JP7672902B2 - Access Control System - Google Patents

Description

The present invention relates to an access control system.

Previously, systems have been developed to identify people who may have come into contact with someone infected with an infectious disease.

For example, Patent Document 1 discloses a system used in hospitals that, when the name of a patient who has contracted an infectious disease during hospitalization or after discharge is input, creates a list of other patients who may have come into contact with that patient. When the name of an infected patient is input, this system searches a database that stores the rooms in which each patient who was hospitalized at the hospital stayed and the length of each patient's stay in hospital, and creates a list of other patients who stayed in the same room or ward as the infected patient during the same period of time.

Patent Document 2 discloses an entrance/exit management system that identifies facility users who may have come into contact with an infected person by sharing the same activities as the infected person as suspected infection users. This system operates to prohibit infected and suspected infection users from entering specific rooms until the symptom-related period has passed.

JP 2005-25457 A JP 2019-200503 A

It is required to provide information that will allow a better assessment of the possibility of infection for people who were in the same area at the same time as a person with an infectious disease.

The object of the present invention is to provide an access control system that can notify more appropriate information about people who have been in the same area at the same time as a person suffering from an infectious disease.

According to one aspect of the present invention for solving such problems, there is provided an access control system for managing the entrance and exit of multiple users to multiple sections, the access control system including: a storage means for storing, for each section, history information associating users who stayed in each section with the time when the users entered or left each section, and a risk level indicating the level of risk of infection with an infectious disease for each section; a registration means for registering designated users from among the multiple users; an extraction means for identifying users who stayed in the same section at the same time as the registered designated user based on the history information, and extracting suspected infections from the registered designated users based on the stay time spent in the same section at the same time as the designated user and the risk level of the section; and an output means for outputting information regarding the extracted suspected infections.

In this access control system, the extraction means preferably extracts users whose stay time is equal to or exceeds a threshold value as suspected infections, and the threshold value is preferably varied according to the risk level of each section.

In this access control system, it is preferable that the extraction means weights the stay time according to the risk level of each section, and extracts suspected infections based on the weighted stay time.

In this access control system, if a user stays in two or more compartments together with an infected person, the extraction means preferably weights the stay time according to the risk level of each compartment, and determines whether the user is suspected of being infected based on the sum of the weighted stay times.

In this access control system, it is preferable to change the risk level of each area depending on the usage status of each area.

In this access control system, it is preferable that the output means outputs a distinction between a suspected infected person who has been in two or more compartments consecutively at the same time as an infected person and a suspected infected person who has been in only one compartment at the same time as an infected person.

The access control system of the present invention can more appropriately notify people who have been in the same area at the same time as a person with an infectious disease.

1 is a diagram showing a schematic configuration of an access control system 1 according to an embodiment of the present invention. 1A is an example of the data structure of the history table 122, and FIG. 1B is an example of the data structure of the infection risk table 123. 1 is an example of a floor plan of an office including multiple bays. 13 is a flowchart showing an example of an entrance/exit management process performed by the management device 10. 10 is a flowchart illustrating an example of a notification process performed by a management device 10. 13 is a flowchart showing an example of a list generation process performed by a management device 10. This is an example of a list of infection candidates. 13 is a flowchart showing an example of a suspected infection extraction process performed by the management device 10. This is an example of information regarding suspected infection.

The following describes an access control system according to one embodiment of the present invention with reference to the drawings. However, it should be understood that the present invention is not limited to the drawings or the embodiment described below.

Figure 1 is a diagram showing the schematic configuration of an access control system 1 according to one embodiment of the present invention. As shown in Figure 1, the access control system 1 has a management device 10, operation terminals 20a, 20b, 20c, etc., and an administrator terminal 30. The management device 10 is an information processing device that manages access to an access control area divided into multiple sections, such as an office, a store, a factory, etc., and is communicatively connected to the operation terminal 20 and the administrator terminal 30. The operation terminals 20a, 20b, 20c, etc. are terminals through which users request entry to or exit from each section, and are communicatively connected to the management device 10. Hereinafter, the operation terminals 20a, 20b, 20c, etc. may be collectively referred to as the operation terminal 20. The number of operation terminals 20 in one section is not limited to one, and may be multiple. The administrator terminal 30 is a terminal used by an administrator who manages each section, and is communicatively connected to the management device 10 via a communication network 40 such as the Internet.

The management device 10 has a communication unit 11, a memory unit 12, a control unit 13, and an interface unit 14.

The communication unit 11 has a communication interface circuit that conforms to wired/wireless communication standards such as Ethernet (registered trademark) and IEEE 802.11, and communicates with the administrator terminal 30 via the communication network 40 to send and receive various information.

The storage unit 12 includes a semiconductor memory, a magnetic storage medium, and/or an optical storage medium, etc. The storage unit 12 stores various data and codes of a computer program executed by the control unit 13 to control the operation of the management device 10. The computer program can be installed in the storage unit 12 by a known method via a computer-readable storage medium such as a DVD-ROM or a communication line. The storage unit 12 is an example of a storage means.
The storage unit 12 stores user information 121, a history table 122, and an infection risk table 123. A user ID for identifying a user who can use a section is stored for each section ID for identifying the section as the user information 121. The history table 122 and the infection risk table 123 will be described in detail later.

