JP4044396B2 - Entrance / exit management system and entrance / exit management method - Google Patents

Description

[0001]
BACKGROUND OF THE INVENTION
The present invention relates to an entry / exit management system in which entry qualification is set for each room (room) and only qualified persons having entry qualification are allowed to enter the room.
[0002]
[Prior art]
As a first conventional example related to this type of entrance / exit management system, there is one disclosed in Japanese Patent Laid-Open No. 5-197729.
In the first conventional example, the host computer 2 is provided with a personnel file in which user attribute data such as the name, age, gender, affiliation, and name code of the user (user) is recorded, and the user is similarly provided in the ID card. Record the attribute data. When the attribute data of the ID card user matches the attribute data of the personnel file, the ID card owner is allowed to enter the corresponding area.
[0003]
A second conventional example is disclosed in Japanese Patent Laid-Open No. 10-280752. In the second conventional example, a security level corresponding to the identification data of the card reader unit is determined in advance in the management unit (floor controller 1), and the management unit performs security corresponding to the identification data sent from the card reader unit. Confirming the level, requesting the card reader means to input data according to the security level, and permitting the IC card holder to enter the corresponding area when confirming that the requested data input has been made. .
[0004]
[Problems to be solved by the invention]
In the first conventional example described above, when the user's age or affiliation changes and the attribute data of the user in the personnel file changes, it is necessary to update the attribute data of the ID card as well as the attribute data of the personnel file. . However, since the ID card is owned by each user, when updating the data of the ID card, it is necessary to collect the ID card from each user and update the data, which is troublesome. there were.
[0005]
In the second conventional example described above, since it is not necessary to provide a security level on the IC card or card reader means side, even if the security level is changed, the IC as in the first conventional example is used. There is no need to update the security level on the card or card reader means side. However, in the second conventional example, when the security level is in a high level area, in addition to the identification data of the IC card, the user side is requested to separately input a confirmation input for confirming the user himself / herself. There is a problem that an input device for confirmation input is required, the system becomes expensive, and the input operation for identification is troublesome. In addition, when the user's password is input or the user's fingerprint is imprinted to verify the identity by verifying the identity, the user forgets the password or the fingerprint verification accuracy is poor However, there is a problem that even a legitimate person who can enter the room cannot enter the room.
[0006]
Therefore, the present invention makes it unnecessary to update the data of the card possessed by the user even when the attribute data of the user who can enter the room changes, and confirms the user himself / herself when entering the room. The purpose is to eliminate the need for identity verification input.
[0007]
[Means for Solving the Problems]
In order to solve such a problem, the present invention provides an identification information reading means that is provided for each room and that reads identification information for identifying a person who wants to enter the room, and data on the person who wants to enter the room. Authority level or business category code relative to The database is stored on the basis of the identification information read by the identification information reading means and the database storing the Authority level or job classification code Data extraction means to extract and qualification Authority level and job classification code Storing means for each room, and entry qualification extracting means for extracting the entry qualification of the room corresponding to the identification information reading means from the storage means, , At least one of the authority level and / or business classification code of the person who wants to enter the room extracted by the data extraction means, Extracted by entry qualification extraction means At least one of the authority level of the room or the business division code The entrance permission determination means for determining whether or not the person who wants to enter the room has the entry qualification and the door of the corresponding room when the entry applicant is determined to have the entry qualification by the entry permission determination means. And a lock control means for locking.
[0008]
The present invention also provides: Entering / exiting management method in which entry qualification is set for each room and only qualified persons having the entry qualification are allowed to enter the room, and those who wish to enter the room are provided for each room. Reading identification information identifying Above In steps The person who wants to enter the room based on the read identification information Stores the authority level or job classification code relative to the data of Search the database and find the appropriate person Authority level or job classification code Extract Step And entrance qualification Authority level or job classification code From the storage means stored for each room Qualification for corresponding room Extract Step, the authority level or business code of the person who wants to enter the room extracted by the extraction step, and the authority level or business classification code that is the qualification for entering the room And whether or not the person who wants to enter the room has at least one entry qualification Step When, The determination step The door of the corresponding room is unlocked when it is determined that the person who wants to enter the room has at least one entry qualification. Step When Include Is.
