JP4454548B2 - Card usage system and its failure avoidance method - Google Patents

Description

The present invention related to a card utilization system and failure avoidance method, in particular to and out monitoring system and fault avoidance method using a card which performs security management of the building.

  In recent years, with the spread of IC cards, a control device connected to a center server via a network and arranged for each service area reads and writes various information to and from the IC card and inputs and outputs various information. Many card utilization systems have emerged that control various input / output interfaces and provide various services to IC card holders through cooperative operations with a center server.

  For example, as described in Japanese Patent Application Laid-Open No. 2003-150995 “Automatic management system and automatic management method” disclosed in Patent Document 1, a host computer (center server) arranged in a center and a control device installed in each service area A card use system has been proposed in which building security management, vending machines, elevator usage management, and the like are performed using an IC card carried by a user.

  Such a card utilization system generally employs a failure avoidance method that allows service operation to continue even when a hardware failure occurs.

  However, the conventional failure avoidance methods have the following problems. When communication between the center server and the control device becomes impossible, the center server side determines that a failure or disconnection on the communication path via the network with the control device has occurred, and On the other hand, the control device is configured to perform processing for continuing the service in a stand-alone operation by the control device itself without performing communication with the center server.

  However, in the stand-alone operation by the control device itself, the center server side that manages the overall service of the card usage system cannot grasp the status of the control device, and not only cannot be managed, but also cannot check the operation. The larger the card usage system, the more likely it became an operational problem.

  Another factor that makes communication between the center server and the control device impossible is a hardware failure on the center server side or the control device side. When the center server is out of order, only in such a case, if the above-described control device can be operated in a stand-alone manner, the minimum operation can be continued. Furthermore, the center server, which is essential for the continuous operation of the entire service, is generally configured with various reliability measures including a redundant configuration, and is immediately replaced when the center server fails. A policy is adopted that enables switching to a device and continuing operation.

  On the other hand, when a control device arranged for each service area fails, the card reader / writer and input / output interface connected under the control device cannot be controlled. The card utilization system had to be stopped in the service area where the control device is located.

JP 2003-150995 A (page 5-6, FIG. 3)

  As described above, in the conventional card utilization system that performs various services using an IC card, although various countermeasures are taken for the center server that supervises the service, the control device arranged for each service area If a failure occurs, the subordinate card reader / writer and input / output interface connected to the control device become unusable, and the system operation stops in the service area of the control device. There was a drawback of end.

Therefore, an object of the present invention is to provide a card utilization system and a failure avoidance method thereof . That is, a card reader / writer that reads / writes information on an IC card and reads / writes information on various input / output devices such as an electric lock used to lock a door of a building in the case of a building access control system (flapper gate), for example. On the other hand, the communication path A that communicates directly with the host control device arranged for each service area, and the communication that performs the bypass communication with the center server or another control device prepared in advance as a backup detour connection By providing at least two or more communication paths with the path B and enabling switching to any one of the selected communication paths, for example, during normal operation by the communication path A, Provides services using the higher-level control device to IC card holders, while switching to communication path B, which is a detour when the higher-level control device fails By, using a center server or other control device, it is to be able to continue to provide service.

Furthermore, the present invention can be applied to control of a card reader / writer under the control of a control device arranged for each service area, or another control device arranged in another service area, or By making it possible to use the center server, even if a higher-level control device breaks down, it is possible to control the card reader / writer under its control, and even in this service area, without stopping the card usage system, It is an object of the present invention to provide a card utilization system and its failure avoidance method that enable a quick response.

In order to solve the above-described problems, the card utilization system and the failure avoidance method according to the present invention employ the following characteristic configuration.

