JP5614937B2 - Access control system - Google Patents

Description

  The present invention relates to an access control system, and in particular, when an IC card or the like is used in an automatic ticket gate or a gate, the IC card or the like is compared with the owner, and if there is a mismatch, the owner's terminal is notified. It is related with the access control system which determines and measures content according to the reply content with respect to the said notification from an owner.

  An “access control system” is an information recording medium that is used when a user uses an information recording medium such as an IC card, tag, mobile phone (hereinafter referred to as “IC card etc.”) in an automatic ticket gate or a gate. This refers to a system that performs access processing with a system, determines whether the use is valid, takes appropriate measures, and controls the access processing related to use.

  The following Patent Documents 1 to 4 can be cited as prior art documents disclosing the prior art related to the access control system.

  Patent Document 1 discloses an information recording medium processing apparatus. The information recording medium processing apparatus includes face data of an owner of the information recording medium stored in advance on an information recording medium such as an IC card, and a user's face imaged by a camera or the like when the information recording medium is used. Only when the two face data are matched with each other, the necessary processing for permitting the use of the information recording medium is performed only when the two face data match. Therefore, when the two face data do not match, use of the information recording medium is not permitted. The permission or non-permission of use of the recording information medium is strictly determined at the time of use.

  Patent Document 2 discloses an automatic ticket gate. This automatic ticket gate uses the commuter pass to pass the passage, and the actual user's face data registered in the commuter pass and the actual use captured by the camera etc. The user's face data is collated, the user is allowed to pass on the condition that the two face data match, and the gate is opened. Also in this case, when the two face data do not match, the gate is not opened and the actual user cannot pass through the automatic ticket gate. Patent Document 3 discloses an automatic ticket gate device that extends the identity verification invention described in Patent Document 2 to an IC card or a network.

  Patent Document 4 discloses a system having means for reading tag information. This system is equipped with a reader that reads tag information at the time of passing through a gate, or information on a plurality of tags existing within a specific area, and a means for recognizing the owner of the tag. Is configured so that no alarm notification is given when an item related to the tag is taken out, and an alarm notification is given to the owner by detecting this when a person other than the rightful owner takes out the item. Has been.

Japanese Unexamined Patent Publication No. 2000-067188 JP 2002-279455 A JP 2006-268144 A JP 2006-106935 A

  The inventions disclosed in the above Patent Documents 1 to 4 are all recorded in the registration information recorded on the IC card and the management server when the IC card is used in the automatic ticket gate and the like. Check the registered information for the owner of the IC card, etc., and verify the identity. For example, if they match, the pass is allowed, and if they do not match, the passage is immediately prohibited or the IC card cannot be used. I was trying to do the process.

  In general, it is useful to apply a method that does not allow a person who does not have a legitimate title when he / she suspects that he / she has a legitimate title when it is a threat to enter a certain area. It is. However, depending on the area to be set, if such a method is applied immediately and strictly, a problem may occur in system operation. For example, even if the application conditions for the determination of the verification result are strict and the passage is not permitted in the case of a mismatch, it may not be strictly the owner of the IC card etc., but the predetermined relationship with the owner Even if it is a legitimate user (for example, the relationship between the husband who is the owner and his wife), it cannot be used. On the other hand, in order to avoid such a situation, if the application condition of the judgment result is relaxed, there is a possibility that an unauthorized user is overlooked.

  Also, if the application conditions for the judgment of the verification result are strict and the passage is not permitted in the case of an automatic ticket checker etc., it will take time for the processing in the automatic ticket checker, etc. This is a problem in the operation of the automatic ticket gate system because the number of processing people decreases.

  In view of the above-mentioned problems, the object of the present invention is to strictly and strictly carry out the passage disapproval process even if the person who passes there by an automatic ticket gate or gate does not match the person registered in advance. Access control that can notify the user and determine the processing on the system based on the subsequent response of the user to improve the smoothness of system operation and reliably prevent unauthorized use over the long term To provide a system.

