JPH10143774A - Security system - Google Patents

Abstract

PROBLEM TO BE SOLVED: To obtain a security system in which the blank time of the supervision of intrusion can not be generated, and economicity can be improved. SOLUTION: In the case of down-load in operation (YES in a step 11), a down-load part to which down-load data are communicated clears a second user (information) data table, and develops the down-load data (a step 12). In a down-load operation, a controlling part, monitoring part, and collating part continue the operation by referring to the data table. Whether or not the down-load is ended is judged (a step 13), and this process is returned to the step 12 in the case of NO. After all the user (information) data (base) down- load is ended (YES), the first and second user(information) data tables are switched (a step 14).

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a security system, and more particularly, to a method of downloading during operation in a security system.

[0002]

2. Description of the Related Art One (tenant) building often includes several tenants (company, office, different departments even in the same company). In this case, for example, the east wing section on the seventh floor needs to be managed in detail in the form of Y section of X company. For example, with one wing on one floor as a unit, for example, an electric lock is provided at the entrance door, usually locked, a card reader and a sensor are provided nearby to detect the approach of a person, Reads the ID card inserted in, determines whether the person is allowed to enter, unlocks the electric lock if the person is allowed to enter, detects that the person has entered, and controls to lock again Security system is provided.

[0003] Tenant building security systems are:
For example, a center device mainly composed of computers is provided for each tenant building, for example, a terminal device is provided for each wing on one floor, and the center device and the terminal device are connected by a bus line, people approach, A sensor for detecting entry and a card reader (including an electric lock) are connected to the terminal device. User data, which is a list of persons who can enter, is downloaded from an external input device to a terminal device through a center device or a gateway, together with other general management data. The terminal device is based on the downloaded user data (interpersonal; user / intruder)
The electric lock is controlled using a sensor and a card reader.

[0004] Building users pass an ID card through a card reader when entering or leaving a room. The security system checks the ID data read from the card reader against a database of user data downloaded to the terminal device, and instructs the card reader to unlock the electric lock if the conditions are met. The card reader receives the instruction and unlocks the electric lock, thereby enabling entry / exit (place).

[0005] The database of user data of the terminal device is usually input to the center device, and other data (base) is input.
And downloaded to the terminal device. During this download period, the terminal device is in the non-operation state, and a blank time for intrusion monitoring occurs. During this blank time, patrols and surveillance by security personnel were required, which incurred costs. In addition, when the terminal device enters the non-operation state,
Card reader operates alone (electric lock is locked, I
Starts unlocking only through format check when passed through D card) and allows entry and exit to rooms where entry and exit are not possible, and conversely to rooms where entry and exit is possible without ID card during working hours There was a problem that it was impossible to enter and leave the room.

In order to solve this problem, Japanese Patent Laid-Open Publication No.
No. 00974 proposes a method as shown in FIG. In a software download method for downloading program data to an operating information processing device via the transmission path shown in FIG. 6, the information processing device stores a CPU 43 that performs main control and a program that the CPU 43 executes. A first memory 41 and a second memory 4 for storing program data sent via a transmission line
2 while the CPU 43 is in operation.
Download the program data to
When the third software is switched, the second memory 42
To load the program data into the first memory 41.

[0007] The CPU 43 performs predetermined control and processing according to a control program of the first memory 41. In this state, the CPU 43 occupies the bus 44, and the buffer circuit B is prevented from outputting a signal by the gate signal G. While the CPU 43 is operating, for example, the remote OS 48
Is notified that downloading of new program data is to be started from the
(DMA controller) 45 to the second memory 4
Then, the load start address to the address 2 and the number of program data are set, and the DMAC 45 is activated.

As a result, the DMAC 45 sends a serial / parallel converter 46 from the OS 48 via the transmission line 49 and the modem 47.
1 byte of the program data received by
If Y), the program data is written to the address AD2 of the second memory 42. Then, the address signal AD2 and the number of program data transfers are updated, and the above processing is repeated until the download of the new program data is completed. During this time, the CPU 43 can occupy the bus 44 and the first memory 41,
There is no hindrance to the operation of U43.

