JP5373577B2 - Access control system - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To appropriately limit entrance into an inhibition target area according to entrance/exit into/from an inhibition cause area. <P>SOLUTION: An entrance/exit management system managing the entrance/exit of a user in a plurality of areas including the inhibition target area and the inhibition cause area includes: a plurality of code acquisition means for being disposed at each entrance/exit unit of the plurality of areas and acquiring an identification code of the user; an inhibition state storage means for storing a user who is in an entrance inhibition state to the inhibition target area; an inhibition setting means for setting and registering the user into the inhibition state if the code acquisition means acquires the identification code of the user in entering into the inhibition cause area and also releasing the inhibition state of the user after the elapse of a predetermined inhibition time period from the acquisition of the identification code of the user by the code acquisition means in exiting from the inhibition cause area; and a passage determination means for determining permission/non-permission of passage on the basis of whether the user is in the inhibition state when the code acquisition means acquires the identification code of the user in entering into the inhibition target area. <P>COPYRIGHT: (C)2011,JPO&amp;INPIT

Description

  The present invention relates to an entry / exit management system for managing entry / exit of a plurality of areas by a user, and more particularly, to a system for improving user convenience.

  Conventionally, in various facilities such as research and development facilities, access control systems have been installed to ensure security. In a typical access control system, an electric lock is installed at the entrance / exit of the area to be managed. Then, the identification code is acquired from the user's card or the like, and if the identification code is successfully authenticated, the electric lock is released. Thereby, only users registered in advance are allowed to enter and exit the target area. Recently, with the demand for higher security, a technique using biometric information such as a fingerprint as an identification code has been put into practical use.

  Further, as a further application example of the access management system, an access management system has been proposed in which a user leaving a specific area is restricted from entering another specific area according to the nature of the area. For example, the access control system disclosed in the following patent document is applied to a clean room that requires high cleanliness in order to conduct a microbiological experiment or the like, and a facility having a pollutant room in a contaminated environment that impedes cleanliness of the clean room. In addition, it is possible to prevent contamination of the clean room by prohibiting the user who has left the contaminated room from entering the clean room for a certain period of time until the contamination level falls to an acceptable level.

JP 2007-193396 A JP 2006-97386 A

However, in the above-mentioned entrance / exit management system, entry to the clean room is prohibited for a certain period from the time when the contaminant room is left, so if the user neglects the authentication operation when leaving the contaminant room, the user's There is a possibility that the clean room may be contaminated by entering the room. Further, the above entrance / exit management system is not assumed to be applied to a facility having a plurality of contaminant rooms having different contamination levels.
In view of the above problems, an object of the present invention is to provide an entrance / exit management system capable of reliably performing entry restriction into a restricted area such as the above-described clean room.

In order to achieve the above object, the access control system of the present invention is provided in each access section of the plurality of areas in the access management system for managing user access in a plurality of areas including the prohibited area and the prohibited cause area. A plurality of code acquisition means for acquiring a user identification code, a prohibited state storage means for storing a user who is prohibited from entering the prohibited area, and the code acquisition means when entering the prohibited cause area When the user obtains the user's identification code, the user is set and registered in the prohibited state, and when the user exits the prohibited cause area, the code obtaining means obtains the user's identification code and then a predetermined prohibited time When the time has elapsed, the prohibition setting means for canceling the prohibition state of the user and the code acquisition means acquire the user identification code when entering the prohibited area. When characterized by the user and a traffic determination means for determining whether to permit the passage based on whether said disabled state.
Here, the prohibited cause area is an area having a prohibited cause that should be prohibited from moving to the prohibited area. Further, the prohibition time is appropriately set in advance so that the cause of the prohibition disappears with the passage of time. For example, the prohibited area is a microbial room that is affected by contamination, the prohibited cause area is a contaminated room where contaminants adhere to users in the area, and the prohibited time left the contaminated room This is the time required for the user's contamination level to drop to an acceptable level.

