JP7063392B2 - Security system, security method - Google Patents

Description

The present invention relates to a security system and a security method.

Conventionally, an authentication system that enables an person who tries to enter a security area to enter the security area by authenticating the person is known.

As an example of the authentication method, an authentication system using an IC (Integrated Circuit) chip is known. Such an authentication system is used together with an IC card in which an IC chip is embedded, for example, in admission management. At the entrance gate, the owner of the IC card presents the IC card, and the reading device reads the recorded contents of the IC card to perform authentication.

However, the conventional technique has a problem that it is difficult to prevent spoofing by an unauthorized IC card owner. For example, if an IC card is stolen from a legitimate IC card owner and used, the IC card itself is correctly authenticated, making it difficult to detect spoofing. Further, in particular, in an authentication system that uses the identification information of an IC card for authentication, if the forged IC card has the same identification information as the legitimate IC card, it cannot be determined.

In order to prevent the above-mentioned spoofing, Patent Document 1 includes a security system that uses a portable information terminal capable of communicating with an IC card such as a type B standard to prevent spoofing by an unauthorized IC card owner. It has been disclosed. In Patent Document 1, the identification information of the IC card and the image of the owner's face are associated and recorded on a mobile information terminal. When the IC card is authenticated by the mobile information terminal, the image of the face of the IC card owner associated with the identification information of the IC card is displayed. Admission is managed by the authentication system, and the security system compares the image of the face displayed on the mobile information terminal with the face of the owner of the authenticated IC card to prevent spoofing.

Japanese Unexamined Patent Publication No. 2013-12433 (paragraphs [0004]-[0008])

In such a security system, since an IC card such as a type B standard is used, only one IC card can be authenticated at a time with one mobile information terminal, which is inefficient. If a tag capable of wireless communication is used instead of the IC card as the discriminator used for authentication, it is efficient because all tags within the range communicable with the reader can be authenticated.

However, when the technique of Patent Document 1 is applied to a system using wireless authentication, when a plurality of people are authenticated at the same time, a plurality of face images are also displayed, and the owner of the tag corresponding to the displayed face image is displayed. Is difficult to determine.

Therefore, there is a problem that spoofing by exchanging tags may be overlooked, or spoofing may be overlooked because the comparison cannot catch up with a plurality of suspicious persons.

The present application has been made to solve the above-mentioned problems, and it is easy to identify the owner of the discriminator even if multiple people are authenticated at one time without impairing the efficiency of wireless authentication. The purpose is to provide a security system that can prevent spoofing oversight.

The security system according to the present application has a receiving unit that receives radio waves output by the identifying body, an acquiring unit that acquires identification information of the identifying body from the radio waves received by the receiving unit, and possession of the identifying body in advance in association with the identification information. A registered information storage unit in which the owner information of the person is stored, a determination unit for determining whether or not the identification information matches any of the identification information stored in the registered information storage unit, and an discriminator and a receiving unit. It is provided with a distance information output unit that outputs distance information corresponding to the distance of the above, and a display unit that displays the owner information corresponding to the identification information and the distance information in association with each other when it is determined that the determination units match. ..

In the security system according to the present application, even if multiple people are authenticated at once by radio, the information on the distance between the receiver and the owner of the discriminator can be obtained at the same time as the owner information of the discriminator, and the owner of the discriminator can know the information. It becomes easy to distinguish and it is possible to prevent oversight of spoofing.

Schematic diagram showing a facility in which the security system of the first embodiment of the present application is installed. Functional block diagram of the security system according to the first embodiment of the present application. The figure which shows the example of the registration information table D1 of Embodiment 1 of this application. The figure which shows the example of the acquisition information table D2 of Embodiment 1 of this application. The figure which shows the example of the display information table D3 of Embodiment 1 of this application. The figure which shows the display mode of the display part of Embodiment 1 of this application. The figure which shows the display mode of the display part of Embodiment 1 of this application. An explanatory diagram of a reading range when the receiving unit of the first embodiment of the present application does not have directivity. An explanatory diagram of a reading range when the receiving unit of the first embodiment of the present application has directivity. A hardware configuration diagram showing a hardware configuration of an identifier, a server, an authentication terminal, a controller, an electronic lock, and a hand reader according to the first embodiment of the present application. A hardware configuration diagram showing a hardware configuration of the mobile terminal according to the first embodiment of the present application. A flowchart showing the operation of the authentication system according to the first embodiment of the present application. A flowchart showing the operation of the security system according to the first embodiment of the present application. Functional block diagram of the security system according to the second embodiment of the present application Functional block diagram of the security system according to the third embodiment of the present application Schematic diagram showing a facility in which the security system of the fourth embodiment of the present application is installed. Functional block diagram of the security system according to the fourth embodiment of the present application. Functional block diagram of the security system according to the fifth embodiment of the present application.

