JP5215007B2 - Access control system - Google Patents

Description

  The present invention is an entrance / exit management system that restricts traffic using an authentication card when entering or leaving a building, and in particular, extends the expiration date of an authentication card that can be used only during work hours when overtime. About things.

  Conventionally, as disclosed in Patent Document 1, an entrance / exit management device having both a building entrance / exit management function and an attendance / exit management function has been proposed. Here, the entrance / exit management function refers to the door when the user is verified by checking the authentication card when entering / exiting the building or moving within the building, and confirming that the user is an authorized user. This is a function of unlocking the provided electric lock, and only a user who has an authentication card can enter and leave the room and move. On the other hand, the attendance / leaving management function is a function for managing the time when a user attends or leaves the company, and is used by the company to manage the attendance / leaving status of employees.

  Specifically, when a user uses the entrance / exit management function, when an authentication card possessed by the user is inserted, personal information is read from the authentication card, and the authorized user possesses it. Check if the authentication card is valid. After that, if the verification card verification is correct, the user selects the entry / exit management function, and if it matches the entry / exit conditions, the user unlocks the electric lock and enters / exits the user into the building. Is allowed to move. If the verification card is not verified correctly or if the entrance / exit conditions are not satisfied, the electric lock is maintained in the locked state to restrict the user's access to the building and movement within the building.

  In addition, when a user uses the time and attendance function, first, when an authentication card possessed by the user is inserted, the personal information is read from the authentication card, and the authentication user possessed by the authorized user. Check if the card is not. Thereafter, if the verification card verification is correct, the user selects the attendance / leaving management function, inputs attendance, leaving, and going out, and stores the type of attendance, etc. of the user, and the current time. If the verification card is not verified correctly, this is displayed because it is an incorrect card operation.

Japanese Patent Laid-Open No. 9-185740

  By the way, the entrance / exit management function and the attendance / exit management function are management-restricted on the behavior of the same person in the same building, and are therefore closely related to each other. Specifically, when a user goes to work, it is necessary for the user to permit free entry / exit, such as moving around the building, going out, and returning to work, but if the user leaves the office, It is not always necessary to allow movement and re-entry in the building. Therefore, it is desirable to validate the authentication card only while the user is at work.

  However, in general, the scheduled closing time is a time that does not change every day, but some users may work overtime after the scheduled closing time. And, since the time required for overtime work varies from user to day depending on the situation, flexible setting for overtime work is also necessary when setting the period for validating the authentication card.

As described above, the management of the expiration date of the authentication card requires high security and flexibility in relation to the work status of the user. However, in the conventional entrance / exit management system, since the entrance / exit management function and the attendance / exit management function are executed independently by the user's selection, it is not possible to perform the operation / management related to each other. Particularly, since the expiration date of the authentication card becomes a fixed time, it is difficult to flexibly cope with the overtime hours of the user.
Therefore, the present invention flexibly manages the expiration date of the authentication card used for entry / exit management according to the work situation, and enables the user to use the authentication card only during work, thereby providing high security. The purpose is to provide an access control system.

In order to achieve the above object, the access management system of the present invention includes a read / write unit that reads an identification code and an expiration date from a storage medium possessed by a user, and writes an expiration date to the storage medium. A code storage unit that stores an identification code of a storage medium possessed by a user, a control unit that determines whether or not the storage medium is an authorized storage medium, and permits the user to pass when it is determined to be an authorized storage medium ; When that allow the overtime work of use's input has a authorization management unit in correspondence with the identification code of the storage medium to which the user possesses registers the authorization information on the new expiration date, and the The control unit checks whether the identification code of the storage medium read by the read / write unit is registered in the code storage unit and whether the expiration date of the storage medium has passed, And body determining whether checking means, when the pre-term memory medium reads the identification code and the expiration date, when the authorization information corresponding to the storage medium to the approval manager is registered, the Lee Dora site And an extension means for performing a process of extending the expiration date by writing a new expiration date to the storage medium from the section. Furthermore, when an identification code is read from the storage medium at the time of a user's attendance, an attendance registration unit is provided for calculating an expiration date for validating the storage medium and writing the expiration date to the storage medium from the read / write unit. Features. Alternatively, when the extension unit reads the identification code and the expiration date from the storage medium, the approval information that is within a predetermined time from the expiration date and that corresponds to the storage medium is registered in the approval management unit. In this case, a new expiration date is written to the storage medium from the read / write unit, and the expiration date is extended.

  According to the above configuration, the expiration date of the storage medium can be extended only when the overtime work of the user is approved and registered, so the effectiveness of the storage medium is strictly controlled while flexibly supporting overtime work. Can be managed. Further, since it is possible to avoid setting the normal expiration date longer than necessary, it is possible to prevent the use of the storage medium by a user other than when necessary and the misuse by a third party who has picked up the storage medium. Furthermore, because the expiration date is automatically extended when the user uses the storage medium, the system administrator does not have to register the authentication card one by one, reducing the burden on the system administrator. be able to.