  Furthermore, the object of the present invention is to collate the information recording medium with its owner when an information recording medium such as an IC card or a tag is used in an automatic ticket gate, a gate, or the like. It is to provide an access control system with high system flexibility, which can determine the contents of measures on the system in accordance with the contents of a response to the notice from the owner.

  In order to achieve the above object, an access control system according to the present invention is configured as follows.

A first access control system (corresponding to claim 1) is an operation system that provides a predetermined service to registered users who have performed a registration procedure at a registration terminal through the use of an information recording medium in a service providing apparatus. The personal characteristic information acquisition means for acquiring the personal characteristic information of the actual user when the information recording medium is used in the service providing apparatus, and the first method of transmitting the acquired personal characteristic information of the actual user to the operation system 1 transmission means, collation means for collating the transmitted personal feature information of the actual user with the registered user personal feature information, and a registered user if the collation result by the collation means is inconsistent and notifying means for notifying the terminal reply unauthorized use of the registered user, or, depending on the response of the use of the person who is the person used or allowed, respectively, information storage Characterized in that it comprises the steps content determining means for determining a measure contents according to use stop or continued use of the medium, and a second transmission means for transmitting the determined action content to the service providing device.

In the above access control system, when an information recording medium such as an IC card or an IC tag is used in an automatic ticket gate or a gate, the information recording medium is compared with the registered user who is the original owner. If there is a discrepancy, the owner's terminal will be notified of the fact of use, and depending on the response from the user to the unauthorized use response or the use of the person or authorized person It is configured to determine the content of measures such as prohibition of use. Instead of immediately prohibiting the use when there is a use that seems to be an unauthorized use, a legitimate user is notified first, and subsequent measures are determined according to the response contents of the user. As a result, long-term unauthorized use can be prevented, and appropriate use can be made according to the circumstances of the user.

In the second access control system (corresponding to claim 2), in the above-described configuration, a transmission condition and / or a use stop condition for notifying the registered user's terminal is set by the registered user. It is set when the registration procedure is performed at the registration terminal.

In a third access control system (corresponding to claim 3), in the above-described configuration, a transmission condition and / or a use stop condition for notifying the registered user terminal is the registered user's terminal. It can be set via a user terminal possessed or a computer or terminal device connectable to another network.

  In a fourth access control system (corresponding to claim 4), in the above configuration, the service providing device is an automatic ticket gate device, and the predetermined service is open / close control of the traffic blocking plate based on determination of passage permission or disapproval. It is characterized by being.

  A fifth access control system (corresponding to claim 5) is characterized in that, in the above configuration, the personal characteristic information is face data.

  According to the present invention, when an information recording medium such as an IC card or an IC tag is used in an automatic ticket gate, a gate or the like, the information recording medium and the original owner are registered using the personal characteristic information each time. Check with the user, and if there is a discrepancy, notify the terminal of the user who is the owner about the fact of use, and indicate the measures such as prohibition of unauthorized use according to the response to the notification from the user. Because it was decided, even if it is unauthorized use, the immediate use is not prohibited, but the subsequent action is decided according to the content of the response of the legitimate registered user, thereby preventing long-term unauthorized use At the same time, it can be used appropriately according to the circumstances of the user, and it is possible to improve the smoothness of system operation and to construct a highly flexible service system.

It is a block diagram which shows the structure of the whole system to which the access control system which concerns on this invention is applied. It is a detailed relationship block diagram which shows the mutual communication relationship between a registration terminal and an automatic ticket gate apparatus (flow control apparatus), an operation system, and many user terminals, and each internal structure and the content of information processing. It is a flowchart which shows the first half of the content of operation | movement of an access control system etc. It is a flowchart which shows the latter half part of the content of operation | movement of an access control system etc.

  DESCRIPTION OF EMBODIMENTS Preferred embodiments (examples) of the present invention will be described below with reference to the accompanying drawings.

