JP5653720B2 - Attendance management system - Google Patents

Attendance management system Download PDF

Info

Publication number
JP5653720B2
JP5653720B2 JP2010246213A JP2010246213A JP5653720B2 JP 5653720 B2 JP5653720 B2 JP 5653720B2 JP 2010246213 A JP2010246213 A JP 2010246213A JP 2010246213 A JP2010246213 A JP 2010246213A JP 5653720 B2 JP5653720 B2 JP 5653720B2
Authority
JP
Japan
Prior art keywords
participant
terminal
means
ad hoc
authentication
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Expired - Fee Related
Application number
JP2010246213A
Other languages
Japanese (ja)
Other versions
JP2012098919A (en
Inventor
真生 大畑
真生 大畑
太田 賢
賢 太田
稲村 浩
浩 稲村
Original Assignee
株式会社Nttドコモ
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by 株式会社Nttドコモ filed Critical 株式会社Nttドコモ
Priority to JP2010246213A priority Critical patent/JP5653720B2/en
Publication of JP2012098919A publication Critical patent/JP2012098919A/en
Application granted granted Critical
Publication of JP5653720B2 publication Critical patent/JP5653720B2/en
Application status is Expired - Fee Related legal-status Critical
Anticipated expiration legal-status Critical

Links

Images

Description

  The present invention relates to an attendance management system.

A technique for authenticating a user using an electronic device when entering a specific area has been proposed.
In Patent Document 1, the face image of a person stored in the storage unit of the portable terminal is transmitted to the facility terminal, the face image is successfully authenticated at the facility terminal, and is visually confirmed by the facility staff. It has been proposed to transmit admission permission information from the facility terminal to the admission gate device if the button indicating that the button is pressed.
In Patent Document 2, when a person passes through a gate provided in each section of a facility, identification information is acquired from the person, and the acquired identification information is collated with information registered in advance so that the person is authorized. It has been proposed to determine whether or not the user is a user and manage the location of the person based on information obtained at the time of collation.

JP 2006-146696 A JP 2004-32326 A

The following requirements must be met in order to ascertain the status of staff attendance at schools, companies, and meetings. First, it must be proved that a person was present in a particular area. Second, it must be proved that a person existed at a certain time. Third, it must be proved that the person is a specific person.
The present invention aims to prove that a specific person was present in a specific area at a specific time.

The attendance management system according to claim 1 includes a participant terminal, an administrator terminal, and a server device, and the participant terminal acquires identification information unique to the administrator terminal from the administrator terminal. Triggered by the acquisition of identification information by the acquisition means, the ad hoc communication means for performing wireless ad hoc communication with the administrator terminal, the communication means for performing communication with the server device, Establishing means for establishing a communication link with the administrator terminal by means of communication means, wherein the administrator terminal includes ad hoc communication means for performing wireless ad hoc communication with the participant terminal, and the ad hoc communication means. Determination information transmitting means for transmitting determination information for determining whether or not a communication link with the participant terminal has been established to the server device; Serial storage means for storing participant information unique to the participant corresponding to the participant terminal, the determination information receiving means for receiving the determination information from the administrator terminal, the determination information received by the determination information receiving means If it indicates the establishment of the communication link, using the participant information stored in the storage means, if the authentication means for authenticating the participant terminal carrier, and the authentication by the authentication means, And a permission unit that permits access by the communication unit of the participant terminal to the own device.

The attendance management system according to claim 2 is the attendance management system according to claim 1, wherein the authentication unit obtains the participant information input to the participant terminal, the obtained participant information, and the storage If the participant information stored in the means matches, it is determined that the authentication is successful.
The attendance management system according to claim 3 is the attendance management system according to claim 2, wherein the server device transmits the participant information to the administrator terminal, and the carrier is authentic from the administrator terminal. It is characterized in that it has a sub-authentication unit that judges that the authentication has succeeded when it is notified.

An attendance management system according to a fourth aspect of the present invention is the attendance management system according to any one of the first to third aspects, wherein the participant terminal acquires the identification information by the acquisition means and then receives the server within a predetermined time. If it is not notified from the device that the authentication is successful, access from the participant terminal to the server device is not permitted.
The attendance management system according to claim 5 is the attendance management system according to any one of claims 1 to 4, wherein the ad hoc communication means of the participant terminal is notified from the server device that the authentication is successful. The communication link with the ad hoc communication means of the administrator terminal is disconnected after a certain time.

The attendance management system according to claim 6 is the attendance management system according to claim 5, wherein the ad hoc communication means of the participant terminal is a predetermined time after the communication link with the ad hoc communication means of the administrator terminal is disconnected. It is characterized in that communication with the ad hoc communication means of the manager terminal is attempted every time.
The attendance management system according to claim 7 is the attendance management system according to claim 5 or 6, wherein the participant terminal has a detecting means for detecting acceleration, and the ad hoc communication means is detected by the detecting means. If the measured acceleration exceeds a threshold, communication with the ad hoc communication means of the manager terminal is attempted.

  The attendance management system according to claim 8 is the attendance management system according to any one of claims 1 to 7, wherein the participant terminal includes mobile communication means for performing communication via a mobile communication network, and the server device Determining means for acquiring base station information indicating a base station corresponding to the participant terminal, and determining whether the participant terminal exists in a predetermined area based on the base station information; If the authentication by the authentication means is successful and the determination means determines that the participant terminal is present in a predetermined area, the permission means includes information stored in the self-device. The access from the participant terminal is permitted.

  According to the present invention, it can be proved that a specific person exists in a specific area at a specific time.

