JP7207594B1 - Authentication system - Google Patents

Abstract

An authentication system is provided that suppresses the occurrence of erroneous authentication by other users who do not intend to be authenticated, and allows users who do intend to be authenticated to smoothly undergo authentication. An authentication system includes a position information acquisition unit for acquiring position information regarding the position of a mobile terminal possessed by a user within a preset area, and a terminal identification information acquisition unit for acquiring terminal identification information of the mobile terminal. a first authentication means for authenticating the terminal identification information acquired by the terminal identification information acquisition means; a plurality of personal identification information acquisition devices provided in the area for acquiring personal identification information of users; and personal identification information acquisition For each of the plurality of personal identification information acquisition devices, based on the second authentication means for authenticating the personal identification information acquired by the device, the location information of the mobile terminal acquired by the location information acquisition means, and the authentication result by the first authentication means and control means for enabling or disabling the acquisition operation of personal identification information. [Selection drawing] Fig. 1

Description

The present disclosure relates to authentication systems.

In the authentication system, the person who wants to enter a room detection unit detects a person who wants to enter a room where entry is restricted, and notifies the reader/writer control unit that the reader/writer control unit receives the notification. to read the ID number from the UHF band wireless IC tag held by the person who wishes to enter the room, and the matching information update processing unit uses the ID number read from the wireless IC tag by the reader/writer to match the biometric information is read from the biometric information table and stored in the matching table in advance, and then when the biometric information is sent from the biometric authentication device, the matching processing unit stores the biometric information read by the biometric authentication device in the matching table. There is known a device that is configured to match with the biometric information obtained (see, for example, Patent Document 1).

Japanese Patent Application Laid-Open No. 2007-066107

As described above, the authentication system as disclosed in Patent Document 1 reads the biometric information to be matched from the biometric information table using the ID number read from the wireless IC tag and stores it in the matching table in advance (preloading). By doing so, the purpose is to improve the authentication accuracy of biometric authentication by 1:1 authentication and increase the speed of authentication. However, when another user who does not intend to be authenticated enters the reading range of the wireless IC tag reader and the biometric authentication device, authentication is performed unintentionally. A certain user may not be able to be authenticated.

The present disclosure has been made to solve such problems. It is an object of the present invention to provide an authentication system that allows a user who intends to be authenticated to be authenticated smoothly while suppressing the occurrence of erroneous authentication by other users who do not intend to be authenticated.

An authentication system according to the present disclosure includes a position information acquisition unit that acquires position information regarding the position of a mobile terminal possessed by a user within a preset area, and a terminal identification information acquisition that acquires terminal identification information of the mobile terminal. means, a first authentication means for authenticating the terminal identification information acquired by the terminal identification information acquisition means, a plurality of personal identification information acquisition devices provided in the area for acquiring the personal identification information of the user; a second authentication means for authenticating the personal identification information acquired by the personal identification information acquisition device; and a plurality of and control means for enabling or disabling the operation of obtaining the personal identification information for each of the personal identification information obtaining devices.

According to the authentication system according to the present disclosure, it is possible to suppress the occurrence of erroneous authentication by other users who do not intend to be authenticated, and to enable users who are willing to be authenticated to be authenticated smoothly. Play.

1 is a diagram schematically showing the overall configuration of an authentication system according to Embodiment 1; FIG. 2 is a block diagram showing the configuration of the main part of the authentication system according to Embodiment 1; FIG. 4 is a flow chart showing an example of the operation of the authentication system according to Embodiment 1; FIG. FIG. 9 is a flowchart showing another example of the operation of the authentication system according to Embodiment 1; 2 is a block diagram showing an example of a configuration for implementing functions of the authentication system according to Embodiment 1; FIG. FIG. 9 is a block diagram showing the configuration of the main part of an authentication system according to Embodiment 2; FIG. 11 is a flow chart showing an example of the operation of the authentication system according to Embodiment 2; FIG. 12 is a block diagram showing the configuration of the main part of an authentication system according to Embodiment 3; FIG. 12 is a flow chart showing an example of the operation of the authentication system according to Embodiment 3;

A mode for implementing an authentication system according to the present disclosure will be described with reference to the accompanying drawings. In each figure, the same or corresponding parts are denoted by the same reference numerals, and overlapping descriptions are appropriately simplified or omitted. In the following description, for the sake of convenience, the positional relationship of each structure may be expressed based on the illustrated state. It should be noted that the present disclosure is not limited to the following embodiments, and any combination of the embodiments, any modification of the constituent elements of the embodiments, or each Any component of the embodiment can be omitted.

