JP5359848B2 - IC card authentication system and IC card authentication method - Google Patents

Description

  The present invention relates to a system for managing gate opening / closing and entrance / exit, and more particularly to a system for managing a user's gate passage using card identification information stored in an IC card.

When a user passes through a flapper gate or enters a specific room, an entrance / exit management system is used to read the IC card for entry and exit held by the user and control the opening and closing of the gate and door. ing.
However, in this entry / exit management system, for example, the user may lose the IC card or be stolen.
In such a case, if security measures are not taken for the IC card and entrance / exit management, there is a security risk that the IC card is illegally used by a malicious user.

By the way, for example, in a desktop security system that allows a user to use a personal computer when an IC card is read and authentication is performed based on this, the card identification ID stored in the IC card, etc. A system for encrypting the above information using a preset personal identification number or password is used.
In the above system, for example, a user inputs a password at the timing of using an IC card, and the system reads information after decoding the information read from the IC card based on the input password. A certain level of security is ensured by adopting the procedure.
Also, in this system, when a user loses an IC card, a certain level of security can be ensured by temporarily invalidating the lost IC card on the system side that performs authentication (identity verification). it can.

Therefore, considering the case where the security system using the personal identification number and the IC card in the desktop security system is applied to the entrance / exit management system, the user uses the IC card, that is, the user uses the reading device (reading module). The card identification information is read by holding the IC card over (). At this time, the user is required to input a personal identification number or a password.
In this case, each user is required to perform procedures such as using an IC card and entering a password when passing through the gate (or entering the room). This takes time to input, and it takes time for each user to be authenticated. For example, when managing the passage of a gate used by a large number of people or entering / leaving a room. It becomes difficult to operate this system.

  In addition, as described above, when the user loses the IC card, the procedure of disabling the IC card is that the user loses the IC card and notices that the IC card has been lost. Since there is a time lag until the IC card is invalidated, it may be inconveniently used before the IC card is invalidated.

  As a related technique for this, the minimum travel time is calculated from the difference between the operation time at the movement source recognition terminal and the operation time at the movement destination recognition terminal and the estimated time, and the movement time is determined based on the calculated movement time. A technique for unlocking a lock is disclosed (Patent Document 1).

  In addition, as a related technique, there is disclosed a method of authenticating a user using a general portable terminal and setting an effective time for each authentication every time authentication is performed (Patent Document 2). .

JP 2004-204629 A JP 2008-257212 A JP 2006-318429 A Japanese Patent Laid-Open No. 2006-293819

However, in Patent Document 1, since the authentication medium (IC card) is always valid as the authentication medium, if the IC card is lost or stolen, it is illegally used. Inconveniences such as this may occur.
In Patent Document 1, since authentication using a user ID or password (ID / PW) input by a user is not performed, the security strength is lower than that of a system that requires ID / PW input when passing through a gate. There are inconveniences.

Further, in the host patent document 2, for example, when ID / PW input using a mobile terminal is performed at the time of passing through a gate and authentication based on this ID / PW is performed, as described above, each user is assigned an ID / PW. Since it takes time to perform PW input operations, it takes time to verify the identity.
For this reason, for example, when a gate (such as an entrance door) is used by a large number of users, a state occurs in which many users waiting for identification (authentication) are awaited before the gate. There is an inconvenience.

[Object of invention]
The present invention provides an IC card authentication system and an IC card authentication method for improving the inconvenience of the related technology and quickly performing an authentication process using an IC card performed when a user passes through a gate. And its purpose.