Embodiment 1.
The configuration of the security system using the security system of the first embodiment of the present application will be described with reference to FIGS. 1 and 2. FIG. 1 is a schematic diagram showing a facility in which the security system according to the first embodiment of the present application is installed. FIG. 2 is a functional block diagram of the security system according to the first embodiment of the present application. In the following description, the positional relationship between the guard P0 and the persons P0 to P5 are all the same as in FIG.

As shown in FIGS. 1 and 2, the security system 100 of the present application is provided in the facility 1 and includes at least one discriminator 10, a server 20, an authentication system 200, and a security system 300.

Equipment 1 is, for example, an office building in which a plurality of companies are occupying. The equipment 1 is divided into a security area 2 that only employees and other persons authorized in advance can enter. There are guards P0 and multiple people P1 to P5 in the security area 2. Persons P1 to P5 possess the discriminator 10. The guard P0 has a hand-held reader 60 and a mobile terminal 70.

An authentication terminal 30 and an electronic lock 50 are installed at the entrance / exit of the security area 2, and a controller 40 for controlling the electronic lock 50 is further installed in the equipment 1. When the electronic lock 50 is unlocked, the door of the entrance / exit of the security area 2 can be opened. A server 20 that stores data used by the controller 40 and the mobile terminal 70 is also installed in the facility 1.

The identification body 10 is a tag capable of wireless communication that is the target of authentication processing, and a person carries the identification body 10 and authenticates the identification body 10 to authenticate the person. Each identification body 10 includes an identification information storage unit 11 and stores identification information unique to the identification body 10.

The server 20 includes a registration information storage unit 21 and a display information storage unit 22.

The registration information storage unit 21 stores at least one identification information of the identification body 10 and the owner information of the owner of the identification body 10 as the registration information table D1.

FIG. 3 is a diagram showing an example of the registration information table D1. The registration information table D1 associates the identification information of the identification body 10 with the owner information related to the owner for each of the owners of the identification body 10. The owner information includes the owner's employee number, employee ID, name, face image file name, and affiliation. Although the data structure of the registration information table D1 is represented in a table format in FIG. 3, it is actually a list structure.

The display information storage unit 22 stores the display information table D3. The display information storage unit 22 and the display information table D3 will be described later.

Next, the authentication system 200 will be described. The authentication system 200 is a system for managing admission to the security area 2. The authentication system 200 includes an authentication terminal 30, a controller 40, and an electronic lock 50.

The authentication terminal 30 includes a receiving unit 31 and an acquiring unit 32.

The receiving unit 31 receives the radio wave output by the identification body 10 owned by the person who is going to enter the security area 2. It is assumed that the receiving unit 31 can receive the radio wave transmitted by the identifying body 10.
When the identification body 10 transmits the identification information by the UHF (Ultra High Frequency) radio wave, the receiving unit 31 has a function of receiving the UHF radio wave.

The acquisition unit 32 acquires identification information from the radio waves received by the reception unit 31.

The controller 40 includes an acquisition information storage unit 41, a registration information storage unit 42, a determination unit 43, and a key control unit 44.

The acquisition information storage unit 41 stores the identification information of the identification body 10 acquired by the acquisition unit 32 of the authentication terminal 30. The period for storing certain identification information is at least a period during which the acquisition unit 32 has acquired the identification information.

The registration information storage unit 42 stores the information in the registration information table D1 stored in the registration information storage unit 21 of the server 20. The registration information storage unit 42 connects to the server 20 and periodically or constantly synchronizes the stored information with the information in the registration information table D1 stored in the registration information storage unit 21 when or when there is a change.

The determination unit 43 determines whether or not the identification information stored in the acquired information storage unit 41 matches any of the identification information stored in the registration information storage unit 42, and outputs the determination result.

The key control unit 44 controls the electronic lock 50 to be unlocked or locked.

The electronic lock 50 is an automatic door or flapper gate that physically restricts access to the security area 2.

Subsequently, the security system 300 will be described. The security system 300 is a system used by the security guard P0, who is a user, to authenticate the persons P1 to P5 in the security area 2, and the security guard P0 detects a suspicious person by spoofing. The security system 300 includes a hand reader 60 and a mobile terminal 70.

The hand reader 60 acquires the information of the identification body 10 by performing wireless communication. The hand reader 60 can receive radio waves emitted by the discriminator 10 within a range of several meters from the receiving unit 61. The hand reader 60 includes a receiving unit 61, an acquisition unit 62, and a radio field intensity measuring unit 63.

The function or configuration of the receiving unit 61 is the same as that of the receiving unit 31 of the authentication terminal 30.