The control unit 13 has a processor such as a CPU or a multiprocessor and its peripheral circuits, and the processor controls the operation of the management device 10 by executing a computer program stored in the storage unit 12. A DSP, an LSI, an ASIC, an FPGA, or the like may be used as the control unit 13.
The control unit 13 has, as functional modules of a program operating on the processor, an acquisition unit 131, an authentication unit 132, a registration unit 133, a determination unit 134, a generation unit 135, an extraction unit 136, and a notification unit 137. The notification unit 137 is an example of the output unit of the present invention.

The interface unit 14 has an interface circuit conforming to a serial bus standard such as USB, and is communicatively connected to the operation terminal 20 to transmit and receive various signals. Note that the interface unit 14 may have an interface circuit conforming to a wired/wireless communication standard such as Ethernet (registered trademark), IEEE802.11, Bluetooth (registered trademark), etc., instead of an interface circuit conforming to a serial bus standard.

The operation terminal 20 has an input unit (not shown) such as a card reader, camera, microphone, touch panel, etc., for inputting authentication information such as a user ID, an authentication code, and biometric information such as a fingerprint/face/voice. The input unit reads authentication information such as a user ID stored in an IC (Integrated Circuit) card held by the user. The operation terminal 20 generates an entry/exit request signal including an entry request or exit request, a zone ID that identifies the zone to be entered or exited, and the read authentication information, and notifies the management device 10.
The operation terminal 20 also has an entrance/exit restriction unit (not shown) or a door opening/closing unit (not shown). The entrance/exit restriction unit is an electric lock or the like that is installed on an entrance/exit door to restrict entry to or exit from a section, and is unlocked/locked in accordance with a command signal transmitted from the management device 10. The door opening/closing unit is an automatic opening/closing device or the like that opens/closes the entrance/exit door of the section in accordance with a command signal transmitted from the management device 10. Note that the operation terminal 20 does not have to have an entrance/exit restriction unit and a door opening/closing unit.

2(A) is an example of the data structure of the history table 122. In the history table 122, a section ID, a user ID, a time period of stay, etc. are stored in association with each other. The section ID indicates the section where the entry and exit of the user was detected. The user ID indicates the user who stayed in that section. The time period of stay indicates the time period during which the user stayed in the section, and includes the time of entry into the section and the time of exit from the section. Hereinafter, a set of a section ID, a user ID, a time period of stay, etc. may be referred to as a record. Each record is stored in the history table 122 in the order of the earliest entry time. The history table 122 is created on a daily basis, but may also be created so that the entry time and exit time include the date and store information for multiple days in one history table 122. The history table 122 is an example of history information.

Figure 2 (B) is an example of the data structure of the infection risk table 123. In the infection risk table 123, the section ID, risk level, risk index, etc. are stored in association with each other. The risk level indicates the level of risk of infection with an infectious disease in the section corresponding to the section ID, and is determined based on the risk index. The risk index includes indexes related to the section layout, the number of people that the section can accommodate, the area of the section, the air conditioning equipment within the section, the use of the section, infection control measures in the section, etc. Note that the risk indexes are not limited to those mentioned above, and the risk level may be determined from some of the risk indexes.

In the infection risk table 123, a predetermined item value is set for each risk index, and a risk level according to the item value is determined for each risk index. The risk level is expressed in three levels: 0, 1, and 2, and the higher the value, the higher the risk, i.e., the more susceptible one is to infection with an infectious disease.
The risk index for layout indicates the degree of crowding of seats in a section, and the item value of "crowded" or "dispersed" is set as the risk index for layout. If seats are arranged so that users are crowded together, there is a high possibility that users will become infected by people with infectious diseases (hereinafter simply referred to as "infected persons"). Therefore, in the risk index for layout, the risk level of "crowded" is set to 2, and the risk level of "dispersed" is set to 0.
The risk index for capacity indicates the number of people that can be accommodated in a section, and an item value of "large,""medium," or "small" is set as the risk index for capacity. The more people that can be accommodated in a section, the lower the possibility of users becoming infected by an infected person in the section, so in the risk index for capacity, the risk level for "small" is set to 2, the risk level for "medium" is set to 1, and the risk level for "large" is set to 0. Note that, since it is expected that the risk of infection differs when the size of the section is different even if the capacity is about the same (for example, a section with a "narrow" size and a "large" capacity has a higher risk than a section with a "large" size and a "large" capacity), the capacity per unit area may be used as the risk index for capacity.
The risk index for size indicates the floor area of the section, and item values of "narrow,""medium," or "wide" are set as the risk index for size. The narrower the section, the closer the distance between users and infected people within the section, and the higher the possibility of infection from infected people. Therefore, in the risk index for size, the risk level of "narrow" is set to 2, the risk level of "medium" is set to 1, and the risk level of "wide" is set to 0.
The risk index for air conditioning equipment indicates whether or not there is air conditioning equipment in the area, and the item value of "no" or "yes" is set as the risk index for air conditioning equipment. Without air conditioning equipment, ventilation in the area is insufficient and the risk of infection is high, so in the risk index for air conditioning equipment, the risk level of "no" is set to 2 and the risk level of "yes" is set to 0.
The risk index for use indicates the role of the area, and the item value of "dining hall,""conferenceroom," or "office" is set as the risk index for use. In the case of infectious diseases transmitted by droplets, the risk of infection increases in the following order: not wearing a mask, wearing a mask and talking a lot, and wearing a mask and talking a little. For this reason, in the risk index for use, the risk level of the "dining hall" is set to 2, the risk level of the "conference room" to 1, and the risk level of the "office" to 0.
The risk index for infection control indicates the status of infection control measures, such as whether partitions, disinfectants, etc. are placed within the area, and an item value of "no" or "yes" is set as the risk index for infection control. Areas without infection control measures have a higher risk of contracting an infectious disease than areas with infection control measures. For this reason, the risk level for "no" in the risk index for infection control is set to 2, and the risk level for "yes" is set to 0.

