JP2008217598A - Access management system, access management server, and access management method - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an access management system for preventing entry into a controlled area even when an entrance to the controlled area is illegally unlocked and reliably detecting an intruder entering the controlled area by illegally obtaining authenticated communication terminal equipment or the like. <P>SOLUTION: In the access management system including a positioning sensor 102 for detecting position of a portable telephone set 104 at least in a controlled area (a), an access management server 101 for acquiring positions of an IC tag 109 and the portable telephone set 104; the access management server 101 determines whether or not the portable telephone set 104 has a right to enter the controlled area (a) based on authentication request signal. Also, only when it is determined that the portable telephone set 104 has the right and the positioning sensor 102 and the IC tag 109 detect that the portable telephone set 104 is positioned in the controlled area (a), a person is allowed to enter the controlled area (a). <P>COPYRIGHT: (C)2008,JPO&INPIT

Description

  The present invention relates to an entrance management system, an entrance management server, and an entrance management method, and more particularly to an entrance management system, an entrance management server, and an entrance management method for managing entrance into a management area using a network.

  Currently, there is an entrance management system for managing entry into a predetermined section such as a warehouse or a storage, and preventing unauthorized entry into a specific section. For example, Patent Documents 1 to 3 can be cited as conventional techniques for an entrance management system. In the invention of Patent Document 1, when a person enters a management area, an authentication card for entering the room is distributed in advance to the person entering the room. The person who enters the room uses his / her card to collate his / her ID, etc., and the system administrator only receives the identification information from the card and the ID when the identification information is received from the card until a certain time has passed since the collation. Is matched. The electric lock at the entrance of the management area is unlocked only when the collation results match.

In the invention of Patent Document 2, the server transmits the authentication information and the scheduled period to the user's mobile phone. The user transmits authentication information to the server when entering the management area. If the authentication information is appropriate and the server is within the scheduled period, the server transmits key unlocking information necessary for entering the area to the mobile phone.
In the invention of Patent Document 3, the number of communication terminal devices is detected by polling communication terminal devices that have been previously authenticated. The presence of an intruder is detected when the number of communication terminal devices detected by polling is smaller than the number of people in the management area shown in the image taken in the management area.
JP 2006-155507 A JP 2006-188922 A JP 2005-292942 A

However, both Patent Document 1 and Patent Document 2 described above unlock or provide a key at the entrance to the management area if authentication information such as an ID is appropriate. For this reason, if an intruder obtains an unauthorized card or an authenticated mobile phone and unlocks the entrance to the management area, the intruder will be allowed to enter the room, and the validity of the room will be checked thereafter. I can't.
Also, as in Patent Document 3, when the number of people in the management area is compared with the number of mobile phones that have been authenticated in the management area, intruders can be detected even after entering the management area. .

  However, since Patent Document 3 aims to detect an intruder in a state where the management area is manned, the number of persons is determined from photographing. For this reason, it is difficult to determine the number of people, and higher reliability is required. Further, the number of communication terminal devices is specified by polling. For this reason, also in patent document 3, when an intruder enters the room with an appropriate communication terminal device, the communication terminal device automatically responds and cannot detect the intruder.

  The present invention has been made in view of these points, and can prevent entry into the management area even when the entrance to the management area is illegally unlocked. An object of the present invention is to provide an entrance management system, an entrance management server, and an entrance management method capable of reliably detecting a person who has illegally obtained a device or the like and has entered a management area.

  In order to solve the above problems, an entrance management system according to claim 1 of the present invention includes a communication terminal device position detection device that detects a position of a communication terminal device at least in a management area, and the communication terminal device position detection device. An entry management server that acquires a detected position of the communication terminal device, wherein the entry management server transmits an authentication sent by the communication terminal device for authentication of entry into the management area. A communication terminal device authentication determining means for determining whether or not the communication terminal device that has transmitted the authentication request signal is an authentication communication terminal device having authority to enter the management area, based on the request signal; and the communication terminal device position Only when the detection device detects that the location of the authentication communication terminal device is included in the management area, a person is entered into the management area. And entry permission means for permitting to enter, characterized in that it comprises. According to such an invention, entry is permitted only when the user of the authenticated communication terminal apparatus enters the management area with the communication terminal apparatus. For this reason, even when a person who unlocks the entrance to the management area enters the management area, it can be detected and the entry into the management area can be prohibited.

