JP5938286B2 - Key management apparatus and key management system - Google Patents

Description

  The present invention relates to a key management device and a key management system for managing the use of a key, and in particular, a key capable of ensuring the security of a device that uses the key when there is a possibility of unauthorized use of the key. Management device and key management system

  Conventionally, in a financial institution such as a bank, a key management device is used to manage various keys. For example, a key of a safe room, a key of a safe, a key of various lockers, a key of a money handling device, and the like are managed using a key management device. In the key management device, the identification number of the person in charge that can be taken out is managed for each key, and the usage status of the key can be recorded and managed, such as the time when each person took out the key and the time when the key was returned. .

  As such a key management device, for example, Patent Literature 1 discloses a key management system in which a key management device and a money processing device that is locked and unlocked by a key taken out from the key management device are communicably connected. Has been. According to this key management system, in addition to taking out and returning the key from the key management device, it is possible to record and manage the time when the key is used in the money handling device.

JP 2008-63874 A

  However, according to the above prior art, for example, when the key taken out from the key management device is not returned, it is possible to refer to the warning and the data recorded about the key, but to notify the key. There was a problem that the used fraud itself could not be prevented directly.

  Specifically, when the key is taken out from the key management device and is not returned, even if an alarm is issued, the money processing device and the safe can be opened and closed using this key. For this reason, for example, when the user does not notice the alarm or notices the alarm, but the subsequent response is delayed, there is a possibility that fraudulent acts cannot be prevented.

  Also, with regard to the record of the key take-out time and return time, the key unlocking time and the locking time in the money handling device or safe, the usage status of the key when fraudulent acts are performed with reference to this record. Although it can be confirmed, fraudulent acts cannot be prevented directly.

  In a money handling device in which money is stored inside, there is a possibility that the internal money may be taken out using a key. Therefore, it is desirable not only to manage the use of the key but also to ensure the security of the device. ing.

  The present invention has been made to solve the above-described problems caused by the prior art, and is capable of ensuring the security of a device in which the key is used when there is a possibility of unauthorized use of the key. And a key management system.

  In order to solve the above-described problems and achieve the object, the present invention manages a money handling apparatus for storing money therein and taking out and returning a key used for taking out the money from the money handling apparatus. A key management system configured by a key management device, wherein the key management device monitors use of a taken-out key, and when the monitoring result satisfies a predetermined condition, even if the key is used, A key use monitoring unit that transmits a lock instruction signal for instructing locking of the money handling device so that money cannot be taken out from the money handling device, and the money handling device cannot take out the money stored inside. An electronic lock that locks the money handling device and a device that locks the money handling device by controlling the electronic lock based on the lock instruction signal received from the key use monitoring unit And having a limited portion.

  Further, the present invention is the above invention, wherein the key use monitoring unit is configured such that when a predetermined operation relating to the key is not performed within a preset time after the key is taken out from the key management device, It is determined that a predetermined condition is satisfied, and the lock instruction signal is transmitted.

  Further, according to the present invention, in the above invention, the key usage monitoring unit determines that the predetermined condition is satisfied when the key is not used based on a setting content related to a preset key usage time zone. Then, the lock instruction signal is transmitted.

  Further, the present invention is the above invention, wherein the key management device further includes a key use authentication unit that authenticates a key user who takes out and uses a key, and the money handling device further includes the money handling device. An operator authentication unit that authenticates an operator who operates the key use monitoring unit, the key use monitoring unit authenticating by the key use authentication unit, and a device operator authenticated by the operator authentication unit, Are different from each other, it is determined that the predetermined condition is satisfied, and the lock instruction signal is transmitted.

  Further, the present invention is the above invention, wherein the operator authentication unit of the money handling apparatus performs an authentication process for unlocking and the device use restriction unit is authenticated by the operator authentication unit. The lock of the money handling apparatus is released by controlling the electronic lock.

  Further, in the above invention, in the authentication process performed for unlocking the money handling apparatus in the above invention, two or more authentication processes are performed, and all the authentication processes are normally completed and authentication is performed. The money handling apparatus is unlocked only when the money handling apparatus is released.

  In the invention described above, the authentication processing performed for unlocking the money handling apparatus is password authentication.

  In the present invention, the key management system further includes an administrator terminal, and operates the administrator terminal to perform an authentication process by the operator authentication unit of the money handling apparatus. To release the lock of the money handling apparatus.

  Further, the present invention is the above invention, wherein the electronic lock is an electromagnetic lock provided on the door independently of a lock provided on the door of the money handling apparatus unlocked by the key, Even when the lock is unlocked by a key, the money handling apparatus is brought into a locked state by bringing the electromagnetic lock into a locked state.

  Further, according to the present invention, in the above invention, the key management system further includes an entrance / exit electronic lock whose locking / unlocking is controlled by the key management device, and an entrance / exit door whose opening / closing is controlled by the entrance / exit electronic lock. And the key management device controls the electronic doorway lock to lock the doorway so that the doorway cannot be opened and closed when a monitoring result by the key usage monitoring unit satisfies a predetermined condition. .

  Further, the present invention provides a key used for unlocking the lock by a money handling device that can be locked by remote operation independently of a lock provided on the door to access the money stored in the door. A key management device that manages the use of the key that has been taken out, and if the monitoring result satisfies a predetermined condition, the key cannot be used to remove money from the money handling device. And a key use monitoring unit that locks the door of the money handling apparatus by remote control.

  According to the present invention, when there is a possibility that the key taken out from the key management device may be illegally used, the money processing device is controlled from the key management device so that the unlocking operation using the taken out key becomes impossible. By locking with another key so that money cannot be taken out even if the unlocking operation with a key is performed, it is possible to directly prevent fraud and ensure the security of the device.

  Further, according to the present invention, for example, when a predetermined operation is not performed within a preset time, such as when the key is not used even though the key is taken out from the key management device, an abnormal situation occurs. It can be determined that it has occurred, and the money handling apparatus can be locked to ensure security.