[0009]
DETAILED DESCRIPTION OF THE INVENTION
The present invention will be described below with reference to the drawings.
FIG. 1 is a block diagram showing a configuration of an entrance / exit management system according to the present invention. As shown in FIG. 1, the entrance / exit management system includes a personnel data server 1, a personnel database 2, a security judgment server 3, a security level setting database 4, and an identity in which user (user) IDs are recorded. ID 5, an ID information reader 6 (6A, 6B) that reads the ID information provided in each of the rooms (rooms) # 1 and # 2 and recorded on the identification card 5, and the doors of the rooms # 1 and # 2, respectively. And an electric lock 7 (7A, 7B) that unlocks the door by an unlock signal from the ID information reader 6 (6A, 6B). The ID information reader 6 (6A, 6B) The server 1 and the security judgment server 3 are connected.
[0010]
Here, the security judgment server 3 executes the personnel data format conversion program so that the personnel data in the format unique to the personnel system stored in the personnel database 2 is stored in the common format, for example, the authority level and the business classification code format. HR data format conversion unit 31 for conversion to ID, electric lock NO. Representing the ID of the user ID 5 and the number of the electric lock 7 read by the ID information reader 6. Is output from the ID information reading device 6, the user ID and the electric lock NO. Security level information corresponding to the security level setting database 4 is extracted from the security level setting database 4 and the unlocking permission / non-permission is determined based on the extracted security level information and the authority level and job classification code converted and output by the personnel data format conversion unit 31. An entry / exit permission determination unit 32 is provided for returning the determination result as an inquiry result to the ID information reading device 6.
[0011]
FIG. 2 is a diagram showing a setting state of security level information in the security level setting database 4.
In the security level setting database 4, as shown in FIG. 2 (a), for each room # 1 and # 2 (that is, for each electric lock No.), the authority level indicating the qualification to enter the room, the work There is provided a first table in which a classification code, a privilege code, and a determination condition for determining whether or not the user has a room entry qualification are set.
[0012]
Here, the authority level set in the first table of FIG. 2A indicates the authority of the user permitted to enter the management range of the electric lock, and is associated with the job title included in the personnel data. It is set when only users with limited positions want to allow entry. When this item is not set, entry permission determination based on the authority level is not performed. Further, the business classification code set in the first table of FIG. 2A indicates the business classification of the user who is allowed to enter the management range of the electric lock, and only certain limited business workers can enter the business. Set if you want to allow. When this item is not set, entry permission determination based on the work classification code is not performed.
[0013]
In addition, the privilege code set in the first table of FIG. 2A allows the user who has the ID assigned to the privilege code to enter the room unconditionally regardless of the authority level and the business classification code. This code represents a code and is used for setting an administrator, a guest user, and the like. Here, by providing a second table as shown in FIG. 2 (b) and defining the correspondence between each privilege code and the user ID, it is possible to easily cope with the case of taking over the administrator, etc. Multiple user IDs can be assigned to the code.
Note that a user who does not have a privilege code is permitted to enter the room if it matches the authority level and / or the work classification code. For electric locks for which neither the authority level nor the work classification code is specified, all users are allowed to enter the room.
[0014]
Further, the determination conditions set in the first table of FIG. 2A include a logical product and a logical sum of the above authority level and business classification code, or only one of the conditions. It is set as a judgment condition for entry permission. For example, if the authority level is condition X and the job classification code is condition Y, the determination condition “X” means that the entrance permission is determined only by the condition X, and the determination condition “X + Y” is the condition X Alternatively, if either of the conditions Y is met, it means that the room is allowed to enter, and the determination condition “X · Y” means that only those who meet both the conditions X and Y permit the room.
[0015]
FIG. 3 is a flowchart showing the operation of the entry / exit permission determination unit 32. The operation of the main part of the present invention will be described based on the flowchart of FIG. 3, the block diagram of FIG. 1, and the setting contents of the security level setting database 4 of FIG.
For example, when the user inserts the ID card 5 in which his / her ID is recorded in order to enter the room # 1, the ID of the ID card 5 is read as a user ID by the ID information reader 6A. The ID information reading device 6A is an electric lock NO. Indicating the read user ID and the number of the electric lock 7A that is stored in advance in the door of the room # 1. An unlock permission inquiry including the above is made to the security determination server 3.
