JP4541835B2 - Entrance management system - Google Patents

Description

  The present invention relates to an entrance management system for controlling an electric lock according to authentication identification information registered in advance in an authentication medium carried by a user.

  In the conventional apparatus, opening / closing of the door of the room where entry is managed is controlled by the door opening / closing control device. A proximity card reader is connected to the door opening / closing control device. A data management processing device is connected to the proximity card reader. In the data management processing device, an ID number permitted to enter the room is registered in advance.

  A user who wants to enter the room causes the proximity card reader to read the ID number registered in advance in the IC card carried by the user, and the proximity card reader inputs the ID number to the data management processing device. The data management processing device collates the ID number registered in advance in the data management processing device with the input ID number, and inputs the opening control signal to the door opening / closing control device if they match. Upon receiving an opening control signal, the door opening / closing control device opens the door and allows the user to enter the room (for example, see Patent Document 1).

JP 2003-6578 A

  In the conventional room entry management system as described above, it is necessary to register in advance an ID number that permits entry into the data management processing device. Generally, in order to register an ID number in a data management processing apparatus, there is a management problem, so it is necessary to intervene an administrator with special authority. However, the place where the room for managing the entrance is provided is often separated from the place where the administrator is located (for example, the general affairs department at the head office becomes the administrator and registers the room permission for the remote branch office room). Etc.).

  In such a case, when trying to register a new user's entry permission, the administrator uses the central management device or the like to use the ID number of the IC card at the administrator's hand as the ID number of the entry permission. After registering in the data management processing device, the IC card is distributed to the user.

  On the other hand, storage media such as non-contact IC cards in which electronic money is registered and mobile terminals (cell phones) having the function of non-contact IC cards have become widespread, and these storage media are about to be used as authentication media. Yes. However, these storage media are in the hands of the user due to their nature, and it is difficult to send them to a remote administrator, and the remote administrator registers these storage media as authentication media. There were obstacles to doing.

  The present invention has been made to solve the above-described problems, and an object of the present invention is to provide an entrance management system capable of performing user registration with high security at a use site.

  The room entrance management system according to the present invention creates registration identification information for identifying a user, manages a management database in which registration identification information is registered, and a management apparatus via a communication line. Authentication identification information reading unit for reading registration identification information and an authentication identification information reading unit for reading authentication identification information registered in advance in an authentication medium carried by the user. And a control device that controls the locking state of the electric lock according to the control device, and when the control device reads the registration identification information by the registration identification information reader, the control device issues a registration request signal to the management device. The authentication identification information reading unit after confirming that the registration identification information read by the registration identification information reading unit is registered in the management database in response to the registration request signal Therefore the authentication identification information read in association with the registered identification information registered in the management-side database.

  According to the room entrance management system of the present invention, the management device registers the registration identification information read by the registration identification information reading unit of the control device connected to the management device via a communication line in the management database. The authentication identification information read by the authentication identification information reading unit is registered in the management database in association with the registration identification information. User registration is performed after collating with the user who is trying to register, and user registration with high security can be performed at the site of use.

The best mode for carrying out the present invention will be described below with reference to the drawings.
Embodiment 1 FIG.
FIG. 1 is a block diagram showing an entrance management system according to Embodiment 1 of the present invention. In the figure, a management site 1 where an administrator is provided is provided with a management device 2 and a management-side database storage device 3 managed by the management device 2. The use base 5 where the user is located is provided with a control device 8 for controlling application / unlocking of the electric lock 7 attached to the door 6.

  The user carries a mobile terminal (mobile phone) 10 that can communicate with the control device 8 and an IC card (authentication medium) 11 in which authentication identification information (ID information) is registered in advance.

  The management database storage device 3 stores a management database as shown in FIG. The administrator database has a plurality of records. Each record is composed of a user name writing unit, a registration code writing unit, an IC card ID writing unit, a registration valid period writing unit, a room entry permission valid period writing unit, and an effective base writing unit. Yes.