  In order to achieve the above object, an IC card authentication system according to the present invention includes a mobile terminal that reads card identification information stored in advance in an IC card, a mobile terminal identification information registered in advance, and the mobile terminal A management apparatus that holds the card identification information, and reads and transmits the card identification information of the IC card to the management apparatus, and opens and closes a gate that is set in advance based on a determination result of the management apparatus for the card identification information. An IC card authentication system including a gate opening / closing control device to be controlled, wherein the portable terminal inputs user ID information when it is determined that the card identification information transmitted to the management device is valid A user ID input unit for receiving the card identification information, and the management device is a sender of card identification information sent from the portable terminal A transmission source determination unit that determines the card identification information as valid when the mobile terminal is set in advance, and a user that performs authentication determination as to whether or not the user ID information input from the mobile terminal is valid Sent from the authentication unit, the card state information setting unit for setting the state information of the card identification information registered in advance to the valid state when it is determined that the user ID information is valid, and the gate opening / closing control device A card state determination unit that determines whether or not the state information of the card identification information is set to a valid state when the acquired card identification information is acquired, and the gate opening / closing control device includes the card of the IC card A card information reading unit that reads identification information and transmits it to the management device, and the card information that is transmitted to the management device when the card identification information is set to a valid state. It is configured to have a gate opening and closing control unit that performs control to open the door.

  The IC card authentication method according to the present invention includes a mobile terminal that reads card identification information stored in advance in the IC card, a mobile terminal identification information registered in advance, and the card identification information sent from the mobile terminal. And a gate opening / closing control device that reads and transmits the card identification information of the IC card to the management device and controls opening and closing of a gate set in advance based on a determination result of the management device with respect to the card identification information An IC card authentication method for controlling the gate based on the card identification information, wherein the management device is a sender of the card identification information sent from the portable terminal Whether or not the card identification information is valid based on whether or not the mobile terminal is set in advance. When it is determined that the card identification information is valid, the mobile terminal accepts input of user ID information and transmits it to the management apparatus, and the management apparatus receives the user ID information input from the mobile terminal. Is determined to be valid, and when it is determined that the user ID information is valid, the state information of the pre-registered card identification information is set to a valid state, and the gate opening / closing control is performed. When the card identification information read by the apparatus is sent, it is determined whether or not the status information corresponding to the card identification information is set to the valid state, and the status information of the card identification information is set to the valid state. The gate opening / closing control device opens the gate.

  Since the present invention is configured and functions as described above, according to this, the mobile terminal that reads the card identification information of the IC card and receives the input of the user ID information from the user, and the usage input from the mobile terminal A management device that determines whether or not the user ID information is valid, and sets the status information of the card identification information registered in advance when the user ID information is valid, and the card identification information. An IC card that is used when a user passes through the gate by providing a gate opening / closing control device that controls to open the gate when the status information corresponding to the card identification information is set to the valid state while reading. Provide an IC card authentication system and an IC card authentication method capable of promptly performing an authentication process using a password while ensuring security. Can.

It is explanatory drawing which shows the block diagram of the whole one Embodiment in the IC card authentication system by this invention. It is a flowchart which shows the operation | movement step of the IC card validation process in the IC card authentication system by this invention. It is a flowchart which shows the operation | movement step of the management process at the time of the gate passage in the IC card authentication system by this invention.

[Embodiment]
Next, the basic configuration content of the embodiment of the present invention will be described.

  As shown in FIG. 1, an IC card authentication system according to this embodiment includes an authentication terminal 100 including a card reader module 1 that reads card identification information stored in advance in an IC card 7, and a network connected to the authentication terminal. The entry / exit management device 200 that holds the identification information of the authentication terminal (here, 100) connected in advance and the card identification information of the IC card sent from the authentication terminal, and the card identification information of the IC card are read. The card reader module 5 is provided, and the read card identification information is transmitted to the entrance / exit management device 200, and the opening / closing of a gate installed in advance is controlled based on the determination result of the entrance / exit management device 200 with respect to the card identification information. It has a configuration including a flapper gate 300.

  The authentication terminal (mobile terminal) 100 is a mobile terminal such as a mobile phone having a wireless communication function, and further, an IC card reading means 10 for reading and temporarily holding card identification information of the IC card by non-contact communication. Is provided.