(1) A center server connected via a LAN and a plurality of control devices arranged for each service area to control subordinate card reader / writers, and information on IC cards carried by the user by the card reader / writers. In a card usage system that provides services to users by reading and writing,
Each of the card reader / writers is connected to the LAN and connected to the host control device via a connection interface different from the LAN.
The power supplied from the power supply device to the host control device is received at the DC terminal of the host control device via the DC terminal of the host control device,
Each of the card reader / writers is controlled by the host control device via the separate connection interface when the host control device operates normally, and other service areas via the LAN when the host control device fails. A card utilization system controlled by any one of the control device and the center server.
(2) In each control device, backup master data for the subordinate card reader / writer and verification master data for the card reader / writer subordinate to another control device when the control device fails are backed up and stored. The card utilization system according to (1) above.
(3) The card utilization system according to (1) or (2), wherein the card reader / writer is an access control system in which an electric lock that is electrically locked and unlocked is connected.
(4) A center server connected via a LAN and a plurality of control devices that are arranged for each service area and control subordinate card reader / writers, and each control device and the subordinate card reader / writers are connected with each other. The master data for verification related to the subordinate card reader / writer is other than the upper control device in case the upper control device related to the subordinate card reader / writer is broken, connected by a connection interface different from the LAN. In the failure avoiding method of the card use system for avoiding trouble at the time of failure of the control device in the card use system that is backed up and stored in the control server and the center server,
Disconnection monitoring step in which the subordinate card reader / writer performs disconnection monitoring of whether or not the connection by the another connection interface between the control device and the subordinate card reader / writer is established,
When the connection by the other connection interface is not established, the subordinate card reader / writer determines that the upper control device is out of order, and between the upper control device and the subordinate card reader / writer. A communication disconnection step for disconnecting communication;
The connection destination of the subordinate card reader / writer that has determined the failure of the higher-level control device is replaced with the control device and the center in another service area via the LAN instead of the higher-level control device determined to be the failure. A failure avoidance method for a card using system, including a switching connection step for switching to any of the servers.
(5) In the disconnection monitoring step, the subordinate card reader / writer transmits a connection monitoring request command from the subordinate card reader / writer to the upper control device at regular intervals based on a timer, and the connection monitoring The disconnection monitoring is performed based on whether or not there is a connection monitoring response command from the host controller for the request command, and there is no connection monitoring response command for a plurality of connection monitoring request commands determined in succession in succession. (4) The failure avoidance method for the card utilization system according to (4), wherein the higher-level control device is determined to be failed.

According to the card utilization system and the failure avoidance method of the present invention, the following effects can be obtained.

  When a higher-level control device that controls a card reader / writer that reads and writes information such as an IC card carried by the user fails, the connection of the card reader / writer is connected from the failed higher-level control device. By switching to a detour to another control device or center server arranged in another service area, it is possible to promptly respond to a failure without stopping the operation of the card usage system in the service area. It becomes possible.

  The conventional card reader / writer has only one connection interface, and is connected using a general-purpose interface of only one port of any kind among USB, RS232C, IEEE802.3 Ethernet (registered trademark) LAN, and the like. However, in the present invention, by providing at least two or more connection interfaces, it is possible to cope with various card utilization systems that require service continuity.

  In addition, since the card reader / writer is equipped with a self-determination function for monitoring the inability to communicate with the host controller, that is, disconnection monitoring, a backup of the host controller is detected when a failure of the host controller is detected. By immediately connecting to another control device or center server, the card can be used continuously without interruption of service.

  For verification with respect to the card reader / writer managed by the control device for verification with the master data for personal identification recorded on the IC card when a certain control device breaks down to another control device or the center server Master data is backed up and saved in advance on another control device or center server, so when the control device recovers, the master for verification of the own control device backed up by the other control device or center server Data can be transferred and restored.

Preferred embodiments of a card utilization system and its failure avoidance method according to the present invention will be described below with reference to the accompanying drawings.

(Configuration of Example)
As a preferred embodiment of the system of the card utilization system according to the present invention will be described access control system for managing and out of the building. FIG. 1 is a block diagram showing the configuration of this access control system .
1 includes a center server 1, a power supply device 2, control devices 3 and 4, card reader / writers 5 and 6, electric locks 7 and 8, hub 9, LAN 10, RS232C cables 11 and 12, and an IC card. 13 at least.

  The center server 1 is composed of a personal computer or the like, and controls the control devices 3 and 4 arranged for each service area by transmitting and receiving information via the LAN 10 compliant with IEEE 802.3 Ethernet (registered trademark). This system manages and controls the entire entrance / exit management system. The state of the card reader / writers 5 and 6 and the electric locks 7 and 8 directly connected to the control devices 3 and 4 by the RS232C cables 11 and 12 is browsed and unified. Management can be performed. However, the center server 1 may not be installed in the case where the control devices 3 and 4 are operated in a stand-alone manner as a mode in which the control system is distributedly managed by each control device.

