JP4590342B2 - Security system, control method, and server - Google Patents

Description

  The present invention relates to a technique for remotely controlling unlocking or locking of a storage tool via a network.

  Patent Document 1 provides a lock management device that remotely controls an electromagnetic lock installed on a locker door via a communication line, and acquires information on usage conditions such as the usage time of the locker user and the size of the locker. And the technique which can collect the usage fee corresponding to this usage condition is disclosed.

JP 2003-228766 A

  In offices, etc., users usually manage personal lockers, archives, desk wagons, and other keys. Even if important documents or objects are contained, the management is entrusted to the individual. Even when the user leaves the room, the user may be left without being locked.

  Here, even if the technology of Patent Document 1 is applied to personal lockers, archives, desk wagons, etc. in offices, etc., it only manages the usage status and relates to the entrance / exit of users to the offices, etc. These management cannot be performed.

  SUMMARY OF THE INVENTION An object of the present invention is to manage locks of storage tools such as lockers, archives, and desk wagons in offices, etc., in relation to user entry / exit.

  In order to solve the above-described problems, the present invention is based on information on a user entering / exiting a room in which a storage tool and a client terminal are installed, and information identifying the user of the client terminal. It is determined whether the user is present in the room where the client terminal is installed, and remote control of the lock attached to the storage tool installed in the room is performed together with the client terminal.

  For example, the present invention is a security system for controlling an electronic lock attached to a remote control storage tool, and whether or not a user is present in a room where the remote control storage tool and the client terminal are installed. An entry / exit management unit that manages occupancy information, an authentication processing unit that authenticates a user of the client terminal, and a remote control unit that remotely controls the electronic lock, the remote control unit including the When authentication of the user of the client terminal is successful in the authentication processing unit, the user is inquired of the entrance / exit management unit whether the user is in the room, and the user is in the room. When the information indicating that the electronic lock is acquired from the entrance / exit management unit, the electronic lock is unlocked.

  As described above, according to the present invention, since the locking or unlocking of storage devices such as lockers, archives, and desk wagons is controlled based on the user's occupancy status, the user leaves the room. During this time, it is possible to prevent the lock of the storage tool storing important documents and objects from being opened.

  FIG. 1 is a schematic diagram of a security system 100 according to an embodiment of the present invention.

  As shown in the figure, the security system 100 includes a door lock control device 110, a remote control storage device 120, a client terminal 130, an entrance / exit server 140, and an authentication server 150, which are connected via a LAN 160. Has been.

  The door lock control device 110 includes a first card reader 111A, a second card reader 111B, a card reader control unit 112, a door lock control unit 113, and a transmission / reception unit 114.

  The first card reader 111 </ b> A and the second card reader 111 </ b> B are reading units that read information for identifying a user. In the present embodiment, the first card reader 111 </ b> A and the second card reader 111 </ b> B are stored in an ID card (not shown) held by the user. A device that reads a user ID is used. In the present embodiment, since an IC card having an IC (Integrated Circuit) chip and an antenna is used as the ID card, information stored in the IC card can be read wirelessly as these card readers. Is used.

  In the present embodiment, the first card reader 111A is arranged outdoors, and the second card reader 111B is arranged indoors, so that the user can store the ID card information in the first card reader 111A when entering the room. When the user leaves the room, the second card reader 111B reads the information on the ID card.

  The user ID may be identification information that can uniquely identify a user who uses the security system 100.

  The card reader control unit 112 controls processing of the first card reader 111A or the second card reader 111B, generates room entry information by attaching a room ID to the user ID read by these, and will be described later. It transmits to the entrance / exit server 140 mentioned later via the transmission / reception part 114. FIG.

  Here, the room ID is identification information for uniquely identifying a room whose entry / exit is managed by the first card reader 111A and the second card reader 111B.

  The door lock control unit 113 unlocks an electronic lock (hereinafter referred to as a door lock) attached to the door in response to a command from the entry / exit server 140 described later.

  Specifically, when an unlock command is received from the entry / exit server 140, the door lock is unlocked, and when an authentication error is received, the door lock is not unlocked.

  The door lock control unit 113 can detect opening / closing of the door by receiving a signal obtained from a sensor such as a pressure sensor (not shown) or an optical sensor (not shown). If the door is closed again after being opened, the door is locked.

  The transmission / reception unit 114 transmits / receives information via the LAN 160.

  The door lock control device 110 configured as described above includes, for example, a CPU (Central Processing Unit) 201, a main memory 202, an auxiliary storage device 203, and a NIC (Network Interface Card) as shown in FIG. It can be realized by a computer 200 that includes a 204, an I / O controller 205, and a bus 206 that connects them.