  According to such a configuration, when the user enters the prohibited cause area, the user is registered as a prohibited user in the prohibited state storage unit, and the prohibited state is set. When the user leaves the prohibition cause area and the prohibition time elapses, the registration of the prohibition state storage unit is deleted and the prohibition state is released. Therefore, entry to the prohibited area is restricted after leaving the prohibited area, and the user leaves the prohibited area without using his / her identification code. Will be restricted from entering the prohibited area regardless of the elapsed time. In this way, according to the present invention, it is possible to reliably prevent a user who has entered the prohibited cause area from entering the prohibited area before the contamination level falls to the allowable level. Can be protected.

Further, in the above configuration, the prohibition time is preset for each prohibition cause area, and the prohibition setting means is set when the code acquisition means acquires the user's identification code when leaving the first prohibition cause area. When the prohibition time for the second prohibited cause area is being timed and a long time has elapsed between the prohibited time for the first prohibited cause area and the remaining prohibited time for the second prohibited cause area Cancel the prohibited state of the user.
According to such a configuration, when a plurality of prohibited states with different prohibited times are registered, the one with the longest remaining time in each prohibited state works effectively, and the user enters the prohibited area. Restrict entry. Therefore, even if entry / exit to another prohibited cause area occurs while entering / exiting one prohibited cause area, the user must enter the prohibited area before the contamination level of the user sufficiently decreases. Can be surely prevented.

Further, in the above-described configuration, when the passage determination unit determines to reject the passage of the user in the prohibited state, the remaining time display unit displays the remaining time in the prohibited state.
According to such a configuration, when a user in a prohibited state tries to enter the prohibited area, the remaining time until the prohibited state is released can be known, and the level of contamination such as an air shower room is reduced. It is possible to determine whether to use a possible facility, wait until the ban time elapses, or depending on the urgency of use of the banned area, and a highly convenient system operation is possible.

Further, in the above configuration, the plurality of areas further include a cancellation cause area, and when the code acquisition means acquires a user identification code when leaving the cancellation cause area, the prohibition state remaining for the user remains. A prohibition canceling means for canceling the prohibition state regardless of time is provided.
According to such a configuration, when the user leaves the cancellation cause area, the registration of the prohibition state storage unit is deleted and the prohibition state is canceled even before the prohibition time has elapsed. Therefore, after using the prohibited cause area, the user can use the prohibited target area at an early stage by using the cancellation cause area. Here, the prohibition cancellation cause area is, for example, an air shower room that lowers the contamination level of users in the area.

  ADVANTAGE OF THE INVENTION According to this invention, while being able to prevent reliably the approach to the prohibition area by the user whose prohibition cause is not eliminated, the entrance / exit management system which can perform highly convenient system operation can be provided.

It is a figure showing the whole access control system composition concerning an embodiment of the invention. It is a functional block diagram which shows the structure of a card reader. It is a functional block diagram which shows the structure of an electric lock control apparatus. It is a figure which shows an example of an area management table. It is a figure which shows an example of a restriction | limiting setting table. It is a figure which shows an example of a prohibition table. It is a figure which shows an example of a prohibition table. It is a flowchart which shows the update process of the prohibition table in the control part of an electric lock control apparatus. It is a flowchart which shows the authentication control process in the control part of an electric lock control apparatus.

DESCRIPTION OF EXEMPLARY EMBODIMENTS Hereinafter, preferred embodiments of the invention will be described with reference to the drawings.
FIG. 1 shows the overall configuration of the access control system of the present embodiment and the operation image in the management target facility. In the example of FIG. 1, areas (areas) A to F are provided in the management target facility. Area A is a microorganism room (clean room) that needs to maintain a high level of cleanliness. Area B and area C are pollutant chambers where contaminants that are inappropriately mixed into the microorganism chamber are present in the air. Area D is an air shower room for removing contaminants attached to the user by air shower. Area E is a shared passage for moving between areas A to D, and area F is outside the building.

  In the access management system of the present embodiment, entry into the area A (microorganism room) is normally permitted. However, when entering the area B or area C (contaminant room), the predetermined prohibition necessary for the contaminants adhering to the user to drop to a certain level that does not affect the area A after leaving the area. Until the time passes, the user is prohibited from entering the area A. Even before the prohibition time has passed, if the area D (air shower room) is passed, the entrance prohibition state to the area A is cancelled.

