KR102649276B1 - Elevator control system, method and device for calling elevator in conjunction with heat detection and access management system - Google Patents

Abstract

In an elevator control system linked to a non-contact infrared body temperature measurement and access control system according to an embodiment of the present invention, the non-contact infrared body temperature measurement and access control system includes an access management server that issues and manages a mobile access card; A user device that encrypts and transmits an access authentication request message containing first access authentication information of the issued mobile access card; Receive and decode the access authentication request message from the user device to obtain the first access authentication information, determine whether the user device can enter based on the first access authentication information, and access the user device. a non-contact body temperature sensing device that, if available, measures the body temperature of a user carrying the user device in a non-contact manner; and an access opening and closing device that receives a door opening request from the non-contact body temperature sensing device and opens the door when the user's body temperature measurement result is within the normal body temperature range; It includes: an elevator, transporting the user to a destination floor; a communication unit configured to communicate with the non-contact infrared body temperature measurement and access management system using at least one communication protocol; a destination floor input unit that receives the destination floor from the user; a memory unit that stores data; a control unit that controls the elevator, the communication unit, the destination floor input unit, and the memory unit; Including, wherein the non-contact body temperature sensing device transmits an elevator call request to the control unit when the user's body temperature measurement result falls within the normal body temperature range, and the control unit operates the elevator based on the elevator call request. You can call the entrance floor.

Description

Elevator control system, method and device for calling elevator in conjunction with heat detection and access management system {Elevator control system, method and device for calling elevator in conjunction with heat detection and access management system}

This specification proposes an elevator control system, method, and device that calls an elevator in conjunction with a fever detection and access control system.

In the case of the conventional elevator call system, it operated on the basis of a mechanism in which the user went directly to the hallway of the building and directly pressed a button to call the elevator. To resolve this user inconvenience, a mechanism has recently been developed and commercialized in which an elevator call button is provided indoors and a mechanism that allows users to call the elevator through the button without having to walk directly into the hallway has been developed and commercialized. In addition, a mechanism was developed and commercialized to automatically recognize a user holding an access card, open and close the door, and at the same time set the floor preset for the user as the destination floor and call the elevator.

However, in the case of this elevator mechanism, there was the inconvenience of requiring users to visit a specific location and register individually, and any user with an access card could easily enter and call the elevator, raising security issues.

Furthermore, due to the recent rapid increase in the COVID-19 outbreak, measuring body temperature has become essential to enter the building, but when using existing elevators and access mechanisms, there is no device or manpower to separately measure the body temperature of entrants, so there is a problem that it must be used separately. did.

In order to solve this problem, this specification proposes an elevator control system, method, and device that calls an elevator in conjunction with a fever detection and access control system.

More specifically, in the elevator control system linked to the non-contact infrared body temperature measurement and access management system according to an embodiment of the present invention, the non-contact infrared body temperature measurement and access management system issues and manages mobile access cards. management server; A user device that encrypts and transmits an access authentication request message containing first access authentication information of the issued mobile access card; Receive and decode the access authentication request message from the user device to obtain the first access authentication information, determine whether the user device can enter based on the first access authentication information, and access the user device. a non-contact body temperature sensing device that, if available, measures the body temperature of a user carrying the user device in a non-contact manner; and an access opening and closing device that receives a door opening request from the non-contact body temperature sensing device and opens the door when the user's body temperature measurement result is within the normal body temperature range; It includes: an elevator, transporting the user to a destination floor; a communication unit configured to communicate with the non-contact infrared body temperature measurement and access management system using at least one communication protocol; a destination floor input unit that receives the destination floor from the user; a memory unit that stores data; a control unit that controls the elevator, the communication unit, the destination floor input unit, and the memory unit; Including, wherein the non-contact body temperature sensing device transmits an elevator call request to the control unit when the user's body temperature measurement result falls within the normal body temperature range, and the control unit operates the elevator based on the elevator call request. You can call the entrance floor.

According to one embodiment of the present invention, since the user's entry list and body temperature are automatically recorded and managed in the system, human, time, and economic costs due to measuring and writing the entry list and body temperature manual are reduced.

In addition, according to an embodiment of the present invention, it is possible to manage visitors in a non-contact manner, which has the effect of minimizing the risk of COVID-19 infection due to contact.

In addition, according to one embodiment of the present invention, the secret key that encrypts the access authentication information is updated upon entry or every time the body temperature is measured based on the body temperature measurement information, so the security is very excellent and the risk of personal information and access authentication information being leaked is low. is effective.

In addition, according to one embodiment of the present invention, an indicator for each user is created according to the actual body size of the user and used to measure body temperature, which has the effect of enabling accurate body temperature measurement for each user.

In addition, according to one embodiment of the present invention, the elevator is called only for users who have completed entry approval and body temperature measurement, so the problem of power waste that may be caused by indiscriminate elevator calling can be solved, and the security level is very high. There is.

In addition, according to one embodiment of the present invention, the elevator is automatically called to the destination floor set in advance or directly entered by the user, thereby improving the convenience of using the elevator.

In addition, according to an embodiment of the present invention, when a plurality of elevators are provided, elevator calls are scheduled according to the user's destination floor, which has the effect of minimizing elevator waiting and use time and arrival time at the destination floor.

The effects of the present invention are not limited to the above-described contents, and various other effects will be described in detail below with reference to each embodiment and drawings.

Figure 1 is a block diagram schematically showing a non-contact infrared body temperature measurement and access control system according to an embodiment of the present invention.
Figure 2 is a block diagram of a non-contact body temperature sensing device according to an embodiment of the present invention.
Figure 3 is a diagram illustrating the mobile access card issuance and synchronization process according to an embodiment of the present invention.
Figure 4 is a flowchart illustrating a method for determining whether a non-contact body temperature sensing device can enter or not according to an embodiment of the present invention.
FIG. 5 is a diagram illustrating a pixel structure of a non-contact body temperature sensing device according to an embodiment of the present invention, and FIG. 6 is a diagram illustrating a method of measuring body temperature of a non-contact body temperature sensing device according to an embodiment of the present invention.
Figure 7 is a diagram illustrating an example of secret key update according to an embodiment of the present invention.
Figure 8 is a diagram illustrating an example of indicator generation according to an embodiment of the present invention.
Figure 9 is a diagram illustrating an example of using an indicator according to an embodiment of the present invention.
Figure 10 is a block diagram of an elevator control system according to an embodiment of the present invention.
Figure 11 is a flowchart of an elevator call method according to the first embodiment of the present invention.
Figure 12 is a flowchart of an elevator call method according to the second embodiment of the present invention.
Figure 13 is a flowchart illustrating a method of scheduling multiple elevator calls by the control unit according to an embodiment of the present invention.
Figure 14 is a flowchart illustrating a method for making reservations for a visitor's visit according to an embodiment of the present invention.
Figure 15 is a diagram illustrating a user device that receives visit reservation information according to an embodiment of the present invention.

The technology described below may be subject to various changes and may have various embodiments, and specific embodiments will be illustrated in the drawings and described in detail. However, this is not intended to limit the technology described below to specific embodiments, and should be understood to include all changes, equivalents, and substitutes included in the spirit and scope of the technology described below.