Embodiment 1.
Embodiment 1 of the present disclosure will be described with reference to FIGS. 1 to 5. FIG. FIG. 1 is a diagram schematically showing the overall configuration of an authentication system. FIG. 2 is a block diagram showing the configuration of the essential parts of the authentication system. FIG. 3 is a flow diagram showing an example of the operation of the authentication system. FIG. 4 is a flow diagram showing another example of the operation of the authentication system. FIG. 5 is a block diagram showing an example of a configuration that implements the functions of the authentication system.

The authentication system according to this embodiment, as shown in FIG. One or more position detectors 2 are installed within a preset area in a facility, building, or the like in which the authentication system is installed. This zone is, for example, the target area for 1:1 authentication by the authentication system. The position detector 2 and the position information detection server 3 are for detecting the position of the mobile terminal 1 within the area described above. Note that the position detector 2 and the position information detection server 3 can also detect the position of the mobile terminal 1 within a certain range outside the aforementioned area.

Each user 8 has a mobile terminal 1 such as a smart phone. Each position detector 2 can wirelessly communicate with the mobile terminal 1 possessed by the user 8 . Each position detector 2 is communicably connected to a position information detection server 3 . In addition, the position information detection server 3 and the entrance/exit management server 7 are provided so as to be able to communicate with each other.

The room entry/exit authentication terminal 5 and the room entry/exit management server 7 are for managing entry/exit of the user 8 to/from each section provided in a facility or building in which the authentication system is installed. A door 6 is provided at the entrance/exit of each section in the area described above. The door 6 is provided with an electric lock (not shown). Alternatively, the door 6 is basically an automatic door that cannot be opened and closed manually. When the door 6 is an automatic door, the door 6 is equipped with an opening/closing drive.

A room entry/exit authentication terminal 5 is installed in the vicinity of each door 6 . The room entry/exit authentication terminal 5 is provided corresponding to each of the doors 6 . A plurality of room entrance/exit authentication terminals 5 are provided in the area described above.

Each mobile terminal 1 stores terminal identification information in advance. The terminal identification information is information that can uniquely identify each mobile terminal 1 . The mobile terminal 1 transmits terminal identification information of the mobile terminal 1 when communicating with the position detector 2 . The position detector 2 receives terminal identification information transmitted from the mobile terminal 1 . The position detector 2 is terminal identification information acquisition means for acquiring terminal identification information of the mobile terminal 1 .

The position detector 2 transmits the received terminal identification information to the position information detection server 3 . The location information detection server 3 authenticates the received terminal identification information. That is, the position information detection server 3 uses the received terminal identification information to determine whether the user 8 who possesses the mobile terminal of the terminal identification information is a person who has the authority to pass through the door 6 in the area described above. or The location information detection server 3 is first authentication means for authenticating the terminal identification information acquired by the terminal identification information acquisition means.

The room entry/exit authentication terminal 5 is a personal identification information acquisition device that acquires the personal identification information of the user 8 who is going to pass through the door 6 corresponding to the room entry/exit authentication terminal 5 . The personal identification information is information that can uniquely identify each individual who is the user 8 . Specifically, for example, a personal ID assigned to each user 8, biometric information such as the user's 8 face, iris, and fingerprint can be used as the personal identification information.

When using a personal ID as personal identification information, the user 8 possesses, for example, an RFID (Radio Frequency Identification) tag. The RFID tag may be integrated with the mobile terminal 1 . The RFID tag is pre-stored with personal identification information of the user who owns the tag, that is, a personal ID. The room entrance/exit authentication terminal 5 has a tag reader for reading the personal ID stored in the RFID tag. In particular, by using an active or semi-active RFID tag as the RFID tag, the room entry/exit authentication terminal 5 can read the individual ID of the remote RFID tag. Further, when biometric information of the user 8 is used as the personal identification information, the entrance/exit authentication terminal 5 is provided with a camera or the like for acquiring the biometric information of the user 8 . The entrance/exit authentication terminal 5 acquires personal identification information of the user 8 when the user 8 enters a preset identification information acquisition area.

