Access management system

Abstract

To improve security of access management of a user to a resource in a predetermined area.SOLUTION: An access management system manages access of a user to a resource in a predetermined area. The access management system includes one or more storage devices that store map information about the predetermined area and one or more processors. The one or more processors are configured to acquire information about a first resource to which a first user is scheduled to access in the predetermined area, recognize a plurality of access paths reaching the first resource from a movement start position of the first user in the predetermined area based on the map information, select one of the plurality of access paths as a first access path, and set access authority of the first user in the predetermined area such that the first user reaches the first resource by passing through the selected first access path and cannot pass through paths other than the selected first access path.SELECTED DRAWING: Figure 3

Description

[Technical Field]

[0001] TECHNICAL FIELD The present disclosure relates to an access management system that manages user access to resources within a given area. [Background technology]

[0002] Patent Document 1 discloses an access control system that presents a route to a receptionist to a visitor. The access control system has a storage unit that stores route information data that links a first door located between multiple areas with a second door that the visitor must pass through immediately before the first door, and personal information management data that defines, for each visitor, the authority to pass through doors located between multiple areas. The route for a visitor to reach a specific area is generated based on the route information data so as to satisfy the authority to pass stored in the personal information management data. The generated route information is presented on a route information presentation terminal.

[0003] Patent Document 2 discloses a route restriction RFID system. This system uses RFID tags to manage people's entry and exit into and out of a controlled area, and by restricting the route, performs entrance and exit management and traffic control to prevent unauthorized entry through security doors installed within the controlled area. [Prior art documents] [Patent documents]

[0004] [Patent Document 1] Japanese Patent Application Laid-Open No. 2016-162382 [Patent Document 2] Japanese Patent Application Laid-Open No. 2010-211703 Summary of the Invention [Problem to be solved by the invention]

[0005] When a user accesses a resource within a predetermined area, it is undesirable from a security standpoint to give more access authority within the predetermined area than necessary. [Means for solving the problem]

[0006] An access management system according to the present disclosure manages user access to resources within a predetermined area. The access management system includes one or more storage devices that store map information of the predetermined area, and one or more processors. The one or more processors are configured to acquire information about a first resource that a first user plans to access within the predetermined area, recognize multiple access routes from the first user's movement start position within the predetermined area to the first resource based on the map information, select one of the multiple access routes as a first access route, and set access authority for the first user in the predetermined area so that the first user reaches the first resource via the selected first access route and is restricted from using any route other than the selected first access route. [Effects of the Invention]

[0007] According to the present disclosure, first, a first access route is selected from among a plurality of access routes, and then the access authority of the user is set so that the user cannot use any route other than the first access route. This prevents the user from being granted more access authority than necessary. This is preferable from the viewpoint of security. [Brief explanation of the drawings]

[0008] [Figure 1] 1 is a conceptual diagram for explaining an overview of an access management system according to an embodiment. [Figure 2] 1 is a block diagram illustrating a configuration example of an access management system according to an embodiment. [Figure 3] FIG. 1 is a conceptual diagram for explaining an overview of setting of access authority according to an embodiment. [Figure 4] 10 is a flowchart illustrating an example of a processing flow related to setting of access authority according to an embodiment. DETAILED DESCRIPTION OF THE INVENTION

[0009] Embodiments of the present disclosure will be described with reference to the accompanying drawings.

[0010] 1. Overview of Access Control Systems 1 is a conceptual diagram for explaining an overview of an access management system 100 according to an embodiment. The access management system (or simply the management system) 100 is a system that manages access by a user U to a resource RS within a predetermined area 1.

[0011] The predetermined area 1 is an area that is subject to security management. The predetermined area 1 is, for example, a town such as a smart city, or a building such as a company or factory. More specifically, the predetermined area 1 includes multiple individual areas 2-i (i = 1, 2, 3, ...) that are mutually access-restricted.

[0012] Each individual area 2-i includes one or more resources RS. The resources RS are, for example, conference rooms or demonstration experiment spaces. A user U moves between multiple individual areas 2-i to use a certain resource RS. That is, each individual area 2-i also includes a passageway for the user U to move within the predetermined area 1.