  The power supply device 2 supplies power to a plurality of control devices 3 and 4 and card reader / writers 5 and 6 connected to the control devices 3 and 4 constituting the access control system. .

  The control devices 3 and 4 arranged for each service area are composed of personal computers and dedicated hardware, and are operated via the RS232C cables 11 and 12 in cooperation with the center server 1 in order to perform services of the access control system. The electronic lock connected to the card reader / writers 5 and 6 is controlled while controlling the operation of the subordinate card reader / writers 5 and 6 connected thereto to read information from the IC card 13 and write information to the IC card 13. Unlock and lock 7 and 8.

  The control devices 3 and 4 provide services of the access control system to the holder of the IC card 13 and are used for personal identification of the IC card 13 read by the card reader / writers 5 and 6 under their control. In order to perform a collation operation with the master data, collation master data relating to the respective card reader / writers 5 and 6 is stored.

  Further, as will be described later, for example, when the control device 3 fails, data that is prepared in advance as a detour connection and is used for verification related to the card reader / writer 5 under the control of the failure control device 3 by detouring to another control device 4. Master data for collation (name, name ID permitting entry / exit) for the card reader / writer 5 that can be collated with master data for personal identification of the IC card 13 (data for personal identification such as name, name ID, and affiliation). , Affiliation data, etc.) are backed up and stored in another control device 4. Further, the control devices 3 and 4 generate information essential to the access management system such as the names and times of entrance / exit of persons who have entered and exited the building based on information transmitted / received to / from the card reader / writers 5 and 6. Transmission / reception is performed with the center server 1 via the LAN 10 and the hub 9.

  The card reader / writers 5 and 6 operate in accordance with instructions from the control devices 3 and 4 as the respective higher-level devices, read information from the IC card 13, and send the information to the control devices 3 and 4 via the RS232C cable 11, 12, the information received from the control devices 3 and 4 via the RS232C cables 11 and 12 is written into the IC card 13. Furthermore, the electric locks 7 and 8 connected to the card reader / writers 5 and 6 are unlocked or locked according to instructions from the control devices 3 and 4.

  Here, the card reader / writers 5 and 6 and the IC card 13 may be either contact type or non-contact type IC cards. The cables connecting the control devices 3 and 4 and the card reader / writers 5 and 6 are not limited to the RS232C cables 11 and 12 as shown in FIG. A wired cable such as a trademark LAN cable may be used, or a wireless signal such as IEEE802.11b / a / g or Bluetooth may be used for connection.

  The electric locks 7 and 8 are for building security management, and are used to lock or unlock a key such as a building door by the operation of the card reader / writers 5 and 6. The door of the building cannot be opened unless it is unlocked by control.

  The hub 9 is a device for relaying information between the center server 1, the control devices 3 and 4, and the card reader / writers 5 and 6 via the LAN 10 compliant with IEEE802.3.

  Next, an example of the internal configuration of the control devices 3 and 4 and the card reader / writers 5 and 6 constituting the access management system 100 of FIG. 1 will be described with reference to FIG. Here, FIG. 2 is a block diagram showing an example of the internal configuration of the control devices 3 and 4 and the card reader / writers 5 and 6 constituting the access control system 100 of FIG. The control device 4, the card reader / writer 5, and the card reader / writer 6 have exactly the same configuration, and FIG. 2 shows an example of the internal configuration using the control device 3 and the card reader / writer 5.

  In FIG. 2, the control device 3 includes at least a LAN terminal 3a, a LAN controller 3b, a control unit 3c, an RS232C conversion circuit 3d, an RS232C terminal 3e, a DC terminal 3f, a storage unit 3g, and a backup battery 3h. The card reader / writer 5 includes at least a LAN terminal 5a, a LAN controller 5b, a control unit 5c, an RS232C conversion circuit 5d, an RS232C terminal 5e, a DC terminal 5f, a reader / writer unit 5g, and an electric lock I / F (Interface) unit 5h. I have.