It is a figure which shows the whole structure of embodiment. 2 is a diagram illustrating a hardware configuration of a terminal 100. FIG. 2 is a diagram illustrating a hardware configuration of an ad hoc communication unit 120. FIG. 2 is a diagram illustrating a hardware configuration of a server device 500. FIG. It is a figure which shows the content of the participant database 510. FIG. It is a figure which shows the content of the lecture database 520. FIG. It is a figure which shows the operation | movement for confirming attendance of a participant at the time of the start of a lecture. It is a figure which shows the process in step A04 and A05 in detail. It is a figure which shows a process in case the link key is already registered. It is a figure which shows the image displayed on the display part 108A. It is a figure which shows the image displayed on the display part 108A. It is a figure which shows the procedure of the authentication using base station information. It is a figure which shows the procedure of presence confirmation of participant terminal 100B. It is a figure which shows the procedure of presence confirmation of participant terminal 100B.

(1) Embodiment An embodiment of the present invention will be described.
(1.1) Configuration FIG. 1 is a diagram illustrating the overall configuration of the embodiment. The main components of the attendance management system 1 are an administrator terminal 100A, a participant terminal 100B, a mobile communication network 200, a communication network 400, and a server device 500.
The administrator terminal 100A and the participant terminal 100B are mobile phones that perform communication in accordance with, for example, an IMT-2000 (International Mobile Telecommunication 2000) communication standard. Since the administrator terminal 100A and the participant terminal 100B have the same hardware configuration, the administrator terminal 100A and the participant terminal 100B are collectively referred to as the terminal 100 when they are not distinguished from each other. When distinguishing between the administrator terminal 100A and the participant terminal 100B, A and B are added to the reference numerals of the respective components. In practice, there are a plurality of administrator terminals 100A and participant terminals 100B, which are not shown.

  In the present embodiment, an example in which the attendance management system 1 is applied to attendance management of university lectures is shown. In this example, a university teacher is an administrator and carries the administrator terminal 100A. A student is a participant and carries the participant terminal 100B. The terminal 100 may lend an attendance management program to the administrator and the participant, or may install an application program for attendance management on the terminal 100 personally owned by the administrator and the participant.

The mobile communication network 200 includes a base station 210 and an exchange 220, and mediates call and packet communication by the terminal 100. Actually, a number of base stations 210 and an exchange 220 other than those shown are provided, but they are not shown.
The base station 210 constantly transmits area identification information for uniquely identifying the location registration area to which the base station 210 itself belongs. If the received area identification information is different from the previously received area identification information, the terminal 100 requests the base station 210 for location registration. Then, the area identification information indicating the location registration area is registered in the exchange 220 in association with the telephone number of the terminal 100. When there is an incoming call addressed to a certain telephone number, the exchange 220 transmits an incoming call notification addressed to the telephone number to all the base stations 210 belonging to the location registration area corresponding to the telephone number, and these base stations 210 simultaneously sends incoming notifications addressed to the telephone number.
The communication network 400 is a communication network for performing communication according to a communication protocol such as TCP / IP (Transmission Control Protocol / Internet Protocol) or HTTP (HyperText Transfer Protocol).
The gateway server 300 performs communication protocol conversion between the mobile communication network 200 and the communication network 400.

  FIG. 2 is a diagram illustrating a hardware configuration of the terminal 100. The terminal 100 includes a control unit 101, a storage unit 102, a mobile packet communication unit 103, a call unit 104, a microphone 105, a speaker 106, an operation unit 107, a display unit 108, an antenna 109, an IC (Integrated Circuit) card terminal 110, and an imaging unit. 112 and an ad hoc communication unit 120.

The control unit 101 includes a CPU (Central Processing Unit), a ROM (Read Only Memory), and a RAM (Random Access Memory) (all not shown), and the CPU executes an OS (Operating System) stored in the ROM. Thus, the operation of the terminal 100 is controlled.
The storage unit 102 is, for example, a semiconductor memory that retains storage even when power is not supplied, and stores application programs, data received via the mobile communication network 200, and the like.
An attendance management application AP-A for the administrator is stored in the storage unit 102A of the administrator terminal 100A. On the other hand, the attendance management application AP-B for participants is stored in the storage unit 102B of the participant terminal 100B. The operation realized by each application will be described later.

  The mobile packet communication unit 103 is a communication interface for connecting the terminal 100 to the mobile communication network 200 and performing packet communication. The mobile packet communication unit 103 generates a packet based on the data supplied from the control unit 101 and transmits the packet to the base station 210 via the antenna 109. Further, when the packet transmitted from the base station 210 is received by the antenna 109, the mobile packet communication unit 103 connects the packets and supplies them to the control unit 101.

The call unit 104 is a communication interface for connecting the terminal 100 to the mobile communication network 200 to make a call. The microphone 105 supplies an audio signal representing the input audio to the call unit 104, and the call unit 104 transmits this audio signal to the base station 210. In addition, the communication unit 104 supplies the audio signal received from the base station 210 to the speaker 106, and the speaker 106 converts the audio signal into audio and outputs it.
The operation unit 107 is a group of operators for the user of the terminal 100 to operate the terminal 100, and is displayed on the display unit 108, power on / off, call start / end, number / symbol / character input. There are controls for selecting menus. The display unit 108 is a liquid crystal display device, for example, and displays an image based on the image data supplied from the control unit 101.

  The IC card 111 is a storage medium in which a semiconductor memory called a UIM (User Identity Module), a USIM (Universal Subscriber Identity Module), or the like, which holds memory even when no power is supplied, is embedded in a resin plate. The IC card 111 is loaned from the communication carrier to a user who has signed a contract regarding the use of the mobile phone with the communication carrier. The IC card 111 stores a user identifier for uniquely identifying a user, a carrier identifier for uniquely identifying a communication carrier, a telephone number, and the like. When the IC card 111 is inserted into the IC card terminal 110 and the power is turned on, the control unit 101 permits a call or packet communication.

  The imaging unit 112 is a digital camera including an imaging element such as a CCD (Charge Coupled Device) and a lens (both not shown). The imaging unit 112 converts light incident through the lens into a signal by the CCD, and supplies this signal to the control unit 101. When the user orders imaging using the operation unit 107, the control unit 101 generates image data based on a signal supplied from the CCD and stores the image data in the storage unit 102.