[0013] A plurality of gates 3-i (i = 1, 2, 3, ...) are installed in the predetermined area 1. As shown in FIG. 1, the gates 3-i correspond to, for example, entrances and exits between adjacent individual areas 2-i. The gates 3-i are configured to be openable and closable, for example, flapper gates. An authentication device 130 (see FIG. 2) for authenticating a user U is installed around each gate 3-i. When moving within the predetermined area 1, the user U passes through the gate 3-i by, for example, holding an ID (Identification) card over the authentication device 130. Alternatively, for example, biometric authentication such as face authentication or fingerprint authentication may be used to authenticate the user U.

[0014] FIG. 1 shows a user U who requests to travel to a destination G within a predetermined area 1 to use a resource RS. The current location of the user U corresponds to a movement start position S for the user U. In the example shown in FIG. 1, the movement start position S is outside the predetermined area 1, but it may also be within the predetermined area 1. The destination G corresponds to a location within an individual area 2-i in the predetermined area 1 where a resource RS that the user U plans to access is located.

[0015] A user U who desires to use a resource RS operates a communication terminal 120 (see FIG. 2) to reserve the resource RS. In response to the reservation request for the resource RS from the user U, the management system 100 sets for the user U the access authority required to reach the resource RS.

[0016] More specifically, the management system 100 sets access authority for each gate 3-i. If it is confirmed as a result of user authentication using the authentication device 130 that the user U has access authority to a certain gate 3-i, the management system 100 opens the gate 3-i for the user U to pass through. The user U can reach the resource RS (destination G) from the movement start position S by passing through each gate 3-i for which the user U has access authority. In addition, the access authority is set for each user U. The management system 100 opens and closes each gate 3-i so that only users U with access authority can pass through. In other words, users U with access authority can pass through the gate 3-i, and users U without access authority cannot pass through the gate 3-i.

[0017] Regarding the setting of access authority, a method for determining (selecting) an access route from the movement start position S of the user U1 to the resource RS (destination G) within the predetermined area 1 will be described later.

[0018] 2.Configuration example 2 is a block diagram showing an example of the configuration of an access control system 100 according to an embodiment. The control system 100 includes a management device 110, a communication terminal 120, an authentication device 130, a speaker 140, and an irradiation device 150, in addition to the gates 3-i.

[0019] The management device 110 is a computer that manages access by a user U to resources RS within a predetermined area 1. For example, the management device 110 may be installed within the predetermined area 1, or may be a management server (e.g., a cloud server) located at a location away from the predetermined area 1.

[0020] The management device 110 includes a communication device 160, one or more processors 170 (hereinafter simply referred to as "processors 170"), and one or more storage devices 180 (hereinafter simply referred to as "storage devices 180"). The communication device 160 communicates with each of the communication terminal 120 and the authentication device 130 via a communication network.

[0021] The processor 170 executes various processes related to access management to the resource RS. Examples of the processor 170 include a CPU (Central Processing Unit), a GPU (Graphics Processing Unit), an ASIC (Application Specific Integrated Circuit), and an FPGA (Field-Programmable Gate Array). The processor 170 can also be called a "circuitry" or a "processing circuitry." A "circuitry" is hardware that is programmed to realize a described function, or hardware that executes a function. The storage device 180 stores various types of information. Examples of the storage device 180 include a volatile memory, a non-volatile memory, an HDD (Hard Disk Drive), and an SSD (Solid State Drive). The processor 170 reads various types of information from the storage device 180 and stores various types of information in the storage device 180.

[0022] The storage device 180 also stores information such as area map information, area management information, and access authority information. The area map information is map information of a predetermined area 1. The area management information is information for managing the situation within the predetermined area 1. The access authority information is information indicating the correspondence between a user ID and access authority (access authority for each gate 3-i).

[0023] The area map information includes, for example, information regarding the layout of rooms (including resources RS) and passageways within an individual area 2-i, as well as the width of the passageways. The area map information also includes, for example, information regarding the layout of gates 3-i and the width of the gates 3-i. The area map information also includes, for example, information indicating whether the passageways and gates 3-i within the individual area 2-i are barrier-free.

