Security management system

Abstract

To provide a security management system that allows a maintenance worker to enter a building even when a caretaker is absent, and also ensures security of the building.SOLUTION: A security device generates a password when receiving facial information of a maintenance worker from a monitoring control device, associates the password and the facial information with each other, and stores them in security management data. The monitoring control device notifies the maintenance worker of the password when the password is sent from the security device. Then, when the password is entered at the entrance of the building, the security device determines whether the password matches any of passwords in the security management data. Moreover, if it is determined that the passwords "match," the security device further determines whether the facial information of an inputting person matches the facial information in the security management data, and if it is determined that they "match," allows the inputting person to enter the building.SELECTED DRAWING: Figure 1

Description

[Technical field]

[0001] The present invention relates to a security management technique applicable to elevators. [Background technology]

[0002] An emergency call button (such as an intercom) is provided inside the elevator car so that a monitoring center can be notified (see, for example, Patent Document 1). Therefore, even if the elevator makes an emergency stop and a user is trapped inside the car, the user can call for rescue from inside the car by notifying the monitoring center using the emergency call button. [Prior art documents] [Patent documents]

[0003] [Patent Document 1] JP 2009-202998 A Summary of the Invention [Problem to be solved by the invention]

[0004] In recent years, in order to improve the security of buildings such as apartment complexes and office buildings, security devices (such as auto-lock devices) that restrict entry into the building are often installed at the entrance. However, in such buildings, if the elevator makes an emergency stop when the caretaker is absent (such as when the caretaker is off-duty, including cases where the caretaker is not in the building to begin with), even if a maintenance worker is dispatched to the building, the maintenance worker may not be able to enter the building due to the restriction at the entrance imposed by the security device, and may not be able to reach the elevator.

[0005] SUMMARY OF THE PRESENT EMBODIMENT An object of the present invention is to ensure the security of a building while allowing a maintenance worker to enter the building even when the caretaker is absent. [Means for solving the problem]

[0006] The security management system according to the present invention includes a security device, an elevator control device, and a monitoring control device (aspect 1). The security device restricts entry into a building in which an elevator is installed. When an elevator makes an emergency stop, the elevator control device outputs elevator information identifying the elevator. When the monitoring control device receives elevator information from the elevator control device, it outputs face information of a maintenance worker to be dispatched to the elevator identified by the elevator information. When the security device receives face information from the monitoring control device, it generates a password, associates the password with the face information, stores the password in the security management data, and returns the password to the monitoring control device. When the monitoring control device receives a password returned from the security device after outputting the face information of the maintenance worker, it notifies the maintenance worker of the password. When a password is input at the entrance of the building, the security device then acquires face information of the person who input the password, and determines whether the password matches any of the passwords in the security management data. If the security device determines that there is a "match," it further determines whether the facial information of the person who inputs the password matches the facial information in the security management data associated with the password, and if it determines that there is a "match," it permits the person who inputs the password to enter the building.

[0007] According to the above-mentioned aspect 1, even if the manager of a building where a security device is installed at the entrance is absent, a maintenance worker can be permitted to enter the building by two-step authentication including password authentication and face authentication. Moreover, the password generated by the security device is notified only to the maintenance worker who is dispatched to the building where the security device is installed, and the password is used for password authentication, which is the first step of the two-step authentication. Furthermore, in the security management data, face information of the maintenance worker who is notified of the password (i.e., the maintenance worker who is dispatched to the building) is stored in association with the password. Then, only when the password authentication is successful, the face information is used for face authentication, which is the second step of the two-step authentication. In other words, only information (password) known only to the maintenance worker who is dispatched to the building and information associated with it (here, face information) are used for the two-step authentication. Therefore, in addition to enhancing robustness by performing authentication in two steps, the confidentiality of the information used therein is enhanced, and as a result, it is possible to reliably guarantee the security of the building.

[0008] The security management system according to the above-mentioned aspect 1 may have the following configuration (aspect 2). Specifically, when the monitoring control device receives elevator information from the elevator control device, in addition to outputting face information of the maintenance worker to be dispatched to the elevator specified by the elevator information, the monitoring control device may further output the expected arrival date and time of the maintenance worker at the elevator. Then, when the expected arrival date and time is returned from the monitoring control device after outputting the elevator information, the elevator control device may display the expected arrival date and time on a display unit in the car of the emergency-stopped elevator.

[0009] According to the above aspect 2, even if passengers are trapped inside the elevator due to an emergency stop of the elevator, the expected arrival date and time is displayed on the display unit, giving the passengers in the elevator a sense of security that they will be rescued if they wait until the time displayed on the display unit.

[0010] In the security management system according to aspect 1 or 2 above, the security device may include an intercom and a camera installed at the entrance of the building, and may accept a password input from the intercom and use the camera to obtain facial information of the person who inputs the password (aspect 3).

[0011] According to the above-mentioned third aspect, it is possible to build the above-mentioned security management system without adding a new device.

[0012] The security management system according to any one of the above aspects 1 to 3 may have the following configuration (aspect 4). Specifically, when the monitoring control device receives elevator information from the elevator control device, in addition to outputting face information of a maintenance worker to be dispatched to the elevator specified by the elevator information, the monitoring control device may further output an expected date and time of arrival of the maintenance worker to the elevator. Then, when the security device receives the face information and the expected date and time of arrival from the monitoring control device, the security device may generate a password, and further associate the expected date and time of arrival with the password and store it in the security management data. After that, when the security device determines that the password entered at the entrance of the building "matches" any of the passwords in the security management data, the security device may further determine whether the current date and time at that time is an appropriate date and time for the maintenance worker to arrive by comparing it with the expected date and time of arrival in the security management data associated with the password. Then, when the security device determines that the date and time are "appropriate" and further determines that the face information of the person who entered the password "matches" the face information in the security management data, the security device may allow the person who entered the password to enter the building.