The determination means 134 determines a risk level of the section corresponding to the section ID based on the risk index corresponding to that section ID, and sets it as the risk level corresponding to that section ID in the infection risk table 123. The determination means 134 determines the risk level of the section corresponding to each risk index based on the number of risk indexes corresponding to a risk level above or below a predetermined level.
For example, if the risk indices corresponding to a section include a predetermined number (e.g., three) or more risk indices that correspond to the highest risk level of 2, the determination means 134 determines that the risk level corresponding to the section is "high." If the risk indices corresponding to a section include a predetermined number or more risk indices that correspond to the lowest risk level of 0, the determination means 134 determines that the risk level corresponding to the section is "low." If neither of the above two cases apply, the determination means 134 determines that the risk level corresponding to the section is "medium."
Alternatively, the determination means 134 may assign scores to each risk index corresponding to a section in order of risk level, calculate the sum of the scores of each risk index, and determine the risk level corresponding to the section according to the sum of the scores. For example, the determination means 134 assigns a score to each risk index corresponding to a section such that 2 points is assigned for risk level 2, 1 point is assigned for risk level 1, and 0 point is assigned for risk level 0. The determination means 134 determines the risk level corresponding to the section to be "high" if the sum of the scores is 6 points or more, "medium" if it is 3 to 5 points, and "low" if it is 2 points or less.
Furthermore, the determination means 134 may determine the risk level of the section corresponding to each risk index based on statistical values such as the average value, weighted average value, median value, maximum value, and minimum value of the risk level of each risk index.
Also, instead of the determination means 134 determining a risk level corresponding to each section and storing it in the memory unit 12, the risk level corresponding to each section may be determined in advance by an administrator or the like taking into consideration the infection risk in each section based on the above-mentioned indexes and stored in the infection risk table 123. In this case, each risk index does not need to be registered in the infection risk table 123.

Figure 3 is an example of a floor plan of an office including multiple sections. As shown in Figure 3, floor 501 of office 500 is divided into sections such as office 511, cafeteria 512, small conference room 513, and large conference room 514. A first door 521, a second door 522, a third door 523, and a fourth door 524 are provided at the entrances and exits of office 511, cafeteria 512, small conference room 513, and large conference room 514, respectively. The first door 521, the second door 522, the third door 523, and the fourth door 524 are unlocked/locked by an entry/exit restriction unit of operation terminal 20, or opened/closed by a door opening/closing unit. Operation terminals 20a and 20b are located near the first door 521, operation terminals 20c and 20d are located near the second door 522, operation terminals 20e and 20f are located near the third door 523, and operation terminals 20g and 20h are located near the fourth door 524. Seats A, B, C, and D for users A, B, C, and D are located in the office room 511. Each section may be located on a different floor.

Figure 4 is a flowchart showing an example of an entrance/exit management process by the management device 10. This operation flow is executed mainly by the control unit 13 of the management device 10 in cooperation with each element of the management device 10, based on a program previously stored in the memory unit 12 of the management device 10.

First, the acquisition unit 131 determines whether or not the user has performed an entry/exit operation for any section (step S11). When the acquisition unit 131 acquires an entry/exit request signal notified from the operation terminal 20 via the interface unit 14, the acquisition unit 131 determines that the user has performed an entry/exit operation for the section corresponding to the operation terminal 20.
If the user has not performed an entry/exit operation to the section (step S11-N), the acquisition unit 131 waits.
When the user performs an entry/exit operation for the zone (step S11-Y), the acquisition means 131 identifies the entry request or exit request, the zone ID, and the user ID from the acquired entry/exit request signal (step S12).

Next, the authentication means 132 judges whether or not to permit entry or exit based on the identified section ID and user ID (step S13). If the identified user ID is stored in the user information 121 in correspondence with the identified section ID, the authentication means 132 permits entry or exit, and if the identified user ID is not stored in correspondence with the identified section ID, the authentication means 132 does not permit entry or exit.
If entry or exit is not permitted (step S13-N), the authentication means 132 outputs a refusal signal indicating that entry or exit is denied to the operation terminal 20 via the interface unit 14 to notify that entry or exit has been denied, and returns the process to step S11.
If entry or exit is permitted (step S13-Y), the authentication means 132 outputs a command signal to the operation terminal 20 via the interface unit 14 to unlock or open the door to the target section (step S14).

Next, the registration means 133 updates the history table 122 (step S15). If entry is permitted in the process of step S13, the registration means 133 generates data that associates the section ID and user ID acquired in the process of step S12 with the time when the command signal was output in the process of step S14 and an unset exit time. The registration means 133 adds the generated data as a record in the history table 122. The section ID, user ID, time when the command signal was output, and exit time of the generated data correspond to the section ID, user ID, entry time, and exit time of the record in the history table 122, respectively.
If exit is permitted in the process of step S13, the registration means 133 identifies a record in the history table 122 in which the section ID and user ID acquired in the process of step S12 and the entry time are set but no exit time is set. The registration means 133 sets the time when the command signal was output in the process of step S14 as the exit time of the identified record.
Next, the registration unit 133 returns the process to step S11. This completes the description of the series of processes.

