JP6883506B2 - Access control system - Google Patents

Description

The present invention generally relates to an entry / exit management system that controls entry / exit for a plurality of entrances, for example, an entry / exit management system that limits users who can enter and exit each entrance in a building such as a building.

Patent Document 1 describes a person entering a room with an electric lock installed on the door of the room, a card reader with fingerprint authentication for entering and exiting installed outside the room near the door, and an entry / exit management device for managing entry / exit of the room. An entry / exit management system that manages the authentication record of the room and temporarily changes the authentication conditions at the time of entering the room is disclosed.

Japanese Unexamined Patent Publication No. 2010-102633

In the technique disclosed in Patent Document 1, the convenience of authentication is maintained by permitting entry by only one authentication of the IC card or the fingerprint within a certain period from the previous authentication based on the authentication record. However, in the case of a system that allows entry only by authentication with an IC card, if the authenticated IC card is lost and found by a malicious person, the malicious person will invade the room permitted by the cardholder. It is likely to allow that.

Further, in the technique disclosed in Patent Document 1, the certification conditions are changed only for one room. Patent Document 1 neither discloses nor suggests entry / exit control of other rooms.

When the entry / exit management system according to the present invention receives key information from an input device associated with a target entrance which is one of a plurality of entrances, the following (A) to (C),
(A) When the target entrance is associated with the received key information, but the privilege associated with the key information is invalid, the authentication is performed by the first authentication method, and the authentication by this first authentication method is performed. If successful, allow passage through the entrance and enable the above privileges,
(B) When the target entrance is associated with the received key information and the above privilege is valid, authentication is performed by the second authentication method.
(C) When the target entrance is not associated with the received key information, the privilege is invalidated.
I do.

The "entrance" may be one that can be used as an exit, or a gate that is not provided with a physical door and is provided only with an infrared sensor and a rotary bar.

Further, the "key information" is typically information used in authentication, and may be information input from a user who is about to enter the target entrance (for example, user's memory information or biometric information). However, the information may be read from the user's property (for example, an authentication medium such as an IC card).

Further, a specific example of "enabling a privilege" may be the granting of a privilege, or setting a predetermined flag associated in advance (for example, setting the value of the flag to "1"). You may. A specific example of "invalidating a privilege" may be the removal of a privilege, or the defeat of a predetermined flag associated in advance (for example, setting the value of the flag to "0"). Good.

Further, the "authentication method" may be called an authentication method (for example, it may correspond to "authentication conditions" referred to in Patent Document 1), and depending on the type, an amount related to authentication (for example, a processing amount or a processing amount or The number of elements) is different. For example, the second authentication method is a simpler authentication method than the first authentication method. “Simple” means that the amount involved in authentication is small (for example, the amount of processing is small, the number of elements (value of n in n-factor authentication) is small, or the time required for processing is short).

When the target entrance is associated with the key information and the privilege is valid (for example, the privilege is granted), the second authentication method is used instead of the first authentication method (for example, the authentication is simplified). By doing so, convenience can be maintained. On the other hand, if the key information does not have a target entry associated with it (for example, the key information is received from an input device for an entry that the user who entered the key information is not allowed to pass through), the privilege is invalidated. Security can be maintained by (for example, deleting privileges).

According to the present invention, it is possible to reduce the possibility of passing a person who is not permitted to pass through a security-controlled entrance.

It is a schematic block diagram which shows the entry / exit management system in Embodiment 1 of this invention. It is a figure which shows the structure of the authentication table in Embodiment 1 of this invention. It is a figure which shows the structure of the passage permission table in Embodiment 1 of this invention. It is a figure which shows the structure of the building table in Embodiment 1 of this invention. It is a figure which shows the structure of the apparatus table in Embodiment 1 of this invention. It is a flowchart which shows the authentication process and the distribution request process of privilege information in the access control device in Embodiment 1 of this invention. It is a flowchart which shows the distribution processing of the privilege information in the application server in Embodiment 1 of this invention. It is a flowchart which shows the update process at the time of receiving the privilege information in the entry / exit control device in Embodiment 1 of this invention. It is a flowchart which shows the monitoring process of the privilege expiration date and time in the entry / exit control device in Embodiment 1 of this invention. A part of the authentication process and the privilege information distribution request process in the entry / exit control device according to the second embodiment of the present invention is shown.