  The control unit 3c of the control device 3 drives the LAN controller 3b to transmit / receive information to / from the center server 1 shown in FIG. 1 or another control device 4 via the LAN 10 via the LAN terminal 3a. Is going. Further, the control unit 3c of the control device 3 drives the RS232C conversion circuit 3d, whereby the RS232C terminal 3e is connected to the card reader / writer 5 connected to the subordinate via the RS232C cable 11 as the communication path A. Information is sent and received via

  Here, the control unit 3c is information to be transmitted / received to / from the center server 1 and other control devices 4, information for controlling the operation of each internal part, and a verification master for the card reader / writer 5 under the control. Data (name, name ID, affiliation, etc. permitting entry / exit) is stored in the storage unit 3g and read / written. In addition, in preparation for the failure of the other control device 4, the master data for verification related to the card reader / writer 6 under the control of the other control device 4 is also backed up and stored in the storage unit 3g. When a failure occurs, the control device 3 not only controls the subordinate card reader / writer 5 via the RS232C cable 11, but also uses a card reader subordinate to another control device 4 as a communication path B prepared in advance as a bypass. The writer 6 can also perform detour control via the LAN 10.

  Further, the DC power supplied from the power supply device 2 in FIG. 1 is received at the DC terminal 3f, supplied to each circuit unit, and also relayed to the card reader / writer 5 and other input / output interface devices connected under the control. is doing. A backup battery 3h is also incorporated in preparation for the occurrence of a failure that makes it impossible to supply power from the power supply device 2.

  On the other hand, in the card reader / writer 5, the control unit 5 c normally drives the RS232C conversion circuit 3 d as the communication path A, and thereby communicates with the control device 3 positioned at the higher level via the RS232C cable 11. Information is transmitted and received via the RS232C terminal 5e. Furthermore, the controller 5c drives the LAN controller 5b as the communication path B prepared in advance as a detour in preparation for the occurrence of a failure in which information cannot be transmitted / received to / from the host control device 3. Thus, it is also possible to transmit / receive information to / from the center server 1 shown in FIG. 1 or another control device 4 via the LAN 10 via the LAN terminal 5a.

  Further, the control unit 5c drives the reader / writer unit 5g to connect the IC card 13 connected to the reader / writer unit 5g by a radio signal or the IC card 13 attached to the reader / writer unit 5g and connected to the card by wire. Information is sent and received between them. Furthermore, the control part 5c can also perform the operation | movement which transmits the information regarding locking and unlocking to the electric lock 7 shown in FIG. 1 by driving the electric lock I / F part 5h. Further, the DC power supplied from the power supply device 2 in FIG. 1 is received by the DC terminal 5f via the DC terminal 3f of the host control device 3 and supplied to each circuit unit.

  In the embodiment shown in FIG. 1 and FIG. 2, the card reader / writers 5 and 6 normally have RS232C cables 11 and 12 that communicate with their respective higher control devices 3 and 4 as the communication path A. As the communication path B in which each of the higher-level control devices 3 and 4 serves as a detour when a failure occurs, other control devices (for example, the control devices 4 and 3 instead of the higher-level control devices 3 and 4) or the center server A case where two connection interfaces with the LAN 10 that communicates with 1 are provided is described.

  However, the present invention is not limited to such a case, and the card reader / writers 5 and 6 can provide communication paths between at least two or more different control devices or center servers. It suffices to provide an arbitrary number of connection interfaces so that they can be switched and connected. Further, the plurality of connection interfaces provided in the card reader / writers 5 and 6 are not limited to different types of connection interfaces such as the RS232C cables 11 and 12 and the LAN 10 shown in FIGS. It may be either a wired connection or a wireless connection.

  Further, the card reader / writers 5 and 6 are not limited to those capable of reading and writing information with the IC card 13, but may be provided with only a card reader function for reading information from the IC card 13. Alternatively, the unlocking / locking operation of the electric locks 7, 8 may be realized by another input / output device different from the card reader / writers 5, 6.