  In addition, the authentication terminal (mobile terminal) 100 transmits information related to the IC card validation process and the like to the entrance / exit management device 200 and receives an authentication determination result sent from the entrance / exit management device 200. Transmission / reception means 20, screen display means 21 for controlling the process of outputting information sent from the entrance / exit management device 200 to a preset display screen, and whether terminal authentication is valid from the entrance / exit management device The authentication module 2 includes a terminal authentication result determination unit 22 that performs the above determination and an ID / password acquisition unit 23 that receives an input from the user to the authentication terminal 100.

  Further, the entrance / exit management device 200 includes an ID validation module 3 that performs an IC card validation process for setting the card status information of the IC card 7 to a valid status based on the information sent from the authentication terminal 100, and a flapper. Based on the card identification information sent from the gate 300, it is determined whether or not the card identification information is set in a valid state, and the determination result is transmitted to the flapper gate 300, whereby the gate of the flapper gate 300 is opened and closed. It has the structure which has the entrance / exit control module 4 which controls. Accordingly, when the user of the authentication terminal 100 passes through the flapper gate, the entrance / exit control module 4 performs flapper gate opening / closing control by transmitting a message for controlling opening / closing of the flapper gate to the flapper gate 300.

Further, the flapper gate 300 includes a card reader module 5 that reads card identification information stored in advance in the IC card 7 and a gate module that opens and closes a gate installed in advance based on a determination result by the entrance / exit control module 4. 6.
In addition, the flapper gate 300 may be provided with a door of a room used by a plurality of people and open and close the door.

Further, the card reader module 5 of the flapper gate 300 has an IC card reading means 50 that reads the card identification information of the IC card by non-contact communication and temporarily holds it.
Further, the gate module 6 of the flapper gate 300 transmits the card identification information read by the IC card reading means 50 to the entrance / exit management device 200 (entrance / exit control module 4) and a message sent from the entrance / exit control module. It has a transmission / reception means 60 for receiving, and a gate control means 61 for controlling the opening / closing operation of gates and doors installed in advance.

This will be described in detail below.
The card reader module 1 has an activation detection function for activating its own operation state when the activation activation of the authentication module is detected.
The IC card reading means 10 of the card reader module 1 detects when the IC card 7 is held over the card reader module 1 of the authentication terminal 100, and reads and acquires the card identification ID from the IC card. It has an identification division acquisition function.

  Further, the IC card reading means 10 detects a case where the IC card is held over the card reader module 1 of the authentication terminal 100, and reads and acquires the card identification ID from the IC card. Have

  The authentication terminal 100 transmits the card identification ID and the authentication terminal identification ID to the entrance / exit management apparatus 200 via the wireless network.

The authentication module 2 is activated in response to an activation operation by the user of the authentication terminal 100.
Further, the transmission / reception means 20 of the authentication module 2 uses the card identification ID acquired by the IC card reading means 10 and the authentication terminal identification ID set for each authentication terminal in advance as the entrance / exit management device 200 (ID validation module 3). ) Is provided with an authentication terminal information transmission function.

The screen display means 21 of the authentication module 2 has a card information reading preparation display function for displaying an output such as a message prompting the user to hold the IC card over the card reader module 1 on a preset display screen.
Here, it is assumed that the screen display means 21 specifically displays a message such as “Please hold your IC card” and an output display such as blinking the display screen. At this time, the card reader module 1 is set in a standby state until the IC card is held over.

  The terminal authentication result determination unit 22 of the authentication module 2 authenticates based on the received terminal authentication result when the transmission / reception unit 20 of the authentication module 2 receives the terminal authentication result transmitted from the transmission / reception unit 30 of the ID validation module 3. It is determined whether or not the terminal 100 is a mobile phone for which IC card validation processing is permitted.

  Here, if the IC card validation process by the authentication terminal 100 is not permitted, that is, if the terminal authentication has failed, the screen display means 21 of the authentication module 2 outputs and displays a message indicating that the terminal authentication has failed. .

  On the other hand, when the IC card validation process by the authentication terminal 100 is permitted (when the terminal authentication is successful), the screen display means 21 of the authentication module 2 displays a screen for inputting a user ID and a password (ID / The password input screen is displayed, and the authentication module 2 is set in an ID / password input standby state.