  As a preferred aspect of the access control system, the extension means performs the extension process with reference to the approval management section when the verification means determines that the expiration date of the storage medium has passed. . As a result, since the confirmation operation to the approval management unit is performed only at the first verification after the expiration date has expired, the verification delay caused by wasteful access to the approval management unit with respect to the valid storage medium An increase in communication traffic can be prevented.

  As a preferred aspect of the above-described entry / exit management system, the new expiration date of the approval information is calculated from the approval overtime hours, which is the upper limit of the time allowed for the user to work overtime. Thereby, the extension period of an expiration date can be set appropriately according to overtime work.

  In addition, as a preferred aspect of the above-described entry / exit management system, the system further includes an approval operation unit that is operated by an approver that permits the user to work overtime and that transmits the approval information regarding the input user to the approval management unit. Consists of.

  Since the expiration date of the storage medium can be extended only when the user's overtime work is approved and registered, the effectiveness of the storage medium can be strictly managed while flexibly supporting overtime work. Further, since it is possible to avoid setting the normal expiration date longer than necessary, it is possible to prevent the use of the storage medium by a user other than when necessary and the misuse by a third party who has picked up the storage medium. Furthermore, because the expiration date is automatically extended when the user uses the storage medium, the system administrator does not have to register the authentication card one by one, reducing the burden on the system administrator. be able to.

  Hereinafter, as one embodiment of the present invention, an authentication card such as an ID card that is held by a company employee, an attendance registration device for registering an employee's attendance status, and an entrance / exit control device for restricting the entrance / exit of an employee in a building are provided. The entrance / exit management system that uses the entry / exit state and the entrance / exit restriction will be described with reference to the drawings.

FIG. 1 is a diagram schematically showing an operation image of the access management system of the present embodiment. FIG. 2 is a diagram showing the overall configuration of the access management system of the present embodiment.
In the present embodiment, the access management system performs management of employee entry / exit and entry / exit management of a company that uses the building in the building to be managed. The interior of the building is mainly classified into “access control area”, “employee service area”, and “general service area”. “Entrance / restriction area” is an area where entry / exit by non-employees (persons without authority) should be restricted. For example, it is assumed that an office room through which employees are working or a corridor connecting rooms. The “employee attendance area” is an area that exists outside the entrance / exit restriction area, and is an area through which an employee who goes to / from work enters or leaves the building. The employee-communication area is preferably an area that leads to the entrance / exit of the entrance / exit restriction area. The “general service area” is an area existing outside the access control area, and is an area through which non-employees and visitors enter and leave the building. The general service area is an area that leads to an entrance / exit of an access control area different from the employee service area, such as an entrance hall or a visitor entrance.

  An employee who is permitted to enter and leave the access control area is lent in advance with an authentication card for identifying the owner. The authentication card stores an identification code (ID code) unique to the card and information (expiration date) for determining the valid / invalid state of the card.

The door D with electric lock, the reader / writer RW, and the entrance / exit control device M are provided everywhere in the building, and the movement of the user in the building is restricted.
The door D with the electric lock is provided at the boundary between the regions, and is a means for physically restricting movement between the regions.
The reader / writer RW is a means for reading the ID code stored in the authentication card possessed by the employee in a non-contact (or contact) manner, and the movement of the two areas restricted by the door D with the electric lock. Provided near the door.

A work attendance registration device S is provided in the employee commuting area, and attendance / work attendance registration is performed by employees who enter and leave the company.
The attendance registration device S reads the ID code stored in the authentication card possessed by the employee in a non-contact (or contact) manner when the employee leaves or leaves the office, thereby registering the attendance and leaving the employee. . When the attendance registration device S registers the attendance for the read authentication card, the attendance registration device S updates the expiration date information of the authentication card and validates the subsequent entry / exit to the entry / exit restriction area. On the other hand, when the relocation registration is performed for the read authentication card, the expiration date information of the authentication card is updated (or deleted), and the subsequent entry / exit to the access control area is invalidated.

  The approver terminal is a terminal that can be operated by a manager employee who manages the work of a general employee. When a managerial employee needs to work overtime, the managerial employee inputs approval information instructing the employee to work overtime at the approver terminal, and registers the approval information in the attendance registration device S or the management device P. .

  The access control device M is connected to the reader / writer RW to be controlled and the door D with the electric lock, and the validity of the user is verified based on the ID code and the expiration date information attached to the authentication card read by the reader / writer RW. It authenticates and controls the door D with an electric lock. This controls and manages user access between areas. Further, when the entry / exit control device M reads the authentication card possessed by the employee, the entry / exit control device M obtains approval information from the attendance / registration device S or the management device P as necessary, and approves that the employee is allowed to work overtime. If the information is registered, the expiration date of the authentication card is extended.

  The management device P is installed in an arbitrary room in the access control area and can be operated only by a system administrator. The management device P is connected to each entry / exit control device M, attendance registration device S, and approver terminal via a LAN, and acquires the entry / exit information of employees in the entry / exit control area from each entry / exit control device M, and each employee is presently present. Record the location and entry / exit history of each employee. Also, employee attendance information is acquired from the attendance registration device S, and the daily attendance status and attendance time are recorded for each employee. The management device P includes a display unit such as a liquid crystal display and a printing unit such as a printer, and can display and print various recorded information.