  Further, according to the present invention, fraudulent acts are carried out aiming at a time zone where no person is present, such as at night or on a holiday, by locking the money handling apparatus except for a predetermined time zone during which a key such as working hours is used. This can be prevented and the security of the apparatus can be ensured.

  Further, according to the present invention, if the person who took out the key is different from the person who intends to operate the money handling apparatus using this key, it is determined that there is a possibility of fraud by impersonation. Thus, the money handling apparatus can be locked to ensure security.

  Further, according to the present invention, since the lock can be released by operating the money handling apparatus, even when it is necessary to immediately unlock the money handling apparatus, this can be dealt with.

  In addition, according to the present invention, since the lock of the money handling apparatus is released only when authentication of a plurality of persons such as an employee and an administrator is normally performed, the unlocking operation is facilitated while being easy. Security can be ensured by avoiding a situation where the lock is released by the actor.

  According to the present invention, the authentication process performed for unlocking the money handling apparatus is password authentication, so that the lock can be quickly released with an easy operation.

  In addition, according to the present invention, since the authentication process for unlocking the money handling apparatus can be performed by operating the administrator terminal, the lock can be released by remote operation from a place away from the money handling apparatus. it can.

  Further, according to the present invention, an electromagnetic lock is provided in a device in which the key is used separately from the key managed by the key management device so that the device cannot be opened even if the key is used. The security of the device can be ensured.

  Further, according to the present invention, the key management device can control the electronic lock of the doorway so that the door cannot be opened and closed. Even when the entrance door is locked to restrict the exit from the room or building where the processing equipment is installed, and the money stored in the money handling equipment is taken out, it remains out of the room or building while holding it. Security can be ensured.

FIG. 1 is a schematic diagram for explaining an outline of processing performed to ensure the security of the apparatus in the key management system according to the present embodiment. FIG. 2 is a functional block diagram illustrating an outline of functions of the key management device, the money handling device, and the administrator terminal that constitute the key management system according to the present embodiment. FIG. 3 is a diagram for explaining an example of key use conditions used for key management in the key management apparatus according to the present embodiment. FIG. 4 is a diagram for explaining an example of a key usage log recorded about the key usage status in the key management apparatus according to the present embodiment. FIG. 5 is a diagram for explaining the flow of processing performed in the key management device, money handling device, and administrator terminal that constitute the key management system according to the present embodiment. FIG. 6 is a diagram for explaining another example of the key management system according to the present embodiment.

  A key management device and a key management system according to the present invention will be described below with reference to the accompanying drawings. The key management device can manage keys used at the entrance door and keys used by various devices. The door or device whose key is managed by the key management system is not particularly limited as long as it can be locked by remote control. However, in the present embodiment, in the financial institution, the money processing device in which money is stored, and the device A case where a key management system is configured by a key management device that manages keys will be described as an example. Note that the lock of the device referred to in this embodiment is an operation that disables the key managed by the key management device, or the door unlocked by the key even if the key managed by the key management device is used. An operation that locks with another key so that it does not open.

  First, functions and operations realized by the key management system will be described. FIG. 1 is a schematic diagram illustrating a key management system including a key management device 1 and a money handling device 10.

  A plurality of keys are stored inside the key management device 1. The key management device 1 manages each key 100 in association with a key user who is permitted to use each key 100. Only the key user who is authenticated by operating the key management device 1 can use the key 100 managed in association with the key management device 1 from the key management device 1.

  The key management device 1 includes a time t1 from when the key 100 is taken out until the money handling device 10 is unlocked using the key 100, and the money management device 10 is stored inside after the money handling device 10 is unlocked. A time t2 from when the processing such as the collection of money is completed until the key 100 is locked again, and a time t3 from when the money processing device 10 is locked until the key 100 is returned to the key management device 1. Is managing.

  Specifically, times t1 to t3 are set based on the average time required when each key 100 is used. The key management device 1 detects the occurrence of an abnormal situation related to each key 100 based on the set times t1 to t3 and the time actually taken in the processing corresponding to each set time. When it is determined that an abnormal situation has occurred, the money handling apparatus 10 is locked in order to ensure the security of the money handling apparatus 10.

  Note that the key 100 managed by the key management device 1 is not limited to the one that is mechanically locked and unlocked by a key and a lock, but is one that is electromagnetically locked and unlocked using a magnetic card, an IC card, or the like. Also good. Information related to the times t1 to t3 is transmitted from the money handling apparatus 10 to the key management apparatus 1, but when an electromagnetic card is used as the key 100, the use of the card is directly detected and unlocked. Can be transmitted. However, the detection method of locking / unlocking is not limited to this, and may be a mode in which a sensor that detects opening / closing is provided on a door that is opened / closed along with the locking / unlocking operation and the detection result is transmitted.

  In addition, when a key 100 for mechanically locking / unlocking the lock of the device is used, in addition to a mode in which a sensor is provided on a door that is opened and closed using the key 100, a locking / unlocking operation is directly detected. It is also possible to provide a sensor that performs this. Furthermore, in addition to the mode of directly detecting the locking / unlocking operation and the opening / closing of the door, the mode in which the locking / unlocking operation is performed based on information related to authentication processing and various operations performed by the apparatus before and after the locking / unlocking operation. There may be. For example, when an authentication operation is performed before unlocking the device, or an operation indicating completion of processing is performed after locking, information indicating that the authentication operation or completion operation has been performed is managed from the money processing device 10 by the key management. The time management may be performed by transmitting to the device 1 and assuming that the locking / unlocking operation is performed before and after the operation.

  When it is determined that an abnormal situation has occurred in the key management device 1, the money handling apparatus 10 is locked so that the money stored therein cannot be taken out. The method for locking the device may be a method for preventing the key 100 from being used, or a method for preventing the money from being taken out although the key 100 can be used.