5 is a flowchart showing an example of a notification process by the management device 10. This operation flow is executed mainly by the control unit 13 of the management device 10 in cooperation with each element of the management device 10 based on a program previously stored in the storage unit 12 of the management device 10. In addition, this operation flow is started when the registration means 133 of the management device 10 receives a user ID corresponding to the designated user, and a process of identifying users who were in the same section at the same time as the designated user and extracting suspected infections from these users is performed. The designated user indicates a user designated by the administrator, and is not limited to a person diagnosed with an infectious disease, but includes a person who is highly likely to be infected with an infectious disease, etc., but may be simply referred to as an infected person below for convenience. In addition, when a designated user is registered and selected by the administrator, a suspected infection may be automatically extracted. In addition, even if the administrator does not specify the designated user, when information on the designated user is received from an external source, the designated user may be registered and a suspected infection may be automatically extracted. Below, a case where an infected person is registered as a designated user will be described as an example.

First, the registration means 133 accepts the registration of an infected person (step S21). The registration means 133 accepts the registration of an infected person by receiving a user ID corresponding to the infected person from the administrator terminal 30 or a user terminal (not shown) via the communication unit 11.

Next, the registration means 133 determines whether the infected person stayed in any of the multiple sections within a predetermined period of time (step S22). If the received user ID matches any of the user IDs stored in the history table 122, the registration means 133 determines that the infected person stayed in any of the sections, and if the received user ID does not match any of the sections, the registration means 133 determines that the infected person did not stay in any of the sections. The registration means 133 determines whether the infected person stayed in any of the multiple sections within a predetermined period of time (e.g., the last five days) for records in the history table 122 whose entry time or exit time is within a predetermined period of time (e.g., the last five days).
If the infected person was not present in any of the sections (step S22-N), the notification means 137 notifies the administrator terminal 30 via the communication unit 11 that the infected person was not present in any of the sections (step S28), and terminates the series of processes.
If the infected person has stayed in any of the sections (step S22-Y), the registration means 133 registers the infected person in the storage unit 12 (step S23). The registration means 133 stores the user ID of the infected person, whose registration was accepted in the processing of step S21, in the storage unit 12 as an infected person ID.

Next, the registration means 133 identifies the section in which the infected person stayed and the time period during which the infected person stayed in that section (step S24). The registration means 133 refers to the records in the history table 122 for the above-mentioned period to identify the section ID of the section in which the user corresponding to the infected person ID (i.e., the infected person) stayed and the time period during which the infected person stayed in that section. Hereinafter, the section in which the infected person stayed may be referred to as the infected person's stay section, the section ID corresponding to the infected person's stay section ID, and the time period during which the infected person stayed in the infected person's stay section as the infected person's stay time period. The infected person's stay time period includes the time of entry into the section and the time of exit from the section. The registration means 133 generates infected person stay information including all identified pairs of infected person's stay section IDs and infected person's stay time periods, and stores it in the memory unit 12.

Next, the generating means 135 executes a list generating process to generate an infection candidate list including users who stayed in the same area as the infected person at the same time and the risk level corresponding to the area where the users stayed at the same time as the infected person (step S25). Hereinafter, users who stayed in the same area as the infected person at the same time may be referred to as infection candidates. Details of the list generating process will be described later.

Next, the extraction means 136 executes a process for extracting suspected infections to extract users suspected of having been infected by an infected person from among the infection candidates, and generates information on the extracted users (step S26). Hereinafter, an infection candidate suspected of having been infected by an infected person may be referred to as a suspected infection. Details of the process for extracting suspected infections will be described later.

Next, the notification means 137 transmits the infection candidate list generated in the list generation process and/or information on the suspected infection persons generated in the suspected infection person extraction process to the administrator terminal 30 via the communication unit 11 and outputs it to a specified notification destination (step S27). The specified notification destination may be the management device 10, in which case the information is output to a display unit such as a monitor of the management device 10. In this way, the notification means 137 (output means) outputs information on the suspected infection persons. This concludes the explanation of the series of processes.

6 is a flowchart showing an example of the list generation process by the management device 10. The list generation process is executed in step S25 of the notification process.
First, the generating means 135 identifies, for each pair of the infected person's stay section ID and the infected person's stay time period included in the infected person stay information, the users who stayed in the same section at the same time as the infected person, and the time during which the users stayed in the same section at the same time as the infected person (step S31). Hereinafter, the time period during which a user stayed in the same section at the same time as the infected person may be referred to as the simultaneous stay time period. The simultaneous stay time period includes a start time and an end time. In addition, the time from the start time to the end time of the simultaneous stay time period may be referred to as the simultaneous stay time.
The generation means 135 extracts all records in the history table 122 where the zone ID is the same as the infected person's staying zone ID, the user ID is different from the infected person ID, and at least a portion of the time period from the entry time to the exit time overlaps with the infected person's staying time period corresponding to the infected person's staying zone ID.
The generation means 135 specifies, for each extracted record, a time period in which the later of the entry time of the extracted record and the entry time of the infected person's stay time period is set as the start time, and the earlier of the exit time of the identified record and the exit time of the infected person's stay time period is set as the end time. The generation means 135 specifies the specified time period as a simultaneous stay time period of users corresponding to the user ID of the identified record, and specifies the time from the start time to the end time of the specified simultaneous stay time period as the simultaneous stay time of users corresponding to the user ID.
The generating means 135 generates a set of data in which the section ID and user ID of the identified record are associated with the simultaneous stay time period and simultaneous stay duration as a simultaneous stay time period data group, and stores the data in the storage unit 12 .