  That is, the card reader control unit 112 can be realized by reading a predetermined program stored in the auxiliary storage device 203 such as a hard disk into the main memory 202 and executing it by the CPU 201. This can be realized by reading a predetermined program stored in the auxiliary storage device 203 such as a hard disk into the main memory 202 and executing it by the CPU 201 and converting the signal generated by the I / O controller 205 into a signal for an electronic lock. Further, the transmission / reception unit 114 can be realized by the NIC 204.

  The remote control storage tool 120 includes an electronic lock 121, an electronic lock control unit 122, and a transmission / reception unit 123. The remote control storage tool 120 can store an object (for example, a document or the like) in its internal space. The electronic lock 121 can be locked so that the internal space cannot be accessed.

  The electronic lock control unit 122 controls opening and closing of the electronic lock 121 according to a command from the authentication server 150 described later.

  The transmission / reception unit 123 transmits / receives information via the LAN 160.

  Note that the remote control storage tool 120 configured as described above can be realized by controlling the electronic lock 121 attached to the storage tool having a storage space, for example, by a computer 200 as shown in FIG. In other words, the electronic lock control unit 122 reads a predetermined program stored in the auxiliary storage device 203 such as a hard disk into the main memory 202 and executes it by the CPU 201 to generate a signal generated by the I / O controller 205 using the electronic lock 121. The transmission / reception unit 123 can be realized by the NIC 204.

  The client terminal 130 includes a login control unit 131, a transmission / reception unit 132, an input unit 133, and a display unit 134.

  The login control unit 131 performs login processing for a user who uses the client terminal 130.

  Specifically, first, an input of a user name and a personal identification number is received from a user via an input unit 133 and a display unit 134 to be described later, and these pieces of information are uniquely assigned to each client terminal 130 connected to the LAN 160. It transmits to the authentication server 150 mentioned later as login information with defined PCID. When the login authentication success response is received from the authentication server 150, the user can use the client terminal 130, and when the login authentication failure response is received, the user name and password are again given to the user. Require input.

  Here, in this embodiment, since the user is managed using LDAP (Lightweight Directory Access Protocol), the IP address of the client terminal 130 is used as the PCID. It is not limited.

  The transmission / reception unit 132 transmits / receives information via the LAN 160.

  The input unit 133 is an input device such as a keyboard or a mouse.

  The display unit 134 is a display device such as a display.

  The client terminal 130 configured in this way is a computer including a CPU 211, a main memory 212, an auxiliary storage device 213, a NIC 214, and a bus 215 for connecting them, as shown in FIG. 8, for example. 210 can be realized. That is, the login control unit 131 can be realized by reading a predetermined program stored in the auxiliary storage device 213 such as a hard disk into the main memory 212 and executing it by the CPU 211, and the transmission / reception unit 132 is realized by the NIC 214. Is possible.

  The entrance / exit server 140 includes an entrance / exit management table 141, an occupancy information management table 142, and an entrance / exit management unit 143.

  As shown in FIG. 2, the entrance / exit management table 141 has a user ID input field 141a and a room ID input field 141b.

  In the user ID input column 141a, a user ID for uniquely identifying the user of the security system 100 is input.

  In the room ID input field 141b, the room ID of a room in which the user specified by the user ID is allowed to enter as a regular guest is entered. Here, in the present embodiment, when a user inputs a plurality of room IDs that are allowed to enter as regular occupants, it can be distinguished by inserting “/” between the room IDs. I am doing so. In addition, when the user specified by the user ID enters a room other than the room registered in the room ID input field 141b, it is notified that the guest person has entered or left, as will be described later. A notification is sent to the authentication server 150.

  In the entrance / exit management table 141, necessary information is registered before the user uses the security system 100.

  As shown in FIG. 3, the occupancy information management table 142 has a user ID input field 142a and a occupancy ID input field 142b.

  In the user ID input field 142a, the user ID included in the entry / exit information transmitted from the door lock control device 110 is input.

  In the occupancy ID input field 142a, the room ID included in the entry / exit information transmitted from the door lock control device 110 is input.

  The occupancy information management table 142 is updated when entry / exit information is received from the door lock control device 110.

  When the entrance / exit information is transmitted from the door lock control device 110 via the transmission / reception unit 144, the entrance / exit management unit 143 displays the user ID included in the entrance / exit information as a user of the entrance / exit management table 141. It is determined whether or not it is registered in the ID input field 141a. If it is registered, an unlock command is transmitted to the door lock control device 110. If it is not registered, an authentication error is sent to the door lock control device 110. Send.

  In addition, when the entrance / exit information is transmitted, the entrance / exit management unit 143 extracts the room ID included in the entrance / exit information, and the room ID included in the entrance / exit information is the user of the entrance / exit management table 141. It is determined whether or not it is registered in the room ID input field 141b corresponding to the ID. If registered, the user ID input field 142a of the occupancy information management table 142 is obtained by referring to the occupancy information management table 142, which will be described later, and the set of the user ID and the room ID included in the entry / exit information. And whether the ID is registered corresponding to the occupancy ID input field 142b, and if these IDs are registered in the occupancy information management table 142, the fact that the user has left the authentication server 150. Is sent together with the room ID.