[0013] According to the above-mentioned fourth aspect, it becomes possible to permit a maintenance worker to enter a building by a three-step authentication (password authentication, face authentication, and time authentication) that further includes time authentication. This makes it possible to more reliably ensure the security of the building.

[0014] The security management system according to any one of the above aspects 1 to 4 may have the following configuration (aspect 5). Specifically, when the security device receives face information from a monitoring and controlling device, it judges whether face information matching the face information is stored in the security management data. If the security device judges that the face information is not stored, it generates a password, associates the password with the received face information, and stores the password in the security management data, and returns the password to the monitoring and controlling device. On the other hand, if the security device judges that the face information is stored, it deletes the face information matching the received face information and a series of information associated with the face information from the security management data.

[0015] According to the above-mentioned aspect 5, after a request for a maintenance worker is made, it is possible to permit the maintenance worker to enter the building to which the worker has been dispatched only until the maintenance work at the building is completed.

[0016] The security management system according to any one of the above aspects 1 to 5 may have the following configuration (Aspect 6). Specifically, when the security device permits a maintenance worker to enter a building, the security device then judges only whether or not the face information of the maintenance worker matches the face information in the security management data, and permits the maintenance worker to enter the building if it determines that the face information matches.

[0017] According to the above-mentioned aspect 6, when a maintenance person is permitted to enter a building, if authentication of the maintenance person at the entrance becomes necessary again later during maintenance work, the authentication can be simplified and the maintenance person can be permitted to enter the building using only facial recognition.

[0018] The security management system according to any one of the above aspects 1 to 6 may have the following configuration (Aspect 7). Specifically, the security device is an auto-lock device, and when it is determined that the facial information of the maintenance staff matches the facial information in the security management data, it unlocks the entrance to the building, thereby permitting the maintenance staff to enter the building. Effect of the Invention

[0019] According to the present invention, it is possible to ensure the security of a building while allowing a maintenance person to enter the building even when the caretaker is absent. [Brief description of the drawings]

[0020] [Figure 1] 1 is a conceptual diagram illustrating an elevator to which a security management system according to an embodiment is applied. [Diagram 2] 2A and 2B are conceptual diagrams illustrating examples of maintenance staff management data and security management data used in an embodiment. [Diagram 3] 4 is a flowchart showing a control process executed by a monitoring control device in an embodiment, and operations of a control device and a maintenance worker executed by a security device in cooperation with the control process. [Figure 4] 4 is a flowchart showing a control process (different from that in FIG. 3) executed by the security device in the embodiment. [Diagram 5] FIG. 11 is a conceptual diagram illustrating an elevator to which a security management system according to a first modified example is applied. [Figure 6] 13 is a flowchart showing a control process executed by a monitoring control device in a first modified example, and the actions of a control device and a maintenance worker executed by a security device in cooperation with the control process. [Figure 7] FIG. 13 is a conceptual diagram illustrating security management data used in a second modified example. [Figure 8]13 is a flowchart showing a control process executed by a monitoring control device in a second modified example, and the actions of a control device and maintenance personnel executed by a security device in cooperation with the control process. [Figure 9] 10 is a flowchart showing a control process (different from that in FIG. 8) executed by a security device in a second modified example. [Figure 10] 13 is a flowchart showing a control process executed by a monitoring control device in a third modified example, and the operations of a control device executed by a security device in cooperation with the control process, and of a maintenance worker. [Figure 11] 13 is a flowchart showing a control process executed by a monitoring control device in a fourth modified example, and the operations of a control device executed by a security device in cooperation with the control process, and of a maintenance worker. [Figure 12] FIG. 13 is a conceptual diagram illustrating security management data used in a fifth modified example. [Figure 13] 13 is a flowchart showing a control process executed by a monitoring control device in a fifth modified example, and the operations of a control device executed by a security device in cooperation with the control process, and of a maintenance worker. [Figure 14] 14 is a flowchart showing a control process (different from that in FIG. 13) executed by a security device in a fifth modified example. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0021] [1] Implementation Example Fig. 1 is a conceptual diagram illustrating an elevator 1 to which a security management system according to an embodiment is applied. As shown in this diagram, an emergency call button 11 is usually provided inside a car G of the elevator 1 so that the elevator 1 can report to a monitoring center 2. The elevator 1 and the monitoring center 2 are also connected to each other via a network so that information communication (including telephone calls) between them is possible. Here, the network is the Internet.

[0022] Therefore, even if the elevator 1 makes an emergency stop and the user is trapped inside the car G, the user can request rescue from inside the car G by reporting to the monitoring center 2 using the emergency call button 11.

[0023] In addition to this configuration, in this embodiment, a security device 3 (such as an auto-lock device) that restricts entry into the building is installed at the entrance of the building where the elevator 1 is installed. Also, a case is considered in which the security device 3 is connected to the elevator 1 and the monitoring center 2 via a network so as to be able to communicate information with both of them.

[0024] In recent years, in order to improve the security of buildings, security devices 3 like this are often installed at entrances. However, in such buildings, if the elevator 1 makes an emergency stop when the caretaker is absent (such as when the caretaker is off duty, including cases where there is no caretaker in the building to begin with), even if a maintenance worker is dispatched to the building, he or she may not be able to enter the building due to the restriction at the entrance imposed by the security device 3, and may not be able to reach the elevator 1.

[0025] Therefore, in order to allow maintenance personnel to enter the building even when the manager is not present while still ensuring the security of the building, the security management system that makes this possible is composed of an elevator control device 10 that controls the elevator 1, a monitoring control device 20 installed in a monitoring center 2, and a security device 3 (see Figure 1).

[0026] When an elevator 1 controlled by the elevator control device 10 makes an emergency stop, the elevator control device 10 outputs elevator information Pe that identifies the elevator 1. In this embodiment, this elevator information Pe is transmitted to the monitoring center 2 and is used to inform the monitoring center 2 of which elevator 1 an emergency stop has occurred.

[0027] The monitoring and controlling device 20 includes a storage unit 21 and a control unit 22 (see FIG. 1). Here, the storage unit 21 is a part configured with storage devices such as ROM and RAM. The control unit 22 is a part configured with processing devices such as CPU and MPU.