Each room entry/exit authentication terminal 5 is provided so as to be able to communicate with the room entry/exit management server 7 . In addition, the entrance/exit management server 7 is provided so as to be able to communicate with the electric lock or opening/closing driving device of each door 6 . The room entrance/exit authentication terminal 5 transmits the acquired personal identification information to the room entrance/exit management server 7 . The entrance/exit management server 7 authenticates the received personal identification information. That is, the entrance/exit management server 7 uses the received personal identification information to authenticate whether or not the user 8 of the personal identification information is authorized to pass through the door 6 . The room entry/exit management server 7 is a second authentication means for authenticating the personal information acquired by the personal information acquisition device.

The entrance/exit management server 7 controls the electric lock or opening/closing driving device of the door 6 according to the authentication result of the personal identification information. When the authentication of the personal identification information is successful, the entrance/exit management server 7 unlocks the electric lock of the door 6 or operates the opening/closing drive device to open the door 6 . As a result, the user 8 who has been successfully authenticated can pass through the door 6 . On the other hand, if the authentication of the personal identification information fails, the entry/exit management server 7 keeps the door 6 electrically locked or the door 6 closed. This prevents the user 8 who has failed authentication from passing through the door 6 .

As shown in FIG. 2 , the room entry/exit management server 7 includes a location information detection server storage unit 9 , a positioning unit 10 , and an entry/exit management system linking unit 11 . The location information detection server storage unit 9 stores a history of normal situations between each location detector 2 and the mobile terminal 1, that is, a communication log. The communication log includes, for example, terminal identification information of the mobile terminal 1, information specifying the position detector 2 that has communicated with the mobile terminal 1, response time of the mobile terminal 1, and the like. The positioning unit 10 identifies the position of the mobile terminal 1 using the communication log stored in the position information detection server storage unit 9 . The location information detection server storage unit 9 stores location information, which is information about the location of the mobile terminal 1 specified by the positioning unit 10 , for each piece of terminal identification information of the mobile terminal 1 .

In this way, the position detector 2 and the positioning unit 10 constitute position information obtaining means for obtaining position information regarding the position of the portable terminal 1 possessed by the user 8 within a preset area. The acquired position information is stored in the position information detection server storage unit 9 .

The location information detection server storage unit 9 also stores authentication information for each terminal identification information. In the authentication information stored in the location information detection server storage unit 9, the terminal identification information of the mobile terminal 1 possessed by the user 8 who has the right to pass the door 6 in the zone is registered in advance. The information for authentication may include information on the door 6 to which the user 8 who owns the portable terminal 1 of the terminal identification information is authorized to pass, corresponding to each piece of terminal identification information.

The entrance/exit management system cooperation unit 11 authenticates the terminal identification information received by the position detector 2 . That is, the entry/exit management system cooperation unit 11 collates the received terminal identification information with the authentication information stored in the location information detection server storage unit 9 . Then, if the received terminal identification information is included in the authentication information, the authentication is successful. On the other hand, if the received terminal identification information is not included in the authentication information, the authentication fails.

It should be noted that the positioning unit 10 may perform positioning only for the mobile terminals 1 with terminal identification information that has been successfully authenticated, instead of performing positioning for all the mobile terminals 1 with the received terminal identification information. By doing so, the amount of processing required for positioning can be reduced.

The entry/exit management system cooperation unit 11 determines whether or not the position of the mobile terminal 1 in the terminal identification information for which authentication has succeeded is within the above-described area, that is, within the target area for 1:1 authentication. Then, if the position of the mobile terminal 1 having the terminal identification information that has been successfully authenticated is within the above-described area, the entry/exit management system cooperation unit 11 transmits the terminal identification information to the entry/exit management server 7 .

The room entry/exit management server 7 includes an entry/exit management server storage unit 12 and an authentication terminal control unit 13 . In the entry/exit management server storage unit 12, the personal identification information and the door 6 to which the user 8 of the personal identification information has the authority to pass are stored as the terminal identification information of the mobile terminal 1 possessed by the user 8 of the personal identification information. are associated and stored. The personal identification information and the terminal identification information of the portable terminal 1 possessed by the user of the personal identification information may be the same. That is, the personal identification information of the user 8 who owns the mobile terminal 1 may be used as the terminal identification information.