  On the other hand, when the entrance / exit information is transmitted, the entrance / exit management unit 143 extracts the room ID included in the entrance / exit information, and the room ID included in the entrance / exit information is the user of the entrance / exit management table 141. If it is not registered in the room ID input field 141 b corresponding to the ID, it is determined whether or not the user ID and the room ID included in the entry / exit information are registered in the occupancy information management table 142. If the user ID and the room ID included in the entry / exit information are not registered in the occupancy information management table 142, the guest entry information for notifying that the guest has entered the authentication server 150 (to be described later) together with the room ID. If it is transmitted and registered, guest leaving information notifying that the guest has left is transmitted together with the room ID.

  Note that the entrance / exit management unit 143 determines that the combination of the user ID and the room ID included in the entrance / exit information is not registered in the user ID input column 142a and the room ID input column 142b of the occupancy information management table 142. Creates a new line in the occupancy information management table 142 and inputs these IDs in the same line. If already registered, these IDs are input from the occupancy information management table 142. Delete the existing line.

  The transmission / reception unit 144 transmits / receives information via the LAN 160.

  The entrance / exit server 140 configured as described above can be realized by a computer 210 as shown in FIG. 8, for example. That is, the entrance / exit management unit 143 can be realized by reading a predetermined program stored in the auxiliary storage device 213 such as a hard disk into the main memory 212 and executing it by the CPU 211. The room information management table 142 can be realized by storing predetermined information in the auxiliary storage device 213 such as a hard disk, and the transmission / reception unit 144 can be realized by the NIC 214.

  As shown in FIG. 1, the authentication server 150 includes a login information table 151, a remote control information table 152, an address information table 153, an authentication processing unit 154, a remote control unit 155, and a transmission / reception unit 156. , An input unit 157 and a display unit 158.

  As shown in FIG. 4, the login information table 151 has a PCID input field 151a, a user name input field 151b, and a personal identification number input field 151c.

  In the PCID input field 151a, a PCID that is identification information for uniquely identifying the client terminal 130 that performs login in the LAN 160 is input. In the present embodiment, the IP address of the client terminal 130 is used, but the present invention is not limited to such an aspect.

  In the user name input field 151b, a user name arbitrarily determined by the user using the client terminal 130 is input.

  The personal identification number arbitrarily determined by the user using the client terminal 130 is input into the personal identification number input field 151c.

  As shown in FIG. 5, the remote control information table 152 includes a user ID input field 152a, a PCID input field 152b, a room ID input field 152c, an unlocking permission security level input field 152d, and a security level input. Column 152e.

  The above-described user ID is input in the user ID input field 152a.

  In the PCID input field 152b, the above-described PCID is input.

  In the room ID input field 152c, the room ID described above is input.

  In the unlocking permission security level input field 152d, a condition for unlocking or locking the electronic lock 121 of the remote control storage tool 120 is input.

  In the present embodiment, when the information about “person's occupancy” is input in the unlocking permission security level input field 152d, when the logged-in user of the client terminal 130 enters the room (in the security level input field 152e). The electronic lock 121 is unlocked (when “person's occupancy” is entered), and the user of the logged-in client terminal 130 leaves the room (when “absence” is entered in the security level input field 152e). The lock 121 is locked.

  Further, when “absent” information is input in the unlocking permission security level input field 152d, when the logged-in user of the client terminal 130 enters the room (“person's occupancy” in the security level input field 152e). The electronic lock 121 is unlocked, and the electronic lock 121 is not locked even when the logged-in user of the client terminal 130 leaves the room (when “absent” is entered in the security level input field 152e). .

  Furthermore, when “Guest permission” information is entered in the unlocking permission security level input field 152d, when the user of the logged-in client terminal 130 enters the room (in the security level input field 152e “ When the user of the logged-in client terminal 130 leaves the room (when “absent” is entered in the security level input field 152e) and when the guest enters the room. The electronic lock 121 is locked (when “guest entry” is entered in the security level input field 152e).

  As described above, in the security level input field 152e, information on “person's occupancy”, “absent”, or “guest entry” is input in accordance with an instruction from the remote control unit 155.

  The user ID input field 152a, the PCID input field 152b, and the room ID input field 152c are inputted with predetermined information before the user uses the security system 100, and the unlocking permission security level input field 152d Before the user of the security system 100 uses, predetermined information is input so as to satisfy a desired condition for unlocking or locking.

  As shown in FIG. 6, the address information table 153 has a PCID input field 153a and an address input field 153b.

  The PCID described above is input in the PCID input field 153a.

  In the address input field 153b, the IP address of the remote control storage tool 120 managed in association with the client terminal 130 specified by the PCID input in the PCID input field 153a in the same row is input.