[0028] Maintenance staff management data Dp is stored in the storage unit 21. Fig. 2(A) is a conceptual diagram illustrating the maintenance staff management data Dp used in this embodiment. As shown in this figure, the maintenance staff management data Dp stores, for each maintenance staff who can maintain the elevator 1 that is the monitoring target, the identification information Pi, contact information Ph, and face information Pf of the maintenance staff in a mutually associated state.

[0029] Here, the identification information Pi of each maintenance worker is unique information (such as an ID) given to the maintenance worker, and is used as information for identifying each maintenance worker in the system. The contact information Ph of each maintenance worker is a telephone number, an e-mail address, etc. set in the mobile terminal device 4 (such as a smartphone, see FIG. 1) carried by the maintenance worker, and is used for contacting the monitoring center 2 with a request for dispatch and transmitting various information (such as a password Pj, which will be described later). In the example of FIG. 2(A), a case is shown in which an e-mail address is saved as the contact information Ph. The face information Pf of each maintenance worker is preregistered as information for identifying the face of the maintenance worker (such as facial features), and is used as reference data for face authentication when the security device 3 performs face authentication (facial authentication for maintenance workers) on the dispatched maintenance worker at the entrance of the building. Note that the name of each maintenance worker may be saved in the maintenance worker management data Dp together with information such as the identification information Pi of the maintenance worker.

[0030] The control unit 22 executes the following control process. Specifically, when the control unit 22 receives elevator information Pe from the elevator control device 10, it outputs face information Pf of the maintenance staff to be dispatched to the elevator 1 specified by the elevator information Pe (face information Pf of the maintenance staff stored in the maintenance staff management data Dp) (output process). In this embodiment, this face information Pf is transmitted to the security device 3, and when the security device 3 receives the face information Pf, it generates a password Pj and returns it to the monitoring control device 20. Then, after outputting the face information Pf of the maintenance staff, when the password Pj is returned from the security device 3, the control unit 22 notifies the maintenance staff of the password Pj (notification process).

[0031] In this embodiment, these processes are realized by execution of a program by the control unit 22. This program is installed in the monitoring control device 20, and the program before installation may be stored in a readable state on a portable storage medium (e.g., a flash memory, etc.), or may be stored in a downloadable state on another server, etc. The various processes described above may be realized by circuits constructed in the monitoring control device 20.

[0032] The security device 3 includes an intercom 30A and a camera 30B installed at the entrance of a building, a storage unit 31, and a control unit 32 (see FIG. 1).

[0033] The intercom 30A is a device for calling a resident at the entrance of the building, and includes a numeric keypad for inputting a room number, a call button for making a call, a microphone and a speaker for talking to the resident, etc. In this embodiment, the intercom 30A is not only used for calling the resident, but also for the maintenance staff to input a password Pj during password authentication. This makes it possible to build a security management system without adding a new device for inputting the password Pj at the entrance of the building.

[0034] Camera 30B is a device that acquires face information Pf of people who come from outside to the entrance of the building. Specifically, camera 30B captures an image of the face of a person who comes from outside to the entrance of the building. Camera 30B then performs image processing on the acquired image to extract face information Pf (such as facial features) of the person captured in the image.

[0035] Usually, the face information Pf acquired by the camera 30B is used for face authentication (tenant face authentication) for automating unlocking of the entrance (opening the door) by the resident. Specifically, resident management data (not shown) for managing information (such as face information Pf) of preregistered residents is stored in the storage unit 31, and when the camera 30B acquires face information Pf, the control unit 32 performs face authentication for the resident by collating the face information Pf with face information Pf (reference data) in the resident management data. More specifically, the control unit 32 judges whether the face information Pf acquired by the camera 30B matches any of the face information Pf in the resident management data. Then, when the face authentication is successful (specifically, when the comparison of the face information Pf is judged to be "matched"), the control unit 32 judges that the person who comes to the entrance of the building is a resident and unlocks the entrance (opens the door). As a result, the entrance is automatically unlocked for a resident who comes to the entrance of the building from outside.

[0036] In this embodiment, the camera 30B is used not only for face authentication of a resident to allow the resident to enter the building, but also for face authentication of a maintenance staff to allow the maintenance staff to enter the building. This makes it possible to build a security management system without adding a new device to obtain face information Pf of the maintenance staff at the entrance of the building. The control unit 32 may take on some of the functions of the camera 30B. For example, the control unit 32 may extract face information Pf from an image of the entrance instead of the camera 30B.

[0037] The storage unit 31 is a portion configured with storage devices such as ROM and RAM, and security management data Dq is stored in the storage unit 31. Fig. 2(B) is a conceptual diagram illustrating the security management data Dq used in this embodiment. The security management data Dq stores face information Pf received by the security device 3 from the monitoring control device 20 and a password Pj generated by the security device 3 when the security device 3 receives the face information Pf, in a mutually associated state. These pieces of information are used as reference data for authentication when the security device 3 authenticates a maintenance worker at the entrance of a building (specifically, two-step authentication of password authentication and face authentication).

[0038] The control unit 32 is a part that is configured with processing devices such as a CPU and an MPU, and executes the following control processes.

[0039] When the control unit 32 receives the face information Pf from the monitoring control device 20, the control unit 32 generates a password Pj (generation process). After that, the control unit 32 stores the password Pj and the face information Pf in the security management data Dq in association with each other (storage process), and also returns the password Pj to the monitoring control device 20 (return process).

[0040] Thereafter, when a password Pj is inputted through the intercom 30A at the entrance of the building, the control unit 32 accepts the input of the password Pj from the intercom 30A and acquires face information Pf of the person who input the password Pj from the camera 30B. Then, the control unit 32 judges whether the accepted password Pj matches any of the passwords Pj in the security management data Dq (password authentication process). If the control unit 32 judges that the password Pj matches (password authentication is successful), it further judges whether the face information Pf of the person who inputs the password acquired from the camera 30B matches the face information Pf in the security management data Dq associated with the password Pj (face authentication process). If the control unit 32 judges that the password Pj matches (face authentication is successful), it permits the person who inputs the password Pj to enter the building.

