JP5178446B2 - Expiration date update device, entrance / exit management device, and entrance / exit management system - Google Patents

Description

  The present invention relates to an expiration date updating device, an entrance / exit management device, and an entrance / exit management system for unlocking a door and managing entry / exit when an ID is read from an ID card with an expiration date, for example. .

In the entrance / exit management system that unlocks the door at the time of entry / exit approval, if the authentication information (ID, PIN, etc.) for receiving entry / exit is expired, the user must enter / exit the room. Cannot enter or leave the room. At this time, the user who does not know the expiration date does not know why the user cannot enter or leave the room.
Therefore, when the expiration date of the authentication information is near, the entrance / exit management that warns the user that the authentication information has expired by making an advance announcement of the expiration date from the entry / exit operation terminal when entering the authentication information to the entry / exit operation terminal There is a system (Patent Document 1).
JP 2005-182555 A

In the conventional method for extending the expiration date, the user who wants to extend the expiration date notifies the management center by telephone or mail. Upon receiving the notification, the management center determines whether or not the expiration date can be extended, and when the extension of the expiration date is permitted, the expiration date is updated by the management center worker.
For this reason, if the expiration date of the authentication information expires, the user cannot immediately extend the expiration date of the authentication information, and enters and exits until the expiration date of the authentication information is updated at the management center. Unable to enter a controlled room.
For example, on a holiday or at night, the management center is not open and the extension of the expiration date is not performed. Even if it is a business hours during weekdays, if requests to the management center are concentrated, it will be in turn and the extension of the expiration date will not be updated immediately.
As described above, the conventional method for extending the expiration date has a problem in that it cannot be immediately handled.
In addition, the user has to request the management center to update information for each individual such as a personal identification number.

  For example, an object of the present invention is to provide an entrance / exit management system that immediately responds to a request for extending the validity period of authentication information.

  An expiration date updating apparatus according to the present invention includes a personal information database unit for storing a specific person ID for identifying a specific person as personal information indicating the specific person's information and an expiration date of the personal information using a storage medium, and a user A user ID input unit that inputs a user ID for identifying the user ID, and personal information indicating a specific user ID that matches the user ID input to the user ID input unit as user information It is determined that the user information is stored by the user ID determination unit that determines whether information is stored in the personal information database unit by using a CPU (Central Processing Unit) and the user ID determination unit. A first expiration date update unit that updates the expiration date indicated by the user information by using a CPU to an expiration date obtained by extending a specific period; and An update notification transmitter for transmitting an update notification for notifying update of the expiration date by the first expiration date update unit using a communication device; and a predetermined device for receiving the update notification transmitted by the update notification transmitter. Yes When the update notification is received, it is determined whether the update of the expiration date is invalid, and when the update of the expiration date is invalid, the update invalidity notification for notifying the invalidity of the expiration date update is transmitted An update invalidity notification receiving unit that receives the update invalidity notification transmitted by the device using a communication device, and an update indicated in the user information when the update invalidity notification is received by the update invalidity notification receiving unit And a second expiration date update unit that returns the later expiration date to the expiration date before the update using the CPU.

  According to the present invention, it is possible to provide an entry / exit management system that can immediately respond to, for example, a request for extending the expiration date of authentication information, by temporarily updating the expiration date by the first expiration date updating unit. Furthermore, when the update of the expiration date is not permitted, the expiration date is returned to the state before the update by the second expiration date update unit, so that a certain security level is maintained.

Embodiment 1 FIG.
An expiration date update device and an expiration date management system for managing the expiration date of personal information will be described.

FIG. 1 is a configuration diagram of an entrance / exit management system 800 according to the first embodiment.
The configuration of the entrance / exit management system 800 in the first embodiment will be described below with reference to FIG.
The entrance / exit management system 800 is an example of an expiration date management system, and the ID controller 200 described below is an example of an expiration date update device.

  In the entrance / exit management system 800, entrance / exit is managed by authentication of personal information in a plurality of buildings 810 (810a, 810b, 810c,...), And personal information used for entrance / exit management is integrated in the management center 820. Managed.

  A center device 500 is installed in the management center 820, and the center device 500 includes a center-side personal information database 600. In the center-side personal information database 600, personal information of users who are allowed to enter and exit each building 810 is registered as a personal information table 610. The personal information table 610 includes a plurality of personal information. Personal information is electronic data in which various personal information such as address, name, type (administrator, general user, etc.), registration ID (identification information for identifying an individual), and personal identification number (or password) are set. That is. An expiration date is set for the personal information, and the registration ID and personal identification number of the personal information whose expiration date has expired become invalid.

The center device 500 of the management center 820 and the ID controller 200 functioning as an entrance / exit management device in each building 810 are connected by a communication line 801.
The personal information table 610 managed by the management center 820 is provided to the ID controller 200 of each building 810 via the communication line 801 by the center device 500. The personal information table 610 provided to the ID controller 200 of each building 810 includes the personal information of the users who are permitted to enter and exit the building 810, and those who are not permitted to enter or exit the building 810. Personal information is not included. Hereinafter, description will be made assuming that the items of personal information to be provided are two items of “registration ID” and “expiration date”.

  As will be described below, the ID controller 200 of each building 810 has an entrance / exit management function that unlocks the electric lock door 410 when the user is permitted to authenticate.

  In each building 810, the electric lock door 410 of the room (or building 810) managed to enter and exit is locked with an electric lock. In order to enter the room, the user inputs his / her ID to the entrance / exit terminal device 100 installed beside the electric lock door 410. The ID controller 200 performs user authentication processing based on the input ID input to the entry / exit terminal device 100, and when authentication is permitted, operates the electric lock device 400 to unlock the electric lock door 410. The electric lock device 400 locks / unlocks the electric lock of the electric lock door 410 by electric control.

The ID controller 200 includes a terminal-side personal information database 300 that stores and manages a plurality of personal information provided as a personal information table 610 from the management center 820. Hereinafter, a set of personal information stored and managed in the terminal-side personal information database 300 is referred to as a “personal information table 310”. The personal information included in the personal information table 610 is referred to as “center-side personal information”, and the personal information included in the personal information table 310 is referred to as “terminal-side personal information”.
The ID controller 200 compares the input ID with each registered ID set in the personal information table 310 and performs a user authentication process. In the user authentication process, if a registration ID that matches the input ID is set in the personal information table 310, the ID controller 200 determines “authentication permitted” and the registration ID that matches the input ID is the personal information table. If the value is not set to 310, “authentication is not permitted” is determined.
However, even if a registration ID that matches the input ID is set in the personal information table 310, if the expiration date of the registration ID has expired, the ID controller 200 determines that authentication is not permitted and opens the electric lock door 410. Do not lock.

  Further, the ID controller 200 has an expiration date update function for extending and updating the expiration date of the registered ID, as will be described below.

The user operates the entry / exit terminal device 100 to request the ID controller 200 to extend the validity period of the registered ID. Upon receiving the request, the ID controller 200 temporarily provisionally updates the expiration date of the registered ID set in the personal information table 310 to an expiration date obtained by extending a specific period.
Then, the ID controller 200 notifies the center device 500 of the temporary update of the expiration date, and the center device 500 outputs the temporary update notification of the expiration date to a display device, a printer, or the like.
The operator of the management center 820 determines whether or not to update the expiration date based on the contents of the temporary update output by the center device 500 and inputs the determination result to the center device 500.
The center device 500 updates the expiration date set in the personal information table 610 to the same expiration date as the terminal side (the expiration date provisionally updated by the ID controller 200) when the expiration date update permission is input. The ID controller 200 is notified of permission to update the expiration date. Upon receiving the expiration date update permission notification, the ID controller 200 officially updates the temporarily updated expiration date.
In addition, when an expiration date update disapproval is input, the center apparatus 500 does not extend the expiration date of the registered ID set in the personal information table 610 and notifies the ID controller 200 that the expiration date is not updated. Notice. The ID controller 200 that has received the expiration date update disapproval notification returns the temporarily updated expiration date to the expiration date before the temporary update.

