JP7734520B2 - Access control system - Google Patents

Description

The present invention relates to an access control system.

Traditionally, systems have been developed to identify people who may have come into contact with someone infected with an infectious disease.

For example, Patent Document 1 discloses a system used in hospitals that, when the name of a patient who has contracted an infectious disease during hospitalization or after discharge is input, creates a list of other patients who may have come into contact with that patient. When the name of the infected patient is input, this system searches a database that stores the rooms in which each patient stayed and the length of their stay at the hospital, and creates a list of other patients who stayed in the same room or ward as the infected patient during the same period.

Patent Document 2 discloses an entry/exit management system that identifies facility users who may have come into contact with an infected person by sharing the same activities as the infected person as suspected infection users. This system operates to prohibit infected and suspected infection users from entering specific rooms until the symptom-related period has passed.

Japanese Patent Application Laid-Open No. 2005-25457 Japanese Patent Application Laid-Open No. 2019-200503

It is required that information be provided to those who were staying in the same area at the same time as a person with an infectious disease, allowing for a more accurate assessment of the possibility of infection.

The object of the present invention is to provide an access control system that can notify more appropriate information about people who have been in the same area at the same time as a person with an infectious disease.

One aspect of the present invention that addresses this problem is an access control system that manages the entry and exit of multiple users in multiple zones, and includes: storage means for storing, for each zone, historical information associating users who have been in each zone with the times when the users entered or exited each zone, and a risk level indicating the level of risk of infection with an infectious disease for each zone; registration means for registering designated users from among the multiple users; generation means for identifying users who have been in the same zone at the same time as the registered designated user based on the historical information, and generating a list including the identified users and the risk levels corresponding to the zones where the users have been in the same zone as the registered designated user; and output means for outputting the list.

In this access control system, the risk levels of multiple compartments are preferably determined based on at least one of the following indicators: the layout of each compartment, the number of people that each compartment can accommodate, the purpose of each compartment, the air conditioning equipment in each compartment, or the infection control measures in each compartment.

It is preferable that this access control system further includes a determination means for changing the risk level depending on the usage status of the indicator.

In this access control system, the generation means preferably includes in the list users who have stayed in the same area as the designated user for a time period equal to or greater than a threshold, and varies the threshold depending on the risk level of each area.

In this access control system, it is preferable that the generation means include a user in the list if the user is present in two or more compartments simultaneously with a designated user, and the total time spent by the user in the two or more compartments simultaneously with the designated user is equal to or exceeds a threshold value.

In this access control system, it is preferable that the generation means generates the list so as to distinguish between users who have been present simultaneously with the designated user in two or more consecutive compartments from users who have been present simultaneously with the designated user in only one compartment.

The access control system of the present invention can more appropriately notify people who have been in the same area at the same time as a person with an infectious disease.

1 is a diagram showing a schematic configuration of an access control system 1 according to an embodiment of the present invention. 1A is an example of the data structure of the history table 122, and FIG. 1B is an example of the data structure of the infection risk table 123. 1 is an example of a floor plan of an office including multiple bays. 10 is a flowchart showing an example of an entrance/exit management process performed by the management device 10. 10 is a flowchart illustrating an example of a notification process performed by the management device 10. 10 is a flowchart illustrating an example of a list generation process performed by the management device 10. This is an example of a list of infection candidates. 10 is a flowchart illustrating an example of a suspected infection extraction process performed by the management device 10. This is an example of information about suspected infections.

An access control system according to one embodiment of the present invention will now be described with reference to the drawings. However, it should be understood that the present invention is not limited to the drawings or the embodiment described below.

Figure 1 is a diagram showing the schematic configuration of an access control system 1 according to one embodiment of the present invention. As shown in Figure 1, the access control system 1 includes a management device 10, operation terminals 20a, 20b, 20c, etc., and an administrator terminal 30. The management device 10 is an information processing device that manages access to an access control area divided into multiple compartments, such as an office, store, or factory, and is communicatively connected to the operation terminal 20 and the administrator terminal 30. The operation terminals 20a, 20b, 20c, etc. are terminals through which users request entry to or exit from each compartment, and are communicatively connected to the management device 10. Hereinafter, the operation terminals 20a, 20b, 20c, etc. may be collectively referred to as operation terminals 20. The number of operation terminals 20 per compartment is not limited to one and may be multiple. The administrator terminal 30 is a terminal used by an administrator who manages each compartment, and is communicatively connected to the management device 10 via a communication network 40, such as the Internet.

The management device 10 has a communication unit 11, a memory unit 12, a control unit 13, and an interface unit 14.

The communication unit 11 has a communication interface circuit that conforms to wired/wireless communication standards such as Ethernet (registered trademark) and IEEE 802.11, and communicates with the administrator terminal 30 via the communication network 40 to send and receive various information.

The storage unit 12 includes a semiconductor memory, a magnetic storage medium, and/or an optical storage medium, etc. The storage unit 12 stores various data and computer program code executed by the control unit 13 to control the operation of the management device 10. The computer program can be installed in the storage unit 12 by a known method via a computer-readable storage medium such as a DVD-ROM or a communication line. The storage unit 12 is an example of a storage means.
The storage unit 12 stores user information 121, a history table 122, and an infection risk table 123. As the user information 121, a user ID for identifying a user who can use a section is stored for each section ID for identifying that section. Details of the history table 122 and the infection risk table 123 will be described later.