The function or configuration of the acquisition unit 62 is the same as that of the acquisition unit 32 of the authentication terminal 30.

The radio wave strength measuring unit 63 measures the radio wave strength of the radio wave received by the receiving unit 61. The radio wave strength is a power amount of a radio wave expressed in a unit of dBm or the like, and the radio wave strength measuring unit 63 measures this power amount.

The mobile terminal 70 includes an acquisition information storage unit 71, a distance information output unit 72, a registration information storage unit 73, a determination unit 74, a display information storage unit 75, a display unit 76, and an operation unit 77.

The acquisition information storage unit 71 stores the identification information acquired by the acquisition unit 62 and the radio wave intensity information measured by the radio wave intensity measurement unit 63 as the acquisition information table D2.

FIG. 4 is a diagram showing an example of the acquisition information table D2. The acquisition information table D2 associates the identification information acquired from the radio wave received from the identification body 10 with the radio wave intensity of the radio wave. In FIG. 4, the data structure of the acquired information table D2 is represented by a table, but actually has a list structure. According to FIG. 4, it can be seen that the radio field intensity from the discriminator 10 of the identification information 0001 is the highest at -1 dBm, and the radio field strength from the discriminator 10 of the discrimination information 0005 is the lowest at -5 dBm.

The distance information output unit 72 acquires radio wave strength from the acquired information storage unit 71, and outputs distance information related to the distance between the discriminator 10 and the receiving unit 61. The distance information related to this distance is a numerical value obtained from the radio wave strength and is proportional to the distance between the discriminator 10 and the receiving unit 61. The distance information output unit 72 may obtain the distance information by using information other than the radio wave strength.

Here, the relationship between the radio wave strength and the distance between the discriminator 10 and the receiving unit 61 will be described. When there are a plurality of discriminators 10, the angles of the radio wave transmitting units of the discriminating body 10 with respect to the receiving unit 61 are equal, and there is no object that blocks the radio waves output by the discriminating body 10, the greater the radio wave intensity of the radio waves, the more discriminating. The distance between the body 10 and the receiving unit 61 is short. That is, as the radio wave intensity of the radio wave increases, the distance between the discriminator 10 and the receiving unit 61 decreases monotonically. Therefore, since the distance information is proportional to the distance between the discriminator 10 and the receiving unit 61, the numerical value of the distance information output by the distance information output unit 72 decreases monotonically as the radio wave intensity of the radio wave increases. The fact that the value is proportional to the distance between the discriminator 10 and the receiving unit 61 means that this numerical value increases monotonically as the distance increases, including a linear increase and a quadratic increase.

The function or configuration of the registration information storage unit 73 is the same as that of the registration information storage unit 42 of the controller 40.

The function or configuration of the determination unit 74 is the same as that of the determination unit 43 of the controller 40.

The display information storage unit 75 stores the display information table D3. The display information table D3 stores information to be displayed on the display unit 76.

FIG. 5 is a diagram showing an example of the display information table D3. The display information table D3 stores information corresponding to the identification information of the discriminator 10, which is determined by the determination unit 74 to match any of the identification information of the registration information table D1 stored in the registration information storage unit 73. The information corresponding to the identification information is the owner information of the registration information table D1 and the distance information output by the distance information output unit 72 from the radio wave strength of the acquisition information table D2. As a method of converting the radio field strength into distance information, a method of classifying from the minimum value to the maximum value of the assumed radio wave strength in stages and designating the distance information corresponding to the radio wave strength of each classification can be considered. Alternatively, a method of preparing a function related to radio field strength and distance information and calculating the distance information from the acquired radio wave strength may be used. This time, using a function, the radio field strength is x (dBm) and the distance information is y.
If the signal strength is a negative number,
y = -x ・ ・ ・ (Equation 1)
If the signal strength is a positive number,
y = x ... (Equation 2)
Calculated as. It should be noted that the distance information does not accurately convert the radio field intensity into the distance because it is sufficient to compare the magnitude of the distance with each of the identification bodies 10 when the identification information of the plurality of identification bodies 10 is acquired. It's okay. The display information table D3 stores the owner information and the distance information in association with each other.

In the registration information table D1, the owner information is the employee number, the employee ID, the name, the face image file name, and the affiliation, but the owner information stored in the display information table D3 can be used if the owner can be uniquely identified. At least one of these may be used.

At least, if the face image is displayed, even if the guard P0 does not know the person registered in the registration information table D1, the face image displayed and the face of the owner of the identification body 10 are compared with each other to identify the identification body 10. It is possible to determine whether the owner of the suspicious person is a suspicious person by spoofing.