  In addition, the room entry management system according to claim 2 of the present invention is the invention according to claim 1, wherein the room entry management server sends the authentication request signal to the authentication communication terminal device in the management area. Authentication information requesting means for requesting transmission of a signal including at least a part of information included in the authentication information requesting means, and only when the signal requested by the authentication information requesting means is received, the person continues in the management area. And an entry continuation permission means for permitting the person to stay in the vehicle. According to such an invention, a person already in the management area is requested to transmit at least a part of the authentication request signal, and only the person who has transmitted the signal is allowed to remain in the management area continuously. be able to. For this reason, it is possible to detect a person who has illegally obtained a communication terminal device or the like and has entered the management area, and prohibit this person from staying in the management area.

  The room entry management server according to claim 3 of the present invention is a room entry management server that manages objects to be managed in the management area, and the communication terminal device transmits for authentication of entry into the management area. A communication terminal apparatus authentication determining means for determining whether or not the communication terminal apparatus that has transmitted the authentication request signal is an authentication communication terminal apparatus having an authority to enter the management area, based on the authentication request signal; Authentication communication terminal apparatus position acquisition means for acquiring the position of the authentication communication terminal apparatus determined as the authentication communication terminal apparatus by the apparatus authentication determination means, and the position of the authentication communication terminal apparatus acquired by the authentication communication terminal apparatus position acquisition means Only when it is included in the management area, an entry permission means for permitting a person to enter the management area is provided. According to such an invention, entry is permitted only when the user of the authenticated communication terminal apparatus enters the management area with the communication terminal apparatus. For this reason, even when a person who unlocks the entrance to the management area enters the management area, this can be detected and the entry can be prohibited.

  Further, the room entry management server according to claim 4 of the present invention is the invention according to claim 3, wherein at least a part of the authentication request signal included in the authentication communication terminal device in the management area is included in the authentication communication terminal device. An authentication information requesting means for requesting transmission of a signal including information, and permitting the person to remain in the management area only when the signal requested by the authentication information requesting means is received. And an entry continuation permitting means. According to such an invention, a person already in the management area is requested to transmit at least a part of the authentication request signal, and only the person who has transmitted the signal is allowed to remain in the management area continuously. be able to. For this reason, it is possible to detect a person who has illegally obtained a communication terminal device or the like and has entered the management area, and prohibit this person from staying in the management area.

  According to claim 5 of the present invention, the room entry management server according to claim 4 is a time-out time specified by the authentication information requesting means by the signal transmitted by the authentication communication terminal device. It is characterized by requesting signal transmission at intervals. According to such an invention, since the user can designate the timeout time, the user can designate the timeout time according to the work time in the management area. For this reason, the complexity of the authentication update operation for the user is reduced.

  Further, the room entry management server according to claim 6 of the present invention is the invention according to any one of claims 3 to 5, wherein the authentication communication is performed in a management area by the communication terminal device position acquisition means. When a position of an unauthenticated communication terminal apparatus different from the terminal apparatus is acquired, the apparatus further comprises an authentication request instruction means for transmitting an instruction signal for instructing the unauthenticated communication terminal apparatus to transmit the authentication request signal. It is characterized by that. According to such an invention, an authentication request signal is transmitted when a user who has not received authentication or who has lost the effectiveness of the received authentication enters the management area even though the user can be authenticated. Authentication can be given. For this reason, the management process of the management area can be performed more smoothly than issuing an alarm for all the users who have not been authenticated.

  According to a seventh aspect of the present invention, there is provided the room entry management server according to any one of the third to sixth aspects, wherein the person detection for acquiring the detection result of the person detection in the management area is performed. And a warning means for issuing a warning when the presence of the person in the management area is detected by the result acquisition means and the person detection result acquisition means and the entry permission means does not permit the person to enter. Features. According to such an invention, it is possible to report the presence of a person who is not permitted to enter in the management area, that is, the presence of the intruder to the outside, or to intimidate the intruder by the warning and to leave the management area.