FIG. 2 is an external view of the entrance / exit terminal device 100 according to the first embodiment.
The entrance / exit terminal device 100 according to Embodiment 1 will be described below with reference to FIG.

The entrance / exit terminal device 100 includes an authentication data reading device 110, a numeric keypad 120, a liquid crystal display 130, and a speaker 140.
The authentication data reader 110 is an input device that reads user identification information (ID, fingerprint data, etc.). Hereinafter, the authentication data reader 110 will be described as a card reader. The authentication data reading device 110, which is a card reader, reads the user ID from the ID card when the ID card on which the user ID is recorded is brought closer.
The numeric keypad 120 is an input device through which a user inputs an ID, a password, an operation type (door unlocking, personal information update), and the like.
The liquid crystal display 130 is a display device that displays various types of information.
The speaker 140 is a sounding device that outputs a voice message or a buzzer sound.

  Hereinafter, information input to the entry / exit terminal device 100 from the authentication data reading device 110 or the numeric keypad 120 is referred to as “terminal operation information 101”.

FIG. 3 is a functional configuration diagram of the ID controller 200 according to the first embodiment.
A functional configuration of the ID controller 200 according to the first embodiment will be described below with reference to FIG.

  The ID controller 200 (expiration date update device, entry / exit management device) includes a terminal-side personal information registration unit 210, a terminal operation information input unit 220, a user authentication unit 230, a door unlocking unit 240, a user information update unit 250, and A terminal-side personal information database 300 is provided.

  The terminal-side personal information registration unit 210 (personal information reception unit) receives a plurality of personal information 611 transmitted from the center device 500 using the communication device, and sets the received plurality of personal information 611 in the personal information table 310. To do. The personal information table 310 is stored in the terminal side personal information database 300.

  The terminal operation information input unit 220 (user ID input unit) inputs the terminal operation information 101 from the entry / exit terminal device 100. For example, the terminal operation information 101 includes a user ID that identifies the user.

The user authentication unit 230 (user ID determination unit) is personal information (hereinafter referred to as “user information 311”) indicating a registration ID (specific user ID) that matches the user ID input to the terminal operation information input unit 220. Is set in the personal information table 310 using a CPU (Central Processing Unit).
Furthermore, when the user authentication unit 230 (expiration date determination unit) determines that the user information 311 is set in the personal information table 310, the user ID 311 indicates the expiration date when the user ID input time is indicated in the user information 311. It is determined by using the CPU.

  When the user authentication unit 230 determines that the input time of the user ID is within the expiration date, the door unlocking unit 240 outputs an unlocking command 240a to the electric lock device 400 and outputs the electric power of the electric lock door 410. Unlock the lock.

  The user information update unit 250 includes a terminal side update unit 251, an update notification transmission unit 252, and an update determination result reception unit 253.

When the user authentication unit 230 determines that the user information 311 is set in the personal information table 310, the terminal side update unit 251 (extension determination unit) indicates that the user information 311 can be extended. Or using a CPU.
When the user authentication unit 230 determines that the user information 311 is set in the personal information table 310, the terminal side update unit 251 (first expiration date update unit) displays the validity indicated in the user information 311. A temporary update is performed using the CPU to an expiration date obtained by extending the time limit for a specific period. However, the terminal side update unit 251 does not provisionally update the expiration date when the user authentication unit 230 determines that the user ID input time has passed the expiration date.
Further, the terminal-side update unit 251 (second expiration date update unit) is used when the update determination result receiving unit 253 receives an update determination result 525a that notifies invalidity of temporary update of the expiration date, as will be described later. The expiration date after the temporary update shown in the person information 311 is returned to the expiration date before the temporary update using the CPU.
In addition, after the update determination result receiving unit 251 receives the update determination result 525a for notifying the temporary update of the expiration date by the update determination result receiving unit 253, the same user ID is input again to the terminal operation information input unit 220. When the user authentication unit 230 determines that the user information 311 is set in the personal information table 310, the expiration date indicated in the user information 311 is not temporarily updated.

  The update notification transmission unit 252 transmits an update notification 252a for notifying the temporary update of the expiration date by the terminal side update unit 251 to the center device 500 using the communication device.

The update determination result receiving unit 253 receives the update determination result 525a transmitted by the center device 500 using the communication device.
The update determination result 525a includes a notification of validity of the temporary update of the expiration date and a notification of invalidity of the temporary update of the expiration date.

The terminal-side personal information database 300 (personal information database unit) is a storage device that stores the personal information table 310 using a storage medium.
The personal information table 310 includes a plurality of personal information records as personal information, and a registration ID (specific person ID) and an expiration date are set in each personal information record. The personal information indicates a registration ID and an expiration date.

FIG. 4 is a functional configuration diagram of the center device 500 according to the first embodiment.
The functional configuration of the center device 500 in the first embodiment will be described below with reference to FIG.

The center device 500 includes a center-side personal information registration unit 510, an update notification processing unit 520, and a center-side personal information database 600.
The center device 500 is a predetermined device that receives the update notification 252a transmitted by the ID controller 200, and determines whether the temporary update of the expiration date is invalid when the update notification 252a is received. When the temporary update of the expiration date is valid, the center apparatus 500 transmits an update determination result 525a that notifies the validity of the temporary update of the expiration date to the ID controller 200. When the temporary update of the expiration date is invalid, the center apparatus 500 transmits an update determination result 525a for notifying the invalidity of the temporary update of the expiration date to the ID controller 200.

The center-side personal information registration unit 510 sets the personal information 611 input to the center device 500 in the personal information table 610. The personal information table 610 is stored in the center side personal information database 600. For example, the personal information 611 is input by an operator using a keyboard or a mouse. For example, the personal information 611 is input from a drive device in which a CD (Compact Disc), a DVD (Digital Versatile Disk), or the like in which the personal information 611 is recorded is set. Further, for example, the personal information 611 is input to the center device 500 when the communication device of the center device 500 receives the personal information 611 transmitted from another communication device. A keyboard, a mouse, a drive device, and a communication device are examples of the input device 901.
The center-side personal information registration unit 510 (personal information transmission unit) transmits the personal information 611 set in the personal information table 610 to the ID controller 200 using a communication device.

  The update notification processing unit 520 includes an update notification receiving unit 521, an update notification output unit 522, an update determination input unit 523, a center side update unit 524, and an update determination result transmission unit 525.

  The update notification receiving unit 521 receives the update notification 252a using a communication device.

  When the update notification receiving unit 521 receives the update notification 252a, the update notification output unit 522 outputs the contents of the temporary update of the expiration date to the output device 902. For example, the update notification output unit 522 displays the contents of the temporary update of the expiration date on a display device or prints using a printer. A display device and a printer are examples of the output device 902.

The update determination input unit 523 inputs the update determination result 523a from the input device 901.
Based on the content output by the update notification output unit 522, the operator determines whether to permit temporary update of the expiration date, and inputs the determination result to the input device 901 as the update determination result 523a. When it is determined that the temporary update of the expiration date is permitted, the update determination result 523a indicates the validity of the temporary update of the expiration date. When it is determined that the temporary update of the expiration date is not permitted, the update determination result 523a indicates the expiration date. Indicates invalid temporary update.

  The center side update unit 524 (expiration date management update unit) matches the user information 311 and the registration ID when an update valid command for instructing validity of the expiration date is input to the update determination input unit 523 as a determination result. The expiration date of the personal information 611 to be updated is updated using the CPU to the same expiration date as the user information 311.