FIG. 3 is a diagram illustrating a hardware configuration of the ad hoc communication unit 120. The ad hoc communication unit 120 includes a control unit 121, a storage unit 122, and a communication unit 123. The ad hoc communication unit 120 directly performs wireless communication with the ad hoc communication unit 120 of another terminal 100 without requiring relaying by a communication facility such as a base station or an exchange. The ad hoc communication unit 120 of this embodiment is based on a standard defined by Bluetooth (registered trademark), that is, IEEE 802.15.1.
The control unit 121 has a CPU, a ROM, and a RAM (all not shown), and controls the operation of the ad hoc communication unit 120 by the CPU executing a program stored in the ROM. The ROM stores a Bluetooth address (hereinafter referred to as “Bt address”) that is a communication address unique to the ad hoc communication unit 120.

The storage unit 122 is a semiconductor memory that retains memory even when no power is supplied. The link key generated by pairing with the ad hoc communication unit 120 of another terminal 100 is used as the Bt address of the other terminal 100. Store in association with each other.
The communication unit 123 is a transceiver that transmits and receives radio signals to and from the ad hoc communication unit 120 of another terminal 100.
The ad hoc communication unit 120A of the administrator terminal 100A is configured to perform communication in parallel with the ad hoc communication units 120B of the plurality of participant terminals 100B by time division slot multiplexing. That is, the ad hoc communication unit 120A operates as a master, and the ad hoc communication unit 120B operates as a slave.

  FIG. 4 is a diagram illustrating a hardware configuration of the server device 500. The server device 500 includes a control unit 501, a storage unit 502, and a communication unit 503. The control unit 501 includes a CPU, a ROM, and a RAM (all not shown). The storage unit 502 is a hard disk storage device, for example, and stores an OS and application programs. The control unit 501 controls the operation of the server device 500 by executing the OS stored in the storage unit 502. The communication unit 503 is a communication interface for connecting the server device 500 to the communication network 400. Server device 500 communicates with terminal 100 via communication network 400 and mobile communication network 200.

  The storage unit 502 stores a participant database 510. FIG. 5 is a diagram showing the contents of the participant database 510. Participant information unique to the participant is written in the participant database 510 for each participant terminal 100B. The participant information includes a Bt address, ID (Identification), password, participant name, affiliation, contact information, and face image data representing an image obtained by photographing the participant's face. The ID and password are, for example, a combination of a multi-digit number and an alphabet. The password is information that only a limited range of persons can know, such as the participant who corresponds to the password and the system administrator of the attendance management system 1. Affiliation is, for example, the department to which the participant belongs. The contact information is the telephone number of the participant.

The storage unit 502 stores a lecture database 520. FIG. 6 is a diagram showing the contents of the lecture database 520. The lecture database 520 is created for each subject of the lecture, and stores the lecture date and time, participant ID, and remarks in association with each other. The ID of the participant whose attendance has been confirmed by an operation described later is written. In the remarks column, for example, a record of the speech of the participant during the lecture is written.
The storage unit 502 stores an application AP-S for sharing information regarding a lecture between the administrator terminal 100A and the participant terminal 100B. In response to a request from the terminal 100, the application AP-S reads information from the participant database 510 or the lecture database 520 and transmits the information to the terminal 100. Further, the application AP-S writes information transmitted from the terminal 100 in the remarks column of the lecture database 520 in response to a request from the terminal 100.

(1.2) Operation The operation of the attendance management system 1 will be described.
Note that communication between the administrator terminal 100A and the participant terminal 100B is performed using the ad hoc communication unit 120 of each other. On the other hand, when the administrator terminal 100 </ b> A and the participant terminal 100 </ b> B communicate with the server device 500, communication is performed via the mobile communication network 200 using each mobile packet communication unit 103.

FIG. 7 is a diagram showing an operation for confirming attendance of participants at the start of a lecture.
In step A01, the manager who arrives at the classroom instructs the manager terminal 100A to start the application AP-A. The control unit 101A executes the following process by executing the application AP-A. First, the control unit 101A generates identification information. The identification information is a PIN (Personal Identification Number) code generated by inputting the current date and time into a predetermined algorithm. The control unit 101A stores the generated PIN code in the storage unit 102A. Then, the control unit 101A generates a QR code (registered trademark) based on the URL (Uniform Resource Locator) indicating the storage location of the application AP-S on the server device 500 and the generated PIN code, and this QR code. Is displayed on the display unit 108A. Then, the administrator places the administrator terminal 100A on which the QR code is displayed on the teacher's desk. Alternatively, the administrator may carry the administrator terminal 100A and wait at the entrance of the classroom.

In Step A02, the control unit 101A transmits an HTTP request for requesting activation of the application AP-S to the server device 500.
In step A03, the control unit 501 of the server device 500 reads the application AP-S from the storage unit 502 and activates it. The operation of the server device 500 described below is performed by the control unit 501 executing the application AP-S.
In steps A04 and A05, a communication link is established between the administrator terminal 100A and the participant terminal 100B.

FIG. 8 is a diagram showing in detail the processing in steps A04 and A05.
In step B01, the control unit 121A of the ad hoc communication unit 120A broadcasts an IQ packet to make an inquiry for searching for a slave. At this stage, the ad hoc communication unit 120B has not started processing for communication.
In step B02, the participant commands the participant terminal 100B to image the QR code displayed on the administrator terminal 100A. Then, the imaging unit 112B captures the QR code, the control unit 101B decodes the QR code to acquire a URL and a PIN code, stores the URL in the storage unit 102A, and stores the PIN code in the storage unit 122A. . In addition, an activation command for the application AP-B is embedded in the QR code, and the control unit 101B activates the application AP-B when the QR code is read. The control unit 101B executes the following process by executing the application AP-B.