[0024] Area management information includes, for example, user information, congestion status information, maintenance and cleaning information, and reservation type information. User information is information about each user U who uses the specified area 1. User information includes, for example, user ID, attributes (e.g., whether or not the user has a disability), reservation status for use of resource RS, and information about the assigned route (access route selected for user U). Congestion status information is information about the congestion status (degree of congestion) of the specified area 1, and more specifically, indicates the current or predicted distribution of congestion levels within the specified area 1. Maintenance and cleaning information indicates the status of maintenance or cleaning within the specified area 1. Reservation type information indicates whether the reservation for use of resource RS by user U is an individual reservation or a group reservation.

[0025] The functions of the management device 110 may be realized by cooperation between the processor 170 that executes the access management program and the storage device 180. The access management program is a computer program for access management. The access management program is stored in the storage device 180. Alternatively, the access management program may be recorded on a computer-readable recording medium. The access management program may be provided via a network.

[0026] The communication terminal 120 is operated by a user U. The communication terminal 120 is, for example, a mobile terminal such as a smartphone carried by the user U. Alternatively, the communication terminal 120 may be, for example, a fixed terminal installed within the predetermined area 1 (for example, near each gate 3-i).

[0027] The authentication device 130 acquires user information that identifies the user U to be authenticated. The authentication device 130 includes equipment necessary for authentication using a predetermined authentication method. Examples of the predetermined authentication method include authentication of an ID held by the user U, or biometric authentication of the user U's fingerprint, face, or the like. The authentication device 130 is installed, for example, at each gate 3-i. The authentication result is transmitted to the management device 110. In an example where the communication terminal 120 is a fixed terminal, the communication terminal 120 may be configured integrally with the authentication device 130.

[0028] The speaker 140 is installed, for example, near each gate 3-i. If the user U does not have a mobile terminal as the communication terminal 120, the speaker 140 may be used to notify the user U of an access route selected for the user U (access route RT1 described below). Specifically, the speaker 140 may operate in response to a command from the management device 110 (processor 170) and output a sound or voice to guide the user U along the selected access route.

[0029] The irradiation device 150 is installed, for example, near each gate 3-i. If the user U does not have a mobile terminal as the communication terminal 120, the irradiation device 150 may be used to notify the user U of the access route selected for the user U. Specifically, the irradiation device 150 may operate in response to a command from the management device 110 (processor 170) and output light to guide the user U along the selected access route.

[0030] 3. Setting access permissions When a user U accesses a resource RS located within a predetermined area 1, it is undesirable from a security standpoint to grant more access authority within the predetermined area 1 than necessary. More specifically, according to the technology described in Patent Document 1, the access authority for doors located between individual areas among multiple areas is determined in advance for each visitor, and then a route for the visitor is generated. Therefore, access authority for doors other than those on the route assigned to the visitor remains. This means that more access authority than necessary is granted to the visitor. Although the visitor is expected to move along the assigned route, there is a possibility that the visitor may intentionally or accidentally deviate from the route. This is undesirable from a security standpoint.

[0031] 3 is a conceptual diagram for explaining an outline of setting of access authority according to the embodiment. In view of the above-mentioned problems, in the access management system 100 according to the present embodiment, when a user U1 (first user) requests reservation of a resource RS1 (first resource), the processor 170 is configured to execute the following process.

[0032] That is, the processor 170 acquires information about the resource RS1, and then, based on the area map information, recognizes a plurality of access routes RT (RT1 to RT4 in the example shown in FIG. 3) that reach the resource RS1 (i.e., the destination G) from the movement start position S of the user U1 within the predetermined area 1. Then, the processor 170 selects an access route RT1 (first access route), which is one of the recognized plurality of access routes.

[0033] Then, the processor 170 sets the access authority of the user U1 in the specified area 1 so that the user U1 can reach the resource RS1 via the selected access route RT1 and cannot take any route other than the selected access route RT1.

[0034] As described above, according to the access control system 100 of this embodiment, first, the access route RT1 is selected from among the multiple access routes RT, and then the access authority of the user U1 is set so that the user U1 cannot take any route other than the access route RT1. This prevents the user U1 from being granted more access authority than necessary. This is preferable from the viewpoint of security.

[0035] 3-1. Processing flow FIG. 4 is a flowchart showing an example of a process flow related to setting of access authority according to the embodiment.