  The access control system according to the present invention will be described with reference to FIGS. FIG. 1 is a block diagram showing the configuration of the entire system, and FIG. 2 shows the mutual communication relationship between a registration terminal and an automatic ticket gate (flow control device), an operation system, and a number of user terminals, FIG. 3A and FIG. 3B are flowcharts showing the operation contents. FIG.

  The configuration of the entire system will be described with reference to FIG. In FIG. 1, an operation system 100 located in the central area is, for example, an automatic ticket gate system, and the automatic ticket gate system includes an automatic ticket gate function and an access control function. In FIG. 1, the operation system 100 shows an automatic ticket gate processing unit 101 having an automatic ticket gate function and an access control system 102 having an access control function. The access control system 102 is a function added to the automatic ticket gate processing unit 101 in the automatic ticket gate system (100). In the automatic ticket gate, the access control system 102 compares an actual user with a registered user (a legitimate owner such as an IC card) to confirm whether or not the user is the identity, Accordingly, it has a function of notifying registered users and a function of performing necessary measures according to the contents of responses or answers from the users.

  The operation system 100 to which the access control system according to the present invention is applied is not limited to an automatic ticket gate system. Any system that permits or disallows entry of a specific person having a legitimate title can be applied to any system.

  The access control system 102 is an element added to the automatic ticket gate processing unit 101 that executes a normal automatic ticket gate function in the automatic ticket gate system. In the operation system 100 shown in FIG. 2, the illustration of the configuration related to the function of performing a normal automatic ticket gate is omitted. Each of a number of automatic ticket gates of this automatic ticket gate system includes, for example, an imaging device, and the user is installed in the station premises using an information recording medium such as an IC card, a tag, and a mobile phone. Has a function of acquiring face data of an actual user using an imaging device. The acquired face data is transmitted to the operation system 100. A block 201 shown in FIG. 1 represents an automatic ticket gate. The automatic ticket gate device 201 is a device that performs opening / closing control of a passage blocking plate (gate plate) by determining permission / non-permission of the passage of a user who wants to pass through the passage. It is a device that controls. Regarding the device configuration of the automatic ticket gate 201, it has been described above that the face data is acquired and the personal characteristic information of the actual user is acquired. However, the personal characteristic information is not limited to the face data. As personal characteristic information, other physical characteristics such as height and weight, biometric information such as iris, and the like can be considered.

  In FIG. 1, in the left area of the operation system 100, as an example, the three automatic ticket gate devices 201 and one registration terminal 202 are shown. The automatic ticket gate 201 is a flow control device installed at each place in the station premises. The registration terminal 202 is installed at an appropriate place in the station premises, and performs registration to receive an automatic ticket gate service based on the automatic ticket gate processing unit 101 in the operation system 100 and a service provision based on the access control system 102. Device. Each of the automatic ticket gate 201 and the registration terminal 202 is connected to the access control system 102 of the operation system 100 so that information (signal or data) can be transmitted / received via the wired or wireless communication line 11. Has been.

  In FIG. 1, a large number of user terminals 300-1 to 300-n owned by each of a large number of registered users are shown in the right area of the operation system 100. User terminals 300-1 to 300-n are, for example, mobile phones having an e-mail transmission / reception function. Information (signals or data) is transmitted between the access control system 102 of the operation system 100 and each of the large number of user terminals 300-1 to 300-n via a communication line 12 such as a radio as necessary. They can be connected so that they can send and receive each other.

  Next, with reference to FIG. 2, a detailed structure of elements constituting the entire system shown in FIG. 1 will be described.