  In the example of FIG. 1, a door D1 with electric lock, reader / writers RW11 and RW12, and an entrance / exit control device M1 are provided at the boundary between the employee passage area and the entry / exit restriction area. Access is restricted. Similarly, a door D2 with an electric lock, reader / writers RW21 and RW22, and an access control device M2 are provided at the boundary between the general service area and the access control area, and access between the general service area and the access control area is controlled. Yes. Doors D3 to D5 with electric locks, reader / writers RW31, 32 to 51, 52, and access control devices M3 to M5 are also provided at the boundaries between the rooms in the access control area.

An attendance registration device S is arranged in the employee commuting area. When an employee who goes to work registers attendance in the employee commuting area and validates his own authentication card, the reader / writer RW11 receives the authentication card. It can be operated to enter the restricted access area.
In addition, a door D6 with an electric lock, reader / writers RW61 and RW62, and an entrance / exit control device M6 are also provided at the boundary between the external area of the building and the employee service area. Here, if the expiration date information is referred to at the time of user authentication in the entry / exit control device M6, an employee who has an authentication card prior to attendance registration cannot enter the employee communication area from the outside. Therefore, unlike the other access control devices M1 to M5, the access control device M6 performs authentication based only on the ID code without referring to the expiration date information of the authentication card.
In addition, an automatic opening / closing door is provided at the boundary between the external area and the general service area, allowing visitors to enter the building during the day. It should be noted that the boundary between the external area and the employee-communication area may also be accessible from the outside without performing user authentication by simply providing an automatic door.

  As described above, the entry / exit management system according to the present embodiment allows only employees who have registered for attendance using the attendance registration device S to enter the entry / exit restricted area. Each card in the restricted access area can be made inaccessible using a card. Also, when authenticating the employee's traffic with the entry / exit control device M, if the employee's overtime work is approved, the expiration date of the authentication card will be extended. Card expiration date can be strictly managed. Accordingly, it is possible to prevent unauthorized traffic of employees other than when necessary and misuse by a third party who has acquired an authentication card, and entrance / exit management with high security can be performed.

Hereinafter, the configuration and operation of the authentication card C, the attendance registration apparatus S, and the entry / exit control apparatus M used in the entry / exit management system of this embodiment will be described in detail.
FIG. 3 is a diagram showing a configuration of an authentication card C possessed by an employee.
The authentication card C is an IC card (Integrated) that can be read and written by non-contact communication.
Circuit Card), which mainly includes a wireless communication unit 120, a storage unit 140, and a control unit 160.
The wireless communication unit 120 includes an antenna that transmits and receives a wireless signal having a predetermined frequency, a communication circuit that modulates or demodulates the transmitted and received signal, and performs wireless communication with the reader / writer RW and the attendance registration device S.

The storage unit 140 is a readable / writable RAM (Random Access).
Memory) and the like. The storage unit 140 stores an ID code uniquely assigned to each authentication card C in order to identify an employee who possesses the authentication card C. Further, the storage unit 140 stores an expiration date indicating a period during which the use of the authentication card C is enabled. The expiration date is represented by the date and time, and the authentication card C is valid until the time arrives. Since this expiration date is used for user authentication by the entry / exit control device M, an employee who is a card holder can enter and leave the entrance / exit area until the expiration date comes.

The control unit 160 is an MPU (Micro) that controls the wireless communication unit 120 and the storage unit 140.
Processing Unit). When the wireless communication unit 120 receives the question signal from the reader / writer RW or the attendance registration device S, the control unit 160 reads the ID code and the expiration date from the storage unit 140 and wirelessly communicates the response signal modulated with these data. The data is sent from the unit 120. Further, when the wireless communication unit 120 receives an expiration date writing instruction signal from the attendance registration device S, the received expiration date is written in the storage unit 140 and the expiration date stored in the storage unit 140 is updated.

The form of the expiration date stored in the storage unit 140 is not limited to the date and time, and only the time, the date and time, the valid time zone, and the like can be applied.
Further, the authentication card C is not limited to a non-contact type IC card, and a contact type IC card, a contact type magnetic card, an RFID tag, a mobile phone capable of RFID communication, and the like are applicable.

FIG. 4 is a functional block diagram of the attendance registration apparatus S.
The attendance registration device S mainly includes a read unit 210, a write unit 220, a clock unit 230, an operation display unit 240, a LAN communication unit 250, a storage unit 260, and a control unit 270.

  The read unit 210 includes an antenna that transmits / receives a radio signal having a predetermined frequency, a communication circuit that modulates / demodulates the transmission / reception signal, and the like, and wirelessly communicates with the authentication card C to read card information. The lead unit 210 transmits an inquiry signal within a predetermined distance and receives a response signal transmitted from the authentication card C. Then, the received response signal is demodulated, the ID code of the authentication card C is extracted, and the ID code is transferred to the verification means 272 of the control unit 270.