Terms such as first, second, A, B, etc. may be used to describe various components, but the components are not limited by the terms, and are only used for the purpose of distinguishing one component from other components. It is used only as For example, a first component may be named a second component without departing from the scope of the technology described below, and similarly, the second component may also be named a first component. The term and/or includes any of a plurality of related stated items or a combination of a plurality of related stated items. For example, 'A and/or B' may be interpreted to mean 'at least one of A or B'. Additionally, '/' can be interpreted as 'and' or 'or'.

In terms used in this specification, singular expressions should be understood to include plural expressions, unless clearly interpreted differently from the context, and terms such as “including” refer to the described features, numbers, steps, operations, and components. , it means the existence of parts or a combination thereof, but should be understood as not excluding the possibility of the presence or addition of one or more other features, numbers, step operation components, parts, or combinations thereof.

Before providing a detailed description of the drawings, it would be clarified that the division of components in this specification is merely a division according to the main function each component is responsible for. That is, two or more components, which will be described below, may be combined into one component, or one component may be divided into two or more components for more detailed functions. In addition to the main functions it is responsible for, each of the components described below may additionally perform some or all of the functions handled by other components, and some of the main functions handled by each component may be performed by other components. Of course, it can also be carried out exclusively by .

In addition, when performing a method or operation method, each process forming the method may occur in a different order from the specified order unless a specific order is clearly stated in the context. That is, each process may occur in the same order as specified, may be performed substantially simultaneously, or may be performed in the opposite order.

Figure 1 is a block diagram schematically showing a non-contact infrared body temperature measurement and access control system according to an embodiment of the present invention.

Referring to Figure 1, the non-contact infrared body temperature measurement and access management system 100 (hereinafter referred to as the 'integrated management system') includes an access management server 110, a user device 120, a non-contact body temperature detection device 130, and /Or may include an interlocking system 140.

The access management server 110 may correspond to a server that issues mobile access cards to users and records and manages access details for each user. The access management server 110 may communicate with the user device 120, the non-contact body temperature detection device 130, and/or the linking system 140 to transmit and receive various information/data related to access and body temperature measurement. In particular, the access management server 110 may transmit and receive information/data with the user device 120 using a pre-built application as a medium to perform the embodiments proposed in this specification. In this case, the access management server 110 may correspond to an application server that operates and manages the application.

The access management server 110 may issue a mobile access card containing access authentication information directly entered/approved by the administrator or received through the user device 120. Access authentication information may include personal information to identify the user and information related to access permissions. For example, access authentication information includes the user's ID (Identifier), resident registration number, employee number, name, contact information, mobile phone number, whether subject to regular access, whether subject to one-time access, accessible area, non-accessible area, and floor where access is permitted. , destination floor, inaccessible floor, and/or mobile operating system information of the user device 120, etc. Here, the destination floor refers to the floor to which the user wishes to move via the elevator, and may be input/set by the user or administrator in an embodiment linked to the elevator control system. Access-permitted floors and non-accessible floors can be directly set for each user by the administrator.

The access management server 110 synchronizes the issuance/modification/recovery/disposal of the mobile access card with other components of the integrated management system 100 (in particular, the user device 120 and the non-contact body temperature detection device 130). You can create and transmit a synchronization message to do this. This will be described in detail below with reference to FIG. 3.

The user device 120 is an electronic server/device/device on which an application/program/software implemented to perform/execute the non-contact infrared body temperature measurement and access control method/embodiment proposed in this specification is pre-installed and running. It may apply. Therefore, even if not explained separately below, the operation of the user device 120 may be interpreted as the operation/function of the application/program/software. Hereinafter, for convenience of explanation, the description will focus on the 'user device 120', which is the user's device on which the application/program is installed. However, the 'user device 120' may be replaced with 'application'.

The user device 120 may receive the user's mobile access card from the access management server 110 and perform a function of requesting access authentication for the non-contact body temperature detection device.

More specifically, the user device 120 may receive information required for issuance of a mobile access card from the user according to the embodiment, and may request the access management server 110 to issue a mobile access card based on this information. After verifying the user's identity through a user authentication method (for example, issuing an authentication number through SNS (Social Network Service), etc.), the access management server 110 determines the user's device based on the information received from the user device 120. A mobile access card can be issued to (120).

The user device 120 may extract access authentication information from the issued mobile access card, generate and encrypt an access authentication request message containing the access authentication information, and transmit it to the non-contact body temperature detection device 130. To this end, the user device 120 may include a short-range communication module. For example, the user device 120 may include a Bluetooth and/or Radio-Frequency Identification (RFID)/Near Field Communication (NFC) communication module, using Bluetooth Low Energy (BLE) and/or RFID/NFC communication protocols. You can send an access authentication request message. At this time, the type of short-range communication protocol used to transmit the access authentication message may vary depending on the mobile operating system installed on the user device 120. For example, if the mobile operating system of the user device 120 is a first operating system (eg, Android), an access authentication request message may be transmitted using a BLE or RFID/NFC communication protocol. On the other hand, if the mobile operating system of the user device 120 is a second operating system (eg, iOS), the access authentication request message may be transmitted using only the BLE communication protocol.

The access authentication request message may be encrypted by the user device 120 and transmitted to the non-contact body temperature detection device 130. Depending on the embodiment, the encryption algorithm may be the Advanced Encryption Standard (AES)-256 algorithm or the Secure Hash Algorithm (SHA). )-256 algorithm can be used. The AES-256 algorithm is an encryption algorithm that replaced DES and is a symmetric key algorithm with a secret key length of 256 bits. A symmetric key algorithm refers to an algorithm in which the secret key used for encryption and decryption is the same. The SHA-256 algorithm is a one-way encryption algorithm that applies the HASH function and means that only encryption is possible, but decryption is not possible.

In the case of the AES-256 algorithm, encryption and decryption are performed using a secret key, so the secret key can be shared among the components 110 to 130 when building the initial integrated management system 110, and each component 110 to 130 ) stores the secret key in a highly secure internal secret storage space and can be used for encryption and decryption. Due to the characteristics of the AES-256 algorithm that uses a secret key, a problem may arise that once the secret key is leaked by an external attack, all internal information of the integrated management system 100 may be leaked to the outside. In particular, since the integrated management system 100 transmits and receives user's access authentication information and personal information, if it is leaked, the damage is very significant. Therefore, in order to prevent this problem, this specification proposes an embodiment in which the secret key is updated every time the user enters or enters or measures the body temperature based on the user's body temperature measurement information, which will be described in detail below with reference to FIG. 7. I decided to do it.

The non-contact body temperature detection device 130 can determine whether the user can enter or not and simultaneously measure the user's body temperature using a non-contact infrared method. The non-contact body temperature sensing device 130 will be described in detail below with reference to FIG. 2 .

The interlocking system 140 is an external system linked to the integrated management system 100, and communicates with at least one component of the integrated management system 100 to receive information about the user's entry and exit and body temperature to operate the internal system. can be used for Examples of the interlocking system 140 may include corporate ERP, school academic management system, transportation system, barcode/QR code system, elevator control system, etc. An embodiment of linking the integrated management system and the elevator control system will be described in detail below with reference to FIGS. 10 to 15.