  An entrance management method according to claim 8 of the present invention is an entrance management method for managing a management object in a management area in an entrance management server, wherein the communication terminal device enters the management area. Communication terminal device authentication for determining whether or not the communication terminal device that has transmitted the authentication request signal is an authentication communication terminal device that has the authority to enter the management area, based on an authentication request signal transmitted for authentication of entry Acquired in the determination step, the authentication communication terminal device position acquisition step for acquiring the position of the authentication communication terminal device determined as the authentication communication terminal device in the communication terminal device authentication determination step, and the authentication communication terminal device position acquisition step The person is allowed to enter the management area only when the location of the authentication communication terminal device is included in the management area. Characterized in that it comprises a penetration permission step of, a. According to such an invention, entry is permitted only when the user of the authenticated communication terminal apparatus enters the management area with the communication terminal apparatus. For this reason, it is possible to detect that a person who has illegally unlocked the entrance to the management area has entered the management area and prohibit it.

  According to a ninth aspect of the present invention, there is provided the room entry management method according to the eighth aspect, wherein at least a part of information included in the authentication request signal for the authentication communication terminal device in the management area. An authentication information requesting step for requesting transmission of a signal including the information, and an entry continuation permitting the person to be continuously in the management area only when the signal requested in the authentication information requesting step is received. And a permission step. According to such an invention, a person already in the management area is requested to transmit at least a part of the authentication request signal, and only the person who has transmitted the signal is allowed to remain in the management area continuously. be able to. For this reason, it is possible to detect a person who has illegally obtained a communication terminal device or the like and has entered the management area, and prohibit this person from staying in the management area.

  The present invention described above can permit entry only when an authenticated user of a communication terminal apparatus enters the management area with the communication terminal apparatus. For this reason, even when the entrance to the management area is illegally unlocked, entry into the management area can be prevented. In addition, the person who is already in the management area is requested to send at least a part of the authentication request signal, and only the person who sent the signal is allowed to continue to stay in the management area. It is possible to provide an entrance management system, an entrance management server, and an entrance management method capable of reliably detecting a person who has illegally obtained a communication terminal device or the like and has entered the management area.

Hereinafter, an entrance management system, an entrance management server, and an entrance management method according to an embodiment of the present invention will be described with reference to the drawings.
(Room management system)
FIG. 1 is a diagram for explaining the overall configuration of an entrance management system according to the present embodiment. The illustrated room entry management system includes a room entry management server 101 and a positioning sensor 102 that detects the position of the mobile phone 104 that is a communication terminal device at least in the management area a and provides it to the room entry management server 101. The room entry management server 101 includes a data base (DB) 108 that stores information necessary for managing entry (room entry) into the management area a.

In the present embodiment, the positioning sensor 102 is a tag reader that reads information written in an IC tag. An IC tag 109 is attached to the mobile phone 104, and the positioning sensor 102 reads the ID of the mobile phone 104 from the IC tag 109. Information including the read ID is transmitted to the room entry management server 101.
In addition, the mobile phone 104 communicates with the room entry management server 101 via the network 107. The user transmits an authentication request signal for authentication of entry into the management area a using the mobile phone 104. Based on the authentication request signal, the room entry management server 101 authenticates that the mobile phone 104 that has transmitted the authentication request signal is an authentication communication terminal device having authority to enter the management area a.

The DB 108 of the entrance management server 101 stores information necessary for authentication relating to the ID of the mobile phone 104 and the contractor (user) of the mobile phone 104 in association with each other. Authentication is performed with reference to information associated with the ID of the mobile phone 104.
Information necessary for authentication may be, for example, the address, name, affiliation, etc. of the user registered at the time of contracting the mobile phone 104. Alternatively, the user may be notified of the ID and password in advance, and the entry may be authenticated if the notified ID and password are valid. Furthermore, it is conceivable to use a method using a one-time password generator, bio-authentication using a fingerprint, iris of eyes, voice, or the like, and a combination of such methods.

Further, the DB 108 may hold information on entry permission and area security level information.
In the management area a, a human sensor 103 that detects a person in the management area a is provided. For example, an infrared sensor can be applied to the human sensor 103. The human detection sensor 103 using infrared rays reacts to the heat radiation emitted from the human body, and when it approaches a person, it operates and transmits a signal indicating that the person has been detected to the room entrance management server 101.