  For example, when the key 100 used in the money handling apparatus 10 is an electronic lock using an electromagnetic card, processing performed using the card so that it cannot be unlocked even using this card. Control the contents and the operation of the electronic lock. When the key 100 is a mechanical key that unlocks the lock, an electronically controlled shutter is provided in front of the lock so that the key 100 cannot be used by closing the shutter. Also good. In addition, a sensor that detects the insertion of the key 100 into the lock and a lock mechanism that restricts the rotation of the key 100 inserted into the lock so that the key 100 cannot be unlocked are provided. The mode which operates a lock mechanism may be sufficient. Further, an electronic lock such as an electromagnetic lock independent of the lock may be provided, and the electronic lock may be used so that the door is not opened even when the lock is unlocked.

  In the following description, the key 100 mechanically locks / unlocks the lock provided on the money handling apparatus 10, and the money handling apparatus 10 is used to lock the apparatus separately from the lock locked / unlocked by the key 100. The description will be continued assuming that the electronic lock is provided.

  FIG. 1A shows an example of a case where it is determined that an abnormal situation has occurred in the key management system. After the key 100 is taken out from the key management device 1, even if the set time t <b> 1 elapses, if the unlocking with the key 100 is not performed in the corresponding money handling device 10 (A1), the key management device 1. Locks the money handling apparatus 10 by remote control (A2).

  If the money handling apparatus 10 is not unlocked within the set time t1 even though the key 100 has been taken out, for example, a possibility that an abnormal situation has occurred in the person who has taken out the key 100, or the key 100 May have been fraudulent, such as being taken out of a financial institution and creating a companion key. For this reason, the money handling apparatus 10 is locked so that the money stored in the money handling apparatus 10 cannot be taken out even if the taken out key 100 is used. Thereby, the situation where the money processing apparatus 10 is unlocked using the key 100 and the money stored inside is stolen can be avoided, and the security of the apparatus can be ensured.

  Further, as shown in FIG. 1 (b), the money handling apparatus 10 is unlocked within the set time t1 by the key 100 taken out from the key management apparatus 1 (B1). When the time exceeds the set time t2 (B2), even when the key 100 is returned to the key management device 1 within the set time t3 after the money processing apparatus 10 is locked (B3), the money processing apparatus 10 Is locked (B4).

  In this case, there is a possibility that some abnormal situation has occurred during processing, such as taking out the key 100 to the outside of the financial institution and creating a mutual key while pretending to be processing in the money processing apparatus 10. 10 is locked. In this case, there is a possibility that fraud has already been performed when the money handling apparatus 10 is unlocked. For this reason, until it is confirmed that there is no abnormality, in addition to the lock of the money handling apparatus 10, for example, the entrance / exit of the room or building where the money handling apparatus 10 is installed is locked, You can also restrict exit. This can be realized by providing a mechanism similar to locking the money handling apparatus 10 at the entrance and exit of a living room or building and controlling the locking operation by the mechanism.

  Further, as shown in FIG. 1C, the money handling apparatus 10 is unlocked within the set time t1 by the key 100 taken out from the key management apparatus 1 (C1), and within the set time t2 from the unlocking. If locking is performed (C2), but the key 100 is not returned to the key management device 1 within the set time t3 after locking (C3), the money handling apparatus 10 is locked (C4).

  Also in this case, as in the case of FIG. 1 (a), there is a possibility that an abnormal situation has occurred in the person who tried to return the key 100, or the key 100 is taken out of the financial institution and a matching key is created. Therefore, the money handling apparatus 10 is locked. In this case, as in the case of FIG. 1B, in addition to the lock of the money handling apparatus 10, it is possible to restrict the exit from the room or building where the money handling apparatus 10 is installed. .

  Further, for example, as shown in FIG. 1D, when the key user who has been authenticated by the key management device 1 and brought out the key 100 is different from the operator who has been authenticated by the money handling device 10 (D1). (D2) locks the money handling apparatus 10 (D3). Specifically, the authentication is performed by the identification number of the key user authenticated by the authentication process performed when the key 100 is taken out from the key management apparatus 1 and the authentication process performed when the operation on the money processing apparatus 10 is started. If the identification number of the operator does not match, there is a possibility that either the person who took out the key 100 or the person who intends to operate the money handling apparatus 10 impersonates another person and performs the authentication operation. is there. For this reason, the key management apparatus 1 locks the money processing apparatus 10 so that money cannot be taken out from the money processing apparatus 10, assuming that there is a possibility of fraud. In this case, in addition to the lock of the money handling apparatus 10, authentication processing when starting the operation of the money handling apparatus 10, and authentication performed when entering the room or building where the money handling apparatus 10 is installed. In the process, control may be performed so that the user of the key 100 is not authenticated.

  Further, as shown in FIG. 1E, the key 100 is taken out from the key management apparatus 1 (E1), but the key 100 is returned to the key management apparatus 1 without unlocking the money handling apparatus 10. If this happens (E2), the money handling apparatus 10 is locked (E3). Also in this case, since there is a possibility that an illegal act has been performed, for example, a key is created from the key 100 taken out from the key management device 1, the money processing device 10 is locked to ensure security.

  In this way, the key management device 1 determines that there is a possibility of fraud using the key 100 when the processing, operation, or authentication result regarding the key 100 satisfies a predetermined condition, and the key 100 is used. Security is secured by locking the money handling apparatus 10.

  Note that the key management device 1 can also use information other than the preset times t1 to t3 in order to ensure the security of the money handling device 10. For example, the money handling apparatus 10 can be locked so that fraudulent acts are not performed in the time zone, date, and day of the week when the key 100 should not be used, using information related to date and time. Specifically, when a time zone in which the money handling apparatus 10 is operated using the key 100 or a time zone in which the key 100 is not used is set in advance, the key management device 1 causes the time period in which the key 100 is not used. Is automatically determined to lock the money handling apparatus 10 to ensure security. Note that, for example, a lock performed when a set time zone such as business hours of a financial institution is exceeded may be automatically released before the business hours of the next business day, as will be described later. Alternatively, the lock may be released by the authentication process.