  Next, the schematic operation of the control device 3 and the card reader / writer 5 having such an internal configuration shown as an example in FIG. 2 will be further described with reference to FIG. When the IC card 13 carried by the user is detected by the card reader / writer 5, the card reader / writer 5 reads the master data (for example, name, name ID, affiliation, etc.) Data that can identify a person) is read, and the read master data is transferred to the connected higher level control device 3 via the RS232C cable 11.

  The control device 3 to which the master data has been transferred from the card reader / writer 5 collates with the collation master data stored in the storage unit 3g shown in FIG. 2, and based on the collation result, An instruction for locking / unlocking is transmitted to the card reader / writer 5 via the RS232C cable 11. The card reader / writer 5 that has received the instruction to lock / unlock the electric lock drives the electric lock I / F unit 5 h shown in FIG. 2 to control the designated electric lock 7. In this way, the host control device 3 manages and controls the state of the card reader / writer 5 and the electric lock 7 connected to the subordinate.

  In addition, a control device positioned above the card reader / writer 5 by enabling direct connection from the card reader / writer 5 to the center server 1 and other control devices 4 via the hub 9 and the LAN 10 as a detour. Even if 3 is out of order, the center server 1 and other control devices 4 can manage and control the card reader / writer 5 and the electric lock 7 under the control device 3 that has failed. Note that the center server 1 and other control devices 4 are such that the master data for verification related to the card reader / writer 5 to be managed when the control device 3 is bypassed so that the control device 3 can be operated as a backup. Is also backed up and saved in advance.

When the control device 3 fails, the subordinate card reader / writer 5 disconnects the connection with the host control device 3 and connects to the center server 1 or other control device 4 prepared in advance as a detour. The center server 1 or other control device 4 that has received the master data of the IC card 13 from the card reader / writer 5 collates with the master data for verification related to the card reader / writer 5 that is stored in advance as backup data. on behalf of the controller 3 in the failure, performing a service for the user who carries the IC card 13.

  Further, when the malfunctioning control device 3 is restored, the verification master data related to the card reader / writer 5 is transferred to the control device 3 from the center server 1 or other control device 4 previously stored as backup data. By recovering the connection and switching back to the connection between the control device 3 and the card reader / writer 5, a quick recovery process from the failure is realized.

(Operation of the embodiment)
Next, the operation of the access control system 100 shown as an embodiment in FIG. 1 will be described in detail with reference to the flowcharts of FIGS. FIG. 3 is a flowchart showing an example of communication when the control device 3 and the card reader / writer 5 of the access management system 100 of FIG. 1 are turned on. Here, the power of the control device 3 and the card reader / writer 5 under the control device 3 is simultaneously supplied from the power supply device 2 in the same system as described with reference to FIGS.

  First, in FIG. 3, when power is turned on to start using the control device 3 and the card reader / writer 5, the control device 3 and the card reader / writer 5 are activated, and the control device 3 starts the card reader / writer. A connection start command is transmitted to 5 (step S10). When the card reader / writer 5 receives the connection start command (Yes in step S11), the card reader / writer 5 transmits a connection completion command to the host control device 3 that is the transmission source of the connection start command (step S11). S12). As a result, RS232C communication is established between the control device 3 and the card reader / writer 5 via the RS232C cable 11, and the card reader / writer 5 operates as the communication path A on the connection interface of the RS232C, and transmits and receives information between them. Is possible (step S13).

  If the card reader / writer 5 cannot receive the connection start command from the control device 3 (No in step S11), the process returns to step S10, and the control device 3 transmits the connection start command until communication is established. to continue.

  Next, when the card reader / writer 5 in which the RS232C connection with the control device 3 has been established is in an operating state, disconnection monitoring is performed to determine whether communication with the control device 3 is disabled at regular time intervals. The operation of the disconnection monitoring means to be performed will be described. FIG. 4 is a flowchart showing an example of a disconnection monitoring operation between the control device 3 and the card reader / writer 5 of the access control system 100 of FIG.

  In FIG. 4, when the card reader / writer 5 enters the state of operating in RS232C as the communication path A through the sequence of FIG. 3, the card reader / writer 5 starts a timer for monitoring disconnection with the control device 3. Then, counting of an arbitrary time predetermined as a monitoring timer is started (step S20). When the time of the monitoring timer elapses, a connection monitoring request command is transmitted from the card reader / writer 5 to the control device 3 (step S21). When the control device 3 receives the connection monitoring request command from the card reader / writer 5, the control device 3 transmits a connection monitoring response command to the sending card reader / writer 5 (step S22).