  The update determination result transmission unit 525 (update invalid notification transmission unit) transmits the update determination result 525a to the ID controller 200 using a communication device.

The center-side personal information database 600 (personal information management database unit) is a storage device that stores the personal information table 610 using a storage medium.
The personal information table 610 includes a plurality of personal information records, and personal information 611 indicating a registration ID and an expiration date is set in each personal information record. The personal information 611 is transmitted to the ID controller 200 by the center side personal information registration unit 510.

FIG. 5 is a flowchart showing terminal operation control processing of the ID controller 200 in the first embodiment.
A process executed by the ID controller 200 when the user enters / exits the terminal device 100 will be described as a terminal operation control process with reference to FIG.
Each “˜unit” of the ID controller 200 executes each process (S110 to S150) described below using the CPU.

  When the user wants to unlock the electric lock door 410 and enter the room or update the personal information, he / she operates the entry / exit terminal device 100 to operate his / her ID (hereinafter referred to as “user ID”) and operation type ( Information such as “door unlocking operation” or “personal information update operation”) is input to the entry / exit terminal device 100 as terminal operation information 101.

First, an outline of the terminal operation control process (S110 to S150) will be described.
The terminal operation information input unit 220 inputs the terminal operation information 101 from the entry / exit terminal device 100 (S110).
The user authentication unit 230 compares the user ID included in the terminal operation information 101 with the personal information table 310 on the terminal side (S121), and determines whether the user ID is verification OK or verification NG (S122).
In the case of verification NG, the user authentication unit 230 displays “verification NG” on the entrance / exit terminal device 100 (S123), and the process ends.
In the case of collation OK, the user authentication unit 230 determines whether the validity period of the personal information (user information 311) that collates with the user ID has expired (S124).
If the expiration date of the user information 311 has expired, the user authentication unit 230 displays announcement information informing the expiration date on the entry / exit terminal device 100 (S125), and the process ends.
If the expiration date of the user information 311 has not expired, the user authentication unit 230 determines whether the expiration date of the user information 311 is near (S126). If the expiration date of the user information 311 is near, the expiration date has expired. Announcement information notifying that it is near is displayed on the entrance / exit terminal device 100 (S127). Furthermore, the user authentication unit 230 determines whether the operation type is “door unlocking operation” or “personal information update operation” (S130).
When the operation type is “door unlocking operation”, the door unlocking unit 240 unlocks the electric lock door 410 (S140).
When the operation type is “personal information update operation”, the user information update unit 250 updates the user information 311 (S150).

  Next, details of the terminal operation control process (S110 to S150) will be described.

<S110: Terminal Operation Information Input Process>
The terminal operation information input unit 220 inputs the terminal operation information 101 from the entry / exit terminal device 100. The terminal operation information 101 is input to the entrance / exit terminal device 100 by the user and includes a user ID, an operation type, and the like.
For example, the user brings an ID card in which his / her ID is recorded close to the authentication data reading device 110 of the entrance / exit terminal device 100 and presses the numeric keypad 120 of the entrance / exit terminal device 100 to perform “door unlocking operation”. One of the operations “Personal information update operation” is designated (for example, “Door unlock operation” when the “0” key is pressed, “Personal information update operation” when the “1” key is pressed). The authentication data reading device 110 reads the ID recorded on the ID card approached by the user as “user ID”, and sets the operation type designated by the user based on the numeric keypad 120 pressed by the user. Identify.
The user ID may be biometric information such as fingerprint information or other identification information. For example, the user sets his / her finger on the authentication data reading device 110 of the entrance / exit terminal device 100 which functions as a fingerprint reading device. The authentication data reader 110 reads fingerprint information from the user's finger as a “user ID”.
After S110, the process proceeds to S120.

<S120: Authentication processing>
The user authentication unit 230 compares the user ID included in the terminal operation information 101 input in S110 with the personal information table 310 on the terminal side, and stores the personal information (user information 311) that matches the user ID. Determine expiration date. The user authentication unit 230 permits (authorizes) authentication of the user when the user information 311 has not expired, and when the user ID does not match and when the user information 311 has expired. In this case, authentication is not permitted (not approved).
Details of S121 to S127 constituting the authentication process (S120) will be described below.

<S121>
The user authentication unit 230 acquires the user ID from the terminal operation information 101 input in S110, and requests the terminal side personal information database 300 to collate with the personal information table 310 of the user ID.
Upon receiving the verification request, the terminal-side personal information database 300 searches the personal information table 310 for personal information having a registration ID that matches the user ID, and uses the personal information as a verification result if there is such personal information. If there is no corresponding personal information, the fact is output to the user authentication unit 230 as a verification result.

<S122>
When personal information is output from the terminal-side personal information database 300 in S121, the user authentication unit 230 determines “verification is OK”. When personal information is not output from the terminal-side personal information database 300 in S121, The person authentication unit 230 determines “verification NG”.
Hereinafter, the personal information output from the terminal-side personal information database 300 at the time of “verification” is referred to as “user information 311”.
In the case of “verification OK”, the process proceeds to S124, and in the case of “verification NG”, the process proceeds to S123.

<S123>
In the case of “verification NG” in S122, the user authentication unit 230 instructs the entry / exit terminal device 100 to display “verification NG”, and the entry / exit terminal device 100 that has received the instruction has the input user ID “verification”. “NG” is displayed on the liquid crystal display 130. The entrance / exit terminal device 100 may output a sound for notifying “verification NG” or a buzzer sound from the speaker 140 together with the message display or instead of the message display.
After S123, the process ends.

<S124>
If “verification is OK” in S122, the user authentication unit 230 refers to the expiration date indicated in the user information 311 output from the terminal-side personal information database 300, and determines whether the expiration date of the user information 311 has expired. To do.
For example, the user information 311 indicates the date as an expiration date, and the user authentication unit 230 compares the current date (the input date of the terminal operation information 101) with the validity of the user information 311. Determine expiration.
If the user information 311 has expired (YES), the process proceeds to S125. If the user information 311 has not expired (NO), the process proceeds to S126.

<S125>
When the expiration date of the user information 311 has expired in S124 (YES), the user authentication unit 230 instructs the entry / exit terminal device 100 to announce the expiration date, and the entry / exit terminal device 100 that has received the instruction receives the user information. A message notifying that the expiration date 311 has expired is displayed on the liquid crystal display 130. The entrance / exit terminal device 100 may output a sound or a buzzer sound that notifies the expiration of the user information 311 together with the message display or instead of the message display.
After S125, the process ends.

<S126>
If the expiration date of the user information 311 has not expired in S124 (NO), the user authentication unit 230 determines whether the expiration date of the user information 311 is near.
For example, the user authentication unit 230 compares the remaining number of days until the expiration date with a predetermined number of days, and determines that the expiration date of the user information 311 is close when the remaining number of days of the expiration date is less than the predetermined number of days. .
If the expiration date of the user information 311 is near (YES), the process proceeds to S127. If the expiration date of the user information 311 is not near (NO), the process proceeds to S130.

<S127>
If the expiration date of the user information 311 is near in S126 (YES), the user authentication unit 230 instructs the entry / exit terminal device 100 to make an advance expiration announcement, and the entry / exit terminal device 100 that has received the instruction receives the user information 311. Is displayed on the liquid crystal display 130 to notify that the expiration date is near. The entrance / exit terminal device 100 may output a sound or a buzzer sound for notifying that the expiration date of the user information 311 is about to expire together with the message display or instead of the message display.
When the expiration date of the user information 311 is announced in advance, the user operates the entry / exit terminal device 100 to extend the expiration date of the user information 311 before the expiration date of the user information 311 expires. be able to. Thereby, the user can avoid that the expiration date of the user information 311 expires without knowing and cannot enter the room.
After S127, the process proceeds to S130.

