JP4694894B2 - Access control system - Google Patents

Description

  The present invention relates to an entry / exit management system that controls opening / closing of an electronic lock to manage entry / exit.

Conventionally, there has been a system for managing access using a card key. For example, an entrance / exit management device provided at the entrance / exit reads the ID of the card key, etc., determines whether or not the ID matches a preset ID, and unlocks it when it matches.
For example, when used for company entry / exit management, the entry / exit management device reads the employee ID on the employee ID card and controls the opening and closing of the electric lock. In this way, employees who are allowed to enter and exit are convenient because they only need to carry their employee ID card instead of the conventional metal key.
In particular, it is more convenient for a guard who manages a plurality of doorways to carry a card key instead of a bundle of keys.
JP 2002-83087 A JP 2004-88337 A

However, when granting access to all employees by employee ID as described above, it is necessary to set the employee ID of all employees in the access control device, and the work becomes more difficult as the number of employees increases. Met.
In addition, if a card key storing a specific ID different from the employee ID is used, there is no need to set a large number of IDs in the access control device, but the trouble of distributing the card key to each employee is reduced. It takes.

On the other hand, when receiving a report, a security company or the like may provide a service for sending a security guard to the site and checking the situation. The security guard who receives the warning goes to the site such as a building, but at that time, it is necessary to bring the key of the entrance.
If the contacted security guard is at a security company, he can take out the necessary keys immediately. For example, if he / she is contacted during another patrol, the security company I have to go get the key. Therefore, arrival at the site will be delayed.

Also, if you try to skip the time to get the keys so that you can rush to the site when you receive an alarm, it is necessary for the security guard to always carry all the keys at your site. However, when the number of persons in charge is large, the number of keys is large and it is inconvenient to carry, and as the number of keys carried increases, the risk of loss increases. This is the same whether the key is a conventional mechanical key or a card key corresponding to an electronic lock. For example, in order to enter and exit a large number of places, it is necessary to have a plurality of card keys that register entry / exit information such as different IDs.
Furthermore, even if the card key is distributed in advance, if the entry / exit permission condition is changed, the corresponding key must be redistributed, and it is difficult to immediately adopt a new system.

An object of the present invention is to provide an entry / exit management system that can easily distribute entry / exit information instead of a key to a person who is permitted to enter / exit and can smoothly cope with changes in the manner of entry / exit management. It is to be.
It is another object of the present invention to provide an entrance / exit management system that allows a legitimate person to enter and exit smoothly when necessary without having to carry a plurality of keys at all times for entering and exiting a plurality of different entrances.

The first invention is an entry / exit information server that stores entry / exit information in which a level A that can be always entered and a level B that can be entered on the condition that unlocking has been performed based on the entry / exit information of the level A is stored. A mobile communication terminal communicable with the access information server, and an access control device capable of communicating with the mobile communication terminal. The access information server has a function for storing the access information, and a specification. The mobile communication terminal has a function of downloading the access information, and the access control device includes a reading unit for reading the access information transmitted from the mobile communication terminal and an access permission condition according to the level A or level B. In addition to storing in advance, the storage unit for storing the entry / exit information read by the reading unit, and the read / exit information for the level A or level B read in advance are recorded. Parts are collated with and out permission condition stored therein as to determine whether or not satisfy the above and out permission condition, a point comprising a data processing unit for unlocking when you are satisfied and out permission conditions It has the characteristics.

The second invention is based on the first invention, and the entry / exit information server stores a time condition for enabling download of the entry / exit information, and downloads the entry / exit information only when the time condition is satisfied. It has a feature in that it has a function to allow
3rd invention presupposes the said 1st or 2nd invention, the said entrance / exit management apparatus is provided with the function to transmit the said collation result to a mobile communication terminal, and the said mobile communication terminal triggers reception of the said collation result It is characterized in that it has a function of transmitting information based on the collation result as an e-mail to a preset destination.

  4th invention presupposes said 1st-3rd, The said entrance / exit information server memorize | stores the effective period of entrance / exit information, The program which invalidates the downloaded entrance / exit information after the said effective period And a function to download the program together with the program when downloading / entry information is downloaded to a specific mobile communication terminal.

According to the first to fourth inventions, the mobile communication terminal is made to download the entry / exit information via communication, so that the entry / exit information can be easily issued as compared with an ID card or the like.
Also, when specific entry / exit information is required, the information can be given to the user immediately, so that the user can use the entry / exit information as soon as necessary.
For example, a security guard of a security company that has received a warning can obtain access information on the go and go directly to the site.
In addition, since the level can be set in the entrance / exit information, for example, in the relationship between the regular employee and the part-time job, unless the regular employee has entered the room, it is possible to manage according to the level so that the part-time job is not entered. Safety will also increase.