<Structure of registered terminal 202>
The registration terminal 202 includes an operation unit 211 and a display unit 212 provided outside the terminal body. The display unit 212 displays items for inputting information for identifying and confirming that the person who is actually performing the registration procedure by operating the registration terminal 202 is a valid user. The operation unit 211 is provided with various controllers for a legitimate user to perform necessary selection operations and information input operations in accordance with the display contents of the display unit 212. When a person who performs a registration procedure in the registration terminal 202 appropriately operates the operation unit 211 as specified in accordance with the display content of the display unit 212, registered personal characteristic information included in the access control system 102 in the operation system 100 Necessary user information is stored in the storage unit 111. At this time, in the registration terminal 202, the possessed medium information processing unit 213 processes information related to the authorized user who possesses the issued information recording medium (IC card or the like), and the registered personal characteristic information of the access control system 102. Transmission to the storage unit 111 via the communication line 11 (communication C11). In addition, the registration terminal 202 is provided with a personal feature information acquisition unit 214 such as an imaging device that acquires face data of a person who performs a registration procedure in advance. The personal characteristic information acquisition unit 214 transmits the acquired personal characteristic information (face data or the like) to the registered personal characteristic information storage unit 111 of the access control system 102 via the communication line 11 (communication C12). The registration terminal 202 issues an information recording medium such as an IC card in which data related to service contents is recorded, to a legitimate user who has completed registration. The IC card or the like is usually possessed by a legitimate user and is used, for example, by the automatic ticket gate 201.

  In the registration terminal 202, according to the display content of the display unit 212 and the operation content of the operation unit 211, a condition for stopping the use of the IC card or the like when the issued IC card or the like is not properly used (“stop condition”) ) And an operation for inputting a condition (“transmission condition”) for notifying the IC card or the like when the IC card or the like is not properly used. The “stop condition” is transmitted to the stop condition information storage unit 112 of the access control system 102 in the operation system 100 (communication C13) and stored. The “transmission condition” is transmitted to the transmission condition information storage unit 113 of the access control system 102 in the operation system 100 (communication C14) and stored.

  The registration terminal 202 further includes a use stop processing unit 215 and a device control unit 216. The use stop processing unit 215 has a use stop information storage unit 217. When the unauthorized user uses the registered IC card or the like for charging or the like at the registration terminal 202, the use suspension processing unit 215 stores the use suspension information based on the use suspension condition given from the access control system 102 in advance. When it is stored in the unit 217, it has a function of performing a process of stopping the use using the use stop condition. The apparatus control unit 216 controls the operation of the components of the registration terminal 202, has an interface function with the operation system 100, and incorporates a communication unit for performing communication.

  As for the registration of the personal characteristic information in the registration terminal 202 described above, re-registration is performed via the registration terminal 202 when there is a change or the like thereafter.

  In addition, as described above, either or both of the transmission condition and the stop condition can be input / set at the registration terminal 202 and further changed. It is also possible to set / change via a terminal, a computer (PC) connectable to another network, or a terminal device.

  As an example of the above transmission conditions, when an error occurs in collation, there are a usage section, a period, a usage amount, a usage count, etc. for an IC card issued after that. If the collation result is OK, the content of whether or not to reset the transmission condition can be included in the transmission condition.

  In addition, regarding the example of the stop condition described above, the processing is performed according to the response from the user terminal. However, if there is no response, the usage interval after transmitting the predetermined notification information to the user terminal The condition for stopping or not stopping is set based on the conditions such as the period, the usage fee, and the number of times of use.

  Note that the content of the notification information includes, for example, the content of the verification error, the corresponding notification condition, the usage date and time, the usage amount, and the usage image.

<Structure of automatic ticket gate 201>
The automatic ticket gate apparatus 201 includes a personal characteristic information acquisition unit 221, a possessed medium information processing unit 222, a use suspension processing unit 223, a device control unit 224, a user flow control unit 225, and a display unit 226. Yes. The normal ticket gate function of the automatic ticket gate 201 is the same as that of the conventional device. A user who wants to pass the passage of the automatic ticket gate 201 holds an IC card or the like possessed by the reader / writer provided in the automatic ticket gate 201. At that time, the possessed medium information processing unit 222 reads necessary information stored in the IC card or the like and rewrites necessary information. Each of the personal feature information acquisition unit 221, use stop processing unit 223, and device control unit 224 of the automatic ticket gate 201 is basically the same as the personal feature information acquisition unit 214, use stop processing unit 215, and device control unit 216 of the registration terminal 202. It has the same structure and function. The personal characteristic information acquisition unit 221 acquires face data and the like (personal characteristic information) of a user who is going to pass through the passage of the automatic ticket gate device 201. The use stop processing unit 223 includes a use stop information storage unit 227. In addition, the user flow control unit 225 is a device that determines whether a user who wants to pass through the passage of the automatic ticket gate 201 is permitted or not permitted, and controls the opening / closing operation of the passage blocking plate (gate plate). The display unit 226 is a device that presents information related to the charge amount of the IC card, the fare to be reduced, and the like to the user when the user passes through the automatic ticket gate device 201.