In the following description, the "interface unit" may be one or more interfaces. One or more interfaces may include one or more interface devices for one or more I / O devices and one or more communication interface devices. One or more communication interface devices may be one or more communication interface devices of the same type (for example, one or more NIC (Network Interface Card)) or two or more different types of communication interface devices (for example, NIC and HBA (Host Bus)). Adapter)) may be used.

In the following description, the "memory unit" may be one or more memories. At least one memory may be a volatile memory or a non-volatile memory. The memory unit is mainly used during processing by the processor unit.

Further, in the following description, the "PDEV unit (Physical Device unit)" may be one or more PDEVs. “PDEV” means a physical storage device, typically a non-volatile storage device (eg, auxiliary storage device), such as an HDD (Hard Disk Drive) or SSD (Solid State Drive). The PDEV unit may be a RAID group. "RAID" is an abbreviation for Redundant Array of Independent (or Inexpensive) Disks.

Further, in the following description, the "storage unit" includes at least a memory unit among the memory unit and the PDEV unit.

Further, in the following description, the "processing unit" may be one or more processors. The at least one processor is typically a microprocessor such as a CPU (Central Processing Unit), but may be another type of processor such as a GPU (Graphics Processing Unit). Each of the one or more processors may be single core or multi-core. Some processors may be hardware circuits (for example, FPGA (Field-Programmable Gate Array) or ASIC (Application Specific Integrated Circuit)) that perform a part or all of the processing. When one or more computer programs are executed in the processing unit, the processing performed by the processing unit is realized. When the processing is realized by executing the program by the processing unit, the defined processing is appropriately performed by using the storage unit and / or the interface or the like. The program may be installed from the program source. The program source may be, for example, obtained from a program distribution computer or a computer-readable recording medium (for example, a non-temporary recording medium).

Further, in the following description, the information may be described by an expression such as "xxx table", but the information may be expressed by any data structure. That is, the "xxx table" can be referred to as "xxx information" in order to show that the information does not depend on the data structure. Further, in the following description, the configuration of each table is an example, and one table may be divided into two or more tables, or all or a part of the two or more tables may be one table. Good.

Hereinafter, embodiments for carrying out the present invention will be described in detail with reference to the drawings.

(Structure of Embodiment 1)

FIG. 1 is a configuration diagram showing an entry / exit management system according to the first embodiment of the present invention.

The entry / exit management system 100 includes an entry / exit control device 20 installed in the customer building 10 and a center 50. A plurality of entry / exit control devices 20 may be installed.

The entry / exit control device 20 installed in the customer building 10 is connected to the center 50 via a communication network such as the Internet 40.

The customer building 10 includes a card reader 31, a finger vein reader 32, and an electric lock 33. The entry / exit control device 20 is connected to a card reader 31, a finger vein reader 32, and an electric lock 33.

The card reader 31 is a reader device for reading card information of an IC card held by a person passing through an entrance provided in a room or the like of a customer building 10. The finger vein reader 32 is a reader device for reading finger vein information of a person passing through an entrance provided in a room or the like of a customer building 10. The electric lock 33 is a lock installed at an entrance provided in a room or the like of the customer building 10. The electric lock 33 unlocks and locks the lock in accordance with the unlocking command and the locking command from the entry / exit control device 20.

The entry / exit control device 20 includes a processing unit 21, a storage unit 22, an external input / output interface 25, and a network interface 26. The processing unit 21 is an example of the processor unit, and the external input / output interface 25 and the network interface 26 are examples of the interface unit.