In step B03, when the control unit 121B starts scanning the IQ packet and receives the IQ packet, the control unit 121B reads the Bt address from the ROM in the control unit 121B, and transmits this Bt address to the ad hoc communication unit 120A. To do. The control unit 121A stores the received Bt address in the storage unit 122A.
In step B04, the control unit 121A reads the Bt address from the ROM in the control unit 121A, and transmits this to the ad hoc communication unit 120B. The control unit 121B stores the received Bt address in the storage unit 122B.

  In step B05, the control unit 121A determines whether or not the link key corresponding to the Bt address received from the ad hoc communication unit 120B has been registered. Specifically, if the received Bt address and the link key are associated with each other and stored in the storage unit 122A, it is determined that the link key has been registered (step B05: YES), and 1 in FIG. Proceed to On the other hand, if the received Bt address and the link key are not stored in association with each other, it is determined that the link key has not been registered (step B05: NO), and the process proceeds to step B06.

In step B06, the control unit 121A generates a random number, stores the random number in the storage unit 122A, and transmits the random number to the ad hoc communication unit 120B.
In step B07, the control unit 121A calculates an initialization key by the algorithm AR-1 using the PIN code generated in step A01, the code length of the PIN code, and the random number generated in step B06.
In step B08, the control unit 121B calculates an initialization key by the algorithm AR-1 using the PIN code acquired in step B02, the code length of the PIN code, and the random number received in step B06.

In step B09, the control unit 121A generates a random number, generates a link key by the algorithm AR-2 using the random number and the Bt address of the ad hoc communication unit 120A, and stores the link key in the storage unit 122A. Let
In Step B10, the control unit 121A transmits an exclusive OR operation result of the generated link key and initialization key to the ad hoc communication unit 120B. The control unit 121B calculates a link key by calculating an exclusive OR of the received calculation result and the initialization key, and stores the link key in the storage unit 122B.

In step B11, the control unit 121A generates a random number, stores the random number in the storage unit 122A, and transmits the random number to the ad hoc communication unit 120B.
In step B12, the control unit 121A calculates a parameter using the algorithm AR-3 using the generated random number, the Bt address of the ad hoc communication unit 120B received in step B03, and the link key calculated in step B09. The parameter is stored in the storage unit 122A.
In step B13, the control unit 121B calculates a parameter by the algorithm AR-3 using the random number received in step B11, the Bt address of the ad hoc communication unit 120B, and the link key calculated in step B10. Is stored in the storage unit 122B.
In step B14, the control unit 121B transmits the parameter calculated in step B13 to the ad hoc communication unit 120A. Further, the control unit 121B generates a random number, stores the random number in the storage unit 122B, and transmits the random number to the ad hoc communication unit 120A.

In step B15, the control unit 121A compares the parameter calculated in step B12 with the parameter received in step B14. If the two parameters do not match (step B15: NO), the process proceeds to step B16, and the control unit 121A notifies the ad hoc communication unit 120B that the authentication is unsuccessful, and the process ends. In this case, the control unit 101B displays that the authentication is unsuccessful on the display unit 108B, and ends the process.
On the other hand, if the two parameters match (step B15: YES), the process proceeds to step B17, where the control unit 121A, the random number received in step B14, the Bt address of the ad hoc communication unit 120A, and the link calculated in step B09. Using the key, a parameter is calculated by the algorithm AR-3, and this parameter is stored in the storage unit 122A.
In step B18, the control unit 121B uses the random number generated in step B14, the Bt address of the ad hoc communication unit 120A received in step B04, and the link key calculated in step B10 to execute a parameter using the algorithm AR-3. And this parameter is stored in the storage unit 122B.
In step B19, the control unit 121A transmits the parameter calculated in step B17 to the ad hoc communication unit 120B.

In step B20, the control unit 121B compares the parameter calculated in step B18 with the parameter received in step B19. If the two parameters match (step B20: YES), the process proceeds to step B22 to notify the ad hoc communication unit 120A that the authentication is successful. As described above, the communication link between the terminals 100 is established. Thereafter, the process proceeds to steps A06 and A07 in FIG.
On the other hand, if the two parameters do not match (step B20: NO), the process proceeds to step B21, and the control unit 121B displays on the display unit 108B that the authentication is unsuccessful, indicating that the authentication is unsuccessful. The ad hoc communication unit 120A is notified, and the process ends. In this case, the control unit 101A displays that the authentication is unsuccessful on the display unit 108A, and ends the process.

FIG. 9 is a diagram illustrating processing when it is determined in step B05 that the link key has been registered.
In step C01, the control unit 121A requests the ad hoc communication unit 120B to transmit a PIN code.
In step C02, the control unit 121B transmits the PIN code acquired in step B02 to the ad hoc communication unit 120A.
In step C03, the control unit 121A compares the PIN code received from the ad hoc communication unit 120B with the PIN code generated in step A01. If the two match (step C03: YES), the process proceeds to step C05. The ad hoc communication unit 120B is notified that the authentication is successful. As described above, the communication link between the terminals 100 is established. Thereafter, the process proceeds to steps A06 and A07 in FIG.
On the other hand, if the two do not match (step C03: NO), the process proceeds to step C04, where the control unit 121A displays on the display unit 108A that the authentication is unsuccessful, and ad hoc communication indicates that the authentication is unsuccessful. This is notified to the unit 120B and the process is terminated. In this case, the control unit 101B displays that the authentication is unsuccessful on the display unit 108B, and ends the process.

The above is the content of the process for establishing a communication link between the administrator terminal 100A and the participant terminal 100B.
In addition, in the actual establishment of the communication link between the terminals 100, in addition to the above, the exchange of several packets is defined by the standard, but only the main points of the processing are shown here. In the present embodiment, an example in which a single key is used as a link key has been described. However, a decryption key may be used. In addition, if the participant terminal 100B is configured to establish a communication link for wireless ad hoc communication between the terminals 100 when the participant terminal 100B acquires the PIN code from the administrator terminal 100A, the process is performed in any procedure. Also good.