The control unit 13 has a processor such as a CPU or a multiprocessor and its peripheral circuits, and the processor controls the operation of the management device 10 by executing a computer program stored in the storage unit 12. The control unit 13 may be a DSP, an LSI, an ASIC, an FPGA, or the like.
The control unit 13 has, as functional modules of a program that runs on the processor, an acquisition unit 131, an authentication unit 132, a registration unit 133, a determination unit 134, a generation unit 135, an extraction unit 136, and a notification unit 137. The notification unit 137 is an example of the output unit of the present invention.

The interface unit 14 has an interface circuit conforming to a serial bus standard such as USB, and is connected to the operation terminal 20 for communication to send and receive various signals. Note that instead of an interface circuit conforming to a serial bus standard, the interface unit 14 may have an interface circuit conforming to a wired/wireless communication standard such as Ethernet (registered trademark), IEEE 802.11, or Bluetooth (registered trademark).

The operation terminal 20 has an input unit (not shown) such as a card reader, camera, microphone, touch panel, etc., for inputting authentication information such as a user ID, an authentication code, and biometric information such as fingerprint, face, and voice. The input unit reads authentication information such as the user ID stored on an IC (Integrated Circuit) card held by the user. The operation terminal 20 generates an entry/exit request signal including an entry request or exit request, a zone ID identifying the zone to be entered or exited, and the read authentication information, and notifies the management device 10 of the signal.
The operation terminal 20 also has an entry/exit control unit (not shown) or a door opening/closing unit (not shown). The entry/exit control unit is an electric lock or the like that is installed on an entrance/exit door to control entry into or exit from a section, and is unlocked/locked in accordance with a command signal transmitted from the management device 10. The door opening/closing unit is an automatic opening/closing device or the like that opens and closes the entrance/exit door of the section in accordance with a command signal transmitted from the management device 10. Note that the operation terminal 20 does not necessarily have to have the entry/exit control unit and the door opening/closing unit.

Figure 2 (A) is an example of the data structure of history table 122. History table 122 stores area IDs, user IDs, time periods of stay, etc., in association with one another. The area ID indicates the area where the user's entry and exit were detected. The user ID indicates the user who was staying in that area. The time period of stay indicates the time period during which the user was staying in the area, and includes the time of entry into the area and the time of exit from the area. Hereinafter, a set of area ID, user ID, time of stay, etc. may be referred to as a record. Each record is stored in history table 122 in order of earliest entry time. History table 122 is created on a daily basis, but it may also be created so that the entry and exit times include dates and information for multiple days is stored in a single history table 122. History table 122 is an example of history information.

Figure 2 (B) is an example of the data structure of the infection risk table 123. The infection risk table 123 stores, in association with one another, section IDs, risk levels, risk indices, etc. The risk level indicates the level of risk of infection with an infectious disease in the section corresponding to the section ID, and is determined based on the risk indices. The risk indices include indices related to the section layout, the number of people that the section can accommodate, the size of the section, the air conditioning equipment within the section, the use of the section, infection control measures in the section, etc. Note that the risk indices are not limited to those described above, and the risk level may also be determined from some of the risk indices.

In the infection risk table 123, a predetermined item value is set for each risk index, and a risk level corresponding to the item value is determined for each risk index. The risk level is expressed in three levels: 0, 1, and 2, and the higher the value, the higher the risk, i.e., the more susceptible to infection with an infectious disease.
The layout risk index indicates the degree of seating density within a section, and an item value of "crowded" or "dispersed" is set as the layout risk index. If seats are arranged so that users are crowded together, there is a high possibility that users will become infected by an infectious disease patient (hereinafter simply referred to as an "infected person"), so in the layout risk index, the risk level of "crowded" is set to 2, and the risk level of "dispersed" is set to 0.
The risk index for capacity indicates the number of people that can be accommodated in a section, and an item value of "large,""medium," or "small" is set as the risk index for capacity. The more people that can be accommodated in a section, the lower the possibility that users will be infected by an infected person within the section, so in the risk index for capacity, the risk level for "small" is set to 2, the risk level for "medium" is set to 1, and the risk level for "large" is set to 0. Note that, since it is expected that the risk of infection will differ if the size of the section is different even if the capacity is about the same (for example, a section with a "narrow" size and a "large" capacity will have a higher risk than a section with a "large" size and a "large" capacity), the capacity per unit area may also be used as the risk index for capacity.
The risk index for size indicates the floor area of the section, and an item value of "narrow,""medium," or "large" is set as the risk index for size. The smaller the section, the closer the distance between users and infected people within the section and the higher the possibility of infection from infected people. Therefore, in the risk index for size, the risk level for "narrow" is set to 2, the risk level for "medium" is set to 1, and the risk level for "large" is set to 0.
The risk index for air conditioning equipment indicates whether or not there is air conditioning equipment in the area, and an item value of "no" or "yes" is set as the risk index for air conditioning equipment. Without air conditioning equipment, the area will not be sufficiently ventilated, increasing the risk of infection, so in the risk index for air conditioning equipment, the risk level for "no" is set to 2, and the risk level for "yes" is set to 0.
The risk index for use indicates the role of the area, and an item value of "dining hall,""conferenceroom," or "office" is set as the risk index for use. In the case of infectious diseases transmitted by droplets, the risk of infection increases in the following order: not wearing a mask, wearing a mask and speaking a lot, and wearing a mask and speaking little. For this reason, in the risk index for use, the risk level for "dining hall" is set to 2, the risk level for "conference room" to 1, and the risk level for "office" to 0.
The risk index for infection control measures indicates the status of infection control measures, such as whether partitions, disinfectants, etc. are placed within the area, and an item value of "no" or "yes" is set as the risk index for infection control measures. Areas without infection control measures have a higher risk of contracting an infectious disease than areas with infection control measures. For this reason, the risk index for infection control measures is set to 2 for "no" and 0 for "yes."

