JP7299133B2 - Key management device, key management system and key management method - Google Patents

Description

The present invention relates to a key management device, key management system and key management method for managing keys.

Conventionally, a key management device capable of managing multiple keys has been used. For example, in financial institutions and retail stores, multiple keys are used, including keys for activating equipment installed in the store and keys for opening and closing doors in areas managed within the store. be. A key management device can restrict retrieval of each key from the device.

For example, Patent Literature 1 discloses a key management device that performs authentication processing for two persons, a user of a key and an administrator who approves use of the key. This device locks and manages each key stored in the device so that it cannot be taken out from the device. The device performs biometric authentication of the user and the administrator, and only unlocks the key so that the user can retrieve it if both are successfully authenticated. As a result, the administrator can use the key management device to strictly manage the keys.

JP 2010-275778 A

However, in the conventional technology described above, since it is necessary to perform authentication processing of the administrator in addition to the authentication processing of the user, the user cannot take out the key from the device when the administrator is absent, which impairs convenience. There was a problem that

SUMMARY OF THE INVENTION The present invention has been made in view of the above problems of the prior art, and provides a key management device, a key management system, and a key management method that enable administrators to manage keys without impairing user convenience. for the purpose.

In order to solve the above-described problems and achieve the object, the present invention provides a key management device for managing keys connected to an accommodating member, which locks the accommodated accommodating member and unlocks the lock first. a storage unit configured to require authentication of one user and a second user different from the first user; a storage unit that stores a predetermined condition; a control unit configured to unlock the storage unit by the authentication of the first user without requesting the authentication of the first user; and when the first user has the authority, the control unit unlocks the storage unit by authentication of the first user without requesting authentication of the second user. It is characterized by controlling to do .
Further, the present invention is a key management device for managing keys connected to a storage member, wherein the storage member is locked, and only the first user's authentication is required to unlock the storage member. A second storage unit configured to lock a first storage unit and a storage member stored therein and request authentication of the first user and a second user who is different from the first user to unlock the lock. a notification unit for notifying the position of the unlocked storage unit; a storage unit for storing a predetermined condition; and when the predetermined condition is satisfied, authentication of the second user is requested. and a control unit configured to unlock the second storage unit by authentication of the first user, and the notification unit controls the unlocked first storage unit and the unlocked first storage unit. 2 is notified in a distinguishable manner.

Further, according to the present invention, in the above invention, the storage unit stores information of a time period in which the predetermined condition is satisfied, and the control unit does not request authentication of the second user during the time period. In addition, the control is performed so that the lock of the accommodating portion is released by the authentication of the first user.

Further, according to the present invention, in the above-described invention, the storage unit stores a time zone in which the predetermined condition is satisfied for each of the accommodating members.

In the above-described invention, the present invention further comprises a reservation unit for reserving a time period for using the key, and the time period in which the predetermined condition is satisfied is the time period reserved by the reservation unit. It is characterized by

Further, according to the present invention, in the above-described invention, the reservation by the reservation unit further includes information designating the user of the key, and the control unit performs the reservation in the time slot reserved by the reservation unit. is controlled so that the lock of the accommodating section is released by the authentication of the first user without requesting the authentication of the second user for the user specified in .

Further, according to the present invention, in the above-described invention, the storage unit stores, for each of the storage members, information on the authority of the user who satisfies the predetermined condition .

Further, the present invention is a key management system for managing keys connected to storage members, wherein the stored storage members are locked and unlocked by a first user and a user different from the first user. a storage unit configured to request authentication of a second user; a storage unit that stores a predetermined condition; a control unit for controlling unlocking of the storage unit by authentication of a user, the storage unit storing information on the authority of the user satisfying the predetermined condition; It is characterized in that, when one user has the authority, the storage section is unlocked by the authentication of the first user without requesting the authentication of the second user.
Further, the present invention is a key management system for managing keys connected to a storage member, which is configured to lock the stored storage member and require only the authentication of the first user to unlock the lock. A second storage unit configured to lock a first storage unit and a storage member stored therein and request authentication of the first user and a second user who is different from the first user to unlock the lock. a notification unit for notifying the position of the unlocked storage unit; a storage unit for storing a predetermined condition; and when the predetermined condition is satisfied, authentication of the second user is requested. and a control unit configured to unlock the second storage unit by authentication of the first user, and the notification unit controls the unlocked first storage unit and the unlocked first storage unit. 2 is notified in a distinguishable manner.

In the above invention, the present invention further comprises a terminal device for reserving a time slot for using the key, wherein the control unit allows the second user during the reserved time slot in the terminal device. It is characterized in that the control is performed so that the lock of the accommodating portion is released by the authentication of the first user without requesting the authentication of the first user.

Further, the present invention is a key management method performed by a key management device having a plurality of storage units for storing and locking storage members to which keys are connected, wherein the storage member is unlocked by the first user and the first user. a step of performing an authentication process by the first user in order to take out the key from the storage portion set to require authentication of a second user different from the user; a step of unlocking the storage unit by authentication of the first user without requesting authentication of the second user if the user has the authority to satisfy the condition.
Further, the present invention is a key management method performed by a key management device having a plurality of storage units for storing and locking storage members to which keys are connected, in which authentication of the first user is required to unlock the storage members. a step of performing an authentication process by the first user in order to take out the key from the set first storage unit, and unlocking the first storage unit by the authentication of the first user; In order to take out the key from the second storage unit, which is set to require authentication of the first user and a second user different from the first user to unlock the storage member, the first user authenticates. a step of unlocking the second storage unit by the authentication of the first user without requesting the authentication of the second user when a predetermined condition set in advance is satisfied after processing; and a step of notifying the position of the unlocked accommodating portion, wherein the unlocked first accommodating portion and the second accommodating portion are notified in a distinguishable manner. do.

The key management apparatus according to the present invention can manage keys that require administrator approval for use without impairing user convenience. When a user retrieves a key that requires administrator approval from the key management device, if the predetermined conditions are met, administrator approval can be omitted. Keys that require the administrator's approval can be retrieved from the key management device.

FIG. 1 is a diagram for explaining an outline of a key management device according to the first embodiment. 2 is a perspective view showing the appearance of the key management device shown in FIG. 1. FIG. FIG. 3 is a functional block diagram showing the internal configuration of the key management device shown in FIG. FIG. 4 is a diagram showing an example of user information and storage section information used by the key management apparatus shown in FIG. FIG. 5 is a flow chart showing a processing procedure for taking out a key holder from the key management device shown in FIG. FIG. 6 is a diagram showing the system configuration of a key management system according to the second embodiment. FIG. 7 is a functional block diagram showing the internal configuration of the key management device shown in FIG. FIG. 8 is a functional block diagram showing the internal configuration of the terminal device shown in FIG. FIG. 9 is a diagram showing an example of user information and storage section information used in the key management system shown in FIG. FIG. 10 is a flow chart showing a processing procedure for taking out a key holder from the key management device shown in FIG.