  In the second invention, by adding a time condition to the download of the access information, it is possible to download the access information to a legitimate accessor and prevent the access information from being stolen by an unauthorized person.

According to the third invention, since the collation result of the access control device is automatically transmitted to a predetermined transmission destination via the mobile communication terminal, the transmission / reception history in each access control device can be managed at this transmission destination. it can. For example, if a history management apparatus that manages information related to the entry / exit history for each entry / exit management apparatus is the transmission destination, the entry / exit history can be managed by the history management apparatus without taking the effort of inputting the entry / exit history.
In addition, since it is possible to transmit the access history wirelessly to the transmission destination such as the history management device using the communication function of the mobile communication terminal, a communication line for connecting the access management device and the history management device, etc. There is no need to provide it specially. For example, the facility cost can be kept lower than when the access management device and the history management device are connected by wiring.

According to the fourth aspect of the present invention, it is possible to provide an expiration date for the entry / exit information so that the portable communication terminal can hold the entry / exit information that is valid for the required time. This can prevent unauthorized use of the mobile communication terminal by unauthorized persons.
Also, by downloading a program for invalidating the entry / exit information after the expiration date, the entry / exit information can be automatically invalidated on the mobile communication terminal side that downloaded the entry / exit information.

1 through 4 show the implementation form of the present invention.
As shown in FIG. 1, this system includes an entry / exit information server 1, a history management computer 2 that can be connected to the entry / exit information server 1 via the Internet N, and a mobile communication terminal 3 that can be connected to the Internet N. ing.
Moreover, the entrance / exit management apparatus 5 corresponding to each entrance / exit is provided, and the reading part 4 of this entrance / exit management apparatus 5 is provided beside the door 6 of the entrance / exit. The door 6 is provided with an electric lock (not shown), and the electric lock and the access control device 5 are linked to each other.

The mobile communication terminal 3 is a mobile phone having a function of connecting to the Internet N, for example.
The mobile communication terminal 3 is equipped with an IC chip that includes a memory and a transmission circuit that transmits data stored in the memory. And this portable communication terminal 3 has the function to memorize | store the in / out information of this invention demonstrated later in the memory of the said IC chip, and to transmit this in / out information with respect to the reading part 4 beside a door.
The installation location of the door 6 is a management target location for access management, and the access management device 5 is installed near the reading unit 4.

The entry / exit management device 5 includes a storage unit 5a for storing entry / exit permission conditions and a data processing unit 5b. The data processing unit 5b stores the entry / exit information read via the reading unit 4 and the storage unit 5a. It has a function to check the conditions. Further, the data processing unit 5b has a function of unlocking the electric lock attached to the door 6 when the read / entry information satisfies the condition as a result of the collation.
Further, the data processing unit 5b of the access control device 5 has a function of transmitting the collation result to the mobile communication terminal 3 after performing the collation processing, and the mobile communication terminal 3 receives the collation result. As a trigger, it has a function of transmitting information based on the collation result to a preset destination as an e-mail. Specifically, it is necessary to set in the mobile communication terminal 3 a program that automatically transmits an e-mail using the above-described collation result as a trigger. This program may also be downloaded from the access information server 1 together with the access information.

On the other hand, the entry / exit information server 1 is a server storing entry / exit information, and is usually installed at a location different from the management location where the entry / exit management device 5 is installed. The entry / exit information server 1 is managed by, for example, a management department such as a specialized company that manages entry / exit information or a company in which an entry / exit management device is installed.
Further, the entrance / exit information stored in the entrance / exit information server 1 is information corresponding to the entrance / exit as shown in FIG. 2, for example.
In addition, the said entrance / exit is an entrance / exit which should manage entrance / exit by this system, and the entrance / exit management apparatus 5 is each made to respond | correspond.

The entry / exit information stored in the entry / exit information server 1 is information indicating that the person holding this information is permitted to enter / exit, for example, an ID that identifies the person permitted to enter / exit. and so on. However, this ID does not need to be associated with an individual, may be associated with each group, or may be a key ID determined only for entry / exit management, not information for identifying an individual.
The entry / exit information is associated with a download condition for downloading the entry / exit information and an expiration date of the entry / exit information itself.
The download condition is a condition that the entry / exit information is downloaded only when this condition is satisfied. For example, there are a time condition and a download destination.