The authentication terminal control unit 13 controls the operation of each room entry/exit authentication terminal 5 . In particular, the authentication terminal control unit 13 can control whether to enable or disable the acquisition operation of personal identification information for each of the plurality of room entry/exit authentication terminals 5 . In the following description, validating the personal identification information acquisition operation of the room entry/exit authentication terminal 5 is also simply referred to as "validating" the room entry/exit authentication terminal 5 . Disabling the operation of acquiring personal identification information is also simply referred to as "disabling" the room entrance/exit authentication terminal 5 .

The room entry/exit management server 7 receives the terminal identification information transmitted from the position information detection server 3 . The authentication terminal control unit 13 collates the received terminal identification information with the information stored in the entrance/exit management server storage unit 12 . Then, if the received terminal identification information is stored in the entrance/exit management server storage unit 12, the authentication terminal control unit 13 stores the personal identification information corresponding to the received terminal identification information and the user 8 of the personal identification information. acquires information specifying the door 6 that has the right to pass.

The authentication terminal control unit 13 activates the room entry/exit authentication terminal 5 corresponding to the door 6 for which the user 8 of the personal identification information corresponding to the received terminal identification information has the right to pass. On the other hand, the authentication terminal control unit 13 invalidates the room entry/exit authentication terminal 5 corresponding to the door 6 for which the user 8 of the personal identification information corresponding to the received terminal identification information does not have the right to pass. In this way, based on the location information of the portable terminal 1 and the authentication result by the first authentication means, control is performed to enable or disable the personal identification information acquisition operation for each of the plurality of room entry/exit authentication terminals 5. The means is composed of the entry/exit management system cooperation unit 11 and the authentication terminal control unit 13 .

The validated entrance/exit authentication terminal 5 acquires the personal identification information of the user 8 when the user 8 enters the identification information acquisition area. On the other hand, the invalidated room entrance/exit authentication terminal 5 does not acquire the personal identification information of the user 8 even if the user 8 enters the identification information acquisition area.

The activated room entrance/exit authentication terminal 5 transmits the acquired personal identification information to the room entrance/exit management server 7 . The room entry/exit management server 7 authenticates the personal identification information acquired by the room entry/exit authentication terminal 5 . That is, the room entry/exit management server 7 collates the personal identification information acquired by the room entry/exit authentication terminal 5 with the personal identification information acquired in advance by the authentication terminal control unit 13 . If they match, the authentication is successful, and the entry/exit management server 7 unlocks the electric lock of the door 6 or operates the opening/closing drive device to open the door 6 . On the other hand, if they do not match, the authentication fails, and the entry/exit management server 7 keeps the door 6 electrically locked or the door 6 closed.

Next, an operation example of the authentication system configured as described above will be described with reference to FIG. First, in step S001, when the user 8 carrying the mobile terminal 1 passes through a position within the above-described area or stays at a position within the above-described area, in step S002, the position detector 2 detects the position of the mobile terminal 1. Receives signals originating from A signal transmitted from the mobile terminal 1 includes terminal identification information of the mobile terminal 1 and information used for positioning of the mobile terminal 1 . After step S002, the location information detection server 3 performs the process of step S003.

In step S003, the entrance/exit management system cooperation unit 11 of the location information detection server 3 authenticates the terminal identification information received in step S002. Then, if the authentication is successful, the positioning unit 10 of the position information detection server 3 identifies the position of the mobile terminal 1 in the terminal identification information received in step S002. Next, the entry/exit management system cooperation unit 11 determines whether or not the specified position of the mobile terminal 1 is within the above-described area, that is, within the target area for 1:1 authentication.

If the position of the mobile terminal 1 is within the area mentioned above, the authentication system performs the process of step S004. In step S<b>004 , the room entry/exit management system cooperation unit 11 transmits the terminal identification information to the room entry/exit management server 7 . The room entry/exit management server 7 receives the terminal identification information transmitted from the position information detection server 3 . The authentication terminal control unit 13 collates the received terminal identification information with the information stored in the entrance/exit management server storage unit 12 . If the received terminal identification information is not stored in the entry/exit management server storage unit 12, the authentication system returns to step S001 and continues the process. On the other hand, if the received terminal identification information is stored in the entrance/exit management server storage unit 12, the entrance/exit management server 7 stores the personal identification information corresponding to the terminal identification information received in step S002 in the entrance/exit management server storage unit. 12, the process of step S005 is performed.