[0041] In this embodiment, these processes are realized by execution of a program by the control unit 32. This program is installed in the security device 3, and the program before installation may be stored in a readable state on a portable storage medium (e.g., a flash memory, etc.), or may be stored in a downloadable state on another server, etc. The various processes described above may be realized by circuits built in the security device 3.

[0042] 3 is a flowchart showing the control process executed by the monitoring control device 20 in this embodiment, and the operation of the control device and maintenance personnel executed by the security device 3 in cooperation with the control process. This control process is started when any of the monitored elevators 1 makes an emergency stop and the monitoring control device 20 receives elevator information Pe identifying that elevator 1 from the elevator control device 10. Hereinafter, the elevator information Pe received by the monitoring control device 20 at this time will be referred to as "received information Pr."

[0043] Here, the control process shown in FIG. 3 may be started when the elevator 1 is stopped in an emergency and a user is locked in the car G. As a specific example, consider a case where the elevator 1 is stopped in an emergency and a user in the car G uses the emergency call button 11 to notify the monitoring center 2. In this case, the monitor who receives the notification talks to the user in the car G and attempts to move the car G to the nearest floor by remotely operating the elevator 1 specified by the elevator information Pe received by the monitoring control device 20. If the movement to the nearest floor by remote operation is successful, the user in the car G is rescued in a short time after the emergency stop. On the other hand, if such rescue by remote operation fails, the user will be locked in the car G. In that case, a lock-in occurrence signal is output by the monitor pressing a button or the like that notifies that a lock-in has occurred. The control process of FIG. 3 may be appropriately changed to one that is started when the monitoring control device 20 further receives a lock-in occurrence signal in addition to the elevator information Pe.

[0044] Furthermore, the above series of steps for determining whether or not a person is entrapped is not limited to being performed by the operation and judgment of a monitor, but may be appropriately changed to an automated process by having the monitoring control device 20 execute a program.

[0045] When the control process is started, the monitoring control device 20 queries the maintenance personnel through the mobile terminal device 4, thereby finding and determining a maintenance personnel who can immediately be dispatched to the elevator 1 identified in the received information Pr (elevator information Pe) (step S11). Then, the monitoring control device 20 issues a dispatch request to the determined maintenance personnel. At this time, the monitoring control device 20 transmits location information of the building to which the maintenance personnel is to be dispatched (the building in which the elevator 1 is installed) to the maintenance personnel together with the dispatch request to the maintenance personnel. Here, this location information is information such as an address indicating the location of the building or a location on a map (electronic map, etc.).

[0046] As an example, the monitoring control device 20 can obtain the location information of the building to which the elevator is dispatched as follows. Specifically, elevator management data for managing information on the elevator 1 to be monitored is stored in the storage unit 21 of the monitoring control device 20, and in the elevator management data, elevator information Pe and location information of the building in which the elevator 1 is installed can be associated with each other for each elevator 1 to be monitored. Then, the monitoring control device 20 can obtain the location information associated with the received information Pr (elevator information Pe) from the elevator management data.

[0047] When a maintenance worker receives a dispatch request from the monitoring control device 20, the maintenance worker starts dispatching to a building specified by the location information received together with the dispatch request (step S31).

[0048] Next, the monitoring control device 20 acquires face information Pf and contact information Ph of the maintenance staff determined in step S11 (step S12). Specifically, the monitoring control device 20 uses the identification information Pi of the maintenance staff determined in step S11 to extract the face information Pf and contact information Ph associated with the identification information Pi from the maintenance staff management data Dp.

[0049] Thereafter, in order to have the security device 3 perform two-step authentication (password authentication and face authentication) on the maintenance worker at the entrance of the building to which the maintenance worker, determined in step S11, is to be dispatched (see steps S43 and S44 in FIG. 4), the monitoring and control device 20 first causes the security device 3 to perform advance preparations to enable this.

[0050] Specifically, the monitor control device 20 first transmits the face information Pf acquired in step S12 to the security device 3 (output process, step S13).

[0051] When the security device 3 receives face information Pf from the monitoring control device 20 (step S21), it generates a password Pj to be used for the first-stage password authentication of the above-mentioned two-stage authentication (generation process, step S22). In this embodiment, the security device 3 generates, as the password Pj, a sequence of numbers that can be entered using the numeric keypad provided in the intercom 30A. Note that the numeric keypad may include symbols, and in that case, a sequence including numbers and symbols may be generated as the password Pj.

[0052] After step S22, the security device 3 stores the password Pj generated in step S22 and the face information Pf received from the monitoring control device 20 in step S21 in the security management data Dq in a mutually associated state (storage process, step S23). The password Pj and face information Pf stored in this security management data Dq are used as reference data for password authentication and face authentication, respectively, when the security device 3 performs two-step authentication (first-step password authentication and second-step face authentication; see FIG. 4) on a maintenance worker at the entrance to the building.

[0053] Thereafter, the security device 3 returns the password Pj generated in step S22 to the monitoring control device 20 (return process, step S24). When the monitoring control device 20 receives the password Pj from the security device 3 (step S14), it transmits the password Pj to the contact Ph acquired in step S12 (the contact Ph of the maintenance worker determined in step S11) (step S15). As a result, the maintenance worker heading to the building where the maintenance worker is to be dispatched can receive and know the password Pj required for password authentication at the entrance of the building on his / her own mobile terminal device 4 (step S32).

[0054] Fig. 4 is a flowchart showing a control process (different from that shown in Fig. 3) executed by the security device 3 in this embodiment. This control process is started when the security device 3 acquires, from the camera 30B, face information Pf of a person approaching the building entrance from outside.