The download time condition includes the start time and end time of a downloadable time zone, and “30 minutes from a specific time”. This specific time is input to the access information server 1 when necessary.
The download destination condition is a condition of the mobile communication terminal 3 that downloads the entry / exit information, such as a machine ID or an address for specifying the mobile communication terminal 3. Further, it may be requested to input a predetermined password and downloaded when the password is input. In that case, the password match is the download condition.

However, the download conditions are not limited to those described above, and various conditions can be set. Then, the entry / exit information server 1 stores the download conditions, and when there is a download request from the mobile communication terminal 3, determines whether or not the conditions are satisfied, and if the conditions are satisfied Only have them download the access information.
If the download conditions are set in this way, necessary entry / exit information can be downloaded to a specific mobile communication terminal 3, but the entry / exit information should not be downloaded to the mobile communication terminal 3 that does not satisfy the conditions. Can do. As a result, unauthorized intrusion using the entry / exit information can be prevented.

Furthermore, the “expiration date” shown in FIG. 2 is the expiration date of the access information downloaded to the mobile communication terminal 3. If there is an expiration date, the access information server 1 also stores the expiration date. Each expiration date is also associated with a program for invalidating the corresponding entry / exit information when the expiration date has passed, which is also stored in the entry / exit information server 1.
The history management computer 2 is a computer that manages the entrance / exit status of the entrance / exit managed by each entrance / exit management device 5, and may be provided anywhere. Via the mobile communication terminal 3.

The operation of this system will be described below using an example in which a security guard at a security company receives a warning and opens the door 6 that is the entrance / exit of a customer's building and enters the building.
Here, it is assumed that the mobile communication terminal 3 is used by a security guard, and the history management computer 2 is managed by a security company.

The flow of information at this time will be described with reference to FIG.
When a security company receives an alarm from the site, it will call the security officer in charge and instruct it to rush to the site. Here, the doorway No. 1 shown in FIG. 1 is the site to be rushed.
The security guard accesses the access information server 1 using the mobile communication terminal 3 while facing the site. Specifically, a download request for predetermined entry / exit information is transmitted to the entry / exit information server 1 by accessing a web page for downloading the entry / exit information stored in the entry / exit information server 1 (arrows in FIG. 3). 1)). The URL of the web page to be accessed by the portable terminal 3 may be stored in advance in the guard's portable communication terminal 3, or may be notified from the security company each time.

  In addition, if a security company notifies a security guard that there was a warning, the terminal ID of the mobile communication terminal of the security guard notified may be input to the access information server 1 as the download condition at that timing. it can. In this way, the entry / exit information server 1 can specify the download destination of the entry / exit information download condition shown in FIG. 2 at this point. Therefore, the security company can select an optimal person in charge at the same time for the same doorway, and download the doorway information to the mobile communication terminal 3.

  The entry / exit information server 1 has an entry / exit number. When the download request for the 1 entry / exit information is received, the corresponding download condition is confirmed. First, it is determined whether the time condition is satisfied. If the time condition, for example, 9:00 to 10:00 is satisfied, the download destination condition is confirmed. That is, the mobile communication terminal 3 that has accessed is specified, and it is determined whether or not the terminal ID satisfies the condition. If the terminal ID is satisfied, the access is made as indicated by the arrow (2) in FIG. The key ID as information is downloaded. At this time, if an expiration date is set in the entry / exit information, a program for invalidating the entry / exit information after the expiration date is downloaded together with the key ID. Here, the doorway No. Since the expiry date corresponding to 1 does not have an expiration date, it is not necessary to download the program.

The security guard with the mobile communication terminal 3 that has acquired the key ID is allowed to enter the doorway No. Go to the site corresponding to 1 and hold the mobile communication terminal 3 over the reading unit 4 to read the key ID (arrow (3) in FIG. 3). A method for causing the reading unit 4 to read the key ID from the mobile communication terminal 3 includes the following.
When the IC chip of the mobile communication terminal 3 is provided with a power supply circuit that induces a voltage by an external signal and does not have a battery, the reading unit 4 of the access control device 5 performs the following operation on the IC chip. When the inquiry signal is transmitted, the IC chip transmits the key ID stored therein by using the power source induced by the inquiry signal. Further, a battery may be provided on the IC chip side, and the key ID may be actively transmitted from the IC chip.
In either case, the key ID as the entry / exit information is transmitted from the mobile communication terminal 3 to the entry / exit management device 5 as indicated by the arrow (3).