  The light unit 220 includes an antenna that transmits and receives a radio signal of a predetermined frequency, a communication circuit that modulates or demodulates the transmission / reception signal, and performs wireless communication with a specific authentication card C that exists within a predetermined distance. The card information is written in the storage unit 260 of the card C. The write unit 220 sends a write instruction signal including an expiration date calculated by an approval registration unit 276, which will be described later, to the authentication card C by designating the authentication card C using an ID code, and sends the expiration date to the authentication card C. Update.

The clock unit 230 is a means for measuring the current time. It is timed by regular time data received via the LAN communication unit 250 periodically.
The operation display unit 240 is a liquid crystal display and operation buttons, a touch panel type liquid crystal display, or the like, and is a means for displaying various information and inputting operations. The user operates the operation display unit 240 to switch between the attendance mode for performing attendance registration and the leave mode for performing attendance registration. In addition, the operation display unit 240 always displays whether the currently set attendance mode is either the attendance mode or the attendance mode.
The LAN communication unit 250 communicates with the management apparatus P in a LAN (Local Area Network) constructed based on the Ethernet (registered trademark) standard or the like. The LAN communication unit 250 communicates with an approver terminal (such as a personal computer) operated by a manager employee who manages the work of a general employee.

  The storage unit 260 includes a ROM, a RAM, and the like that store various programs and data. The storage unit 260 stores the attendance and attendance history and management information, and the control unit 270 reads and writes as needed. The attendance / attendance history is the history information of each employee's attendance / leaving, and is data in which an employee number for identifying the employee, an ID code of the authentication card C possessed by the employee, attendance time, and attendance time are associated with each individual. Consists of. The time at which the employee has registered for attendance is written in the attendance time. The time at which the employee has registered for leaving work is written in the leaving time.

  The management information is information necessary for each employee's attendance and attendance registration process and the expiration date extension process at the time of overtime. The ID code (verification ID code) of the authentication card possessed by the employee, basic management information, and approval information Is data associated with each individual. FIG. 5 shows an example of the data structure of the management information. The basic management information is basic information about the work system of each employee, and is registered in advance through the time and attendance device S or the management device P. The basic management information includes a basic time zone Hs that indicates a time zone in which an employee normally attends, and a basic upper limit time Ts that indicates an upper limit time that the employee normally takes to work (a time that has been given a margin). On the other hand, the approval information is information on overtime work that is recognized as a special case exceeding the normal working hours, and is temporarily received by an administrator employee via an approver terminal or operation display unit corresponding to the approval operation unit of the present invention. Is registered. The approval information includes an approval overtime time Ta that indicates an upper limit time (a time when a margin is given) for the overtime work of the employee.

The control unit 270 is configured by an MPU or the like, and includes a matching unit 272, a determination unit 274, and an approval registration unit 276, and performs overall control of each unit.
The collating means 272 is a means for collating whether or not the ID code of the authentication card C read by the read unit 210 is an ID code registered in the attendance information in the storage unit 260.

The determination means 274 stores and holds the current attendance / removal mode selected on the operation display unit 240, and registers the employee who has the authentication card C with the ID code that has been successfully verified according to the attendance / removal mode. It is a means to register for retirement.
When the valid authentication card C is read in the attendance mode, the determination unit 274 refers to the basic management information registered in the storage unit 260, and determines whether the current time is a time slot in which the employee normally attends work. Determine whether or not. If the current time is the basic time zone Hs, the employee having the authentication card C is allowed to attend work, and the attendance time is registered in the attendance history of the storage unit 260. At the same time as attendance registration, an expiration date (future time) is calculated based on the basic upper limit time Ts of the basic management information and the current time, and the validity stored in the authentication card C via the light unit 220 is calculated. Update the deadline. As a result, the employee can enter and leave the access control area using the authentication card C from the time when the attendance registration is performed until the expiration date comes.

  In addition, when the valid authentication card C is read in the leaving mode, the determination unit registers the leaving time in the attendance / leaving history of the storage unit 260. Also, at the same time as the work registration, the current time or a time obtained by subtracting a predetermined time from the current time (past time) is calculated as the expiration date, and the expiration date stored in the authentication card C is updated via the write unit 220. To do. As a result, the employee cannot enter or leave the access control area using the authentication card C at the time when the employee is registered for retirement.

  The processing of the determination unit 274 will be described with reference to FIG. For example, if an employee who has an authentication card C with the ID code “12345” goes to work at “9:00” on “weekdays” and the attendance registration operation is performed, the basic time zone Hs “weekdays, 8: 30- Since the attendance is at 9:30 ", the attendance is permitted. Then, “18:00” on the day obtained by adding the basic upper limit time Ts “9 hours” to the current time is calculated as the expiration date, and the authentication card C is activated by writing the expiration date. However, when this employee goes to work on a holiday, the basic time zone Hs is not satisfied, and the attendance is rejected. Therefore, the expiration date is not updated and the authentication card is left in an invalid state.