Preferred embodiments of a key management device, a key management system, and a key management method according to the present invention will be described in detail below with reference to the accompanying drawings.

<Overview of Key Management Apparatus According to First Embodiment>
First, an overview of the key management device according to the first embodiment will be explained. FIG. 1 is a diagram for explaining an overview of the key management device 10 according to the first embodiment. Multiple keys are used at financial institution and retail store locations. The plurality of keys include keys for activating devices installed in the store and keys for opening and closing doors of locations managed within the store. The key management device 10 is installed in a store and used to manage one or more key holders connected to keys. One key holder can be connected to one or more keys. The number of key holders managed by the key management device 10 and the number of keys attached to each key holder are not particularly limited.

The key holder is housed in a housing provided in the key management device 10 . The key holder functions as a housing member that is housed in the housing portion with the key coupled thereto. The key management device 10 manages the key holder housed in the housing section by locking it so that it cannot be taken out from the housing section. Specifically, when the user inserts the key holder into the hole of the container, the key management device 10 locks the key holder so that it cannot be removed from the container. The key holder and the storage section are associated with each other on a one-to-one basis, so that each of the plurality of storage sections can accommodate only one key holder corresponding to each storage section.

The key management device 10 has a door that closes a key storage unit provided with a plurality of storage units. This door is normally locked. The key management device 10 executes user authentication processing to confirm that the user has the authority to take out the key holder from the key management device 10 . When the authority is confirmed, the key management device 10 unlocks the door of the key storage unit and unlocks the key holder that can be taken out by the user. As a result, the user can take out the desired key holder from the container of the key management device 10 . After taking out the key holder from the key management device 10 and using the key, the user returns the key to the key management device 10 by returning the key holder to the storage unit.

The contents of the authentication process for taking out the key holder can be set for each container, that is, for each key holder. For example, a key holder to which an important key is attached can be set to require administrator's approval when it is removed from the key management device 10 . Specifically, it is possible to set so that the key holder cannot be taken out of the storage section unless authentication processing of the administrator who approves use of the key is performed in addition to the authentication processing of the user himself/herself.

In a store, a plurality of users may use the same key. For example, it may be desired to require administrator approval for users who occasionally use a key, while omitting administrator approval for users who frequently use the same key. The key management device 10 is designed to be compatible with such a usage mode.

Specifically, the key management device 10 can set the presence or absence of single authentication authority and the time allowed for single authentication for each user who is permitted to take out a key holder that requires administrator approval. A user who does not have the single authentication authority cannot take out a key holder that requires administrator's approval from the holder unless the user's own authentication process and the administrator's authentication process are performed. A user having single authentication authority can perform a single user authentication process and take out a key holder that requires administrator approval from the storage section.

Further, in the key management device 10, a single-authentication permitted time can be set for each user who has the single-authentication authority. As a result, it is possible to restrict the period of time during which the key holder requiring administrator approval can be taken out by the user's single authentication process. The single authentication possible time can be set by specifying a time period such as from 5:00 to 6:00 or from 5:00 to 1 hour. When the single-authentication permitted time is set, even a user who has the single-authentication authority cannot independently take out the key holder requiring manager's approval from the storage part except during the set time period. In this case, the user cannot take out the key holder without two-person authentication of the user and the administrator, like a user without single authentication authority.

Note that the setting of the single authentication authority is not limited to being set for each user, and may be set for each container, that is, for each key holder. Also, the setting of the single-authentication-permitted time is not limited to being set for each user who has the single-authentication authority, and may be set for each storage unit, that is, for each key holder.

As shown in FIG. 1 , the key management device 10 has an operation display section 13 and a card reader/writer (hereinafter referred to as “R/W section”) 14 . Further, the key management device 10 manages storage section information. The storage section information includes information about the user who has the right to use the key holder housed in each storage section, that is, the key connected to the key holder. The storage unit information also includes information indicating that the use of an important key requires the administrator's approval. Further, the storage unit information includes information on single authentication authority and single authentication permitted time. In the container information, each information is managed for each container.

When taking out a key holder from a storage unit set to require administrator approval, as shown in FIG. 1, user A without single authentication authority must take out the key holder from the key management device 10 together with administrator X. When the user A and the administrator X hold up their cards to the R/W section 14, the R/W section 14 reads the user information recorded on each card (step S1). The user information includes information for identifying the card holder. The key management device 10 authenticates the user A based on the user information read from the card of the user A, and authenticates the administrator based on the user information read from the card of the administrator X. (Step S2). When user A is authenticated, the key management device 10 unlocks the door of the key storage unit (step S3).

The key management device 10 collates the user information of the user A with the storage section information to specify a key holder that the user A can take out from the key management device 10 (step S4). Key holders that can be taken out by user A include key holders that do not require administrator approval and key holders that require administrator approval. If user A is authenticated among them, he/she is permitted to take out the key holder without administrator's approval. Once manager X is authenticated, he is also allowed to remove key fobs that require manager approval. The key management device 10 identifies key holders for which user A is permitted to take out by the administrator X's authentication process. As a result, user A can take out key holders that require administrator approval in addition to key holders that do not require administrator approval.

When a key holder that can be taken out from the key management device 10 by user A is determined by the authentication processing of user A and the authentication processing of administrator X, the key management device 10 is locked in the storage unit 16 for the key holder that can be taken out. release. In addition, the key management device 10 notifies the user A of the position of the accommodation unit 16 (step S5). In the notification process, for example, the holder lamp of each container that notifies the position is turned on. Further, for example, information indicating the position of the storage section from which the key holder can be taken out is displayed on the screen of the operation display section 13 . As a result, the user A can confirm the position of the containing portion 16 containing the desired key holder and take out the key holder from the containing portion 16 (step S6).

As shown in FIG. 1, a user having the single-authentication authority can independently perform the authentication process and take out the key holder from the key management device 10 . When user B, who has the single authentication authority, holds up his card to the R/W section 14, the R/W section 14 reads the user information from the card (step S1'). The key management device 10 authenticates the user B based on the user information on the card (step S2'). When user B is authenticated, the key management device 10 unlocks the door of the key storage unit (step S3').