[0016]
Then, the entry / exit permission determination unit 32 of the security determination server 3 starts execution of the entry / exit permission determination program (step S1), and the electric lock NO. The first table shown in FIG. 2A of the security level setting database 4 is searched based on the above, and the authority level, business classification code, privilege code, and judgment condition necessary for unlocking the electric lock 7A are obtained. (Step S2).
[0017]
Here, whether or not a privilege code is set in the first table of FIG. 2A corresponding to the corresponding electric lock 7A is determined based on the acquired data (step S3), and the privilege is set. Acquires the user ID corresponding to the privilege code from the second table shown in FIG. 2B of the security level setting database 4 and matches the acquired user ID with the user ID from the ID information reading device 6A. By comparing, it is determined whether or not the corresponding user is a privileged user (step S4).
[0018]
If the user is a privileged user (“Y” in step S4), the determination result is room entry permission (step S12), and the determination result indicating the room entry permission is transmitted to the ID information reading device 6A. (Step S14). When the ID information reading device 6A receives the determination result indicating permission to enter the room, the ID information reading device 6A outputs an unlock signal to the electric lock 7A disposed on the door of the room # 1, and unlocks the door of the room # 1. In this way, the user is allowed to enter room # 1.
[0019]
On the other hand, if the privilege is not set for the corresponding electric lock 7A (in the case of “N” in step S3), or the privilege is set for the corresponding electric lock 7A, the corresponding user is the privileged user. If not (in the case of “N” in step S4), the authority level and the job classification code of the corresponding user respectively converted and output as a common data format by the personnel data format conversion unit 31 are acquired (step S5).
[0020]
Then, the authority level of the corresponding user is set by comparing the acquired authority level of the user with the authority level of the first table of FIG. 2A set corresponding to the corresponding electric lock 7A. It is determined whether or not the level is satisfied (referred to as determination X) (step S6).
That is, when the authority level of the first table of FIG. 2A set corresponding to the corresponding electric lock 7A is “1”, the authority level of the corresponding user converted and output by the personnel data format conversion unit 31 is If “1”, it is determined that the set authority level is satisfied. Further, when the authority level of the first table in FIG. 2A is “2”, the authority level of the corresponding user converted and output by the personnel data format conversion unit 31 is “1” or “2”. It is determined that the authorized authority level is satisfied.
[0021]
When the authority level of the first table in FIG. 2A is “3”, the authority levels of the corresponding users converted and output by the personnel data format converter 31 are “1”, “2”, “3”, respectively. If it is any of “,” it is determined that the set authority level is satisfied. Further, when the authority level of the first table in FIG. 2A is “not specified”, the authority level of the corresponding user converted and output by the personnel data format conversion unit 31 is set at any level. It is determined that the authorization level is satisfied.
[0022]
The result of determination X obtained in this way is held (step S7). Subsequently, the user's business category code is set by comparing the acquired business category code with the business category code in the first table of FIG. 2A set corresponding to the corresponding electric lock 7A. It is determined whether or not the job classification code is set (referred to as determination Y) (step S8).
That is, when the job classification code in the first table of FIG. 2A set corresponding to the corresponding electric lock 7A is “not specified”, the corresponding user converted and output by the personnel data format conversion unit 31. It is determined that the business category code is a set business category code. Further, when the job classification codes in the first table of FIG. 2A are “1”, “2”, and “3”, respectively, the job classification codes of the corresponding user converted and output by the personnel data format conversion unit 31 are In any of “1”, “2”, and “3”, it is determined that the business category code is set. In other cases, it is determined that the business category code is not set.
[0023]
Further, when the job classification code in the first table of FIG. 2A is “3”, the job classification code of the corresponding user converted and output by the personnel data format conversion unit 31 is set to “3”. It is determined that it is a business category code, otherwise it is determined that it is not a set business category code. Further, when the job classification codes in the first table of FIG. 2A are “1” and “2”, the job classification code of the corresponding user converted and output by the execution of the personnel data format conversion unit 31 is “1”. , “2” is determined to be the set business category code, otherwise it is determined not to be the set business category code.