The determination means 134 determines the risk level of the section corresponding to the section ID based on the risk index corresponding to that section ID, and sets it as the risk level corresponding to that section ID in the infection risk table 123. The determination means 134 determines the risk level of the section corresponding to each risk index based on the number of risk indexes corresponding to a risk level above or below a predetermined level.
For example, if the risk indices corresponding to a section include a predetermined number (e.g., three) or more risk indices that correspond to the highest risk level of 2, the determination means 134 determines that the risk level corresponding to that section is "high." If the risk indices corresponding to a section include a predetermined number or more risk indices that correspond to the lowest risk level of 0, the determination means 134 determines that the risk level corresponding to that section is "low." If neither of the above two cases applies, the determination means 134 determines that the risk level corresponding to that section is "medium."
Alternatively, the determination means 134 may assign scores to each risk index corresponding to a section in order of risk level, calculate the sum of the scores of each risk index, and determine the risk level corresponding to the section according to the sum of the scores. For example, the determination means 134 assigns a score to each risk index corresponding to a section as follows: 2 points for risk level 2, 1 point for risk level 1, and 0 point for risk level 0. The determination means 134 determines the risk level corresponding to the section as "high" if the sum of the scores is 6 points or more, "medium" if it is 3 to 5 points, and "low" if it is 2 points or less.
The determination means 134 may also determine the risk level of the section corresponding to each risk index based on statistical values such as the average value, weighted average value, median value, maximum value, and minimum value of the risk level of each risk index.
Furthermore, instead of the determination means 134 determining the risk level corresponding to each section and storing it in the memory unit 12, the risk level corresponding to each section may be determined in advance by an administrator or the like, taking into consideration the infection risk in each section based on the above-mentioned index, and stored in the infection risk table 123. In this case, each risk index does not need to be registered in the infection risk table 123.

Figure 3 is an example of a floor plan of an office including multiple sections. As shown in Figure 3, floor 501 of office 500 is divided into sections such as office 511, cafeteria 512, small conference room 513, and large conference room 514. A first door 521, a second door 522, a third door 523, and a fourth door 524 are provided at the entrances and exits of office 511, cafeteria 512, small conference room 513, and large conference room 514, respectively. The first door 521, the second door 522, the third door 523, and the fourth door 524 are unlocked/locked by the entry/exit control unit of the operation terminal 20, or opened/closed by the door opening/closing unit. Operation terminals 20a and 20b are located near the first door 521, operation terminals 20c and 20d are located near the second door 522, operation terminals 20e and 20f are located near the third door 523, and operation terminals 20g and 20h are located near the fourth door 524. Seats A, B, C, and D for users A, B, C, and D are located in the office room 511. Each section may be located on a different floor.

Figure 4 is a flowchart showing an example of access management processing by the management device 10. This operational flow is executed primarily by the control unit 13 of the management device 10 in cooperation with each element of the management device 10, based on a program stored in advance in the memory unit 12 of the management device 10.

First, the acquisition unit 131 determines whether the user has performed an entry/exit operation for a zone (step S11). When the acquisition unit 131 acquires an entry/exit request signal notified from the operation terminal 20 via the interface unit 14, the acquisition unit 131 determines that the user has performed an entry/exit operation for the zone corresponding to the operation terminal 20.
If the user has not entered or exited the section (step S11-N), the acquisition unit 131 waits.
When the user performs an entry/exit operation to enter or exit the zone (step S11-Y), the acquisition means 131 identifies the entry request or exit request, the zone ID, and the user ID from the acquired entry/exit request signal (step S12).

Next, the authentication means 132 determines whether or not to permit entry or exit based on the identified section ID and user ID (step S13). If the identified user ID is stored in the user information 121 in correspondence with the identified section ID, the authentication means 132 permits entry or exit, and if the identified user ID is not stored in correspondence with the identified section ID, the authentication means 132 does not permit entry or exit.
If entry or exit is not permitted (step S13-N), the authentication means 132 outputs a refusal signal indicating that entry or exit is denied to the operation terminal 20 via the interface unit 14 to notify that entry or exit has been denied, and returns the process to step S11.
If entry or exit is permitted (step S13-Y), the authentication means 132 outputs a command signal to the operation terminal 20 via the interface unit 14 to unlock or open the door to the target compartment (step S14).

Next, the registration means 133 updates the history table 122 (step S15). If entry is permitted in the processing of step S13, the registration means 133 generates data that associates the section ID and user ID acquired in the processing of step S12 with the time when the command signal was output in the processing of step S14 and the unset exit time. The registration means 133 adds the generated data as a record in the history table 122. The section ID, user ID, time when the command signal was output, and exit time of the generated data correspond to the section ID, user ID, entry time, and exit time of the record in the history table 122, respectively.
If exit is permitted in the processing of step S13, the registration means 133 identifies a record in the history table 122 in which the section ID and user ID acquired in the processing of step S12 and the entry time are set but no exit time is set. The registration means 133 sets the time when the command signal was output in the processing of step S14 as the exit time of the identified record.
Next, the registration means 133 returns the process to step S11. This completes the description of the series of processes.