The key management device 10 collates the user information of the user B with the storage section information to specify a key holder that the user B can take out from the key management device 10 (step S4). Key holders that can be taken out by user B include key holders that do not require administrator approval and key holders that require administrator approval. Since user B has single authentication authority, he is permitted to take out key holders that require administrator approval in addition to key holders that do not require administrator approval.

When a key holder that can be taken out from the key management device 10 by user B is specified by the authentication processing performed by user B alone, the key management device 10 unlocks the storage unit 16 for the key holder that can be taken out, and The user B is notified of the position of the storage unit 16 (step S5). Thereby, the user B can take out the target key holder from the container (step S6).

Note that when the single authentication permissible time is set, a key holder that requires administrator approval is permitted to be taken out only within the set time. If user B executes the authentication process outside the set time of the single authentication possible time, the key management device 10 operates information indicating that the key holder requiring administrator approval cannot be taken out because it is outside the time. Displayed on the display unit 13 .

For example, if the business hours of the store are set as the single-authentication-permissible hours, user B can independently take out the key holder requiring administrator approval from the key management device 10 before and after the store opens and closes. can't. During non-business hours when there are few people, keys can be managed strictly by setting so that even users with single authentication authority cannot take out key holders by single authentication processing. .

Further, for example, if outside business hours is set as the single authentication time, user B cannot independently take out a key holder that requires administrator approval from the key management device 10 during business hours. If the manager is in the store during business hours and the manager is absent after the business hours are over, by setting in this way, even if the manager is absent after the business hours are over, User B can continue to work alone. It becomes possible to take out the key holder, and the convenience is improved.

As described above, in the key management apparatus 10 according to the first embodiment, the presence or absence of the single authentication authority is determined for each user who is given the authority to remove the key holder from the storage unit set to require administrator approval. can be set. As a result, a user who has the single authentication authority can independently take out the key holder from the storage unit of the key management device 10, thereby improving the convenience of the key management device 10. FIG. Further, in the key management device 10, it is possible to set a single-authentication permitted time during which the key holder can be taken out by a single authentication process for each user who has the single-authentication authority.

<External Configuration of Key Management Device 10>
Next, the appearance of the key management device 10 will be described. FIG. 2 is a perspective view showing the appearance of the key management device 10 shown in FIG. As shown in FIG. 2, the key management device 10 includes an operation display unit 13, a R/W unit 14, a storage unit 16, a holder lamp 15, and a key storage unit 18 provided with a plurality of storage units 16. , and a door locking portion 12 .

The operation display unit 13 is, for example, a touch panel display. The operation display unit 13 functions as an operation unit that receives various information input by the user. Further, the operation display unit 13 functions as a display unit that displays various information on the screen.

The R/W unit 14 reads user information recorded on a card carried by the user. The R/W unit 14 can also write data to the card. For example, the R/W unit 14 uses contactless communication technology to read user information stored in the internal memory from a contactless IC card. However, the type of card is not particularly limited, and a reader/writer device corresponding to the type of card is used as the R/W unit 14 . For example, a mode using a contact type IC card or a mode using a magnetic card for magnetically recording information may be used.

A plurality of storage portions 16 are provided in the key storage portion 18 . The key storage part 18 is provided with a door for closing the key storage part 18 so that the key holder cannot be taken out. A door locking unit 12 locks and unlocks the door. For example, an electromagnetic lock mechanism is used as the door lock section 12 .

Each accommodation portion 16 detachably accommodates a key holder connected to a key by, for example, a ring. Each accommodating portion 16 is provided with a lock mechanism (not shown) so as to permit or prohibit taking out of the key holder. The key management device 10 permits or prohibits taking out of the key holder by controlling the locking mechanism of each storage section 16 .

A holder lamp 15 is provided in the vicinity of each housing portion 16 . By turning on the holder lamp 15, the key management device 10 notifies the user of the position of the storage section 16 from which the key holder can be taken out.

For example, LEDs that can emit light in a plurality of different colors are used as holder lamps 15 . The key management device 10 can light or blink each holder lamp 15 in a plurality of different colors. The key management device 10 changes the combination of the light emission color and the light emission mode of the holder lamp 15 to notify the difference in the type of the key holder accommodated in each accommodation section 16, that is, the difference in the key connected to the key holder. be able to. For example, by changing at least one of the light emission color and the light emission mode of the holder lamp 15, a key holder housing section 16 that does not require administrator approval for takeout and a key holder housing section 16 that requires manager approval to take out are separated. reported separately.

<Internal Configuration of Key Management Device 10>
Next, the internal configuration of the key management device 10 will be described. FIG. 3 is a functional block diagram showing the internal configuration of the key management device 10 shown in FIG. As shown in FIG. 3 , the key management device 10 has a key management control section 11 , a door locking section 12 , an operation display section 13 , a R/W section 14 , a holder lamp 15 , a storage section 16 and a storage section 17 . The storage unit 17 stores storage unit information. For example, a hard disk or non-volatile memory is used as the storage unit 17 .

The key management control section 11 controls each section of the key management device 10 . This control implements the functions and operations of the key management apparatus 10 described in the first embodiment. The key management control unit 11 has a reception unit 11a, a registration unit 11b, an authentication unit 11c, a determination unit 11d, and a notification unit 11e. Actually, programs corresponding to these functional units are stored in a ROM or non-volatile memory (not shown), and these programs are loaded into the CPU and executed. As a result, processes corresponding to each of the reception unit 11a, the registration unit 11b, the authentication unit 11c, the determination unit 11d, and the notification unit 11e are executed.

The accepting unit 11a accepts a registration instruction for the storage unit 16 input by the administrator from the operation display unit 13, and notifies the registration unit 11b of the registration instruction. Upon receiving the registration instruction, the registration unit 11 b registers the information input by the administrator from the operation display unit 13 in the storage unit information of the storage unit 17 . This allows the administrator to set the single-authentication authority and the time allowed for single-authentication.

The authentication unit 11c executes authentication processing based on the user information read from the card by the R/W unit 14. FIG. In the authentication process, it is determined whether or not the user has the authority to take out the key holder. It is also determined whether the administrator has the authority to approve removal of the key holder. Note that the authentication processing method is not limited to the aspect performed based on the user information recorded on the card. For example, the authentication process may be performed by inputting a preset code to the operation display unit 13 . Alternatively, for example, the authentication process may be performed by biometric authentication using biometric identification information such as a face, fingerprint, or palm print.