  In addition to this, the key management device 1 uses this information when information about employees such as a person entering or leaving the room where the money handling apparatus 10 is installed is managed. You can also For example, when a person who is not registered as a person entering the room starts operating the money handling apparatus 10, the money handling apparatus 10 is locked or an employee who should have retired tries to operate the money handling apparatus 10. In this case, the money handling apparatus 10 can be locked, or the money handling apparatus 10 can be locked when an employee who should have left the office on the day tries to operate the money handling apparatus 10.

  In addition to this, when the key management device 1 detects that an operation involving the unlocking operation of the device using the key 100 is started in the money handling device 10, a predetermined condition for permitting the unlocking by the key 100 is satisfied. It is determined whether or not it has been done. When this condition is not satisfied, the money handling apparatus 10 is locked so that the key 100 cannot be used or money cannot be taken out from the money handling apparatus 10 even if the key 100 is used.

  In addition, although this embodiment demonstrates the example which ensures security by locking the money processing apparatus 10, other than this, as above-mentioned regarding FIG.1 (b)-(d), installation of the money processing apparatus 10 is carried out. It is also possible to restrict entry into and exit from a room or building. In addition to these, the key management device 1 can be locked so that the key 100 cannot be taken out from the key management device 1. These will be described later with reference to FIG.

  When the money handling apparatus 10 is locked, the lock can be released by an authentication operation by a person who has taken out the key 100 and a plurality of persons such as an administrator and a guard. For example, after confirming that the employee who took out the key 100 from the key management device 1 and the administrator who manages this employee have no cause or abnormality of the money handling device 10 being locked, the employee and the administrator The two-party authentication operation for authenticating the two parties is performed. And when both are authenticated, the lock | rock of the money processing apparatus 10 is cancelled | released.

  The unlocking is performed, for example, by password authentication in which each of the employee and the administrator inputs an identification number (ID) and a password assigned to the employee and the administrator. However, if it is necessary to unlock the money handling apparatus 10 immediately, the unlocking method can be any method that can be easily unlocked by directly operating or remotely operating the money handling apparatus 10. It is not limited to password authentication. For example, an aspect in which authentication is performed using an ID card such as a magnetic card or an IC card, or an aspect in which biometric authentication is performed may be used.

  The authentication process for releasing the lock of the money handling apparatus 10 may be performed by operating the key management apparatus 1 in addition to an aspect of operating the money handling apparatus 10. Moreover, you may perform using other terminals, such as an administrator terminal and a portable terminal. The method is not particularly limited as long as the authentication operation can be performed by a wired or wireless terminal.

  As described above, when the money handling apparatus 10 is locked, the unlocking operation can be performed as an easy operation so that the unlocking can be performed quickly, and the authentication for unlocking is performed by a plurality of persons. Therefore, security related to the money handling apparatus 10 can be ensured.

  Next, each device constituting the key management system will be described. FIG. 2 is a functional block diagram for explaining an outline of functions of the key management device 1, the money handling device 10, and the administrator terminal 20 constituting the key management system. The key management device 1, the money handling device 10, and the administrator terminal 20 are connected to a network 30. The network 30 may be wired or wireless. Further, a general-purpose network such as a LAN or WAN may be used, or a dedicated line may be used.

  In FIG. 2, the administrator terminal 20 is shown as an example of an apparatus for notifying the abnormal state from the key management apparatus 1 and performing unlocking of the money handling apparatus 10 by remote operation. However, the present embodiment is not limited to this. For example, when an abnormal situation is confirmed or unlocked by a security guard, a mobile phone or a dedicated portable terminal distributed to the security guard is used instead of or in addition to the administrator terminal 20 There is also.

  As shown in FIG. 2, the key management device 1 includes a communication unit 2, a control unit 3, and a storage unit 4. The communication unit 2 communicates via the network 30 with respect to acquisition of information regarding the operation status of the money handling apparatus 10, control for locking the money handling apparatus 10, notification of an abnormal situation to the administrator terminal 20, and the like.

  The control unit 3 includes a key use authentication unit 3a and a key use monitoring unit 3b. The key use authentication unit 3a has a function of authenticating a person who intends to take out the key 100 stored in the key management device 1. For example, password authentication using an operation unit (not shown) included in the key management device 1, authentication using a magnetic card or an IC card, and biometric authentication using face recognition or fingerprint recognition are performed. The storage unit 4 of the key management device 1 stores information necessary for authentication processing in advance, and only a person who is authenticated based on this information can take out the key 100. In addition, keys 100 that can be taken out according to the authenticator are set in advance, and even if authenticated, keys other than the keys 100 that are allowed to be taken out cannot be taken out.

  The key usage monitoring unit 3 b has a function of monitoring the usage status of the key 100 taken out from the key management device 1. Specifically, when the key 100 is taken out from the key management apparatus 1, communication with the money handling apparatus 10 corresponding to the key 100 is started via the communication unit 2. Then, from the money handling apparatus 10, the operation start of the money handling apparatus 10, the operator identification number authenticated by the money handling apparatus 10 at the start of the operation, information on the unlocking operation and the locking operation using the key 100, etc. are acquired. To do.

  Thereby, the key use monitoring unit 3b determines the time from when the key 100 is taken out from the key management device 1 until each operation is performed, and starts the operation of the money handling device 10 and the key user who took out the key 100. It can be determined whether or not the operator has the same identification number, whether or not the key 100 has been returned without being used in the money handling apparatus 10.

  The key use monitoring unit 3b refers to the employee management information 24a stored in the storage unit 24 of the administrator terminal 20 via the communication unit 2, thereby starting the operation of the money handling apparatus 10. Determining whether the identification number of the operator is included in the employee information, determining whether the identification number of the operator is included in the occupant information for the room where the money handling apparatus 10 is installed, or the like. it can. In addition, the information used in order to determine whether it is a person who is permitted to use the money handling apparatus 10 is not limited to the aspect acquired from the administrator terminal 20, for example, such information is a key management apparatus. The aspect preserve | saved in the memory | storage part 4 in 1 may be sufficient, and the aspect which acquires and utilizes information from another terminal may be sufficient.