  When the login information is transmitted from the client terminal 130, the authentication processing unit 154 determines whether the PC ID, the user name, and the password included in the login information are registered in the login information table 151. If registered, a success response is transmitted to the client terminal 130, and if not registered, a failure response is transmitted to the client terminal 130.

  The remote control unit 155 acquires the user's occupancy information from the entry / exit server 140 and performs a process of remotely controlling the electronic lock 121 of the remote control storage tool 120.

  Specifically, when the authentication processing unit 154 succeeds in logging in the client terminal 130, the remote control unit 155 uses the PCID included in the login information of the client terminal 130 as a key to store a remote control information table 152 described later. The user ID and the room ID are extracted by searching, and transmitted to the entry / exit server 140 as a presence information confirmation request.

  When the occupancy information sent from the entry / exit server 140 is received, if the occupancy information notifies the occupancy, the user ID and the room ID included in the occupancy information If the information on “person's occupancy” is entered in the security level input field 152e of the remote control information table 152 in the same row as the occupancy information, the user included in the occupancy information indicates that the occupancy information is for leaving. The “absence” information is input to the security level input field 152e of the remote control information table 152 in the same row as the ID and room ID.

  Further, when guest entry information notifying that a guest has entered from the entry / exit server 140 is received, the security level input field 152e of the remote control information table 152 in the same row as the room ID included in the guest entry information is displayed. Enter the information for “Guest Entry”.

  Furthermore, when guest exit information notifying that the guest has exited is received from the entrance / exit server 140, the security level input field 152e of the remote control information table 152 in the same row as the room ID included in the guest exit information is displayed. Return to the state before the guest entered.

  The remote control unit 155 then enters the “person's occupancy” in the security level input field 152e of the remote control information table 152, or when the guest leaves the room and the security level input field 152e returns to “person occupancy”. Extracts the PCID on the same line as the input security level input field 152a, searches the address information table 153 for an IP address corresponding to this PCID, and sends an unlocking command to unlock the electronic lock 121 to the IP address. To do.

  When the remote control unit 155 inputs “absence” in the security level input field 152e of the remote control information table 152, the remote control unit 155 displays the unlock permission security level input field 152d on the same line as the input security level input field 152e. Referring to this, if “absent” is not input in this input field 152d, the PCID in the same row is extracted, the IP address corresponding to this PCID is searched from the address information table 153, and the IP address is electronically A locking command for locking the lock 121 is transmitted. If “absent” is entered in the unlocking permission security level input field 152d, the locking command is not transmitted because the setting is such that locking is not performed even when the user is absent.

  Further, when “guest entry” is entered in the security level input field 152e of the remote control information table 152, the remote control unit 155 unlocks the security level input field 152d for the same level as the input security level input field 152e. If “Guest Permission” is not entered in this input field 152d, the PCID of the same line is extracted, the IP address corresponding to this PCID is searched from the address information table 153, and the IP address A locking command for locking the electronic lock 121 is transmitted to. Note that when “guest permission” is input in the unlocking permission security level input field 152d, the lock command is not transmitted because the lock is not set even when the guest enters the room.

  The transmission / reception unit 156 transmits / receives information via the LAN 160.

  The input unit 157 is an input device such as a keyboard and a mouse.

  The display unit 158 is a display device such as a display.

  Note that the authentication server 150 configured in this way can be realized by a computer 210 as shown in FIG. 8, for example. That is, the authentication processing unit 154 and the remote control unit 155 can be realized by reading a predetermined program stored in the auxiliary storage device 213 such as a hard disk into the main memory 212 and executing it by the CPU 211, and a login information table 151, the remote control information table 152 and the address information table 153 can be realized by storing predetermined information in the auxiliary storage device 213 such as a hard disk, and the transmission / reception unit 156 can be realized by the NIC 214.

  The overall processing procedure of the security system 100 configured as described above will be described with reference to the sequence diagram shown in FIG.

  First, the user 161 presents the ID card to the door lock control device 110 by causing the first card reader 111A to read the user ID stored in the ID card held for entering the room (300). .

  The door lock control device 110 generates entry / exit information in which the room ID is attached to the user ID read from the ID card (301), and transmits the generated entry / exit information to the entry / exit server 140 (302).

  The entry / exit server 140 extracts the user ID from the received entry / exit information, verifies whether the user ID is registered in the entry / exit management table 141 (303), and enters the user ID. If registered in the exit management table 141, an unlocking command for the door lock is transmitted to the door lock control device 110 (304).

  Further, the entry / exit server 140 extracts the user ID and the room ID from the received entry / exit information and registers them in the occupancy information management table 142 (305).

  The door lock control device that has received the door lock unlock command unlocks the door lock (306) and permits the user 161 to enter the room.