<S130>
After S126 or S127, the user authentication unit 230 acquires the operation type from the terminal operation information 101 input in S110, and the acquired operation type is “door unlocking operation” or “personal information update operation”. Judge whether to show.
If the operation type is “door unlocking operation”, the process proceeds to S140. If the operation type is “personal information update operation”, the process proceeds to S150.

<S140: Door unlocking process>
When the operation type is “door unlocking operation” in S <b> 130, the user authentication unit 230 outputs an authentication permission 230 a to the door unlocking unit 240. Upon receiving the authentication permission 230a, the door unlocking unit 240 outputs an unlocking command 240a to the electric locking device 400, and the electric locking device 400 receiving the unlocking command 240a unlocks the electric locking door 410.
The user can enter the room from the electric lock door 410 by unlocking the electric lock door 410.
After S140, the process ends.

<S150: Personal information update process>
When the operation type is “personal information update operation” in S <b> 130, the user authentication unit 230 outputs the user information 311 to the user information update unit 250. Upon receiving the user information 311, the user information update unit 250 updates the user information 311. For example, the user information update unit 250 updates the expiration date of the user information 311 to an expiration date obtained by extending a specific period.
Details of S150 will be described separately.
After S150, the process ends.

FIG. 6 is a flowchart showing personal information update processing (S150) in the first embodiment.
S210 to S242 constituting the personal information update process (S150) will be described below with reference to FIG.
The user information update unit 250 executes processing described below using a CPU.

First, an outline of S210 to S242 constituting the personal information update process (S150) will be described.
When updating the personal information (S210), the terminal side update unit 251 confirms that the user information 311 can be updated (S211), and sets a timer (S220).
Thereafter, the terminal-side update unit 251 waits for input of an extension period (S230) until the timer detects a timeout (S221).
The terminal side update unit 251 temporarily updates the user information 311 by extending the validity period by the extension period (S231), and the update notification transmission unit 252 transmits the update notification 252a to the center device 500 (S232).
An update determination result 525a is transmitted from the center device 500 that has received the update notification 252a.
When the update determination result receiving unit 253 receives the update determination result 525a from the center device 500 (S210), the terminal-side update unit 251 determines whether the update determination result 525a indicates “update valid” (S240).
When the update determination result 525a indicates that the update is valid, the terminal-side update unit 251 updates the expiration date of the user information 311 (S241). When the update determination result 525a indicates “update invalid”, the user information 311 is updated. The temporary update of the expiration date is canceled (S242).

  Next, details of S210 to S242 constituting the personal information update process (S150) will be described.

<S210>
The terminal-side update unit 251 is “personal information update” when the user information 311 is output by the user authentication unit 230 and “update determination result reception” when the update determination result reception unit 253 receives the update determination result 525a. It is determined whether or not.
If it is “personal information update”, the process proceeds to S211. If it is “update determination result reception”, the process proceeds to S240.

<S211>
If it is “individual information update” time in S210, the terminal-side update unit 251 determines whether the user information 311 output by the user authentication unit 230 can be updated.
The terminal side update unit 251 determines that the user information 311 can be updated when the user information 311 has not been invalidated in the past, and when the user information 311 has been invalidated in the past. It is determined that the user information 311 cannot be updated. A method for confirming whether the user information 311 has been invalidated in the past will be described later.
When the user information 311 can be updated, the terminal side update unit 251 instructs the entry / exit terminal device 100 to display an extension period input request, and the entry / exit terminal device 100 that has received the instruction determines the expiration date of the user information 311 A message requesting input of the extended period is displayed on the liquid crystal display 130. The user who has confirmed the message displayed on the liquid crystal display 130 presses the numeric keypad 120 and inputs an extension period (number of days or months) of the user information 311 to the entry / exit terminal device 100. The entrance / exit terminal device 100 outputs the input extension period to the terminal side update unit 251.
If the user information 311 is not updatable, the terminal side update unit 251 instructs the entry / exit terminal device 100 to display that the user information 311 cannot be updated, and the entry / exit terminal device 100 that receives the instruction cannot extend the expiration date of the user information 311. A message notifying that is displayed on the liquid crystal display 130.
If the user information 311 can be updated (YES), the process proceeds to S220. If the user information 311 cannot be updated (NO), the process ends.

<S220>
When the user information 311 can be updated in S211 (YES), the terminal side update unit 251 sets a timer for a predetermined time (for example, 3 minutes).
After S220, the process proceeds to S221.

<S221>
The terminal side update unit 251 determines whether a timeout is detected by the timer set in S220.
If a timeout has been detected (YES), the process ends. If a timeout has not been detected (NO), the process proceeds to S230.

<S230>
When the timeout is not detected in S221 (NO), the terminal side update unit 251 determines whether the extension period of the expiration date of the user information 311 is input to the entry / exit terminal device 100. When the extension period of the expiration date of the user information 311 is output from the entry / exit terminal device 100, the terminal side update unit 251 determines that the extension period has been input, and the validity of the user information 311 from the entry / exit terminal device 100 is determined. When the extension period of the deadline is not output, it is determined that the extension period is not input.
When the extension period is input (YES), the process proceeds to S231, and when the extension period is not input (NO), the process returns to S221.

<S231: Temporary Update Processing>
When the extension period is input in S230 (YES), the terminal side update unit 251 requests the terminal side personal information database 300 to temporarily update the expiration date of the user information 311 and receives the request from the terminal side personal information database 300. Will temporarily update the user information 311 by extending the validity period of the user information 311 as follows.
In addition, the terminal side update unit 251 instructs the entry / exit terminal device 100 to display a temporary update, and the entry / exit terminal device 100 that receives the instruction displays a message notifying that the expiration date of the user information 311 has been provisionally updated. This is displayed on the display 130.

FIG. 7 is a diagram showing the personal information table 310 according to the first embodiment.
In FIG. 7, the personal information table 310 shows each of a plurality of personal information as one record (one line), and the record of each personal information is “registration ID” “expiration date” “temporary update flag” “expiration date before temporary update”. Indicates.
In the following, for the setting value of the “temporary update flag”, “0” means “no temporary update”, “1” means “provisional update in progress”, and “2” means “temporary update not possible”.
The user information 311 is a record in which “registration ID” matches the user ID.

  In S <b> 211 of FIG. 6, the terminal side update unit 251 determines that the user information 311 can be updated when “0 (no provisional update)” is set in the “provisional update flag” of the user information 311. If “1 (provisional update)” or “2 (provisional update not possible)” is set, it is determined that the user information 311 cannot be updated.

  In S231 of FIG. 6, the terminal-side personal information database 300 changes the “expiration date” of the user information 311 to the previous date for the extension period, and sets “1 (provisionally updated)” to the “temporary update flag”. Is set, the “expiration date before update” is set to the “expiration date before update”, and the expiration date of the user information 311 is temporarily updated.

  After S231, the process proceeds to S232.

<S232: Update notification transmission process>
After S231, the update notification transmission unit 252 transmits the update notification 252a to the center device 500.
For example, the update notification 252a indicates each piece of information after provisional update set in the identification information of the ID controller 200 and the user information 311.
After S232, the process ends once, and the user information update unit 250 waits for the update determination result 525a to be transmitted from the center device 500.

<S240>
In S210, when it is “update determination result reception”, the terminal side update unit 251 determines whether or not the update determination result 525a received by the update determination result reception unit 253 indicates “update valid”.
If the update determination result 525a indicates “update valid” (YES), the process proceeds to S241. If the update determination result 525a indicates “update invalid” (NO), the process proceeds to S242.