Although not shown in this drawing, the integrated management system 100 may additionally include a manager device (not shown) and/or a visitor device (not shown) depending on the embodiment. The manager device has communication/access rights to each component (110 to 140) of the integrated management system (100) and performs the function of viewing/managing/operating information stored in each component (110 to 140). can do. In particular, the administrator device may correspond to a user device that has the authority to approve the issuance of mobile access cards for users and visitors. Information may be provided through the administrator device in the form of a web page or application execution screen. The visitor device may correspond to a user device for which a visit reservation has been approved by the administrator device and a mobile access card for the visitor has been issued. The access method of the visitor device issued with the mobile access card for visitors may be applied in the same manner as the access method of the user device issued with the mobile access card.

In addition, although not shown in this drawing, the integrated management system may additionally include an access opening and closing device (not shown). The access opening and closing device may correspond to a device that performs the function of opening (or closing) the door by receiving a request to open (or close) the door from the non-contact body temperature sensing device.

Figure 2 is a block diagram of a non-contact body temperature sensing device according to an embodiment of the present invention.

Referring to FIG. 2, the non-contact body temperature detection device 130 includes a Bluetooth communication module 210, an RFID/NFC communication module 220, a non-contact infrared temperature detection module 230, other sensor module 240, and a display module 260. ), and/or a control module 250.

The Bluetooth communication module 210 may correspond to a communication module that performs Bluetooth communication based on the Bluetooth communication protocol. In particular, the Bluetooth communication module 210 can perform Bluetooth communication with a user device located in a short distance (particularly, located within an entrance space) and transmit and receive encrypted Bluetooth messages. The Bluetooth communication module 210 may correspond to a module to which Bluetooth standard technology of Bluetooth 5.0 or higher is applied, and the BLE communication protocol may be used as one of the controller operation methods.

In the case of a general short-range communication protocol, it can be easily interfered with in an environment where there are many other wireless communication protocols (e.g. WiFi, Zigbee, etc.) using the same bandwidth, but in the case of Bluetooth's communication protocol, adaptive frequency hopping is used. Because the technology is used, data can be transmitted through a channel with less severe channel interference, enabling robust communication operations while minimizing the impact of interference compared to other short-distance communication protocols.

In the BLE communication protocol, the controller's modulation operation mode can be changed to improve transmission speed. In particular, the Bluetooth communication module is a LE 2M PHY with a maximum transmission distance of 2M and a maximum transmission speed of 2Mb/s to enable BLE communication with a user device only within a very close range within a specific space (i.e., entrance space): 2Mb/s It can operate in any operating mode. However, it is not limited to this and can be changed to other operation modes.

The BLE maximum transmission output of the Bluetooth communication module 210 may be set to different classes depending on the mobile operating system of the user device for smooth Bluetooth communication with the user device. For example, if the mobile operating system of the user device is a first operating system (e.g., iOS), the BLE maximum transmission power may be set to Class 1 (100 mW), and the second operating system (e.g., iOS) may be set to Class 1 (100 mW). For Android), the BLE maximum transmission output can be set to Class 2 (2.5mW).

The BLE communication protocol supports Point-to-Point connection, broadcast connection for 1:N transmission, and mesh connection for N:N transmission, and considers improving the connection speed of existing Bluetooth technology (BR/EDR). It is designed to support advertising operations. The advertising operation may correspond to an operation in which, when the first Bluetooth module sends a connectable advertising message, the second Bluetooth module that receives it responds with a connection request, thereby immediately establishing a link between the two devices. According to this advertising operation, the link establishment operation is greatly simplified, so the Bluetooth connection time between devices can be shortened by up to 6 ms. In addition, the BLE communication protocol also supports non-connectable advertising operations for the purpose of providing information that does not require connection between devices.

The Bluetooth communication module 210 according to an embodiment of the present invention may be set to use a connectionless advertising operation for fast recognition speed. Accordingly, the access authentication request message may be included in a non-connected advertising message and transmitted to the non-contact body temperature detection device 130.

In Bluetooth 5.0 version, an extended advertisement operation that can split long data into multiple advertisement messages and send them has been newly defined. Furthermore, for the efficient operation of only three advertising channels, various auxiliary advertising operations that can be divided into two stages, primary advertising and secondary advertising, are also available in the Bluetooth 5.0 version so that advertising messages can be sent in the data channel. was added to The Bluetooth communication module 210 according to an embodiment of the present invention can use an expanded advertisement transmission method and a data split advertisement transmission method to more quickly process encrypted access authentication information received from the user device.

Due to the nature of the present invention, in order to quickly and accurately recognize the user device in a narrow entrance space, the Bluetooth communication module 210 is provided with a directional antenna in the form of a chip with a beam width formed in a narrow horizontal range but wide in the vertical range, so as to enable Bluetooth communication A beamforming operation can be performed.

The RFID/NFC communication module 220 supports RFID and NFC communication, uses a high frequency wireless band of 13.56Mhz, supports communication speeds of 106/212/424 kbps, and complies with ISO 14443A, ISO 14443B, ISO 18092, and FELICA Based on the technology, it supports communication between devices (Peer-to-peer mode) and Reader/Tag (Read/Write mode).

The RFID/NFC communication module 220 uses peer-to-peer mode for NFC communication with the RFID/NFC communication module of the user device, and previously, the user device was identified by tagging the RFID/NFC communication module 220 ( After the Confirm) procedure, additional touch input operations were required to transmit data. However, the RFID/NFC communication module 220 according to an embodiment of the present invention adopts SMART NFC technology (Emulated P2P) to eliminate user inconvenience and enable faster operation, and processes access authentication information with only one tagging operation. can do.

The non-contact infrared temperature detection module 230 may correspond to a temperature detection module that measures the user's body temperature using a non-contact infrared method. In particular, in this specification, the non-contact infrared temperature detection module 230 uses a plurality of thermopile sensors (i.e., thermopile array sensors (TAS)) configured in a forward (or two-dimensional) array method to measure the user's body temperature. can be measured.

Thermopile array sensors enable fast and accurate temperature measurement even at relatively long distances such as 20 to 50 cm, and each thermopile sensor is a micro thermopile sensor using compound thin film technology, which reduces noise compared to existing silicon thermopile sensors. It has the advantage of being more than 5 times better in contrast sensitivity (SNR) and detection area.

By using such a thermopile array sensor, the non-contact body temperature detection device 130 can measure the temperature of each pixel, which is the body temperature measurement area of each of the plurality of thermopile sensors, using an infrared non-contact method. In this specification, a pixel may refer to a temperature measurement specific area/section/part where each thermopile sensor measures temperature, and may have a one-to-one correspondence with each other. A detailed description of the method of measuring body temperature using a thermopile array sensor will be described later with reference to FIGS. 5 and 6.

The other sensor module 240 may include at least one sensor for a sensing/measurement operation according to an embodiment proposed in this specification.

As an example, the other sensor module 240 may include an infrared sensor (PIR, Passive Infrared Sensor). The infrared human body detection sensor refers to a passive infrared sensor, and is a sensor that detects the movement of the human body in a certain section at an acute angle of 9 to 12 degrees through a Fresnel lens. The non-contact body temperature detection device can detect the user's movement using an infrared human body detection sensor and trigger access authentication and body temperature measurement operations for the user.

And/or, in another embodiment, the other sensor module 240 may include a Time of Flight (ToF) sensor. A ToF sensor is a three-dimensional sensor that calculates/recognizes the distance to an object, the three-dimensional effect of the object, spatial information, and movement by using the time when light emitted from an object through infrared waves is reflected and returned. The non-contact body temperature detection device 130 can measure the distance between the non-contact infrared temperature detection module 230 and the user using this ToF sensor, and guides the user to be located within the desired measurement distance/range for accurate body temperature measurement ( For example, information message output, etc.) can be performed.