  Note that the transmission of the authentication request signal using the mobile phone 104 can be easily realized by the user operating the mobile phone 104 to send an email to the entry management server 101 via the network 107. However, the authentication request signal is not limited to that transmitted by mail, but can be realized by making a call using a telephone line. In this case, the transmitted telephone signal becomes the authentication request signal.

In the above configuration, the positioning sensor 102 and the IC tag 109 function as a communication terminal device position detection device.
Further, the present embodiment is not limited to a configuration in which the position of the mobile phone 104 is detected by an IC tag and a tag reader. As another method for detecting the position of the mobile phone 104, for example, the mobile phone 104 requests positioning from a central positioning device (not shown). The central positioning device or mobile phone 104 measures the round-trip time and reception strength of signals between the mobile phone 104 and a plurality of base stations (not shown). The position of the mobile phone 104 can be measured by performing the triangulation of the mobile phone 104 and the two base stations using the round-trip time of the measured signal or the signal strength.

In such a configuration, the central positioning device functions as a communication terminal device position detection device. However, the room management server 101 can also incorporate the function of the central positioning device.
The position of the mobile phone 104 can also be detected by providing the mobile phone 104 with a wireless communication device and performing wireless communication with a plurality of wireless communication base stations installed in a predetermined section. As existing techniques of such a method, there are an RSSI (Received Signal Strength Indicator) method and a TDOA (Time Difference of Arriva) method.
Furthermore, a GPS (Global Positioning System) device is provided in the mobile phone 104 to detect a position, a position is detected using infrared rays irradiated for each specific section, and a position using a difference in arrival time between radio and sound waves It is conceivable to detect the position using a positioning sensor.

(Room management server)
FIG. 2 is a functional block diagram for explaining the configuration of the room entry management server 101 shown in FIG. Based on the authentication request signal, the entrance management server 101 determines whether or not the mobile phone 104 that has transmitted the authentication request signal is an authentication communication terminal device, and the mobile phone that is determined to be an authentication communication terminal device A detection unit 202 that acquires the position 104 is provided. In addition, when the entry of a person into the management area a is detected, the permission unit 204 manages the management area a only when the position of the mobile phone 104 acquired by the detection unit 202 is included in the management area a. Allow a person to enter.

The room entry management server 101 includes a communication unit 201, a detection unit 202, and an abnormality detection unit 203. The communication unit 201 is configured to communicate with the mobile terminal 104 via the network 107. The detection unit 202 receives signals output from the positioning sensor 102 and the human sensor 103, and can detect a person in the management area a at any time based on the signals.
Based on the detection result of the detection unit 202, the abnormality detection unit 203 determines whether a mobile phone or a person who has not been authenticated for entering the management area a has entered. In the present embodiment, it is also determined whether or not the position of the mobile phone 104 acquired by the detection unit 202 is within a range included in the management area a.

In the above configuration, the detection unit 202 functions as an authentication communication terminal device position acquisition unit, and the permission unit 204 functions as a communication terminal device authentication determination unit and an entry permission unit.
In the present embodiment, when the information acquired by the detection unit 202 indicates that the mobile phone 104 is in the management area a, the permission unit 204 instructs the mobile phone 104 to include at least one included in the authentication request signal. Requests transmission of a signal (denoted as an authentication update signal) including information on the part. The permission unit 204 permits a person who is permitted to enter the management area a to continue to be in the management area only when the authentication update signal is received by the communication unit 201.

In the above configuration, the permission unit 204 also functions as an authentication information request unit and an entry continuation permission unit according to the present embodiment.
The at least part of information included in the authentication request signal is, for example, the following signal. That is, for example, the authentication request signal may be a signal including the user of the mobile phone 104 and the ID of the mobile phone 104, requesting authentication of room entry, and information on time and time of entering the room. In such a case, the authentication update signal can be a signal including the ID of the user or the mobile phone 104.

When the authentication update signal cannot be received, the permission unit 204 does not permit the entry of a person in the management area a. At this time, the abnormality detection unit 203 issues an alarm. For example, the alarm may notify an administrator such as the management area a that an intruder has entered the management area a via the communication unit 201.
With this configuration, the present embodiment can repeatedly transmit an authentication update signal to the mobile phone 104 even when the mobile phone 104 that has been authenticated is in the management area a. For this reason, when a third party who illegally obtained the mobile phone 104 enters the management area a, it is possible to determine whether or not the person who has entered the room has a legitimate authority even after entering the room.