  The approval registration unit 276 is a unit that registers employee approval information input from the operation display unit 240 or the LAN communication unit 250 in the management information of the storage unit 260. The approval information is input to the approval registration unit 276 when the manager employee operates the operation display unit 240 or the approver terminal. Approval work for overtime work of each employee must be performed only by managers, so it is possible to authenticate whether or not the employee is a manager using a preset PIN, etc. Is preferably determined.

In addition, when the attendance information is updated in the storage unit 260 or when a request is received from the management device P, the control unit 270 transmits the latest attendance information to the management device P via the LAN communication unit 250. Thereby, in the management apparatus P, the record of the employee's attendance and attendance can be managed centrally.
Note that the approval management unit according to the present invention corresponds to the approval registration unit 276 of the control unit 270 and a part of the storage unit 260 that stores the approval information.

FIG. 6 is a functional block diagram of the access control apparatus M and a diagram showing a connection relationship between the door D with an electric lock and the reader / writer RW.
The access control apparatus M mainly includes an electric lock control unit 310, a reader communication unit 320, a storage unit 330, a clock unit 340, a LAN communication unit 350, and a control unit 360.

  The electric lock control unit 310 is connected to the door D with the electric lock managed by itself, and is a means for controlling the locking and unlocking by applying a current (voltage) to the electric lock provided on the door D with the electric lock. The electric lock control unit 310 normally maintains the door D with the electric lock in the locked state, and controls the door D with the electric lock to be temporarily switched to the unlocked state in accordance with an instruction from the control unit 360.

  The reader communication unit 320 is a communication interface that is connected to a pair of reader / writers RW managed by the reader communication unit 320 and receives a passage request signal from the reader / writer RW. Here, the reader / writer RW demodulates the response signal received from the authentication card C, extracts the ID code and the expiration date, and sends the extracted card information to the access control device M as a passage request signal. The reader communication unit 320 acquires the ID code and the expiration date of the authentication card C included in the received passage request signal.

The storage unit 330 includes a ROM, a RAM, and the like that store various programs and data. The storage unit 330 stores an ID code to which the authority to enter and leave the room is given.
The clock unit 340 is a means for measuring the current time. Time is adjusted by regular time data periodically received via the LAN communication unit 350.
The LAN communication unit 350 communicates with the management apparatus P in a LAN constructed based on the Ethernet (registered trademark) standard or the like.

The control unit 360 is configured by an MPU or the like, and includes a collating unit 362 and an extending unit 364, and performs overall control of each unit.
The collating unit 362 collates the ID code read from the authentication card C with the ID code registered in the storage unit 330 to determine whether the card is an authentication card C. Further, it is determined based on the current time whether the authentication card C is in an effective state in which the expiration date has not passed. The verification unit 362 determines that the authentication card C that is a registered ID code and is valid is a legitimate authentication card C.

  The extension means 364 executes an extension process for updating the expiration date of the authentication card C based on the approval content when collation of the authentication card C of the employee who is approved and registered for overtime work. The extension unit 364 acquires the approval information registered in the storage unit 260 of the attendance registration device S, and updates the expiration date of the authentication card C based on the approval overtime time Ta included in the approval information as necessary. . Specifically, when the verification unit 362 determines that the ID code is registered but the expiration date has expired and the card is not a regular authentication card, the extension unit 364 has exceeded the expiration date. The extension process is executed on condition that a predetermined time (for example, 1 hour) has not elapsed since the time. The extension unit 364 acquires approval information for the ID code during the extension process. If the approval information for the ID code is registered, the new expiration date is calculated by adding the approval overtime Ta of the approval information to the original expiration date (or the current time), and the reader communication unit 320 The new expiration date is written in the authentication card C via the reader / writer RW.

  The above extension process will be described by taking the management information of FIG. 5 as an example. For example, an employee who has an authentication card C with the ID code “12345” goes to “9:00” and the expiration date is “18:00”, and this employee becomes “18:30”. Assume that a traffic request is made to the access control apparatus M. In this case, the verification means 362 confirms the validity of the ID code, but since the expiration date has passed, it is determined that the ID card is not a regular authentication card C. At this time, the extension processing means requests the attendance registration apparatus S to download the approval information of the ID code “12345” because the current time is within one hour after the expiration date. However, in this example, the approval overtime information for this employee is not registered, so the expiration date extension process is not performed. Therefore, the traffic request for the authentication card C is not accepted, and the manager employee is urged to obtain approval for overtime work.

  On the other hand, when an employee who has the authentication card C with the ID code “34567” goes to work and requests passage to “18:30” in the same manner as the above employee, the approval overtime information for this employee is registered. Therefore, the expiration date extension process is executed. The extension means 364 adds “22:00”, which is obtained by adding the approval overtime time “4 hours” included in the acquired approval information to the expiration date “18:00” of the read authentication card C as a new expiration date. Calculate and write a new expiration date on the authentication card C. As a result, for employees whose overtime work has been approved and registered, the expiration date is extended according to the approval details when the first pass request is made to the access control device M after the expiration date of the authentication card C expires.