In the example of the display information table D3 shown in FIG. 5, only the name, the face image file name, and the affiliation are stored as the owner information. In FIG. 5, the data structure of the display information table D3 is represented by a table, but actually has a list structure.

The display unit 76 is a display that displays the information of the display information table D3 stored in the display information storage unit 75, and displays the owner information and the distance information output by the distance information output unit in correspondence with each other. Displaying the owner information in correspondence with the distance information means that the owner information is displayed together with the numerical value output by the distance information output unit, or the owner information is displayed as the magnitude of the numerical value output by the distance information output unit. Refers to displaying in the order of the distance.

6 and 7 are views showing an example of the display mode of the display unit 76.

FIG. 6 is an example of a display mode in which the owner information is displayed together with the numerical value output by the distance information output unit 72. In the case of the display shown in FIG. 6, the guard P0 compares the numerical value indicated by the displayed distance information with the positional relationship between the persons P1 to P5, and the person indicated by the displayed owner information and the persons P1 to P5. It is possible to confirm whether or not they are the same person. If the numerical value indicated by the distance information is a distance expressed in absolute units, the guard P0 can confirm with certainty.

FIG. 7 is an example of a display mode in which the owner information is displayed side by side in the order of the magnitude of the numerical value output by the distance information output unit 72. In FIG. 7, the owner information is arranged from the top in ascending order of the numerical values output by the distance information output unit 72. In the case of the display shown in FIG. 7, the guard P0 knows that the owner indicated by the owner information displayed at the top is the owner of the identification body 10 closest to himself / herself. This makes it easier for the guard P0 to confirm in order from the person near him / her, and it is possible to prevent the confirmation from being overlooked.

The operation unit 77 receives an operation from the user. The operation unit 77 is a mouse, a keyboard, buttons, or a touch panel integrated with the display unit 76.

Since the display information storage unit 75 deletes the information designated by the guard P0 in the operation unit 77 from the display information table D3 to be stored, the display unit 76 hides the designated information. That is, the guard P0 confirms that the owner of the identification body 10 and the owner displayed on the display unit 76 match, and then operates the operation unit 77 to specify the confirmed owner information. Can be hidden. By this operation, only the unconfirmed owner information is displayed on the display unit 76, so that security can be performed efficiently.

The display information table D3 stored in the display information storage unit 75 is synchronized with the display information storage unit 22 of the server 20. By synchronizing, the owner information of the owner information confirmed by the operation unit 77 is not stored in the display information table D3 for a certain period of time. As a result, if a plurality of mobile terminals 70 are prepared, it is possible to efficiently confirm that the owner of the identification body 10 and the owner displayed on the display unit 76 are the same by a plurality of people.

By arranging a metal plate or the like in the vicinity of the receiving unit 61 to give directivity to the reception range of radio waves, the receiving unit 61 of the hand reader 60 exists in a limited direction with respect to the receiving unit 61. Only the radio wave of the discriminator 10 may be received. As a result, since the identification body 10 from which the receiving unit 61 can acquire radio waves is limited, the owner information displayed on the mobile terminal 70 is also limited, and spoofing can be easily detected.

FIG. 8 is an explanatory diagram of a reading range when the receiving unit 61 of the first embodiment of the present application does not have directivity, and FIG. 9 shows a reading range when the receiving unit 61 of the first embodiment of the present application has directivity. An explanatory diagram is shown. The area of the broken line shown in FIGS. 8 and 9 is a reading range in which the receiving unit 61 can acquire the radio wave of the discriminator 10. In FIGS. 8 and 9, the positional relationship between the guard P0 and the persons P1 to P5 is the same.

In the case of FIG. 8, the acquisition information table D2 is the same as FIG. 4, the display information table D3 is FIG. 5, and the display of the display unit is the same as the example shown in FIG. In the case of FIG. 8, the receiving unit 61 acquires the radio wave of the identification body 10 possessed by P1 to P5. In this case, even by looking at the display shown in FIG. 6, the distance information about P3 Mitsubishi Saburo and P4 Shiryo Shiro is the same, and it is not possible to determine which of P3 and P4 is Mitsubishi Saburo. Therefore, in order for the guard P0 to determine which of P3 and P4 is Mitsubishi Saburo, it is necessary to move so that the distance between the receiving unit 61 and P3 or P4 is different.

On the other hand, in the case of FIG. 9, the receiving unit 61 acquires only the radio wave of the discriminator 10 possessed by P1, P3, and P5. In this case, the acquired information table D2 has no information on P2 and P4 from the example shown in FIG. 4, and the display information table D3 also has no information on P2 and P4 from the example shown in FIG. Therefore, since the information of P2 and P4 is not displayed from the display of FIG. 6, the guard can determine that P3 is Mitsubishi Saburo from the distance relationship of P1, P3, and P5. If the guard P0 wants to authenticate P2 and P4, the direction of the receiving unit 61 of the hand reader 60 may be directed to P2 and P4, and there is no need to move.