The storage unit 22, the external input / output interface 25, and the network interface 26 are connected to the processing unit 21. The processing unit 21 is embodied by executing the control program stored in the storage unit 22, and controls the operation of the entry / exit control device 20. The storage unit 22 stores the authentication table 23 and the passage permission table 24.

A card reader 31, a finger vein reader 32, and an electric lock 33 are connected to the external input / output interface 25. The external input / output interface 25 receives information from the card reader 31 and the finger vein reader 32. The external input / output interface 25 further outputs the information output from the processing unit 21 to the electric lock 33.

The network interface 26 is, for example, an interface for inputting / outputting Ethernet (registered trademark) signals. The network interface 26 is connected to the processing unit 21 and the Internet 40.

An application server 51 and a DB (DataBase) server 52 are installed in the center 50. The application server 51 and the DB server 52 are connected to each other. The application server 51 is connected to the entry / exit control device 20 via the Internet 40. When the application server 51 manages the entry / exit control device provided in a plurality of buildings, it is sometimes called a wide area management device.

The DB server 52 has a building table 53 and an apparatus table 54. The application server 51 can read and write the information held by the DB server 52 by transmitting an instruction command conforming to the SQL language to the DB server 52.

In the present embodiment, the center 50 includes an application server 51 which is a processing unit and a DB server 52 which is a storage unit. However, the present invention is not limited to this, and a single server may play the roles of both a processing unit and a storage unit. Further, the functions of the processing unit 21 and the storage unit 22 in each entry / exit control device 20 may be integrated in the center 50. Further, the entry / exit management system 100 may be an example of a computer system. The computer system may be one or more physical servers, or may include at least one virtual server (eg, a VM (Virtual Machine)).

FIG. 2 is a diagram showing the configuration of the authentication table 23 in the present embodiment.

The authentication table 23 has a record for each authentication. Each record stores information such as an authentication number 23a, a card ID 23b, a finger vein image 23c, a passage permission number 23d, a privilege flag 23e, and a privilege expiration date and time 23f.

The authentication number 23a indicates a unique number that uniquely identifies a record in the authentication table. The card ID 23b indicates unique authentication information (an example of key information) held by the IC card. The finger vein image 23c shows finger vein information of a person who holds an IC card holding the card ID 23b. The pass permission number 23d indicates a unique number that uniquely specifies the association with the record in the pass permission table 24. The privilege flag 23e indicates whether or not to allow the IC card holding the card ID 23b to simplify the authentication method. The privilege expiration date and time 23f indicates the date and time of the deadline for permitting the simplification of the authentication method for the IC card holding the card ID 23b.

FIG. 3 is a diagram showing the configuration of the passage permission table 24 in the present embodiment.

The passage permission table 24 stores information such as a passage permission number 24a and a passage permission card reader number 24b for each record.

The pass permission number 24a indicates a unique number that uniquely identifies a record in the pass permission table 24. The passage permission card reader number 24b indicates a list of the numbers of the card readers that allow passage.

FIG. 4 is a diagram showing the configuration of the building table 53 in the present embodiment.

The building table 53 has a record for each building (eg, customer building 10). Each record stores information such as a building number 53a, a customer number 53b, a building name 53c, and an address 53d.

The building number 53a indicates a unique number that uniquely identifies a record in the building table 53. The customer number 53b indicates a unique number that uniquely identifies the customer who owns the building. The building name 53c indicates the name of the building. Address 53d indicates the address of the building.

FIG. 5 is a diagram showing the configuration of the device table 54 in the present embodiment.

The device table 54 has a record for each entry / exit control device 20. Each record stores information such as a device number 54a, a building number 54b, and a communication URL 54c.

The device number 54a indicates a unique number that uniquely identifies the entry / exit control device 20. The building number 54b indicates a unique number (foreign key for associating with the building table 53) for uniquely identifying the building in which the entry / exit control device 20 is installed. The communication URL 54c is address information when the center 50 communicates with the entry / exit control device 20.