Based on the user information read by the R/W unit 14, the determination unit 11d determines whether the storage unit 16 from which the user can take out the key holder is set to require administrator approval. If administrator approval is required, then the determination unit 11d determines whether the user has the single-authentication authority and whether it is within the time allowed for single-authentication. Thereby, it is determined whether or not the user can independently take out the key holder requiring administrator's approval from the storage section 16 . Based on the determination result, the determination unit 11d unlocks the key holder in the storage unit 16 from which the user can take out the key holder.

The notification unit 11e notifies the position of the storage unit 16 where the user can take out the key holder based on the determination result of the determination unit 11d. The notification is performed by turning on the holder lamp 15 of the corresponding housing portion 16 . The notification unit 11e distinguishes between the holder lamp 15 of the storage unit 16 from which the key holder can be taken out without administrator approval and the holder lamp 15 of the storage unit 16 from which the key holder cannot be taken out without administrator approval. to light up.

<User information and storage unit information>
Next, user information and storage unit information will be described. FIG. 4 is a diagram showing an example of user information and storage section information used by the key management device 10 shown in FIG. FIG. 4A shows an example of user information stored in an IC card owned by user A. FIG. The user information read from the IC card by the R/W unit 14 includes a user item and an administrator item. Information for specifying the holder of the IC card is registered in the user item. Information for specifying an administrator who approves taking out of the key holder is registered in the administrator item. FIG. 4(a) shows that the IC card that stores this user information is owned by user A, and user A must obtain approval from manager X when taking out a key holder that requires manager approval. indicates that there is

As shown in FIG. 4B, the storage unit information stored in the storage unit 17 of the key management device 10 includes items such as storage unit number, administrator approval setting, user, single authentication authority, and single authentication permitted time. is included. In the example of FIG. 4(b), the storage section 16 with the storage section number "1" requires administrator's approval to take out the key holder, so the administrator approval setting item is set to "yes".

For the storage unit 16 with the storage unit number "1", "user A" and "user B" are set in the user item because two persons, users A and B, have the right to take out the key holder. there is Since the user A does not have the single authentication authority, the single authentication authority is set to "no". Therefore, when taking out the key holder from the storage section 16 with the storage section number "1", the user A needs to perform the removal operation together with the administrator X as described with reference to FIG. After performing the authentication process and confirming that the user is User A, on the condition that the administrator X has performed the authentication process based on the user information shown in FIG. The key holder can now be taken out from the storage section 16 with the storage section number "1".

On the other hand, since user B has the single authentication authority, as shown in FIG. 4B, the single authentication authority item is set to "yes". Therefore, as described with reference to FIG. 1, User B performs the authentication process alone, and after being confirmed as User B, can take out the key holder from the storage section 16 with the storage section number "1". become.

In the example shown in FIG. 4B, for user B, "8:00 to 18:00" is set in the single-authentication available time item. Therefore, the time zone in which user B can perform a single authentication process and take out the key holder from the container 16 with the container number "1" is limited to 8:00 to 18:00. When User B takes out a key holder from the storage section 16 with storage section number "1" between 18:00 and 8:00 the next morning, User B needs to have the administrator perform authentication processing. There is For example, in the user information of user B, if the administrator who approves taking out the key holder is set as administrator X, user B performs the takeout operation together with administrator X in the same way as user A. It will be.

In the example shown in FIG. 4B, in the storage unit 16 with the storage unit number "2", the manager's approval is not required to take out the key holder, so the administrator approval setting item is set to "no". there is Since the user A has the authority to take out the key holder from the storage unit 16, "user A" is set in the user item. Since the storage unit 16 does not require administrator approval to take out the key holder, the user A can be The key holder can be taken out from the storage portion 16 numbered "2".

In the example of FIG. 4, for example, when the user A performs the authentication process alone, the holder lamp 15 lights up in the storage section 16 with the storage section number "2". On the other hand, when the user A performs the authentication process together with the manager X, the holder lamps 15 are lit in the storage section 16 with the storage section number "1" and the storage section 16 with the storage section number "2". At this time, the holder lamp 15 of the storage section 16 with the storage section number "2" that does not require manager's approval to take out the key holder and the holder lamp 15 of the storage section 16 with the storage section number "1" that requires manager's approval are Light up in different colors.

<Processing procedure when key is retrieved>
Next, a processing procedure for taking out a key holder from the key management device 10 will be described. FIG. 5 is a flow chart showing a processing procedure for taking out a key holder from the key management device 10 shown in FIG. FIG. 5 shows the flow of processing performed after the authentication processing of the user and the administrator or the authentication processing of the user alone.

After the authentication process is completed, the determination unit 11d collates the user information with the storage unit information, and determines whether or not the authenticated user has the authority to take out the key holder from the storage unit 16 (step S101). . If the authenticated user is not registered in the item of the user of the storage unit information (step S102; No), the determination unit 11d notifies the operation display unit 13 that there is no storage unit 16 from which the key holder can be taken out. It is displayed (step S103), and the process ends.

If the authenticated user is registered in the storage unit information (step S102; Yes), the determination unit 11d determines that the storage unit 16 from which the user can take out the key holder is set to require administrator approval. (step S104). If there is no container 16 that requires administrator approval (step S104; No), the notification unit 11e lights the holder lamp 15 to notify the position of the container 16 from which the key holder can be taken out (step S107). Further, the determination unit 11d unlocks the storage unit 16 from which the key holder can be taken out (step S107), and the process ends.

In this case, the key holders are unlocked and the holder lamps 15 are turned on in all the accommodation units 16 in which the authenticated user is registered in the user item of the accommodation unit information. At this time, the accommodating portions 16 in which the holder lamp 15 lights up do not include the accommodating portions 16 that require manager's approval to take out the key holder.

If there is a storage unit 16 set to require administrator approval (step S104; Yes), the determination unit 11d determines whether or not the administrator has been authenticated in addition to the user (step S105). If the administrator has been approved (step S105; Yes), the notification unit 11e lights the holder lamp 15 to notify the position of the storage unit 16 from which the key holder can be taken out (step S107). Further, the determination unit 11d unlocks the storage unit 16 from which the key holder can be taken out (step S107), and the process ends.

In this case as well, the key holders are unlocked and the holder lamps 15 are turned on in all the accommodation units 16 in which the authenticated user is registered in the user item of the accommodation unit information. However, the storage sections 16 in which the holder lamp 15 is lit include the storage section 16 that requires manager's approval to take out the key holder and the storage section 16 that does not require manager's approval. The notification unit 11e lights the holder lamps 15 of the storage units 16 that require administrator approval and the holder lamps 15 of the storage units 16 that do not require administrator approval in different colors.