The control module 250 can independently perform/execute the functions of the non-contact body temperature detection device 130 proposed in this specification by controlling other components included in the non-contact body temperature detection device 130. Accordingly, in this specification, the control module 250 may be replaced with the non-contact body temperature sensing device 130.

The control module 250 may be a Central Processing Unit (CPU), Micro Processor Unit (MPU), Micro Controller Unit (MCU), Application Processor (AP), Application Processor (AP), or any form well known in the art of the present invention. It may be configured to include at least one processor. The operating system of the control module 250 may be embedded Linux or Android.

Software running in the control module 250 includes Web Server providing Web UI, Database, Main Process, and various modules (Bluetooth communication module, RFID/NFC communication module, and/or non-contact infrared temperature detection module, and other sensor modules). It may be composed of a communication interface with and the like.

The main process can receive the user's access authentication information by using/controlling the Bluetooth communication module 210, and can receive the user's body temperature information by using/controlling the non-contact infrared temperature detection module 230. Furthermore, the Main Process can combine the received information to create data and store and manage it in the database.

In particular, the Main Process can perform operations to decrypt received information/message and encrypt information/message to be transmitted. Additionally, the main process can encrypt the data to be recorded/stored and record/save it in the database. As described above, the encryption/decryption method can be performed using the AES-256 or SHA-256 algorithm.

Web Server (not shown) can be built as a responsive web so that it can be accessed and checked from external computers, PCs, mobile phones, etc., and has 1) the function of registering and managing user access information, 2) viewing and downloading access and body temperature information. Functions, 3) Management functions such as adding/editing/deleting administrators 4) Can perform/include whether to use the function of personal recognition non-contact fever detection equipment, setting various standard values, and program upload function.

The administrator can upload/download/manage visitor information by accessing the web page within the administrator device (among the visitor information currently managed, the information to be used as a mobile access card is saved in Excel and uploaded as a file).

The main process can also perform a function of linking with an external system (sharing information on measurement subjects such as employees/students) using at least one communication protocol.

In addition, the control module 250 may include communication software/hardware that processes various communications, a GUI program that shows specific information to the user, and external system linking software.

The display module 260 can output various images/videos based on the control of the control module 250. For example, the display module 260 may display various image information such as the current time, a guidance message, the version of the main process, and/or the currently assigned network. Additionally, the display module 260 may output access authentication information collected in the main process, the user's body temperature, the presence or absence of a user's fever, and/or user fever alarm information. In particular, the display module 260 can output an indicator created/set for each user under the control of the control module 250, which will be described later with reference to FIGS. 8 to 11.

Figure 3 is a diagram illustrating the mobile access card issuance and synchronization process according to an embodiment of the present invention.

Referring to FIG. 3, the user device 120 may request the access management server 110 to issue a mobile access card according to the user's request (S301). The user device 120 may receive access request information required for issuance of a mobile access card from the user and transmit an issuance request message containing the input access request information. At this time, the issuance request message may also be encrypted and transmitted to the access management server 110. Access request information may include personal information and/or identification information of the user and/or user device 120 requesting issuance.

The access management server 110 decrypts the issuance request message to obtain access request information, generates access authentication information based on the obtained access request information, and provides access authentication information to the user device 120 (or user). The included mobile access card can be issued. The mobile access card issued at this time can be broadly divided into two types: one is a regular access card issued for regular access, and the other is a one-time access card issued for one-time access. . In the former case, it may correspond to an access card issued to users who are allowed access on a regular basis, such as employees of a specific company, members who have canceled a regular pass, or teachers and students at a school. In the latter case, it may correspond to an access card issued to a user who is allowed to enter only once, such as a movie theater, amusement park, public transportation, art museum, performance, or visit purpose. This mobile access card type information can later be included in access authentication information and used for user access authentication.

In order to synchronize the issued mobile access card, the access management server 110 may encrypt a synchronization message containing access authentication information and transmit it to the user device 120 and the non-contact body temperature detection device 130 (S301, S302). . The user device 120 may decrypt the synchronization message, obtain access authentication information, and store a mobile access card containing the access authentication information. The mobile access card stored in this way can be automatically executed/loaded when a Bluetooth (or RFID/NFC) link is established between the user device 120 and the non-contact body temperature sensing device 130. The non-contact body temperature detection device 130 also decrypts the synchronization message to obtain access authentication information, and stores the access authentication information in the database as second access authentication information to determine whether access to the user device 120 is possible. .

Although this embodiment has been described focusing on the user device 120, it is not limited thereto, and of course, the functions of the user device 120 can also be performed through an administrator device (not shown). Accordingly, in this embodiment, the user device 120 may be replaced with an administrator device.

In addition, although not shown in this embodiment, the manager device may approve whether to issue a mobile access card. In this case, the access management server can request approval for issuance of a mobile access card by transmitting the acquired access request information to the administrator device, and the administrator determines whether to issue a mobile card based on the access request information and inputs approval/disapproval. This can be done on the administrator device. The administrator device can transmit administrator input to the access management server, and the access management server can complete mobile access card issuance only when mobile card issuance approval is received from the administrator device. At this time, the administrator can approve the issuance of a mobile access card by directly setting the access floor and/or the no-access floor for the user, and the manager device sends the information about the entered access floor and/or the no-access floor to the manager. It can be included in the input and sent to the access management server. The access management server may store information on floors where access is permitted and/or floors where access is prohibited as access authentication information in a database.

Figure 4 is a flowchart illustrating a method of determining whether a non-contact body temperature sensing device can enter or not according to an embodiment of the present invention.

This embodiment assumes that a Bluetooth or RFID/NFC link is pre-created between the non-contact body temperature sensing device and the user device.

Referring to Figure 4, first, the non-contact body temperature detection device may receive an encrypted access authentication request message (S401). The non-contact body temperature sensing device can obtain first access authentication information by decoding the access authentication request message.

Next, the non-contact body temperature sensing device may determine whether the user device requesting access authentication is available/permitted based on the first access authentication information (S402). More specifically, the non-contact body temperature sensing device may compare the first access authentication information with the first access authentication information by loading the second access authentication information stored for the user device in a database. If the two access authentication information match each other, user access approval is completed, and the next step, the body temperature measurement step, can be entered.

Next, the non-contact body temperature detection device can measure the body temperature of a user approved for entry using a non-contact/infrared method using a non-contact infrared temperature detection module (S403). A specific method of measuring body temperature using a non-contact infrared temperature sensing module will be described later with reference to FIGS. 5 and 6.

As a result of measuring the user's body temperature, if the user's body temperature measurement result is within the normal body temperature range, the door can be opened by controlling the access opening and closing device. If it is not within the normal body temperature range, the door can be kept closed without controlling the access opening and closing device. You can. A detailed description of the access opening and closing device will be provided below with reference to FIGS. 11 and 12.

FIG. 5 is a diagram illustrating a pixel structure of a non-contact body temperature sensing device according to an embodiment of the present invention, and FIG. 6 is a diagram illustrating a method of measuring body temperature of a non-contact body temperature sensing device according to an embodiment of the present invention.