  Further, the key usage monitoring unit 3b monitors the usage status of the key 100 and the operating status of the money handling apparatus 10, and the possibility of unauthorized use of the key 100 as shown in FIGS. If it is determined that the money handling apparatus 10 is present, the money handling apparatus 10 is locked. Specifically, if there is a possibility of unauthorized use of the key 100, it is determined that an abnormal situation has occurred, and a signal instructing to lock the money handling apparatus 10 is transmitted to the money handling apparatus 10. . Based on this signal, the money handling apparatus 10 performs an operation for locking the apparatus so that the money stored therein cannot be accessed even if the key 100 is used. When the key usage monitoring unit 3b determines that an abnormal situation has occurred, the key usage monitoring unit 3b notifies the administrator terminal 20 of this.

  The storage unit 4 stores a key use condition 4a and a key use log 4b. For example, as shown in FIG. 3, the key use condition 4 a includes a key number that is a management number of each key 100, a use place where each key 100 is used, each set time set for each key 100, A notification destination when an abnormal situation occurs and a method for unlocking the money handling apparatus 10 that has been locked due to an abnormal situation are set.

  Here, as a use place, the money processing apparatus 10 in which each key 100 is used and information for specifying the place where this apparatus is installed are stored. Further, as shown in FIG. 1, as the set time, a time t1 from when the key 100 is taken out from the key management device 1 until the money processing device 10 is unlocked using the key 100, and money processing The time t2 from when the device 10 is unlocked until the processing such as collection of money stored therein is completed and locked again using the key 100, and after the money processing device 10 is locked, the key 100 is A time t3 until it is returned to the key management device 1 is set. The travel time between the key management device 1 and the money handling device 10 does not change between taking out and returning, but, for example, only when entering or leaving the room where the money handling device 10 is installed. There may be a case where an authentication process is performed, or a report to the administrator is performed after the money handling apparatus 10 is locked and before the key 100 is returned. For this reason, the time can be set separately when the key 100 is taken out and returned.

  In addition, a notification destination when it is determined that an abnormal situation has occurred is set as the notification destination at the time of abnormality. For example, the administrator terminal 20 used by the administrator of the person who took out the key 100 or the administrator of the operator of the money handling apparatus 10, the mobile phone or the mobile terminal used by the administrator or the guard, etc. is set as the notification destination. can do. A plurality of devices and terminals can be designated as the notification destination. For example, when there is a manager's seat right next to the money handling apparatus 10, the notification destination is not set and can be left blank.

  In addition, as a usage restriction release method, a method of releasing this lock when an abnormal situation occurs and the money handling apparatus 10 is locked is set. For example, in FIG. When the money handling apparatus A001 that uses one key 100 is locked, this is notified to the management terminal A, and two-party authentication by an administrator who uses this terminal and a person who has taken out the key 100 is performed. Is set to release the lock.

  For example, the key number No. When the money handling apparatus A002 that uses the second key 100 is locked, two-person authentication is performed by a person who has taken out the key 100 and an administrator who has a seat in the immediate vicinity of the apparatus. It is set to release the lock. As described above, in the situation where the administrator can be called from the installation location of the money handling apparatus A002, it is possible to set so as to omit the notification at the time of abnormality.

  The key number No. If the money changer E002 using the key 100 is installed in the lobby of a financial institution, only the administrator can set the lock to be unlocked in order to quickly perform the unlocking operation. it can. In addition to this, for example, it is possible to set to perform unlocking by performing authentication processing of three or more persons such as a person who took out the key 100, an administrator, and a security officer.

  As shown in FIG. 2, the information obtained at the time of monitoring by the key usage monitoring unit 3b is stored in the storage unit 4 as a key usage log 4b. In the key usage log 4b, for example, as shown in FIG. 4, the key number of each key 100, the location where each key 100 is used, the identification number indicating the user of this key 100, and the administrator of the key user An abnormal situation occurred between the take-out and return, the identification number indicating the key, the take-out date and time when the key 100 was taken out from the key management device 1, the return date and time when the key 100 was returned to the key management device 1 Information indicating whether or not and information regarding an abnormal situation are stored.

  For example, as shown in FIG. 1A, when it is determined that an abnormal situation has occurred because the time from when the key 100 is taken to when the money handling apparatus 10 is unlocked exceeds the set time t1. In the abnormal event column of the key use log 4b, the number 1 assigned to this abnormal event is recorded in the abnormal event column.

  Further, for example, when it is determined that an abnormal situation has occurred because the key user who has taken out the key 100 and the device operator authenticated by the money handling apparatus 10 are different, this field is displayed in the abnormal situation column. 3 is recorded, and in the user and operator columns, the identification numbers of the two employees who are authenticated at this time and the identification numbers of the managers of the employees are recorded.

  In the key usage log 4b, it is possible to recognize what kind of determination has been made and the money handling apparatus 10 has been locked based on the number of the abnormal situation, but as detailed information as shown in FIG. An explanation of each number indicating an abnormal situation can also be recorded. The contents to be recorded as detailed information can be selected. For example, by setting so as to record the specific name and contact information of the user or administrator, it becomes easy to check the contents and take necessary actions when checking the key usage log 4b.

  Next, the administrator terminal 20 shown in FIG. 2 will be described. The administrator terminal 20 includes a communication unit 22, a control unit 23, a storage unit 24, and an operation display unit 25. The communication unit 22 receives a signal for notifying an abnormal situation transmitted from the key management device 1 via the network 30, obtains information on the operation status of the money handling apparatus 10, and a signal that instructs to unlock the money handling apparatus 10. Communication related to the transmission of

  When the control unit 23 receives a signal for notifying an abnormal situation from the key management device 1, the control unit 23 displays this on the operation display unit 25, confirms the situation of the money handling apparatus 10 in which the abnormal situation has occurred, It has a function of unlocking the money handling apparatus 10 locked by operation.