  In the automatic ticket gate 201, the personal feature information acquired by the personal feature information acquisition unit 221 is transmitted to the personal feature information matching unit 114 of the access control system 102 in the operation system 100 via the device control unit 224 (communication C15). . Similarly, possessed medium information processed and acquired by the possessed medium information processing unit 222 is transmitted to the personal feature information collating unit 114 of the access control system 102 via the device control unit 224 (communication C16).

<Structure of access control system 102>
The access control system 102 in the operation system 100 shown in FIG. 2 is in addition to the registered personal feature information storage unit 111, stop condition information storage unit 112, transmission condition information storage unit 113, and personal feature information collation unit 114 described above. As other components, a collation result information storage unit 115 as an information recording unit (storage unit), a contact information storage unit 116, a transmission information storage unit 117, a reception information storage unit 118, and a use stop condition storage unit 119 are provided. . Furthermore, the access control system 102 includes, as other components, a transmission condition determination unit 120 as various processing function units, a transmission information creation unit 121, an information transmission unit 122, an information reception unit 123, a reception information analysis unit 124, a stop A condition determining unit 125 and a use stop information creating unit 126 are provided.

  Registered personal feature information storage unit 111, stop condition information storage unit 112, transmission condition information storage unit 113, matching result information storage unit 115, contact information storage unit 116, transmission information storage unit 117, reception information as information storage unit Each of the storage unit 118 and the use stop condition storage unit 119 records the following contents.

  In the registered personal feature information storage unit 111, personal feature information 111a (registered personal feature information 1 to n) of all registered users who have been registered through the registration terminal 202 is recorded. . In the stop condition information storage unit 112, stop condition information 112a (stop condition information 1 to n) of all users input by the user during the registration procedure at the registration terminal 202 is recorded. In the transmission condition information storage unit 113, transmission condition information 113a (transmission condition information 1 to n) of all users input by the user during the registration procedure at the registration terminal 202 is recorded. The collation result information storage unit 115 stores collation result information 115a (collation result information 1 to n) obtained as a result of the collation process in the personal feature information collation unit 114. In the contact information storage unit 116, contact information 116 a (contact information 1 to n) of all users input by the user during the registration procedure at the registration terminal 202 is recorded. In the transmission information storage unit 117, transmission information 117a (transmission information 1 to n) transmitted from the information transmission unit 122 to the user terminal is recorded. In the reception information storage unit 118, reception information 118a (reception information 1 to n) received from the user terminal received by the information reception unit 123 is recorded. In the use stop condition accumulation unit 119, use stop information 119a (use stop information 1 to n) created by the use stop information creation unit 126 based on the processing results of the reception information analysis unit 124 and the stop condition determination unit 125 is recorded. ing.

  Personal feature information collation unit 114, transmission condition determination unit 120, transmission information creation unit 121, information transmission unit 122, information reception unit 123, reception information analysis unit 124, stop condition determination unit 125, use stop information creation as a processing function unit Each function of the unit 126 will be described in the description of the overall operation of the system described later.

<Structure of user terminal 301-1>
The user terminal 301-1 is usually a mobile phone or a device having a communication function similar to this. The user terminal 301-1 includes an operation / display unit 302, an information reception unit 303, and an information transmission unit 304. The configuration / function of these components is substantially the same as the normal configuration / function provided in the mobile phone. The other user terminals 301-2 to 301-n have the same configuration as the user terminal 301-1.