  When the card reader / writer 5 receives the connection monitoring response command from the control device 3 (Yes in step S23), RS232C communication between the control device 3 and the card reader / writer 5 has been established and is normally connected. (Step S24), initialization is performed to turn off all the flags 1, 2, and 3 that are turned on when the connection monitoring request command or connection monitoring response command transmission / reception operation fails (step S25). Returning to S20, the disconnection monitoring operation is repeated at regular intervals determined as the monitoring timer.

  On the other hand, when the card reader / writer 5 cannot receive the connection monitoring response command from the control device 3 (No in step S23), it is checked whether the flag 1 indicating the first failure is ON, and the flag 1 is ON. If not (No in step S26), the flag 1 is turned on (step S27), the process returns to step S20, and again enters a standby state, and the operation of monitoring disconnection is repeated at regular intervals.

  If flag 1 is ON (Yes in step S26), it is checked whether flag 2 indicating the second consecutive failure is ON. If flag 2 is not ON (No in step S28), flag 2 is set. The power is turned on (step S29), the process returns to step S20, and again enters a standby state, and the operation for monitoring disconnection is repeated at regular intervals.

  Furthermore, if flag 2 is ON (Yes in step S28), it is checked whether flag 3 indicating the third consecutive failure is ON. If flag 3 is not ON (No in step S30), flag 3 is set. It is turned on (step S31), the process returns to step S20, and again enters a standby state, and the operation for monitoring disconnection is repeated at regular intervals.

  On the other hand, if the flag 3 is ON, that is, if the connection monitoring response command from the control device 3 cannot be continuously received four times (Yes in step S30), the card reader / writer 5 It is determined that the occurrence of a disconnection in which RS232C communication is impossible, that is, the occurrence of a failure of the control device 3.

  If the card reader / writer 5 determines that the upper control device 3 has failed, the card reader / writer 5 disconnects the RS232C communication with the control device 3 as the communication path A, and then prepares for the communication path in preparation for the failure of the upper control device 3. The operation is switched to a connection operation with the LAN 10 which is a detour route prepared in advance as B, that is, another connection interface. FIG. 5 is a flowchart showing an example of the switching operation to the detour when the disconnection occurs between the control device 3 and the card reader / writer 5 of the access control system 100 of FIG.

  In FIG. 5, the card reader / writer 5 disconnects RS232C communication with the host control device 3, and then a device prepared in advance as a backup detour via the LAN 10 from the card reader / writer 5, for example, another control device. A connection start command is transmitted to 4 (step S40). When receiving the connection start command, the other control device 4 prepared as a backup detour in advance transmits a connection completion command from the control device 4 to the card reader / writer 5 of the transmission source via the LAN 10 ( Step S41).

  When the card reader / writer 5 receives a connection completion command from another control device 4 prepared in advance as a backup detour (Yes in step S42), the other control device 4 and the card reader / writer in the backup detour 5 is established as a communication path B via the LAN 10 (step S43). Thereafter, the host control device 3 that has once disconnected the RS232C connection as a failure is recovered and a connection start command is transmitted from the host control device 3 via the RS232C cable 11 (that is, the steps in FIG. 3). Until the operation of S10 is started), the card reader / writer 5 and the electric lock 7 are controlled from the other control device 4 of the backup detour using the detour by the LAN 10 as the communication path B.

  On the other hand, when the card reader / writer 5 cannot receive the connection completion command from the other control device 4 of the backup detour (No in step S42), the process returns to step S40, and the card reader / writer 5 Continue sending connection start commands until established. In this case, when there are three or more connection interfaces, the connection start command may be transmitted by switching to another connection interface as a backup detour.

(Features of the present invention)
In an access management system that performs input / output control with an IC card using a card reader / writer, for example, a card utilization system such as a flapper gate, the card reader / writer is provided with two or more interfaces such as RS232C and LAN. Thus, when the upper level control device controlling the card reader / writer fails, if communication is performed by switching from the main line that is normally used to the detour to the other control device by the sub line, It is possible to provide a system that enables continuous control of the card reader / writer and the input / output interface connected to the control device in failure.