  The storage unit 24 manages, as employee management information 24a, information related to employees who are permitted to operate the money handling apparatus 10, information related to persons entering and leaving the room where the money handling apparatus 10 is installed, and the like. .

  The operation display unit 25 controls the display of information stored in the storage unit 24, the information received from the key management device 1 and the money handling device 10, and the functions and operations of the key management device 1 and the money handling device 10. Used to perform operations.

  For example, when the key management apparatus 1 determines that an abnormal situation has occurred and locks the money handling apparatus 10, a signal for notifying this is transmitted from the key management apparatus 1 to the administrator terminal 20. In the administrator terminal 20 that has received this signal, the operation display unit 25 displays information indicating that the money handling apparatus 10 is locked. The manager who recognizes that an abnormal situation has occurred by this display goes to the place where the money handling apparatus 10 is installed and confirms the cause of the abnormal situation together with the employee. When the administrator determines that the money handling apparatus 10 may be unlocked, a process of operating the money handling apparatus 10 to release the lock is performed.

  When notifying an abnormal situation, information on the key 100, information on an installation location of the money handling apparatus 10 in which the key 100 is used, money stored in the inside, etc., a user of the key 100, and money handling Information such as an ID of the operator of the apparatus 10, a name, a department to which the device 10 belongs, a face photograph, and the like are displayed on the operation display unit 25 of the administrator terminal 20. From these pieces of information, the administrator can recognize the value 100, the money handling apparatus 10, and the employee related to the abnormal situation.

  The unlocking operation can be performed by operating the administrator terminal 20 and performing a remote operation. For example, the administrator confirms the cause of the abnormal situation by telephone confirmation from a place away from the money handling apparatus 10. When it is determined that the lock can be released, the operation display unit 25 is operated, and an authentication process or the like necessary for unlocking the money handling apparatus 10 can be performed by remote operation. The unlocking operation in the money handling apparatus 10 will be described later.

  Next, the money handling apparatus 10 shown in FIG. 2 will be described. The money handling apparatus 10 includes a communication unit 12, a control unit 13, and an electronic lock 14. The money handling apparatus 10 identifies and counts money and performs a deposit process, a withdrawal process, or a currency exchange process. Money is stored inside the money handling apparatus 10. Moreover, the money handling apparatus 10 has a door for accessing the money stored therein, and a lock is provided on the door. By unlocking the lock using the key 100 managed by the key management device 1, the money inside the device can be accessed. In addition, about each function, operation | movement, and structure for implement | achieving money processing, since it is the same as that of a conventional apparatus, description is abbreviate | omitted.

  The communication unit 12 transmits information related to operations and authentication performed in the money handling apparatus 10 via the network 30, receives a signal instructing locking from the key management apparatus 1, and unlocks from the administrator terminal 20. Communication related to reception of instructed signals is performed.

  The control unit 13 includes an operator authentication unit 13a, a locking / unlocking monitoring unit 13b, and a device use restriction unit 13c. The operator authenticating unit 13a has a function of authenticating an operator in advance when processing for operating the money handling apparatus 10 and accessing the money stored therein is performed. The operator identification number obtained by this authentication is transmitted to the key management apparatus 1.

  The locking / unlocking monitoring unit 13b has a function of monitoring the unlocking operation and locking operation of the money handling apparatus 10 by the operator authenticated by the operator authentication unit 13a. Information on unlocking and locking obtained by this monitoring is transmitted to the key management device 1.

  When the device use restriction unit 13c receives a signal for instructing the lock of the money handling apparatus 10 from the key management apparatus 1, the apparatus use restriction unit 13c is configured so that the money stored in the money handling apparatus 10 cannot be accessed even if the key 100 is used. It has a function to lock the device. In addition, the device usage restriction unit 13c is used when an authentication process for unlocking is performed using an operation unit (not shown) or when a remote operation for unlocking is performed from the administrator terminal 20. It has a function of unlocking the device.

  The electronic lock 14 has a function of locking the device so that money stored in the money handling device 10 cannot be accessed. The electronic lock 14 is configured by, for example, an electromagnetic lock, and locks and unlocks a door that is opened and closed using the key 100 independently of locking and unlocking by the key 100. That is, when the electronic lock 14 is locked, the door cannot be opened even if the unlocking operation is performed with the key 100, and the money stored in the money handling apparatus 10 cannot be accessed. .

  Note that the electronic lock 14 may be configured such that money cannot be taken out from the money handling apparatus 10 even when the key 100 is used, such as an electromagnetic lock provided independently of the key 100 and the lock. The key 100 itself may not be used. Specifically, the configuration of the electronic lock 14 is not particularly limited as long as it is a mechanism that can be controlled based on a signal received from the key management device 1 or the administrator terminal 20 or the like. For example, an electronically controlled shutter provided in front of the lock may be used as the electronic lock 14 so that the key 100 cannot be inserted into the lock by controlling the shutter. Moreover, the aspect which restrict | limits rotation of the key 100 inserted in the lock | rock and cannot be unlocked may be sufficient.

  By constructing a key management system with the key management device 1, the money handling device 10 and the administrator terminal 20 having such a configuration, an abnormal situation occurs when a predetermined condition is satisfied as shown in FIG. And the money handling apparatus 10 can be locked. Moreover, the security of the money handling apparatus 10 can be ensured by enabling the locked money handling apparatus 10 to be unlocked and unlocked only when a predetermined operation such as two-party authentication is performed.

  Next, the flow of processing performed in this embodiment will be described. FIG. 5 is a diagram for explaining the flow of processing performed between the key management device 1, the money handling device 10, and the administrator terminal 20. First, when an authentication process is performed by the key use authentication unit 3a of the key management device 1 and the key 100 is taken out, monitoring of the key 100 is started by the key use monitoring unit 3b of the key management device 1 (step S1). .