Referring to FIG. 5, the non-contact body temperature sensing device measures the user's body temperature using a plurality of thermopile sensors 510 (i.e., thermopile sensor array (TAS)) provided in a square array (or two-dimensional array). can do. The measurement area/section/portion measured by one thermopile sensor can be defined as one pixel (p), and a one-to-one relationship is established between the plurality of thermopile sensors 510 and the plurality of pixels (p0 to p15). It can be. This drawing illustrates 16 thermopile sensors 510 provided in a 4X4 array in a non-contact body temperature sensing device and 16 pixels (p0 to p15) corresponding one-to-one.

The non-contact body temperature sensing device can generate thermal image images 520 and 530 as shown in FIG. 6 based on body temperature information for each pixel (p0 to p15) acquired using a plurality of thermopile sensors 510. there is. In particular, the non-contact body temperature sensing device can generate thermal images 520 and 530 by determining a color based on the measured body temperature for each pixel (p0 to p15) and displaying each pixel in the determined color. For example, a non-contact body temperature detection device can display pixels (p0 to p15) with higher measured body temperatures in red, and pixels (p0 to p15) with lower body temperatures to display in blue.

If more than a preset number (e.g., 8) of pixels with a temperature (e.g., 36 degrees) or higher is detected among a plurality of pixels (p0 to p15), the non-contact body temperature detection device detects the user's body temperature measurement location. It can be recognized as being located within the / range (for example, within a distance range of 20 to 50 cm in the front direction from the non-contact body temperature sensing device). In addition, non-contact body temperature detection devices can use Bluetooth or RFID/NFC link formation and/or other sensor modules as auxiliary means to more accurately recognize/determine whether the user is located in the body temperature measurement location/range.

When the user is recognized/determined to be located in the body temperature measurement location/range, the non-contact body temperature sensing device processes the temperature of the pixel (i.e., effective pixel) above the preset temperature as the effective body temperature value, and the remaining pixels (i.e., effective pixel) are processed as the effective body temperature value. The temperature of the pixel (less than the set temperature) can be treated as the ambient temperature value. The non-contact body temperature detection device can predict the body temperature of the user being measured based on the effective body temperature value and the ambient temperature value. For example, the non-contact body temperature sensing device may predict/extract the average value of effective body temperature values, the effective body temperature value of a specific location pixel among the effective body temperature values, or the highest effective body temperature value among the effective body temperature values as the user's body temperature. For example, a specific location pixel may mean a pixel included in the upper section when valid pixels are divided into upper/middle/lower sections. This is to predict the pixel measuring the forehead with the highest body temperature measurement accuracy and extract body temperature from this, assuming that the area measured by the plurality of thermopile sensors is the face.

A non-contact body temperature sensing device predicts the user's body temperature based on effective body temperature values and can increase body temperature prediction accuracy by compensating for the predicted value based on the ambient temperature value. For example, the lower the ambient temperature value, the higher the user's body temperature can be compensated, and the higher the ambient temperature value, the lower the user's body temperature can be compensated. Through these compensation actions, the user's body temperature can be predicted more accurately.

Figure 7 is a diagram illustrating an example of secret key update according to an embodiment of the present invention.

When using the AES-256 algorithm to encrypt and decrypt messages/information, the risk of leakage is very high when the same secret key is continuously used. In particular, if access authentication information is leaked, outsiders can easily enter the controlled area, which can pose a serious threat to security. Accordingly, in this specification, in order to resolve this security risk, a secret key can be set for each user 710 and updated each time the user enters or enters or measures his or her body temperature based on the body temperature measurement information 720 for each user.

For example, as illustrated in this drawing, when the user 710 measures body temperature on date XX/XX/XX and time YY:YY, and the measured body temperature is measured as ZZ.Z°C, the non-contact body temperature detection device From this, the code XXXXXXYYYYZZZ can be derived. The code derived in this way can be converted to 256 bits and updated with the secret key.

This secret key update operation can be performed based on body temperature measurement information 720 in each of the user device, access management server, and non-contact body temperature detection device. More specifically, the non-contact body temperature detection device can generate body temperature measurement information 720, encrypt it with an existing secret key, and transmit it to the user device and access management server. The user device and the access management server acquire body temperature measurement information 720 using the existing secret key, extract a code from this body temperature measurement information 720, and generate a new secret key as described above. It can be updated.

According to this embodiment, the secret key is updated using information essentially transmitted and received between the user device, the access control server, and the non-contact body temperature detection device, so there is no need for a separate signaling and message transmission/reception process for creating/updating a new secret key. Signaling overhead is minimized, and since the secret key is periodically updated each time the user 710 enters or exits or measures body temperature, security risks due to secret key leakage are eliminated.

This embodiment can be performed only for regular access subjects.

The user's body temperature measurement information 720 may include at least one of the body temperature of the user 710, the date and time of the user's body temperature measurement, and the date and time of the user's entry and exit.

Figure 8 is a diagram illustrating an example of indicator generation according to an embodiment of the present invention.

In order to accurately measure body temperature, it is desirable that the angle and distance between the non-contact body temperature sensing device (more precisely, a plurality of thermopile sensors) and the user should be within the measurable angle and distance range of the non-contact body temperature sensing device. Therefore, in the case of a conventional body temperature measurement system, the user's measurement position is marked with a sticker on the floor to guide the user about the user's measurement angle and distance, or the user's distance and angle are measured using a sensor to determine the user's measurement angle and distance. A guidance message was printed directly to guide the user to the measurement location. However, in this prior art, in the former case, there was a problem in that it did not reflect the fact that the body part size of each user was different and always guided only the same position, making it impossible to guide the accurate measurement position for each user. In the latter case, additional Since sensors are essential, there is a problem that the initial construction, production, and maintenance costs of the system are high. Therefore, in order to solve this problem, this specification proposes an embodiment that generates and provides an indicator for each user to indicate an accurate temperature measurement angle and distance.

Referring to FIG. 8 in more detail, the non-contact body temperature detection device is a thermal image image 810 acquired/generated using a plurality of thermopile sensors. You can select/select the located pixels (p1, p2, p4, p7, p8, p11, p13, p14). Furthermore, the non-contact body temperature sensing device connects the centers of the pixels (p1, p2, p4, p7, p8, p11, p13, p14) selected/selected from the thermal image to create an indicator 820 forming a closed space. You can. The non-contact body temperature sensing device can store the generated indicator 820 in a database in response to the second access authentication information, and can later use it as an indicator 820 to guide/instruct the user on the temperature measurement distance and angle. An embodiment of utilizing the indicator 820 will be described in detail below with reference to FIG. 9 .

Figure 9 is a diagram illustrating an example of using an indicator according to an embodiment of the present invention.

When the non-contact body temperature sensing device obtains/receives the first access authentication information matching the second access authentication information, it may output an indicator 820 corresponding to the second access authentication information to the display module. The user 920 detects a body part (in particular, the part where the temperature was measured when generating the indicator (e.g., face)) more than a preset percentage (e.g., 80 to 90%) of the indicator 820 output to the display module. ) can be located at overlapping measurement distances and angles. As a result, the measurement distance and angle between the user 920 and the non-contact body temperature sensing device are automatically adjusted within a measurable distance and angle range, resulting in improved body temperature measurement accuracy.

This indicator 820 is generated and output only when the user is subject to regular access according to the first and second access authentication information (i.e., the indicator 820 is not generated and output for one-time access subjects), thereby reducing signaling overhead. and internal process costs can be saved.