  In the user name writing part, the names of users who are allowed to enter rooms that are managed to enter are registered. In the registration code writing section, only one registration identification information created for one record is registered. In the IC card ID writing section, authentication identification information registered in advance in the IC card 11 carried by the user is registered.

  In the registration validity period writing unit, a registration validity period set in the created registration identification information is registered. The room entry permission effective period writing unit registers the room entry permission effective period set in the authentication identification information registered in the IC card ID writing unit. In the effective base writing part, the use base where the identification information for authentication registered in the IC card ID writing part becomes valid is registered.

  When the record is created and the registration identification information is created, the management device 2 converts the registration identification information into a barcode (two-dimensional barcode (QR code)), that is, image information. In addition, the management device 2 attaches the registration identification information converted into the image information to an electronic mail, and transmits the electronic mail to the mobile terminal 10 via the communication network.

  The control device 8 is used for reading the authentication identification information reading unit (IC card reader) 12 for reading the authentication identification information registered in the IC card 11 and the registration identification information transmitted to the mobile terminal 10. A registration identification information reading unit (barcode reader) 13 and a control-side database storage unit 14 are included. The control database storage unit 14 stores a control database as shown in FIG.

  The control database also has a plurality of records. Each record is composed of a user name writing unit, an IC card ID writing unit, an entry permission valid period writing unit, and an effective base writing unit. The contents of the record in the control database described above are the same as the record in the management database. Further, the records in the management database correspond to the records in the control database on a one-to-one basis. That is, the same identification information for authentication is registered in the records having the same user name data.

  When the control device 8 reads the authentication identification information by the authentication identification information reading unit 12, the read authentication identification information is registered in the control-side database stored in the control-side database storage unit 14. If so, the electric lock 7 is unlocked. Further, when the control device 8 reads the authentication identification information by the authentication identification information reading unit 12, the read authentication identification information is registered in the control-side database stored in the control-side database storage unit 14. If not, the locked state of the electric lock 7 is maintained.

  Further, when the registration identification information reading unit 13 reads the registration identification information and the authentication identification information reading unit 12 reads the authentication identification information, the control device 8 includes the registration identification information and the authentication identification information. A registration request signal is transmitted to the management apparatus 2.

  When receiving the registration request signal from the control device 8, the management device 2 registers the registration identification information included in the registration request signal in the management database in association with the authentication identification information included in the registration request signal. To see if it can.

  In addition, when the management device 2 receives the registration request signal from the control device 8, the management device 2 confirms whether the authentication identification information included in the registration request signal is in a predetermined format (for example, the recognition identification information is If it is a number, check if it is within a predetermined range).

  In other words, the management device 2 has registered the registration identification information included in the registration request signal in the management database, and the registration identification information is within the registration validity period. If the information is not yet registered in the management database in association with the authentication identification information, and the authentication identification information included in the registration request signal is in a predetermined format, the registration request signal satisfies the registration conditions The authentication identification information is registered in the management database in association with the registration identification information.

  In addition, the management device 2 has a case where the registration identification information and the authentication identification information included in the registration request signal do not satisfy the registration conditions described above, that is, when the registration identification information is not registered in the management database. If the registration identification information is outside the registration validity period, the registration identification information has already been registered in association with the authentication identification information (the registration identification information has already been registered), or the authentication identification information has a predetermined format If not, the registration request signal from the control device 8 is invalidated.

  Further, the management device 2 returns a registration permission response including user data as a response to the registration request signal if the registration request signal satisfies the registration condition, and a registration rejection response if the registration request signal does not satisfy the registration condition. Transmit to the control device 8.

  Upon receiving the registration permission response, the control device 8 registers the identification information for authentication together with the target user data in a record in the control-side database, and notifies the user that it has been registered.