In step S005, the authentication terminal control unit 13 first activates the room entry/exit authentication terminal 5 corresponding to the door 6 for which the user 8 of the personal identification information corresponding to the received terminal identification information has the right to pass. On the other hand, the authentication terminal control unit 13 invalidates the room entry/exit authentication terminal 5 corresponding to the door 6 for which the user 8 of the personal identification information corresponding to the received terminal identification information does not have the right to pass. The validated entrance/exit authentication terminal 5 acquires the personal identification information of the user 8 when the user 8 enters the identification information acquisition area. The activated room entrance/exit authentication terminal 5 transmits the acquired personal identification information to the room entrance/exit management server 7 . Then, the room entry/exit management server 7 performs 1:1 authentication for the personal identification information acquired by the room entry/exit authentication terminal 5 .

In this 1:1 authentication, the process of step S006 is performed, and the room entrance/exit management server 7 stores the personal identification information acquired by the room entrance/exit authentication terminal 5 in step S005 and the personal identification information acquired from the room entrance/exit management server storage unit 12 in step S004. match against the personally identifiable information provided. If they match, the authentication is successful, and the entrance/exit management server 7 performs the process of step S007. In step S<b>007 , the entry/exit management server 7 unlocks the electric lock of the door 6 . Then, the room entry/exit management server 7 records it in the passage history of the room entry/exit management server storage unit 12 .

On the other hand, if the pieces of personal identification information do not match in step S006, the authentication fails, and the entry/exit management server 7 performs the process of step S008. In step S008, the room entry/exit management server 7 does not unlock the electric lock of the door 6, and maintains the locked state. Then, the room entry/exit management server 7 records it in the alarm history of the room entry/exit management server storage unit 12 .

In the authentication system configured as described above, by pre-authentication using the terminal identification information of the mobile terminal 1, it is possible to pre-load personal identification information to be used for authentication in the room entrance/exit authentication terminal 5, Accurately detect the positions of the user 8 and the mobile terminal 1 by the information acquisition means, and control the activation/inactivation of the authentication terminal 5 for entering/leaving the room based on the highly accurate position information and the authentication result of the terminal identification information. can. For this reason, 1:1 authentication using personal identification information loaded in advance enables smooth and highly accurate authentication, and at the same time, authentication can be performed by controlling the activation/inactivation of the authentication terminal 5 for entering and leaving the room. Unintentional authentication can be suppressed, and a user who intends to be authenticated can be authenticated. Therefore, it is possible for a user who is willing to be authenticated to be smoothly authenticated while suppressing the occurrence of erroneous authentication by other users who are not willing to be authenticated.

Conventionally, in order to prevent unintentional authentication, for example, a medium such as an IC card is held over the room entry/exit authentication terminal 5, or the room entry/exit authentication terminal 5 is operated. Some asked to do so. On the other hand, in the authentication system according to the present disclosure, it is possible to suppress unintended authentication even in face authentication, for example, without requiring such a specific operation. Therefore, since the user 8 does not need to touch the entrance/exit authentication terminal 5 or the like, it is hygienic, and the convenience and security level can be improved.

As shown in FIG. 1 , the authentication system according to this embodiment may further include an animation writing device 4 . In the illustrated configuration example, the animation writing device 4 is communicably connected to the position information detection server 3 . The position information detection server 3 controls the animation lighting device 4 according to the position of the mobile terminal 1 measured by the position detector 2 and the positioning unit 10 . The animation lighting device 4 is a device capable of presenting guidance information, attention calling information, etc. in a manner intuitively comprehensible to the user 8 by means of animation of light projected onto the floor.

When the position detector 2 and the positioning unit 10 detect that the mobile terminal 1 has passed through a preset guidance execution position or has stopped at the guidance execution position, the position information detection server 3 Guidance information is presented to the user 8 who owns the mobile terminal 1 by the animation writing device 4 . The guidance execution position is set in advance at a position outside the aforementioned zone. The guidance information is information that guides the user 8 into the area from the aforementioned guidance execution position outside the area. The guidance information includes, for example, an arrow indicating the direction within the area, the direction, the distance to the area, and the like.

The animation lighting device 4 is an example of guiding means for guiding the user 8 outside the above-described area from the current position to within the above-described area. In addition, instead of the animation lighting device 4, or in addition to the animation lighting device 4, the guiding means may be provided with a guidance display lamp using a liquid crystal display, an LED, or the like.