When outputting the indicator 820, the user directly adjusts the distance and angle so that the measurement part is located inside the indicator 820, so the temperature of the pixels (p0, p3, p12, p15) outside the indicator 820 is the surrounding temperature. It is very likely that it is temperature. Therefore, the non-contact body temperature sensing device can measure user body temperature by selectively activating only the thermopile sensors of pixels (p0, p3, p12, p15) located at positions corresponding to the indicator 820 when outputting the indicator 820. .

Above, we looked at the non-contact infrared body temperature measurement and access control system. Below, we will propose an integrated embodiment in which a non-contact infrared body temperature measurement and access management system and an elevator control system are linked.

Figure 10 is a block diagram of an elevator control system according to an embodiment of the present invention.

Referring to FIG. 10, the elevator control system 1000 may include an elevator 1020, a communication unit 1030, a destination floor input unit 1040, a memory unit 1050, and/or a control unit 1010.

The elevator 1020 may correspond to an elevator that transports users to the destination floor. The elevator 1020 can be called to a specific floor under the control of the control unit 1010 or can transport users using a specific floor as a destination floor.

The communication unit 1030 may communicate with an external device/server using at least one wired/wireless communication protocol. In particular, in the elevator control system 1000, the communication unit 1030 can transmit and receive various information/signals/data/commands by communicating with the non-contact body temperature detection device of the integrated system using wired/wireless communication protocols.

The destination input unit 1040 may include at least one sensing means to receive a user's destination input. For example, the destination floor input unit 1040 is provided with a touch pad equipped with number keys and can receive the destination floor by receiving a user's touch input for a specific number key. If the destination floor input by the user through the destination floor input unit 1040 does not overlap with the preset destination floor of the elevator 1020, the control unit 1010 can set it as a new destination floor, and the destination floor entered by the user is If it overlaps with the preset destination floor of the elevator, the preset destination floor can be canceled/deleted.

The memory unit 1050 is a space that stores various digital data, and may include flash memory, hard disk drive (HDD), solid state drive (SSD), and cloud. In particular, the memory unit 1050 can store various data about the call status, scheduled destination floor, call history, currently waiting floor, and boarding history for each elevator.

The control unit 1010 may communicate with at least one component included in the elevator control system 1000 to control them. The control unit 1010 is a CPU (Central Processing Unit), MPU (Micro Processor Unit), MCU (Micro Controller Unit), AP (Application Processor), AP (Application Processor), or any form well known in the art of the present invention. It may be configured to include at least one processor. The control unit 1010 may perform operations on at least one application or program to execute methods according to embodiments of the present invention.

In particular, the control unit 1010 can use/control the communication unit 1030 to receive various messages/data/requests/commands/signals from the non-contact body temperature sensing device, and control the elevator 1020 (in particular, call and scheduling) operations can be performed. Specific control embodiments will be described below with reference to FIGS. 11 to 15.

Figure 11 is a flowchart of an elevator call method according to the first embodiment of the present invention.

The order of each step in this flow chart is only an example, and may be changed or performed simultaneously depending on the embodiment, and of course, other steps may be added.

Referring to FIG. 11, first, the non-contact body temperature detection device can determine whether the user can enter or not and perform a temperature measurement operation. When entry approval and normal body temperature are (sequentially) confirmed (S1101), a request is made to the access opening and closing device to open the door. can be transmitted (S1102). The operation of determining whether a user can enter or not and measuring body temperature can be performed according to the embodiment described above with reference to FIG. 4, and redundant description will be omitted.

Next, the access opening and closing device may open the door according to the door opening request received from the non-contact body temperature detection device (S1103). The access opening and closing device can open the door only when it receives a door opening request from the non-contact body temperature detection device, otherwise it can keep the door closed.

Next, the non-contact body temperature sensing device may transmit an elevator call request to the elevator control system (particularly, the control unit of the elevator control system) (S1104). At this time, the non-contact body temperature sensing device may transmit the elevator call request including the destination floor. In this embodiment, the destination floor may be set as the destination floor included in the second access authentication information previously stored for the user.

Next, the elevator control system (particularly, the control unit of the elevator control system) can call the elevator by setting the floor included in the elevator call request as the destination floor (S1105). If the elevator control system is equipped with a plurality of elevators, one of the plurality of elevators can be selected and called based on the destination floor, which will be described later with reference to FIG. 13.

Next, the elevator control system (particularly, the control unit of the elevator control system) may transmit an elevator call response including the elevator call status to the non-contact body temperature sensing device (S1106). The elevator call status can be broadly divided into elevator call success, elevator call failure, elevator waiting, elevator inspection, etc. The non-contact body temperature sensing device can transmit the received elevator call status to the user device.

Lastly, the non-contact body temperature sensing device may store the user's entry/exit information, body temperature information, and/or elevator call information in a database (S1107), and may record and manage the user's entry/exit history.

Figure 12 is a flowchart of an elevator call method according to the second embodiment of the present invention.

The order of each step in this flow chart is only an example, and may be changed or performed simultaneously depending on the embodiment, and of course, other steps may be added.

The second embodiment according to this flowchart is an embodiment in which the destination floor of the elevator is set based on user input, unlike the first embodiment in which the destination floor of the elevator is automatically set to the destination floor included in the second access authentication information. am. Therefore, since steps S1201 to S1203 and S1209 to S1211 of this flow chart correspond to steps S1101 to 1103 and S1105 to S1107 of FIG. 11, overlapping descriptions are omitted, focusing on steps S1204 to S1208, which are differences from the first embodiment. This is explained below.

After transmitting a door opening request, the non-contact body temperature sensing device may transmit an elevator call inquiry to the user device (S1204). The user device can output a notification window for an elevator call inquiry, and through the notification window, the user can directly input whether the elevator is being called and the destination floor.

Next, the user device can include the call status and destination floor input through the corresponding notification window in the elevator call response and transmit it to the non-contact body temperature detection device (S1205).

Next, the non-contact body temperature sensing device can determine whether the destination floor entered by the user belongs to an entry-permitted floor (S1206). As described above, information on floors permitted for each user is stored as second access authentication information in the database of the non-contact body temperature sensing device, and users can enter only floors permitted for access. Therefore, the non-contact body temperature sensing device determines whether it is possible to call the elevator to the destination floor by loading the access permitted floor among the second access authentication information stored in the database for the user and comparing it with the destination floor entered by the user. can do.

If the destination floor entered by the user is among the floors permitted for access, the non-contact body temperature sensing device includes the destination floor entered by the user in the elevator call request and transmits it to the elevator control system (particularly, the control unit of the elevator control system). (S1208).

Conversely, if the destination floor entered by the user does not belong to an access-permitted floor, the non-contact body temperature sensing device may transmit an elevator call impossible response to the user device (S1207). At this time, the non-contact body temperature sensing device may transmit the reason for not being able to call the elevator (i.e., the destination floor entered by the user is a floor that is not accessible) along with the response not being able to call the elevator.

Figure 13 is a flowchart illustrating a method of scheduling multiple elevator calls by the control unit according to an embodiment of the present invention.

The order of each step in this flow chart is only an example, and may be changed or performed simultaneously depending on the embodiment, and of course, other steps may be added. Additionally, this embodiment assumes that the elevator control system is equipped with a plurality of elevators.

Referring to FIG. 13, the control unit may first receive an elevator call request including the first destination floor from the non-contact body temperature detection device (S1301), and the description of this corresponds to the steps S1104 and S1208 described above, so the description is redundant. is omitted.