  Further, in the present embodiment, it is conceivable to transmit the authentication update signal with information specifying the time that the user wants to stay in the management area a. In this way, the permission unit 204 can request transmission of the next authentication update signal after the elapse of the time (timeout period) specified by the user, so that the user is not required to respond to the authentication update signal transmission request. Can be reduced.

  The time-out time may be specified by specifying a certain time or a different time for each authentication update signal. When the timeout time is constant, the permission unit 204 requests transmission of an authentication update signal for each timeout time. Further, when the timeout time differs for each authentication update signal, the permission unit 204 requests transmission of the authentication update signal every time the timeout time elapses.

  In the present embodiment, the IC tag information is also transmitted to the room entry management server 101 when the positioning sensor 102 reads an IC tag of a communication terminal device that is different from the communication terminal device that requested the authentication. In the entrance management server 101, the detection unit 202 acquires the transmitted IC tag information, and collates the ID included in the IC tag information with the data in the DB 108. As a result of the collation, it can be seen that the detected mobile phone is an unauthenticated communication terminal device different from the authenticated mobile phone 104. In the entrance management server 101, if the e-mail address or telephone number can be specified from the ID of the non-authenticated communication terminal device, the abnormality detection unit 203 instructs the non-authenticated communication terminal device to send an authentication request signal. Send.

In the above configuration, the abnormality detection unit 203 functions as an authentication request instruction unit of the present embodiment.
FIG. 3 is a diagram illustrating information in the DB 108 (room entry information table) that is collated with information read from the IC tag. In the illustrated room entry information table, whether the authentication acquired by the mobile phone in association with the ID (identifier) of the mobile phone is currently valid or invalid is recorded. Further, the authentication time when the validity / revocation authentication is performed and the user of the mobile phone are recorded in association with the ID of the mobile phone.

The expiration of authentication is assumed to occur, for example, when the user does not transmit a requested authentication update signal within a specified time after the timeout period has elapsed. The expired authentication does not become effective until the user transmits an authentication request signal again to request authentication and obtain authentication.
Based on the ID, the abnormality detection unit 203 determines whether or not the mobile phone in the management area a is a mobile phone that has invalidated the acquired authentication. If the mobile phone has expired, the mail address of this mobile phone is read from the DB 108 and an instruction signal is transmitted.

With this configuration, the present embodiment does not immediately determine that the user who has entered the room without requesting authentication again despite having the right authority. And when the user of a mobile telephone transmits the authentication request | requirement according to the instruction | indication, the user who has a legitimate authority can be processed smoothly.
Furthermore, in this embodiment, the abnormality detection unit 203 acquires a detection result of detection of a person in the management area a by the human sensor 103. If the presence sensor is detected by the human sensor 103 and the entry of the person is not permitted by the permission unit 204, the abnormality detection unit 203 determines that an unauthorized person has entered. Notification is made to the outside via the unit 201.

If the permission unit 204 does not permit entry of the person, the position of the authenticated mobile phone 104 is not within the range of the management area a, or the mobile phone 104 in the management area a transmits an authentication update signal. This is the case when it does not come. In such a configuration, the abnormality detection unit 203 and the communication unit 201 function as alarm means.
The intruder detection alarm according to the present embodiment is not limited to notification by telephone or e-mail to the administrator's mobile phone. For example, it is possible to display an image indicating that an abnormality has occurred on a monitor (not shown) of the entrance management server 101, activate an alarm or warning light installed in a section of the management area a, and close a door that shuts off this section It is.

(Mobile phone)
FIG. 4 is a diagram for explaining the configuration of the mobile phone 104 that transmits an authentication request signal to the room entry management server 101 of the present embodiment. The mobile phone 104 displays a communication unit 401 that communicates with the room entry management server 101, an operation unit 403 that is operated for communication by the user, and information that is necessary for an operation using the operation unit 403 and a result of the operation. Part 402 is provided.
Note that the room entry information table illustrated in FIG. 3 may be displayed on the display unit 402. In this way, the user can know whether his / her authentication request is valid or has expired by looking at the displayed entry information table.