<S241: This update process>
When the update determination result 525a indicates “update valid” in S240 (YES), the terminal-side update unit 251 requests the terminal-side personal information database 300 to update the expiration date of the user information 311 to the terminal that has received the request. The side personal information database 300 updates the expiration date of the user information 311 as follows.
In FIG. 7, the terminal-side personal information database 300 changes the “temporary update flag” of the user information 311 from “1 (provisional update)” to “0 (no temporary update)” Is cleared, and the expiration date of the user information 311 is updated.
After S241, the process ends.

<S242: Update cancellation processing>
When the update determination result 525a indicates “update invalid” in S240 (NO), the terminal side update unit 251 requests the terminal side personal information database 300 to cancel the temporary update of the expiration date of the user information 311 and receives the request. The terminal-side personal information database 300 cancels the temporary update of the expiration date of the user information 311 as follows.
In FIG. 7, the terminal-side personal information database 300 changes the “expiration date” of the user information 311 to a setting value of “expiration date before provisional update” and sets the “temporary update flag” to “1 (provisionally updated)”. Is changed to “2 (provisional update not possible)”, “expiration date before temporary update” is cleared, and temporary update of the expiration date of the user information 311 is canceled.
After S242, the process ends.

FIG. 8 is a flowchart showing the update notification process of the center device 500 in the first embodiment.
The processing of the center device 500 for the update notification 252a transmitted from the ID controller 200 will be described below as update notification processing based on FIG.
Each “˜unit” of the center device 500 executes each process (S310 to S333) described below using the CPU.

First, an overview of the update notification process (S310 to S333) will be described.
When the update notification receiving unit 521 receives the update notification 252a from the ID controller 200 (S310), the update notification output unit 522 displays the update notification 252a on the display device (S320).
The operator who confirms the update notification 252a determines whether to permit updating of the user information 311 and inputs the determination result to the center apparatus 500 as the update determination result 523a.
When the update determination result 523a is input (S310), the update determination input unit 523 determines whether the update determination result 523a indicates “update permission” (S330).
When the update determination result 523a indicates “update permission”, the center side update unit 524 updates the expiration date of the user information 311 in the personal information table 610 (S331), and the update determination result transmission unit 525 indicates “update valid”. Is sent to the ID controller 200 (S332).
When the update determination result 523a does not indicate “update permission”, the update determination result transmission unit 525 transmits the update determination result 525a indicating “update invalid” to the ID controller 200 (S333).

  Next, details of the update notification process (S310 to S333) will be described.

<S310>
The update notification receiving unit 521 determines whether the update notification 252a is received from the ID controller 200, and the update determination input unit 523 determines whether the update determination result 523a is input by the operator.
When the update notification reception unit 521 receives the update notification 252a, the process proceeds to S320, and the update determination result 523a is input to the update determination input unit 523. If so, the process proceeds to S330.

<S320>
When it is “update notification reception” time in S310, the update notification output unit 522 displays the temporary update content of the user information 311 on the display device based on the update notification 252a. The update notification output unit 522 may print the temporary update contents of the user information 311 using a printer, instead of displaying on the display device or instead of displaying on the display device. Further, the update notification output unit 522 may output the temporary update content of the user information 311 to another output device 902.
For example, the update notification 252a indicates the identification information of the ID controller 200, the registration ID of the user information 311, the expiration date after provisional update, the expiration date before provisional update, and the like, and the update notification output unit 522 indicates the identification information of the ID controller 200. The building 810 is identified based on the name of the building 810, and each piece of information shown in the name of the building 810 and the update notification 252a is displayed on the display device.
Also, for example, the update notification output unit 522 acquires personal information having a registration ID that matches the registration ID of the user information 311 from the center-side personal information database 600, and sets each piece of information set in the acquired personal information as the building 810. And the expiration date before and after the temporary update are displayed on the display device. In the personal information stored in the center-side personal information database 600, for example, a user name and a user type (administrator, general user, etc.) are set.
After S320, the process ends once, and the update determination input unit 523 waits for the operator to input the update determination result 523a.
The operator confirms the temporary update contents of the user information 311, determines whether or not temporary update of the user information 311 is permitted, and inputs the determination result to the input device 901 of the center apparatus 500 as the update determination result 523 a.

<S330>
If it is “update determination result input” in S310, the center side update unit 524 determines whether the update determination result 523a indicates “update permission” (update valid instruction).
When the update determination result 523a indicates “update permission” (YES), the process proceeds to S331, and when the update determination result 523a indicates “update not permitted” (NO), the process proceeds to S333.

<S331>
When the update determination result 523a indicates “update permission” in S330 (YES), the center side update unit 524 requests the center side personal information database 600 to update the expiration date of the user information 311 in the personal information table 610. . Upon receiving the request, the personal information database 600 on the center side identifies personal information 611 having a registration ID that matches the registration ID of the user information 311 from the personal information table 610, and sets the expiration date of the identified personal information 611 to the user information. Update to the same expiration date as 311.
After S331, the process proceeds to S332.

<S332>
After S331, the update determination result transmission unit 525 returns an update determination result 525a indicating “update valid” to the ID controller 200 that transmitted the update notification 252a.
After S332, the process ends.

<S333>
When the update determination result 523a indicates “update not permitted” (update invalid command) in S330 (NO), the update determination result transmission unit 525 transmits the update notification 252a with the update determination result 525a indicating “update invalid”. A reply is sent to the ID controller 200.
After S333, the process ends.

As described above, in the entrance / exit management system 800 according to Embodiment 1, the entrance / exit terminal device 100 notifies the user in advance that the personal information has expired, and the user enters an extension of the expiration date before the expiration date. The exit terminal device 100 can be operated to make a request.
Further, even when the work for extending the expiration date at the management center 820 (operator's judgment) is delayed, the ID controller 200 temporarily extends the expiration date, and the user waits for the expiration date to be extended at the management center 820. It is not necessary.
Further, when the management center 820 determines that the temporary extension of the expiration date is not permitted, the ID controller 200 cancels the temporary extension of the expiration date to maintain consistency with the center-side personal information database 600 and to maintain security. be able to.

The user may input the personal identification number (or password) together with the user ID to the entrance / exit terminal device 100 to unlock the electric lock door 410.
At this time, the ID controller 200 sets the user information 311 having the registration ID that matches the user ID and the registration password that matches the input password in the personal information table 310 and the validity of the user information 311. When the time limit has not expired, the electric lock door 410 is unlocked.
The expiration date set in the user information 311 means the expiration date of the user ID, the expiration date of the personal identification number, and the expiration date of the personal information.
The personal identification number is an example of information for identifying the user (user ID).
The user ID and password (or password) are an example of authentication information used for authentication processing.
In the description of the first embodiment, “user ID” may mean a personal identification number in addition to the user ID.

  Further, the extension period of the expiration date may not be specified by the user and may be a predetermined period (for example, one week, one month) determined in advance.

FIG. 9 is a diagram illustrating an example of hardware resources of the ID controller 200 and the center device 500 according to the first embodiment.
In FIG. 9, the ID controller 200 and the center device 500 include a CPU 911 (also referred to as a central processing unit, a central processing unit, a processing unit, an arithmetic unit, a microprocessor, a microcomputer, and a processor) that executes a program. The CPU 911 is connected to the ROM 913, the RAM 914, the communication board 915, and the magnetic disk device 920 via the bus 912, and controls these hardware devices. Instead of the magnetic disk device 920, another storage device (for example, a semiconductor memory such as a RAM or a flash memory) may be used.
The RAM 914 is an example of a volatile memory. The storage medium of the ROM 913 and the magnetic disk device 920 is an example of a nonvolatile memory. These are examples of a storage device, a storage device, or a storage unit. A storage device in which input data is stored is an example of an input device, an input device, or an input unit, and a storage device in which output data is stored is an example of an output device, an output device, or an output unit.
The communication board 915 is an example of an input / output device, an input / output device, or an input / output unit.

