JP4391727B2 - Access control system - Google Patents

Description

[0001]
BACKGROUND OF THE INVENTION
The present invention relates to an entry / exit management system that authenticates an individual using information stored in an IC card.
[0002]
[Prior art]
FIG. 6 is an explanatory diagram showing a conventional access control system.
In FIG. 6, the conventional entrance / exit management system reads the IC card 1 storing the personal ID number, the card issuing device 2 storing the ID number in the IC card 1, and the ID number stored in the IC card 1. And an authentication device (card reader) 3 for authenticating the person based on the ID number.
[0003]
The IC card 1 includes a memory 11 that stores data, and a communication unit 12 that performs data communication with the card issuing device 2 and the authentication device 3, and the memory 11 of the IC card 1 has an ID number ( Information). The communication method with the authentication device is roughly classified into a contact method and a non-contact method, and the ID number is a card R in a predetermined authentication device via a contact (contact method) or a radio wave (non-contact method). / W (Reader / Writer) 31 is notified.
[0004]
The authentication device 3 determines whether or not the notified ID number exists in the collation database (collation DB) storing the ID number of the person who is permitted to pass, and if it exists, “verification OK”. As a result, a guidance to that effect is displayed, and the door 4 is unlocked to allow passage. On the other hand, if it does not exist, “verification NG” is displayed as guidance, and the door 4 is not unlocked and the passage is not permitted.
[0005]
For writing the ID number of the IC card used for authentication, a dedicated card issuing device 2 is prepared. Before the data content is written, the card issuing device 2 prevents the data content from being rewritten without permission. The administrator inputs a password or the like, checks whether the input content is correct (administrator authority check), and writes the ID number to the IC card 1 via the communication means 12.
[0006]
[Problems to be solved by the invention]
As described above, the conventional entrance / exit management system was used to prevent crimes by identifying whether or not the person is authorized by the ID number of the IC card. If the number is altered, there is a problem that the individual cannot be identified.
[0007]
In addition, there is an authentication method that uses biometric features such as fingerprints, voiceprints, and irises as a method to reliably identify the person, but when switching to that method, a sensor that acquires ecological features Since it is necessary to exchange for an authentication device equipped with the IC card, it is impossible to use the IC card that has been used so far, which is costly. Further, a new work for registering personal biometric data in the verification DB is also generated. Therefore, there was a problem that it took time and effort.
[0008]
The present invention has been made to solve the above-mentioned problems, and improves the certainty of the authentication of the person without replacing the authentication device, and the person who switched from the IC card to the fingerprint authentication tag. , Collation by ID number with fingerprint code, IC card holders can collate by ID number without fingerprint code, and operate fingerprint authentication tag and IC card in parallel The purpose is to obtain an entrance / exit management system.
[0009]
[Means for Solving the Problems]
The access management system according to the present invention stores a personal information storage device for storing a personal number assigned to each individual, a permission number for permitting unlocking of the door, and collates the personal number with the permission number. A personal information storage device for storing personal information and fingerprint information corresponding to the personal number, and a personal information storage device. Stored in the personal information storage means, fingerprint detection means for detecting the fingerprint information of the owner of the device, collation means for comparing the fingerprint information stored in the personal information storage means with the fingerprint information detected by the fingerprint detection means communication means for transmitting if the comparison result of the detected fingerprint information matches the fingerprint information and the fingerprint detection section, the individual number stored in the personal information storage means to the authentication apparatus, the personal information storage device, And an adding means for adding a matching flag indicating that the matching result in the matching means is matched to the personal number stored in the personal information storage means, and the authentication apparatus adds the matching flag to the permission number and adds the permission number. Including a permission number updating means for updating the personal information, and collating the personal number transmitted from the personal information storage device with the permission number stored in the authentication device .
[0011]
Also, access control system according to the present invention, includes a personal information transfer apparatus for transferring personal number stored in the personal information storage device in the personal information storage device, personal information transfer device, stored in the personal information storage unit Reading means for reading out the personal number, number-corresponding fingerprint detecting means for detecting the fingerprint information stored in the personal information storage means, the personal number read by the reading means and the fingerprint information detected by the number-corresponding fingerprint detecting means And writing means for writing to the information storage means.
[0012]
DETAILED DESCRIPTION OF THE INVENTION
Embodiment 1 FIG.
Hereinafter, the first embodiment of the present invention will be described in detail with reference to the drawings.
[0013]
FIG. 1 is a block diagram showing a configuration of an access management system according to Embodiment 1 of the present invention. In FIG. 1, the same components as those described above (see FIG. 6) are denoted by the same reference numerals or symbols followed by “A”, and detailed description thereof is omitted.