Next, the generating means 135 executes the processes of steps S32 to S35 for each user whose user ID is included in the simultaneous presence time period data group. First, the generating means 135 determines whether or not a user whose user ID is included in the simultaneous presence time period data group has stayed consecutively at the same time as an infected person in two or more sections (step S32). The generating means 135 determines whether or not there is a set of data in the simultaneous presence time period data group that includes a user ID corresponding to the user to be processed and in which the difference between the end time of the simultaneous presence time period of one data and the start time of the simultaneous presence time period of the other data is within a predetermined range. The predetermined range is, for example, five minutes. If this set of data exists, the generating means 135 determines that the user to be processed stayed consecutively at the same time as an infected person in two or more sections, and if this set of data does not exist, it determines that the user to be processed did not stay consecutively at the same time as an infected person in two or more sections.

Next, the generating unit 135 calculates the total simultaneous stay time for the target user (step S33). The generating unit 135 calculates the total simultaneous stay time associated with the user ID corresponding to the target user in the simultaneous stay time period data group.
Next, the generating unit 135 judges whether the total simultaneous stay time is equal to or greater than a predetermined threshold value (e.g., 15 minutes) (step S34). If the total simultaneous stay time is equal to or greater than the threshold value (step S34-Y), the generating unit 135 identifies the user as an infection candidate (step S35), and if the total simultaneous stay time is less than the threshold value (step S34-N), the generating unit 135 does not identify the user as an infection candidate.

When the generating means 135 has executed the processes of steps S32 to S35 for all users whose user IDs are included in the simultaneous presence time period data group, it identifies the risk level corresponding to the section in which the infection candidate was present at the same time as the infected person (step S36). For each infection candidate, the generating means 135 extracts all data including the user ID corresponding to the infection candidate from the simultaneous presence time period data group, and identifies all section IDs included in the extracted data. The generating means 135 refers to the infection risk table 123 to identify the risk level corresponding to the identified section ID.

Next, the generating unit 135 generates an infection candidate list including the infection candidate and the risk level corresponding to the section where the infection candidate was staying at the same time as the infected person (step S37). The generating unit 135 generates an infection candidate list including the user ID corresponding to the infection candidate and the risk level identified in the processing of step S36.
When a plurality of zone IDs are identified for the same infection candidate, the generating means 135 selects the risk level indicating the highest infection risk among the risk levels corresponding to each zone ID, and includes the selected risk level in the infection candidate list. When a plurality of zone IDs are identified for the same infection candidate, the generating means 135 may include the risk level corresponding to each zone ID in the infection candidate list in association with the user ID. The generating means 135 may further include in the infection candidate list one or more of the zone ID, the simultaneous stay time of the infection candidate, and whether or not the infection candidate and the infected person stayed consecutively at the same time in two or more zones. The extracting means 136 generates the infection candidate list so as to distinguish a user who stayed consecutively at the same time as the infected person in two or more zones from a user who stayed at the same time as the infected person in only one zone by including in the infection candidate list whether or not the infection candidate and the infected person stayed consecutively at the same time in two or more zones. The generating means 135 may generate the infection candidate list in a format that can be sorted by each item such as the zone ID. This completes the series of processes.

FIG. 7 is an example of an infection candidate list.
In the example shown in FIG. 7, the infection candidate list stores user IDs, section IDs, risk levels, simultaneous stay times, consecutive simultaneous stay information, and the like, in association with one another.

Figure 8 is a flowchart showing an example of a process for extracting suspected infections by the management device 10.

Next, the extraction means 136 executes the processes of steps S41 to S45 for each infection candidate. First, the extraction means 136 identifies a risk level corresponding to a section where the infection candidate was present at the same time as the infected person (step S41). As with the process of step S36, the extraction means 136 extracts all data including user IDs corresponding to the infection candidate from the simultaneous presence time period data group, and identifies all section IDs included in the extracted data. The extraction means 136 refers to the infection risk table 123 to identify the risk level corresponding to the identified section ID.
Next, the extraction means 136 weights the simultaneous stay time of the infection candidates according to the risk level corresponding to each section (step S42). The extraction means 136 weights the simultaneous stay time included in the data extracted in the process of step S41 according to the risk level identified in the process of step S41 corresponding to the section associated with the simultaneous stay time. The extraction means 136 weights the simultaneous stay time so that the weight for the simultaneous stay time increases as the infection risk indicated by the risk level increases. The generation means 135 multiplies the simultaneous stay time by 3 times if the risk level corresponding to the section is "high", by 1.5 times if it is "medium", and by 1 time if it is "low".

Next, the extraction means 136 calculates the weighted sum of simultaneous stay times for the infection candidates (step S43).
Next, the extraction means 136 judges whether the sum of the simultaneous stay times after weighting is equal to or greater than a predetermined threshold value (step S44). If the sum of the simultaneous stay times after weighting is equal to or greater than the threshold value (step S44-Y), the extraction means 136 extracts the infection candidate as an infection suspect (step S45), and if the sum of the simultaneous stay times after weighting is less than the threshold value (step S44-N), the extraction means 136 does not extract the infection candidate as an infection suspect. The extraction means 136 uses the same threshold value as that used in the process of step S34 as the threshold value. The extraction means 136 may use a different value from that used in the process of step S34 as the threshold value.
In addition, the extraction means 136 may extract as a suspected infection candidate an infection candidate whose sum, product, weighted sum, etc. of the total simultaneous stay time in each section and the risk level corresponding to the section in which the infection candidate stayed at the same time as an infected person is above a threshold value.