Returning to the description of FIG.
In Step A06, the control unit 101A transmits an HTTP request including the Bt address of the ad hoc communication unit 120A and the Bt address of the ad hoc communication unit 120B received in Step B03 of FIG.
In Step A07, the control unit 101B transmits an HTTP request including the Bt address of the ad hoc communication unit 120B and the Bt address of the ad hoc communication unit 120A received in Step B04 of FIG.
In step A08, the control unit 501 compares the Bt address pair received in step A06 with the Bt address pair received in step A07. If the two do not match (step A08: NO), the process proceeds to step A09, and the control unit 501 transmits an HTTP response indicating that the authentication is unsuccessful to the participant terminal 100B. In this case, the control unit 101B displays that the authentication is unsuccessful on the display unit 108B, and ends the process. On the other hand, if the two match (step A08: YES), the process proceeds to step A10.

In step A10, the control unit 501 transmits an HTTP request for requesting an ID and a password to the participant terminal 100B.
In step A11, when the participant inputs the ID and password to the participant terminal 100B, the control unit 101B transmits an HTTP response including the input ID and password to the server device 500.
In step A <b> 12, the control unit 501 determines whether a combination of ID and password that matches the ID and password received from the participant terminal 100 </ b> B is stored in the participant database 510. When the matching ID and password are not stored (step A12: NO), the process proceeds to step A13, and the control unit 501 notifies the participant terminal 100B that the authentication is unsuccessful. In this case, the control unit 101B displays that the authentication is unsuccessful on the display unit 108B, and ends the process. On the other hand, if a matching ID and password are stored (step A12: YES), the process proceeds to step A14.

  In step A14, the control unit 501 reads the participant information corresponding to the ID received in step A11 from the participant database 510, and transmits an HTTP request including this participant information to the administrator terminal 100A. Then, the control unit 101A displays the image shown in FIG. 10 on the display unit 108A. That is, the control unit 101A displays an image obtained by photographing a participant's name, affiliation, and a participant's face based on the received participant information. In addition to this image, the control unit 101A displays a sentence asking whether or not the user is a regular participant, and “YES” and “NO” operators. The administrator visually compares the displayed face image with the participant's face. If it is determined that they match, the administrator moves the cursor to the “YES” operator and clicks. If it is determined that they do not match, click “NO”. If any of the controls is clicked, the process proceeds to step A15, and the control unit 101A transmits an HTTP response including information for identifying the clicked control to the server device 500.

In step A16, the control unit 501 determines whether the received HTTP response indicates “YES” or “NO”. If “NO” (step A16: NO), the process proceeds to step A17, and the control unit 501 notifies the participant terminal 100B that the authentication is unsuccessful. In this case, the control unit 101B displays that the authentication is unsuccessful on the display unit 108B, and ends the process. On the other hand, if “YES” (step A16: YES), the process proceeds to step A18.
In step A18, the control unit 501 notifies the participant terminal 100B that the authentication has been successful. Then, the control unit 101B displays the image shown in FIG. 11 on the display unit 108B. That is, a sentence indicating that the authentication is successful, a sentence indicating that the authentication is registered in the lecture database, and an operator “OK” are displayed. When the participant clicks “OK”, the control unit 101 </ b> B proceeds to step A <b> 19 and transmits an HTTP request requesting registration in the lecture database to the server device 500.

In step A20, the control unit 501 writes the ID received in step A11 in the lecture database 520.
In step A21, the control unit 501 transmits an HTTP response notifying permission to participate in the lecture to the participant terminal 100B. If this HTTP response is transmitted, the control unit 501 permits the participant terminal 100B to read the participant database 510 and the lecture database 520.
In step A22, the control unit 121B disconnects the communication link between the ad hoc communication unit 120B and the ad hoc communication unit 120A after a predetermined time (for example, after 10 seconds) from the permission notification in step A21.
As described above, access from the participant terminal 100B to the participant database 510 and the lecture database 520 on the server device 500 is permitted.

As described above, the present embodiment is configured such that the administrator terminal 100A authenticates the participant terminal 100B by performing wireless ad hoc communication using Bluetooth between the administrator terminal 100A and the participant terminal 100B. . Since the administrator who carries the administrator terminal 100A is a university teacher, it is guaranteed that the administrator is in the classroom at the time when the lecture is scheduled. Further, if a communication link for wireless ad hoc communication is established between the terminals 100, it is proved that the distance between the terminals 100 is within a range where radio waves for wireless ad hoc communication can reach. The range is, for example, about 10 meters in the normal Bluetooth standard, and about 100 meters at the maximum.
Furthermore, since this embodiment is configured to perform authentication using an ID and a password, it is proved that the person carrying the participant terminal 100B is a specific person.
Therefore, according to this embodiment, it can be proved that a specific person exists in a specific area at a specific time.

(2) Modifications Modifications shown below may be combined with each other.
(2.1) Modification 1
In the above embodiment, an example using Bluetooth as a method of wireless ad hoc communication between the terminals 100 has been described, but other methods may be used. For example, an ad hoc mode of a wireless local area network (LAN) according to the IEEE 802.11b standard may be used.
Further, instead of wireless ad hoc communication, authentication using a non-contact type IC card may be used. In this case, an IC card reader that communicates with the non-contact type IC card is incorporated into the administrator terminal 100A, and a non-contact type IC card is incorporated into the participant terminal 100B. For example, the following processing is performed instead of steps A04 to A09 in FIG. I do. That is, if the participant terminal 100B reads the QR code displayed on the administrator terminal 100A, the participant terminal 100B notifies the administrator terminal 100A that the reading is completed. Next, the administrator terminal 100A transmits an inquiry signal for the contactless IC card, and the contactless IC card transmits an identifier unique to the card to the administrator terminal 100A. If the identifier that matches the received identifier is stored in the participant database 510, the administrator terminal 100A proceeds to step A10.
In the above embodiment, the example in which the communication between the terminal 100 and the server device 500 is performed via the mobile communication network 200 has been described. However, the server device 500 may be provided with a wireless ad hoc communication function and may perform communication by wireless ad hoc communication. .
In the above-described embodiment, an example in which the URL and PIN code are obtained by capturing the QR code displayed on the administrator terminal 100A by the imaging unit 112B of the participant terminal 100B has been described. However, the URL and PIN code are obtained by other methods. May be obtained. For example, the URL and the PIN code may be transmitted from the administrator terminal 100A to the participant terminal 100B by communication using infrared rays.