[0055] When the control process is started, the security device 3 first performs face authentication for the resident using the face information Pf acquired from the camera 30B to determine whether or not the person who comes to the entrance of the building is a resident (face authentication process, step S41). Specifically, the security device 3 performs face authentication for the resident by using the above-mentioned resident management data (not shown) and comparing the face information Pf acquired from the camera 30B with face information Pf (reference data) in the resident management data. More specifically, the security device 3 determines whether or not the face information Pf acquired from the camera 30B matches any of the face information Pf in the resident management data.

[0056] If the face authentication in step S41 is successful (specifically, if the face information Pf is judged to be a "match"), the security device 3 judges that the person who comes to the building entrance is a resident, and unlocks the entrance (opens the door) (step S45B). This automatically unlocks the entrance to the building for a resident who comes to the entrance from outside.

[0057] The resident management data (not shown) may store the floor where the resident resides in association with the face information Pf of each resident. In this case, the security device 3 can perform the following process. Specifically, when the face authentication in step S41 is successful, the security device 3 can extract the floor where the resident resides whose face authentication has been successful from the resident management data, and transmit a hall call to the elevator control device 10 with the floor as the destination floor and the floor where the building entrance is located as the departure floor (step S50 in FIG. 4). With this configuration, it becomes possible for the security device 3 to automate hall calls for the resident, which would normally have to be made manually from the floor where the building entrance is located.

[0058] On the other hand, if the facial authentication in step S41 fails, the security device 3 determines that the person who comes to the building entrance is not a resident. In step S41, even if the person who comes to the building entrance is a maintenance worker who has rushed to the building in response to a call for assistance, the facial authentication will fail because the maintenance worker is not a resident. Therefore, the maintenance worker cannot be permitted to enter the building in this state. Therefore, in this embodiment, the security device 3 further executes the following process to allow the maintenance worker to enter the building.

[0059] The security device 3 first determines whether or not the password Pj has been entered into the intercom 30A at the entrance to the building (step S42). If the security device 3 determines that there has been no input (No) in step S42, it repeats step S42 until a predetermined time has elapsed and a timeout occurs (step S42x).

[0060] If the security device 3 times out in step S42x without being able to determine that "an input has been made (Yes)" in step S42, it can determine from this result that the person who has come to the entrance of the building is neither a resident nor a maintenance worker. In this case, the security device 3 keeps the entrance of the building locked (door closed) (step S45A). This maintains the security of the building.

[0061] On the other hand, if the security device 3 determines in step S42 that "an input has been made (Yes)" before the timeout occurs in step S42x, it accepts the password Pj entered through the intercom 30A and performs password authentication as the first stage of authentication for the maintenance person to determine whether or not the person who has come to the entrance of the building is a maintenance person using the password Pj (password authentication process, step S43). Specifically, the security device 3 performs password authentication by checking the accepted password Pj against the password Pj (reference data) in the security management data Dq. More specifically, the security device 3 determines whether or not the accepted password Pj matches the password Pj in the security management data Dq.

[0062] Then, when the password authentication in step S43 is successful (specifically, when the password Pj is determined to be "matched"), the security device 3 performs face authentication for the maintenance worker as a second stage of authentication for the maintenance worker, using the face information Pf acquired from the camera 30B to determine whether the person who has come to the entrance of the building is a maintenance worker or not based on the face information Pf (face authentication process, step S44). Specifically, the security device 3 performs face authentication for the maintenance worker by comparing the face information Pf acquired from the camera 30B with face information Pf (reference data) in the security management data Dq. More specifically, the security device 3 uses the face information Pf in the security management data Dq associated with the password Pj used as reference data when the password authentication in step S43 is successful to determine whether the face information Pf acquired from the camera 30B matches the face information Pf in the security management data Dq.

[0063] If the face authentication in step S44 is successful (specifically, if the face information Pf is judged to be a "match"), the security device 3 judges that the person who has come to the entrance of the building is a maintenance worker who has been dispatched in response to the dispatch request, and unlocks the entrance of the building (opens the door) (step S45B). This allows the maintenance worker who has come to the entrance of the building to which he has been dispatched to enter the building.

[0064] On the other hand, if the password authentication in step S43 fails, or if the face authentication in step S44 fails, the security device 3 determines that the person who has come to the building entrance is neither a resident nor a maintenance worker, and keeps the building entrance locked (door closed) (step S45A), thereby maintaining the security of the building.

[0065] According to such a security management system, even if the manager of a building where the security device 3 is installed at the entrance is absent, the maintenance personnel can be permitted to enter the building by two-step authentication of password authentication and face authentication. Moreover, the password Pj generated by the security device 3 is notified only to the maintenance personnel who are dispatched to the building where the security device 3 is installed, and the password Pj is used for the password authentication, which is the first step of the two-step authentication. In addition, in the security management data Dq, face information Pf of the maintenance personnel who are notified of the password Pj (i.e., the maintenance personnel who are dispatched to the building) is stored in association with the password Pj. Then, only when the password authentication is successful, the face information Pf is used for the face authentication, which is the second step of the two-step authentication. In other words, only information known only to the maintenance personnel who are dispatched to the building (password Pj) and information associated with it (here, face information Pf) are used for the two-step authentication. Therefore, in addition to enhancing robustness by performing authentication in two steps, the confidentiality of the information used therein is enhanced, and as a result, it is possible to reliably guarantee the security of the building. This allows maintenance personnel to enter the building even when the manager is not present, while still ensuring the security of the building.

[0066] [2] Variations [2-1] First modified example The first modified example is a modified example of the embodiment described above. Fig. 5 is a conceptual diagram illustrating an elevator 1 to which a security management system according to the first modified example is applied. In this modified example, a display unit 12 consisting of a display device such as a monitor is installed in a car G. The security management system of this modified example is configured to provide information to a user in the car G through the display unit 12 when the user is trapped in the car G due to an emergency stop of the elevator 1. Specifically, the following control process is executed.