  Further, when receiving the registration rejection response, the control device 8 notifies the user that the identification information for authentication and the target user data are registered without registering them in the record in the control-side database.

  Next, the operation will be described. FIG. 4 is an explanatory diagram showing a user registration procedure in the room entry management system of FIG. First, the user informs the administrator that he / she wants to use the entrance management system by telephone or the like (application for use) (step S1).

  In response to this, the administrator creates a new record in the management-side database stored in the management-side database storage device 3 using the management device 2, and uses the user's data as the user data in the record. The name, the entry permission valid period, and the valid base are registered (step S2).

  As a result, the management device 2 creates new registration identification information, registers it in the newly created record, and sets a registration validity period in the new registration identification information. Thereafter, the management device 2 converts the registration identification information into a barcode (image information) and transmits the barcode to the mobile terminal 10 using an electronic mail (step S3).

  When the mobile terminal 10 receives an e-mail from the management device 2, the user causes the mobile terminal 10 to display a barcode and causes the registration identification information reading unit 13 to read the barcode (step S4). Further, the user causes the authentication identification information reading unit 12 to read the authentication identification information registered in advance in the IC card 11 (step S5).

  Then, the control device 8 sends a registration request signal including the authentication identification information read by the authentication identification information reading unit 12 and the registration identification information read by the registration identification information reading unit 13 to the management device 2. (Step S6).

  In response to this, the management apparatus 2 checks whether the registration request signal satisfies the registration condition. That is, the management device 2 confirms whether the registration identification information included in the registration request signal is registered in the management database, and confirms whether the registration identification information is within the registration validity period. And confirms whether the registration identification information has already been registered in association with the authentication identification information, and further confirms whether the authentication identification information included in the registration request signal is in a predetermined format. (Step S7).

  Next, the management device 2 transmits a confirmation result as to whether the registration request signal satisfies the registration condition to the control device 8 as a registration request signal response (step S8).

  Here, if the registration request signal satisfies the registration condition, the management device 2 registers the identification information for authentication in the record of the management database in association with the identification information for registration, and the user data as the registration request signal response. A registration permission response including this is transmitted to the control device 8.

  On the other hand, if the registration request signal does not satisfy the registration condition, the management device 2 invalidates the registration request signal and registers the registration request signal response without registering the authentication identification information in the management database in association with the registration identification information. The registration rejection response is transmitted to the control device 8 as follows.

  When receiving the registration request signal response input from the management device 2, the control device 8 determines whether the registration request response is a registration permission response or a registration rejection response, thereby obtaining the identification information for authentication. It is determined whether or not registration is allowed (step S9). Thereafter, the management device 2 notifies the user of the registration result using, for example, an LED display (step S10).

  Here, when a registration permission response is received from the management device 2, the control device 8 registers the identification information for authentication together with the target user data in the record in the control side database, and is registered for the user. To be notified.

  On the other hand, when receiving a registration rejection response from the management device 2, the control device 8 rejects the registration to the user without registering the authentication identification information and the target user data in the record in the control-side database. Notify that

  In such an entrance management system, the management device 2 registers the registration identification information read by the registration identification information reading unit 13 of the control device 8 connected to the management device 2 via a communication line in the management database. After confirming that the authentication identification information read by the authentication identification information reading unit 12 is registered in the management database in association with the registration identification information, the user authorized to use the The user registration is performed after collating with the user who is going to register at the usage site, and the user registration with high security can be performed at the usage site.

  Further, since the control device 8 controls the locking / unlocking of the electric lock 7 according to the authentication identification information registered in the control-side database of the control device 8 itself, the control device 8 controls the electric lock 7. There is no need to communicate with the management apparatus 2 in order to perform and unlock.

  Furthermore, since the management apparatus 2 sets the registration validity period in the registration identification information, it is possible to prevent unauthorized user registration that is not intended by the administrator.