After executing steps S42 to S45 for all the suspected infections, the extraction means 136 generates each user ID corresponding to each of the extracted suspected infections as information about the suspected infections (step S46). The extraction means 136 may further include in the information about the suspected infections whether the suspected infections have been present at the same time as the infected person in two or more compartments consecutively. By including in the information about the suspected infections whether the suspected infections have been present at the same time as the infected person in two or more compartments consecutively, the extraction means 136 notifies the suspected infections who have been present at the same time as the infected person in two or more compartments consecutively, distinguishing them from the suspected infections who have been present at the same time as the infected person in only one compartment. This completes the series of processes.

FIG. 9 shows an example of information regarding suspected infections.
9, the information on the suspected infection person is stored in association with a user ID, continuous simultaneous presence information, etc. The information on the suspected infection person may also be associated with a section ID, a risk level, and a simultaneous presence time.

In this way, the generation means 135 identifies users who stayed in the same area as the infected person at the same time, and generates a list including the identified users and the risk levels of the area where the users stayed at the same time as the infected person. The notification means 137 (output means) transmits the generated list to the administrator terminal 30 via the communication unit 11, and notifies a predetermined notification destination. Note that the predetermined notification destination may be the management device 10, in which case the list is output to a display unit such as a monitor of the management device 10. In this way, the notification means 137 (output means) outputs the generated list. This allows the access control system 1 to more appropriately output information about people who stayed in the same area as the infected person at the same time.

The determination means 134 also determines the risk level of the section based on the layout of each section, the capacity of each section, the purpose of each section, the air conditioning equipment in each section, and whether infection control measures are being taken in each section. Because the risk level of the section is determined based on the characteristics of each section, the access control system 1 can accurately extract people who may have been infected from an infected person.

The generating means 135 also includes a user in the list if the user stays in two or more compartments with an infected person at the same time, and the total time spent by the user in two or more compartments together with the infected person is equal to or exceeds a threshold value. Because the susceptibility to infection with an infectious disease is related to the total time spent together with an infected person, the access control system 1 can accurately extract people who may have been infected by an infected person.

Furthermore, the generating means 135 generates a list to distinguish users who have been in two or more compartments consecutively at the same time as an infected person from users who have been in only one compartment at the same time as the infected person. Users who have been in two or more compartments consecutively at the same time as an infected person are likely to have been in the same place as the infected person and are therefore likely to have been infected with an infectious disease, and therefore need to be observed with particular care. By the notifying means 137 notifying such a list, an administrator who has checked the notified list can take action such as prioritizing testing of users who have been in two or more compartments consecutively at the same time as an infected person.

The extraction means 136 also identifies users who stayed in the same area as the infected person at the same time, and extracts suspected infected people who are suspected of being infected by the infected person based on the duration that the identified users stayed in the same area as the infected person and the risk level of the area. This allows the entrance/exit control system 1 to more appropriately notify information about people who stayed in the same area as the infected person at the same time.

The extraction means 136 also weights the stay time according to the risk level of each section, and extracts users whose weighted stay time is equal to or exceeds a threshold value as suspected infections. This allows the access control system 1 to accurately extract suspected infections, taking into account the risk level of each section.

In addition, if a user stays in two or more compartments at the same time as an infected person, the extraction means 136 weights the stay time according to the risk level of each compartment, and if the sum of the weighted stay times is equal to or greater than a threshold value, extracts the user as a suspected infection. Even if a user stays in two or more compartments at the same time as an infected person, the access control system 1 can accurately extract suspected infections by taking into account the risk level of each compartment.

The notification means 137 also notifies suspected infected persons who have been in two or more compartments consecutively at the same time as an infected person, distinguishing them from suspected infected persons who have been in only one compartment at the same time as an infected person. Suspected infected persons who have been in two or more compartments consecutively at the same time as an infected person are likely to have been in the same room as the infected person and are therefore likely to have been infected with an infectious disease, and therefore need to be observed with particular care. By notifying the information extracted in this way by the notification means 137, an administrator who has confirmed the notified information can take action such as prioritizing testing of suspected infected persons who have been in two or more compartments consecutively at the same time as an infected person.

Note that the generating means 135 may not calculate the total simultaneous stay time in the process of step S33, and may instead determine whether or not each simultaneous stay time is equal to or greater than a predetermined threshold value in the process of step S34. If at least one of the simultaneous stay times of the identified users is equal to or greater than the threshold value, the generating means 135 identifies the users as infection candidates, and if all of the simultaneous stay times of the identified users are less than the threshold value, the generating means 135 does not identify the users as infection candidates.
At this time, the generating means 135 may change the threshold value according to the risk level of each section corresponding to each simultaneous stay time. In this case, the generating means 135 sets the threshold value so that the higher the risk level corresponding to the section corresponding to the simultaneous stay time, the smaller the threshold value. In this way, the generating means 135 can accurately extract suspected infections by taking into account the risk level of each section.