Next, at the time of software switching of the CPU 43, the CPU 43 sets a load start address AD1 to the first memory 41, a read start address AD2 of the second memory 42, and the number of program data for the DMAC 45, Energize DMAC 45. As a result, the DMAC 45 requests (RQ) a memory cycle to the CPU 43 and receives a permission (AC
K), the gate signal G is activated to temporarily occupy the bus 44, and the second memory 42 to the first memory 4
1 is loaded with program data.

In this way, the above processing is repeated until the number of program data reaches the specified value. During this time, the operation of the CPU 43 is stopped. However, since the transfer of data between the memories is generally very fast, the operation stop time of the CPU can be significantly reduced as compared with the conventional method.

However, in the security system, even if the operation is interrupted even for a short time, a blank time for intrusion monitoring occurs, which may be fatal.

Japanese Patent Application Laid-Open No. 4-172534 proposes a method as shown in FIG. In FIG. 5, the information processing apparatus 100 is for downloading software in the external storage device 200, and has a dual structure including an active system 20 and a standby system 30. As the external storage device 200, a floppy disk device (FDD) or a hard disk device (HDD) may be used.

The operating system 20 secures the operating state, loads the software into the standby system 30 when downloading the software, and switches between the operating system and the standby system after the loading.

First, the operation system 20 includes a main CPU unit 21 for controlling each unit, a global memory 25 for recording various data, an external storage access unit 27 for accessing the external storage device 200, and an external interface. Part 2
6 is included. Further, the main CPU unit 21
The ROM includes a ROM 23 in which a program is written, a RAM 24 for holding a program, and a CPU 22.

On the other hand, the standby system 30 is also similar to the active system 20,
It comprises a main CPU section 31 for controlling each section, a global memory 35 for recording various data, an external storage access section 37 for accessing the external storage device 200, and an external interface section 36. . Further, in the main CPU unit 31, a ROM 33 in which a program is written, a RAM 34 for holding a program,
U32 is included.

The system management unit 10 sets the right to use the bus, performs switching between the active system and the standby system, and the like.

When the software is downloaded, a request is first sent from the main CPU 21 of the operation system 20 to the system management unit 10. In response, the system management unit 1
0 sets the right to use the standby system bus in the main CPU unit 31 and the external storage access unit 37 of the standby system 30, and instructs the software to be downloaded from the external storage device 200.

The download processing is performed by the main C of the standby system 30.
This is performed by a program written in the ROM 33 in the PU unit 31. That is, the external storage access unit 37
To R of the program holding memory of the main CPU unit 31
A write process is performed on the AM 34 using the spare bus.

When all download processes have been completed, the main CPU 31 of the standby system 30
0 is notified of the end message. In response to this, the system management unit 10 switches between the active system 20 and the standby system 30 and designates the standby system 30 having the newly downloaded software as a new active system. Then, the system management unit 10 causes the original operating system 20 that has been switched to the standby system to execute software download processing in the same manner as described above.

Therefore, it is described that application software can be updated without affecting the operation state by using a duplex configuration.

[0021]

The proposal described in Japanese Patent Laid-Open No. 4-172534 shown in FIG. 5 can update a program (software) without affecting the operation state of a computer system. Since both the active system and the standby system have the same computer system configuration including the CPU, it is inevitable that costs will increase.

In the security system, the amount of data to be handled is large and a large-capacity memory is required, and the system shown in FIG. 5 is extremely uneconomical.

An object of the present invention is to provide a security system which does not generate a blank time for intrusion monitoring and pursues economy.