Figure 5 is a flowchart showing an example of notification processing by the management device 10. This operational flow is executed primarily by the control unit 13 of the management device 10 in cooperation with each element of the management device 10, based on a program previously stored in the storage unit 12 of the management device 10. This operational flow is initiated when the registration means 133 of the management device 10 receives a user ID corresponding to a designated user. Users who were in the same compartment at the same time as the designated user are identified, and suspected infections are extracted from these users, and a list is generated. A designated user refers to a user designated by an administrator and is not limited to individuals diagnosed with an infectious disease, but also includes individuals with a high probability of infection. However, for convenience, they may be simply referred to as "infected individuals" below. Once a designated user is registered and selected by the administrator, a list may be automatically generated. Even without the administrator's designation, a designated user may be registered and infection candidates automatically extracted when information about the designated user is received from an external source. The following describes an example in which an infected individual is registered as a designated user.

First, the registration means 133 accepts the registration of an infected person (step S21). The registration means 133 accepts the registration of an infected person by receiving a user ID corresponding to the infected person from the administrator terminal 30 or the user's terminal (not shown) via the communication unit 11.

Next, the registration means 133 determines whether the infected person stayed in any of the multiple sections within a predetermined period of time (step S22). If the received user ID matches any of the user IDs stored in the history table 122, the registration means 133 determines that the infected person stayed in any of the sections, and if the received user ID does not match any of the sections, the registration means 133 determines that the infected person did not stay in any of the sections. The registration means 133 determines whether the infected person stayed in any of the multiple sections within the predetermined period of time by targeting records in the history table 122 whose entry time or exit time is within a predetermined period of time (e.g., the last five days).
If the infected person was not staying in any of the sections (step S22-N), the notification means 137 notifies the administrator terminal 30 via the communication unit 11 that the infected person was not staying in any of the sections (step S28), and the series of processes is terminated.
If an infected person has stayed in any of the sections (step S22-Y), the registration means 133 registers the infected person in the storage unit 12 (step S23). The registration means 133 stores the user ID of the infected person whose registration was accepted in the processing of step S21 in the storage unit 12 as an infected person ID.

Next, the registration means 133 identifies the zone in which the infected person stayed and the time period during which they stayed in that zone (step S24). The registration means 133 references the records for the above-mentioned period in the history table 122 to identify the zone ID of the zone in which the user corresponding to the infected person ID (i.e., the infected person) stayed, and the time period during which the infected person stayed in that zone. Hereinafter, the zone in which the infected person stayed may be referred to as the zone in which the infected person stayed, the zone ID corresponding to the zone in which the infected person stayed ID, and the time period during which the infected person stayed in the zone in which the infected person stayed may be referred to as the zone in which the infected person stayed. The time period during which the infected person stayed includes the time of entry into the zone and the time of exit from the zone. The registration means 133 generates infected person stay information including all identified pairs of zone IDs and time periods during which the infected person stayed, and stores this in the memory unit 12.

Next, the generation means 135 executes a list generation process to generate an infection candidate list including users who were in the same zone as the infected person at the same time and the risk levels corresponding to the zones where the users were in the same zone as the infected person (step S25). Hereinafter, users who were in the same zone as the infected person at the same time may be referred to as infection candidates. Details of the list generation process will be described later.

Next, the extraction means 136 executes a suspected infection extraction process to extract users suspected of having been infected by an infected person from among the infection candidates, and generates information about the extracted users (step S26). Hereinafter, infection candidates suspected of having been infected by an infected person may be referred to as suspected infection individuals. Details of the suspected infection extraction process will be described later.

Next, the notification means 137 transmits the infection candidate list generated in the list generation process and/or information about the suspected infection individuals generated in the suspected infection individual extraction process to the administrator terminal 30 via the communication unit 11, and outputs it to a predetermined notification destination (step S27). Note that the predetermined notification destination may be the management device 10, in which case the information is output to a display unit such as a monitor of the management device 10. In this way, the notification means 137 (output means) outputs information about the suspected infection individuals. This concludes the explanation of the series of processes.

6 is a flowchart showing an example of the list generation process by the management device 10. The list generation process is executed in step S25 of the notification process.
First, for each pair of infected person's stay zone ID and infected person's stay time zone included in the infected person stay information, the generation means 135 identifies the users who stayed in the same zone at the same time as the infected person and the time period during which the users stayed in the same zone at the same time as the infected person (step S31). Hereinafter, the time period during which a user stayed in the same zone at the same time as the infected person may be referred to as the "simultaneous stay time zone." The simultaneous stay time zone includes a start time and an end time. Furthermore, the time from the start time to the end time of the simultaneous stay time zone may be referred to as the simultaneous stay time.
The generation means 135 extracts all records in the history table 122 in which the zone ID is the same as the infected person's zone ID, the user ID is different from the infected person's ID, and at least a portion of the time period from the entry time to the exit time overlaps with the infected person's stay time period corresponding to the infected person's zone ID.
For each extracted record, the generation means 135 specifies a time period having the later of the entry time of the extracted record and the entry time of the infected person's stay time period as the start time, and the earlier of the exit time of the identified record and the exit time of the infected person's stay time period as the end time. The generation means 135 specifies the specified time period as a simultaneous stay time period of users corresponding to the user IDs of the identified record, and specifies the time from the start time to the end time of the specified simultaneous stay time period as the simultaneous stay time of users corresponding to the user IDs.
The generating means 135 generates a set of data in which the section ID and user ID of the identified record, the simultaneous stay time period, and the simultaneous stay time are associated with each other as a simultaneous stay time period data group, and stores the data in the storage unit 12.