  Here, the area A is an area where a user who enters the area B and the area C is prohibited from entering, and corresponds to a prohibited area according to the present invention. Area B and area C are areas having the cause of the prohibition of entry into area A, and correspond to the prohibition cause area of the present invention. Area D is an area having a cause for canceling entry prohibition to area A, and corresponds to a cancel cause area of the present invention.

  In FIG. 1, an door with electric lock D1 and two card readers CR01 and CR02 are provided at an entrance / exit of area A (a boundary between area A and area E). The door D1 with an electric lock is a partition that physically restricts movement between areas, and the card readers CR01 and CR02 are devices that read an identification code from an ID card possessed by a user who enters and exits a managed facility. The card reader CR01 is provided outside the area A and is used when entering the area A. On the other hand, the card reader CR02 is provided inside the area A, and is used when leaving the area A. The electric lock door D1 and the card readers CR01 and CR02 are connected to an electric lock control device M1, and the electric lock control device M1 is installed at an appropriate place such as a wall surface.

  Similarly, doors with electric locks, card readers, and electric lock control devices are provided at the entrances and exits of other areas. That is, the door D2 with electric lock and the card readers CR03 and CR04 are installed at the entrance / exit of the area B (the boundary between the area B and the area E), and these are connected to the electric lock control device M2. At the entrance / exit of area C (between area C and area E), an electric lock door D3 and a card reader CR05 / CR06 are installed, and these are connected to the electric lock control device M3. At the entrance / exit of area D (between area D and area E), an electric lock door D4 and card readers CR07 and CR08 are installed, and these are connected to an electric lock control device M4. Furthermore, an electric lock door D5 and card readers CR09 and CR10 are installed at the boundary between the area E and the area F, and these are connected to the electric lock control device M5.

In the following description, the doors D1 to D5 with electric locks are generically referred to as doors D with electric locks, the card readers CR01 to CR10 are generically referred to as card readers CR, and the electric lock control devices M1 to M5 are generically designated. When doing so, it is called an electric lock control device M.

Next, each component of the access management system of this embodiment is demonstrated.
The door D with an electric lock is provided with an electric lock. The electric lock is normally maintained in a locked state, and is unlocked for a predetermined time when an unlock signal is received from the electric lock control device M. The electric lock is not unlocked and the user cannot move between the areas until the card reader CR reads the identification code stored in the ID card possessed by the user. When the user causes the card reader CR to read the identification code, the identification code is sent from the card reader CR to the electric lock control device M. The identification code is verified by the electric lock control device M, and if the authentication is successful, the electric lock is unlocked.

  FIG. 2 is a functional block diagram showing the configuration of the card reader CR. The card reader CR communicates with the control unit 10 configured by an MPU, the storage unit 12 that stores an address code that identifies each card reader CR, a processing program, various parameters, data, and the like, and the electric lock control device M. A communication interface 14, a reading unit 16 that reads an identification code that is personal identification information of a user stored in an ID card, and a display unit 18 that includes a liquid crystal monitor, an LED, and the like.

When the identification code of the user read by the reading unit is input, the control unit 10 controls the electric lock via the communication interface 14 as authentication request information together with the address code for identifying the input identification code. Transmit to device M.
The ID card may be a magnetic card, an IC card, a wireless card (transmitter), or the like. From the viewpoint of system convenience, the ID card is preferably a contactless card.

  FIG. 3 is a functional block diagram showing the configuration of the electric lock control device M. The electric lock control device M includes a control unit 20 including an MPU, a time measuring unit 22 having a function of measuring time, an address code for identifying each electric lock control device M, management information, a processing program, and various parameters. , A storage unit 24 for storing data, the communication interface 26 for communicating with the card reader CR and the electric lock to be managed and the other electric lock control device M, and the locking and unlocking of the door D with the electric lock. And an electric lock control unit 28 for controlling the lock. Note that the functions of the prohibition setting unit, the prohibition release unit, and the traffic determination unit of the present invention are realized by processing of the control unit 20.

In the storage unit 24 of the electric lock control device M, (1) qualification table, (2) area management table, (3) restriction setting table, and (4) prohibition table are stored as management information.
The qualification table is a table in which identification codes of users who are permitted to operate each card reader CR are recorded. The qualification table is used for collation of the identification code read by the card reader CR.