  In the authentication terminal 100, when the ID / password by the user is input, the ID / password acquisition unit 23 acquires the user ID / password, and the transmission / reception unit 20 of the authentication module 2 enters / exits the user ID / password. Transmit to the ID validation module 3 of the management device.

  Further, the screen display means 21 displays the card validation processing result for displaying the IC card validation result when the transmitting / receiving means 20 of the authentication module 2 receives the IC card validation result sent from the ID validation module 3. Has a display function.

  The transmission / reception unit 30 of the ID validation module 3 transmits the determination result of the terminal authentication determination by the authentication unit 33 to the authentication module 2 of the authentication terminal 1.

When the transmission / reception unit 30 of the ID validation module 3 receives the card identification ID and the authentication terminal identification ID from the transmission / reception unit 20, the authentication unit 33 obtains an authentication terminal identification ID associated with the received card identification ID in advance. Obtained from the ID validation information storage DB 34 (terminal identification ID obtaining function).
As a result, the authentication unit 33 determines whether or not the received card identification ID and authentication terminal identification ID are sent from a previously permitted (registered) mobile phone (authentication terminal), that is, permission in advance. It is determined whether or not an IC card validation process (request) is performed from the mobile phone (terminal authentication determination function).

  When the transmission / reception means 30 of the ID validation module 3 receives the user ID / password sent from the authentication module 2 (transmission / reception means 20), the authentication means 33 stores in advance from the ID validation information storage DB 34 based on this user ID. A user authentication determination function for obtaining a received password and performing user authentication based on the received user ID / password.

  Here, when the user authentication is successful, the ID validation information storage data update notification unit 32 of the ID validation module 3 acquires the valid time from the ID validation information storage DB 34 by the ID validation information storage data acquisition unit 31. At the same time, the validation end time of the ID validation information storage DB 34 is updated (set) to a value obtained by adding the valid time to the authentication success time (valid time update function).

In addition, the transmission / reception means 30 of the ID validation module 3 sends an IC card validation result (information) indicating that the IC card that has been successfully authenticated to the user is set to a valid state to the authentication module 2. It has a function.
As a result, the IC card that has been successfully authenticated by the user is set in the valid state during the activation time set in the ID validation information storage DB 34 from the validation start time to the validation end time.

On the other hand, when the user authentication fails, the ID validation information storage data update unit 32 updates (sets) the validation end time of the ID validation information storage DB 34 to the authentication failure time.
Thereby, it can record as a log of an IC card validation request.
Further, the transmission / reception means 30 of the ID validation module 3 sends the IC card validation result to the authentication module 2.

  The ID validation information storage DB 34 of the ID validation module 3 stores a pre-registered user ID, password, card identification ID, authentication terminal identification ID allowed as an authentication terminal in advance, and the length of time that the card identification ID is validated. The valid time indicating the validity, the validation end time, and the like are stored.

It is assumed that the entry / exit information storage DB 42 of the entry / exit control module 4 stores a user ID of an authentication terminal (for example, 100) and a card identification ID of an IC card (for example, 7) registered in advance.
As described above, the IC card reading unit 50 acquires the card identification ID from the IC card when the user holds the IC card over the card reader module 5 of the flapper gate 300.

The transmission / reception means 60 of the gate module 6 has a gate-side card identification information transmission function for transmitting the card identification ID acquired by the IC card reading means 50 to the entrance / exit control module 4 of the entrance / exit management device 200.
When the transmission / reception means 60 of the gate module 6 receives the state determination result sent from the transmission / reception means 40 of the entrance / exit control module 4, the gate control means 61 performs flapper gate open / close determination based on this state determination result (gate Open / close judgment function).

  At this time, the gate control means 61 determines whether the reception time of the card identification ID in the entrance / exit management device 200 included in the state determination result is within the valid time (valid period) as the flapper gate open / close judgment. To do.