[0024]
The result of determination Y obtained in this way is held (step S9). Subsequently, the determination X obtained in the previous step as a determination condition for determining whether or not the user of the first table of FIG. 2A set corresponding to the electric lock 7A has the entry qualification. And the result of determination Y are substituted (step S10), and it is determined whether or not this determination condition is satisfied (step S11).
[0025]
That is, when the determination condition for determining whether or not the user of the first table in FIG. 2A set corresponding to the electric lock 7A has the entry qualification is “X”, Referring to only the result, if the authority level of the corresponding user satisfies the authority level set corresponding to the corresponding electric lock 7A, it is determined that the room can be entered, and if not, it is determined that the room cannot be entered.
Further, when the determination condition for determining whether or not the user of the first table of FIG. 2A set corresponding to the electric lock 7A has the entry qualification is “Y”, Referring to only the result, if the business category code of the corresponding user is a business category code set corresponding to the corresponding electric lock 7A, it is determined that the room can be entered, and otherwise, it is determined that the room cannot be entered.
[0026]
Further, when the determination condition for determining whether or not the user of the first table of FIG. 2A set corresponding to the electric lock 7A has the entry qualification is “X · Y”, the determination is made. Referring to the logical product of the result of X and the result of determination Y, the authority level of the corresponding user satisfies the authority level set corresponding to the corresponding electric lock 7A, and the business classification code of the corresponding user is the corresponding electric lock If the job classification code is set corresponding to 7A, it is determined that the room can be entered, and otherwise it is determined that the room cannot be entered.
[0027]
Further, when the determination condition for determining whether or not the user of the first table in FIG. 2A set corresponding to the electric lock 7A has the entry qualification is “X + Y”, the determination X Referring to the logical sum of the result and the result of determination Y, the authority level of the corresponding user satisfies the authority level set corresponding to the corresponding electric lock 7A, or the business classification code of the corresponding user is the corresponding electric lock 7A If it is a business classification code set corresponding to, it is determined that the room can be entered, and otherwise, it is determined that the room cannot be entered. That is, if the determination condition is set so as to refer to a logical sum of a plurality of determination results (room entry qualifications), at least one user (a person who wants to enter the room) is satisfied if at least one of the individual determination results (room qualification) is satisfied. It is determined that you have one entry qualification.
[0028]
When this determination condition is satisfied (in the case of “Y” in step S11), the room entry permission is given (step S12), and the determination result indicating the room entry permission is transmitted to the ID information reading device 6A (step S14). An unlock signal is output to the electric lock 7A of the door # 1, and the door of the chamber # 1 is unlocked. On the other hand, when this determination condition is not satisfied (in the case of “N” in step S11), the room cannot be entered (step S13), and the determination result indicating that the room cannot be entered is transmitted to the ID information reading device 6A (step S14). . In this case, the ID information reading device 6A does not output an unlock signal to the electric lock 7A of the door of the room # 1, and therefore the door of the room # 1 is not unlocked.
[0029]
As described above, when the user enters his / her ID card 5 into the ID information reading device 6 when entering the room, the ID information reading device 6 reads the user ID from the ID card 5, and The electric lock NO. Is transmitted to the security determination server 3, and the security determination server 3 transmits the electric lock NO. The security level setting database 4 is searched based on the above, and the authority level, business classification code, privilege code and judgment condition necessary for unlocking the corresponding electric lock are obtained, and the electric lock is unlocked based on the obtained data. When it is determined whether or not to be unlocked and when it is determined that unlocking is to be performed, the ID information reader 6 outputs an unlocking signal to cause the electric lock 7 to be unlocked. By controlling the ID information reader 6 to unlock / unlock the electric lock 7 based on the determination result by not outputting the unlock signal to the ID information reader 6 and not unlocking the electric lock 7. It is what you do.
[0030]
As a result, even if there is a change in the personnel data of the user who can enter the room (attribute data such as affiliation and post), the card possessed by the user (identification 5) simply by updating the contents of the personnel database 2 There is no need to update the data. Even when data in the security level setting database 4 is changed, it is not necessary to update the data of the user ID 5 only by updating the contents of the security level setting database 4. In addition, when entering a room with a high security level, an identity verification input device for confirming the identity of the user is not required, and an input operation for identity verification is not required.