  As shown in FIG. 4, the area management table is an area in which the address code of each electric lock control device M that manages each card reader CR, the address code of each card reader CR, and the card reader CR is installed. It is a table which matches a certain movement origin area, the electric lock corresponding to card reader CR, and the movement destination area after operating card reader CR. It can be said that the destination area is an area where traffic is restricted by the door D with the electric lock corresponding to the card reader CR. The contents of the area management table are not limited to the data structure of FIG. 4 as long as the area to be entered / exited and whether the area is entered or exited are associated with the card reader CR and the electric lock D.

  Moreover, in this Embodiment, each electric lock control apparatus M has memorize | stored the table regarding its own control object in FIG. For example, the electric lock control device M1 stores a table for the card readers CR1 and CR2 in FIG. However, each electric lock control apparatus M may memorize | store the information of the whole system containing the control object of the other electric lock control apparatus M. The same applies to the restriction setting table of FIG. 5 and the prohibition table of FIG.

  The restriction setting table associates entry / exit to / from a specific area (prohibition cause area / cancellation cause area) as a restriction information and a predetermined area (prohibition target area) for which entry is prohibited or canceled in accordance with this. Have information. FIG. 5 shows an example of the restriction setting table. As shown in FIG. 5, the restriction setting table includes the address code of the operation target card reader CR (cause card reader), the address code of the restriction target card reader CR (target card reader), and the restriction type (prohibition). / Release) and a prohibited time are associated with each other. Prohibition time is the time for which entry to the prohibited area is prohibited after leaving the prohibited cause area. Here, the contamination level is set to a level where there is no problem even if entering the area A regulated by the card reader CR01. This is the time it takes to decrease.

In the following description, the cause card reader whose restriction type is “prohibited”, the target card reader, information associated with the prohibition time is referred to as prohibition information, and the cause card reader whose restriction type is “release”, Information associated with the target card reader and the prohibition time is referred to as prohibition release information.
Using the restriction setting table, the electric lock control device M transmits restriction instruction information including the read user identification code and restriction information to the electric lock control device M managing the target card reader. If prohibition information corresponding to the operated card reader CR is set, prohibition instruction information is transmitted to prohibit the operation of the predetermined card reader CR, and if prohibition release information is set, the prohibition already set is transmitted. The release instruction information is transmitted to cancel.

  Specifically, in the restriction setting table of the electric lock control device M2 in the area B which is a contaminant room, the area A is a prohibited object corresponding to the area B. Therefore, the card readers CR03 and CR04 are set as the cause card readers and the card reader CR01 (for entering the area A) is set as the target card reader in order to issue a prohibition instruction when entering and leaving the area B. The restriction type is “prohibited” and the prohibition time is set to “10 hours”.

In addition, in the restriction setting table of the electric lock control device M3 in the area C which is a contaminant room as in the area B, the same prohibition information as that in the restriction setting table of the electric lock control device M2 is set, but only the prohibition time is set. “20 hours” is set. This is because the contamination level of area C is higher than that of area B, and the time required for the contamination level to fall to an acceptable level is longer than that of area B.
In addition, in the restriction setting table of the electric lock control device M4 in area D, area A is subject to prohibition cancellation corresponding to area D. Accordingly, in order to issue a prohibition release instruction when leaving the area D, the card reader CR08 (for exiting the area D) is set as the cause card reader, and the card reader CR01 (for entering the area A) is set as the target card reader. The type of is “Release”.

  Next, the prohibition table will be described. The prohibition table is a table for recording users in a prohibited state (hereinafter referred to as “prohibited users”). The prohibited state is a state where the use of an ID card by a prohibited user is prohibited in the card reader CR for entering a predetermined area. While the above restriction setting table is set in advance, the prohibition table is sequentially rewritten by the processing of the control unit 20.