(2.2) Modification 2
In the above embodiment, the Bt address of the participant terminal 100B transmitted from the participant terminal 100B to the server device 500 and the Bt of the participant terminal 100B transmitted from the participant terminal 100B to the server device 500 via the administrator terminal 100A. Although the server device 500 has shown an example in which the server device 500 determines whether or not the communication link between the terminals 100 has been established by checking the address with the address, it is determined whether or not the communication link between the terminals 100 has been established. You may make it determine by another method. For example, the administrator terminal 100A may notify the server device 500 whether or not a communication link with the participant terminal 100B has been established. In short, the server device 500 may acquire information for determining whether or not a communication link for ad hoc communication between the terminals 100 has been established from at least the administrator terminal 100A.

(2.3) Modification 3
A configuration for confirming that the participant terminal 100B exists in a specific area using the base station information obtained from the base station 210 of the mobile communication network 200 may be added. FIG. 12 is a diagram illustrating an authentication procedure using base station information. The base station 210 is, for example, a femtocell base station with a radius of approximately several tens of meters. The storage unit 502 of the server device 500 stores in advance base station information for uniquely identifying the base station 210 corresponding to the location of the classroom.
In step D01, the control unit 501 transmits an HTTP request for requesting base station information to the participant terminal 100B.
In step D02, control unit 101B transmits a request for requesting base station information via mobile packet communication unit 103. Then, the base station 210 that has received this request transmits the base station information of the base station 210 to the participant terminal 100B.

In step D03, the control unit 101B transmits the base station information received from the base station 210 to the server device 500.
In step D04, the control unit 501 determines whether the base station information received from the participant terminal 100B matches the base station information stored in the storage unit 502, and if it matches (step D04: YES). ), It is determined that the participant terminal 100B exists in the classroom, and the authentication ends. On the other hand, if they do not match (step D04: NO), the fact that the authentication is unsuccessful is transmitted to the participant terminal 100B.
The authentication procedure shown in FIG. 12 may be incorporated in any part of FIG. For example, it may be incorporated after step A08 in FIG.
Further, the server device 500 acquires base station information from both the administrator terminal 100A and the participant terminal 100B, and determines that the participant terminal 100B exists in the classroom if both the base station information match. May be.

(2.4) Modification 4
After the process shown in FIG. 7 is completed, the administrator terminal 100A may periodically confirm the presence of the participant terminal 100B. FIG. 13 is a diagram showing a procedure for confirming the presence of the participant terminal 100B. Here, the ad hoc communication unit 120A continues to broadcast the IQ packet.
In step E01, the control unit 101B determines whether or not a predetermined time has elapsed.
If the predetermined time has elapsed (step E01: YES), the process proceeds to step E02, and when the control unit 121B starts scanning and receives the IQ packet, the Bt address of the ad hoc communication unit 120B is transmitted to the ad hoc communication unit 120A. To do.
In step E03, the control unit 121A transmits the Bt address of the ad hoc communication unit 120A to the ad hoc communication unit 120B.

In step E04, the control unit 121B transmits the PIN code acquired in step B02 to the ad hoc communication unit 120A.
In step E05, the control unit 121A compares the received PIN code with the PIN code generated in step A01. If the two do not match (step E05: NO), the ad hoc communication unit 120B has not been authenticated successfully. Notify that there is. In this case, the control unit 101B displays that the authentication is unsuccessful on the display unit 108B, and ends the process.
On the other hand, if the PIN codes match (step E05: YES), the ad hoc communication unit 120B is notified that the authentication is successful. If the notification is received, the control unit 121B returns to Step E01.
According to this configuration, it is possible to confirm the location of the student during the lecture. For example, if a student who has been confirmed to attend before the start of the lecture leaves the classroom during the lecture, the administrator can know that the student is absent from the classroom.
In order to perform the above communication during the lecture, it is necessary that the radio wave intensity of the ad hoc communication unit 120 is adjusted so that the entire classroom is included in the radio wave reach of the ad hoc communication unit 120.

(2.5) Modification 5
After the process shown in FIG. 7 is completed, the administrator terminal 100A may confirm the presence of the participant terminal 100B when acceleration exceeding a threshold value occurs in the participant terminal 100B. FIG. 14 is a diagram illustrating a procedure for confirming the presence of the participant terminal 100B. Here, the ad hoc communication unit 120A continues to broadcast the IQ packet. The participant terminal 100B is provided with an acceleration sensor (not shown) that detects acceleration generated in the participant terminal 100B.
In step F01, the control unit 101B determines whether an acceleration exceeding a predetermined threshold has occurred.
If acceleration exceeding the threshold value occurs (step F01: YES), the process proceeds to step F02. The processing from steps F02 to F07 is the same as the processing from steps E02 to E07 shown in FIG.
According to this configuration, for example, when a student who is confirmed to attend before starting a lecture leaves the classroom during the lecture, the administrator can know that the student is absent from the classroom.

(2.6) Modification 6
A time limit may be provided for the authentication process. For example, the control unit 121B monitors the time elapsed after the QR code is read by the imaging unit 112, and if the server device 500 does not notify that the authentication is successful within a certain time from the QR code reading, the control unit 121B 101B is requested to end the application AP-B. Then, the control unit 101B terminates the application AP-B being executed and disconnects the communication link of the ad hoc communication unit 120B.