  Furthermore, when the registered identification information already registered in the control-side database in association with the registration identification information is read by the registration identification information reading unit 13, the management device 2 receives the information from the control device 8. Since the registration request signal is invalidated, the registration identification information issued by the administrator is valid only for one registration, and multiple registration is performed in which a plurality of authentication identification information is registered for one registration identification information. Can be prevented.

  Further, since the registration identification information is transmitted to the mobile terminal 10 carried by the user by e-mail, the period from when the user applies for use to when it is registered in the control device 8 is shortened. be able to.

  In the first embodiment, the control device 8 has been described as controlling the locking / unlocking of the electric lock 7 in accordance with the authentication identification information registered in the control-side database of the control device 8 itself. However, the control device may control the locking / unlocking of the electric lock according to the authentication identification information in the management database managed by the management device. That is, the control device may not have the control-side database storage unit.

  In addition, the management device 2 converts the registration identification information into image information such as a barcode, but the registration identification information only needs to allow the control device to identify the user who has permitted the use of the entrance management system by the administrator. The information format of the registration identification information is not limited to image information, and may be, for example, a password.

  Further, it has been described that the registration identification information is attached to an e-mail and transmitted to the mobile terminal 10 carried by the user. However, the method of transmitting the registration identification information to the user is limited to the e-mail. For example, the administrator may print the registration identification information as a barcode on paper and mail the paper to the user.

  Furthermore, although the IC card 11 has been described as being separate from the portable terminal 10 carried by the user, the authentication medium may be combined with the portable terminal as long as the portable terminal has the function of an authentication medium.

  Needless to say, the entrance management system can also be used for exit management.

It is a block diagram which shows the entrance management system by Embodiment 1 of this invention. It is explanatory drawing which shows the structure of the management database stored in the management database storage apparatus of FIG. It is explanatory drawing which shows the structure of the control side database stored in the control side database memory | storage part of FIG. It is explanatory drawing which shows the procedure of the user registration in the room entrance management system of FIG.

Explanation of symbols

  2 management device, 7 electric lock, 8 control device, 10 portable terminal, 11 IC card (authentication medium), 12 identification information reading unit for authentication, 13 identification information reading unit for registration, 14 control side database storage unit.

Claims (5)

A management apparatus for creating a registration identification information for identifying a user and managing a management database in which the registration identification information is registered;
A registration identification information reading unit that is connected to the management apparatus via a communication line and reads the registration identification information, and an authentication identification information reading that reads authentication identification information registered in advance in an authentication medium carried by the user. And a control device that controls the locking state of the electric lock according to the identification information for authentication,
The control device, when the registration identification information is read by the registration identification information reading unit, issues a registration request signal to the management device,
In response to the registration request signal, the management device confirms that the registration identification information read by the registration identification information reading unit is registered in the management database, and then reads the authentication identification information. The room entry management system, wherein the authentication identification information read by the section is associated with the registration identification information and registered in the management database. The control device further includes a control-side database storage unit that stores a control-side database in which the authentication identification information is registered,
The control device reads the authentication identification information reading unit when the authentication identification information read by the authentication identification information reading unit is registered in the management database in association with the registration identification information. The authentication identification information is registered in the control-side database, and it is confirmed that the authentication identification information read by the authentication identification-information reading unit is registered in the control-side database. The entrance management system according to claim 1, wherein the lock is unlocked.   The management apparatus sets a registration valid period in the registration identification information, and when the registration identification information that has passed the registration valid period is read by the registration identification information reading unit, the registration from the control apparatus The room entry management system according to claim 1 or 2, wherein the request signal is invalidated.   When the registered identification information already registered in the management database in association with the registration identification information is read by the registration identification information reading unit, the management device reads from the control device. The room entry management system according to any one of claims 1 to 3, wherein the registration request signal is invalidated.   The room entry management system according to any one of claims 1 to 4, wherein the registration identification information is transmitted to a portable terminal carried by a user via a communication network.

Images