FIG. 6 shows an example of the prohibition table. In the prohibition table, prohibition data in which an identification code of a prohibited user, a card reader CR (target card reader) to be prohibited, and a cause area in which entry / exit that has been prohibited is associated, is registered. The prohibition data includes a prohibition remaining time that represents the remaining time until the prohibition state is released, and a timer state that indicates whether or not the prohibition time is being measured by the timing unit. In the prohibition remaining time, the prohibition time defined in the limit setting table is set as the entry into and exit from area B or area C, which is the prohibition cause area, and the prohibition time starts to be counted in the timekeeping unit when leaving. And decreases according to the count.
In the example of FIG. 6, the remaining time until the prohibition state is canceled is expressed by the remaining prohibition time and the timer state, but other information may be used, for example, specified in the limit setting table. The prohibited time itself and the elapsed time after the time counting unit starts counting may be used. In addition, although the prohibited remaining time is shown in minutes, this is for the sake of convenience and, of course, is measured and managed in seconds.

FIG. 6 shows a prohibition table of the electric lock control device M1 in the area A at a certain point in time, and prohibition data relating to the user X (ID0246), the user Y (ID0122), and the user Z (ID0358) are registered. . In any of the prohibited data, the card reader CR01 is the target card reader. In this case, the user X, the user Y, and the user Z cannot enter the area A using the card reader CR01.
The prohibition data related to user X (ID0246) shows that the cause area is area B, the prohibition remaining time is “10 hours”, the timer state is “OFF”, and user X detects entry into area B. The exit has not been detected yet, and the timer for canceling the prohibition is not operating. On the other hand, the prohibition data regarding the user Y (ID0122) and the user Z (ID0358) are the cause area is area C, the prohibition remaining time is “3 hours 56 minutes”, “11 hours 35 minutes”, and the timer state is “ON”. In this situation, the user Y and the user Z detect the exit from the area D, the timer is activated, and a certain time has elapsed.

  The various management tables stored in the storage unit 24 of the electric lock control device M have been described above. The control unit 20 uses these tables to execute a prohibition table update process and an authentication control process. Hereinafter, each control process in the control unit will be described with reference to the flowcharts of FIGS. 8 and 9.

First, the prohibition table update process in the control unit 20 will be described. FIG. 8 is a flowchart showing the prohibition table update process.
The control unit 20 starts this processing when receiving the restriction instruction information from another electric lock control device M. If other restriction instruction information is received during the following update process, a plurality of update processes are executed in parallel.

  First, the control unit 20 determines whether it is prohibition instruction information or cancellation instruction information based on the restriction type included in the received restriction instruction information (S100). If it is release instruction information (No in S100), the user has left the air shower room (area D) and the contamination level is below the allowable level. To enter the microorganism room (area A). Therefore, the control unit 20 determines whether or not prohibited data relating to the user specified by the release instruction information is registered in the prohibition table (S102), and deletes the prohibited data if registered (S104). When a plurality of prohibited data are registered, all the prohibited data related to the user is deleted.

  On the other hand, if the received control instruction information is prohibition instruction information (Yes in S100), the user is entering or leaving the contaminated room (area B or area C) and is in a contaminated state. Depending on the setting, the prohibited state related to the user is set or registered. Based on the address code of the cause card reader included in the prohibition instruction information, the control unit 20 identifies whether the entry is into or out of the prohibition cause area (S106). When recognizing entry into the prohibition cause area, the prohibition data relating to the user specified by the prohibition instruction information is newly registered in the prohibition table (S108). When registering prohibition data, an area corresponding to the destination of the cause card reader is registered in the cause area. In addition, the prohibition time specified by the prohibition instruction information is registered as the prohibition remaining time, and the timer state is set to OFF. At this time, if there is prohibited data (including data in which the timer state is ON) having the same user and prohibited cause area, the prohibited data is overwritten and registered. In addition, even if the users are the same, if there is prohibited data with different prohibition cause areas, the prohibited data is newly registered separately without overwriting registration.

Further, when the control unit 20 recognizes the exit from the prohibition cause area in S106, the control unit 20 determines whether or not the prohibition data by entering the prohibition cause area is registered in the prohibition table (S110). That is, it is determined whether or not there is prohibited data whose user and cause area are the same and whose timer state is OFF. When there is no corresponding prohibition data, it means that the user has neglected the card authentication operation when entering the prohibition cause area, and has entered the prohibition table as in S108. To do.
When it is determined in S110 that there is corresponding prohibited data, or after new prohibited data is registered in S112, the timer unit 22 starts counting the prohibited time (S114). That is, the prohibition remaining time is counted with the passage of time from the time of leaving the contaminant room (area B or area C) which is the prohibition cause area. Then, the timer state on the prohibition data is updated to ON, and the remaining prohibition time is sequentially rewritten according to the elapsed time information obtained from the timer unit 22.