  While the usage status of the key 100 is being monitored, the operator authentication result performed by the money handling apparatus 10 and information related to the locking / unlocking operation using the key 100 can be obtained from the operator authentication unit 13a of the money handling apparatus 10 and the lock / unlock monitoring. The data is transmitted from the unit 13b to the key management device 1 (step S2). In addition, the key use monitoring unit 3b checks the employee management information from the storage unit 24 of the administrator terminal 20 in order to confirm that the key user or the device operator is an employee who can operate the money handling apparatus 10. 24a can be read and used (step S3).

  When the key usage monitoring unit 3b of the key management device 1 determines that an abnormal situation that may cause unauthorized use of the key 100 has occurred (step S4), the key usage monitoring unit 3b instructs the lock so that the money inside the money handling apparatus 10 cannot be accessed. To the money handling apparatus 10. The apparatus use restriction unit 13c of the money handling apparatus 10 that has received this signal controls the electronic lock 14 to lock the apparatus (step S5). When the device is locked, a signal indicating that the lock is completed is transmitted from the device use restriction unit 13c to the key management device 1.

  In the key management device 1 that has received the signal from the device usage restriction unit 13c, the key usage monitoring unit 3b recognizes that the device has been locked, and transmits a signal to notify the administrator terminal 20 of this ( Step S6). Receiving this, the control unit 23 of the administrator terminal 20 notifies the administrator of the abnormal situation by displaying information indicating the abnormal situation on the operation display unit 25 or making a sound (step S7).

  As for the notification of the abnormal situation to the administrator terminal 20, as shown by the broken line arrow in FIG. 5, after the abnormal situation is detected (step S4), the notification to the administrator terminal 20 may be immediately performed. Good (step S6). That is, a mode in which the processes of steps S5 and S6 are executed in parallel may be possible.

  The administrator who has recognized the occurrence of the abnormal situation in response to the notification from the administrator terminal 20 and the communication from the operator of the money handling apparatus 10 confirms the cause of the occurrence of the abnormal situation. If it is determined that there is no problem, an operation for unlocking the money handling apparatus 10 is performed (step S8). The unlocking operation is performed by two-party authentication by the device use restriction unit 13c.

  Specifically, when an administrator performs an operation on the money handling apparatus 10 or a remote operation using the operation display unit 25 on the administrator terminal 20 and inputs his or her identification number and password, the apparatus use restriction unit 13c. Password authentication is performed. In addition to this, when the employee who has taken out the key 100 operates the money handling apparatus 10 and inputs his or her identification number and password, password authentication is performed by the apparatus use restriction unit 13c. When the password authentication of both the administrator and the employee is normally completed and the two-party authentication is completed, the electronic lock 14 is controlled by the device use restriction unit 13c and the lock is released.

  For example, the authentication process may be performed by the administrator terminal 20. For example, when the user of the key 100 operates the money handling apparatus 10 and inputs information necessary for the authentication process, this information is transmitted to the administrator terminal 20. Then, authentication processing is performed on the administrator terminal 20 using the received information. And the aspect by which the authentication process of an administrator is similarly performed on the administrator terminal 20 after that may be sufficient.

  1 to 5 exemplify a mode in which the key management device 1 is a single unit and performs processing such as locking of the money handling device 10, but the present embodiment is not limited to this. For example, the key management device 1 is configured by a plurality of devices that use the network 30, and a part of functions and operations for monitoring the use of the key 100 and the operation of the money handling device 10 or locking the money handling device 10, or All may be performed by another device connected to the network 30. Such an aspect will be described with reference to FIG.

  FIG. 6 is a diagram for explaining another configuration example of the key management system. In the example illustrated in FIG. 6, the key management apparatus 101 includes a key management unit 11 for storing a plurality of keys 100 therein and managing taking out and returning of each key 100, and a management server 40. In this case, the management server 40 includes the configurations of the units 2 to 4 that configure the key management device 1 illustrated in FIG. 2 and realizes the functions and operations of the key management device 1 described above.

  In the key management apparatus 101, only an operation unit for performing authentication processing related to the use of the key 100 and a functional unit that allows only the authorized key 100 to be extracted are left in the key management unit 11, and the key management shown in FIG. Other functions of the device 1 are moved to the management server 40. Then, by connecting the management server 40 and the key management unit 11 via the network 30, functions and operations similar to those of the key management device 1 shown in FIG. Moreover, the aspect which manages the employee management information 24a preserve | saved in the memory | storage part 24 of the administrator terminal 20 in FIG. 2 by the memory | storage part 4 in the management server 40 may be sufficient.

  Even when the key management apparatus 101 has such a configuration, all of the functions and operations of the key management apparatus 1 and the key management system described above with reference to FIGS. Can do. In addition, the management server 40 has a function of controlling the entrance / exit electronic lock 50 provided in the entrance / exit door of the building and the building where the money handling apparatus 10 is installed. The entrance / exit electronic lock 50 is controlled in the same manner as the electronic lock 14 of the money handling apparatus 10. Accordingly, when there is a possibility that an illegal act has been performed with respect to the money handling apparatus 10, the entrance door can be locked in addition to the lock of the money handling apparatus 10 or instead of the lock of the money handling apparatus 10. .

  In this case, in addition to the administrator terminal 20, the occurrence of an abnormal situation is notified to the portable terminal 60 possessed by the guard. The information notified at this time includes information on the locked doorway, information on the user of the key 100 and the operator of the money handling apparatus 10 related to the abnormal situation, and the like. Thereby, the guard who has recognized the occurrence of the abnormal situation by the portable terminal 60 goes to the locked entrance door, where the entrance door is unlocked, the cause determined to be an abnormal situation, and the money processing apparatus 10 Appropriate measures such as confirmation that there is no problem with the stored money can be taken.