(2.7) Modification 7
In the above embodiment, an example of the PIN code generated by inputting the current date and time to a predetermined algorithm is shown as the identification information generated by the administrator terminal 100A, but other information may be used as the identification information. Good. For example, the current date and time itself or a random number may be used. Further, the identification information previously assigned to the administrator terminal 100A may always be used. In short, any information may be used as identification information as long as the information is unique to the administrator terminal 100A.
In the above-described embodiment, an example in which authentication using an ID and a password and authentication using a face image has been described. However, authentication using a face image may not be performed. Alternatively, authentication may be performed using information other than the face image. For example, even if the participant's date of birth is registered in the participant database 510 as one piece of participant information, and the administrator asks the person carrying the participant terminal 100B for the date of birth, authentication is performed. Good. Alternatively, if the server device 500 receives the Bt address of the participant terminal 100B from the administrator terminal 100A and the participant terminal 100B in steps A06 and A07, the Bt address is stored in the participant database 510 in association with the ID. It may be determined whether or not it is stored, and if it is stored, permission to participate in the lecture may be notified to the participant terminal 100B.

(2.8) Modification 8
Only when the manager approves, the participant terminal 100B may function as the manager terminal 100A. For example, in addition to the application AP-B, the application AP-A is stored in the participant terminal 100B of the participant trusted by the administrator, and normally only the application AP-B is executed. Then, when the activation command for the application AP-A is received from the administrator terminal 100A, the control unit 101B of the participant terminal 100B activates the application AP-A. In this way, the participant terminal 100B of the participant trusted by the administrator can be made to perform the function of the administrator terminal 100A. In this case, the participant terminal 100B functions as the administrator terminal 100A in FIG. 7, establishes a communication link for wireless ad hoc communication with the other participant terminals 100B, and carries the other participant terminals 100B. Authenticate.

(2.9) Modification 9
In the above-described embodiment, the example in which the attendance management system 1 is applied to school attendance management has been described. For example, the present invention may be applied to attendance management of employees belonging to a company, or may be applied to attendance management of a meeting that recruits participants for a specific purpose. In short, the attendance management system 1 may be applied to any target as long as the purpose is to manage attendance of predetermined personnel.

(2.10) Modification 10
In the above embodiment, the terminal 100 is an IMT-2000 mobile phone, but the terminal 100 may be another mobile phone. The terminal 100 may be a communication device such as a PHS (Personal Handy-phone System), or may be a so-called personal computer.
In the above-described embodiment, an example in which the terminal 100 and the server device 500 execute processing related to attendance management by executing an application program has been described. However, the same function may be implemented in each device by hardware.

DESCRIPTION OF SYMBOLS 100 ... Terminal, 101 ... Control part, 102 ... Memory | storage part, 103 ... Mobile packet communication part, 104 ... Call part, 105 ... Microphone, 106 ... Speaker, 107 ... Operation part, 108 ... Display part, 109 ... Antenna, 110 ... IC card terminal, 112 ... imaging unit, 120 ... ad hoc communication unit, 121 ... control unit, 122 ... storage unit, 123 ... communication unit, 200 ... mobile communication network, 210 ... base station, 220 ... exchange, 300 ... gateway server, 400 ... Communication network, 500 ... Server device, 501 ... Control unit, 502 ... Storage unit, 503 ... Communication unit, 510 ... Participant database, 520 ... Lecture database

Claims (8)

  1. A participant terminal, an administrator terminal, and a server device;
    The participant terminal
    Obtaining means for obtaining identification information unique to the manager terminal from the manager terminal;
    Ad hoc communication means for performing wireless ad hoc communication with the administrator terminal;
    A communication means for communicating with the server device;
    An establishment means for establishing a communication link with the administrator terminal by the ad hoc communication means triggered by the acquisition of the identification information by the acquisition means,
    The administrator terminal is
    Ad hoc communication means for performing wireless ad hoc communication with the participant terminal;
    Determination information transmitting means for transmitting determination information for determining whether a communication link with the participant terminal has been established by the ad hoc communication means to the server device,
    The server device
    Storage means for storing participant information unique to the participant corresponding to the participant terminal;
    Determination information receiving means for receiving the determination information from the administrator terminal;
    If the determination information received by the determination information receiving means indicates the establishment of the communication link, using the participant information stored in the storage means, an authentication means for authenticating the carrier of the participant terminal;
    An attendance management system comprising: permission means for permitting access by the communication means of the participant terminal to the own device if authentication by the authentication means is successful.
  2. The authentication unit acquires the participant information input to the participant terminal, and determines that the authentication is successful if the acquired participant information matches the participant information stored in the storage unit. The attendance management system according to claim 1, wherein:
  3.   The server device includes a sub-authentication unit that transmits the participant information to the administrator terminal, and determines that the authentication is successful if the administrator terminal is notified that the carrier is authentic. The attendance management system according to claim 2.
  4.   If the participant terminal does not notify the server device that the authentication has been successful within a certain period of time after obtaining the identification information by the obtaining means, the participant terminal accesses the server device from the participant terminal. 4. The attendance management system according to any one of claims 1 to 3, wherein permission is not allowed.
  5.   2. The ad hoc communication unit of the participant terminal disconnects a communication link with the ad hoc communication unit of the administrator terminal after a predetermined time from the fact that the server device is notified of successful authentication. The attendance management system according to any one of 4 to 4.
  6.   The ad hoc communication means of the participant terminal attempts to communicate with the ad hoc communication means of the administrator terminal at regular intervals after the communication link with the ad hoc communication means of the administrator terminal is disconnected. Item 6. The attendance management system according to item 5.
  7. The participant terminal has detection means for detecting acceleration,
    The attendance management according to claim 5 or 6, wherein the ad hoc communication unit attempts to communicate with the ad hoc communication unit of the manager terminal if the acceleration detected by the detection unit exceeds a threshold value. system.
  8. The participant terminal has mobile communication means for performing communication via a mobile communication network,
    The server device acquires base station information indicating a base station corresponding to the participant terminal, and determines whether or not the participant terminal exists in a predetermined area based on the base station information. Having a judging means,
    The permission means, if the authentication by the authentication means is successful, and the determination means determines that the participant terminal is present in a predetermined area, the participation in the information stored in the own device The access management system according to any one of claims 1 to 7, wherein access from a person terminal is permitted.
JP2010246213A 2010-11-02 2010-11-02 Attendance management system Expired - Fee Related JP5653720B2 (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
JP2010246213A JP5653720B2 (en) 2010-11-02 2010-11-02 Attendance management system