Furthermore, the extraction means 136 may not weight the simultaneous stay times in the process of step S42. Furthermore, the extraction means 136 may not calculate the sum of the simultaneous stay times in the process of step S43. In that case, instead of the process of step S44, the extraction means 136 determines whether or not each simultaneous stay time is equal to or greater than a predetermined threshold. If at least one of the simultaneous stay times of the infection candidates is equal to or greater than the threshold, the extraction means 136 extracts the infection candidates as suspected infections, and if none of the simultaneous stay times are equal to or greater than the threshold, the extraction means 136 does not extract the infection candidates as suspected infections.
At this time, the extraction means 136 may use different threshold values according to the risk level corresponding to the section corresponding to the simultaneous stay time. In this case, the extraction means 136 uses a smaller threshold value as the risk level corresponding to the section becomes higher. For example, the extraction means 136 uses different threshold values such as 5 minutes if the risk level corresponding to the section is "high," 10 minutes if the risk level is "medium," and 15 minutes if the risk level is "low." This allows the extraction means 136 to accurately extract suspected infections by taking into account the risk level for each section.

In addition, the designated users in this embodiment include people who are actually infected with an infectious disease, as well as people who are determined to have a high probability of being infected, such as close contacts of people infected with COVID-19. In other words, the designated users whose registration is accepted by the registration means 133 in the processing of step S21 include people who are determined to have a high probability of being infected. Because it takes time from infection testing to diagnosis, by the registration means 133 registering people who are determined to have a high probability of being infected, the access control system 1 can identify candidates for infection or extract people suspected of infection before the infection spreads.

In addition, when the acquisition means 131 acquires an entry request or the like in the processing of step S12, the authentication means 132 may execute the processing of unlocking and opening the door in step S14 without executing the determination of whether entry or exit is permitted in step S13.

Furthermore, if there is a section where no operation is required at the time of exit, and the authentication means 132 permits entry in the processing of step S13, the registration means 133 may set an exit time that is not stored in the history table 122 in the processing of step S15. The registration means 133 determines whether an exit time is set in the previous record that includes the same user ID as the record added in the processing of step S15, and if not, sets the entry time of the added record to the exit time that is not set. This allows the registration means 133 to set the exit time in the history table 122, and the access control system 1 to perform appropriate processing.
Furthermore, the registration means 133 may set only one of the entry time or the exit time in the history table 122. In this case, if the entry time or exit time of an infected person and a user falls within a predetermined time, the generation means 135 identifies the user as a user who stayed in the same area at the same time as the infected person, and estimates the time period in which the infected person's stay time period overlaps with the predetermined time from the entry time or the predetermined time before the exit time as the simultaneous stay time period.

The memory unit 12 may also store the seat position of each user in the section, and the determination means 134 may change the identified risk level in the processing of step S36 or S41 according to the seat positions of the infection candidate and the infected person. The determination means 134 dynamically changes the risk level so that the closer the seat position of the infection candidate is to the seat position of the infected person, the higher the risk level becomes. For example, in the office room 511 of the office 500 shown in FIG. 3, the determination means 134 changes the risk level so that the risk level of the infection candidate (users B and C) who sit close to the infected person (user A) is higher than the risk level of the infection candidate (user D) who sits farther away. This allows the entrance/exit management system 1 to accurately identify infection candidates according to the positional relationship between the user and the infected person, and accurately extract suspected infections.

Furthermore, the memory unit 12 may store time periods when the air conditioning equipment was operating in the section or time periods when the windows were open (i.e., ventilation status, detected by an open/close sensor or the like), and the determination means 134 may dynamically change the identified risk level in the processing of step S36 or S41 according to the ventilation status. The determination means 134 dynamically changes the risk level so that the risk level of the time periods when the air conditioning equipment was not operating or the windows were closed is higher than the risk level of the time periods when the air conditioning equipment was operating or the windows were open.
Also, the determination means 134 may dynamically change the identified risk level in the process of step S36 or S41 according to the calculated number of people by referring to the history table 122 and calculating the number of people in each section at a predetermined time. The determination means 134 identifies a time period in which a number of people exceeding the capacity of the section existed in the section, and, if other conditions are the same, changes the risk level of the time period in which a number of people exceeding the capacity of the section existed in the section so as to be higher than the risk level of the time period in which a number of people equal to or less than the capacity of the section existed in the section. Also, the determination means 134 may change the risk level according to the ratio of the number of people in the section to the capacity. For example, if this ratio is less than 50%, the risk level is lowered by one level, and if it is more than 100%, the risk level is raised by one level. In that case, the access control system 1 installs a camera in each section so as to capture an image of each section. The control unit 13 detects people from the images captured by each camera using a known image processing technique, and calculates the number of people detected at each predetermined time.
Furthermore, if the use of a section varies depending on the time period, the use for each time period may be associated with the same section ID and stored in the infection risk table 123. In this case, the generating means 135 or the extracting means 136 specifies a risk level corresponding to the use for each time period for each time period in the processing of steps S37 or S42, respectively.
This enables the access control system 1 to accurately identify potential infections based on the situation in the area and accurately extract those suspected of infection.