  In addition, the authentication process for unlocking the entrance door is performed by two or more persons including the administrator and the guard, and the entrance door is unlocked only when all the authentication processes are completed normally. It is like that. In addition, when the doorway door is locked by controlling the doorway electronic lock 50, it affects other employees. Therefore, the doorway door is locked among a plurality of predetermined conditions set to lock the money handling apparatus 10. A mode may be performed only when some conditions are satisfied. Specifically, for example, in the example shown in FIGS. 1A to 1E, it is possible that fraudulent acts may not be prevented directly by simply locking the money handling apparatus 10. Only in the cases of b) and (c), the door may be locked.

  As described above, according to the present embodiment, the key management device 1 monitors the use of the key 100, and the usage status of the key 100 and the operating status of the money handling apparatus 10 in which the key 100 is used satisfy a predetermined condition. If it satisfies, it is determined that there is a possibility of unauthorized use of the key 100, and the money handling apparatus 10 can be locked. Thereby, the security of the money accommodated in the money processing apparatus 10 is securable.

  In addition to this, it is also possible to secure the security of the money stored in the money handling apparatus 10 by locking the living room where the money handling apparatus 10 is installed or the entrance door of the building.

  In addition, since the manager and the guard can be notified via the management terminal and the portable terminal that the money handling apparatus 10 is locked, an appropriate response can be taken immediately after the occurrence of an abnormal situation.

  Further, since the lock of the money handling apparatus 10 can be released by a predetermined operation such as two-party authentication by password authentication, even when the lock needs to be released immediately after the money handling apparatus 10 is locked, The lock can be quickly released by performing a predetermined operation. Further, while making the unlocking operation itself easy, security can be ensured by requesting an authentication operation by a user of the key 100 and a plurality of persons such as an administrator and a guard.

  As described above, the present invention is a useful technique for ensuring the security of a device in which a key is used in addition to the security related to the key removal while managing a plurality of keys.

DESCRIPTION OF SYMBOLS 1,101 Key management apparatus 2, 12, 22 Communication part 3, 13, 23 Control part 3a Key use authentication part 3b Key use monitoring part 4, 24 Storage part 4a Key use condition 4b Key use log 10 Money processing apparatus 11 Key management Unit 13a operator authentication unit 13b locking / unlocking monitoring unit 13c device use restriction unit 14 electronic lock 20 administrator terminal 24a employee management information 25 operation display unit 30 network 40 management server 50 entrance electronic lock 60 portable terminal 100 key

Claims (11)

A key management system comprising a money handling device for storing money inside, and a key management device for managing the removal and return of a key used for taking out the money from the money handling device,
The key management device includes:
A lock that monitors the use of the key taken out and instructs the lock of the money handling apparatus so that the money cannot be taken out from the money handling apparatus even if the key is used when the monitoring result satisfies a predetermined condition. A key use monitoring unit for transmitting an instruction signal;
The money handling apparatus includes:
An electronic lock that locks the money handling device so that the money stored inside cannot be removed;
A key management system comprising: a device use restriction unit that controls the electronic lock based on the lock instruction signal received from the key use monitoring unit and locks the money handling apparatus.   The key usage monitoring unit determines that the predetermined condition is satisfied when the predetermined operation regarding the key is not performed within a preset time after the key is taken out of the key management device, and the lock is used. The key management system according to claim 1, wherein an instruction signal is transmitted.   The key usage monitoring unit determines that the predetermined condition is satisfied and transmits the lock instruction signal when a time period when the key is not used is reached based on a setting content related to a preset key usage time period. The key management system according to claim 1 or 2. The key management device further includes a key use authentication unit that authenticates a key user who takes out and uses a key,
The money handling apparatus further includes an operator authentication unit that authenticates an operator who operates the money handling apparatus,
The key usage monitoring unit determines that the predetermined condition is satisfied when the key user authenticated by the key usage authentication unit is different from the device operator authenticated by the operator authentication unit, and the lock usage monitoring unit The key management system according to claim 1, wherein an instruction signal is transmitted. The operator authentication unit of the money handling apparatus performs an authentication process for unlocking,
5. The key management system according to claim 4, wherein when the device use restriction unit is authenticated by the operator authentication unit, the electronic lock is controlled to unlock the money handling device.   In the authentication process performed for unlocking the money handling apparatus, the authentication of two or more persons is performed, and the lock of the money handling apparatus is performed only when all the authentication processes are normally completed and authentication is performed. The key management system according to claim 5, wherein the key management system is released.   The key management system according to claim 5 or 6, wherein the authentication process performed for unlocking the money handling apparatus is password authentication. The key management system further includes an administrator terminal,
The lock of the money handling apparatus is released by operating the manager terminal and performing an authentication process by the operator authentication unit of the money handling apparatus. The key management system described.   The electronic lock is an electromagnetic lock provided on the door independently of a lock provided on the door of the money handling apparatus unlocked by the key, and the lock is unlocked by the key However, the key management system according to any one of claims 1 to 8, wherein the money handling apparatus is brought into a locked state by bringing the electromagnetic lock into a locked state. The key management system further includes:
It has an entrance / exit electronic lock controlled to be locked and unlocked by the key management device, and includes an entrance / exit door controlled to be opened and closed by the entrance / exit electronic lock,
The key management device includes:
When the monitoring result by the said key use monitoring part satisfy | fills predetermined conditions, the said entrance / exit electronic lock is controlled and it locks so that the said entrance door cannot be opened and closed. Key management system described in the section. A key management device for managing a key used to unlock the lock by a money processing device capable of locking a door for accessing the money stored in the door by a remote operation independently of a lock provided on the door. Because
When the use of the key taken out is monitored and the monitoring result satisfies a predetermined condition, the key of the money handling apparatus is remotely controlled so that money cannot be taken out from the money handling apparatus using the key. A key management apparatus comprising: a key use monitoring unit that locks the door.

Images