Next, the generating means 135 executes steps S32 to S35 for each user whose user ID is included in the simultaneous presence time period data group. First, the generating means 135 determines whether a user whose user ID is included in the simultaneous presence time period data group was continuously present in two or more compartments at the same time as an infected person (step S32). The generating means 135 determines whether there is a data pair in the simultaneous presence time period data group that includes a user ID corresponding to the user being processed, and in which the difference between the end time of the simultaneous presence time period of one data and the start time of the simultaneous presence time period of the other data is within a predetermined range. The predetermined range is, for example, five minutes. If this data pair exists, the generating means 135 determines that the user being processed was continuously present in two or more compartments at the same time as an infected person; if this data pair does not exist, the generating means 135 determines that the user being processed was not continuously present in two or more compartments at the same time as an infected person.

Next, the generating unit 135 calculates the total simultaneous stay time for the target user (step S33). The generating unit 135 calculates the total simultaneous stay time associated with the user ID corresponding to the target user in the simultaneous stay time period data group.
Next, the generating unit 135 determines whether the total simultaneous stay time is equal to or greater than a predetermined threshold value (e.g., 15 minutes) (step S34). If the total simultaneous stay time is equal to or greater than the threshold value (step S34-Y), the generating unit 135 identifies the user as an infection candidate (step S35). If the total simultaneous stay time is less than the threshold value (step S34-N), the generating unit 135 does not identify the user as an infection candidate.

After performing steps S32 to S35 for all users whose user IDs are included in the simultaneous presence time period data group, the generation means 135 identifies the risk level corresponding to the zone in which the infection candidate was present at the same time as the infected person (step S36). For each infection candidate, the generation means 135 extracts all data including the user ID corresponding to the infection candidate from the simultaneous presence time period data group, and identifies all zone IDs included in the extracted data. The generation means 135 refers to the infection risk table 123 to identify the risk level corresponding to the identified zone ID.

Next, the generating unit 135 generates an infection candidate list including the infection candidate and the risk level corresponding to the zone where the infection candidate was staying at the same time as the infected person (step S37). The generating unit 135 generates an infection candidate list including the user ID corresponding to the infection candidate and the risk level identified in the processing of step S36.
When multiple zone IDs are identified for the same infection candidate, the generating means 135 selects the risk level corresponding to each zone ID that indicates the highest infection risk and includes it in the infection candidate list. When multiple zone IDs are identified for the same infection candidate, the generating means 135 may include the risk levels corresponding to each zone ID in the infection candidate list, each associated with a user ID. The generating means 135 may further include in the infection candidate list one or more of the zone ID, the simultaneous stay time of the infection candidate, and whether the infection candidate and the infected person consecutively stayed in two or more zones. The extracting means 136 generates the infection candidate list by including in the infection candidate list whether the infection candidate and the infected person consecutively stayed in two or more zones, thereby distinguishing users who consecutively stayed in two or more zones with the infected person from users who stayed in only one zone with the infected person. The generating means 135 may generate the infection candidate list in a format that can be sorted by each item, such as zone ID. This completes the series of processes.

FIG. 7 is an example of an infection candidate list.
In the example shown in FIG. 7, the infection candidate list stores user IDs, zone IDs, risk levels, simultaneous stay times, consecutive simultaneous stay information, and the like, in association with one another.

Figure 8 is a flowchart showing an example of the suspected infection extraction process performed by the management device 10.

Next, the extraction means 136 executes the processes of steps S41 to S45 for each infection candidate. First, the extraction means 136 identifies the risk level corresponding to the zone where the infection candidate was present at the same time as the infected person (step S41). As with the process of step S36, the extraction means 136 extracts all data including the user ID corresponding to the infection candidate from the simultaneous presence time period data group, and identifies all zone IDs included in the extracted data. The extraction means 136 refers to the infection risk table 123 to identify the risk level corresponding to the identified zone ID.
Next, the extraction means 136 weights the simultaneous stay time of infection candidates according to the risk level corresponding to each section (step S42). The extraction means 136 weights the simultaneous stay time included in the data extracted in the processing of step S41 according to the risk level identified in the processing of step S41 corresponding to the section associated with that simultaneous stay time. The extraction means 136 weights the simultaneous stay time so that the weight for the simultaneous stay time increases as the infection risk indicated by the risk level increases. The generation means 135 multiplies the simultaneous stay time by 3 times if the risk level corresponding to the section is "high," by 1.5 times if it is "medium," and by 1 time if it is "low."

Next, the extraction means 136 calculates the weighted sum of simultaneous stay times for the infection candidates (step S43).
Next, the extraction means 136 determines whether the weighted sum of simultaneous stay times is equal to or greater than a predetermined threshold (step S44). If the weighted sum of simultaneous stay times is equal to or greater than the threshold (step S44-Y), the extraction means 136 extracts the infection candidate as a suspected infection candidate (step S45). If the weighted sum of simultaneous stay times is less than the threshold (step S44-N), the extraction means 136 does not extract the infection candidate as a suspected infection candidate. The extraction means 136 uses the same threshold value as that used in the processing of step S34 as the threshold value. The extraction means 136 may use a threshold value different from that used in the processing of step S34 as the threshold value.
In addition, the extraction means 136 may extract as suspected infection candidates those whose sum, product, weighted sum, etc. of the total time spent together in each section and the risk level corresponding to the section where the infection candidate stayed at the same time as the infected person is above a threshold value.