Subsequently, the control unit 20 performs the process of S104 by receiving the release instruction information separately until the user leaves the prohibition cause area and the prohibition time elapses until the remaining prohibition time becomes zero. It is then determined whether or not the prohibited data of the user has been deleted (S116 to S118). If the prohibition cancellation process is performed during the prohibition time measurement (Yes in S116), the user is no longer in the prohibition state, and the process ends.
On the other hand, if the prohibition time elapses without the prohibition cancellation process and the prohibition remaining time becomes 0 (Yes in S118), it can be considered that the influence of the contaminant due to the entry / exit of the prohibition cause area has been eliminated. Only the prohibited data is deleted and the process is terminated. As a result, if other prohibition data related to the user is not registered, the prohibition state of the user has been canceled, and thereafter, until the user enters or exits the contaminant room (area B or area C) again. Entering the microorganism room (area A) is possible.

Next, the authentication control process in the control unit 20 will be described. FIG. 9 is a flowchart showing an authentication control process executed in response to a user authentication request.
When the user puts the ID card in the card reader CR and the card reader reads the identification code, authentication request information including the address code of the card reader CR and the read identification code is transferred from the card reader CR to the electric lock control device M. . The control unit 20 starts this processing when receiving authentication request information from the card reader CR to be managed.

  First, based on the identification code included in the authentication request information, the control unit 20 confirms the traffic qualification of the user who requests authentication (S200). Here, the received identification code is collated with a qualification table stored in the storage unit 24. If the identification code that matches the received identification code is not registered in the qualification table, the authentication result is NG. In this case, the electric lock is not unlocked, the authentication result is sent to the card reader CR via the communication interface 26, and the authentication result (authentication NG display) is output to the display unit 18 of the card reader CR (S202).

If the received identification code matches the identification code in the qualification table in step S200, it is subsequently determined whether or not the user requesting authentication is in a prohibited state (S204). Here, the prohibition table of the storage unit 24 is referred to, and it is determined whether or not prohibition data relating to the received identification code and authentication request target card reader CR (target card reader) is registered.
If the control unit 20 determines that it is not in the prohibited state, the authentication result is OK. In this case, the electric lock control unit 28 transmits an unlock signal to the door D with the electric lock to unlock the electric lock, and also sends an authentication result to the card reader CR via the communication interface 26. The authentication result (authentication OK display) is output to the display unit 18 (S206). In the door D with the electric lock, the electric lock is unlocked according to the unlock signal.

Next, the control unit 20 determines whether or not there is a restriction target card reader CR that should be prohibited or uninhibited corresponding to the card reader CR (S208). Here, it is determined whether or not restriction information in which the authentication request target card reader CR is the cause card reader is set in the restriction setting table of the storage unit 24. If there is no restriction information, the series of authentication control processing is terminated.
When there is restriction information, the control unit 20 determines whether the restriction information indicates prohibition information or prohibition release information depending on whether the restriction type is prohibition or cancellation (S210).

  If the restriction information indicates prohibition information, the control unit 20 transmits prohibition instruction information including the identification code of the user to the electric lock control device M that manages the target card reader specified by the prohibition information. The process is terminated (S212). Taking the restriction setting table shown in FIG. 5 as an example, a case where a user having an ID card enters area B, which is a contaminant room, will be described. The electric lock control device M2 confirms that the prohibition information is set in the restriction setting table for the card reader CR03 that is the transmission source of the authentication request information. Then, prohibition instruction information is sent to the electric lock control device M1 that manages the card reader CR01 that is the target card reader. When specifying the transmission destination electric lock control device M, the area management table may be referred to. The electric lock control device M that manages the target card reader may be stored in advance in the restriction setting table. Similarly, when the user leaves the area B, the prohibition instruction information is transmitted to the electric lock control device M1, but is different from the prohibition instruction information at the time of entry in that the cause card reader is the card reader CR04. As described in the prohibition table update process of FIG. 8, the transmission-destination electric lock control device M starts counting the prohibition time based on the prohibition instruction information accompanying the exit. For this reason, it can be said that the prohibition instruction information transmitted at the time of leaving is, in other words, the prohibition time measurement start instruction information.