  Next, the operation of the access control system 102 having the above configuration will be described. In this operation description, the configuration of FIG. 2 and the operation flowchart shown in FIGS. 3A and 3B are referred to.

  The user performs a required registration procedure by the registration terminal 202 in order to receive an unauthorized use notification service of an IC card or the like in the automatic ticket gate system (step S101). At this time, the registered personal characteristic information and stop condition information of the user acquired by the personal characteristic information acquisition unit 214 and the possessed medium information processing unit 213 of the registration terminal 202 based on the input operation of the user and the imaging operation of the imaging apparatus. The transmission condition information, contact information, etc. are transmitted to the access control system 102 of the operation system 100 (step S102). In the access control system 102, for the user who has received the predetermined information and completed the registration procedure, the registered personal feature information is stored in the registered personal feature information storage unit 111, and the stop condition information is stored in the stop condition information storage unit 112. The transmission condition information is stored in the transmission condition information storage unit 113, and the contact information is stored in the contact information storage unit 116 (step S201). For all users (1 to n) who have completed the registration procedure at the registration terminal 202, the registered personal feature information storage unit 111, the stop condition information storage unit 112, and the transmission condition information of the access control system 102 are the transmission condition information storage unit. 113. Information necessary for each of the contact information storage units 116 is recorded.

  For a user who has completed the registration procedure at the registration terminal 202, an information recording medium such as a registered IC card (hereinafter referred to as "IC card etc.") is issued as a legitimate information recording medium holder (step "step"). S103). Information (identification number or the like) for identifying a registered user is recorded in a memory such as an IC card. A registered legitimate user possesses the IC card or the like. The IC card or the like is a means used in the subsequent automatic ticket checker 201. In a normal usage mode, the IC card or the like is possessed and used by a legitimate user. However, there is a possibility that a person other than a legitimate registered user may possess and use the IC card or the like for some illegal reason or legitimate reason.

  Regarding the use of the registration terminal 202, the above processing procedure is repeated for each person who wishes to use the registration terminal 202.

  In the next stage, an IC card or the like is used in the automatic ticket gate 201 in a normal usage mode.

  In the automatic ticket gate 201, a normal use situation is assumed in which a certain user passes through a passage using a registered IC card or the like (step S111). At this point, it is unclear whether or not this “certain user” is a registered valid user. If this “certain user” is not a legitimate registered user, it is assumed that it is the first use. The user holds the IC card or the like over the reader / writer of the automatic ticket gate apparatus 201. At that time, first, the possessed medium information processing unit 222 reads necessary information stored in the IC card or the like and rewrites necessary information (step S112). As a result, information processing related to a normal automatic ticket gate as the automatic ticket gate device 201 is performed, and personal information specifying a legitimate registered user recorded in an IC card or the like is read out. At the same time, the automatic ticket gate 201 acquires personal feature information (face data, etc.) of the user who is actually using the IC card or the like by the personal feature information acquisition unit 221 (step S113). The personal information and personal feature information acquired by the automatic ticket gate 201 are transmitted to the personal feature information matching unit 114 of the access control system 102 in the operation system 100 (step S114).

  In the passage of the passage in the automatic ticket gate 201, the passage is permitted and can pass regardless of whether or not the actual user is a valid registered user at that time.

  In the access control system 102, the personal feature information matching unit 114 receives the personal information and the personal feature information transmitted from the automatic ticket gate 201 (step S211). Next, the personal feature information matching unit 114 extracts from the registered personal feature information storage unit 111 the personal feature information of the legitimate registered user related to the IC card used, based on the transmitted personal information. (Step S212). Thereafter, the personal feature information matching unit 114 matches the personal feature information transmitted from the automatic ticket gate 201 with the personal feature information of the registered user retrieved from the registered personal feature information storage unit 111, and matches or does not match. Is determined (step S213). The collation result is sent to the collation result information storage unit 115 as collation result information and stored (step S214). When the collation result is “match”, since it is used by a legitimate registered user, the subsequent processing ends (in the case of YES in step S215). When the collation result is “mismatch”, the process proceeds to notification processing step S216 (in the case of NO in determination step S215).