After performing steps S42 to S45 for all suspected infections, the extraction means 136 generates user IDs corresponding to each extracted suspected infection as information about the suspected infections (step S46). The extraction means 136 may further include in the information about the suspected infections whether the suspected infections were present at the same time as the infected person in two or more consecutive compartments. By including in the information about the suspected infections whether the suspected infections were present at the same time as the infected person in two or more consecutive compartments, the extraction means 136 distinguishes suspected infections who were present at the same time as the infected person in two or more consecutive compartments from suspected infections who were present at the same time as the infected person in only one compartment and notifies them accordingly. This completes the series of processes.

FIG. 9 shows an example of information related to suspected infections.
9, the information about the suspected infection person stores the user ID, consecutive simultaneous presence information, etc. in association with each other. The information about the suspected infection person may also be associated with the section ID, risk level, and simultaneous presence time.

In this way, the generation means 135 identifies users who were staying in the same area as the infected person at the same time, and generates a list including the identified users and the risk levels of the areas where the users were staying at the same time as the infected person. The notification means 137 (output means) sends the generated list to the administrator terminal 30 via the communication unit 11, and notifies the specified notification destination. Note that the specified notification destination may be the management device 10, in which case the list is output to a display unit such as a monitor of the management device 10. In this way, the notification means 137 (output means) outputs the generated list. This allows the access control system 1 to more appropriately output information about people who were staying in the same area as the infected person at the same time.

The determination means 134 also determines the risk level of each section based on the layout of each section, the number of people each section can accommodate, the use of each section, the air conditioning equipment in each section, and whether infection control measures are in place in each section. Because the risk level of each section is determined based on the characteristics of each section, the access control system 1 can accurately extract people who may have been infected by an infected person.

In addition, the generation means 135 includes a user in the list if the user was in two or more compartments at the same time as an infected person, and the total time spent by the user in the two or more compartments together with the infected person is equal to or exceeds a threshold value. Because the susceptibility to infection with an infectious disease is related to the total time spent together with an infected person, the access control system 1 can accurately extract people who may have been infected by an infected person.

The generation means 135 also generates a list that distinguishes users who have been in two or more consecutive compartments with an infected person from users who have been in only one compartment with the infected person. Users who have been in two or more consecutive compartments with an infected person are likely to have been in the same room as the infected person and are therefore likely to have contracted the infectious disease, and therefore need to be observed with particular care. By notifying the notification means 137 of such a list, an administrator who checks the notified list can take action such as prioritizing testing of users who have been in two or more consecutive compartments with an infected person.

The extraction means 136 also identifies users who were in the same area as the infected person at the same time, and extracts suspected infected people who are suspected of having been infected by the infected person based on the length of time the identified users stayed in the same area as the infected person and the risk level of that area. This allows the access control system 1 to more appropriately notify information about people who were in the same area as the infected person at the same time.

The extraction means 136 also weights the stay time according to the risk level of each section, and extracts users whose weighted stay time is equal to or exceeds a threshold value as suspected infections. This allows the access control system 1 to accurately extract suspected infections, taking into account the risk level of each section.

Furthermore, if a user has been in two or more compartments with an infected person at the same time, the extraction means 136 weights the stay time according to the risk level of each compartment, and if the sum of the weighted stay times is equal to or greater than a threshold, extracts the user as a suspected infection. Even if a user has been in two or more compartments with an infected person at the same time, the access control system 1 can accurately extract suspected infections by taking into account the risk level of each compartment.

The notification means 137 also notifies suspected infected individuals who have been in two or more compartments consecutively with an infected individual, distinguishing them from suspected infected individuals who have been in only one compartment with the infected individual. Suspected infected individuals who have been in two or more compartments consecutively with an infected individual are likely to have been in the same room as the infected individual and are therefore likely to have contracted an infectious disease, and therefore require particular careful observation. By notifying the information extracted in this way by the notification means 137, an administrator who has confirmed the notified information can take action such as prioritizing testing of suspected infected individuals who have been in two or more compartments consecutively with the infected individual.

The generation means 135 may not calculate the total simultaneous stay time in the process of step S33, and may instead determine whether each individual simultaneous stay time is equal to or greater than a predetermined threshold value in the process of step S34. If at least one of the identified users' simultaneous stay times is equal to or greater than the threshold value, the generation means 135 identifies the identified users as infection candidates, and if all of the identified users' simultaneous stay times are less than the threshold value, the generation means 135 does not identify the identified users as infection candidates.
In this case, the generating means 135 may change the threshold value according to the risk level of each section corresponding to each simultaneous stay time. In this case, the generating means 135 sets the threshold value so that the higher the risk level corresponding to the section corresponding to the simultaneous stay time, the smaller the threshold value. This allows the generating means 135 to accurately extract suspected infections by taking into account the risk level of each section.