  When the transmission / reception means 40 of the entry / exit control module 4 receives the card identification ID sent from the gate module 6 (transmission / reception means 60), the verification means 41 of the entry / exit control module 4 associates with the received card identification ID. The stored user ID is acquired from the entry / exit information storage DB 43.

Further, the collation means 41 of the entry / exit control module 4 acquires the activation end time stored corresponding to the acquired user ID from the ID validation information storage DB 34, and the time when the card identification ID is received is validated. It has an effective time determination function for determining whether it is before the end time (within the activation time).
The transmission / reception means 40 of the entrance / exit control module 4 transmits the result of the state determination (validation state determination) to the gate module 6.

  The transmission / reception means 40 of the entrance / exit control module 4 performs the flapper gate control without opening the flapper gate when the reception time of the card identification ID is not within the valid time of the IC card. The process ends.

When the time when the transmission / reception means 40 of the entry / exit control module 4 receives the card identification ID is within the valid time of the IC card, the gate control means 61 of the gate module 6 performs control to open the flapper gate (gate opening control). function).
The gate control means 61 of the gate module 6 may be set so that the user performs control to close the flapper gate after passing through the flapper gate.

In the present embodiment, the IC card is used in the flapper gate by using the authentication terminal to perform the IC card validation process before the user uses the IC card in the flapper gate. Since the user ID and password are not required to enter, the legitimate user can quickly pass through the gate, and the other person's IC card is illegally used when the gate passes (when entering or leaving the room). Can be effectively suppressed.
In addition, even if a legitimate user loses the ID card, the IC card activation period (validation time) is set, so the IC card is automatically invalidated after a certain period of time. Since the state is set, it is possible to effectively prevent the IC card from being illegally used.

[Description of Operation of Embodiment]
Next, an outline of the operation of this embodiment will be described.
User entered by the entry / exit management device (management device) 200 to the authentication terminal (portable terminal) 100 when the card identification information sent from the authentication terminal (portable terminal) 100 is registered in advance. When ID information is acquired, it is determined whether the user ID information is valid based on the user ID information and the registered card identification information, and when the user ID information is determined to be valid The pre-registered card identification information is set to a valid state indicating that the card identification information can be used for the gate opening / closing.
Next, the entrance / exit management device acquires the card identification information read by the flapper gate (gate opening / closing control device), and determines whether or not the card identification information is set to the valid state as the authentication determination. When it is determined that the identification information is set to the valid state, the gate opening / closing control device controls the gate to the open state.

Thereby, in this embodiment, prior to the user using the IC card at the flapper gate, since the IC card is activated from the authentication terminal held by the user, when passing through the gate (flapper gate), The user can be quickly authenticated without requiring the user to input a user ID, password, password, or the like.
Also, since the IC card is normally invalidated and validated for a certain period of time when the IC card is used, for example, the IC that passes through the gate without performing encryption using the input password or the like Unauthorized use of cards can be suppressed.

(IC card activation processing)
Next, the operation (IC card validation processing) for validating the IC card 7 in this embodiment will be described based on the flowchart of FIG.
Here, it is assumed that a mobile phone is used as the authentication terminal 100, and further, a user ID and a password input from the user of the authentication terminal 100 are used for authentication of the flapper gate 300.

  Here, in the ID validation information storage DB 34 of the ID validation module 3, a user ID, a password, a card identification ID, an authorized authentication terminal identification ID, a valid time, a validation end time, and the like are stored in advance. Shall. In the entrance / exit control module 4, it is assumed that a user ID and a card identification ID registered in advance are stored in the entrance / exit information storage DB 42.

First, when the authentication module 2 is activated by the user of the authentication terminal 100 (step S301), the card reader module 1 that detects this is also activated (step S302), and the display screen of the authentication terminal 100 (of the authentication module 2). On the screen display means 21), an output display that prompts the user to hold the IC card over the card reader module 1, for example, "Please hold the IC card" is displayed.
Here, the card reader module 1 is set in a standby state until the IC card is held over (step S303).