In addition, without deciding the entrance qualification uniquely for each room, if you decide the entrance qualification from several viewpoints, such as authority level, business division code, or whether there is a privilege, and satisfy one entry qualification among them By being configured to allow entry, this type of entry / exit management system can be flexibly operated.
[0031]
In the flowchart of FIG. 3, whether or not there is a qualification for entering the room is checked in the order of (1) presence / absence of privilege, (2) authority level, and (3) work classification code. May be.
In the present embodiment, the personnel data format conversion unit 31 that executes the personnel data format conversion program and the entry / exit permission determination unit 32 that executes the entry / exit permission determination program are provided in the security determination server 3. The data format conversion unit 31 and the entry / exit permission determination unit 32 may be provided in the personnel data server 1 and the security determination server 3 may be omitted.
In this embodiment, the security level of all rooms is set in the security level setting database 4, but the security level of the corresponding room may be set in each ID information reading device.
[0032]
FIG. 4 is a diagram showing a first format example of the personnel database 2. In the personnel database 2, as shown in FIG. The employee's affiliation, job title, telephone number, and e-mail address are registered. In addition, the security determination server 3 is provided with a mapping table 3A for converting registration data unique to each personnel system registered in the personnel database 2 into a common data format (see FIG. 5). Here, as the first conversion table of the mapping table 3A, a table as shown in FIG. 4B for converting each employee's job title to an authority level in the registration data of the personnel database 2 is provided.
[0033]
In this first conversion table, “Department Manager” in the column of title in the personnel database 2 is registered as the authority level “1” having the highest authority. In addition, “section manager” and “section chief” in the column of position in the personnel database 2 are registered as authority level “2” having the next authority of the highest authority. Further, “member“ 1 ”: member first grade” and “member“ 2 ”: member second grade” in the position column of the personnel database 2 are registered as the authority level “3” having the lowest authority.
[0034]
Further, as the second conversion table of the mapping table 3A, a table as shown in FIG. 4 (c) for converting the affiliation of each employee into the business division code in the registration data of the personnel database 2 is provided.
In the second conversion table, “development department”, “development department 1 section”, and “development department 2 section” in the column of affiliation in the personnel database 2 are registered as the business category code “1”. Further, “sales department”, “sales department 1 section”, and “sales department 2 section” in the affiliation column of the personnel database are registered as the business category code “2”. Further, the “business section” in the column of affiliation in the personnel database 2 is registered as a business category code “3”.
[0035]
As described above, when the user ID is output from the entry / exit permission determination unit 32, the HR data format conversion unit 31 executes the HR data format conversion program and retrieves registration data of the HR database 2 corresponding to the user ID. At the same time, the authority level corresponding to “Position” and the business classification code corresponding to “Affiliation” in the extracted registration data are acquired from the first and second conversion tables of the mapping table 3A, respectively, and the entry / exit permission determination unit 32 is obtained. To the user side as the authority level and job classification code of the corresponding user.
[0036]
FIG. 5 is a flowchart showing the operation of the personnel data format conversion unit 31 that executes the personnel data format conversion program. The operation of the personnel data format conversion unit 31 will be described based on the flowchart of FIG. 5 and the format example of FIG.
The ID of the identification card 5 inserted into the ID information reader 6 at the time of entering the room is read by the ID information reader 6 and arranged from the ID information reader 6 to the user ID and the door of the room to be entered. No. of electric lock 7 Is output to the security determination server 3, the entry / exit permission determination unit 32 of the security determination server 3 starts executing the entry / exit permission determination program shown in the flowchart of FIG. 3 as described above. Then, by executing this entry / exit permission determination program, it is determined whether or not a privilege is set corresponding to the corresponding electric lock, or whether or not the corresponding user is a privileged user.
[0037]
Here, when the privilege is not set corresponding to the corresponding electric lock, or when the corresponding user is not the privileged user, the user ID is sent to the format conversion unit 31 by personnel. Then, the personnel data format conversion unit 31 starts executing the personnel data format conversion program (step S21), and searches the personnel database 2 based on the user ID notified from the entrance / exit permission determination unit 32 side. The personal data of the user is acquired (step S22). That is, the user ID is sent to the personnel database 2, and the affiliation (development department 1 section or sales department) corresponding to the user ID (that is, employee No.) from the personnel database 2 having the format shown in FIG. 1 section etc.) and their titles (department manager, section manager, manager, staff etc.).