If the administrator's approval has not been granted (step S105; No), the determination unit 11d determines that the authenticated user has the single-authentication authority and the authentication time is within the time zone set as the single-authentication permitted time. It is determined whether or not it is included (step S106). When the authenticated user has the single authentication authority and the authentication time is included in the single authentication permitted time (step S106; Yes), the notification unit 11e lights the holder lamp 15 and holds the key holder. The position of the container 16 that can be taken out is notified (step S107). Further, the determination unit 11d unlocks the storage unit 16 from which the key holder can be taken out (step S107), and the process ends.

The holder lamps 15 are turned on in all the storage units 16 in which the authenticated user is registered in the user item of the storage unit information. The storage units 16 in which the holder lamp 15 is lit include storage units 16 that require manager's approval to take out the key holder and storage units 16 that do not require manager's approval. The notification unit 11e lights the holder lamps 15 of the storage units 16 that require administrator approval and the holder lamps 15 of the storage units 16 that do not require administrator approval in different colors. At this time, in order to indicate that taking out of the key holder is permitted by the single authentication authority, the holder lamp 15 of the storage section 16 requiring administrator's approval can be set to blink. In this way, it is possible to distinguish between the case where removal of the key holder is permitted by authentication processing of the administrator (step S105; Yes) and the case where removal of the key holder is permitted by the single authentication authority (step S106; Yes). can be done.

If the authenticated user does not have the single-authentication authority, or if the authentication time is not included in the time zone set as the single-authentication time (step S106; No), the notification unit 11e turns off the holder lamp 15. is turned on to notify the position of the housing portion 16 from which the key holder can be taken out (step S107). Further, the determination unit 11d unlocks the storage unit 16 from which the key holder can be taken out (step S107), and the process ends. In this case, only the holder lamps 15 of the storage units 16 that do not require administrator approval among the storage units 16 in which the authenticated user is registered in the user item of the storage unit information are turned on.

As described above, in the key management apparatus 10 of the first embodiment, when a user has the authority to take out a key holder requiring administrator approval from the storage unit 16, whether or not the user has the single authentication authority is determined. is determined. A user without single authentication authority needs to perform two-party authentication of the user and an administrator to take out the key holder, but a user with single authentication authority performs authentication processing independently and requires administrator approval. The key holder can be taken out from the housing portion 16 .

Further, in the key management device 10, when the user has the single authentication authority, it is determined whether or not the authentication time is included in the time period set as the single authentication permitted time. By setting the single-authentication time, it is possible to limit the time period during which the user alone can perform the authentication process and take out the key holder from the storage unit 16 .

In this embodiment, a mode of managing keys based on settings in the storage unit information in the key management device 10 has been shown, but the key management device 10 can also operate in cooperation with other devices. For example, the key management device 10 is used in connection with a management device used for schedule management at a store. The key management device 10 can acquire information on the business hours of the store managed by the management device, and use the information to set the single-authentication-enabled hours based on the business hours as described above.

Also, for example, the administrator can set at least one of the single-authentication authority and the single-authentication permitted time by operating the management device. When the administrator performs a setting operation on the management device, the key management device 10 manages the key based on the contents set by the administrator on the management device. The content set by the management device is reflected in the storage unit information of the key management device 10, so that the key management device 10 can manage the keys as described above.

In the first embodiment, by setting the single-authentication authority and the single-authentication permitted time, a user having the single-authentication authority can independently take out a key holder requiring administrator approval from the key management device 10. showed that. In a second embodiment, a key management device 20 is described in which a user without single authentication authority can independently take out a key holder that requires administrator approval from the storage section 16 .

<Overview of Key Management System According to Second Embodiment>
First, an overview of the key management system according to the second embodiment will be explained. FIG. 6 is a diagram for explaining an overview of the key management system according to the second embodiment. As shown in FIG. 6, this key management system includes a key management device 20 and a terminal device 30 communicably connected to the key management device 20 via a network N. As shown in FIG. The key management device 20 has all the functions of the key management device 10 described in the first embodiment.

As shown in FIG. 6, before user A, who does not have the single authentication authority, takes out the key holder from the key management device 20, the manager X operates the terminal device 30 to approve the user A as the manager. is reserved (step S11). The terminal device 30 transmits the approval reservation information created in response to the operation of the administrator X to the key management device 20 (step S12). The key management device 20 registers the approval reservation information received from the terminal device 30 in the storage unit information (step S13).

When user A, who does not have the single authentication authority, holds up his card to the R/W unit 14, the R/W unit 14 reads the user information from the card (step S14). The key management device 10 authenticates the user A based on the user information on the card, and determines whether or not the user A has the authority to take out the key holder (step S15). When the user A has the authority to take out the key holder, the door of the key storage section (not shown) is unlocked so that the door can be opened (step S16).

Next, the key management device 20 collates the user information with the container information (step S17), and specifies the container from which the user A can take out the key holder. At this time, since the approval reservation information is registered in the storage section information, the storage section from which the user A can take out the key holder is specified in the same way as when the user A performs the authentication process together with the administrator X. be done. As a result, the user A is permitted to take out the key holder requiring administrator approval, as in the case where the administrator X is authenticated. The key management device 20 unlocks the key holder container 16 that can be taken out by the user A, and notifies the holder lamp of the position of the container 16 (step S18). Thereby, the user A can take out the target key holder from the container (step S19).

As described above, in the key management system according to the second embodiment, the administrator can reserve approval by designating a time slot in advance for a user who does not have single authentication authority. As a result, a user who does not have single-authentication authority can independently take out a key holder that requires administrator approval from the key management device 20 .

<Internal Configuration of Key Management Device 20>
Next, the internal configuration of the key management device 20 will be explained. FIG. 7 is a functional block diagram showing the internal configuration of the key management device 20 shown in FIG. As shown in FIG. 7, the key management device 20 includes a key management control unit 21, a door locking unit 12, an operation display unit 13, a R/W unit 14, a holder lamp 15, a storage unit 16, a storage unit 17, and a communication unit 22. have Since the door locking unit 12, the operation display unit 13, the R/W unit 14, the holder lamp 15, the storage unit 16, and the storage unit 17 are the same as those in the first embodiment, description thereof will be omitted.

The key management control section 21 controls each section of the key management device 20 . This control implements the functions and operations of the key management device 20 described in the second embodiment. The key management control section 21 has a reception section 11 a , a registration section 11 b , an authentication section 11 c , a determination section 11 d , a notification section 11 e and an approval reservation section 23 . Actually, programs corresponding to these functional units are stored in a ROM or non-volatile memory (not shown), and these programs are loaded into the CPU and executed. As a result, processes corresponding to each of the reception unit 11a, the registration unit 11b, the authentication unit 11c, the determination unit 11d, the notification unit 11e, and the approval reservation unit 23 are executed. Since each functional unit other than the approval reservation unit 23 is the same as that of the first embodiment, description thereof is omitted.