  When the control unit 360 determines that the authentication card C is valid by the verification unit 362, the control unit 360 unlocks the door D with the electric lock via the electric lock control unit 310 and allows the employee to enter and leave the room. When it is determined that the ID code is inconsistent and the authentication card C is not valid, the door D with the electric lock maintains the locked state and prevents the unauthorized user from entering and leaving the room. At this time, the reader / writer RW is notified that entry / exit is not permitted, and the reader / writer RW displays an authentication failure indication. On the other hand, if the ID code matches but the expiration date has expired, the expiration date is extended based on whether overtime work is approved and registered. If overtime work is approved and registered, electric lock control is performed. The door D with an electric lock is unlocked via the part 310 to allow employees to enter and leave the room.

  In addition, when the employee is allowed to enter and leave the room, the control unit 360 manages the ID code of the used authentication card C and a record (log) of the entry and exit through the LAN communication unit 350 that performs LAN communication. Transmit to device P. Thereby, the management apparatus P can centrally manage the current position of the employee in the access control area and the past entry / exit history.

Next, processing of the attendance registration apparatus S and the entry / exit control apparatus M when the entry / exit management system of this embodiment is operated will be described with reference to FIGS. 7 to 9.
FIG. 7 is a flowchart showing an operation when switching the attendance / leaving mode in the attendance registration apparatus S.
An employee who is engaged in a building to be managed enters the employee commuting area when going to work or leaving the office, and performs work attendance or work attendance operations using the attendance registration device S. When the operation display unit 240 indicates that the current leaving mode is displayed at the time of leaving the office, the operation display unit 240 is operated before the authentication card C is read, and an operation for switching to the work mode is performed. If the operation display unit 240 displays that the current attendance mode is displayed when the employee leaves the company, the operation display unit 240 is operated before the authentication card C is read to switch to the leave mode.

  When the attendance registration device S detects a mode selection operation from the operation display unit 240, the attendance / exit mode switching process is started. First, it is determined whether or not the input attendance mode is different from the currently set attendance mode (S400). If they match (No in S400), it is an operator's erroneous operation, and the process is terminated without switching the mode.

  On the other hand, when the entered attendance / leaving mode is different from the current attendance / leaving mode (Yes in S400), it is determined which of the attendance / leaving modes is switched to (S410). If a switching operation to the attendance mode is input when the leaving mode is set (“Attendance mode” in S410), the attendance / exit mode is switched from the leaving mode to the attendance mode (S420), and the operation display unit 240 is displayed. The fact that the attendance mode is currently set is displayed (S430). On the other hand, if an operation for switching to the leave mode is input when the attendance mode is set (“leaving mode” in S410), the attendance / leaving mode is switched from the attendance mode to the leaving mode (S440), and the operation display section At 240, the fact that the current work mode is set is displayed (S450).

FIG. 8 is a flowchart showing the attendance / leaving registration process in the attendance registration apparatus S.
After confirming the current attendance / leaving mode on the operation display unit 240, the employee who is engaged in the management target building makes the authentication card C approach the reading unit 210 to read the card information, and performs attendance registration or attendance registration operation. To do.

When the attendance registration device S reads the card information (ID code) of the authentication card C by the read unit 210, the attendance registration device S starts the attendance / attendance registration process.
First, it is verified whether or not the ID code of the read authentication card matches the ID code registered in the storage unit 270 (S500). If they do not match (No in S500), the operation display unit 240 displays an error message indicating that the verification has failed (S510). If they match (Yes in S500), it is determined whether the currently set attendance mode is the attendance mode or the attendance mode (S520), and the subsequent processing is executed according to the mode.

  When it is determined that the setting mode is the attendance mode (“Attendance mode” in S520), it is determined whether or not the current time is included in the basic time zone Hs corresponding to the ID code, and the normal attendance of the employee is performed It is confirmed whether it is a time zone (S530). When it is included in the basic time zone Hs (Yes in S530), the current time is registered as the attendance time corresponding to the ID code of the attendance history, and the attendance is registered (S540). Subsequently, the expiration date is calculated by adding the basic upper limit time Ts corresponding to the ID code to the current time, the obtained expiration date is written in the authentication card C by the write unit 220, and the read authentication card C is read. It is activated (S550). From this point in time until the expiration date arrives, the authentication card C can be used by the access control device M arranged in the access control area. Then, the expiration date newly written in the authentication card C and the fact that the attendance registration has been completed are displayed on the operation display unit 240, and the processing is terminated. On the other hand, when the current time is not included in the basic time zone Hs (No in S530), the operation display unit 240 displays an error message indicating that the employee is not allowed to work (S510).

  Also, in the determination process of S520, if it is determined that the setting mode is the leave mode (“leave mode” in S520), the current time is registered as the leave time corresponding to the ID code in the attendance history, and the leave is registered. (S560). Subsequently, an expiration date is calculated by subtracting a predetermined time from the current time, the obtained expiration date is written in the authentication card C by the write unit 220, and the read authentication card C is invalidated (S570). At this point, the authentication card C is made unusable by the access control device M arranged in the access control area. Note that the current time may be a new expiration date instead of the past time as the expiration date. Then, the operation display unit 240 displays that the work registration has been completed, and the process ends.