(Operation of Embodiment 1)

Next, the operation of the entry / exit management system 100 according to this embodiment will be described with reference to the drawings.

FIG. 6 is a flowchart showing an authentication process and a privilege information distribution request process in the room entry / exit control device 20 according to the first embodiment of the present invention.

When the user (a person who intends to enter the room) holds the IC card over the card reader 31, the card ID of the IC card is read, and the read card ID is transmitted from the card reader 31 to the entry / exit control device 20. When the entry / exit control device 20 receives the read card ID, the entry / exit control device 20 starts the process of FIG.

When the process is started, in step S101, the processing unit 21 searches the authentication table 23 of the storage unit 22 for the read card ID.

In step S102, the processing unit 21 determines whether or not there is a record matching the read card ID in the authentication table 23. If there is a record that matches the read card ID (S102: Yes), the processing unit 21 performs the reading process of the finger vein image in step S103. If there is no record matching the read card ID (S102: No), the processing unit 21 sets the NG factor, which is a variable for storing the factor when the authentication result is NG, to "1" in step S113. Is set, and the process of step S117 is performed.

In step S103, the processing unit 21 determines whether or not the finger vein information has been registered in the finger vein image 23c of the record searched in step S101. If the finger vein information is already registered in the finger vein image 23c (S103: Yes), the processing unit 21 performs the process of step S104. If the finger vein information is not registered in the finger vein image 23c (S103: No), the processing unit 21 sets the NG factor, which is a variable for storing the factor when the authentication result is NG, to the NG factor in step S114. Is set, and the process of step S117 is performed.

In step S104, the processing unit 21 determines whether or not the record searched in step S101 is given the passage authority of the entrance corresponding to the card reader 31 that is the transmission source of the card ID. Specifically, the processing unit 21 searches the pass permission table 24 of the storage unit 22 using the pass permission number 23d in the record searched in step S101, and stores the pass permission number 24a that matches the pass permission number 23d. It is determined whether or not the number of the source card reader 31 is included in the pass permission card reader number 24b of the recorded record. If the read card ID is given pass permission (S104: Yes), the processing unit 21 performs the process of step S105. If the read card ID is not given the passage authority (S104: No), the processing unit 21 sets the NG factor, which is a variable for storing the factor when the authentication result is NG, to "3" in step S115. Is set, and the process of step S117 is performed.

In step S105, the processing unit 21 determines whether or not the privilege flag 23e of the record searched in step S101 is "0". If the privilege flag 23e is "0" (S105: Yes), the processing unit 21 performs the process of step S106. If the privilege flag 23e is not "0" (S105: No), the processing unit 21 performs the process of step S108.

In step S106, the processing unit 21 reads the user's finger vein information from the finger vein reader 32.

In step S107, the processing unit 21 determines whether the finger vein image 23c of the record searched in step S101 and the finger vein information read in step S106 match. If they match (S107: Yes), the processing unit 21 performs the process of step S108. If they do not match (S107: No), the processing unit 21 sets "4" in the NG factor, which is a variable for storing the factor when the authentication result is NG, in step S116, and processes in step S117. I do.

In step S108, the processing unit 21 determines that the authentication result is OK, outputs an LED display command of the authentication result OK to the card reader 31, outputs an unlock command to the electric lock 33, and outputs the history of the authentication result. Perform authentication OK processing such as creating.

In step S109, the processing unit 21 stores the date and time of "current date and time + 1 day" as the privilege expiration date and time 23f of the record searched in step S101. Here, "current date and time + 1 day" is set as an example of updating the privilege expiration date and time, but the value added to the current date and time may be a predetermined length of time longer or shorter than one day, or a value different for each user. There may be.