[0024]

According to the present invention, an interpersonal sensor for detecting a user or an intruder according to the present invention, a card reader for reading an ID card held by the user and forming ID data, and an electric lock for locking an entrance, The security system includes at least all data storage means for storing user data, and access control means for controlling the electric lock by comparing the user data stored in the all data storage means with the ID data. Dividing the entire data storage means into first and second data storage means, and comparing the first and second data storage means with the ID data when downloading the user data for updating. And the user data to be updated are alternately used for different purposes, and after the download of the updated user data is completed, the first and the second are downloaded. And switches the application of second data storage means.

The operation of the present invention is as follows. In a security system, users are frequently updated due to the nature of entry / exit management, so a download is required each time. However, frequently downloaded data is only user (information) data. Conventionally, user (information) data and general data (base) such as system configuration information have been downloaded together (at this time, the terminal device becomes inactive). Download information and user (information) data (base)
Are divided into two types, download during operation, in which the terminal device is downloaded while the terminal device is kept in the operation state, and used properly as needed.

On the other hand, in the terminal device, two memories for recording data downloaded from the center device are prepared, and the terminal device performs normal processing as a security system using one of the memories. During operation, terminal (user) data (base) from the center device
When a download is received, it is recorded in the other unused memory. This is called memory duplication. After the download is completed, the terminal device switches the (two) memories used for the processing operation. No time is required to simply switch the memory (blank of intrusion monitoring), so that the user (information) while operating the terminal device normally
Enables data (base) download.

[0027]

Embodiments of the present invention will be described below with reference to the drawings.

FIG. 1 is a block diagram showing the configuration of an embodiment of a security system according to the present invention, and portions equivalent to those in FIGS.

In FIG. 1, a security system according to the present invention receives a data (base) input from an external input device 1 via a floppy disk or directly and controls the entire security system. (Base) from the gateway 3, the center device 2 or the gateway 3, which is directly connected to the transmission path 7 via the transmission path, receives the data (base) via the transmission path 7, And terminal devices 4-1 to n for controlling a card reader (including an electric lock) 5; a center device 2; a gateway 3; and a transmission line 7 for interconnecting the terminal devices 4-1 to n.

As an operation of the embodiment of the present invention, data necessary for operation of the security system is stored in the external input device 1.
The setting is made by an input via the gateway 3, an input via the floppy disk, or a direct input to the center device 2. The data (base) is downloaded to the terminal devices 4-1 to 4-1-n in accordance with an instruction from the center device 1 via a transmission path 7 such as an Ethernet or ISDN.

FIG. 2 shows the internal configuration of the terminal devices 4-1 to n. In FIG. 2, terminal units 4-1 to n are connected to a communication unit 8- to receive downloaded data (base).
1, a control unit 8-2 for controlling the entire terminal devices 4-1 to n,
(Interpersonal) A monitoring unit 8-3 connected to the sensor 6 for confirming entry / exit of a user and monitoring an intruder (in a security state outside working hours) and an ID card inserted into the card reader 5. A collating unit 8-4 for collating the ID data from the user with the user (information) data (base) stored in the memory 9, and a download unit 8 receiving the data (base) from the communication unit 8-1 and downloading it to the memory 9. -5 and first user (information) data table 9
-1, a second user (information) data table 9-2, and a memory 9 including other data tables 9-3.

FIG. 3 is a flowchart showing the download operation in the terminal devices 4-1 to 4-1-n. In FIG.
First, it is determined whether the download is in operation (YES) or normal download (NO) (step 11). Normal download (NO) means that the terminal device 4
In order to keep 1 to n inactive, at the time of initial system construction,
Or user (information) in case of system configuration change
Perform this only when changing data other than the data (base).

In this case, first, the download unit 8-5 notified of the download data sends the data to the control unit 8-2, the monitoring unit 8-3, and the collation unit 8-4 of the terminal devices 4-1 to n.
An instruction to stop the operation is issued (step 15). Thereafter, all data tables 9-1 to 3-1 are cleared (step 16),
The downloaded data is stored in the data tables 9-1 to 3-1.
(Step 17). It is determined whether the download has been completed (step 18), and if NO, the process returns to step 17.