On the other hand, if the restriction information indicates the prohibition release information in S210, the release instruction information including the identification code of the user is transmitted to the corresponding electric lock control device M, and the process ends (S214). . Taking the restriction setting table shown in FIG. 5 as an example, a case where a user with an ID card leaves the area D, which is a contaminant room, will be described. The electric lock control device M4 confirms that the prohibition release information is set in the restriction setting table for the card reader CR08 that is the transmission source of the authentication request information. Then, release instruction information is sent to the electric lock control device M1 that manages the card reader CR01 that is the target card reader.
As described above, the prohibition table update process of FIG. 8 is executed in the electric lock control device M that has received the prohibition instruction information transmitted in S212 or the release instruction information transmitted in S214.

  In the determination process of S204, the control unit 20 determines that the received identification code and prohibition data relating to the authentication request target card reader CR (target card reader) are registered in the prohibition table, and that the user is in a prohibited state. If the authentication result has been reached (Yes in S204), the authentication result is NG. Subsequently, it is determined whether or not a plurality of corresponding prohibition data is registered (S216). Here, it is determined whether or not there are a plurality of prohibited data having different cause areas in the prohibited table.

If a plurality of prohibited data is registered, the prohibited data having the longest prohibited time is selected (S218), and the authentication result is sent to the card reader CR together with the prohibited time remaining of the selected prohibited data. The authentication result (authentication NG display) and the prohibited remaining time are output to the display unit 18 (S220 to S222). If the user has not started counting the prohibited time with any of the prohibited data (timer state is OFF), an error message indicating no leaving data may be displayed without displaying the remaining time. This is because the authentication operation at the time of leaving in the cause area is neglected, and the elapsed time after leaving the pollutant room is unknown. In this case, the user performs the authentication operation again with the card reader CR that has neglected the authentication operation, or asks the system administrator to delete the prohibition data manually by explaining the circumstances.
On the other hand, when only one prohibited data is registered (No in S216), the authentication result is transmitted together with the remaining prohibited time of the prohibited data, and the authentication result and the remaining prohibited time are output by the card reader CR (S220- S222).

  The processing of S216 to S222 will be described with a specific example with reference to FIG. FIG. 7A shows a situation in which prohibition data 1 is registered at the time of the prohibition table shown in FIG. 6, that is, user Z (ID0358) has already entered and exited area C, which is a contaminant room. The prohibition table when the person Z enters the area B which is another contaminant room is shown. Focusing on the user Z (ID0358), the prohibition data 1 for the area C has a remaining prohibition time of “11 hours and 35 minutes”, and the prohibition data 2 for the area B has not yet started counting the prohibition time. Therefore, at this time, it is unclear which of the prohibition data 1 and the prohibition data 2 expires first.

  FIG. 7B shows a prohibition table when the user Z leaves the area B four hours after the time shown in FIG. 7A and two hours have passed. Since a total of 6 hours have elapsed since the time point of FIG. 7A, the prohibited remaining time of the prohibited data 1 has advanced to “5 hours and 35 minutes”. On the other hand, in the prohibition data 2, only 2 hours have passed since the exit from the area B, so the remaining prohibition time has advanced only to “8 hours 00 minutes”. As described above, when a plurality of prohibited data are registered, which of the prohibited data is valid until later depends on the exit timing.

  Therefore, when the control unit 20 determines that a plurality of prohibited data is registered in the determination process of S216, the control unit 20 selects the prohibited data 2 having a long remaining prohibited time at the time of FIG. Then, the card reader CR01 notifies that the remaining time of the prohibited state is “8:00 hours”. Accordingly, the user Z can accurately know the remaining time until the user can enter the area A which is the microorganism room, and the user Z can cancel the prohibited state using the air shower room (area D) or the prohibited time. You can consider how to wait until the expiration of.