Next, the control unit can determine whether the elevator symbol is displayed (S1302).

If the uncalled elevator does not exist, the uncalled elevator on the floor closest to the entrance floor among the plurality of elevators can be called (S1303). If there are multiple uncalled elevators waiting at the nearest floor, the control unit can randomly select one of them and call it.

On the other hand, when there is at least one elevator that has been sent out, the control unit compares the second destination floor and the first destination floor set for the elevator that has been sent out to a preset floor (for example, N = 5 floors). You can determine whether there is a difference (S1304). At this time, the preset floor may be set to various values by the administrator according to the operating policy of the elevator control system.

If the difference between the second destination floor and the first destination floor is less than the preset floor (including cases where the second destination floor and the first destination floor overlap), an elevator call including the first destination floor is sent out. It can be assigned/scheduled to an elevator (S1305). That is, the first destination floor may be newly/additionally assigned as the destination floor of the previously exited elevator (excluding cases where the first and second destination floors overlap) and called as the access floor.

Conversely, when the second destination floor and the first destination floor differ by more than a preset floor, when the first destination floor is assigned to all elevators (including uncalled elevators and semi-called elevators), the expected total moving floor is derived. Thus, mutual comparisons can be made (S1306).

For example, it can be assumed that an uncalled elevator is currently waiting on the 5th floor, the second destination floor of the semi-called elevator is the 3rd floor, and the first destination floor is the 9th floor. In this case, the total number of moving floors from when the uncalled elevator stops at the entrance floor and picks up the user to moving to the 9th floor can be calculated as 14 floors (=5th floor + 9th floor), and the uncalled elevator is already assigned. The total moving floor from stopping at the second destination floor to moving to the first destination floor can be calculated as 12 floors (=3 floors + 9 floors). In the case of a semi-output elevator, the current floor of the semi-outlet elevator is currently moving to the access floor due to a call, so the current floor of the semi-outlet elevator can be regarded as the access floor.

In calculating the total moving floor, not only the current waiting floor of the elevator, whether or not it is called, and the previously assigned destination floor, but also the floor to which the elevator is called in real time by the user can be additionally considered.

Next, the control unit may assign the elevator call to the elevator with the lowest expected total moving floor (S1307). In the above example, since the total number of floors of the non-called elevators is less than that of the non-called elevators on the 12th floor, the control unit may assign/schedule the elevator call to the non-called elevators. As a result, the first destination floor can be newly/additionally assigned as the destination floor of the previously exited elevator and called as the access floor.

In this way, by allocating/scheduling elevator calls in consideration of the total moving floors for each elevator, elevator power consumption can be minimized and users' elevator waiting time can be minimized.

Figure 14 is a flow chart illustrating a visitor's visit reservation method according to an embodiment of the present invention, and Figure 15 is a diagram illustrating a user device that receives visit reservation information according to an embodiment of the present invention.

The order of each step in this flow chart is only an example, and may be changed or performed simultaneously depending on the embodiment, and of course, other steps may be added.

There may be visitors who wish to visit a building equipped with an integrated management system on a one-time basis. For these visitors, the integrated management system can issue a mobile access card for the visitor, approve the visitor's access, measure body temperature, and call the elevator.

To this end, referring to FIG. 14, the user device may transmit a visit reservation request including visit reservation information to the access management server (S1401). The user device 120 may output a visit reservation application window 1520 to receive visitor reservation information, as illustrated in FIG. 15 . Visitor reservation information input from the user may include, for example, the visitor's ID (Identifier), visit date and time, reason for visit, resident registration number, name, contact information, purpose floor, visit reservation applicant, and/or photo (1510). there is.

Next, the access management server may forward the received visit reservation request to an administrator device with visit reservation approval authority (S1402).

Next, the manager device can output the visit reservation (S1403) and receive administrator input on whether to approve the visit reservation (S1404). At this time, the manager device can determine whether the visit is approved by checking the visit reservation request, and can approve the visit by directly setting the floor that is allowed access and/or the floor that is not accessible.

Next, the manager device may transmit a response whether the visit reservation is approved or not, including whether the visit reservation is approved or not, to the access management server (S1405). When approving a visit reservation is permitted, the response as to whether the visit reservation is approved may additionally include information about the access allowed floor and/or the inaccessible floor set by the manager device.

Next, if the visitor's visit reservation is approved as a result of checking the response whether the visit reservation is approved, the access management server may generate third access authentication information based on the visit reservation information and store it in the database (S1406). At this time, the third access authentication information may additionally include information about the access permitted floor and/or the non-accessible floor set by the administrator device. The third access authentication information generated in this way can be synchronized with the non-contact body temperature detection device according to the embodiment proposed in FIG. 3. More specifically, the access management server can encrypt a synchronization message containing the third access authentication information and transmit it to the non-contact body temperature detection device, and the non-contact body temperature detection device receives and decrypts the synchronization message to obtain the third access authentication information. It can be saved in the database.

Next, the access management server can notify the user device of the visit reservation result (S1407), and upon approval of the visit reservation, a mobile access card for the visitor containing third access authentication information can be issued to the visitor device (S1408) ).

Thereafter, the previously described methods for authenticating the access of a visitor (or visitor device), measuring body temperature, and calling an elevator may be applied as is. That is, in the above embodiments, the user (or user device) can be replaced with a visitor (or visitor device) to which a mobile access card for a visitor has been issued, and the second access authentication information is replaced with the third access authentication information. It can be explained.

After the visit date and time, the mobile access card for the visitor may automatically expire, and the third-party access authentication information may be automatically discarded/deleted from the database.

Meanwhile, although not shown in these drawings, when the visitor reservation information and access authentication information including the visitor's photo are synchronized, the non-contact body temperature sensing device can extract the visitor's indicator according to the embodiments of FIGS. 8 and 9. there is. More specifically, the non-contact body temperature detection device recognizes the visitor's face from the visitor's photo, creates a closed curve indicator corresponding to the border of the visitor's face, and can be used as an indicator to guide/instruct the visitor on the distance and angle of body temperature measurement. .

If a building uses a security elevator, a security Bluetooth authentication module may be additionally installed inside the elevator, and if the user/visitor wishes to move to a different floor than the floor to which access is permitted, the security You can move to another floor by additionally authenticating through the Bluetooth authentication module. In order to move to a floor where access is not permitted, the issuance of a mobile access card for visitors may be requested from the integrated system, and only if the mobile access card for visitors is issued according to the procedure in Figure 14 described above, the floor It may be possible to move to .

The integrated system and the elevator control system can communicate with each other in real time, and if a communication failure occurs, a notification can be sent to the manager device to immediately notify the manager of the poor communication status.

When the system of this specification is applied to a corporate building, because different groups of people use their own rented spaces, it is necessary to prevent the entry of users who are using spaces other than those who have reserved a visit to the unique space. Therefore, in order to limit the spaces each person can enter, administrator rights may be granted to multiple users in each space.

Embodiments according to the present invention may be implemented by various means, for example, hardware, firmware, software, or a combination thereof. In the case of implementation by hardware, an embodiment of the present invention includes one or more application specific integrated circuits (ASICs), digital signal processors (DSPs), digital signal processing devices (DSPDs), programmable logic devices (PLDs), and FPGAs ( It can be implemented by field programmable gate arrays, processors, controllers, microcontrollers, microprocessors, etc.