  The user 161 who has entered the room issues a login instruction to the client terminal 130 by inputting the user name and password via the input unit 133 and the display unit 134 (307).

  Upon receiving the login instruction, the client terminal 130 transmits a login request in which the PCID is attached to the input user name and password to the authentication server 150 (308). In this embodiment, since authentication processing using LDAP is performed, the IP address notified from the client terminal 130 to the authentication server 150 is used as the PCID.

  Upon receiving the login request, the authentication server 150 performs verification by determining whether or not the transmitted user name, password, and PCID are registered in the login information table 151 (309). If registered in 151, a success response is transmitted to the client terminal 130 (310).

  Further, the authentication server 150 extracts the user ID and room ID corresponding to the PCID notified by the login request from the remote control information table 152, and sends a room information confirmation request attached with these IDs to the entrance / exit server 140. Transmit (311).

  The entry / exit server 140 that has received the occupancy information confirmation request determines whether or not the user ID and the room ID attached to the occupancy information confirmation request are registered in the occupancy information management table 142 and is registered. If the user is not registered, the occupancy information for notifying that the user is not present is generated. 312) The generated occupancy information is transmitted to the authentication server 150 (313).

  When the authentication server 150 receives the occupancy information notifying that the user is occupying the room, the authentication server 150 extracts the IP address corresponding to the PCID notified by the login request from the address information table 153, and An unlock command for the electronic lock 121 is transmitted to the remote control storage tool 120 specified by the IP address (314).

  The remote control storage tool 120 that has received the unlocking command unlocks the electronic lock (315), and the user 161 can access the space inside the remote control storage tool 120 (316). .

  When the user issues a logout instruction to the client terminal 130 via the input unit 133 and the display unit 134 (317), the client terminal 130 transmits a logout request attached with the PCID to the authentication server 150 ( 318).

  Upon receiving the logout request, the authentication server 150 extracts the IP address corresponding to the PCID notified by the logout request from the address information table 153, and transmits a locking command to the remote control storage device 120 specified by this IP address. (319).

  Receiving the locking command, the remote control storage tool 120 locks the electronic lock (320).

  Then, the user 161 presents the ID card to the door lock control device 110 by causing the second card reader 111B to read the user ID stored in the ID card held for leaving the room (321). .

  The door lock control device 110 generates entry / exit information in which the room ID is attached to the user ID read from the ID card (322), and transmits the generated entry / exit information to the entry / exit server 140 (323).

  The entry / exit server 140 extracts the user ID from the received entry / exit information, verifies whether the user ID is registered in the entry / exit management table 141 (324), and enters the user ID. If registered in the exit management table 141, an unlocking command for the door lock is transmitted to the door lock control device 110 (325).

  Further, the entry / exit server 140 extracts the user ID and room ID from the received entry / exit information, searches these user IDs and room IDs registered in the occupancy information management table 142, and finds the searched user The ID and room ID are deleted (326).

  Upon receiving the door lock unlock command, the door lock control device 110 unlocks the door lock (327) and permits the user 161 to leave the room.

  Further, the entry / exit server 140 transmits exit information attached with the user ID and the room ID to the authentication server 150 (328).

  Upon receiving the leaving information, the authentication server 150 extracts the user ID attached to the leaving information and the PCID corresponding to the room ID from the remote control information table 152, and the IP address corresponding to the extracted PCID from the address information table 153. Obtaining and transmitting the lock command of the electronic lock 121 to the remote control storage tool 120 specified by this IP address (329).

  Receiving the locking command, the remote control storage tool 120 locks the electronic lock 121 (330).

  Next, the control process in the entry / exit server 140 will be described using the flowchart shown in FIG.

  First, it is assumed that the entry / exit server 140 is in a standby state (S340).

  When the information is received via the LAN 160 (S341), when the received information is the entrance / exit information transmitted from the door lock control device 110 (S342), the user ID is extracted from the received entrance / exit information. Then, it is determined whether or not the extracted user ID is registered in the user ID input field 141a of the entrance / exit management table 141 (S343).

  If registered in the user ID input field 141a of the entry / exit management table 141 (S343), a door lock unlocking command is transmitted to the door lock control device 110 (S344).

  Next, it is determined whether or not the room ID extracted from the entry / exit information matches the room ID input field 141b corresponding to the user ID, and if there is a match (S345), the user It is determined whether the ID and the room ID are registered in the occupancy information management table 142 (S346).

  When the user ID and the room ID are registered in the occupancy information management table 142 (S346), the leaving information is transmitted to the authentication server (S347).

  When the user ID and the room ID are not registered in the occupancy information management table 142 (S346) and when the exit information is transmitted to the authentication server (S347), the occupancy information management table 142 is updated (S348). . Here, the occupancy information management table 142 is updated when the user ID and the room ID are not registered in the occupancy information management table 142 (S346). When registering and leaving information is transmitted to the authentication server (S347), the user ID and room ID are deleted from the occupancy information management table 142.