Hereinafter, the hardware configuration of the components included in the security system of the present application will be described with reference to FIGS. 10 and 11.

FIG. 10 is a hardware configuration diagram showing the hardware configurations of the classifier 10, the server 20, the authentication terminal 30, the controller 40, and the hand reader 60. The hardware illustrated in FIG. 10 includes a storage device 3, a receiving device 4, a transmitting device 5, and a processing device 6.

The storage device 3 corresponds to the identification information storage unit 11, the registration information storage unit 21, the display information storage unit 22, the acquisition information storage unit 41, and the registration information storage unit 42, and stores the identification information. For example, non-volatile or volatile semiconductor memories such as RAM, ROM, and flash memory, magnetic disks, flexible disks, optical disks, compact disks, and the like are applicable.

The receiving device 4 is a network interface corresponding to the receiving unit 31 and the receiving unit 61. In addition, although not shown in FIG. 2, each of the discriminator 10, the server 20, the controller 40, and the electronic lock 50 includes a receiving device 4 for communicating with other devices. This network is a wired communication network such as a LAN cable or a coaxial cable, or a wireless communication network using wireless communication technology.

However, the discriminator 10 includes only a wireless communication network interface. The authentication terminal 30 and the hand reader 60 also have at least a wireless communication network interface for wireless communication with the discriminator 10.

The transmitting device 5 is a network interface. Although not shown in FIG. 2, each of the identification body 10, the server 20, the authentication terminal 30, the controller 40, the electronic lock 50, and the hand reader 60 includes a transmission device 5 for communicating with other devices. This network is a wired communication network such as a LAN cable or a coaxial cable, or a wireless communication network using wireless communication technology.

However, the discriminator 10 includes only a wireless communication network interface.
The authentication terminal 30 and the hand reader 60 also have at least a wireless communication network interface for wireless communication with the discriminator 10.
The radio wave used at this time is, for example, the radio wave received by the discriminator 10 is an LF radio wave (frequency 135 kHz), and the radio wave transmitted is a UHF radio wave (frequency 315 MHz).

The processing device 6 corresponds to an acquisition unit 32, a determination unit 43, a key control unit 44, an acquisition unit 62, a radio wave intensity measurement unit 63, a distance information output unit 72, and a determination unit 74. In addition, the discriminator 10 and the server 20 also include a processing device 6 for controlling and communicating with the receiving device 4 and the transmitting device 5. The processing device 6 may be dedicated hardware or a CPU (Central Processing Unit) that executes a program recorded in the storage device 3.

When the processing device 6 is dedicated hardware, for example, a single circuit, a composite circuit, a programmed processor, a parallel programmed processor, an ASIC (Application Specific Integrated Circuit), an FPGA (Field-Programmable Gate Array), or A combination of these is applicable.

When the processing device 6 is a CPU, it is realized by software, firmware, or a combination of software and firmware. Software and firmware are described as programs and recorded in the storage device 3. In this case, the processing device 6 realizes the function by reading and executing the program stored in the storage device 3.

FIG. 11 is a hardware configuration diagram showing the hardware configuration of the mobile terminal 70. The mobile terminal 70 includes a storage device 78, a receiving device 79, a transmitting device 80, a processing device 81, a display device 82, and an input device 83.

The storage device 78 corresponds to the acquisition information storage unit 71, the registration information storage unit 73, and the display information storage unit 75, and stores the registration information table D1, the acquisition information table D2, and the display information table D3. For example, non-volatile or volatile semiconductor memories such as RAM, ROM, and flash memory, magnetic disks, flexible disks, optical disks, compact disks, and the like are applicable.

The receiving device 79 is a network interface for receiving data. This network may be a wired communication network such as a LAN cable or a coaxial cable, or a wireless communication network using wireless communication technology.

The transmission device 80 is a network interface for transmitting data. This network may be a wired communication network such as a LAN cable or a coaxial cable, or a wireless communication network using wireless communication technology.

The processing device 81 corresponds to the distance information output unit 72 and the determination unit 74, and also controls the transmission device 5 and changes the information stored in the storage device 3. Similar to the processing device 6 of the discriminator 10, the processing device 81 may be dedicated hardware or a CPU that executes a program recorded in the storage device 78.

The display device 82 is a display corresponding to the display unit 76.

The input device 83 is a mouse, keyboard, or button corresponding to the operation unit 77, or a touch panel when the operation unit 77 is integrated with the display unit 76.

Next, the operation of the security system 100 according to the first embodiment of the present application will be described.