Furthermore, the extraction means 136 does not need to weight the simultaneous stay times in the process of step S42. Furthermore, the extraction means 136 does not need to calculate the total simultaneous stay times in the process of step S43. In this case, instead of the process of step S44, the extraction means 136 determines whether each simultaneous stay time is equal to or greater than a predetermined threshold. If at least one of the simultaneous stay times of the infection candidate is equal to or greater than the threshold, the extraction means 136 extracts the infection candidate as an infection suspect, and if none of the simultaneous stay times are equal to or greater than the threshold, the extraction means 136 does not extract the infection candidate as an infection suspect.
In this case, the extraction means 136 may use different thresholds depending on the risk level corresponding to the section corresponding to the simultaneous stay time. In this case, the extraction means 136 uses a smaller threshold as the risk level corresponding to the section increases. For example, the extraction means 136 uses different thresholds, such as 5 minutes if the risk level corresponding to the section is "high," 10 minutes if the risk level is "medium," and 15 minutes if the risk level is "low." This allows the extraction means 136 to accurately extract suspected infections by taking into account the risk level for each section.

Furthermore, in this embodiment, designated users include not only people who have actually been infected with an infectious disease, but also people who have been determined to have a high probability of being infected, such as close contacts of people infected with COVID-19. In other words, the designated users whose registration is accepted by the registration means 133 in the processing of step S21 include people who have been determined to have a high probability of being infected. Because it takes time from infection testing to diagnosis, by having the registration means 133 register people who have been determined to have a high probability of being infected, the access control system 1 can identify potential infections or extract people suspected of infection before the infection spreads.

Furthermore, when the acquisition means 131 acquires an entry request or the like in the processing of step S12, the authentication means 132 may execute the unlocking and door opening processing of step S14 without executing the determination of whether entry or exit is permitted in step S13.

Furthermore, if there is an area where no operation is required upon exit and the authentication means 132 permits entry in the processing of step S13, the registration means 133 may set an exit time that has not been stored in the history table 122 in the processing of step S15. The registration means 133 determines whether an exit time has been set in the previous record that includes the same user ID as the record added in the processing of step S15, and if not, sets the entry time of the added record to the exit time that has not been set. This allows the registration means 133 to set the exit time in the history table 122, and the access control system 1 to perform appropriate processing.
Furthermore, the registration means 133 may set only one of the entry time or the exit time in the history table 122. In this case, if the entry time or the exit time of an infected person and a user falls within a predetermined time period, the generation means 135 identifies the user as a user who was in the same area as the infected person at the same time, and estimates the time period in which the infected person's stay time period overlaps with the predetermined time period from the entry time or the predetermined time before the exit time as the simultaneous stay time period.

The memory unit 12 may also store the seating position of each user in the section, and the determination means 134 may change the identified risk level in the processing of step S36 or S41 depending on the seating positions of the infection candidate and the infected person. The determination means 134 dynamically changes the risk level so that the closer the seating position of the infection candidate is to the seating position of the infected person, the higher the risk level. For example, in office room 511 of office 500 shown in FIG. 3, the determination means 134 changes the risk level so that the risk level of infection candidates (users B and C) seated close to the infected person (user A) is higher than the risk level of the infection candidate seated farther away (user D). This allows the access control system 1 to accurately identify infection candidates based on the relative positions of users and infected persons, and accurately extract suspected infections.

The memory unit 12 may also store the time periods when the air conditioning equipment was operating in the section or the time periods when the windows were open (i.e., the ventilation status, detected by an open/close sensor or the like), and the determination means 134 may dynamically change the identified risk level in the processing of step S36 or S41 according to the ventilation status. The determination means 134 dynamically changes the risk level so that the risk level for the time periods when the air conditioning equipment was not operating or the windows were closed is higher than the risk level for the time periods when the air conditioning equipment was operating or the windows were open.
Furthermore, in the processing of step S36 or S41, the determination means 134 may dynamically change the identified risk level based on the calculated number of people in each section by referring to the history table 122 at each predetermined time. The determination means 134 identifies a time period during which the number of people in the section exceeded the section's capacity, and, other conditions being the same, changes the risk level for the time period during which the number of people in the section exceeded the section's capacity to a higher level than the risk level for the time period during which the number of people in the section was equal to or less than the section's capacity. The determination means 134 may also change the risk level based on the ratio of the number of people in the section to the section's capacity. For example, if this ratio is less than 50%, the risk level is lowered by one level, and if it is greater than 100%, the risk level is raised by one level. In this case, the access control system 1 installs cameras in each section to capture images of the section. The control unit 13 detects people from the images captured by each camera using known image processing technology and calculates the number of people detected at each predetermined time.
Furthermore, if the use of a section varies depending on the time period, the use for each time period may be associated with the same section ID and stored in the infection risk table 123. In this case, the generating means 135 or the extracting means 136 identifies the risk level corresponding to the use for each time period for each time period in the processing of step S37 or S42, respectively.
This allows the access control system 1 to accurately identify infection candidates according to the situation in the area and accurately extract suspected infection individuals.