Next, an operation example of the authentication system including the animation writing device 4 will be described with reference to FIG. First, in step S011, when the position detector 2 and the position information detection server 3 detect that the user 8 carrying the portable terminal 1 has passed through the guidance execution position or stopped at the guidance execution position. , the location information detection server 3 then performs the process of step S012. In step S<b>012 , the position information detection server 3 causes the animation writing device 4 to present guidance information to the user 8 who owns the mobile terminal 1 .

After step S012, the location information detection server 3 performs the process of step S001. The processing from steps S001 to S008 is the same as the processing from steps S001 to S008 in FIG. Therefore, redundant description is omitted here. By providing the animation writing device 4 as the guiding means as described above, the user 8 can visually and intuitively grasp the route to the area for activating the authentication terminal 5 for entering and leaving the room. can be authenticated more smoothly, and convenience can be improved.

Note that FIG. 5 is a diagram showing an example of a configuration for realizing the respective functions of the position information detection server 3 and the entrance/exit management server 7 in this embodiment. Each function of the position information detection server 3 and the entrance/exit management server 7 is realized by, for example, a processing circuit. The processing circuitry may comprise a processor 201 and memory 202 . The processing circuitry may be dedicated hardware 203 . A portion of the processing circuitry may be formed as dedicated hardware 203 and may further comprise a processor 201 and a memory 202 . In the example shown in the figure, part of the processing circuit is formed as dedicated hardware 203 . Moreover, in the example shown in the figure, the processing circuit further includes a processor 201 and a memory 202 .

A processing circuit, part of which is at least one piece of dedicated hardware 203, can be, for example, a single circuit, multiple circuits, programmed processors, parallel programmed processors, ASICs, FPGAs, or combinations thereof. . When the processing circuit includes at least one processor 201 and at least one memory 202, the functions of the location information detection server 3 and the entry/exit management server 7 are implemented by software, firmware, or a combination of software and firmware. .

Software and firmware are written as programs and stored in memory 202 . The processor 201 reads out and executes programs stored in the memory 202 to achieve the functions of each unit. The processor 201 is also called a CPU (Central Processing Unit), a central processing unit, a processing unit, an arithmetic unit, a microprocessor, a microcomputer, or a DSP. The memory 202 corresponds to, for example, non-volatile or volatile semiconductor memory such as RAM, ROM, flash memory, EPROM and EEPROM, magnetic disk, flexible disk, optical disk, compact disk, mini-disk and DVD.

In this way, the processing circuits of the location information detection server 3 and the room entry/exit management server 7 are configured by hardware, software, firmware, or a combination thereof. Each function can be realized. When the processing circuits of the location information detection server 3 and the room entry/exit management server 7 each include at least a processor 201 and a memory 202, the program stored in the memory 202 of each of the location information detection server 3 and the room entry/exit management server 7 are executed by the processor 201, and the hardware and software of the location information detection server 3 and the room entrance/exit management server 7 cooperate to perform function is realized.

Embodiment 2.
Embodiment 2 of the present disclosure will be described with reference to FIGS. 6 and 7. FIG. FIG. 6 is a block diagram showing the configuration of the essential parts of the authentication system. FIG. 7 is a flow diagram showing an example of the operation of the authentication system.

The authentication system according to the second embodiment will be described below, focusing on differences from the first embodiment. The configuration whose description is omitted is basically the same as that of the first embodiment. In the following description, in principle, the same reference numerals as those used in the description of the first embodiment are attached to the same or corresponding configurations as those of the first embodiment.

In the authentication system according to this embodiment, as shown in FIG. 6, the location information detection server 3 further includes a length of stay measurement unit 14 . The staying time measurement unit 14 measures the staying time of the mobile terminal 1 in the area described above based on the position information of the mobile terminal 1 acquired by the positioning unit 10 .

The entrance/exit management system coordinating unit 11 determines whether or not the mobile terminal 1 of the successfully authenticated terminal identification information stays in the above-described area, i.e., in the 1:1 authentication target area, for a preset reference time or longer. determine whether Then, if the length of stay in the above-described area of the mobile terminal 1 of the terminal identification information that has been successfully authenticated is equal to or longer than the reference time, the entry/exit management system cooperation unit 11 transmits the terminal identification information to the entry/exit management server 7. do.

The room entry/exit management server 7 receives the terminal identification information transmitted from the position information detection server 3 . The authentication terminal control unit 13 collates the received terminal identification information with the information stored in the entrance/exit management server storage unit 12 . Then, if the received terminal identification information is stored in the entrance/exit management server storage unit 12, the authentication terminal control unit 13 stores the personal identification information corresponding to the received terminal identification information and the user 8 of the personal identification information. acquires information specifying the door 6 that has the right to pass.