When all data has been downloaded (Y
ES), the control unit 8-2, the monitoring unit 8-3, and the collating unit 8
-4 is instructed to resume the operation (step 19), and the normal download ends.

Download during operation (Step 11 is YE
S) is applied when user (information) data is changed in the case of a change in tenant, a new member, a personnel change, a change in department layout, etc. in a building. In this case, the download unit 8-5 notified of the download data sets the second user (the information (if the first user (information) data table 9-1 has been used for collation) until then). ) Clear the data table 9-2 and expand the download data (step 12).

During downloading, the control unit 8-2, the monitoring unit 8-3, and the collating unit 8-4 keep the data tables 9-1,
The operation is continued with reference to FIG. It is determined whether or not the download has been completed (step 13). If NO, the process returns to step 12, and after all the user (information) data (base) downloads have been completed (YES), the first and second data are downloaded. User (information) data tables 9-1 and 9-2
Is switched (step 14). After that, the control unit 8-
2. The monitoring unit 8-3 and the checking unit 8-4 are provided with a second user (information) data table 9-2 and other data tables 9
-3.

When the download during operation is performed next, the operation is performed with the roles of the first and second user (information) data tables 9-1 and 9-2 interchanged.

User (information) data tables 9-1 and 9-1
4 is shown in FIG. In FIG. 4, the matching unit 8
-4 When referring to the user (information) data tables 9-1 and 9-1, the data of the address destination stored in the table address 9-4 (the first or second user (information) data table 9-1) Alternatively, refer to 9-2). By rewriting the contents of the table address 9-4 by the download unit 8-5, the first and second user (information) data tables 9-1 and 9-2 referred to by the check unit 8-4.
To achieve the switching.

[0039]

As described above, according to the present invention, the data to be verified is divided into user (information) data and other data. Only the memory for storing the data (base) is required, and there is an effect that download during operation can be realized while minimizing costs and generating no blank time for intrusion monitoring.

[Brief description of the drawings]

FIG. 1 is a block diagram of an embodiment of the present invention.

FIG. 2 is a block diagram illustrating an internal configuration of a terminal device.

FIG. 3 is a flowchart of a download.

FIG. 4 is an explanatory diagram of a memory switching method.

FIG. 5 is a block diagram of an example of a conventional download method.

FIG. 6 is a block diagram showing another example of a conventional download method.

[Explanation of symbols]

 Reference Signs List 1 external input device 2 center device 3 gateway 4-1 to n terminal device 5 card reader 6 sensor 7 transmission path

Claims (5)

[Claims] 1. An interpersonal sensor for detecting a user or an intruder, and reading an ID card held by the user to obtain an ID.
A card reader as data, an electric lock for locking at an entrance, all data storage means for storing at least user data, and collating user data stored in the all data storage means with the ID data. A security system including access control means for controlling the electric lock,
The entire data storage means is divided into first and second data storage means, and when downloading to update the user data, the first and second data storage means are collated with the ID data. A security system that alternately uses the user data to be updated when the user data to be updated is downloaded, and switches the use of the first and second data storage units after the download of the updated user data is completed. . 2. The user data storage means is first divided into a user data storage means for storing only user data and another data storage means for storing other data. 2. The security system according to claim 1, wherein said security system is divided into a second data storage means and a second data storage means. 3. The security system according to claim 1, wherein the entry / exit management unit continues to operate even during downloading of the updated user data. 4. The user data to be updated is input to a center device directly or by a floppy disk, and downloaded from the center device to the first or second data storage device via a transmission path. The security system according to 1, 2, or 3. 5. The user data to be updated is input from an external input device via a transmission path and a gateway, and downloaded to the first or second data storage device via the transmission path. The security system according to 1, 2, or 3.