  The communication board 915 is wired or wirelessly connected to a communication network such as a LAN (Local Area Network), the Internet, a WAN (Wide Area Network) such as ISDN, and a telephone line.

  The magnetic disk device 920 stores an OS 921 (operating system), a program group 923, and a file group 924. The programs in the program group 923 are executed by the CPU 911 and the OS 921.

  The program group 923 stores a program for executing a function described as “˜unit” in the embodiment. The program is read and executed by the CPU 911.

In the file group 924, in the embodiment, result data such as “determination result”, “calculation result of”, “processing result of” when executing the function of “to part”, “to part” The data to be passed between programs that execute the function “,” other information, data, signal values, variable values, and parameters are stored as items “˜file” and “˜database”. Information is an example of information included in the file group 924.
The “˜file” and “˜database” are stored in a recording medium such as a disk or a memory. Information, data, signal values, variable values, and parameters stored in a storage medium such as a disk or memory are read out to the main memory or cache memory by the CPU 911 via a read / write circuit, and extracted, searched, referenced, compared, and calculated. Used for CPU operations such as calculation, processing, output, printing, and display. During these CPU operations, information, data, signal values, variable values, and parameters are temporarily stored in the main memory, cache memory, and buffer memory.
In addition, arrows in the flowcharts described in the embodiments mainly indicate input / output of data and signals, and the data and signal values are recorded in the memory of the RAM 914, the magnetic disk of the magnetic disk device 920, and other recording media. . Data and signal values are transmitted online via a bus 912, signal lines, cables, or other transmission media.

  In addition, what is described as “˜unit” in the embodiment may be “˜circuit”, “˜device”, “˜device”, and “˜step”, “˜procedure”, “˜”. Processing ". That is, what is described as “˜unit” may be realized by firmware stored in the ROM 913. Alternatively, it may be implemented only by software, or only by hardware such as elements, devices, substrates, and wirings, by a combination of software and hardware, or by a combination of firmware. Firmware and software are stored as programs on a magnetic disk or other recording medium. The program is read by the CPU 911 and executed by the CPU 911. That is, the program causes the computer to function as “to part”. Alternatively, the procedure or method of “to part” is executed by a computer.

In the first embodiment, the following entrance / exit management system 800 has been described.
In the entrance / exit management system 800, the center device 500 centrally manages personal information.
At the time of entering / exiting the entrance / exit terminal device 100 using a card or finger operation, the ID controller 200 performs an unlocking operation of the electric lock. Further, the ID controller 200 makes an advance announcement of expiration using the entry / exit terminal device 100 when the expiration date of information (authentication data, personal password, etc.) having the expiration date of personal information is near.
When receiving a prior announcement, the user operates the entrance / exit terminal device 100 to extend the expiration date.
When the extension operation determined for the entry / exit terminal device 100 is performed, the ID controller 200 performs a user authentication process to extend the expiration date.

The entrance / exit management system 800 can notify the user of the necessity of updating the expiration date or the password by using the prior announcement. With this announcement, the user can determine that update processing is necessary.
The user can change the personal information having the expiration date in real time, and can avoid the delay of the update due to the processing delay or absence of the center side, which has been a conventional problem. Since the user can perform the update process at the entrance / exit terminal device 100 in the room, it is not necessary to go to a special place to update the personal information. That is, the entrance / exit management system 800 can reduce the burden on the user. In addition, the entrance / exit management system 800 can maintain a certain level of security by confirming the identity by an authentication process before updating personal information.

Embodiment 2. FIG.
A mode in which the authority to update the personal information is different for each user will be described.
Hereinafter, items different from the first embodiment will be mainly described, and items that are not described are the same as those of the first embodiment.

FIG. 10 is a diagram showing the personal information table 310 according to the second embodiment.
The personal information table 310 according to the second embodiment will be described below with reference to FIG.
Each record (personal information) of the personal information table 310 includes “registration ID”, “expiration date”, “temporary update flag”, “expiration date before provisional update”, “password”, “user type”, “update availability” Is set.
The “password” is a predetermined number associated with the registration ID, and is input to the entrance / exit terminal device 100 together with the registration ID by the user when the electric lock door 410 is unlocked.
“User type” indicates whether the user identified by the registration ID is “administrator” or “general user” (or other user).
“Updating / disabling” indicates whether or not the user identified by the registration ID has the authority to update the “expiration date” and “password”. In the following description, “1” indicates “with update authority” and “0” indicates “without update authority”.
For example, the administrator identified by “a0001” has the authority to update both “expiration date (item with high security)” and “password (item with low security)”. The general user identified by “a0002” has the authority to update the “password”, but does not have the authority to update the “expiration date”.

FIG. 11 is a flowchart showing personal information update processing (S150) in the second embodiment.
The personal information update process (S150) in the second embodiment will be described below with reference to FIG.

In the personal information update process (S150) in the second embodiment, in addition to the process in the first embodiment (see FIG. 6), S222, S250, and S251 are executed, and S211b that is partially different from S211 in the first embodiment is executed. Is done.
Hereinafter, S211b, S222, S250, and S251 will be described, and descriptions of other processes will be omitted.

In the terminal operation information input process (S110), the user inputs the personal identification number as the terminal operation information 101 together with the user ID and the operation type (personal information update) to the entrance / exit terminal device 100.
Further, the operation type input by the user indicates either “expiration date” or “password” as an update target of personal information.

<S211b>
If it is “individual information update” time in S210, the terminal-side update unit 251 determines whether the user information 311 output by the user authentication unit 230 can be updated.
In the terminal side update unit 251, “1 (with update authority)” is set in the “update availability” of the user information 311, and “0 (before temporary update)” is set in the “temporary update flag”. In this case, it is determined that the user information 311 can be updated.
For example, in FIG. 10, when the registration ID of the user information 311 is “a0001” and the update target is “expiration date”, the terminal-side update unit 251 determines that the user information 311 can be updated.
For example, when the registration ID of the user information 311 is “a0002” and the update target is “expiration date”, the terminal-side update unit 251 determines that the user information 311 cannot be updated.
For example, when the registration ID of the user information 311 is “a0002” and the update target is “password”, the terminal-side update unit 251 determines that the user information 311 can be updated.
When the user information 311 can be updated, the terminal side update unit 251 displays an input request message on the entry / exit terminal device 100. When the update target is the “expiration date”, the entry / exit terminal device 100 displays a message requesting input of the extension period of the expiration date on the liquid crystal display 130. When the update target is “password”, the entrance / exit terminal device 100 displays a message requesting input of a new password on the liquid crystal display 130. The user inputs an extension period or a new password into the entrance / exit terminal device 100 in accordance with the displayed message.
If the user information 311 can be updated (YES), the process proceeds to S220. If the user information 311 cannot be updated (NO), the process ends.

<S220 to S221>
When the user information 311 can be updated in S211 (YES), as in the first embodiment, the terminal side update unit 251 sets a timer (S220) and determines whether time-out has occurred (S221).
If timed out (YES), the process ends. If timed out (NO), the process proceeds to S222.

<S222>
When the time-out has not occurred in S221 (NO), the terminal-side update unit 251 determines whether the update target is an “expiration date” or a “password”.
When the update target is “expiration date”, the process proceeds to S230, and when the update target is “password”, the process proceeds to S250.

<S250>
When the update target is “password” in S222, the terminal-side update unit 251 determines whether a new password is input to the entry / exit terminal device 100.
If a new password has been input (YES), the process proceeds to the update determination unit 251. If a new password has not been input (NO), the process returns to S221.