(Room management method)
FIG. 5 is a flowchart for explaining the room entry management method of the present embodiment, and describes the room authentication process. The user transmits an authentication request signal using the operation unit 403 of the mobile phone 104. The transmitted signal is received by the communication unit 201 via the communication unit 401 and received by the room entry management server 101 (step S501).

The monitoring server 101 reads out information on the mobile phone 104 or the user of the mobile phone 104 from the DB 108 based on the ID of the mobile phone 104 that transmitted the authentication request signal. Then, it is determined whether or not to allow the user to enter the room by a method such as collating the ID of the mobile phone 104 or the like with the read information (step S502).
As a result of the determination in step S502, if the user is permitted to enter the room (step S502: Yes), the permission unit 204 transmits to the cellular phone 104 that the room is permitted to enter via the communication unit 201 (step S503). . The transmitted content indicating permission to enter the room is displayed on the display unit 402 of the mobile phone 104 (step S505).

On the other hand, if the result of the determination in step S502 is that the user's entry is not authenticated (step S502: No), the permission unit 204 transmits to the mobile phone 104 that entry is not permitted via the communication unit 201 (step S502). S504). The transmitted content indicating that the entry is not permitted is displayed on the display unit 402 of the mobile phone 104 (step S505).
FIG. 6 is a flowchart for explaining processing in which the room entry management server 101 prompts the mobile phone 104 that has received room entry authentication to transmit an authentication update signal.

  The mobile phone 104 that has been authenticated by the authentication request acquires a timeout time from the room entry management server 101 (step S601). The mobile phone 104 measures the time and determines whether or not the time-out time has just passed (S602). When it is determined that the timeout time has just passed (S602: Yes), the user is requested to transmit an authentication update signal (step S603). If it is not immediately before the timeout time elapses (S602: No), the process waits until the timeout time elapses.

  The user transmits an authentication update signal to the entrance management server 101 in accordance with the request made in step S603 (step S604). The permission unit 204 of the room entry management server 101 compares the authentication update signal with the information stored in the DB 108 to determine the validity of the user's room entry (step S605). As a result of the determination, if entry is permitted (step S605: Yes), the fact that entry is allowed is continuously transmitted to the mobile phone 104 to notify the user (step S606). At this time, the room entry management server 101 updates the authentication status and the authentication time in the room entry information table.

On the other hand, in step S604, when entry into the room is not permitted (step S605: No), a message that entry into the room is not permitted is transmitted to the mobile phone 104 (step S607). At this time, the room entry management server 101 updates the authentication status and the authentication time in the room entry information table.
After the above processing, whether or not to enter the room is displayed on the display unit 402 of the mobile phone 104 (step S608). Further, by determining whether or not the ID of the mobile phone 104 can be read by the positioning sensor 102, the abnormality detection unit 203 can determine whether or not the mobile phone 104 has left the management area a ( S609).

  If it is determined in step S609 that the mobile phone 104 has left the management area a (S609: Yes), the authentication update process ends. When the ID of the mobile phone 104 is transmitted from the positioning sensor 102 to the detection unit 202, it is assumed that the mobile phone 104 exists in the management area a (S609: No), and the timeout time is continuously counted.

The management of the timeout time described in the flowchart of FIG. 6 can be performed on the mobile terminal 104 side as described in step S602. In addition, the portable terminal 104 can be notified of the timeout time from the room management server 101 side. Furthermore, the user may voluntarily transmit an authentication update signal for each timeout time.
In addition, as a method of notifying the mobile phone of the authentication update timeout, it is conceivable that an alarm is sounded using a function that a mobile terminal generally has, or the mobile phone is sounded by a vibration function. In addition, a message for prompting authentication can be displayed on the display unit 402.

Furthermore, the configuration is not limited to the configuration using a mobile phone, and a signal can be transmitted to a display or a personal computer installed in the management area a and displayed on the display screen. In addition, an alarm or warning light can be activated to prompt the person in the room for authentication processing.
FIG. 7 is a flowchart for explaining a process of transmitting an authentication request signal to a mobile phone that is not authenticated by the room entry management server 101 (referred to as an unauthenticated mobile phone in the flowchart).

