule that defines a work target device among a plurality of devices installed in the protection area in association with each work;
Causing the computer to execute a step of selecting device information related to the specified device to be worked from a database that stores a plurality of device information related to devices installed in the protection area in association with each work. Computer program.

(Appendix 9)
9. The computer program according to claim 8, further causing the computer to further execute a step of storing the same candidate as the attribute in accordance with an update attribute rule that defines, for each piece of device information, an attribute of information to be updated with work.

(Appendix 10)
Detecting the state of the device to be worked on;
The apparatus according to claim 8 or 9, further comprising: causing the computer to further execute a step of updating the stored candidate with information indicating the changed state when it is detected that the state of the device has been changed. Computer program.

(Appendix 11)
The computer program according to appendix 9, further comprising: causing the computer to further execute a step of not selecting the device information from which the candidate is extracted until the stored candidate is updated to information indicating a changed state.

It is a conceptual diagram which shows the whole structure of the system which uses information processing apparatus. It is a schematic diagram for demonstrating a protection area. It is a block diagram which shows the structure of information processing apparatus. It is a figure which shows the memory content of an auxiliary memory part, and the functional block of CPU. It is a figure which shows the example of storage of a contractor database. It is a figure which shows the example of storage of a work plan database. It is a figure which shows the example of storage of a work permission table. It is a figure which shows the data structure of work object data. It is a figure which shows the example of storage of the work corresponding | compatible document corresponding table. It is a figure which shows the example of storage of the update state table classified by document. It is a figure which shows the example of storage of the update attribute table classified by document. It is a figure which shows the data structure of word candidate data. It is a figure which shows the example of storage of an apparatus management table. It is a figure which shows the example of storage of a document database. FIG. 11 is a diagram illustrating a display example of a notification output by the information processing apparatus. It is a flowchart which shows the procedure of the admission permission determination process which information processing apparatus performs. It is a flowchart which shows the procedure of the temporary update process which information processing apparatus performs. It is a flowchart which shows the procedure of the temporary update process which information processing apparatus performs. It is a flowchart which shows the procedure of this update process which information processing apparatus performs.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 Information processing apparatus 10 External storage part 11 Communication part 12 RAM
13 Auxiliary storage unit 14 Database communication unit 15 Operation unit 16 Information output unit 17 CPU
2 Operation device 3 Rack 30 Equipment 31 Accessory 4 Communication terminal device

Claims (7)

In the protection area management device that manages the entry into the protection area that restricts the access of outsiders and the work in the protection area,
An admission rule that stipulates the identification information of outsiders who are permitted to enter;
A work permission rule that prescribes each work permitted in the protection area in association with the attributes of outsiders;
A work target rule that specifies a work target device among a plurality of devices installed in a protection area in association with each work;
A database for storing a plurality of pieces of equipment information related to equipment installed in the protection area in association with each work;
Receiving means for receiving outsider information including attributes and identification information of outsiders;
An entry permission determination means for comparing whether the identification information included in the received outsider information is compared with the identification information defined in the entry permission rule, and whether to permit the entry of the outsider;
When permitting outsiders to enter, identify the work within the protected area that is permitted to outsiders by comparing the attributes of the outsider information received with the attributes specified in the work permission rules. Means,
A work target identifying means for comparing the identified work with the work target rules to identify a device to be worked on;
Information selecting means for selecting, from the database, device information relating to the identified device to be worked on;
A protective area management device comprising: output means for outputting selected device information.   2. The protective area management apparatus according to claim 1, wherein the work is any one of expansion or relocation of devices, expansion or relocation of device components, or expansion or relocation of device accessories.   The protection according to claim 1 or 2, wherein the device information is information on any of an installation location of the device, an operation procedure or an operation procedure, or a list of a plurality of devices installed in the protection area. Area management device. An update attribute rule that specifies the attribute of information to be updated with work for each device information,
The protection area management device according to any one of claims 1 to 3, further comprising candidate storage means for storing the same candidate as the attribute according to the update attribute rule. State detection means for detecting the state of the device to be worked; and
The protection area management according to claim 4, further comprising: an updating unit that updates a stored candidate with information indicating the changed state when it is detected that the state of the device has been changed. apparatus.   6. The protection area management apparatus according to claim 5, wherein the information selection unit does not select the device information from which the candidate is extracted until the candidate is updated by the update unit. In a computer program that causes a computer to manage access to and work in a protective area that restricts access by outsiders,
Accepting outsider information including outsider attributes and identification information; and
Comparing the identification information included in the accepted outsider information with the entry permission rule that defines the identification information of the outsider permitted to enter, and determining whether to permit outsider entry; and ,
When permitting outsiders to enter, the outsider information received is compared with the work permission rules that stipulate each work permitted in the protection area in association with the attributes of the outsider. Steps to identify work within the protected area to be permitted;
Comparing the identified work with a work target rule that defines a work target device among a plurality of devices installed in the protection area in association with each work;
Causing the computer to execute a step of selecting device information related to the specified device to be worked from a database that stores a plurality of device information related to devices installed in the protection area in association with each work. Computer program.

Images