  In the notification processing step S216, since the actual user is different from the legitimate registered user based on the collation result, a transmission process for notifying the legitimate registered user of the fact of use is performed. Is called. In the notification processing step S 216, the transmission condition determination unit 120 sends transmission condition information related to the corresponding registered user from the transmission condition information storage unit 113 with respect to the “collation result information” stored in the collation result information processing unit 115. Take out and confirm the contents of the transmission condition information. The contents of the transmission condition include, for example, the number of uses and the amount of money used. It may be notified by the first use. In the present embodiment, it is assumed that the notification is made by the first unauthorized use. In accordance with the obtained transmission conditions, the transmission information creation unit 121 determines the content of the notification and creates transmission information using the contact information extracted from the contact information storage unit 116 (step S217). The notification contents are information such as location information (use location of IC card or the like) of the automatic ticket gate 201 where the IC card or the like is used, use date and time, and the like. The transmission information created by the transmission information creation unit 121 is transmitted to the contact terminal, for example, the user terminal 300-2 via the information transmission unit 122 (communication C21: step S218). This transmission is performed by e-mail, for example. In addition to the transmission operation, the information transmission unit 122 stores the transmitted transmission information in the transmission information storage unit 117 (step S219).

  Next, processing in the user terminal 300-2 that has received transmission information (notification mail) from the information transmission unit 122 of the access control system 102 will be described. The user terminal 300-2 receives the transmission information (notification mail) (step S301). The content of the transmission information is displayed on the operation / display unit 311 of the user terminal 300-2. A legitimate registered user possessing the user terminal 300-2 obtains the usage status of the IC card, etc. possessed by the operation / display unit 311 of the user terminal 300-2 from the transmission information (step S302). ). A legitimate user who has confirmed the transmission information can take various actions in response to the transmission information depending on the situation. For example, if it is an unauthorized use that the user does not know (determination step S303), a reply mail informing the fact is immediately transmitted to the access control system 102 (communication C22: step S304). In addition, when a person known to himself / herself is using (use permitted in advance by the owner), a reply mail for notifying that may be transmitted (determination step S303, communication C22). : Step S304). As another possibility, a legitimate registered user may take no action such as not performing a reply mail for reasons such as the case where transmission information cannot be confirmed (step S305).

  In the access control system 102, when a reply mail is sent from the user terminal 300-2, the information receiving unit 123 receives the reply mail (step S221). The reception information by this reply mail is stored in the reception information storage unit 118.

  In the next stage, the reception information analysis unit 124 analyzes the content of the reception information (step S222). In the content analysis of the reception information, the reception information itself extracted from the reception information storage unit 118 is used. In addition, regarding the transmission information corresponding to the reception information, stop condition information and transmission conditions extracted from the stop condition information storage unit 112 The transmission condition information extracted from the information storage unit 113 and the transmission information created by the transmission information storage unit 117 are referred to. The result analyzed by the reception information analysis unit 124 is sent to the stop condition determination unit 125, and then the stop condition is determined based on the analysis result (step S223). “Analysis of received information” is confirmation of the status of a legitimate registered user who has been notified of transmission information. The contents of the analysis result include, for example, a request to urgently stop the use of the IC card related to unauthorized use, a request to stop the use of the IC card etc. because it is a legitimate use, Alternatively, it may be confirmed that no special measures against suspension of use are taken in accordance with the situation of “no response”. The stop condition determination unit 125 determines a stop condition regarding the use of the IC card or the like according to the analysis result given from the reception information analysis unit 124. The stop condition determination unit 125 refers to related stop condition information stored in the stop condition information storage unit 112 and related transmission information stored in the transmission information storage unit 117 when determining the stop condition. The determination result of the stop condition in the stop condition determining unit 125 is sent to the use stop information creating unit 126. The use stop information creation unit 126 creates use stop information (step S224) and transmits the use stop information to all of the registration terminal 202 and the automatic ticket gate 201 via the information transmission unit 127 (communication C31). : Step S225). In transmitting the use stop information, the identification number of the target IC card or the like is also transmitted. Further, the use stop information created by the use stop information creating unit 126 is stored in the use stop information accumulating unit 119 (step S226).