<S251>
When a new password is input in S222 (YES), the terminal-side update unit 251 requests the terminal-side personal information database 300 to update the password of the user information 311 and receives the request from the terminal-side personal information database 300. Updates the password of the user information 311 to the new password entered.
Further, the terminal side update unit 251 displays a message notifying that the password has been updated on the entrance / exit terminal device 100.
After S251, the process proceeds to S232.

<S232>
The update notification transmission unit 252 transmits the update notification 252a to the center device 500.
The update notification 252a indicates an update target in addition to the identification information of the ID controller 200 and the setting information of the updated user information 311.

FIG. 12 is a flowchart illustrating the update notification process of the center device 500 according to the second embodiment.
The update notification process of the center device 500 in the second embodiment will be described below based on FIG.

In the update notification process of the center device 500 in the second embodiment, S311 and S340 are executed in addition to the process in the first embodiment (see FIG. 8).
Hereinafter, S311 and S340 will be described, and description of other processes will be omitted.

<S311>
When it is “update notification reception” time in S310, the update notification reception unit 521 determines whether the update target indicated in the update notification 252a is “expiration date” or “password”.
When the update target is “expiration date”, the process proceeds to S320, and when the update target is “password”, the process proceeds to S340.

<S340>
When the update target is “password” in S 311, the center side update unit 524 requests the center side personal information database 600 to update the password number of the user information 311 in the personal information table 610. Upon receiving the request, the personal information database 600 on the center side identifies personal information 611 having a registration ID that matches the registration ID of the user information 311 from the personal information table 610, and specifies the personal identification number of the identified personal information 611 as user information. Update to the same password as 311.
After S340, the process ends.

  In the second embodiment, the entrance / exit management system 800 can determine whether or not the personal information can be updated according to the user type (administrator, general user, etc.).

Embodiment 3 FIG.
A mode in which the administrator of the building 810 extends the expiration date of the general user will be described.
In the following, items different from the second embodiment will be mainly described, and items omitted will be the same as those in the second embodiment.

FIG. 13 is a flowchart showing personal information update processing (S150) in the third embodiment.
The personal information update process (S150) in the third embodiment will be described below based on FIG.

In the personal information update process (S150) in the third embodiment, in addition to the process in the second embodiment (see FIG. 11), S223 and S224 are executed, and S222b that is partially different from S222 in the second embodiment is executed. .
Hereinafter, S222b, S223, and S224 will be described, and descriptions of other processes will be omitted.

In the terminal operation information input process (S110), the operation type input by the user is any one of “self-expiration date”, “expiration date of other person”, and “password” as an update target of personal information. Shall be shown.
When the user information 311 can be updated in S211b, the terminal-side update unit 251 causes the entry / exit terminal device 100 to display an input request message. When the update target is “self expiration date”, the entrance / exit terminal device 100 displays a message requesting input of an extension period of the expiration date on the liquid crystal display 130. When the update target is “the validity period of the other person”, the entry / exit terminal device 100 displays a message requesting input of the other person's ID and the extension period of the validity period on the liquid crystal display 130. When the update target is “password”, the entrance / exit terminal device 100 displays a message requesting input of a new password on the liquid crystal display 130. In response to the displayed message, the user inputs the other person's ID, the extension period, and the password into the entrance / exit terminal device 100.

<S222b>
When the timeout has not occurred in S221 (NO), the terminal-side update unit 251 determines whether the update target is the “self-expiration date”, the “expiration date of another person”, or the “password”.
If the update target is “self-expiration date”, the process proceeds to S230. If the update target is “expiration date of another person”, the process proceeds to S223. If the update target is “password”, The process proceeds to S250.

<S223>
If the update target is “another person's expiration date” in S222b, the terminal-side update unit 251 determines whether the other person's ID has been input to the entry / exit terminal device 100.
When the other person's ID is input (YES), the process proceeds to S224, and when the other person's ID is not input (NO), the process returns to S221.

<S224>
When the other person's ID is input in S223 (YES), the terminal side update unit 251 acquires personal information having a registration ID that matches the other person's ID from the terminal side personal information database 300.
The personal information acquired in S224 is treated as “user information 311” in the subsequent processing.
After S224, the process proceeds to S230.

  According to the third embodiment, a user who does not have the authority to update the expiration date can update the expiration date by requesting the administrator of the building 810 without applying to the management center 820 by telephone or mail. can do.

In the third embodiment, the following entrance / exit management system 800 has been described.
The ID controller 200 authenticates whether or not the administrator is permitted to perform the extension operation in order to prevent a person who cannot perform the extension operation from being performed without knowing or intentionally performing the extension operation. Information regarding whether or not the user is an administrator can be registered in the personal information of the center device 500.
As a result, unauthorized update processing can be prevented and certain security can be maintained. However, it is not necessary to authenticate the administrator for personal information such as a personal identification number.

Embodiment 4 FIG.
A mode in which the maximum period during which the expiration date can be extended is determined for each type of authentication process (combination of authentication information) will be described.
Hereinafter, items different from the third embodiment will be mainly described, and items omitted from the description will be the same as those of the third embodiment.

FIG. 14 is a diagram showing a personal information table 310, registered fingerprint data 320, and extendable period information 330 according to the fourth embodiment.
The personal information table 310, registered fingerprint data 320, and extendable period information 330 in the fourth embodiment will be described below with reference to FIG.

Each record (personal information) in the personal information table 310 is associated with registered fingerprint data 320.
The registered fingerprint data 320 indicates user fingerprint data (an example of biometric information) identified by a registration ID. The registered fingerprint data 320 is registered in advance.
The extendable period information 330 indicates the maximum extension period of the expiration date for each type of authentication process (combination of authentication information). The extendable period information 330 is determined in advance.
Hereinafter, when authentication is permitted only with an ID (an example of a specific person ID) (security level is low), the extended maximum period is “one month”, and when authentication is permitted only with a fingerprint data (an example of a specific person ID) ( The maximum extension period for “security level” is “2 months”, and the maximum extension period for both cases where authentication is permitted for both ID and fingerprint data (high security level) is “3 months”.

FIG. 15 is a flowchart showing personal information update processing (S150) in the fourth embodiment.
The personal information update process (S150) in the fourth embodiment will be described below with reference to FIG.

In the personal information update process (S150) in the fourth embodiment, S230b that is partially different from S230 in the third embodiment (see FIG. 13) is executed.
Hereinafter, S230b will be described, and description of other processes will be omitted.

  In the authentication process (S120) (see FIG. 5), ID, fingerprint data, or ID + fingerprint data are collated, and authentication permission is determined. ID and fingerprint data are examples of information (user ID) for identifying a user.

<S230b>
The terminal side update unit 251 determines whether or not the extension period of the expiration date of the user information 311 is input to the entry / exit terminal device 100.
When the extension period is input, the terminal side update unit 251 determines that the input extension period is the longest based on the information verified in the authentication process (S120) and the predetermined extension possible period information 330 (see FIG. 14). It is determined whether the period is within the period range.
When the extension period within the maximum period is not input (for example, the maximum extension period is “1 month” and the input extension period is “2 months”), the terminal side update unit 251 displays the extension period again. The entry / exit terminal device 100 that has received the instruction displays a message on the liquid crystal display 130 requesting an input for an extended period within the longest period.
When the extension period within the longest period is input (YES), the process proceeds to S231, and when the extension period within the longest period is not input (NO), the process returns to S221.

  In the fourth embodiment, the ID controller 200 can set the upper limit of the period for extending the expiration date according to the type of authentication processing.