  If the room ID extracted from the entry / exit information does not match the room ID input field 141b corresponding to the user ID (S345), the user ID and the room ID are registered in the occupancy information management table 142. It is determined whether it has been performed (S349).

  When the user ID and the room ID are registered in the occupancy information management table 142 (S349), the guest leaving information with the user ID and the room ID attached is transmitted to the authentication server (S350).

  If the user ID and room ID are not registered in the occupancy information management table 142 (S349), the guest room entry information with the user ID and room ID attached is transmitted to the authentication server (S351).

  Then, in the same manner as described above, the occupancy information management table 142 is updated (S348).

  When the user ID extracted from the entry / exit information is not registered in the entry / exit management table 141 (S343), an authentication error is transmitted to the door lock control device 110 (S352).

  If the information received in step S341 is not room entry / exit information (S342) but a room presence information confirmation request (S353), the user ID and room ID attached to the room presence information confirmation request are entered / exited. It is determined whether it is registered in the management table 141 (S354).

  When the user ID and the room ID are registered in the entrance / exit management table 141 (S354), it is determined whether or not the user ID and the room ID are registered in the occupancy information management table 142 (S355), and registered. If it has been registered (S355), the presence information notifying that the user is present is transmitted to the authentication server 150 (S356), and if not registered (S355), The occupancy information notifying that the occupant is not present is transmitted to the authentication server 150 (S357).

  If the user ID and room ID are not registered in the entry / exit management table 141, error processing such as sending a failure response to the authentication server 150 is performed (S358).

  If the information received in step S341 is not entry / exit information (S342) and is not an occupancy information confirmation request (S353), error processing such as discarding the received information is performed (S359).

  Next, control processing in the authentication server 150 will be described with reference to the flowchart shown in FIG.

  First, it is assumed that the authentication server 150 is in a standby state (S360).

  When the information is received (S361) and it is a login request (S362), it is confirmed whether or not the transmitted PCID, user name and password are registered in the login information table 151. The success or failure of the login is determined (S363).

  If the login is not successful (S363), a failure response is transmitted to the client terminal 130 (S364), and the process returns to the standby state in step S360.

  If the login is successful (S363), a occupancy information confirmation request is transmitted to the entry / exit server 140 (S365).

  If the information received in step S361 is not a login request (S362) but occupancy information (S366), if the occupancy information is occupancy information notifying that the occupancy is present, (S367), the security level input field 152e of the remote control information table 152 is set to “person occupancy” (S368), and the process proceeds to step S369.

  On the other hand, when the occupancy information is occupancy information notifying that the occupancy information is not occupying (S367), the security level input field 152e of the remote control information table 152 is set to “absent” (S370), and step S369. Proceed to

  If the information received in step S361 is a logout request (S371), the security level input field 152e of the remote control information table 152 is set to “absent” (S370), and the process proceeds to step S369.

  If the information received in step S361 is guest entry information (S372), the security level input field 152e of the remote control information table 152 is set to “guest entry” (S373), and the process proceeds to step S369.

  Further, when the information received in step S361 is the guest leaving information (S374), the security level input field 152e of the remote control information table 152 is returned to the state before the guest entering (S375), and the process returns to step S369. move on.

  On the other hand, when the information received in step S361 is not a login request (S362), is not in-room information (S366), is not a logout request (S371), is not guest entry information (S372), and is not guest exit information In step S374, error processing such as discarding the received information is performed (S376).

  In step S369, processing corresponding to the unlocking permission security level input field 152d of the remote control information table 152 is performed for each remote control storage tool 120.

  Specifically, when “person occupancy” is registered in the security level input field 152e of the remote control information table 152 in step S368, or the guest leaves the room in step S375 and the security level input field 152e returns to “person occupancy”. In this case, the PCID on the same line as the registered security level input field 152e is extracted, an IP address corresponding to this PCID is searched from the address information table 153 described later, and the electronic lock 121 is unlocked to the IP address. Send unlock command.

  If “absent” is registered in the security level input field 152e of the remote control information table 152 in step S370, refer to the unlocking permission security level input field 152d on the same line as the registered security level input field 152e. When “absent” is not entered in the input field 152d, the PCID in the same row is extracted, the IP address corresponding to this PCID is retrieved from the address information table 153, and the electronic lock 121 is locked to the IP address. Send a lock command. On the other hand, when “absent” is input in the input field 152d, information is not transmitted to the remote control storage device 120 at this stage.

  Furthermore, when “guest entry” is registered in the security level input field 152e of the remote control information table 152 in step S373, the unlock permission security level input field 152d on the same line as the registered security level input field 152e is referred to. When “Guest Permission” is not entered in the input field 152d, the PCID of the same line is extracted, the IP address corresponding to this PCID is searched from the address information table 153, and the electronic lock 121 is set to the IP address. Send a lock command to lock. On the other hand, when “guest permission” is input in the input field 152d, information is not transmitted to the remote control storage device 120 at this stage.