[0038]
When the affiliation and position of the corresponding user are acquired from the personnel database 2, the position of the corresponding user is converted into the corresponding authority level based on the first conversion table shown in FIG. 4B of the mapping table 3A, and the diagram of the mapping table 3A. Based on the second conversion table shown in 4 (c), the affiliation of the corresponding user is converted into a corresponding job classification code (step S23). Then, the authority level and the work classification code of the corresponding user as the conversion result are transmitted to the entrance / exit permission determination unit 32 side (step S24).
[0039]
Then, the entry / exit permission determination unit 32 executes the entry / exit permission determination program again to acquire the authority level and business classification code of the corresponding user as described above, and corresponds to the acquired authority level of the user and the corresponding electric lock. 2 is compared with the authority level of the first table shown in FIG. 2A to determine whether or not the authority level of the corresponding user is the set authority level, and the business classification of the acquired user Whether the business classification code of the corresponding user is set by comparing the code with the business classification code in the first table of FIG. 2A set corresponding to the corresponding electric lock Determine whether.
[0040]
As described above, the HR data format conversion unit is provided with the mapping table 3A including the first and second conversion tables for converting the registration data specific to each HR system registered in the HR database 2 into a common data format. 31 executes the personnel data format conversion program to convert the job title of the corresponding user among the registration data in the personnel database 2 to the authority level using the first conversion table, and among the registration data in the personnel database 2, The affiliation of the corresponding user is converted into a business category code using the second conversion table, and whether the user can enter the room is determined according to these authority level and business category code. As a result, from among the various personnel systems of each company, it is possible to determine whether employees can enter the room by extracting items common to each company, such as the “position” and “affiliation” of the employee. It can also be applied to.
[0041]
FIG. 6A is a diagram showing a second format example of the personnel database 2. In the second format example of FIG. 6A, the employee No. 1 shown in the first format example of FIG. In addition to the employee's affiliation, title, telephone number, and e-mail address, the employee's security level is registered. Here, when the employee's title is a general manager, the highest security level Lv “1” is registered, and when the employee's title is a section manager, the next security level Lv “2” is registered. When the employee's position is the chief, the security level Lv “3” of the next level of the section manager is registered. Furthermore, when the employee's title is member “1” and member “2”, Lv “4” and Lv “5” are registered as security levels, respectively.
[0042]
Here, the mapping table 3A of the security judgment server 3 is provided with a third conversion table shown in FIG. 6B for converting the security level of each employee to the authority level in the registration data of the personnel database 2. ing. In the third conversion table, the security level Lv “1” of the personnel database 2 is registered as the authority level “1”. Also, the security level Lv “2” of the personnel database 2 is registered as the authority level “2”. Furthermore, the security levels Lv “3”, Lv “4”, Lv “5”, and Lv ““ 6 ”of the personnel database 2 are respectively set to the authority level“ 3 ”, the authority level“ 4 ”, the authority level“ 5 ”, and the authority. Register as level “6”.
[0043]
In this case, the security determination server 3 extracts the security level corresponding to the corresponding user ID (employee No.) in the personnel database 2, converts the extracted security level to the authority level using the third conversion table, Whether or not the user can enter the room is determined according to the converted authority level.
That is, when the authority level of the first table in FIG. 2A set corresponding to the corresponding electric lock is “1”, the corresponding user converted and output by the third conversion table in FIG. 6B. If the authority level is “1”, it is determined that the set authority level is satisfied. Also, when the authority level of the first table in FIG. 2A is “2”, the authority level of the corresponding user converted and output by the third conversion table is either “1” or “2”. It is determined that the set authority level is satisfied.