In the fourth embodiment, the following entrance / exit management system 800 has been described.
When receiving a prior announcement, the user operates the entrance / exit terminal device 100 to extend the expiration date.
In the entrance / exit terminal device 100, after the determined extension operation, the authentication operation is performed and the expiration date is extended. A security level is provided for the authentication operation. The extension period is determined according to the level of 1 month for the card only, 2 months for the finger only, and 3 months for both the card and the finger.
The extension period for each level can be set in the database of the center apparatus 500 and can be changed. The extended expiration date is also reflected in the personal information of the center apparatus 500. Since the personal information can be updated by the entry / exit terminal device 100, the convenience for the user is improved. In addition, since a dedicated device for updating personal information is unnecessary, it can contribute to cost reduction.

1 is a configuration diagram of an entrance / exit management system 800 according to Embodiment 1. FIG. FIG. 3 is an external view of an entrance / exit terminal device 100 according to the first embodiment. FIG. 3 is a functional configuration diagram of an ID controller 200 in the first embodiment. FIG. 3 is a functional configuration diagram of a center device 500 in the first embodiment. 5 is a flowchart showing terminal operation control processing of the ID controller 200 in the first embodiment. 5 is a flowchart showing personal information update processing (S150) in the first embodiment. FIG. 3 shows a personal information table 310 in the first embodiment. 5 is a flowchart showing an update notification process of the center device 500 in the first embodiment. 3 is a diagram illustrating an example of hardware resources of an ID controller 200 and a center device 500 according to Embodiment 1. FIG. FIG. 11 shows a personal information table 310 in the second embodiment. 9 is a flowchart showing personal information update processing (S150) in the second embodiment. 9 is a flowchart showing an update notification process of the center device 500 in the second embodiment. 10 is a flowchart showing personal information update processing (S150) in the third embodiment. The figure which shows the personal information table 310 in Embodiment 4, the registration fingerprint data 320, and the extension possible period information 330. FIG. The flowchart which shows the personal information update process (S150) in Embodiment 4.

Explanation of symbols

  DESCRIPTION OF SYMBOLS 100 Entrance / exit terminal device, 101 Terminal operation information, 110 Authentication data reader, 120 Numeric keypad, 130 Liquid crystal display, 140 Speaker, 200 ID controller, 210 Terminal side personal information registration part, 220 Terminal operation information input part, 230 User authentication , 230a authentication permission, 240 door unlocking unit, 240a unlocking command, 250 user information update unit, 251 terminal side update unit, 252 update notification transmission unit, 252a update notification, 253 update determination result receiving unit, 300 terminal side Personal information database, 310 Personal information table, 311 User information, 320 Registered fingerprint data, 330 Extendable period information, 400 Electric lock device, 410 Electric lock door, 500 Center device, 510 Center side personal information registration unit, 520 Update notification Processing unit, 521 update Knowledge receiving unit, 522 Update notification output unit, 523 Update determination input unit, 523a Update determination result, 524 Center side update unit, 525 Update determination result transmission unit, 525a Update determination result, 600 Center side personal information database, 610 Personal information table , 611 Personal information, 800 Entrance / exit management system, 801 communication line, 810, 810a, 810b, 810c building, 820 management center, 901 input device, 902 output device, 911 CPU, 912 bus, 913 ROM, 914 RAM, 915 communication Board, 920 magnetic disk device, 921 OS, 923 program group, 924 file group.

Claims (9)

A personal information database unit for storing a specific person ID for identifying a specific person as personal information indicating the information of the specific person and the expiration date of the personal information using a storage medium;
A user ID input unit for inputting a user ID for identifying the user from the input device;
Whether or not the user information is stored in the personal information database unit by using personal information indicating a specific user ID that matches the user ID input in the user ID input unit as user information, or a CPU (Central Processing Unit). A user ID determination unit to determine using,
When the user ID determination unit determines that the user information is stored, a first update is performed using the CPU to an expiration date obtained by extending the expiration date indicated by the user information for a specific period. An expiration date update section;
An update notification transmission unit for transmitting an update notification for notifying update of the expiration date by the first expiration date update unit using a communication device;
When it is a predetermined device that receives an update notification transmitted by the update notification transmission unit, and when the update notification is received, it is determined whether the update of the expiration date is invalid, and the update of the expiration date is invalid An update invalidity notification receiving unit that receives the update invalidity notification transmitted by a predetermined device that transmits an update invalidity notification for notifying the invalidity of the update of the expiration date,
A second expiration date updating unit that, when the update invalidity notification is received by the update invalidity notification receiving unit, returns the updated expiration date indicated in the user information to the expiration date before the update using the CPU; An expiration date update device characterized by comprising: The personal information further indicates whether the expiration date can be extended,
The expiration date update device includes:
When it is determined by the user ID determination unit that the user information is stored, the user ID determination unit includes an extension determination unit that determines whether the user information indicates that the expiration date can be extended using a CPU,
The validity period according to claim 1, wherein the first validity period update unit updates the validity period when the extension determination unit determines that the user information indicates that the validity period can be extended. Deadline update device. Each of the personal information indicates a plurality of specific person IDs, and the specific period is associated with a combination of specific person IDs, and a maximum period is predetermined.
The user ID input unit inputs one or more user IDs,
The first expiration date update unit specifies a maximum period of the specific period based on a combination of user IDs input to the user ID input unit, and the expiration date is within a range of the specified maximum period. The expiration date update device according to claim 1, wherein the expiration date is updated. The user ID input unit further inputs a second user ID different from the user ID,
4. The first expiration date update unit updates an expiration date indicated in personal information indicating a specific user ID that matches the second user ID. The expiration date update device described. The first expiration date updating unit receives the update invalidity notification by the update invalidity notification receiving unit, and then the user ID is input again to the user ID input unit, and the user ID determination unit The expiration date update device according to any one of claims 1 to 4, wherein when it is determined that the user information is stored, the expiration date indicated in the user information is not updated. The expiration date update device includes:
When the user ID determination unit determines that the user information is stored, the expiration date determination is performed by using the CPU to determine whether the input time of the user ID is within the expiration date indicated in the user information Part
2. The validity according to claim 1, wherein the first validity period update unit updates the validity period when the validity period determination unit determines that the input time of the user ID is within the validity period. Deadline update device. The expiration date update device according to any one of claims 1 to 5,
When the user ID determination unit determines that the user information is stored, the expiration date determination is performed by using the CPU to determine whether the input time of the user ID is within the expiration date indicated in the user information And
The door unlocking unit that unlocks the electric lock of the door locked with an electric lock using a CPU when the expiration date determining unit determines that the input time of the user ID is within the expiration date. And an entry / exit management device. An entrance / exit management system comprising the entrance / exit management device according to claim 7 and the predetermined device,
The predetermined apparatus is:
An update notification receiving unit for receiving the update notification using a communication device;
When the update notification is received by the update notification receiving unit, an update notification output unit that outputs the update content of the expiration date to an output device;
After an update content of the expiration date is output by the update notification output unit, when an update invalid instruction instructing invalidation of the update of the expiration date is input to the input device, the update invalidity notification is sent to the entry / exit management device An entry / exit management system, comprising: an update invalidity notification transmission unit that transmits an image using a communication device. The entrance / exit management device includes:
A personal information receiving unit that receives personal information transmitted from the predetermined device using a communication device, and stores the received personal information in the personal information database unit;
The predetermined apparatus is:
A personal information management database unit for storing personal information transmitted to the entrance / exit management device using a storage medium;
A personal information transmission unit that transmits personal information stored in the personal information management database unit to the entrance / exit management device using a communication device;
After an update content of the expiration date is output by the update notification output unit, when an update effective command for instructing the validity of the update of the expiration date is input to the input device, it is stored in the personal information management database unit An expiration date management update unit that updates the expiration date of the personal information that is personal information and the user information and the specific user ID match with the expiration date after the update of the user information using a CPU. The entrance / exit management system according to claim 8.

Images