In step S110, the processing unit 21 determines whether or not the privilege flag 23e of the record searched in step S101 is "0". If the privilege flag 23e is "0" (S110: Yes), the processing unit 21 performs the process of step S111. If the privilege flag 23e is not "0" (S110: No), the processing unit 21 ends the processing of FIG.

In step S111, the processing unit 21 updates the privilege flag 23e of the record searched in step S101 to "1".

In step S112, the processing unit 21 issues a distribution request for enabling the privilege flag 23e to the application server 51 (wide area management device) in order to update the privilege information of the IC card for the entrance of another building. When the process of step S112 is completed, the process of FIG. 6 is completed. The delivery request for activation of the privilege flag includes the target card ID and the activation / invalidation information (here, "activation") which is information indicating whether the request is activation or invalidation. , The privilege expiration date and time (privilege expiration date and time 23f after the update in step S109) and the building number for uniquely identifying the source customer building 10 are included as arguments.

In step S117, the processing unit 21 determines that the authentication result is NG, outputs an LED display command of the authentication result NG to the card reader 31, and performs authentication NG processing such as creating a history of the authentication result. ..

In step S118, the processing unit 21 determines whether or not the NG factor is "3" (that is, whether or not the user is trying to pass through an entrance without passage authority). If the NG factor is "3" (S118: Yes), the processing unit 21 performs the process of step S119. If the NG factor is not "3" (S118: No), the processing unit 21 ends the processing of FIG.

In step S119, the processing unit 21 updates the privilege expiration date and time 23f of the record searched in step S101 to "null".

In step S120, the processing unit 21 updates the privilege flag 23e of the record searched in step S101 to "0".

In step S121, the processing unit 21 issues a distribution request for disabling the privilege flag 23e to the application server 51 (wide area management device) in order to update the privilege information of the IC card for the entrance of another building. When the process of step S121 is completed, the process of FIG. 6 is completed. The delivery request for invalidation of the privilege flag includes the target card ID, activation / invalidation information (here, "invalidation"), privilege expiration date and time (here, "null"), and the sending customer. A building number for uniquely identifying the building 10 is included as an argument. Based on the request from the processing unit 21, the application server 51 can change the privilege flag if the pass permission of the sent card ID is set for the entrance of another building managed by the customer.

FIG. 7 is a flowchart showing a privilege information distribution process on the application server 51 according to the first embodiment of the present invention.

When the entry / exit control device 20 issues a distribution request for enabling or disabling the privilege flag 23e to the application server 51 of the center 50 in step S112 or step S121 of FIG. 6, the center 50 starts the process of FIG. To do.

When the process is started, the application server 51 receives a delivery request for enabling or disabling the privilege flag 23e in step S201. The distribution request includes the target card ID, activation / invalidation information, privilege expiration date / time, and building number.

In step S202, the application server 51 searches from the building table 53 based on the building number included in the received delivery request, and acquires the customer number 53b associated with the corresponding building.

In step S203, the application server 51 searches from the building table 53 based on the customer number 53b acquired in step S202, and acquires a list of building numbers 53a associated with the customer.

The processing from step S204 to step S209 is repeated for the number of elements included in the list of building numbers 53a acquired in step S203.

In the loop of step S204, the application server 51 processes all the buildings having the same customer number as the building number included in the delivery request among the buildings registered in the building table 53.

In step S205, the application server 51 acquires a list of device records (hereinafter, device records) associated with the corresponding building from the device table 54 based on the building number 53a acquired in step S204 received.

In the loop of step S206, in step S207, the application server 51 acquires the communication URL 54c for each device record acquired in step S206, and distributes the privilege information to the URL. The privilege information to be distributed includes the target card ID, the activation / invalidation information, and the privilege expiration date and time as arguments.

FIG. 8 is a flowchart showing an update process when the privilege information is received by the entry / exit control device 20 according to the first embodiment of the present invention.

When the application server 51 distributes the privilege information to the entry / exit control device 20 in step S207 of FIG. 7, the entry / exit control device 20 starts the process of FIG.