FIG. 9 is a flowchart showing whether or not the entrance / exit control device M can enter and leave the room and the expiration date extension process.
When an employee engaged in a managed building enters or leaves each room in the restricted traffic area, he / she reads the card information by bringing the authentication card C close to the reader / writer RW provided near the door D with the electric lock, A traffic request operation is performed to the access control apparatus M.

When the reader / writer RW receives the passage request signal (including the ID code and expiration date) when the reader / writer RW reads the card information (ID code) of the authentication card C, the entrance / exit control device M determines whether to enter or leave the room. To start.
First, it is verified whether or not the ID code of the read authentication card matches the ID code registered in the storage unit 330 (S600). If they do not match (No in S600), it is determined that the user is not a valid user, the reader / writer RW is notified that the authentication has failed, and the process is terminated (S610).

If the ID codes match (Yes in S600), it is then determined whether the read authentication card C expiration date is a valid time (S620). If it is determined that the current time is within the expiration date (Yes in S620), it is determined that the user is a valid user, and the reader / writer RW is notified of the successful authentication (S630). At the same time, the door D with the electric lock is unlocked to allow the user to pass physically (S640), and the process ends. When the passage is permitted, the ID code, the identification information of the reader / writer RW, and the time of entering / leaving may be transmitted to the management apparatus P as one entry / exit data.
On the other hand, if it is determined that the current time has passed the expiration date (No in S620), the expiration date extension process by overtime work is performed as necessary. First, it is determined whether or not a predetermined time has elapsed since the expiration date (S650). If the predetermined time has already passed since the expiration date (No in S650), it is determined that the employee is not properly working overtime, and the reader / writer RW is notified that the authentication has failed and processed. Is finished (S610).

If it is within a predetermined time from the expiration timing (Yes in S650), there is a possibility that the employee is a legally overtime employee, so the approval information is obtained from the attendance registration device S (S660). It is determined whether the overtime work of the employee is approved, that is, whether the approval information is registered (S670). If the overtime approval is not approved (No in S670), it is determined that the employee is not properly working overtime, the reader / writer RW is notified that the authentication has failed, and the process is terminated (S610). At this time, it is advisable to display a warning prompting approval for overtime work.
If the employee's overtime work has been approved (Yes in S670), the approval overtime time Ta of the acquired approval information is added to the current expiration date read from the authentication card C to calculate a new expiration date. The new expiration date is written to the authentication card C, and the expiration date of the authentication card C is extended based on the approved overtime available time (S680).

Then, it is determined whether or not the current time is within the new expiration date (S690). If the current time is within the new expiration date (Yes in S690), the employee is determined to be a valid user, The reader / writer RW is notified of the successful authentication (S630). At the same time, the door D with the electric lock is unlocked to allow the user to pass physically (S640), and the process ends.
On the other hand, if it is determined that the current time has passed the new expiration date (No in S620), it is determined that the employee is not a legally overtime employee because it has exceeded the approved overtime hours. Then, the reader / writer RW is notified that the authentication has failed, and the process is terminated (S610).

  As described above, when the employee makes a traffic request when moving within a building, the entrance / exit management system according to the present embodiment responds to the approval content if the overtime work is approved for the employee. Rewrite the expiration date of the authentication card to extend the usable period. For this reason, the employee does not need to perform a special operation for extending the expiration date, and can easily and strictly extend the expiration date during overtime work. As a result, since the smooth operation is possible even if the expiration date written at the time of attendance registration is minimized, the risk of unauthorized use of the lost or stolen authentication card can be reduced.

In the above embodiment, the approved overtime hours Ta are the upper limit hours for overtime work, but the upper end time (for example, “22:00”) or overtime hours (for example, “18: (00 to 22:00 "). In this case, in the process of extending the expiration date in the access control apparatus, the expiration date calculation process is omitted, and the time of the approved overtime time Ta is written as it is to the authentication card as a new expiration date.
Further, instead of registering the approval overtime hours Ta as approval information, only approval to allow overtime work may be registered. In this case, the extension means treats the time for extending the expiration date as uniform (for example, 4 hours), calculates the expiration date, and writes it to the authentication card.

In the above embodiment, the new expiration date is calculated by adding the approval overtime time Ta to the current expiration date. However, the approval overtime time Ta is added to the time when the extension process is performed and a new expiration date is added. An expiration date may be calculated.
Further, the basic time zone Hs and the basic upper limit time Ts may be integrated and used as a time zone during which normal work is possible (for example, 8:30 to 18:00 on weekdays). In this case, the attendance registration for the above time period is validated, and the scheduled end time “18:00” is written in the authentication card as the expiration date.