  The registration terminal 202 and all the automatic ticket gates 201 receive the use stop information transmitted from the access control system 102 (step S121), and use stop information storage units 217 and 227 of the use stop processing units 215 and 223, respectively. And the identification number of the target IC card or the like (step S122). Thereafter, when the target IC card or the like is used again in the automatic ticket gate 201 or the registration terminal 202 (step S131), the respective use stop processing units 215 and 223 are used by the use stop information storage units 217, The corresponding use stop information is extracted from 227 (step S132), and processing such as use stop is executed based on the use stop information (step S133). The contents of the processing such as suspension of use include stopping the second and subsequent uses, or permitting the continuation of the second and subsequent uses.

  The contents of the notification processing of the access control system 102 and the like described above are performed each time all of the registered IC cards are used in the automatic ticket gate device 201 and the like. Since the subsequent use of the IC card or the like for which the use stop process has been completed does not occur, the notification process is not performed. The use of the relevant legitimate user is continued, not the legitimate registered user. Unauthorized use by a user due to theft or the like can be reliably prevented in the long term and the use prohibited.

  In the configuration of the above embodiment, notification of the fact of use of an IC card or the like may be performed to the user terminal of another legitimate user related to the user other than the registered user. it can. For example, a registered user is a husband, and a legitimate user is a wife (or generally a family member).

  The registered information recording medium such as an IC card is used not only in the automatic ticket gate 201 but also in a ticket vending machine or a checkout machine that is a station service device. Since the use prohibition by the access control system according to the present invention is not processed in real time, it can be applied to other devices such as a ticket vending machine and a payment machine.

  The configurations, shapes, sizes, and arrangement relationships described in the above embodiments are merely schematically shown to the extent that the present invention can be understood and implemented. Therefore, the present invention is not limited to the described embodiments, and can be variously modified without departing from the scope of the technical idea shown in the claims.

The access control system according to the present invention is used to reliably prevent an illegal use state in the long term when an information recording medium such as an IC card is illegally used in a station service system of an automatic ticket gate system .

11 Communication line 12 Communication line 100 Operation system (automatic ticket gate system)
DESCRIPTION OF SYMBOLS 101 Automatic ticket gate processing part 102 Access control system 201 Automatic ticket gate apparatus 202 Registration terminal 300-1 to 300-n User terminal

Claims (5)

In an operation system that provides a predetermined service to registered users who have registered at a registration terminal through the use of an information recording medium in a service providing device,
Personal feature information acquisition means for acquiring personal feature information of an actual user when the information recording medium is used in the service providing device;
First transmission means for transmitting the acquired personal characteristic information of the actual user to the operation system;
Collating means for collating the transmitted personal feature information of the actual user and the personal feature information of the registered user;
A notification means for notifying the registered user terminal when the result of the verification by the verification means is inconsistent;
Measures for deciding the content of measures related to suspension or continuation of use of the information recording medium, respectively, in response to an unauthorized use response from the registered user , or a response from the use of the principal or authorized person Content determination means;
Second transmission means for transmitting the determined content of the measure to the service providing device;
An access control system comprising:   The transmission condition and / or the use stop condition for notifying the registered user terminal is set when the registered user performs the registration procedure at the registered terminal. Item 4. The access control system according to Item 1.   The transmission condition for notifying the registered user's terminal and / or the use stop condition is a user terminal possessed by the registered user, or a computer or terminal device connectable to another network The access control system according to claim 1, wherein the access control system can be set via a password.   The said service provision apparatus is an automatic ticket gate apparatus, The said predetermined service is the opening / closing control of the traffic-blocking board based on the determination of permission or non-permission of passage passage, The any one of Claims 1-3 characterized by the above-mentioned. The described access control system.   The access control system according to claim 1, wherein the personal characteristic information is face data.

Images