Next, when the IC card is held over the card reader module 1 of the authentication terminal 100, the IC card reading means 10 detects this and reads and acquires the card identification ID from this IC card (step S304). Here, the transmission / reception means 20 of the authentication module 2 transmits the acquired card identification ID and the authentication terminal identification ID set in advance for each authentication terminal to the ID validation module 3 of the entrance / exit management device 200 (step). S305).
Note that the authentication terminal 100 transmits the card identification ID and the authentication terminal identification ID to the entrance / exit management device 200 via the wireless network.

  The transmission / reception means 30 of the ID validation module 3 receives the card identification ID and the authentication terminal identification ID sent from the transmission / reception means 20 (transmission / reception means 20) via the network (step S306).

  When the reception of the card identification ID and the authentication terminal identification ID by the transmission / reception means 30 is completed, the authentication means 33 acquires the authentication terminal identification ID previously associated with the received card identification ID from the ID validation information storage DB 34, Thereby, whether or not the received card identification ID and authentication terminal identification ID are sent from a pre-authorized (registered) mobile phone, that is, the IC card valid from the pre-permitted mobile phone. It is determined whether or not the process (request) is performed (terminal authentication: step S307).

  Next, the transmission / reception means 30 of the ID validation module 3 transmits the authentication result of the terminal authentication by the authentication means 33 to the authentication module 2 of the authentication terminal 1 (transmission of terminal authentication result: step S308).

The transmission / reception means 20 of the authentication module 2 receives the terminal authentication result transmitted from the transmission / reception means 30 of the ID validation module 3 (step S309), and the terminal authentication result determination means 22 of the authentication module 2 receives the received terminal authentication result. Based on the above, it is determined whether or not the authentication terminal 100 is a mobile phone permitted to activate the IC card (step S310).
Here, if the IC card validation process by the authentication terminal 100 is not permitted, that is, if the terminal authentication has failed (NO: step S310), the screen display means 21 of the authentication module 2 fails in the terminal authentication. A message to the effect is output and displayed (step S311), and the IC card validation process of the authentication module 2 is terminated.

  On the other hand, when the terminal authentication is successful (YES: step S310), the screen display means 21 of the authentication module 2 displays a screen for inputting a user ID and password (ID / password input screen) (step S312), and the authentication module. 2 is set to an ID / password input standby state.

  Here, when the ID / password is input by the user, the ID / password acquisition unit 23 acquires the user ID / password (step S313), and the transmission / reception unit 20 of the authentication module 2 enters / exits the user ID / password. This is transmitted to the ID validation module 3 of the management device (step S314).

The transmission / reception means 30 of the ID validation module 3 receives the user ID / password sent from the authentication module 2 (transmission / reception means 20) (step S315).
When the reception completion of the user ID / password is detected, the authentication means 33 of the ID validation module 3 acquires a password stored in advance from the ID validation information storage DB 34 based on the user ID and receives the received user ID / password. The user authentication (determination) is performed based on (Is user authentication successful ?: Step S316).

  Here, when the user authentication is successful (YES: step S316), the ID validation information storage data update means 32 of the ID validation module 3 uses the ID validation information storage data acquisition means 31 and the ID validation information storage DB 34. The valid time is acquired, and the validation end time of the ID validation information storage DB 34 is updated (set) to a value obtained by adding the valid time to the authentication success time (step S317).

The transmission / reception means 30 of the ID validation module 3 transmits to the authentication module 2 an IC card validation result (information) indicating that the IC card that has been successfully authenticated by the user has been set to a valid state (step S319).
As a result, the IC card that has been successfully authenticated by the user is set to the valid state during the activation time set in the ID validation information storage DB 34 from the validation start time to the validation end time.

On the other hand, when the user authentication fails (NO: step S316), the ID validation information storage data update unit 32 updates (sets) the validation end time of the ID validation information storage DB 34 to the authentication failure time (step S318). ).
The transmission / reception means 30 of the ID validation module 3 sends the IC card validation result to the authentication module 2 (step S319).