  As described above, according to the access control system of the present embodiment, the microorganism room (area) that is the prohibited area when the user enters the contaminant room (area B and area C) that is the prohibited cause area. When entry to A) is prohibited and the exit from the pollutant chamber is started, the prohibition time until the contamination level falls to an acceptable level is started, and the prohibition of entry into the microorganism chamber is canceled after the prohibition time has elapsed. For this reason, even when a user leaves the contaminated room, the system cannot grasp the user's contamination level by taking advantage of another user's authentication operation and exiting together. Since the user is prohibited from entering the microorganism room regardless of the elapsed time, the microorganism room can be prevented from being contaminated.

Also, even in an environment where there are multiple pollutant rooms with different prohibited times, the longest prohibited data due to entering and exiting each pollutant room works effectively to prohibit entry into the microorganism room. Therefore, it is possible to reliably prevent the user from entering the microorganism room before the contamination level of the user is sufficiently lowered.
In addition, when a prohibited user tries to enter the microorganism room, the longest remaining prohibited time, that is, the time until the contamination level of the user is truly reduced and entry into the microorganism room is allowed, is used. Since the notification is made to the person, it is possible to know exactly how much time is left to cancel the prohibited state. Therefore, depending on the urgency of using the microorganism room, the user can appropriately select whether to use the air shower room or wait for the prohibition time to elapse, and a highly convenient system operation is possible.

  In the above-described embodiment, the distributed access management system in which the electric lock control device M is provided in each access unit has been described. However, a system configuration in which centralized management is performed by one electric lock control device M may be employed. In this case, an electric lock control device for centralized management is connected to all electric lock-equipped doors D1 to D5 and all card readers CR01 to CR10, stores a management table for all areas, and performs control processing using these tables. I do. Thereby, communication between control apparatuses and related processing can be reduced.

  In the above-described embodiment, the card reader CR is configured as the code acquisition unit of the present invention, but the code acquisition unit may be configured to acquire a code from an object other than the card. For example, the code acquisition means may be a device that acquires biometric information such as an individual's fingerprint, palm print, voice print, and iris. The acquired biometric information is processed as an identification code for identifying an individual. At this time, of course, the biometric information may be converted into an appropriate code. A plurality of code acquisition means may be used in combination. For example, an ID card identification code and biometric information as an identification code may be used in combination. In this case, a fingerprint reader or the like is provided together with the card reader CR.

D1-D5 door with electric lock, CR1-CR8 card reader, 10 control unit, 12 storage unit, 14 communication interface, 16 reading unit, 18 display unit, M1-M5 electric lock control device, 20 control unit, 22 timing unit, 24 storage unit, 26 communication interface, 28 electric lock control unit

Claims (4)

In an access control system that manages user access in multiple areas including prohibited areas and prohibited areas
A plurality of code acquisition means for acquiring a user identification code provided at each access section of the plurality of areas;
Prohibition state storage means for storing users who are prohibited from entering the prohibited area;
When the code acquisition means acquires the user's identification code when entering the prohibited cause area, the code acquisition means sets and registers the user in the prohibited state, and when the user exits the prohibited cause area, the code acquisition means When the identification code is acquired, a predetermined prohibition time is started and when the prohibition time has elapsed, prohibition setting means for canceling the prohibition state of the user,
When the code acquisition means acquires a user identification code when entering the prohibited area, a passage determination means for determining whether the user is permitted based on whether the user is in the prohibited state, or
An access control system characterized by comprising The prohibited time is preset for each prohibited cause area,
When the prohibition setting means is measuring the prohibition time for the second prohibition cause area when the code acquisition means acquires the user identification code when leaving the first prohibition cause area, The entrance / exit management system according to claim 1, wherein the user's prohibited state is canceled when a long period of time has elapsed between the prohibited time in the prohibited cause area and the remaining time of the prohibited time in the second prohibited cause area. .   The access control system according to claim 1, further comprising a remaining time display unit configured to display a remaining time in the prohibited state when the passage determining unit determines to reject the passage of the user in the prohibited state. Further, the plurality of areas include a release cause area,
And a prohibition canceling means for canceling the prohibition state regardless of the remaining time of the prohibition state applied to the user when the code acquisition unit acquires the user's identification code when leaving the release cause area. The access control system according to 1 to 3.

Images