The approval reservation section 23 registers the approval reservation information received from the terminal device 30 in the storage section information of the storage section 17 . The approval reservation unit 23 functions as a reservation unit that receives an approval reservation for taking out the key holder from outside the device. The communication unit 22 is an interface unit for communicating with the terminal device 30 via the network N. FIG.

<Internal Configuration of Terminal Device 30>
Next, the internal configuration of the terminal device 30 will be described. FIG. 8 is a functional block diagram showing the internal configuration of the terminal device 30 shown in FIG. As shown in FIG. 8 , the terminal device 30 has a control section 31 , an input section 32 , a display section 33 , a communication section 34 and a storage section 35 .

The control unit 31 controls each unit of the terminal device 30 . This control implements the functions and operations of the terminal device 30 described in the second embodiment. The control unit 31 has an approval reservation management unit 31a and an approval reservation notification unit 31b. Actually, programs corresponding to these functional units are stored in a ROM or non-volatile memory (not shown), and these programs are loaded into the CPU and executed. As a result, the processes respectively corresponding to the approval reservation management section 31a and the approval reservation notification section 31b are executed.

The approval reservation management unit 31a stores the approval reservation information input from the input unit 32 in the storage unit 35 and manages the information. The approval reservation notification unit 31 b transmits approval reservation information to the key management device 20 via the communication unit 34 .

The input unit 32 is used to input information to the terminal device 30 . For example, a keyboard and mouse are used as the input unit 32 . The display unit 33 is used by the terminal device 30 to display information. For example, a liquid crystal display device is used as the display unit 33 .

The communication unit 34 is a communication interface that communicates with the key management device 20 . The storage unit 35 stores approval reservation information. A hard disk or nonvolatile memory is used as the storage unit 35 .

<Example of user information and storage unit information>
Next, user information and storage unit information will be described. FIG. 9 is a diagram showing an example of user information and storage section information used in the key management system shown in FIG. FIG. 9A shows user information stored in an IC card possessed by user A. FIG. The user information includes a user item and an administrator item. FIG. 9(a) shows that the IC card that stores this user information is owned by user A, and user A must obtain approval from manager X when taking out a key holder that requires manager approval. indicates that there is

As shown in FIG. 9B, the storage unit information stored in the storage unit 35 of the key management device 20 includes storage unit number, administrator approval setting, user, single authentication authority, single authentication permitted time, and approval. Contains items of reservation information. In the example of FIG. 9(b), in the storage section 16 with the storage section number "1", the manager's approval is required to take out the key holder, so the administrator approval setting item is set to "yes".

For the storage unit 16 with the storage unit number "1", "user A" and "user B" are set in the user item because two persons, users A and B, have the right to take out the key holder. there is Since the user A does not have the single authentication authority, "None" is set in the single authentication authority item. For this reason, when taking out the key holder from the storage section 16 with the storage section number "1", normally, the user A needs to perform the removal operation together with the administrator X, but only during the time slot reserved by the approval reservation information. , the user A can take out the key holder by performing the authentication process alone.

In the example of FIG. 9B, "8:00 to 9:00 on August 1, 2019" is set in the item of the approval reservation information of the user A. Therefore, the user A can perform the authentication process alone and take out the key holder from the storage section 16 with the storage section number "1" only during this time period.

<Processing procedure when key is retrieved>
Next, a processing procedure for taking out a key holder from the key management device 20 will be described. FIG. 10 is a flow chart showing a processing procedure for taking out a key holder from the key management device 20 shown in FIG. FIG. 10 shows the flow of processing performed after the authentication processing of the user and administrator or the authentication processing of the user alone.

When the authentication process is finished, the determination unit 11d compares the user information with the storage unit information, and determines whether or not the authenticated user has the authority to take out the key holder from the storage unit 16 (step S201). . If the authenticated user is not registered in the item of the user of the container information (step S202; No), the determination unit 11d notifies the operation display unit 13 that there is no container 16 from which the key holder can be taken out. It is displayed (step S203), and the process ends.

If the authenticated user is registered in the storage unit information (step S202; Yes), the determination unit 11d determines that the storage unit 16 from which the user can take out the key holder is set to require administrator approval. (step S204). If there is no container 16 that requires administrator approval (step S204; No), the notification unit 11e lights the holder lamp 15 to notify the position of the container 16 from which the key holder can be taken out (step S208). In addition, the determination unit 11d unlocks the storage unit 16 from which the key holder can be taken out (step S208), and this process ends.

In this case, the key holders are unlocked and the holder lamps 15 are turned on in all the accommodation units 16 in which the authenticated user is registered in the user item of the accommodation unit information. At this time, the accommodating portions 16 in which the holder lamp 15 lights up do not include the accommodating portions 16 that require manager's approval to take out the key holder.

If there is a storage unit 16 set to require administrator approval (step S204; Yes), the determination unit 11d determines whether or not the administrator has been authenticated in addition to the user (step S205). If the administrator has been approved (step S205; Yes), the notification unit 11e lights the holder lamp 15 to notify the position of the storage unit 16 from which the key holder can be taken out (step S208). In addition, the determination unit 11d unlocks the storage unit 16 from which the key holder can be taken out (step S208), and this process ends.

In this case as well, the key holders are unlocked and the holder lamps 15 are turned on in all the accommodation units 16 in which the authenticated user is registered in the user item of the accommodation unit information. However, the storage sections 16 in which the holder lamp 15 is lit include the storage section 16 that requires manager's approval to take out the key holder and the storage section 16 that does not require manager's approval. The notification unit 11e lights the holder lamps 15 of the storage units 16 that require administrator approval and the holder lamps 15 of the storage units 16 that do not require administrator approval in different colors.

If the administrator's approval has not been granted (step S205; No), the determination unit 11d determines that the authenticated user has the single-authentication authority and the authentication time is within the time zone set as the single-authentication permitted time. It is determined whether or not it is included (step S206). If the authenticated user has the single authentication authority and the authentication time is included in the single authentication permitted time (step S206; Yes), the notification unit 11e lights the holder lamp 15 and holds the key holder. The position of the container 16 that can be taken out is notified (step S208). In addition, the determination unit 11d unlocks the storage unit 16 from which the key holder can be taken out (step S208), and this process ends.