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
JP2010246213A JP5653720B2 (en) 2010-11-02 2010-11-02 Attendance management system

Publications (2)

Publication Number Publication Date
JP2012098919A JP2012098919A (en) 2012-05-24
JP5653720B2 true JP5653720B2 (en) 2015-01-14

Family

ID=46390754

Family Applications (1)

Application Number Title Priority Date Filing Date
JP2010246213A Expired - Fee Related JP5653720B2 (en) 2010-11-02 2010-11-02 Attendance management system

Country Status (1)

Country Link
JP (1) JP5653720B2 (en)

Families Citing this family (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP2015095017A (en) * 2013-11-11 2015-05-18 カーネルソフト株式会社 Attendance management system by portable information apparatus
JP6314503B2 (en) * 2014-01-30 2018-04-25 株式会社リコー Information processing apparatus, information processing system, information processing method, and program
CN106156923A (en) * 2015-04-14 2016-11-23 孙石桔 Intelligence turns out for work checking system and intelligence is turned out for work check method
KR101749707B1 (en) * 2016-05-09 2017-06-22 충북대학교 산학협력단 System for automatic attendance management using wireless fidelity with limitless number of occupations

Family Cites Families (9)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP2004118548A (en) * 2002-09-26 2004-04-15 Victor Co Of Japan Ltd Network system in classroom
JP4007589B2 (en) * 2002-11-22 2007-11-14 キヤノン株式会社 Electronic conference system and control method of electronic conference system
JP2006146796A (en) * 2004-11-24 2006-06-08 Nec Saitama Ltd Authentication system, authentication method, facility terminal, and program
EP1829303B1 (en) * 2004-12-17 2010-04-21 Nxp B.V. Communication system comprising a master and a slave handheld apparatuses
JP2006260095A (en) * 2005-03-16 2006-09-28 Toyohashi Univ Of Technology Lecture support system, lecture support method and lecture-supporting computer program
JP4283793B2 (en) * 2005-09-13 2009-06-24 富士通株式会社 Attendance determination device and attendance management system
JP2008193475A (en) * 2007-02-06 2008-08-21 Matsushita Electric Ind Co Ltd Information terminal, and leaving detecting method and program
JP2009037435A (en) * 2007-08-02 2009-02-19 Nec Corp Service participating system
JP2010128811A (en) * 2008-11-27 2010-06-10 Fujitsu Ltd Portable communication terminal device, presence checking program, presence checking method, and control circuit

Also Published As

Publication number Publication date
JP2012098919A (en) 2012-05-24

Similar Documents

Publication Publication Date Title
JP4382498B2 (en) Instant login user authentication and settlement method using heterogeneous communication network and system thereof
JP4515910B2 (en) Image recognition
US7447772B2 (en) Authentication system, authentication undertaking apparatus, and terminal apparatus
US20120192258A1 (en) Hotspot network access system and method
JP2008515310A (en) Method and system for contextually starting a mobile terminal synchronization service in an enterprise environment
US8955083B2 (en) Method and arrangement for secure user authentication based on a biometric data detection device
JP2006048174A (en) Home security system
JP2006344007A (en) Portable terminal identification system
US10116448B2 (en) Transaction authorization method and system
TWI260874B (en) Method and apparatus for providing communication service
US8659427B2 (en) Proximity-sensor supporting multiple application services
JPWO2003061205A1 (en) Short-range wireless communication system using portable terminal and wireless communication apparatus therefor
JP4301997B2 (en) Authentication method for information appliances using mobile phones
US9094827B1 (en) Systems and methods for authenticating mobile devices at an incident via collaboration
US8942211B2 (en) Communication system and communication apparatus using an NFC Wi-Fi protected setup to establish a wireless LAN connection
US10229548B2 (en) Remote guest access to a secured premises
US20140127994A1 (en) Policy-based resource access via nfc
US20130257589A1 (en) Access control using an electronic lock employing short range communication with mobile device
US8610576B2 (en) Routing communications to a person within a facility
US7694331B2 (en) Phone with secure element and critical data
EP1868323A1 (en) Connection parameter setting system, method thereof, access point, server, radio terminal, and parameter setting device
CN103039098A (en) Authentication method and system using portable terminal
BRPI0419244A (en) remote access method and system for enabling a user to remotely access terminal equipment, software modules, and mobile office service to enable a user to remotely control terminal equipment
CN103716795A (en) Wireless network safe access method, apparatus and system
US9978023B2 (en) System and method for using unique device identifiers to enhance security

Legal Events

Date Code Title Description
A621 Written request for application examination

Free format text: JAPANESE INTERMEDIATE CODE: A621

Effective date: 20130815

A977 Report on retrieval

Free format text: JAPANESE INTERMEDIATE CODE: A971007

Effective date: 20140305

A131 Notification of reasons for refusal

Free format text: JAPANESE INTERMEDIATE CODE: A131

Effective date: 20140408

A521 Written amendment

Free format text: JAPANESE INTERMEDIATE CODE: A523

Effective date: 20140603

TRDD Decision of grant or rejection written
A01 Written decision to grant a patent or to grant a registration (utility model)

Free format text: JAPANESE INTERMEDIATE CODE: A01

Effective date: 20141111

A61 First payment of annual fees (during grant procedure)

Free format text: JAPANESE INTERMEDIATE CODE: A61

Effective date: 20141119

R150 Certificate of patent or registration of utility model

Ref document number: 5653720

Country of ref document: JP

Free format text: JAPANESE INTERMEDIATE CODE: R150

R250 Receipt of annual fees

Free format text: JAPANESE INTERMEDIATE CODE: R250

LAPS Cancellation because of no payment of annual fees