The data processing unit 5b of the entry / exit management device 5 that has received the key ID as entry / exit information collates the received key ID with the entry / exit permission condition stored in the storage unit 5a, and the key ID satisfies the entry / exit permission condition. Judge whether or not. When it is determined that the access permission condition is satisfied, the electric lock of the door 6 is unlocked.
Moreover, the access control apparatus 5 transmits the said collation result with respect to the said mobile communication terminal 3 (FIG. 3 arrow (4)).
When receiving the collation result, the mobile communication terminal 3 automatically sends an e-mail to the history management computer 2 using this reception as a trigger (arrow (5) in FIG. 3). That is, in this embodiment , the history management computer 2 corresponds to a preset transmission destination of the present invention.

The content of the e-mail transmitted to the history management computer 2 is information based on the above collation result. For example, when the entry / exit permission condition is satisfied, for example, information indicating “when (date / time), who entered the room” If the entry / exit permission conditions are not satisfied, the information indicates “when (date and time), who could not enter the room”.
The date and time is information that can be specified by the portable information terminal 3, and who is information that can specify the terminal, such as a mail address of the portable communication terminal 3. In addition, if the verification result transmitted from the access control device 5 includes the access control device ID and the like along with whether or not the condition is satisfied, by adding it to the above-mentioned e-mail, “Where could not enter the room” can be identified.

The history management computer 2 can receive the history of access management determined by the access management device 5 by the e-mail and manage it as the access history.
Strictly speaking, if a result that the entry / exit permission condition is satisfied is transmitted as a result of the above collation, whether the security guard actually entered the room even though the electric lock of the door 6 was unlocked. I don't know how, but here it is considered that the room has been entered if it is unlocked.
As described above, by using the system of this embodiment , a guard can receive access information on the spot, go to the site, and open an entrance / exit regardless of where the guard is contacted. Therefore, a quicker response is possible.
In addition, since necessary entry / exit information can be acquired when necessary, it is not necessary to store a large number of entry / exit information in advance, and even when necessary entry / exit information increases, it is possible to respond immediately. There is no need to issue another card key or the like as in the prior art.

In the above embodiment , the mobile communication terminal 3 sends an e-mail to the history management computer 2 with the reception of the collation result as a trigger. No matter where your personal device is. For example, it is also possible to send history information indicating who entered and exited to a company or an individual on the entrance / exit side. However, the e-mail transmission function is not essential. Even if the history information is not transmitted by e-mail, according to the above system, there is a merit that a person who is allowed to enter the room can easily obtain the entrance / exit information at any time and can quickly arrive at the site.

In addition, the entrance / exit management side can easily pass entry / exit information that matches the entry / exit permission condition to a person who permits entry / exit. In particular, it is possible to more reliably prevent entry / exit information from being transferred to unauthorized persons by setting conditions for downloading entry / exit information. Furthermore, if an expiry date is provided for the access information itself, the access information can be registered one-time by passing the key only when necessary.
The program downloaded to the mobile communication terminal 3 together with the expiry information with the expiration date deletes the access information stored in the mobile communication terminal 3 or changes it to another when the expiration date has passed. Thus, the program executes the process of invalidating the above-mentioned entry / exit information.

In the above, the mobile communication terminal 3 stores a specific key ID as the access information, and the data processing unit 5b of the access control device 5 collates with the key ID stored in the storage unit 5a to However, the entry / exit information and the entry / exit permission condition do not have to be the same, and the entry / exit permission condition may change substantially with time.
For example, the entry / exit information downloaded by the mobile communication terminal 3 is download date / time information, and the entry / exit permission condition is “downloaded within a specific period”. There is something like
Alternatively, the entry / exit information may be “valid period” and the entry / exit permission condition may be “current time is within valid period”. In this way, it is possible to set the valid period of the entry / exit information and invalidate the entry / exit information after the period without using a program for invalidating the entry / exit information after the expiration date.

Further, an example in which the level is set for the entrance / exit information corresponding to the entrance / exit of the same entrance / exit will be described below. The level of entry / exit information, for example, allows a regular employee to download entry / exit information that can be entered at any time for a specific room, but allows a part-time job to download entry / exit information that permits entry / exit only when a regular employee enters the room. That's what it means. In other words, there is a difference between the access information for regular employees and part-time workers.
Flow of information between configuration elements is shown in FIG. However, in this example, it is assumed that the history computer 2 shown in FIG. 1 is managed not by the security company but by the company on the entry / exit management target side.