The key holders are unlocked and the holder lamps 15 are turned on in all the storage units 16 in which the authenticated user is registered in the user item of the storage unit information. The storage units 16 in which the holder lamp 15 is lit include storage units 16 that require manager's approval to take out the key holder and storage units 16 that do not require manager's approval. The notification unit 11e lights the holder lamps 15 of the storage units 16 that require administrator approval and the holder lamps 15 of the storage units 16 that do not require administrator approval in different colors. At this time, in order to indicate that taking out of the key holder is permitted by the single authentication authority, the holder lamp 15 of the storage section 16 requiring administrator's approval can be set to blink. In this way, it is possible to distinguish between the case where removal of the key holder is permitted by authentication processing of the administrator (step S205; Yes) and the case where removal of the key holder is permitted by the single authentication authority (step S206; Yes). can be done.

If the authenticated user does not have single-authentication authority, or if the authentication time is not included in the time zone set as the single-authentication time (step S206; No), the determination unit 11d determines whether the approval reservation information It is determined whether or not the approval conditions set in 1 are satisfied (step S207). If the approval reservation information is set for the user and the authentication time is included in the time zone set in the approval reservation information (step S207; Yes), the notification unit 11e turns on the holder lamp 15. to notify the position of the housing portion 16 from which the key holder can be taken out (step S208). In addition, the determination unit 11d unlocks the storage unit 16 from which the key holder can be taken out (step S208), and this process ends.

In this case, the holder lamp is unlocked and the key holder is unlocked in the storage section 16 that does not require manager approval to take out the key holder and in the storage section 16 that has been approved by the approval reservation information among the storage sections 16 that require manager approval. 15 lights up. The notification unit 11e lights the holder lamps 15 of the storage units 16 that require administrator approval and the holder lamps 15 of the storage units 16 that do not require administrator approval in different colors. At this time, in order to indicate that removal of the key holder is permitted based on the approval reservation information, it is also possible to set the holder lamp 15 of the storage section 16 requiring manager approval to blink. Also, the flashing speed can be set to a speed different from the flashing speed when removal of the key holder is permitted by single authentication authority. As a result, when taking out the key holder is permitted by performing authentication processing of the administrator (step S205; Yes), when taking out the key holder is permitted by the single authentication authority (step S206; Yes), and approval reservation information (step S207; Yes).

If the approval reservation information is not set for the user, or if the approval reservation information is set but the authentication time is not included in the time zone set in the approval reservation information (step S207; No), notification The part 11e turns on the holder lamp 15 to notify the position of the storage part 16 from which the key holder can be taken out (step S208). In addition, the determination unit 11d unlocks the storage unit 16 from which the key holder can be taken out (step S208), and this process ends. In this case, only the holder lamps 15 of the storage units 16 that do not require administrator approval among the storage units 16 in which the authenticated user is registered in the user item of the storage unit information are turned on.

Note that the configuration of the key management system shown in the second embodiment is functionally schematic, and does not necessarily need to physically have the illustrated configuration. The form of distribution and integration of each device that constitutes the key management system is not limited to the above example, and all or part of it can be functionally or physically distributed in arbitrary units according to various loads and usage conditions. It can be configured by distributing and integrating into

As described above, in the key management device 20 of the second embodiment, when the user has the authority to take out the key holder requiring administrator approval from the storage unit 16, whether or not the user has the single authentication authority is determined. is determined. A user without single authentication authority needs to perform two-party authentication of the user and an administrator to take out the key holder, but a user with single authentication authority performs authentication processing independently and requires administrator approval. The key holder can be taken out from the housing portion 16 .

Further, in the key management device 20, when the user has the single authentication authority, it is determined whether or not the authentication time is included in the time zone set as the single authentication permitted time. By setting the single-authentication time, it is possible to limit the time period during which the user alone can perform the authentication process and take out the key holder from the storage unit 16 .

Furthermore, in the key management device 20, if the user does not have the single authentication authority, whether or not the administrator has reserved approval for the user to take out the key holder by designating a time period in advance. is determined. When the administrator reserves approval in advance, users who do not have the single-authentication authority also perform the authentication process by themselves only during the time specified by the administrator, and the key holder requiring administrator approval is removed from the storage unit 16. can be taken out.

In this embodiment, the user and the administrator have been described as examples, but these are examples. For example, when the key management device 10 or 20 takes out the key holder from the storage unit 16, the target person for whom the authentication process is requested is the user as the first user and the administrator as the second user. However, two users who are not in the position of an administrator may be designated as a first user and a second user, and authentication processing may be requested to these two users. Alternatively, two administrators may be the first user and the second user, and authentication processing may be requested of these two administrators. There are no particular restrictions on the types of multiple subjects for whom authentication processing is requested. Further, for example, the person who sets the storage section information including the single authentication authority is not limited to the administrator, and a user who is not in the position of the administrator may set the storage section information. The type of operator who performs the setting operation is not particularly limited.

In this embodiment, the administrator pre-registers the permission information including the single authentication authority for permitting the user to take out the key holder from the storage section 16 in the storage section information of the storage section 17 . Alternatively, permission information may be input to the key management devices 10 and 20 when taking out the key holder. Specifically, an administrator operates a predetermined terminal to generate permission information and transmits it to a portable communication terminal owned by a user. The user inputs the permission information received by the communication terminal to the key management devices 10 and 20 . The key management apparatuses 10 and 20 that have recognized the permission information control the storage section 16 so that the user can take out the key holder that requires administrator approval by executing the authentication process alone.

For example, the permission information includes administrator information that identifies the administrator who issued the permission information, device information that identifies the key management devices 10 and 20 and the storage section 16 that are permitted to take out the key holder, and It contains user information that identifies the user and period information that identifies the period during which the data can be retrieved. The permission information is encoded into a graphic code and transmitted/received. For example, the permission information is encoded into a QR code (registered trademark) and sent using e-mail. The key management devices 10 and 20 use a graphic code reading device to read the graphic code displayed on the operation display section of the mobile communication terminal by the user. For example, the user uses a smart phone to display the QR code received by e-mail on the screen for the key management devices 10 and 20 to read. The key management devices 10 and 20 acquire permission information from the graphic code and store it in the storage unit 17 . The key management devices 10 and 20 control the storage unit 16 so that the user can independently perform authentication processing based on each information included in the permission information and take out the key holder that requires administrator approval. The period during which the user alone can take out the key holder is restricted based on the period information included in the permission information. The user cannot take out the key holder from the storage section 16 unless it is within the period set in the period information. As a result, even if a network failure occurs, for example, the administrator can send permission information to the user's mobile communication terminal so that the user can take out the key holder that requires administrator approval.