  Next, the transmission / reception means 20 of the authentication module 2 receives the IC card activation result transmitted from the transmission / reception means 30 of the ID validation module 3 (step S320), and the screen display means 21 receives the IC card validation result. Is displayed (step S321), and the operation process of the IC card validation process is terminated.

(Operation process when passing through the gate)
The operation process of the present embodiment (hereinafter referred to as “flapper gate control process”) when the user of the authentication terminal 100 passes through the flapper gate will be described with reference to the flowchart of FIG.

  First, when the user holds the IC card over the card reader module 5 of the flapper gate 300, the IC card reading means 50 acquires the card identification ID from the IC card (step S401), and the transmission / reception means 60 of the gate module 6 The acquired card identification ID is transmitted to the entrance / exit control module 4 of the entrance / exit management device 200 (step S402).

The transmission / reception means 40 of the entrance / exit control module 4 receives the card identification ID sent from the gate module 6 (transmission / reception means 60) (step S403).
When the reception of the card identification ID by the transmission / reception means 60 is completed, the collation means 41 of the entry / exit control module 4 acquires the user ID stored in association with the received card identification ID from the entry / exit information storage DB 43 (step S404). ).

Further, the collation means 41 of the entrance / exit control module 4 acquires the activation end time stored in correspondence with the acquired user ID from the ID validation information storage DB 34 (step S405), and receives the card identification ID. It is determined whether or not the time is before the activation end time (within the activation time) (validation state determination: step S406).
Next, the transmission / reception means 40 of the entrance / exit control module 4 transmits the result of the state determination (validation state determination) to the gate module 6 (step S407).

Next, the transmission / reception means 60 of the gate module 6 receives the state determination result sent from the transmission / reception means 40 of the entrance / exit control module 4 (step S408), and the gate control means 61 opens and closes the flapper gate based on this state determination result. A determination is made (step S409).
At this time, the gate control means 61 determines whether the reception time of the card identification ID in the entrance / exit management device 200 included in the state determination result is within the valid time (valid period) as the flapper gate open / close judgment. To do.

  When the reception time of the card identification ID is not within the valid time of the IC card (NO: step S409), the transmission / reception means 40 of the entry / exit control module 4 opens the flapper gate. If not, the flapper gate control process is terminated (step S410).

When the time when the transmission / reception means 40 of the entry / exit control module 4 receives the card identification ID is within the valid time of the IC card (YES: Step S409), the gate control means 61 of the gate module 6 controls to open the flapper gate. Is performed (step S411).
The gate control means 61 of the gate module 6 performs control to close the flapper gate after the user passes through the flapper gate, and ends the flapper gate control process (step S412).

As described above, in the present embodiment, before the user performs an operation of holding the IC card over the card reader module of the gate in order to pass through the gate, the user can carry the IC card. Using this authentication terminal, an authentication user ID and password are input.
Accordingly, when the user passes through the gate, the user is not required to input a personal identification number (password), and authentication processing is performed by holding the IC card over the card reader module of the gate.

  Furthermore, in the above authentication process, since it is possible to perform high-security user authentication in which the card identification information of the IC card and the user ID / password (password) are combined, this allows the IC card by another person to be authenticated. Unauthorized use can be effectively suppressed.

  In addition, by providing a certain period for the activation of the IC card, the IC card is set to an invalid state in the management apparatus after the certain period of time has elapsed. Even if the card is lost, unauthorized use of the IC card by another person can be effectively suppressed.

  The present invention can be usefully applied to an entrance / exit management system in a room, facility or the like used by a plurality of people.