[0014]
In FIG. 1, 5 is an IC card compatible fingerprint authentication tag (hereinafter referred to as a fingerprint authentication tag) carried by an individual instead of the IC card 1, and 6 is a fingerprint authentication tag 5 for registering fingerprint data and an ID number. A tag registration apparatus is shown.
[0015]
The fingerprint authentication tag 5 collates the memory 11A for storing the ID number and the fingerprint data, the fingerprint sensor 51 for acquiring the fingerprint data, the fingerprint data from the fingerprint sensor 51 and the fingerprint data written in the memory 11A. Collation means 52.
[0016]
Furthermore, the fingerprint authentication tag 5 has a specification equivalent to the IC card 1 and the fingerprint code adding means 53 for adding a fingerprint code (fingerprint Bit) indicating a collation result in the collation means 52 as a flag to the ID number, A contact or non-contact communication means 50 for transmitting a number or the like to the authentication device 3A is provided. The authentication device 3A is compatible with the IC card 1 and the fingerprint authentication tag 5.
[0017]
The tag registration device 6 includes an administrator check unit 21, a fingerprint sensor 60 that captures fingerprint data, a card data reading unit 61 that reads an ID number from an existing IC card 1, and the fingerprint data and ID number of the fingerprint authentication tag 5. Writing means 62 for writing to the memory 11A.
[0018]
The authentication device 3A includes collation DB fingerprint code update means 35 for directly adding a fingerprint code to an ID number stored in the collation database in order to operate using the ID number and the fingerprint code.
[0019]
FIG. 2 is a block diagram showing a hardware configuration of fingerprint authentication tag 5 according to the first embodiment of the present invention. In FIG. 2, the same components as those described above (FIG. 1) are denoted by the same reference numerals, and detailed description thereof is omitted.
[0020]
In FIG. 2, a fingerprint sensor 51 is connected to a CPU 55 that performs overall control of the fingerprint authentication tag 5 and fingerprint collation via an AD conversion circuit 54, and further includes a memory 11A for storing an ID number and fingerprint data, and an authentication device. A communication circuit 501 for performing data communication with 3A is connected.
[0021]
What is connected to the communication circuit 501 is classified according to the contact method with the card R / W 31 of the authentication device 3A. The wireless antenna 502 is connected in the non-contact method, and the IO contact 503 is connected in the contact method. . The battery 56 is used to drive the fingerprint authentication tag 5.
[0022]
The verification unit 52 and the fingerprint code adding unit 53 are included in the CPU 55, and the communication circuit 501, the antenna 502, and the IO contact 503 are included in the communication unit 50.
[0023]
Next, external examples of the fingerprint authentication tag 5 and the authentication device 3A will be described. FIG. 3 is an explanatory diagram showing the appearance of the fingerprint authentication tag 5 and the authentication device 3A according to the first embodiment of the present invention.
[0024]
In FIG. 3A, a contact-type fingerprint authentication tag 5 is a card-shaped insertion portion with an IO contact (IC card terminal) 503 having the same specifications as the finger placement portion of the fingerprint sensor 51 and the contact-type IC card 1. The authentication is performed by inserting the insertion part of the fingerprint authentication tag 5 or the IC card 1 into the contact IC card insertion slot of the authentication device 3A.
[0025]
Further, the authentication device 3A includes a numeric keypad 36 for designating a number and a liquid crystal screen 37 for displaying guidance.
[0026]
In FIG. 3B, the non-contact type fingerprint authentication tag 5 includes a finger placement portion of the fingerprint sensor 51 and an antenna 502 having the same specifications as the non-contact type IC card 1. Data communication is performed with the receiving unit of the apparatus 3A.
[0027]
Next, the operation of the access control system will be described with reference to FIGS. 4 and 5 together with FIG. FIG. 4 is a flowchart showing the operations of fingerprint authentication tag 5 and authentication device 3A during authentication according to Embodiment 1 of the present invention. FIG. 5 shows fingerprint authentication during ID number registration according to Embodiment 1 of the present invention. It is a flowchart which shows operation | movement of the tag 5 and the tag registration apparatus 6. FIG.
[0028]
The operation of the access management system at the time of authentication using the fingerprint authentication tag 5 will be described.
In FIG. 4, in order to enable the authentication operation using the ID number and the fingerprint code, the original collation when operating with the existing IC card 1 using the collation DB fingerprint code update means 35 of the authentication device 3A. A fingerprint code is added to the ID number in the DB, and the collation DB is updated (step S101).
[0029]
The collation DB fingerprint code updating unit 35 can directly add a fingerprint code to the ID number in the collation DB 32A for the ID number of the person who owns the fingerprint authentication tag 5. Further, in the case where the fingerprint authentication tag 5 is changed to the IC card 1, the fingerprint code can be deleted from the ID number.