  As described above, according to the present embodiment, the electronic lock 121 of the remote control storage tool 120 can be opened and closed according to the entry / exit of the user of the client terminal 130. Further, even when a guest who does not normally enter the room in which the client terminal 130 is installed, the electronic lock 121 of the remote control storage tool 120 can be locked.

  In the embodiment described above, after the guest leaves the room, the guest is returned to the state before entering the room. However, the present invention is not limited to this mode. For example, the user of the client terminal 130 It is also possible to access the authentication server 150 via the network 160 and input “person occupancy” or “absence” information in the security level input field 152 e of the remote control information table 152.

  In addition, after the guest has entered the room, information related to the user's entry / exit is cached by the authentication server 150, and the latest information cached after the guest has left the room is entered in the security level input field 152e. May be.

  Furthermore, in this embodiment, although the entrance / exit server 140 and the authentication server 150 are configured as separate servers, it is also possible to configure them as a single server.

  In this embodiment, the electronic lock 121 is locked when the user logs out. However, the electronic lock 121 may be locked when the user turns off the power of the client terminal. .

  In this embodiment, the first card reader 111A and the second card reader 111B that read the user ID stored in the ID card held by the user are used, but the user can be identified. For example, the user may be identified by reading a user's fingerprint, iris, face, signature, vocal cord, palm shape, palm vein pattern, and the like. In such a case, the user ID for each user can be acquired by providing the door lock control device 110 or the entry / exit server 140 with a table in which these pieces of information are associated with user IDs.

1 is a schematic diagram of a security system 100. FIG. Schematic of the entrance / exit management table 141. FIG. Schematic of the occupancy information management table 142. FIG. Schematic of the login information table 151. FIG. Schematic of the remote control information table 152. Schematic of the address information table 153. FIG. FIG. FIG. 3 is a sequence diagram showing an overall processing procedure of the security system 100. The flowchart which shows the control processing in the entrance / exit server 140. FIG. 7 is a flowchart showing control processing in the authentication server 150.

Explanation of symbols

100 Security System 110 Door Lock Control Device 111 Card Reader 120 Remote Control Storage Tool 130 Client Terminal 140 Entrance / Exit Server 150 Authentication Server 160 LAN

Claims (14)