First, the operation of the authentication system 200 according to the first embodiment of the present application will be described. FIG. 12 is a flowchart showing the operation of the authentication system 200 according to the first embodiment of the present application.

When the authentication system 200 is activated, the operation shown in FIG. 12 starts, and the operation shown in FIG. 12 is repeated during the period of admission management to the security area 2.

First, in step S21, it is determined whether or not the receiving unit 31 has received the radio wave of the identifying body 10. If it is not determined in step S21 that the receiving unit 31 has received the radio wave of the discriminator 10, step S21 is repeated until it is determined that the radio wave has been received.

If it is determined in step S21 that the receiving unit 31 has received the radio wave of the identifying body 10, the process proceeds to step S22, and the acquiring unit 32 acquires the identification information of the identifying body 10 from the radio wave received by the receiving unit 31.

After step S22, the process proceeds to step S23, and the acquisition information storage unit 41 of the controller 40 stores the identification information acquired by the acquisition unit 32.

After step S23, the process proceeds to step S24. The determination unit 43 determines whether or not the identification information stored in the acquisition information storage unit 41 is stored in the registration information table D1 of the registration information storage unit 42. If it is determined in step S24 that the identification information acquired by the determination unit 43 is not stored in the registration information table D1, the process returns to step S21. If it is determined in step S24 that the identification information acquired by the determination unit 43 is stored in the registration information table D1, the process proceeds to step S25.

In step S25, the key control unit 44 sends an unlocking command to the electronic lock 50 to unlock the electronic lock 50. After the key control unit 44 unlocks the electronic lock 50 in step S25, the process proceeds to step S26.

In step S26, after a preset time has elapsed from the unlocking of the electronic lock 50, the key control unit 44 sends a lock command to the electronic lock 50 to lock the electronic lock 50. The set time is sufficient for the owner of the authenticated identification body 10 to pass through the electronic lock 50. Instead of locking the electronic lock 50 after the lapse of time, the sensor may detect that the owner of the authenticated identification body 10 has passed the electronic lock 50 and then lock the electronic lock 50.

After step S26, the process returns to step S21. Steps S21 to S26 are repeated while the authentication system 200 is in operation.

By the operation of steps S21 to S26 as described above, the authentication system 200 can manage the entrance to the security area 2.

Subsequently, the operation of the security system 300 according to the first embodiment of the present application will be described.
FIG. 13 is a flowchart showing the operation of the security system 300 according to the first embodiment of the present application. When the security system 300 is activated, the operation shown in FIG. 13 starts, and the operation shown in FIG. 13 is repeated during the period of security in the security area 2.

First, in step S31, it is determined whether or not the receiving unit 61 has received the radio wave of the identifying body 10.
If it is not determined in step S31 that the receiving unit 61 has received the radio wave of the discriminator 10, step S31 is repeated until it is determined that the radio wave has been received.

If it is determined in step S31 that the receiving unit 61 has received the radio wave of the identifying body 10, the process proceeds to step S32, and the acquiring unit 62 acquires the identification information of the identifying body 10 from the radio wave received by the receiving unit 61.

After step S32, the process proceeds to step S33, and the radio wave intensity measuring unit 63 measures the radio wave intensity of the radio wave received by the receiving unit 61.

After step S33, the process proceeds to step S34, and the acquisition information storage unit 71 of the mobile terminal 70 stores the identification information acquired by the acquisition unit 62 and the radio wave intensity acquired by the radio wave intensity measurement unit 63 as the acquisition information table D2.

After step S34, the process proceeds to step S35, and the distance information output unit 72 acquires the radio wave strength from the acquired information storage unit 71, and outputs the distance information related to the distance between the discriminator 10 and the receiving unit 61.

After step S35, the process proceeds to step S36, and the determination unit 74 determines whether or not the identification information stored in the acquisition information storage unit 71 is stored in the registration information table D1 of the registration information storage unit 73. If it is determined in step S36 that the identification information acquired by the determination unit 74 is not stored in the registration information table D1, the process returns to step S31. If the acquired identification information is not registered in the registration information table D1, the person carrying the unregistered identification body 10 may be a suspicious person who is not allowed to invade the security area 2. expensive. Therefore, before returning to step S31, it may be displayed that the display unit 76 does not have the owner information corresponding to the identification information. The display that there is no owner information may be displayed as, for example, the characters "there is no owner information" as visual information, or may be displayed by sounding a warning sound as auditory information. Further, if there is no owner information corresponding to the identification information and the distance information corresponding to the identification information is displayed in association with each other, the distance information of the person having the identification body 10 that stores the unregistered identification information is displayed. Can be known.

If it is determined in step S36 that the identification information acquired by the determination unit 74 is stored in the registration information table D1, the process proceeds to step S37.