The authentication terminal control unit 13 activates the room entry/exit authentication terminal 5 corresponding to the door 6 for which the user 8 of the personal identification information corresponding to the received terminal identification information has the right to pass. On the other hand, the authentication terminal control unit 13 invalidates the room entry/exit authentication terminal 5 corresponding to the door 6 for which the user 8 of the personal identification information corresponding to the received terminal identification information does not have the right to pass. In this way, the control means configured by the entrance/exit management system cooperation unit 11 and the authentication terminal control unit 13, based on the stay time measured by the stay time measurement unit 14 and the authentication result by the first authentication means, For each of the room entrance/exit authentication terminals 5, the acquisition operation of personal identification information is validated or invalidated.

Next, an operation example of the authentication system configured as described above will be described with reference to FIG. First, in step S101, when the user 8 holding the mobile terminal 1 stagnates at a position within the above-described area, the position detector 2 receives a signal transmitted from the mobile terminal 1 in step S102. A signal transmitted from the mobile terminal 1 includes terminal identification information of the mobile terminal 1 and information used for positioning of the mobile terminal 1 . After step S102, the location information detection server 3 performs the process of step S103.

In step S103, the entrance/exit management system cooperation unit 11 of the location information detection server 3 authenticates the terminal identification information received in step S102. Then, if the authentication is successful, the positioning unit 10 of the position information detection server 3 identifies the position of the mobile terminal 1 in the terminal identification information received in step S102. Subsequently, the stay time measuring unit 14 measures the stay time of the mobile terminal 1 in the target area. Then, the entry/exit management system cooperation unit 11 determines whether or not the stay time of the mobile terminal 1 in the above-described area is equal to or longer than the above-described reference time.

If the stay time is less than the reference time, the authentication system returns to step S101 and continues processing. On the other hand, if the staying time is equal to or longer than the reference time, the authentication system next performs the process of step S104. The processing from steps S104 to S108 is the same as the processing from steps S004 to S008 in FIG. 3 described in the first embodiment. Therefore, redundant description is omitted here.

Also in the authentication system configured as described above, the same effect as in the first embodiment can be obtained. Furthermore, it is possible to prevent the entry/exit authentication terminal 5 from being activated for a short-term resident who has only passed through the above-mentioned area, thereby more reliably suppressing unintended authentication. In addition, when entering a specific area with a high security level, etc., by notifying only the specific user 8 that it is necessary to stay in the above-mentioned area for a specified reference time or more, high security is achieved. can be guaranteed.

Embodiment 3.
Embodiment 3 of the present disclosure will be described with reference to FIGS. 8 and 9. FIG. FIG. 8 is a block diagram showing the configuration of the main part of the authentication system. FIG. 9 is a flow chart showing an example of the operation of the authentication system.

Hereinafter, the authentication system according to the third embodiment will be described with a case based on the configuration of the first embodiment as an example, focusing on the points of difference from the first embodiment. The configuration whose description is omitted is basically the same as that of the first or second embodiment.

In the authentication system according to this embodiment, as shown in FIG. 8, the location information detection server 3 further includes a movement route identification unit 15. FIG. The moving route identifying unit 15 identifies the moving route of the mobile terminal 1 within the aforementioned area based on the position information of the mobile terminal 1 acquired by the positioning unit 10 .

The entry/exit management system cooperation unit 11 determines whether or not the moving route of the mobile terminal 1 of the successfully authenticated terminal identification information within the above-described area, that is, within the 1:1 authentication target area, matches a preset reference route. determine whether Then, if the moving route within the above-described area of the mobile terminal 1 of the terminal identification information that has been successfully authenticated matches the reference route, the entry/exit management system cooperation unit 11 transmits the terminal identification information to the entry/exit management server 7. do.

The room entry/exit management server 7 receives the terminal identification information transmitted from the position information detection server 3 . The authentication terminal control unit 13 collates the received terminal identification information with the information stored in the entrance/exit management server storage unit 12 . Then, if the received terminal identification information is stored in the entrance/exit management server storage unit 12, the authentication terminal control unit 13 stores the personal identification information corresponding to the received terminal identification information and the user 8 of the personal identification information. acquires information specifying the door 6 that has the right to pass.