The memory unit 12 may also store whether or not the user performed the sterilization process when entering the area, and the decision means 134 may change the risk level determined in the process of step S36 or S41 depending on whether or not the user performed the sterilization process in the process of step S37 or S42. If other conditions are the same, the decision means 134 changes the risk level in the case where there is a user who has not performed the sterilization process when entering the area where infection control measures are taken, so that it is higher than the risk level in the case where there is no user who has not performed the sterilization process. In this case, the entrance/exit management system 1 installs an alcohol sterilization device and an infrared detection device that detects the user's hand-holding over the alcohol sterilization device at the entrance of each area. When the control unit 13 allows entry in the process of step S13, the control unit 13 determines whether or not the user has performed the sterilization process by determining whether or not the user has held his/her hand over the alcohol sterilization device according to the signal output from the infrared detection device.
This enables the access control system 1 to accurately identify potential infections based on the user's situation and accurately extract those suspected of infection.
Furthermore, in the process of step S37 or S42, the determination means 134 may change the risk level determined in the process of step S36 or S41 depending on whether the infected person and the non-infected user were wearing a mask when entering the area. If other conditions are the same, the determination means 134 changes the risk level in the case where a user not wearing a mask is present when entering the area to a higher risk level than the risk level in the case where a user not wearing a mask is not present when entering the area. In this case, the operation terminal 20 has a camera and uses the camera to capture an image of the user during user authentication during the entry/exit process. In the process of step S13, the authentication means 132 uses a known image processing technique to determine whether the user is wearing a mask from the image captured by the camera.
This enables the access control system 1 to accurately identify potential infections based on the user's situation and accurately extract those suspected of infection.
As described above, the access control system 1 can accurately extract suspected infections by dynamically changing the risk level according to the usage of each area, such as the air conditioning equipment, the number of people entering, changes in the area's use, and whether or not alcohol sterilization has been performed, in order to determine potential infection candidates.

In addition, in the process of step S42, the extraction means 136 may increase the weight in weighting the simultaneous stay time of the infection candidate when the infection candidate and the infected person act together. When the difference between the entry time and the exit time of the infection candidate and the infected person are within a predetermined range (for example, within 5 minutes for both) in the two sections, the generation means 135 determines that the infection candidate and the infected person act together and increases the weight (for example, 4 times if the risk level is "high", 2 times if the risk level is "medium", and 1 time if the risk level is "low"). The generation means 135 may further increase the weight (for example, 5 times if the risk level is "high", 3 times if the risk level is "medium", and 1.5 times if the risk level is "low") when the difference between the exit time of one section and the entry time of the other section is within a predetermined range (for example, within 5 minutes) for both the infection candidate and the infected person. In this way, the entrance/exit management system 1 can accurately extract the infection candidate who is likely to have acted together with the infected person as a suspected infection. Note that the weight of the threshold value may be changed instead of the simultaneous stay time. In this case, the threshold value is made smaller as the risk level increases.

The determination means 134 may also determine the risk level by weighting any of the risk indicators. For example, for indicators related to use, the risk level of "dining room" may be set to 4, the risk level of "conference room" to 2, and the risk level of "office" to 0; and for indicators related to layout, the risk level of "crowding" may be set to 1 and the risk level of "dispersion" to 0. In this way, by weighting each risk indicator according to its importance, the risk level can be determined more appropriately.

In addition, the management device 10 may omit either the list generation process or the suspected infection extraction process in the notification process.
When the list generation process is omitted, the notification means 137 does not transmit the infection candidate list to the administrator terminal 30 in the process of step S27. In addition, in the infection suspect extraction process, the control unit 13 executes the processes of steps S41 to S45 for all users, not for each infection candidate.
If the suspected infection extraction process is omitted, the notification means 137 does not transmit the infection candidate list to the manager terminal 30 in the process of step S27.

In addition, in the list generation process, the generation means 135 may not execute the process of step S32. In this case, in the process of step S37, the generation means 135 does not include in the infection candidate list whether or not the infection candidate has been in two or more compartments consecutively at the same time as the infected person. In addition, in the process of step S46, the extraction means 136 does not include in the information regarding the suspected infection candidate whether or not the infection candidate has been in two or more compartments consecutively at the same time as the infected person.

As described above, various modifications can be made within the scope of the present invention to suit the implementation form.

1 Access control system, 12 Storage unit (storage means), 133 Registration means, 134 Determination means, 135 Generation means, 136 Extraction means, 137 Notification means

Claims (6)

An access control system for managing the access of multiple users in multiple sections,
A storage means for storing, for each of the zones, history information associating users who stayed in each zone with the times when the users entered or left each zone, and a risk level indicating the level of risk of infection with an infectious disease in each zone;
a registration means for registering a designated user from among the plurality of users;
an extraction means for identifying users who stayed in the same area at the same time as the registered designated user based on the history information, and extracting suspected infections from the registered designated user based on the duration of stay in the same area at the same time as the designated user and the risk level of the area;
An output means for outputting information about the extracted suspected infections;
An access control system comprising: The access control system of claim 1, wherein the extraction means extracts users whose stay time is equal to or longer than a threshold as the suspected infection, and varies the threshold according to the risk level of each section. The access control system of claim 1, wherein the extraction means weights the stay time according to the risk level of each section, and extracts the suspected infections based on the weighted stay time. The access control system according to claim 1 or 3, wherein the extraction means weights the stay time according to the risk level of each section when the user stays in two or more sections together with an infected person, and determines whether the user is a suspected infected person based on the sum of the weighted stay times. The access control system according to any one of claims 1 to 4, wherein the risk level of each section is changed according to the usage status of each section. The access control system according to any one of claims 1 to 4, wherein the output means outputs a distinction between a suspected infection who has been in two or more compartments consecutively at the same time as an infected person and a suspected infection who has been in only one compartment at the same time as an infected person.

Images