[0044]
Further, when the authority level of the first table in FIG. 2A is “3”, the authority levels of the corresponding user converted and output by the third conversion table are “1”, “2”, and “3”. If it is either, it is determined that the set authority level is satisfied. When the authority level of the first table in FIG. 2A is “4”, the authority level of the corresponding user converted and output by the third conversion table is “1”, “2”, “3”, If it is any of “4”, it is determined that the set authority level is satisfied. Further, when the authority level of the first table in FIG. 2A is “5”, the authority levels of the corresponding user converted and output by the third conversion table are “1”, “2”, “3”, If it is either “4” or “5”, it is determined that the set authority level is satisfied.
[0045]
As described above, when the security level corresponding to the position of each employee is registered in the personnel database 2 and the entry / exit to / from the room is managed based on the security level, the security level is set to the authority level using the third conversion table. Conversion is performed, and whether the user can enter the room is determined according to the converted authority level.
[0046]
The above description is an example of a database in a company organization. Next, an example of a database in a school organization will be described with reference to FIG.
FIG. 7A is a diagram illustrating a format example of a student database. In this student database, the student ID no. Corresponding to (student ID number), the affiliation (department) and grade of the student are registered. That is, for example, the student's student ID NO. Corresponding to “A0001”, “Machine” is registered as the department to which the student belongs, and the grade “1 year” of the student is registered.
[0047]
Here, the mapping table 3A of the security judgment server 3 is provided with a fourth conversion table shown in FIG. 7B for converting the department belonging to the student database shown in FIG. . In the fourth conversion table, the department “Machine” to which the student database belongs is registered as the work classification code “1”. In addition, the department “Electricity” to which the student database belongs is registered as a work classification code “2”. Also, the department “Information” to which the student database belongs is registered as a work classification code “3”. Furthermore, the departments “Architecture”, “Civil Engineering”, and “Physics” in the student database are registered as business classification codes “4”, “5”, and “6”, respectively.
[0048]
In this case, the security determination server 3 extracts “affiliation” corresponding to the ID of the corresponding student (that is, student ID No.) in the student database, and uses the extracted “affiliation” as a business classification code using the fourth conversion table. Conversion is performed, and whether or not the student can enter the room is determined according to the converted business classification code.
That is, when the business classification code of the first table of FIG. 2A set corresponding to the corresponding electric lock is “1”, the corresponding conversion output by the fourth conversion table of FIG. 7B. If the student's work classification code is “1”, it is determined that the room can be entered, and otherwise it is determined that the room cannot be entered. In addition, when the job classification code of the first table in FIG. 2A is “2”, if the job classification code of the student converted and output by the fourth conversion table is “2”, it is determined that the room can be entered. Otherwise, it is determined that the room cannot be entered.
[0049]
Furthermore, when the work classification codes in the first table of FIG. 2A are “3”, “4”, “5”, and “6”, respectively, the work of the corresponding student converted and output by the fourth conversion table. If the classification code is “3”, “4”, “5”, “6”, respectively, it is determined that the room can be entered, and otherwise, it is determined that the room cannot be entered.
In this way, when managing entry / exit to / from a room by a student's department in the student database, the department is converted into a business classification code using the fourth conversion table, and according to the converted business classification code. To determine whether students can enter the room. As a result, for example, it is possible to disable entry of electrical students into a mechanical department, and it is also possible to prohibit entry of mechanical students into an electrical department.
[0050]
【The invention's effect】
As described above, according to the present invention, the identification information reading means for reading the identification information of the card of the person who wants to enter the room is provided for each room, and the database for storing the data of the person who wants to enter the room and the read identification information are provided. A data extracting means for searching the database and extracting data of the person who wants to enter the room, and a storage means for storing the entry qualification for each room, and storing the entry qualification of the room corresponding to the identification information reading means Is extracted based on the extracted entry qualification and the data extracted by the data extraction means, and the entry possibility level of the person who wants to enter the room is determined, and the determined entry entry level is compared with the entry qualification extracted from the storage means. Therefore, it is determined whether or not the person who wants to enter the room has the entry qualification, and the door of the corresponding room is unlocked when it is judged that the person who wants to enter the room has the entry qualification Therefore, even if there is a change in the attribute data of the user, it is not necessary to update the data of the card possessed by the user just by updating the data in the database, and the data in the storage means even if the entry qualification changes It is not necessary to update the user's card data simply by updating the card. Further, when entering a room with a high security level, an input device for verifying the identity for separately identifying the user is not required, and an input operation for verifying the identity is not required.