[0030]
When the owner of the fingerprint authentication tag 5 puts his finger on the finger placement portion of the fingerprint sensor 51, the fingerprint sensor 51 takes in the fingerprint data (Fin) (step S102), and the collation means 52 is stored in the memory 11A. The fingerprint data (Fbd) is compared and collated, and it is determined whether or not the owner is correct (step S103).
[0031]
In step S103, if collation cannot be performed (that is, NG), it is determined that the person who currently holds the fingerprint authentication tag 5 is not the original owner, and the processing routine of FIG. 4 ends. On the other hand, when collation is successful (ie, OK), the fingerprint code adding means 53 adds a fingerprint code (F) indicating that the collation has been completed to the last digit of the ID number stored in the fingerprint authentication tag 5. (Step S104).
[0032]
The communication unit 50 transmits the ID number (IDout) to which the fingerprint code is added to the authentication device 3A (step S105).
[0033]
The card R / W 31 of the authentication device 3A receives the ID number (card data, IDout) transmitted from the fingerprint authentication tag 5 (step S106).
[0034]
The comparison unit 33 compares the ID number transmitted from the fingerprint authentication tag 5 with the ID number group in the verification DB 32A after the fingerprint code is added, and whether the ID number from the fingerprint authentication tag 5 exists in the verification DB 32A. It is determined whether or not (step S107).
[0035]
In step S107, when the ID number from the fingerprint authentication tag 5 exists in the collation DB 32A (that is, YES), the display / control unit 34 displays that the collation is OK on the liquid crystal screen 37 (step S108). The door 4 is unlocked (step S109), and the processing routine of FIG.
[0036]
On the other hand, when the ID number from the fingerprint authentication tag 5 does not exist in the collation DB 32A (that is, NO), the display / control unit 34 displays that the collation is NG (step S110), and the processing routine of FIG. Exit.
[0037]
Next, the operation of the access control system when registering the registered contents of the conventional IC card 1 in the fingerprint authentication tag 5 will be described.
In FIG. 5, the administrator check means 21 of the tag registration device 6 first causes the administrator to input a password or the like to prevent the registration work from being performed without the consent of the administrator, and the input content is correct. It is checked whether or not (step S201).
[0038]
In step S201, if the correct content is input as a result of the check (that is, OK), the writing unit 62 sets the data update flag of the fingerprint authentication tag 5 to “ON” to enable data update (step S201). S202).
Further, the card data reading means 61 reads the ID number from the IC card 1 via the communication means 12 (step S203).
[0039]
On the other hand, if an incorrect content is input (that is, NG), the processing routine of FIG. 5 is terminated.
[0040]
The writing means 62 transfers (transmits) the ID number to the fingerprint authentication tag 5 (step S204), and the fingerprint authentication tag 5 writes the ID number (IDdb) in the memory 11A (step S205).
[0041]
Subsequently, the fingerprint sensor 60 of the tag registration device 6 takes in the fingerprint data (Fdb) of the owner of the fingerprint authentication tag 5 (step S206), and the writing means 62 transfers (transmits) the fingerprint data to the fingerprint authentication tag 5. )
[0042]
The fingerprint authentication tag 5 writes the fingerprint data into the memory 11A (step S208), and when a series of registration operations is completed (step S209), the writing means 62 turns off the data update flag and disables the data update. (Step S210), the processing routine of FIG.
[0043]
Note that the authentication device 3A can also perform authentication using the conventional IC card 1, and in this case, the verification is performed only with the ID number excluding the fingerprint code.
[0044]
As described above, the fingerprint verification function is built in the fingerprint authentication tag 5 and only the ID number corresponding to the fingerprint data permitted by the fingerprint verification is set as the verification target with the authentication device 3A, and is built in the conventional IC card 1. Since the communication means 12 is also incorporated in the fingerprint authentication tag 5 so as to be compatible, it is possible to check the ID number and the fingerprint collation even if the existing authentication device 3A is used. Can be confirmed with the actual owner, and a high security access control system can be constructed without cost.
[0045]
The tag registration device 6 can read the ID number from the conventionally used IC card 1 and transfer it to the fingerprint authentication tag 5 when registering data in the fingerprint authentication tag 5, so that it is necessary to register the number again. Therefore, operation change from the authentication method using the IC card 1 is easy.
[0046]
Further, a fingerprint code adding means for adding a fingerprint code indicating that the fingerprint verification is permitted to the ID number permitted in the fingerprint verification of the fingerprint authentication tag 5 to the ID number, and a person who switched to the fingerprint authentication tag 5 are verified. Since the collation DB fingerprint code update means 35 that can add the fingerprint code to the ID number in the DB 32A is provided, for those who have switched from the IC card 1 to the fingerprint authentication tag 5, the collation by the ID number with the fingerprint code added is performed. The person who owns the IC card 1 can collate with the ID number to which the fingerprint code is not added, and the fingerprint authentication tag 5 and the IC card 1 can be operated in parallel.