A security system for controlling an electronic lock attached to a remote control storage tool,
An entrance / exit management unit for managing occupancy information regarding whether or not a user is occupying a room in which the remote control storage tool and the client terminal are installed;
An authentication processing unit for authenticating a user of the client terminal;
A remote control unit for remotely controlling the electronic lock,
When the authentication processing unit succeeds in authenticating the user of the client terminal, the remote control unit inquires of the entrance / exit management unit whether the user is in the room, and uses the user person when the information indicating that it is occupancy in the room is obtained from the entering and leaving management unit, to unlock the electronic lock,
When the information indicating that the user of the client terminal has left the room is acquired from the entrance / exit management unit after the electronic lock is unlocked, according to the conditions set in advance for each user A security system characterized by locking an electronic lock or determining to maintain an unlocked state of the electronic lock . A security system for controlling an electronic lock attached to a remote control storage tool,
An entrance / exit management unit for managing occupancy information regarding whether or not a user is occupying a room in which the remote control storage tool and the client terminal are installed;
An authentication processing unit for authenticating a user of the client terminal;
A remote control unit for remotely controlling the electronic lock,
When the authentication processing unit succeeds in authenticating the user of the client terminal, the remote control unit inquires of the entrance / exit management unit whether the user is in the room, and uses the user When the information indicating that the person is in the room is obtained from the entrance / exit management unit, the electronic lock is unlocked,
When the information indicating that a user other than a predetermined user has entered the room is obtained from the entrance / exit management unit after the electronic lock is unlocked, the information is set for each user. Depending on the conditions, lock the electronic lock or decide to maintain the unlocked state of the electronic lock.
Security system characterized by The security system according to claim 1 or 2 ,
The occupancy information includes information for identifying a user and information for identifying a room in which the user has entered,
The remote control unit makes an inquiry by sending an occupancy confirmation request including information identifying a user and information identifying a room where the client terminal has been successfully authenticated to the entrance / exit management unit ,
The entrance / exit management unit includes information that matches information that identifies a user included in the occupancy confirmation request and information that identifies a room in which the client terminal that has been successfully authenticated is installed. If present in the information, sending information indicating that the user is in the room to the remote control unit;
Security system characterized by The security system according to claim 1 or 2 ,
The remote control unit unlocks the electronic lock of the remote control storage tool associated with the client terminal;
Security system characterized by The security system according to claim 1 or 2 ,
The remote control unit, when obtaining information from the client terminal indicating that the use of the client terminal is terminated, locking the electronic lock;
Security system characterized by A control method for controlling an electronic lock attached to a remote control storage tool,
An occupancy management process for acquiring occupancy information regarding whether or not a user is occupying a room where the remote control storage tool and the client terminal are installed;
An authentication process for authenticating a user of the client terminal;
When the user authentication of the client terminal succeeds in the authentication process, the room confirmation process for confirming whether or not the user has entered the room using the room information acquired in the room management process When,
In the occupancy management process, when it is confirmed that the user has entered the room, the unlocking process of unlocking the electronic lock;
Exit management process for obtaining information that the user leaves the room;
Wherein after unlocking of the electronic lock, when the user of the client terminal in the access control process obtains the information to be leaving, in accordance with the condition set in advance for each user, and lock the electronic lock, Or a determination process for determining maintenance of the unlocked state of the electronic lock ,
A control method characterized by the above. A control method for controlling an electronic lock attached to a remote control storage tool,
An occupancy management process for acquiring occupancy information regarding whether or not a user is occupying a room where the remote control storage tool and the client terminal are installed;
An authentication process for authenticating a user of the client terminal;
When the user authentication of the client terminal succeeds in the authentication process, the room confirmation process for confirming whether or not the user has entered the room using the room information acquired in the room management process When,
In the occupancy management process, when it is confirmed that the user has entered the room, the unlocking process of unlocking the electronic lock;
A guest admission management process for obtaining information that a user other than a predetermined user enters the room;
After unlocking the electronic lock, if information other than a predetermined user entering the room is acquired in the guest room entry management process, the user locks according to the conditions set for each user. A determination process for determining whether to lock the electronic lock or to maintain the unlocked state of the electronic lock,
A control method characterized by the above. The control method according to claim 6 or 7 , comprising:
The occupancy information includes information for identifying a user and information for identifying a room in which the user has entered,
The room entry confirmation process confirms whether there is information in the occupancy information that matches information identifying the user and information identifying the room where the client terminal that has been successfully authenticated is installed. What to do,
A control method characterized by the above. The control method according to claim 6 or 7 , comprising:
The unlocking process is to unlock the electronic lock of the remote control storage tool associated with the client terminal;
A control method characterized by the above. The control method according to claim 6 or 7 , comprising:
A termination process for terminating the use of the client terminal;
A locking process of locking the electronic lock when the use of the client terminal is terminated in the termination process;
A control method characterized by the above. A server for controlling an electronic lock attached to a remote control storage tool,
An entrance / exit management unit for managing occupancy information regarding whether or not a user is occupying a room in which the remote control storage tool and the client terminal are installed;
An authentication processing unit for authenticating a user of the client terminal;
A remote control unit for remotely controlling the electronic lock,
When the authentication processing unit succeeds in authenticating the user of the client terminal, the remote control unit inquires of the entrance / exit management unit whether the user is in the room, and uses the user person when the information indicating that it is occupancy in the room is obtained from the entering and leaving management unit, to unlock the electronic lock,
When the information indicating that the user of the client terminal has left the room is acquired from the entrance / exit management unit after the electronic lock is unlocked, according to the conditions set in advance for each user A server characterized by locking an electronic lock or determining to maintain an unlocked state of the electronic lock . A server for controlling an electronic lock attached to a remote control storage tool,
An entrance / exit management unit for managing occupancy information regarding whether or not a user is occupying a room in which the remote control storage tool and the client terminal are installed;
An authentication processing unit for authenticating a user of the client terminal;
A remote control unit for remotely controlling the electronic lock,
When the authentication processing unit succeeds in authenticating the user of the client terminal, the remote control unit inquires the entrance / exit management unit whether or not the user is in the room, and person when the information indicating that it is occupancy in the room is obtained from the entering and leaving management unit, to unlock the electronic lock,
When the information indicating that a user other than a predetermined user has entered the room has been acquired from the entrance / exit management unit after unlocking the electronic lock, the information is set for each user. Depending on the conditions, lock the electronic lock or decide to maintain the unlocked state of the electronic lock.
A server characterized by The server according to claim 11 or 12 ,
The occupancy information includes information for identifying a user and information for identifying a room in which the user has entered,
The remote control unit makes an inquiry by sending an occupancy confirmation request including information identifying a user and information identifying a room in which the client terminal has been successfully authenticated to the entrance / exit management unit ,
The room entrance / exit management unit includes information that matches information that identifies a user included in the occupancy confirmation request and information that identifies a room in which the client terminal that has been successfully authenticated is installed. If present in the information, sending information indicating that the user is in the room to the remote control unit;
A server characterized by The server according to claim 11 or 12 ,
The remote control unit unlocks the electronic lock of the remote control storage tool associated with the client terminal;
A server characterized by

Images