The memory unit 12 may also store information indicating whether or not a user underwent sterilization treatment upon entering a zone, and the determination means 134 may change the risk level determined in step S36 or S41 depending on whether or not the user underwent sterilization treatment in step S37 or S42. The determination means 134 changes the risk level determined in step S36 or S41, depending on whether or not the user underwent sterilization treatment, so that the risk level determined in the presence of a user who did not undergo sterilization treatment upon entering a zone where infection control measures are in place is higher than the risk level determined in the absence of a user who did not undergo sterilization treatment, assuming other conditions are the same. In this case, the access control system 1 installs an alcohol sterilization device and an infrared detection device at the entrance to each zone that detects whether or not the user has placed their hand over the alcohol sterilization device. When allowing entry in step S13, the control unit 13 determines whether or not the user has placed their hand over the alcohol sterilization device based on the signal output from the infrared detection device, thereby determining whether or not the user has performed sterilization treatment.
This allows the access control system 1 to accurately identify potential infections based on the user's situation and accurately extract suspected infections.
Furthermore, in the processing of step S37 or S42, the determination means 134 may change the risk level determined in the processing of step S36 or S41 depending on whether the infected person and non-infected users were wearing masks when they entered the area. The determination means 134 changes the risk level when a user without a mask is present when entering the area so that it is higher than the risk level when no user without a mask is present when entering the area, other conditions being the same. In this case, the operation terminal 20 has a camera and uses the camera to capture an image of the user during user authentication during entry and exit processing. In the processing of step S13, the authentication means 132 determines whether the user is wearing a mask from the image captured by the camera using known image processing technology.
This allows the access control system 1 to accurately identify potential infections based on the user's situation and accurately extract suspected infections.
As described above, the access control system 1 can accurately extract suspected infections by dynamically changing the risk level according to the usage status of each section, such as the air conditioning equipment, the number of people entering, changes in the use of the section, and whether or not alcohol disinfection has been performed, thereby determining potential infection candidates.

In addition, in the processing of step S42, the extraction means 136 may increase the weighting of the simultaneous presence time of the infection candidate if the infection candidate and the infected person are together. If the difference in the entry time and exit time between the infection candidate and the infected person is within a predetermined range for two areas (e.g., within 5 minutes for both), the generation means 135 determines that the infection candidate and the infected person are together and increases the weighting (e.g., 4 times if the risk level is "high," 2 times if the risk level is "medium," and 1 time if the risk level is "low"). The generation means 135 may further increase the weighting (e.g., 5 times if the risk level is "high," 3 times if the risk level is "medium," and 1.5 times if the risk level is "low") if the difference between the exit time from one area and the entry time from the other area is within a predetermined range (e.g., within 5 minutes) for both the infection candidate and the infected person. This allows the access control system 1 to accurately extract infection candidates who are likely to have been together with an infected person as suspected infections. Note that the weighting of the threshold value may be changed instead of the simultaneous presence time. In this case, the higher the risk level, the smaller the threshold value is set.

The determination means 134 may also determine the risk level by weighting any of the risk indicators. For example, for indicators related to use, the risk level for "dining room" may be set to 4, the risk level for "conference room" to 2, and the risk level for "office" to 0; for indicators related to layout, the risk level for "crowding" may be set to 1 and the risk level for "dispersion" to 0. In this way, by weighting each risk indicator according to its importance, the risk level can be determined more appropriately.

Furthermore, the management device 10 may omit either the list generation process or the suspected infection extraction process in the notification process.
If the list generation process is omitted, in the process of step S27, the notification means 137 does not transmit the infection candidate list to the administrator terminal 30. Furthermore, in the suspected infection extraction process, the control unit 13 executes the processes of steps S41 to S45 for all users, rather than for each infection candidate.
If the suspected infection extraction process is omitted, the notification means 137 does not transmit the infection candidate list to the administrator terminal 30 in the process of step S27.

Furthermore, in the list generation process, the generation means 135 may not execute the process of step S32. In this case, in the process of step S37, the generation means 135 does not include in the infection candidate list whether the infection candidate has been in two or more consecutive compartments at the same time as the infected person. Furthermore, in the process of step S46, the extraction means 136 does not include in the information regarding the suspected infection candidate whether the infection candidate has been in two or more consecutive compartments at the same time as the infected person.

As mentioned above, various modifications can be made within the scope of the present invention to suit the implementation form.

1. Access control system, 12. Storage unit (storage means), 133. Registration means, 134. Determination means, 135. Generation means, 136. Extraction means, 137. Notification means

Claims (6)

An access control system for managing the entry and exit of multiple users in multiple sections,
a storage means for storing, for each of the zones, history information associating users who stayed in each zone with the times when the users entered or left each zone, and a risk level indicating the level of risk of infection with an infectious disease in each zone;
a registration means for registering a designated user from among the plurality of users;
a generating means for identifying users who stayed in the same zone at the same time as the registered designated user based on the history information, and generating a list including the identified users and risk levels corresponding to the zones where the identified users stayed at the same time as the registered designated user;
an output means for outputting the list;
An access control system comprising: The access control system of claim 1, wherein the risk levels of the multiple compartments are determined based on at least one of the layout of each compartment, the number of people that each compartment can accommodate, the purpose of each compartment, the air conditioning equipment in each compartment, and the infection control measures in each compartment. The access control system of claim 2 further comprises a determination means for changing the risk level depending on the usage status of the indicator. The access control system of any one of claims 1 to 3, wherein the generation means generates the list to include users who were in the same area at the same time as the registered designated user and whose stay time in the same area at the same time as the designated user is greater than or equal to a threshold value, and the threshold value is varied depending on the risk level of each area. An access control system as described in any one of claims 1 to 3, wherein the generation means generates the list to include users who were in the same area at the same time as the registered designated user, who were in two or more areas at the same time as the designated user, and whose total stay time in the two or more areas at the same time as the designated user is greater than a threshold value. The access control system of any one of claims 1 to 5, wherein the generation means generates the list so as to distinguish between users who were simultaneously present in two or more compartments with the designated user consecutively from users who were simultaneously present in only one compartment with the designated user.