[0067] 6 is a flow chart showing the control process executed by the monitoring control device 20 in the first modified example, and the operation of the control device and the maintenance worker executed by the security device 3 in cooperation with the control process. In this modified example, after the monitoring control device 20 issues a dispatch request to the maintenance worker in step S11, it transmits the expected arrival date and time tp of the maintenance worker to the building or elevator 1 to which the maintenance worker is to be dispatched to the elevator control device 10 (step S60). At this time, the monitoring control device 20 can calculate the expected arrival date and time tp based on information such as the current location information of the maintenance worker who issued the dispatch request and the location information of the building to which the maintenance worker is to be dispatched that was transmitted to the maintenance worker together with the dispatch request. Alternatively, the monitoring control device 20 may acquire the expected arrival date and time tp from the reply of the maintenance worker by inquiring of the maintenance worker who issued the dispatch request.

[0068] After the elevator control device 10 transmits elevator information Pe to the monitoring control device 20 to notify that an emergency stop has occurred in the elevator 1 that it controls, if an expected arrival date and time tp is returned from the monitoring control device 20 (step S61), the elevator control device 10 displays the expected arrival date and time tp on the display unit 12 (such as a monitor) in the car G of the elevator 1 that has been emergency stopped (step S62).

[0069] According to the first variant, even if a user becomes trapped inside the car G due to an emergency stop of the elevator 1, the expected arrival date and time tp is displayed on the display unit 12, giving the user in the car G a sense of security that they will be rescued if they wait until the time displayed on the display unit 12.

[0070] Incidentally, step S60 is not limited to being performed immediately after step S11, and may be performed at any time within the control processing performed by the monitoring control device 20. Also, in step S60, the monitoring control device 20 may transmit the information of the maintenance worker determined in step S11 (such as the name and a facial image) together with the expected arrival date and time tp to the elevator control device 10. In this case, in step S62, the elevator control device 10 can display on the display unit 12 not only the expected arrival date and time tp but also the information of the dispatched maintenance worker (such as the name and a facial image).

[0071] [2-2] Second variant The second modification is a modification of the above-described embodiment. In this modification, a security management system is configured to enable a maintenance worker to enter a building by a three-step authentication method including a time authentication in addition to a password authentication and a face authentication.

[0072] 7 is a conceptual diagram illustrating security management data Dq used in the second modified example. As shown in this diagram, in this modified example, in the security management data Dq, face information Pf of a maintenance worker who has been requested to be dispatched (face information Pf received by the security device 3 from the monitoring control device 20) is stored in a state in which the face information Pf is further associated with an expected arrival date and time tp of the maintenance worker at the building or elevator 1 to which the maintenance worker is to be dispatched. Specifically, the following control process is executed.

[0073] FIG. 8 is a flowchart showing the control process executed by the monitoring control device 20 in the second modified example, and the operation of the control device and maintenance personnel executed by the security device 3 in cooperation with the control process.

[0074] In this modification, when the monitoring control device 20 transmits facial information Pf of the maintenance worker requested to be dispatched in step S11 (facial information Pf acquired in step S12) to the security device 3 (step S70), it also transmits an estimated arrival date and time tp of the maintenance worker to the building or elevator 1 to which the maintenance worker is to be dispatched to the security device 3. At this time, the monitoring control device 20 can calculate the estimated arrival date and time tp based on information such as the current location information of the maintenance worker who issued the dispatch request and the location information of the building to which the maintenance worker is to be dispatched that was transmitted to the maintenance worker together with the dispatch request. Alternatively, the monitoring control device 20 may acquire the estimated arrival date and time tp from a response from the maintenance worker by inquiring of the maintenance worker who issued the dispatch request.

[0075] When the security device 3 receives face information Pf and expected arrival date and time tp from the monitoring control device 20 (step S71), it generates a password Pj to be used for the first-stage password authentication of the three-stage authentication (generation process, step S72).

[0076] After step S72, the security device 3 stores the password Pj generated in step S72, the facial information Pf and the expected arrival date and time tp received from the monitoring control device 20 in step S71 in security management data Dq in a mutually associated state (storing process, step S73). The password Pj, the expected arrival date and time tp, and the facial information Pf stored in this security management data Dq are used as reference data for password authentication, time authentication, and facial authentication, respectively, when the security device 3 performs three-stage authentication (first stage password authentication, second stage time authentication, and third stage facial authentication; see FIG. 9) on a maintenance worker at the entrance to the building.

[0077] Thereafter, the security device 3 returns the password Pj generated in step S72 to the monitor and control device 20 (return process, step S74).

[0078] Fig. 9 is a flowchart showing a control process (different from that in Fig. 8) executed by the security device 3 in the second modified example. In this modified example, when the password authentication in step S43 is successful, the security device 3 then executes time authentication for the maintenance person as the second stage of authentication for the maintenance person to determine whether the current date and time tx at that time is an appropriate date and time for the maintenance person to arrive (time authentication process, step S80).

[0079] Specifically, the security device 3 compares the current date and time tx with the expected arrival date and time tp in the security management data Dq, using the expected arrival date and time tp in the security management data Dq associated with the password Pj used as reference data when the password authentication in step S43 was successful. More specifically, the security device 3 calculates the absolute value |tx-tp| of the time difference therebetween, and judges whether the absolute value |tx-tp| is smaller than a predetermined value ts. If the security device 3 judges that the absolute value |tx-tp| is "small," it judges that the current date and time tx is an appropriate date and time for the maintenance worker to arrive.

[0080] Then, if the time authentication in step S80 is successful (specifically, if the security device 3 determines that the current date and time tx is an "appropriate date and time" for the time when the maintenance worker will arrive), it performs facial authentication for the maintenance worker as the third stage of authentication for the maintenance worker (facial authentication processing; step S44).

[0081] According to the second modification, it becomes possible to permit maintenance personnel to enter the building through three-step authentication (password authentication, time authentication, and face authentication) that further includes time authentication. This makes it possible to more reliably ensure the security of the building.