In step S37, the display information storage unit 75 corresponds to the identification information of the discriminator 10 determined by the determination unit 74 to match any of the identification information of the registration information table D1 stored in the registration information storage unit 73. Information is added to and stored in the display information table D3 in association with each other. The information corresponding to the identification information is the owner information of the registration information table D1 and the distance information output by the distance information output unit 72 from the radio wave strength of the acquisition information table D2.

After step S37, the process proceeds to step S38, and it is determined whether or not the operation unit 77 has performed an operation to hide the owner information displayed on the display unit 76. That is, whether the guard P0 compares the display of the display unit 76 with the owner of the identification body 10 and confirms whether the owner indicated by the owner information and the owner of the identification body 10 are the same person. Judge whether or not.

When it is determined that the operation of hiding is performed in step S38, the information corresponding to the owner information for which the operation of hiding is performed in step S39 is deleted from the display information table D3.

If it is not determined that the operation to hide is performed in step S38, or after step S39, the process proceeds to step S40.

In step S40, the display unit 76 displays the information stored in the display information table D3.

After step S40, the process returns to step S31. While the security system 300 is in operation, the operations of steps S31 to S40 are repeated.

Although not shown in FIGS. 12 and 13, the synchronization of the data in the registered information storage unit and the display information storage unit of the controller 40 and the server 20, and the mobile terminal 70 and the server 20 is periodically or when there is a change. Or always do.

By the operation of steps S31 to S40 as described above, the security system 300 authenticates the person who possesses the identification body 10 in the security area 2, and the mobile terminal 70 displays the owner information and the distance information. The user of the terminal 70 can detect a suspicious person by spoofing.

As described above, according to the first embodiment of the present application, in the authentication system 200, the user uses the security system 300 for a suspicious person who has invaded the security area 2 by using the unauthorized identification body 10. Can be found by.

Further, even if a plurality of people are authenticated by the security system 300 wirelessly at one time, the display unit 76 of the mobile terminal 70 shows the owner information of the identification body 10 and at the same time, the distance between the reception unit 61 and the owner of the identification body 10. Since the information is known, the owner of the discriminator 10 can be easily identified, and spoofing can be prevented from being overlooked.

Embodiment 2.
In the security system 100 according to the first embodiment, the hand reader 60 and the mobile terminal 70 are separate, but the mobile terminal 70 has the configuration of the hand reader 60, and the security system 300 is configured only by the mobile terminal 70. May be good. The functional block diagram in that case is shown in FIG. The configuration of the same reference numerals as those in FIG. 2 in FIG. 14 is the same as that of FIG. 2.

By integrating the mobile terminal 70 and the hand reader 60 of the first embodiment, the guard P0 only needs to carry the mobile terminal 70, which is convenient to carry.

Embodiment 3.
In the security system 100 according to the first embodiment and the second embodiment, the configurations having the same name are duplicated in different devices, but those configurations may be provided in the server 20 and may be a common configuration. The functional block diagram in that case is shown in FIG. The configuration of the same reference numeral as that of FIG. 2 in FIG. 15 is the same as that of FIG. 2.

With the configuration as shown in FIG. 15, the capacity of the storage device required for the authentication terminal 30, the controller 40, the hand reader 60, and the mobile terminal 70 is reduced, and the performance of the required processing device is also reduced. Equipment can be configured with inexpensive hardware.

Embodiment 4.
In the first, second and third embodiments, the radio wave intensity measuring unit 63 is provided in the hand reader 60, but a plurality of radio wave intensity measuring units 63 may be fixedly installed in the security area 2. A schematic diagram showing a facility in which a security system is installed in that case is shown in FIG. 16, and a functional block diagram is shown in FIG. In this case, the plurality of radio wave strength measuring units 63 transmit the radio wave strength of the discriminator 10 to the acquired information storage unit 71 of the server 20, and the distance information output unit 72 transmits the radio wave of the discriminating body 10 from the plurality of radio wave strength measuring units 63. After calculating the position of the discriminator 10 from the intensity information, the distance information corresponding to the distance between the discriminator 10 and the receiving unit 61 is output.

Embodiment 5.
In the first to fourth embodiments, the distance information output unit 72 obtains the distance information from the radio wave strength, but the distance information may be obtained by using other than the radio wave strength. The functional block diagram in that case is shown in FIG. The hand reader 60 of the present embodiment includes a response delay measuring unit 64 instead of the radio field intensity measuring unit 63. The response delay measuring unit 64 measures the response delay time from the transmission request of the identification information to the identification body 10 to the reception of the identification information by the reception unit 61. This response delay time is the time required for the radio wave to reciprocate between the receiving unit 61 and the identifying body 10, and the longer the distance between the receiving unit 61 and the identifying body 10, the longer the response delay time. Therefore, as the radio wave intensity increases, the numerical value of the distance information decreases monotonically, but as the response delay time increases, the numerical value of the distance information increases monotonically.