When the process is started, in step S301, the processing unit 21 receives the privilege information. The privilege information includes the target card ID, the activation / invalidation information, and the privilege expiration date and time.

In step S302, the processing unit 21 searches the authentication table 23 of the storage unit 22 for the card ID included in the privilege information.

In step S303, the processing unit 21 determines whether or not there is a record in the authentication table 23 that stores the card ID 23b that matches the card ID included in the privilege information. If there is a record that matches the card ID included in the privilege information (S303: Yes), the processing unit 21 performs the process of step S304. If there is no record matching the card ID included in the privilege information (S303: No), the processing unit 21 ends the process of FIG.

In step S304, the processing unit 21 determines whether the activation / invalidation information included in the privilege information is "validation". If the activation / invalidation information included in the privilege information is "validation" (S304: Yes), the processing unit 21 performs the process of step S305. If the activation / invalidation information included in the privilege information is not "validation" (S304: No), the processing unit 21 performs the process of step S307.

In step S305, the processing unit 21 updates the privilege flag 23e of the record with the same card ID to "1" in order to enable the privilege.

In step S307, the processing unit 21 updates the privilege flag 23e of the record with the same card ID to "0" in order to invalidate the privilege.

In step S306, the processing unit 21 updates the privilege expiration date and time 23f of the record acquired in step S302 to the privilege expiration date and time included in the received privilege information. When the process of step S306 is completed, the process of FIG. 8 is completed.

FIG. 9 is a flowchart showing a monitoring process of the privilege expiration date and time in the entry / exit control device 20 according to the first embodiment of the present invention.

The processing unit 21 of the entry / exit control device 20 periodically performs the processing shown in FIG. 9 and monitors each record in the authentication table 23 of the storage unit 22 to see if the granted privilege has expired. .. If it has expired, revoke the privilege and restore the changed authentication method.

In step S401, the processing unit 21 acquires all the records from the authentication table 23 of the storage unit 22.

In step S402 loop, all the records in the authentication table 23 are processed.

In step S403, the processing unit 21 determines whether or not the privilege expiration date and time 23f of the record acquired in step S402 is other than “null”. If the privilege expiration date and time 23f is other than "null" (S403: Yes), the processing unit 21 performs the process of step S404. If the privilege expiration date and time 23f is "null", the next record is processed.

In step S404, the processing unit 21 determines whether or not the privilege expiration date and time 23f of the record acquired in step S402 is before the "current date and time". If the privilege expiration date and time 23f is before the "current date and time" (S404: Yes), the processing unit 21 performs the process of step S405. If the privilege expiration date and time 23f is not before the "current date and time", the next record is processed.

In step S405, the processing unit 21 updates the privilege flag 23e of the record acquired in step S402 to "0".

In the first embodiment, the privilege given to the IC card can be deleted when the authentication operation is performed by the card reader 31 of the customer building 10 whose passage is not permitted.

An authentication method using a card ID (reading the card ID) and finger vein information (reading the finger vein information) is an example of the first authentication method. An authentication method that uses only a card ID (reading a card ID) is an example of a second authentication method.

By the way, in order to improve security, even if the IC card is authenticated by a card reader installed in a building that is not managed by the same application server (for example, an office building of another company), the IC card can be used. There may be situations where you want to remove the privilege you have granted. In other words, it is a case where the update request cannot be sent to the entry / exit control device that manages another building via the network.

The second embodiment is an example of the embodiment for realizing this. The second embodiment will be described. In the following description, the differences from the first embodiment will be mainly described, and the common points with the first embodiment will be omitted or simplified. Further, the entry / exit control device in the second embodiment is described as "entrance / exit control device 20'", and the processing unit of the entry / exit control device 20'is described as "processing unit 21'".

(Structure of Embodiment 2)

In the first embodiment, the card reader 31 is installed in the customer building 10, but instead, it is assumed that the card reader / writer is installed in a place other than the customer building 10 and the customer building.