[0036] In step S100, processor 170 determines whether or not information on resource RS1 that user U1 plans to access (i.e., that user U1 wishes to use) has been acquired (received) via communication terminal 120 operated by user U1. The information on resource RS1 is included in reservation request information for resource RS1 from user U1 transmitted from communication terminal 120. If the information on resource RS1 has been acquired (step S100; Yes), the process proceeds to step S102.

[0037] In step S102, the processor 170 generates and recognizes a plurality of access routes RT (that is, a plurality of candidates for the access route RT1) that reach the resource RS1 from the movement start position S of the user U1.

[0038] More specifically, if the communication terminal 120 is a mobile terminal, the processor 170 may, for example, acquire a movement start position S from the communication terminal 120. Furthermore, if the communication terminal 120 is a fixed terminal, the processor 170 may, for example, acquire the location of the installation site of the fixed terminal as the movement start position S. Furthermore, the processor 170 may, for example, acquire location information of the resource RS1 (destination G) from area map information stored in the storage device 180. Then, the processor 170 generates a plurality of access routes RT based on the area map information by executing a predetermined route search algorithm.

[0039] In step S104 following step S102, the processor 170 selects an access route RT1 from the recognized plurality of access routes RT. Specific examples (first to eighth selection examples) of the method for selecting the access route RT1 will be described later.

[0040] In step S106 following step S104, the processor 170 sets the access authority of the user U1 in the predetermined area 1 along the selected access route RT1. Specifically, in the example shown in FIG. 3, six gates 3-1 to 3-6 installed on the access route RT1 among the multiple gates 3-i in the predetermined area 1 correspond to an example of the "first gate" according to the present disclosure. The processor 170 sets the passage authority of the user U1 for the multiple gates 3-i so that the user U1 can pass through the gates 3-1 to 3-6 but cannot pass through any gates 3-i other than the gates 3-1 to 3-6. The processor 170 also stores information indicating the correspondence between the user ID of the user U1 and the set access authority (access authority for each gate 3-i) in the storage device 180 as access authority information.

[0041] In addition, to ensure high security, it is preferable that the access authority set (granted) to user U1 permits one-way access so that the user cannot turn back through gate 3-i once he or she has passed through it. Furthermore, if user U1 wishes to turn back, processor 170 may present user U1 with an access route for turning back in response to a turn back request from user U1 operating communication terminal 120.

[0042] Furthermore, the access authority is basically set to be valid only for the period corresponding to the reservation time of resource RS1 by user U1. However, taking into consideration the time required for travel to and from resource RS1, the period during which the access authority is valid may include a predetermined buffer time (e.g., 10 minutes) both before and after the reservation time. Furthermore, if user U1 cancels the reservation of resource RS1, the corresponding access authority also becomes invalid.

[0043] In step S108 following step S106, the processor 170 notifies the user U1 of information about the selected access route RT1. Specifically, if the communication terminal 120 is a mobile terminal of the user U1 (i.e., if the user U1 makes a reservation request by operating the communication terminal 120, which is a mobile terminal), the processor 170 notifies the user U1 of the selected access route RT1 via the communication terminal 120. On the other hand, if the user U1 does not have the communication terminal 120 (i.e., if the user U1 makes a reservation request by operating the communication terminal 120, which is a fixed terminal), the notification may be executed as follows. That is, the processor 170 may notify the user U1 of information about the selected access route RT1 by using at least one of guidance by sound or voice output from the speaker 140 and guidance by light output from the irradiation device 150.

[0044] 3-2. Selection method of access route RT1 Here, various specific examples of the method for selecting the access route RT1 in step S104 will be explained.

[0045] 3-2-1. First selection example First, in a first selection example, the processor 170 selects the shortest one of the multiple access routes RT as the access route RT1. According to the first selection example, the access authority granted to the user U1 can be minimized.

[0046] <Examples of selections 2 to 7> The following second to seventh selection examples have in common that they use "area management information" to select the access route RT1.

[0047] According to the technology described in Patent Document 1, the passage authority is determined before the generation of the access route. Therefore, the generation of the access route is bound by the passage authority that was determined earlier, and it is not always possible to flexibly generate an access route according to the situation at the time of route generation.