The following modifications can be made to the above-described embodiments 1 to 5.

In the first to fifth embodiments, the security system 100 is provided with the authentication system 200 and the security system 300, but the authentication system 200 may not be installed and only the security system 300 may be used.

In the first to fifth embodiments, the server 20 is provided in the facility 1, but the server 20 may not be provided in the facility 1 but may be provided in the management company or the cloud server.

As described above, in the present application, even if a plurality of people are authenticated at once by radio, information on the distance between the receiving unit and the owner of the discriminator can be obtained at the same time as the owner information of the discriminator. It becomes easy to identify the person and it is possible to prevent oversight of spoofing.

1 Facility 2 Security area 3 Storage device 4 Reception device 5 Transmission device 6 Processing device 10 Identification 11 Identification information storage unit 20 Server 21 Registration information storage unit 22 Display information storage unit 30 Authentication terminal 31 Reception unit 32 Acquisition unit 40 Controller 41 acquisition Information storage unit 42 Registration information storage unit 43 Judgment unit 44 Key control unit 50 Electronic lock 60 Hand reader 61 Receiver unit 62 Acquisition unit 63 Radio strength measurement unit 64 Response delay measurement unit 70 Mobile terminal 71 Acquisition information storage unit 72 Distance information output Unit 73 Registration information storage unit 74 Judgment unit 75 Display information storage unit 76 Display unit 77 Operation unit 78 Storage device 79 Receiver device 80 Transmission device 81 Processing device 82 Display device 83 Input device D1 Registration information table D2 Acquisition information table D3 Display information table 100 security system 200 authentication system 300 security system

Claims (12)

The receiver that receives the radio waves output by the discriminator,
An acquisition unit that acquires identification information of the identification body from the radio wave received by the reception unit, and an acquisition unit.
A registration information storage unit that stores the owner information of the owner of the discriminator in advance in association with the identification information.
A determination unit for determining whether or not the identification information matches any of the identification information stored in the registration information storage unit.
A distance information output unit that outputs distance information corresponding to the distance between the discriminator and the receiver unit,
When it is determined that the determination units match, the display unit that displays the owner information corresponding to the identification information and the distance information in association with each other.
A security system characterized by being equipped with. The security system according to claim 1, wherein the distance information is a numerical value proportional to the distance between the discriminator and the receiving unit. The security system according to claim 2, wherein the display unit displays the owner information corresponding to the identification information together with the numerical value when the determination unit determines that they match. The security system according to claim 2, wherein the display unit displays the owner information corresponding to the identification information in the order of the magnitude of the numerical value when the determination unit determines that they match. Further, a radio wave strength measuring unit for measuring the radio wave strength of the radio wave received by the receiving unit is provided.
The security system according to any one of claims 1 to 4, wherein the distance information output unit converts the radio wave intensity and outputs the distance information. Further, a response delay measuring unit for measuring the response delay time of the radio wave received by the receiving unit is provided.
The security system according to any one of claims 1 to 4, wherein the distance information output unit converts the response delay time and outputs the distance information. The security system according to claim 5 or 6, wherein the receiving unit receives the radio wave of the identifying body existing in a limited direction with respect to the receiving unit. The security system according to any one of claims 1 to 7, wherein the owner information includes a face image of the owner of the discriminator. The item according to any one of claims 1 to 8, wherein the display unit displays that there is no owner information corresponding to the identification information when the determination unit determines that there is no match. The security system described. The item according to any one of claims 1 to 9, wherein the display unit displays the distance information corresponding to the identification information when the determination unit determines that there is no match. Security system. It also has an operation unit that accepts operations from users.
The security system according to any one of claims 1 to 10, wherein the display unit hides the owner information to be displayed by an operation from the operation unit. The step of receiving the radio wave output by the discriminator at the receiving unit,
A step in which the acquisition unit acquires the identification information of the identification body from the radio wave received by the reception unit, and
A step of determining whether or not the identification information matches any of the identification information stored in the registration information storage unit that stores the owner information of the owner of the identification body in advance in association with the identification information. ,
A step in which the distance information output unit outputs distance information corresponding to the distance between the discriminator and the receiving unit.
When it is determined that the determination units match, the steps displayed by the display unit by associating the owner information corresponding to the identification information with the distance information, the display of the display unit, and the owner of the identification body. And a step to confirm whether the owner indicated by the owner information and the owner of the discriminator are the same person.
Security method to prepare.

Images