  The configuration of the preferred embodiment of the present invention has been described above. However, it should be noted that such examples are merely illustrative of the invention and do not limit the invention in any way. Those skilled in the art will readily understand that various modifications and changes can be made according to a specific application without departing from the gist of the present invention.

It is a block diagram which shows the structure of the entrance / exit management system to which the card utilization system of this invention is applied . It is a block diagram which shows an example of the internal structure of the control apparatus and card reader / writer which comprise the entrance / exit management system of FIG. 3 is a flowchart showing an example of communication when the control device of the access control system of FIG. 1 and the card reader / writer are turned on. It is a flowchart which shows an example of the disconnection monitoring operation | movement between the control apparatus of the entrance / exit management system of FIG. 1, and a card reader / writer. 2 is a flowchart illustrating an example of an operation for switching to a detour when a disconnection occurs between the control device and the card reader / writer in the access control system of FIG. 1, that is, when the control device fails.

Explanation of symbols

1 Center server 10 LAN
100 access control system 11, 12 RS232C cable 13 IC card 2 power supply device 3 control device 3a LAN terminal 3b LAN controller 3c control unit 3d RS232C conversion circuit 3e RS232C terminal 3f DC terminal 3g storage unit 3h backup battery 4 control device 5 card reader / writer 5a LAN terminal 5b LAN controller 5c Control unit 5d RS232C conversion circuit 5e RS232C terminal 5f DC terminal 5g Reader / writer unit 5h Electric lock I / F (Interface) unit 6 Card reader / writer 7, 8 Electric lock 9 Hub

Claims (5)

Each is composed of a center server connected via a LAN and a plurality of control devices that are arranged for each service area and control the subordinate card reader / writer. The card reader / writer reads and writes information on the IC card carried by the user. In a card usage system that provides services to users,
Each of the card reader / writers is connected to the higher-level control device through a connection interface different from the LAN, and is connected to the higher-level control device from a power supply device. The received power is relayed to the DC terminal of the host control device and received at its own DC terminal,
Each of the card reader / writers is controlled by the host control device via the separate connection interface when the host control device operates normally, and other service areas via the LAN when the host control device fails. The card use system is controlled by any one of the control device and the center server.   Each of the control devices backs up and stores verification master data related to the subordinate card reader / writer and verification master data related to the card reader / writer subordinate to the other control device when the control device fails. The card utilization system according to claim 1, characterized in that:   3. The card utilization system according to claim 1, wherein the card reader / writer is an access management system in which an electric lock that is electrically locked and unlocked is connected. Each center server is connected to each other via a LAN and a plurality of control devices are arranged for each service area to control subordinate card reader / writers. The LAN is defined between the control devices and the subordinate card reader / writers. The control master data for the subordinate card reader / writer is connected to another control interface, and the control master data for the subordinate card reader / writer is the control other than the upper control device. In the failure avoidance method of the card use system for avoiding trouble at the time of failure of the control device in the card use system stored in the backup device and the center server
Disconnection monitoring step in which the subordinate card reader / writer performs disconnection monitoring of whether or not the connection by the another connection interface between the control device and the subordinate card reader / writer is established,
When the connection by the other connection interface is not established, the subordinate card reader / writer determines that the higher order control device is out of order, and between the higher order control device and the subordinate card reader / writer. A communication disconnection step for disconnecting communication;
The connection destination of the subordinate card reader / writer that has determined the failure of the higher-level control device is replaced with the control device and the center in another service area via the LAN instead of the higher-level control device determined to be the failure. And a switching connection step of switching to any of the servers.   In the disconnection monitoring step, the subordinate card reader / writer transmits a connection monitoring request command to the host controller from the subordinate card reader / writer at regular intervals based on a timer, and sends the connection monitoring request command to the connection monitoring request command. On the other hand, the disconnection monitoring is performed depending on whether or not there is a connection monitoring response command from the host controller, and when there is no connection monitoring response command for a plurality of connection monitoring request commands determined in succession, the host monitoring 5. The failure avoidance method for a card use system according to claim 4, wherein the control device is determined as a failure.

Images