[0082] The above-mentioned time authentication (step S80) may be performed after the face authentication for the maintenance personnel. The part of the above-mentioned control process that performs the three-step authentication (including the part that performs the advance preparation therefor) can also be applied to the above-mentioned first modified example. In that case, the expected arrival date and time tp transmitted to the elevator control device 10 in step S61 can be used as it is for the expected arrival date and time tp transmitted to the security device 3 in step S70. Alternatively, the expected arrival date and time tp transmitted to the security device 3 in step S70 may be used for the expected arrival date and time tp transmitted to the elevator control device 10 in step S61.

[0083] [2-3] Third variant The third modification is a modification of the above-described embodiment. Fig. 10 is a flowchart showing the control process executed by the monitoring control device 20 in the third modification, and the operation of the control device and maintenance personnel executed by the security device 3 in cooperation with the control process.

[0084] In this modification, after requesting a maintenance worker to be dispatched in step S11, the monitoring control device 20 judges whether the building to which the worker is to be dispatched (the building in which the elevator 1 identified by the received information Pr (elevator information Pe) is installed) is a face recognition-enabled building (step S90). Here, a face recognition-enabled building refers to a building in which entry into the building is restricted by the security device 3 and in which the lock is automatically released (doors are opened) for occupants by face recognition at the entrance.

[0085] As an example, in the above-mentioned elevator management data (not shown), for each elevator 1 to be monitored, the elevator information Pe can be associated with a flag indicating whether or not the building in which the elevator 1 is installed is a face recognition-enabled building. Then, the monitoring control device 20 can determine whether or not the building to which the elevator is dispatched is a face recognition-enabled building from the flag in the elevator management data associated with the received information Pr (elevator information Pe).

[0086] If the monitoring control device 20 determines in step S90 that the building is a face recognition-enabled building (Yes), it executes the process from step S12. On the other hand, if the monitoring control device 20 determines in step S90 that the building is not a face recognition-enabled building (No), it ends the control process without executing the process from step S12.

[0087] Incidentally, the configuration in which the process from step S12 is performed only when the building to which the robot is dispatched is a face recognition-enabled building can also be applied to the first and second modified examples described above.

[0088] [2-4] Fourth variant The fourth modification is a modification of the above-described embodiment. Fig. 11 is a flowchart showing the control process executed by the monitoring control device 20 in the fourth modification, and the operation of the control device and maintenance personnel executed by the security device 3 in cooperation with the control process.

[0089] In this modification, after the maintenance worker is permitted to enter the building to which he / she is dispatched, the maintenance worker performs maintenance work on the elevator 1 in the building to which he / she is dispatched (such as rescuing trapped users and repairing the elevator 1), and when the work is completed, the maintenance worker reports the completion from the mobile terminal device 4 carried by the maintenance worker to the monitoring center 2 (step S33). When the monitoring control device 20 receives the completion report from the maintenance worker (step S91), it transmits the face information Pf of the maintenance worker to the security device 3 installed in the building to which the maintenance worker is dispatched (step S92).

[0090] When the security device 3 receives facial information Pf from the monitoring control device 20, it determines whether the facial information Pf was sent by the monitoring control device 20 after requesting a maintenance technician to be dispatched (step S11) or whether the facial information Pf was sent by the monitoring control device 20 after receiving a completion report from the maintenance technician (step S91), and therefore determines whether any facial information matching the received facial information Pf is stored in the security management data Dq (step S81).

[0091] If the security device 3 determines in step S81 that the facial information Pf is "saved (Yes)", it can determine that the received facial information Pf was sent by the monitoring control device 20 after receiving the completion report from the maintenance technician. In this case, the security device 3 deletes the facial information Pf that matches the received facial information Pf and the series of information associated with it (here, the password Pj) from the security management data Dq together (step S82).

[0092] On the other hand, if the security device 3 determines in step S81 that the face information Pf received is "not stored (No)", then the security device 3 can determine that the face information Pf received was sent by the monitoring control device 20 after the request for the maintenance personnel was issued. In this case, the security device 3 executes the process from step S22 (generation of the password Pj).

[0093] According to the fourth modified example, after a maintenance worker is requested to be dispatched, the maintenance worker can be permitted to enter the building only until the maintenance work at the building to which the maintenance worker is dispatched is completed.

[0094] Incidentally, the configuration in which the security device 3 selectively stores and deletes the authentication reference data can also be applied to the above-mentioned first to third modified examples.

[0095] [2-5] Fifth variant The fifth modification is a modification of the above-described embodiment. In this modification, when a maintenance worker is permitted to enter a building and then authentication of the maintenance worker at the entrance becomes necessary again during maintenance work (for example, when the maintenance worker goes outside the building to retrieve parts or tools required for maintenance and then returns to the building), a security management system is configured to simplify authentication and permit the maintenance worker to enter the building only by face authentication.

[0096] Fig. 12 is a conceptual diagram illustrating security management data Dq used in the fifth modified example. As shown in this figure, in this modified example, in the security management data Dq, face information Pf of the maintenance worker who has been called out (face information Pf received by the security device 3 from the monitoring control device 20) is stored in a state in which authentication information Pk indicating whether face authentication of the maintenance worker has been successful or not is further associated with the face information Pf and stored. In the example of Fig. 12, Pk="0" indicates that face authentication has not yet been successful. If face authentication has been successful, this is indicated by Pk="1". Specifically, the following control process is executed.

[0097] 13 is a flowchart showing the control process executed by the monitoring control device 20 in the second modified example, and the operations of the control device and maintenance personnel executed by the security device 3 in cooperation with the control process. In this modified example, when the security device 3 stores the password Pj and face information Pf in the security management data Dq in a state in which they are associated with each other in step S23, the security device 3 further stores authentication information Pk in association with the password Pj and face information Pf, and sets the authentication information Pk to Pk="0".

[0098] 14 is a flowchart showing the control process executed by the security device 3 in the fifth modified example. In this modified example, if the facial authentication for the resident in step S41 fails, the security device 3 first determines whether the authentication information Pk in the security management data Dq is Pk="0" or Pk="1" (step S83).