DESCRIPTION OF SYMBOLS 1 Card reader module 2 Authentication module 3 ID validation module 4 Entrance / exit control module 5 Card reader module 6 Gate module 7 IC card 10 IC card reading means 20, 30, 40, 60 Transmission / reception means 21 Screen display means 22 Terminal authentication result judgment Means 23 ID / password acquisition means 31 ID validation information storage data acquisition means 32 ID validation information storage data update means 33 Authentication means 34 ID validation information storage DB
41 ID collation means 42 Entrance / exit information storage DB
50 IC card reading means 61 Gate control means

Claims (8)

A portable terminal for reading card identification information stored in advance in the IC card, a management apparatus for holding the identification information of the portable terminal registered in advance and the card identification information sent from the portable terminal, and the card of the IC card An IC card authentication system comprising: a gate opening / closing control device that reads and transmits identification information to the management device and controls opening / closing of a gate set in advance based on a determination result of the management device with respect to the card identification information,
The portable terminal is
A user ID input unit that receives input of user ID information when it is determined that the card identification information transmitted to the management device is valid;
The management device
A transmission source determination unit that determines the card identification information as valid when the transmission source of the card identification information sent from the mobile terminal is a preset mobile terminal;
A user authentication unit for performing authentication determination as to whether or not the user ID information input from the mobile terminal is valid;
A card state information setting unit that sets the state information of the card identification information registered in advance to a valid state when it is determined that the user ID information is valid;
A card state determination unit that determines whether or not the state information of the card identification information is set to a valid state when the card identification information sent from the gate opening / closing control device is acquired;
The gate opening / closing control device comprises:
A card information reading unit that reads the card identification information of the IC card and transmits it to the management device;
An IC card authentication system comprising: a gate opening / closing control unit that performs control to open the gate when the card identification information transmitted to the management device is set to a valid state. In the IC card authentication system according to claim 1,
An IC card authentication system, wherein the status information of the card identification information registered in advance in the management device is set in an invalid state in advance. In the IC card authentication system according to claim 1 or 2,
The card state information setting unit sets a certain time during which the pre-registered card identification information is set to a valid state as an authentication valid time when it is determined that the user ID information is valid Has function,
The card state determination unit determines that the card identification information is set to a valid state when the card identification information read by the gate opening / closing control device is acquired within the set authentication valid time. An IC card authentication system comprising an effective time authentication determination function. In the IC card authentication system according to any one of claims 1 to 3,
The management device includes a terminal authentication function for authenticating the mobile terminal that is a transmission source of the card identification information based on a preset terminal list when the card identification information is sent from the mobile terminal. An IC card authentication system characterized by that. In the IC card authentication system according to any one of claims 1 to 3,
The IC card authentication system, wherein the portable terminal includes a wireless communication unit that performs wireless connection with the management apparatus and wireless communication with the management apparatus. In the IC card authentication system according to claim 1,
The portable terminal is
An IC card authentication system comprising a terminal non-contact information acquisition unit that reads out card identification information of the IC card by non-contact near field communication. In the IC card authentication system according to claim 1 or 6,
The gate opening / closing control device comprises:
An IC card authentication system comprising a gate non-contact type information acquisition unit that reads card identification information of the IC card by non-contact near field communication. A portable terminal for reading card identification information stored in advance in the IC card, a management apparatus for holding the identification information of the portable terminal registered in advance and the card identification information sent from the portable terminal, and the card of the IC card An IC card authentication system comprising: a gate opening / closing control device that reads and transmits identification information to the management device and controls opening / closing of a gate set in advance based on a determination result of the management device with respect to the card identification information; An IC card authentication method for controlling the gate based on the card identification information,
The management device determines whether the card identification information is valid based on whether the transmission source of the card identification information sent from the portable terminal is a preset portable terminal,
When it is determined that the card identification information is valid, the mobile terminal accepts input of user ID information and transmits it to the management device,
The management device
When the user ID information input from the portable terminal is authenticated, it is determined whether the user ID information is valid, and when it is determined that the user ID information is valid, the state information of the card identification information registered in advance Set to enabled,
When the card identification information read by the gate opening / closing control device is sent, it is determined whether or not the state information corresponding to the card identification information is set to a valid state,
An IC card authentication method, wherein the gate opening / closing control device opens the gate when the status information of the card identification information is set to a valid state.

Images