  In the management area a, the positioning sensor 102 reads the ID of the mobile phone and transmits it to the room entry management server 101. The permission unit 204 of the room entry management server 101 collates this ID and the like with data stored in the DB 108. As a result of the collation, it is determined that the mobile phone is not authenticated, or the authentication update signal is not transmitted before the timeout time elapses (step S701). If an unauthenticated mobile phone is not detected (S701: No), the authentication update process shown in FIG. 6 is performed, and the abnormality detection unit 203 waits until an unauthenticated mobile phone is detected.

  When an unauthenticated mobile phone is detected, the abnormality detection unit 203 of the entrance management server 101 transmits an instruction signal instructing the mobile phone to make an authentication request (step S702). Then, it is determined whether an authentication request signal is transmitted from the mobile phone within a specified time (step S703). When it is determined that the authentication request signal has been transmitted (step S703: Yes), the permission unit 204 of the room entry management server 101 compares the authentication request signal with the information stored in the DB 108 to verify the user's entry into the room. The sex is determined (step S704). As a result of the determination, if entry is permitted (step S704: Yes), the fact that entry is permitted is transmitted to the mobile phone 104 to notify the user (step S705). At this time, the room entry management server 101 updates the authentication status and the authentication time in the room entry information table.

  On the other hand, if it is determined in step S703 that an authentication request signal has not been transmitted (step S703: No), or if the result of determination in step S704 is that entry is not permitted (step S704: No), entry is not permitted. The fact is transmitted to the mobile phone 104 to notify the user (step S705). At this time, the room entry management server 101 updates the authentication status and the authentication time in the room entry information table.

After the above processing, whether or not to enter the room is displayed on the display unit 402 of the mobile phone 104 (step S706).
FIG. 8 is a flowchart for explaining processing for determining the validity of entering a room. The abnormality detection unit 203 determines whether or not the human sensor 103 has detected a person in the management area a (S801). If no person is detected as a result of the determination (S801: No), the process waits until it is detected.

On the other hand, when a person is detected (S801: Yes), the permission unit 204 identifies a mobile phone in the management area a by a signal including the mobile phone ID sent from the positioning sensor 102. Then, with reference to the room entry information table, it is determined whether this mobile phone is a mobile phone that has requested authentication, or whether the acquired authentication deadline is valid.
As a result of the determination, if a mobile phone that has received valid authentication by the positioning sensor 102 is detected in the management area a (step S802: Yes), an authenticated mobile phone (denoted as an authentication mobile phone in the figure) is displayed. It is determined that it exists in the vicinity of the management area. Then, it is determined that the detected person has entered the room normally (step S803), and the process ends.

On the other hand, in step S802, if a mobile phone that has received valid authentication is not detected in the management area a (step S802: No), a warning of illegal intrusion is assumed that the detected person has illegally entered the management area a. Is generated (step S804).
In the room entry management method described above, step S502 in FIG. 5 corresponds to a communication terminal apparatus authentication determination step, and step S802 in FIG. 8 corresponds to an authentication communication terminal apparatus position acquisition step and an entry permission step. Further, step S603 in FIG. 6 corresponds to an authentication information request step, and step S605 corresponds to an entry continuation permission step.

  In the present embodiment described above, entry to the management area a can be permitted only when the authenticated user of the mobile phone 104 enters the management area with the mobile phone 104. For this reason, even when the entrance to the management area a is illegally unlocked, entry into the management area a can be prevented. Furthermore, the person who is already in the management area a is requested to transmit the authentication update signal, and only the person who has transmitted the signal is allowed to continue in the management area. Therefore, it is possible to reliably detect a person who has illegally obtained the authenticated mobile phone 104 and has entered the management area a.

  The present invention can be used for a general purpose in a system that restricts entry by using a predetermined area as a management area. Regardless of the locked state of the entrance to the management area, it is possible to determine whether or not the person who entered the management area has received proper authentication. Is possible.

It is a figure for demonstrating the whole structure of the entrance management system of one Embodiment of this invention. It is a functional block diagram for demonstrating the structure of the entrance management server shown in FIG. It is the figure which illustrated the information of DB collated with the information read from the IC tag shown in FIG. It is a figure for demonstrating the structure of the mobile telephone which transmits an authentication request signal to the entrance management server of one Embodiment of this invention. It is a flowchart for demonstrating the entrance management method of one Embodiment of this invention, Comprising: It is a figure for demonstrating the process of authentication of entrance. In one Embodiment of this invention, it is a flowchart for demonstrating the process in which an entrance management server prompts transmission of an authentication update signal. 6 is a flowchart for explaining processing for transmitting an authentication request signal to a mobile phone that has not been authenticated in an embodiment of the present invention. In one Embodiment of this invention, it is a flowchart for demonstrating the process for judging the validity of a room entry.