In the above embodiment, the extension process is executed on the condition that the expiration date is within a predetermined time. However, the extension process may be simply executed on the condition that the expiration date has expired. . In this case, the process of S650 in FIG. 9 is omitted, and if it is determined in S620 that it is not within the expiration date, the process proceeds to S660 and approval information is acquired.
Further, in the above-described embodiment, the expiration date extension process is performed for a pass request by an expired authentication card. However, the extension process is also executed for a pass request by an authentication card within the expiration date. May be. In this case, instead of the processing of S620 and S650 of FIG. 9, it is determined whether it is within the expiration date or within a predetermined time after the expiration date, and if it is within the expiration date or within the predetermined time after the expiration date, the approval information is obtained. The configuration is to acquire. Alternatively, the processes of S620 and S650 in FIG. 9 are omitted, and if the ID code matches in S600, the process proceeds to S660 and approval information is acquired.

In the above embodiment, the basic management information is set in advance for each employee. However, the basic management information may be configured to be common to a plurality of employees. Similarly, the approval information may be shared by a plurality of employees.
In the above embodiment, the approval information is registered in the attendance registration device, but may be registered in the management device. In this case, the configuration is such that the approval information is downloaded from the management device in the expiration date extension process in the access control device.
Moreover, in the said embodiment, although the entrance / exit control apparatus is set as the structure which acquires approval information, when a traffic request | requirement is received, it is good also as a structure which acquires at a predetermined timing timely and registers into a memory | storage part.

It is a figure which shows the operation image of the entrance / exit management system of this embodiment. It is a figure which shows the whole structure of the entrance / exit management system of this embodiment. It is a figure which shows the structure of the card | curd for authentication which the employee has. It is a functional block diagram of an attendance registration apparatus. It is a figure which shows an example of the management information memorize | stored in the memory | storage part of an attendance registration apparatus. It is a figure which shows the connection relationship with the functional block diagram of an access control apparatus, a door with an electric lock, and a card reader. It is a flowchart which shows the operation | movement at the time of switching the attendance / leaving mode in an attendance registration apparatus. It is a flowchart which shows the attendance and attendance registration process in an attendance registration apparatus. It is a flowchart which shows the entrance / exit decision | availability determination in the in / out control apparatus M, and the extension process of an expiration date.

Explanation of symbols

S ... attendance registration device M ... access control device RW ... reader / writer D ... door P with electric lock ... management device 210 ... lead unit 220 ... write unit 230 ... Clock unit 240 ... operation display unit 250 ... LAN communication unit 260 ... storage unit 270 ... control unit 272 ... collation means 274 ... determination means 276 ... approval registration means 310 ... -Electric lock control unit 320-Reader communication unit 330-Storage unit 340-Clock unit 350-LAN communication unit 360-Control unit 362-Verification unit 364-Extension unit

Claims (4)

A read / write unit for reading an identification code and an expiration date from a storage medium possessed by a user, and writing an expiration date to the storage medium;
A code storage unit that stores an identification code of a storage medium possessed by the user in advance;
An attendance registration unit that, when reading an identification code from the storage medium at the time of a user's attendance, calculates an expiration date for validating the storage medium and writes the expiration date to the storage medium from the read / write unit;
It is determined whether or not the storage medium is regular, and when it is determined that the storage medium is regular, a control unit that permits a user to pass through ,
When that allow the overtime work of a Subscriber is inputted has a approval management unit in correspondence with the identification code of the storage medium to which the user possesses registers the authorization information on the new expiration date, and,
The controller is
Collation means for collating whether the identification code of the storage medium read by the read / write unit is registered in the code storage unit and whether the expiration date of the storage medium has passed, and determining whether the storage medium is a legitimate storage medium When,
When the pre-term memory medium reads the identification code and the expiration date, when the authorization information corresponding to the storage medium to the approval manager is registered, a new and to the storage medium from the Lee Dora Ito portion expiration An extension means for performing the extension process of the expiration date by writing
An access control system characterized by comprising: A read / write unit for reading an identification code and an expiration date from a storage medium possessed by a user, and writing an expiration date to the storage medium;
A code storage unit that stores an identification code of a storage medium possessed by the user in advance;
It is determined whether or not the storage medium is regular, and when it is determined that the storage medium is regular, a control unit that permits a user to pass through,
An approval management unit for registering approval information related to a new expiration date corresponding to an identification code of a storage medium possessed by the user when the user is permitted to work overtime;
The controller is
Collation means for collating whether the identification code of the storage medium read by the read / write unit is registered in the code storage unit and whether the expiration date of the storage medium has passed, and determining whether the storage medium is a legitimate storage medium When,
When the identification code and the expiration date are read from the storage medium, the read / write is within a predetermined time from the expiration date and the approval information corresponding to the storage medium is registered in the approval management unit. Extending means for extending the expiration date by writing a new expiration date from the storage unit to the storage medium,
An access control system characterized by comprising:   The entry / exit management system according to claim 1, wherein the new expiration date of the approval information is calculated from an approval overtime time that is an upper limit of a time during which a user is allowed to work overtime. Furthermore, it is operated by the approver to allow overtime work of the user, configured to include an approval operation unit transmitting the authorization information on inputted user to the authorization management unit, any of claims 1 to 3 access control system according to any.

Images