Further, in addition to the "card ID" used in the authentication operation, the IC card holds a readable and writable storage area for storing "authentication result" which is information indicating the success or failure of the immediately preceding authentication operation. To do.

When the IC card is held over the card reader / writer installed in the customer building 10 and a place other than the customer building, the card ID stored in the IC card and the authentication result are read. Then, if the authentication result indicates "OK" (value indicating successful authentication), it is assumed that the authentication using only the card ID is performed.

(Operation of Embodiment 2)

Next, the operation of this embodiment will be described with reference to FIG.

FIG. 10 shows a part of the authentication process and the privilege information distribution request process in the entry / exit control device 20'in the second embodiment of the present invention.

In the case of S104: Yes, in step S505, it is determined whether or not the authentication result read from the processing unit 21'IC card is "OK". If the read "authentication result" is "OK" (S505: Yes), the processing unit 21'performs the process of step S105. If the read "authentication result" is not "OK" (S505: No), the processing unit 21'performs the processing of step S106 without performing the processing of step S105.

The authentication OK process in the second embodiment includes a process of writing the authentication result "OK" on the IC card in addition to the process of step S108 of the first embodiment. Similarly, the authentication NG process in the second embodiment includes a process of writing the authentication result “NG” to the IC card in addition to the process of step S117 of the first embodiment.

Although some embodiments of the present invention have been described above, these are examples for explaining the present invention, and the scope of the present invention is not limited to these embodiments. The present invention can also be implemented in various other forms.

100 ... Entrance / exit management system

Claims (5)

An entry / exit management system that controls entry / exit for multiple entrances.
An interface unit that can communicate with the input device associated with the entrance,
A processing unit connected to the interface unit is provided.
When the processing unit receives key information from an input device for a target entrance which is one of the plurality of entrances, the processing unit receives key information.
When the target entrance is associated with the received key information, but the privilege associated with the key information is invalid, the authentication is performed by the first authentication method, and the authentication by the first authentication method is performed. If successful, allow entry to the entrance, activate the privilege, and
When the target entrance is associated with the received key information and the privilege is valid, authentication is performed by the second authentication method.
When the target entrance is not associated with the received key information, the privilege is invalidated.
An entry / exit management system characterized by this. Multiple entry / exit control devices that control entry / exit for each corresponding entrance,
It is equipped with a wide area management device that manages the plurality of entry / exit control devices.
The target inlet is entry and exit control device corresponding object entry and exit control apparatus, comprising the interface unit and the processing unit,
The target entry / exit control device sends a request for activation or invalidation of the privilege to the wide area management device.
In response to a request from the target entry / exit control device, the wide area management device controls entry / exit corresponding to at least an entrance associated with the key information among the entry / exit control devices other than the target entry / exit control device. Privilege information including information indicating activation or invalidation of the privilege is transmitted to the device, and the privilege information is transmitted.
The entry / exit control device that has received the privilege information enables or invalidates the privilege for the key information according to the received privilege information.
The entry / exit management system according to claim 1. The plurality of entrances are included in a plurality of buildings.
Each of the plurality of entry / exit control devices corresponds to one of the plurality of buildings.
At least one of the plurality of entry / exit control devices is designed to issue an authentication result.
When the authentication result associated with the received key information indicates an authentication failure, the target entry / exit control device may use the target entry / exit control device even if the privilege associated with the received key information is valid. Authenticate with one authentication method,
The entry / exit management system according to claim 2. The second authentication method is a simpler authentication method than the first authentication method.
The entry / exit management system according to any one of claims 1 to 3. When the processing unit succeeds in either the authentication by the first authentication method or the second authentication method, it is associated with the received key information and is the date and time when the privilege is invalidated. The entry / exit management system according to any one of claims 1 to 3, wherein the privilege invalid date and time is updated to a later date and time.

Images