The authentication terminal control unit 13 activates the room entry/exit authentication terminal 5 corresponding to the door 6 for which the user 8 of the personal identification information corresponding to the received terminal identification information has the right to pass. On the other hand, the authentication terminal control unit 13 invalidates the room entry/exit authentication terminal 5 corresponding to the door 6 for which the user 8 of the personal identification information corresponding to the received terminal identification information does not have the right to pass. In this way, the control means configured by the entry/exit management system cooperation unit 11 and the authentication terminal control unit 13 performs a plurality of For each of the room entrance/exit authentication terminals 5, the acquisition operation of personal identification information is validated or invalidated.

Next, an operation example of the authentication system configured as described above will be described with reference to FIG. First, in step S201, when the user 8 carrying the mobile terminal 1 passes through a plurality of points in the area described above, the position detector 2 receives signals transmitted from the mobile terminal 1 in step S202. A signal transmitted from the mobile terminal 1 includes terminal identification information of the mobile terminal 1 and information used for positioning of the mobile terminal 1 . After step S202, the location information detection server 3 performs the process of step S203.

In step S203, the entrance/exit management system cooperation unit 11 of the location information detection server 3 authenticates the terminal identification information received in step S202. Then, if the authentication is successful, the positioning unit 10 of the position information detection server 3 identifies the position of the mobile terminal 1 in the terminal identification information received in step S202. Subsequently, the moving route identification unit 15 identifies the moving route within the target area of the mobile terminal 1 . Then, the entry/exit management system cooperation unit 11 determines whether or not the moving route of the mobile terminal 1 within the above-described area matches the above-described reference route.

If the movement route does not match the reference route, the authentication system returns to step S201 to continue processing. On the other hand, if the moving route matches the reference route, the authentication system next performs the process of step S204. The processing from steps S204 to S208 is the same as the processing from steps S004 to S008 in FIG. 3 described in the first embodiment. Therefore, redundant description is omitted here.

Also in the authentication system configured as described above, the same effect as in the first embodiment can be obtained. Furthermore, it is possible to prevent the entry/exit authentication terminal 5 from being activated for a person who has just passed through the above-mentioned area without following the reference route, thereby more reliably suppressing unintended authentication. Also, when entering a specific area or the like with a high security level, high security can be ensured by notifying only the specific user 8 that it is necessary to pass through the designated reference route.

1 mobile terminal 2 position detector 3 position information detection server 4 animation writing device 5 room entry/exit authentication terminal 6 door 7 room entry/exit management server 8 user 9 position information detection server storage unit 10 positioning unit 11 room entry/exit management system cooperation unit 12 Entrance/exit management server storage unit 13 authentication terminal control unit 14 stay time measurement unit 15 moving route identification unit 201 processor 202 memory 203 dedicated hardware

Claims (4)

a location information acquiring means for acquiring location information relating to the location of a mobile terminal possessed by a user within a preset area;
terminal identification information acquisition means for acquiring terminal identification information of the mobile terminal;
a first authentication means for authenticating the terminal identification information acquired by the terminal identification information acquisition means;
a plurality of personal identification information acquisition devices provided in the area for acquiring the personal identification information of the user;
a second authentication means for authenticating the personal identification information acquired by the personal identification information acquisition device;
Validation of acquisition operation of the personal identification information for each of the plurality of personal identification information acquisition devices based on the location information of the portable terminal acquired by the location information acquisition means and the authentication result by the first authentication means or a control means for invalidation. Further comprising staying time measuring means for measuring the staying time of the mobile terminal in the area based on the location information of the mobile terminal acquired by the location information acquiring means,
Based on the stay time measured by the stay time measuring means and the authentication result by the first authentication means, the control means determines whether the operation of acquiring the personal identification information is valid for each of the plurality of personal identification information acquisition devices. 2. The authentication system according to claim 1, which activates or invalidates. further comprising movement route identification means for identifying a movement route of the mobile terminal within the area based on the location information of the mobile terminal acquired by the location information acquisition means;
Based on the route specified by the route specifying unit and the authentication result by the first authentication unit, the control unit determines whether the acquisition operation of the personal identification information is valid for each of the plurality of personal identification information acquisition devices. 2. The authentication system according to claim 1, which activates or invalidates. 4. The authentication system according to any one of claims 1 to 3, further comprising guiding means for guiding the user outside the area from the current position to the area.

Images