[0051]
The present invention also includes a storage means in which a plurality of room entry qualifications are stored for each room, and a room entry qualification extraction means for extracting a plurality of room entry qualifications of the room corresponding to the identification information reading means from the storage means. Based on the plurality of entrance qualifications extracted by the extraction means and the data extracted by the data extraction means, the entrance level corresponding to the entrance qualifications of the person who wants to enter the room is determined, respectively, and the determined plurality of entrance entrance levels and entry When comparing with a plurality of entrance qualifications extracted by the qualification extraction means, determining whether or not the entry applicant has at least one entry qualification, and determining that the entry applicant has at least one entry qualification Since the doors of the corresponding rooms are unlocked, the qualifications for entering each room are not decided uniquely, for example, authority level, business division, or privileged status. In Kano viewpoint decide entry qualification will be entry satisfies one entry qualification therein is permitted, as a result, permits flexible operation of the system.
[Brief description of the drawings]
FIG. 1 is a block diagram showing a configuration of an entry / exit management system according to the present invention.
FIG. 2 is a diagram showing a setting state of a security level setting database constituting the system.
FIG. 3 is a flowchart showing an entry / exit permission judgment operation in a security judgment server constituting the system.
FIG. 4 is a diagram (FIG. 4 (a)) showing a registration status of data in a personnel database constituting the above system and a diagram (FIG. 4 (b), FIG. 4 (c)) showing a data conversion status of a mapping table. is there.
FIG. 5 is a flowchart showing a personnel data format conversion operation in the security determination server.
6 is a diagram showing another configuration of the personnel database (FIG. 6A) and a diagram showing the data conversion status of the mapping table (FIG. 6B).
7 is a diagram (FIG. 7A) showing a data registration status of a database when the present invention is applied to a school organization and a diagram showing a data conversion status of a mapping table (FIG. 7B).
[Explanation of symbols]
DESCRIPTION OF SYMBOLS 1 ... Personnel data server, 2 ... Personnel database, 3 ... Security judgment server, 3A ... Mapping table, 4 ... Security level setting database, 5 ... Identification card, 6A, 6B ... ID information reader, 7A, 7B ... Electric lock, 31 ... HR data format conversion unit, 32 ... entry / exit permission determination unit, # 1, # 2 ... room.

Claims (2)

In the entrance / exit management system in which entrance qualification is set for each room, and only those who are qualified to enter the room are allowed to enter the room,
Identification information reading means provided for each room for reading identification information for identifying a person who wants to enter the room;
A database for storing the authority level or business classification code relative to the data of the applicant for entry;
Data extraction means for searching the database based on the identification information read by the identification information reading means and extracting the authority level or work classification code of the person who wants to enter the room;
A storage means for storing the authority level indicating the entry qualification and the work classification code for each room;
An entry qualification extraction means for extracting the entry qualification of the room corresponding to the identification information reading means from the storage means ;
Comparing at least one of the authority level or business classification code of the person who wants to enter the room extracted by the data extraction means and at least one of the authority level or business classification code of the room extracted by the entry qualification extraction means And entrance permission determination means for determining whether or not the person who wishes to enter the room has eligibility to enter,
An entry / exit management system, comprising: a lock control unit that unlocks a door of a corresponding room when the entry permission determination unit determines that the person who wants to enter the room has the entry qualification. An entrance / exit management method in which entrance qualification is set for each room, and only those qualified to enter the room are allowed to enter the room,
A step of reading identification information that is provided for each room and identifies a person who wants to enter the room;
Based on the identification information read in the step, a database storing an authority level or a job classification code relative to the data of the person who wants to enter the room is searched to extract the authority level or the job classification code of the person who wants to enter the room. Steps ,
Extracting the entry qualification of the corresponding room from the storage means in which the authority level or business classification code indicating the entry qualification is stored for each room ;
Privilege levels or business code before filling chamber seekers extracted by the extraction step, is compared with the privilege level or business line code is entry qualification of the chamber, entering-room person who wants at least one entry qualification determining whether or not having,
An entry / exit management method comprising: a step of unlocking a door of a corresponding room when it is determined in the determination step that the person who wishes to enter the room has at least one entry qualification.

Images