Explanation of symbols

DESCRIPTION OF SYMBOLS 101 Entrance management server 102 Positioning sensor 103 Human sensor 104 Mobile phone 107 Network 109 IC tag 201 Communication part 202 Detection part 203 Abnormality detection part 204 Permit part 401 Communication part 402 Display part 403 Operation part a Management area

Claims (9)

A communication terminal device position detecting device for detecting the position of the communication terminal device at least in the management area;
An entrance management server for acquiring the position of the communication terminal device detected by the communication terminal device position detection device;
An entrance management system including
The entrance management server is
Based on an authentication request signal transmitted by the communication terminal device for authentication of entry into the management area, the communication terminal device that has transmitted the authentication request signal is authorized to enter the management area. A communication terminal device authentication judging means for judging whether or not,
An entry permitting unit that permits a person to enter the management area only when the communication terminal apparatus position detection device detects that the position of the authentication communication terminal device is included in the management area. When,
An entrance management system characterized by comprising: The entrance management server is
Authentication information requesting means for requesting the authentication communication terminal device in the management area to transmit a signal including at least part of information included in the authentication request signal;
Only when the signal requested by the authentication information requesting unit is received, an entry continuation permitting unit that permits the person to remain in the management area,
The room entry management system according to claim 1, further comprising: An entrance management server for managing management objects in a management area,
Based on an authentication request signal transmitted by the communication terminal device for authentication of entry into the management area, the communication terminal device that has transmitted the authentication request signal is authorized to enter the management area. A communication terminal device authentication judging means for judging whether or not,
An authentication communication terminal device position acquisition unit for acquiring a position of the authentication communication terminal device determined to be an authentication communication terminal device by the communication terminal device authentication determination unit;
Only when the position of the authentication communication terminal apparatus acquired by the authentication communication terminal apparatus position acquisition means is included in the management area, entry permission means for allowing a person to enter the management area;
An entrance management server comprising: Authentication information requesting means for requesting the authentication communication terminal device in the management area to transmit a signal including at least part of information included in the authentication request signal;
Only when the signal requested by the authentication information requesting unit is received, an entry continuation permitting unit that permits the person to remain in the management area continuously;
The room entry management server according to claim 3, further comprising:   The room entry management server according to claim 4, wherein the authentication information requesting unit requests transmission of a signal at a time interval of a timeout time specified by a signal transmitted by the authentication communication terminal device.   When the position of the non-authentication communication terminal device different from the authentication communication terminal device in the management area is acquired by the communication terminal device position acquisition means, the authentication request signal is transmitted to the non-authentication communication terminal device. The room entry management server according to any one of claims 3 to 5, further comprising authentication request instruction means for transmitting an instruction signal for instructing. Person detection result acquisition means for acquiring a detection result of person detection in the management area;
The apparatus further comprises an alarm unit that issues an alarm when the presence of a person in the management area is detected by the person detection result acquisition unit and the entry permission unit does not permit entry of the person. The room entry management server according to any one of claims 3 to 6. In an entrance management server, an entrance management method for managing management objects in a management area,
Based on an authentication request signal transmitted by the communication terminal device for authentication of entry into the management area, the communication terminal device that has transmitted the authentication request signal is authorized to enter the management area. A communication terminal device authentication determination step for determining whether or not,
An authentication communication terminal device position acquisition step of acquiring the position of the authentication communication terminal device determined as the authentication communication terminal device in the communication terminal device authentication determination step;
An entry permission step for allowing a person to enter the management area only when the position of the authentication communication terminal device acquired in the authentication communication terminal device position acquisition step is included in the management area;
The room entrance management method characterized by including. An authentication information requesting step for requesting the authentication communication terminal apparatus in the management area to transmit a signal including at least a part of information included in the authentication request signal;
Only when the signal requested in the authentication information request step is received, an entry continuation permission step for allowing the person to be continuously in the management area;
The room entry management method according to claim 8, further comprising:

Images