First , let employees and part-time workers download different access information. For example, ID “A” is downloaded to the employee, and ID “B” is downloaded to the part-time job. There are various methods for distinguishing the two, but a download page for ID “A” and a download page for ID “B” are provided separately, and when accessing each, an employee or part-time job It is conceivable to enter a password for specifying the password, or to include a password input request in the download conditions. In short, ID “A” is downloaded to the mobile communication terminal 3 of the employee, and ID “B” is downloaded to the mobile communication terminal 3 of the part-time job.

This example is characterized by the collation processing of the data processing unit 5b of the entrance / exit management device 5 provided at the entrance / exit . The processing procedure will be described with reference to the flowchart shown in FIG. This process is set in the data processing unit 5b.
When the mobile communication terminal 3 is held over the reading unit 4, the data processing unit 5 b reads the ID through the reading unit 4 (Step S <b> 1).
In step S2, it is determined whether or not the read ID is “A”. If it is “A”, the process proceeds to step S3 to unlock.
In step S4, the data processing unit 5b stores in the storage unit 5a that the ID “A” has entered the room. And after predetermined time, it locks by step S5 and complete | finishes a process (step S8).
The above is the processing procedure when an employee enters the room.

If the data processing unit 5b determines in step S2 that the read ID is not “A”, the process proceeds to step S6 to determine whether the ID is “B”.
When the data processing unit 5b determines that the read ID is not “B”, the process proceeds to step S8. That is, since the read ID is neither ID “A” nor “B”, the process is terminated while the locked state is maintained.

On the other hand, if it is determined in step S6 that the ID is “B”, the process proceeds to step S7, and it is determined whether the storage unit 5a stores the entry of the ID “A”. If the entry of ID “A” has been stored, the process proceeds to step S3 to unlock, but if the storage unit 5a does not store the entry of ID “A”, the locked state is maintained. Proceed to step S8.
With the above processing steps, entrance / exit management can be performed such that a part-time job is entered only when an employee is entering the room.
Note that the ID verification result by the data processing unit 5a may be transmitted to the mobile communication terminal 3 before the process ends in step S8. Then, if the mobile communication terminal 3 transmits an e-mail to the history computer 2 that is a preset transmission destination triggered by the reception of the collation result, the history computer 2 manages the entry history. be able to.

As described above, various kinds of information can be used as the entry / exit information and the entry / exit permission condition, thereby enabling various types of entry / exit management. According to the system of the present invention, since the mobile communication terminal 3 is made to download the access information via the communication means, the number of persons permitted to enter / exit is increased, or a special condition is added to the access. In addition, it is possible to easily cope with changes in the form of access control.
For example, when a key attached to an entrance is replaced, it can be easily distributed to a person who needs a new key.

It is a system configuration diagram. It is the table | surface which showed the example of data which the entrance / exit information server has memorize | stored. It is the schematic diagram which showed the flow of information . It is the flowchart which showed the process sequence of the example entrance / exit management apparatus which sets a level to entrance / exit information .

Explanation of symbols

1 entry / exit information server 2 history management computer 3 portable communication terminal 5 entry / exit management device

Claims (4)

An entrance / exit information server that stores entrance / exit information in which a level A that can be entered at all times and a level B that can be entered on the condition that unlocking has been performed based on the entrance / exit information of level A, and the entrance / exit information server A mobile communication terminal capable of communicating with the mobile communication terminal, and an access control device capable of communicating with the mobile communication terminal. The access information server stores the access information and inputs / outputs the specific mobile communication terminal. A function for downloading information, and the access management device stores in advance a reading unit that reads in / out information transmitted from the mobile communication terminal, and entrance / exit permission conditions according to the level A or level B, and a storage unit for storing and out information reading unit has read, the and out information stored in advance part of the level a or level B read is stored Access control system that includes a and out permission condition matches, as well as judges whether or not satisfy the above and out permission condition, and a data processing unit for unlocking when you are satisfied and out permission condition that.   The entry / exit information server according to claim 1, wherein the entry / exit information server has a function of storing a time condition for enabling download of the entry / exit information and a function of permitting download of the entry / exit information only when the time condition is satisfied. Management system.   The access control apparatus has a function of transmitting the verification result to the mobile communication terminal, and the mobile communication terminal transmits information based on the verification result as an e-mail to a preset destination by receiving the verification result as a trigger. The entrance / exit management system of Claim 1 or 2 provided with the function to perform.   The entry / exit information server has a function for storing a validity period of entry / exit information, a function for storing a program for invalidating downloaded entry / exit information after the validity period, and a function for downloading entry / exit information to a specific mobile communication terminal. The entrance / exit management system of any one of Claims 1-3 provided with the function to download together the said program.

Images