[0099] If the security device 3 determines in step S83 that the authentication information Pk is Pk="1", it can determine that the maintenance worker has already been permitted to enter the building. In this case, the security device 3 skips steps S42 and S43 (password authentication) and performs step S44 (face authentication for the maintenance worker).

[0100] On the other hand, if the security device 3 determines in step S83 that the authentication information Pk is Pk="0", it can determine that the maintenance worker is not yet permitted to enter the building. In this case, the security device 3 executes the process from step S42.

[0101] According to the fifth variant, if a maintenance personnel is permitted to enter a building and then authentication at the entrance for the maintenance personnel is required again during maintenance work, the authentication can be simplified and the maintenance personnel can be permitted to enter the building using only facial recognition.

[0102] Incidentally, the configuration in which the security device 3 simplifies the authentication of the maintenance personnel at the entrance from the second time onwards can also be applied to the above-mentioned first to fourth modified examples.

[0103] [2-6] Other variations In the above-described security management system, the password Pj can be input at the entrance of the building not only through the intercom 30A already installed in the building, but also through an input device installed separately from the intercom 30A. Furthermore, the face information Pf of the maintenance staff at the entrance of the building can be acquired not only through the camera 30B already installed in the building, but also through an imaging device installed separately from the camera 30B.

[0104] Furthermore, a one-dimensional code or two-dimensional code (QR code (registered trademark) or two-dimensional barcode) may be generated as the password Pj. In this case, a scanner for reading such codes is installed at the entrance of the building.

[0105] The above-mentioned embodiments and the description of the modifications should be considered as illustrative in all respects and not restrictive. The scope of the present invention is indicated by the claims, not by the above-mentioned embodiments and modifications. Furthermore, the scope of the present invention is intended to include all modifications within the meaning and scope of the claims.

[0106] Furthermore, from the above-mentioned embodiments and modifications, the subject of the invention is not limited to the security management system, but may be extracted individually or partially from devices constituting the security management system, control processes and programs executed in the security management system, etc. Also, a part or the whole of the overall configuration including the elevator 1 to which the security management system is applied may be extracted as the subject of the invention. [Explanation of symbols]

[0107] 1. Elevator 2. Monitoring Center 3. Security Devices 4. Portable terminal devices G Car 10 Elevator control device 11 Emergency call button 12 Display section 20 Monitoring and control device 21 Memory section 22 Control section 30A Intercom 30B Camera 31 Storage section 32 Control section Dp Maintenance personnel management data Dq Security Management Data Pe Elevator Information Pf Face information Ph Contact Pi identification information Pj Password Pk Credentials Pr Reception Information tp Estimated arrival date and time ts specified value tx current date and time

Claims

1. a security device that restricts entry into a building in which the elevator is installed; an elevator control device that outputs elevator information identifying the elevator when the elevator makes an emergency stop; a monitoring control device that, when receiving the elevator information from the elevator control device, outputs face information of a maintenance worker to be dispatched to the elevator identified by the elevator information; Equipped with When the security device receives the face information from the monitoring and control device, the security device generates a password, associates the password with the face information, and stores the password in security management data, and also returns the password to the monitoring and control device; When the password is returned from the security device after outputting the face information of the maintenance personnel, the monitoring and control device notifies the maintenance personnel of the password; This is a security management system in which, when a password is entered at the entrance of the building, the security device acquires facial information of the person who entered the password and determines whether the password matches any of the passwords in the security management data, and if it determines that the password matches, it further determines whether the facial information of the person entering the password matches the facial information in the security management data that is associated with the password, and if it determines that the password matches, it allows the person entering the building.

2. When the monitoring control device receives the elevator information from the elevator control device, in addition to outputting face information of a maintenance worker to be dispatched to the elevator specified by the elevator information, the monitoring control device further outputs an expected arrival date and time of the maintenance worker at the elevator; 2. The security management system according to claim 1, wherein after outputting the elevator information, when the expected arrival date and time is returned from the monitoring control device, the elevator control device displays the expected arrival date and time on a display unit inside the car of the elevator that has been emergency stopped.

3. 2. The security management system according to claim 1, wherein the security device includes an intercom and a camera installed at an entrance of a building, and receives input of the password from the intercom and uses the camera to obtain facial information of the person who inputs the password.

4. When the monitoring control device receives the elevator information from the elevator control device, in addition to outputting face information of a maintenance worker to be dispatched to the elevator specified by the elevator information, the monitoring control device further outputs an expected arrival date and time of the maintenance worker at the elevator; when the security device receives the face information and the expected arrival date and time from the monitoring control device, it generates the password, further associates the expected arrival date and time with the password, and stores the password in the security management data; 2. The security management system of claim 1, wherein the security device, when determining that a password entered at an entrance to the building matches any of the passwords in the security management data, further determines whether the current date and time is an appropriate date and time for a maintenance worker to arrive by comparing it with the expected arrival date and time in the security management data corresponding to the password, and when determining that it is an appropriate date and time, and further when determining that facial information of the person who entered the password matches facial information in the security management data, allows the person to enter the building.

5. A security management system as described in any of claims 1 to 4, wherein when the security device receives the facial information from the monitoring control device, it determines whether facial information matching the facial information is stored in the security management data, and if it determines that it is not stored, it generates the password, associates the password with the received facial information and stores it in the security management data, and returns the password to the monitoring control device, while if it determines that it is stored, it deletes from the security management data the facial information that matches the received facial information and a series of information associated with that facial information.

6. A security management system as described in any of claims 1 to 4, wherein when the security device permits the maintenance worker to enter the building, the security device then only determines whether the maintenance worker's facial information matches the facial information in the security management data, and if it determines that there is a match, permits the maintenance worker to enter the building.

7. A security management system as described in any of claims 1 to 4, wherein the security device is an auto-lock device, and if it is determined that the facial information of the maintenance personnel matches the facial information in the security management data, the security device unlocks the entrance to the building, thereby allowing the maintenance personnel to enter the building.

Images