The key management devices 10 and 20 according to the present embodiment can also perform processing based on a job start operation and a job end operation by the administrator. The business start operation is an operation performed by the administrator to start business of the store. The business end processing is an operation performed by the manager to end the business of the store. The key management devices 10 and 20 manage the key holders in all the housing units 16 as described above from when the operation to start the business is performed until the operation to end the business is performed. After the operation to end the work is performed, the key management devices 10 and 20 manage the key holders in only some of the storage units 16 set in advance as described above. The administrator can continue to designate the storage section 16 from which the key holder can be taken out as described above even after the end of the work. After the administrator has performed the task termination operation, the key holder cannot be taken out from the storage sections 16 other than some of the storage sections 16 specified by the administrator.

For example, when the manager performs a business start operation on the key management device 10, 20 or the terminal device 30, the user takes out the key holder from the storage unit 16 of the key management device 10, 20 as described above, and prepares to open the store. It can be performed. After the business of the store is closed, when the manager performs the business end operation on the key management devices 10 and 20 or the terminal device 30, the key management devices 10 and 20 only store part of the storage units 16 designated in advance by the manager. The management of the key holder is continued, and control is performed so that the key holder cannot be taken out from the other storage units 16. - 特許庁If all the functions of the key management devices 10 and 20 stop due to the operation to end the business, it becomes impossible to take out the key holder from all the storage units 16. Continue to manage key fobs. As a result, for example, in an emergency, some key holders can be taken out from the key management devices 10 and 20 without waiting for the manager's arrival at the store. As a result, the key management devices 10 and 20 can flexibly deal with various key usage methods.

INDUSTRIAL APPLICABILITY The key management device, key management system, and key management method according to the present invention are useful for administrators to manage keys without impairing user convenience.

10, 20 key management device 11, 21 key management control unit 12 door locking unit 13 operation display unit 14 R/W unit 15 holder lamp 16 storage unit 17 storage unit 18 key storage unit 22 communication unit 30 terminal device 31 control unit 32 input Part 33 Display Part 34 Communication Part 35 Storage Part

Claims (12)

A key management device for managing a key connected to a housing member,
a storage unit configured to lock the stored storage member and request authentication of a first user and a second user who is different from the first user to unlock the storage member;
a storage unit that stores a predetermined condition;
a control unit that controls to unlock the storage unit by authentication of the first user without requesting authentication of the second user when the predetermined condition is satisfied ;
The storage unit stores information about the authority of the user who satisfies the predetermined condition,
When the first user has the authority, the control unit performs control so that the storage unit is unlocked by the authentication of the first user without requesting the authentication of the second user.
A key management device characterized by: A key management device for managing a key connected to a housing member,
a first storage unit configured to lock the stored storage member and require only authentication of the first user to unlock the storage member;
a second storage unit configured to lock the stored storage member and request authentication of the first user and a second user different from the first user to unlock the storage member;
a notification unit that notifies the position of the unlocked storage unit;
a storage unit that stores predetermined conditions;
a control unit for controlling to unlock the second storage unit by authentication of the first user without requesting authentication of the second user when the predetermined condition is satisfied;
with
The notification unit notifies the unlocked first storage unit and the second storage unit in a distinguishable manner.
A key management device characterized by: The storage unit stores information on a time period in which the predetermined condition is satisfied,
2. The control unit controls to release the lock of the storage unit by authentication of the first user without requesting authentication of the second user during the time period. 2. The key management device according to 2 . 4. The key management apparatus according to claim 3 , wherein the storage unit stores the time period in which the predetermined condition is satisfied for each housing member. further comprising a reservation unit for reserving a time slot for using the key;
5. The key management apparatus according to claim 3 , wherein the time zone in which the predetermined condition is satisfied is a time zone reserved by the reservation unit. The reservation by the reservation unit further includes information designating the user of the key,
The control unit allows the user specified in the reservation to be accommodated by the authentication of the first user without requesting the authentication of the second user in the time zone reserved by the reservation unit. 6. The key management apparatus according to claim 5 , wherein control is performed to unlock the unit. The key management device according to any one of claims 1 to 6, wherein the storage unit stores information on the authority of the user who satisfies the predetermined condition for each housing member. A key management system for managing keys coupled to housing members,
a storage unit configured to lock the stored storage member and request authentication of a first user and a second user who is different from the first user to unlock the storage member;
a storage unit that stores a predetermined condition;
a control unit that controls to unlock the storage unit by authentication of the first user without requesting authentication of the second user when the predetermined condition is satisfied ;
The storage unit stores information about the authority of the user who satisfies the predetermined condition,
When the first user has the authority, the control unit performs control so that the storage unit is unlocked by authentication of the first user without requesting authentication of the second user.
A key management system characterized by: A key management system for managing keys coupled to housing members,
a first storage unit configured to lock the stored storage member and require only authentication of the first user to unlock the storage member;
a second storage unit configured to lock the stored storage member and request authentication of the first user and a second user different from the first user to unlock the storage member;
a notification unit that notifies the position of the unlocked storage unit;
a storage unit that stores predetermined conditions;
a control unit for controlling to unlock the second storage unit by authentication of the first user without requesting authentication of the second user when the predetermined condition is satisfied;
with
The notification unit notifies the unlocked first storage unit and the second storage unit in a distinguishable manner.
A key management system characterized by: further comprising a terminal device for reserving a time slot for using the key;
The control unit controls to unlock the accommodation unit by authentication of the first user without requesting authentication of the second user during a time slot reserved by the terminal device. 10. The key management system according to claim 8 or 9 . A key management method performed by a key management device having a plurality of storage units for storing and locking storage members to which keys are connected,
a step of performing an authentication process by the first user in order to take out the key from the storage portion set to require authentication of the first user and a second user different from the first user to unlock the storage member; and,
When the first user has the authority to satisfy a predetermined condition, the storage section is unlocked by the authentication of the first user without requiring the authentication of the second user. A key management method characterized by comprising the steps of: A key management method performed by a key management device having a plurality of storage units for storing and locking storage members to which keys are connected,
In order to take out the key from the first storage section which is set to require authentication of the first user to unlock the storage member, the first user performs authentication processing, and the first user authenticates the key. unlocking the first housing;
In order to take out the key from the second storage unit, which is set to require authentication of the first user and a second user different from the first user to unlock the storage member, the first user authenticates. a step of unlocking the second storage unit by the authentication of the first user without requesting the authentication of the second user when a predetermined condition set in advance is satisfied after processing; and,
a step of notifying the position of the unlocked accommodating portion;
including
The unlocked first storage section and the second storage section are notified in a distinguishable manner.
A key management method characterized by:

Images