In addition, in the case of implementation by firmware or software, an embodiment of the present invention is implemented in the form of a module, procedure, function, etc. that performs the functions or operations described above, and is stored on a recording medium readable through various computer means. can be recorded Here, the recording medium may include program instructions, data files, data structures, etc., singly or in combination. Program instructions recorded on the recording medium may be those specifically designed and constructed for the present invention, or may be known and available to those skilled in the art of computer software. For example, recording media include magnetic media such as hard disks, floppy disks and magnetic tapes, optical media such as CD-ROM (Compact Disk Read Only Memory) and DVD (Digital Video Disk), and floptical media. It includes magneto-optical media such as floptical disks, and hardware devices specially configured to store and execute program instructions such as ROM, RAM, flash memory, etc. Examples of program instructions may include machine language code such as that created by a compiler, as well as high-level language code that can be executed by a computer using an interpreter, etc. These hardware devices may be configured to operate as one or more software modules to perform the operations of the present invention, and vice versa.

In addition, the device or terminal according to the present invention can be driven by instructions that cause one or more processors to perform the functions and processes described above. For example, such instructions may include interpreted instructions, such as script instructions, such as JavaScript or ECMAScript instructions, executable code, or other instructions stored on a computer-readable medium. Furthermore, the device according to the present invention may be implemented in a distributed manner over a network, such as a server farm, or may be implemented in a single computer device.

In addition, a computer program (also known as a program, software, software application, script or code) mounted on the device according to the present invention and executing the method according to the present invention includes a compiled or interpreted language or an a priori or procedural language. It can be written in any form of programming language, and can be deployed in any form, including as a stand-alone program, module, component, subroutine, or other unit suitable for use in a computer environment. Computer programs do not necessarily correspond to files in a file system. A program may be stored within a single file that serves the requested program, or within multiple interacting files (e.g., files storing one or more modules, subprograms, or portions of code), or as part of a file that holds other programs or data. (e.g., one or more scripts stored within a markup language document). The computer program may be deployed to run on a single computer or on multiple computers located at one site or distributed across multiple sites and interconnected by a communications network.

For convenience of explanation, each drawing has been described separately, but it is also possible to design a new embodiment by merging the embodiments described in each drawing. In addition, the present invention is not limited to the configuration and method of the embodiments described above, but the above-described embodiments are configured by selectively combining all or part of each embodiment so that various modifications can be made. It could be.

In addition, although the preferred embodiments have been shown and described above, the present specification is not limited to the specific embodiments described above, and those with ordinary knowledge in the technical field to which the specification pertains without departing from the gist of the claims. Of course, various modifications can be made by the user, and these modifications should not be understood individually from the technical ideas or perspectives of the present specification.

Claims (10)

In an elevator control system linked to a non-contact infrared body temperature measurement and access management system,
The non-contact infrared body temperature measurement and access control system,
An access management server that issues and manages mobile access cards;
A user device that encrypts and transmits an access authentication request message containing first access authentication information of the issued mobile access card;
Receive and decode the access authentication request message from the user device to obtain the first access authentication information, determine whether the user device can enter based on the first access authentication information, and access the user device. a non-contact body temperature sensing device that, if available, measures the body temperature of a user carrying the user device in a non-contact manner; and
an access opening and closing device that receives a door opening request from the non-contact body temperature sensing device and opens the door when the user's body temperature measurement result is within the normal body temperature range; Including,
The elevator control system is,
an elevator that transports the user to the destination floor;
a communication unit configured to communicate with the non-contact infrared body temperature measurement and access management system using at least one communication protocol;
a destination floor input unit that receives the destination floor from the user;
a memory unit that stores data;
a control unit that controls the elevator, the communication unit, the destination floor input unit, and the memory unit; Including,
The non-contact body temperature sensing device transmits an elevator call request to the control unit when the user's body temperature measurement result falls within the normal body temperature range,
The control unit calls the elevator to the access floor based on the elevator call request,
The access management server encrypts a synchronization message containing the access authentication information and transmits it to the non-contact body temperature detection device to synchronize the issued mobile access card,
The non-contact body temperature sensing device receives and decodes the synchronization message to obtain and store second access authentication information, and compares the second access authentication information with the first access authentication information to determine whether the user device can enter. Elevator control system linked to non-contact infrared body temperature measurement and access management system. delete According to claim 1,
The first and second access authentication information is,
Non-contact, including at least one of the user's ID (Identifier), resident registration number, employee number, name, contact information, regular access target, access permitted floor, destination floor, non-accessible floor, and mobile operating system information of the user device. Elevator control system linked to infrared body temperature measurement and access management system. According to claim 3,
The non-contact body temperature sensing device,
Before transmitting the elevator call request, transmit an elevator call inquiry to the user device,
Receiving an elevator call response including a destination floor entered by the user from the user device,
An elevator control system linked to a non-contact infrared body temperature measurement and access management system that determines whether the destination floor entered by the user belongs to the access permitted floor. According to claim 4,
The non-contact body temperature sensing device,
If the destination floor entered by the user belongs to the access permitted floor, the destination floor is included in the elevator call request and transmitted to the control unit,
An elevator control system linked to a non-contact infrared body temperature measurement and access management system that transmits an elevator call impossible response to the user device when the destination floor entered by the user does not belong to the access permitted floor. According to claim 5,
The non-contact body temperature sensing device transmits the elevator call request to the control unit including the destination floor included in the first and second access authentication information or the destination floor entered by the user,
The control unit sets the received destination floor as the destination floor of the elevator and calls the elevator. An elevator control system linked to a non-contact infrared body temperature measurement and access management system. According to claim 6,
When the elevator control system is equipped with a plurality of elevators,
The control unit,
When receiving the elevator call request, determine whether the elevator signaled exists,
If the semi-output elevator exists and the destination floor of the semi-output elevator is different from the received destination floor by less than a preset floor, assigning the elevator call request to the semi-output elevator,
An elevator control system linked to a non-contact infrared body temperature measurement and access control system that assigns the elevator call request to an uncalled elevator on the floor closest to the access floor among the plurality of elevators when the uncalled elevator does not exist. According to claim 1,
The non-contact infrared body temperature measurement and access management system includes an administrator device having visit reservation approval authority; It further includes,
The user device transmits a visit reservation request containing visit reservation information to the access management server,
The access management server transmits the visit reservation request to the manager device,
The access management server receives a response as to whether the visit reservation is approved from the manager device, and issues a mobile access card for a visitor containing third access authentication information based on the response as to whether the visit reservation is approved, non-contact infrared body temperature measurement and access. Elevator control system linked to management system. According to claim 8,
The access management server encrypts a synchronization message containing the third access authentication information and transmits it to the non-contact body temperature detection device to synchronize the issued mobile access card for the visitor,
The non-contact body temperature sensing device is an elevator control system linked to a non-contact infrared body temperature measurement and access management system that receives and decodes the synchronization message to obtain and store the third access authentication information. According to clause 9,
The third access authentication information is,
Non-contact infrared body temperature measurement, which additionally includes at least one of the visitor's ID (Identifier), date and time of visit, reason for visit, resident registration number, name, contact information, one-time access, floor permitted for entry, floor floor subject to entry, floor prohibited from entry, and photo. and an elevator control system linked to the access management system.

Images