[0047]
【The invention's effect】
As described above, according to the present invention, the fingerprint authentication tag for storing the ID number assigned to each individual and the ID number for permitting the unlocking of the door are stored, and the door is obtained by collating the ID number. The fingerprint authentication tag includes an ID number and a memory for storing fingerprint information corresponding to the ID number, and fingerprint information of the holder of the fingerprint authentication tag. Fingerprint sensor to be detected, collation means for collating fingerprint information stored in memory with fingerprint information detected by fingerprint sensor, and collation result of fingerprint information stored in memory and fingerprint information detected by fingerprint sensor If There is a match, a communication means for transmitting the ID number stored in the memory to the authentication device, the personal information storage unit, a verification flag indicating that the collation result of the collation means is coincident, in the personal information storage unit The authentication device includes an authorization number updating means for updating the authorization number by adding a verification flag to the authorization number, and the personal number transmitted from the personal information storage device, Because the verification number is checked against the authorization number stored in the authentication device, it is possible to check the ID number and fingerprint verification even if an existing authentication device is used, and confirmation between the owner of the fingerprint authentication tag and the actual owner Thus, there is an effect that an entrance / exit management system capable of constructing a high security system without cost is obtained.
In addition, for a person who has switched from an IC card to a fingerprint authentication tag, verification by an ID number to which a fingerprint code is added may be performed, and for a person who has an IC card, verification by an ID number to which a fingerprint code is not added may be performed. In addition, there is an effect that an entrance / exit management system capable of operating the fingerprint authentication tag and the IC card in parallel is obtained.
[0049]
Furthermore, according to the present invention, the tag registration device for transferring the ID number stored in the IC card to the fingerprint authentication tag is provided, the tag registration device includes a reading means for reading the ID number stored in the IC card, and a memory. Since it includes a fingerprint sensor for detecting fingerprint information to be stored, and a writing means for writing the ID number read by the reading means and the fingerprint information detected by the fingerprint sensor into the memory, at the time of data registration to the fingerprint authentication tag, The ID number can be read from the IC card used in the past and transferred to the fingerprint authentication tag. There is no need to register the number again, and fingerprint data can be registered. Operation changes from the IC card authentication method There is an effect that an entrance / exit management system can be obtained.
[Brief description of the drawings]
FIG. 1 is a block diagram showing a configuration of an access management system according to a first embodiment of the present invention.
FIG. 2 is a block diagram showing a hardware configuration of a fingerprint authentication tag according to the first embodiment of the present invention.
FIG. 3 is an explanatory diagram showing an appearance of a fingerprint authentication tag and an authentication device according to Embodiment 1 of the present invention.
FIG. 4 is a flowchart showing the operation of the fingerprint registration apparatus according to Embodiment 1 of the present invention.
FIG. 5 is a flowchart showing operations of a fingerprint authentication tag and an authentication device at the time of authentication according to Embodiment 1 of the present invention.
FIG. 6 is an explanatory diagram showing a conventional access control system.
[Explanation of symbols]
1 IC card, 3A authentication device, 5 IC card compatible fingerprint authentication tag, 6 tag registration device, 11, 11A memory, 12 communication means, 21 administrator check means, 31 card R / W, 32A verification DB, 33 comparison means, 34 display / control means, 35 fingerprint code update means, 36 numeric keypad, 37 liquid crystal screen, 50 communication means, 51 fingerprint sensor, 52 collation means, 53 fingerprint code addition means, 54 AD conversion circuit, 55 CPU, 56 battery, 60 fingerprint Sensor, 61 Card data reading means, 62 Writing means, 501 Communication circuit, 502 Antenna, 503 IO contact.

Claims (1)

A personal information storage device for storing a personal number assigned to each individual;
An access management system comprising: an authentication device for storing a permission number for permitting unlocking of the door, and performing an unlock control of the door by comparing the personal number and the permission number;
The personal information storage device
Personal information storage means for storing the personal number and fingerprint information corresponding to the personal number;
Fingerprint detection means for detecting fingerprint information of a holder of the personal information storage device;
Collation means for collating fingerprint information stored in the personal information storage means with fingerprint information detected by the fingerprint detection means;
When the collation result between the fingerprint information stored in the personal information storage means matches the fingerprint information detected by the fingerprint detection means, the personal number stored in the personal information storage means is transmitted to the authentication device. Communication means;
The personal information storage device includes an adding unit that adds a collation flag indicating that the collation result of the collation unit is matched to the personal number stored in the personal information storage unit;
The authentication device includes a permission number update unit that updates the permission number by adding the verification flag to the permission number, and includes a personal number transmitted from the personal information storage device and a permission number stored in the authentication device. Access control system characterized by matching

Images