[0048] In contrast to this, in each of the second to seventh selection examples, the processor 170 selects an access route RT1 from among a plurality of access routes RT according to the situation in the predetermined area 1, based on the area management information stored in the storage device 180. According to such a selection method, at the stage of selecting the access route RT1 from among a plurality of access routes RT, the access authority has not yet been set. Therefore, it is possible to select the access route RT1 according to an arbitrary policy. In other words, the access route RT1 can be selected flexibly (adaptively) according to the situation in the predetermined area 1.

[0049] 3-2-2. Second selection example The area management information used in the second selection example is congestion status information that indicates the current distribution or predicted distribution of congestion levels within the predetermined area 1. Based on the congestion status information stored in the storage device 180, the processor 170 selects the access route RT1 so that the congestion level on the access route RT1 when the user U1 passes through does not exceed a threshold. More specifically, the processor 170 selects the access route RT1 so that, for example, the congestion level of each individual area 2-i located on the access route RT1 does not exceed a threshold.

[0050] The current distribution of congestion levels is the current value of the distribution of users U within the specified area 1, and is identified, for example, based on the reservation status (user information) of resource RS by each user U, and is stored in the storage device 180. The predicted distribution of congestion levels is the predicted value of the distribution of users U within the specified area 1, and is identified, for example, based on the past distribution of users U for each day of the week and time period, and is stored in the storage device 180.

[0051] According to the second selection example, the access route RT1 can be selected so as to suppress congestion. More specifically, even during a time period (e.g., lunch break) when many users U (e.g., employees) are expected to be granted access rights, the access route RT1 for the user U1 can be selected so as to suppress congestion caused by overlapping with the access routes of other users U.

[0052] 3-2-3. Third selection example The area management information used in the third selection example is maintenance and cleaning information that indicates the status of maintenance or cleaning within the specified area 1. Based on the maintenance and cleaning information stored in the storage device 180, the processor 170 selects the access route RT1 so as not to pass through any location undergoing maintenance or cleaning.

[0053] The maintenance and cleaning information is, for example, information indicating the maintenance and cleaning schedule for the individual area 2-i and gate 3-i, and is stored in the storage device 180.

[0054] According to the third selection example, even when maintenance or cleaning is being performed within the predetermined area 1, the access route RT1 can be selected so as to appropriately ensure smooth movement of the user U1.

[0055] 3-2-4. Example of the fourth option The area management information used in the fourth selection example is user information indicating the usage reservation status and the allocated route (access route selected for user U) for each user U who uses the resource RS within the predetermined area 1. The processor 170 recognizes the access route RT2 (second access route) selected (allocated) for user U2 (second user) different from user U1, based on the user information stored in the storage device 180. Then, the processor 170 selects the access route RT1 such that the access route RT1 for user U1 and the access route RT2 for user U2 are not the same in the same time period.

[0056] According to the fourth selection example, the access route RT1 of the user U1 can be selected while suppressing overlap with the access route RT2 of the other user U2.

[0057] More specifically, for example, user U2 may be a user who uses resource RS1 before user U1. The access route RT2 selected for user U2 may be a route for user U2 to travel from resource RS1 to another location. According to the fourth selection example, the access route RT1 for user U1 can be selected so as not to overlap with the access route RT2 (e.g., the return route of user U2) of user U2 who used the same resource RS1 in the time period before user U1.

[0058] 3-2-5. Fifth Selection Example The area management information used in the fifth selection example is user information indicating the attributes (presence or absence of a handicap) of user U. Processor 170 determines whether user U1 is a handicapped user (e.g., a wheelchair user) based on the user information stored in storage device 180. If user U1 is a handicapped user as a result, processor 170 selects a barrier-free route from among the multiple access routes RT as access route RT1.

[0059] According to the fifth selection example, the access route RT1 can be selected while taking into consideration the attribute of the user U1 (having a handicap).

[0060] 3-2-6. Example of the sixth option The area management information used in the sixth selection example is user information indicating the usage reservation status and the assigned route (access route selected for user U) for each user who uses resource RS within the specified area 1. The processor 170 predicts the number of users U who will pass through each of multiple gates 3-i per given time based on the user information stored in the storage device 180. Then, the processor 170 selects an access route RT1 so that the predicted number of users U will not pass through gates 3-i that exceed a threshold.

[0061] According to the sixth selection example, the access route RT1 can be selected so as to suppress congestion.

[0062] 3-2-7. Seventh Selection Example The area management information used in the seventh selection example is reservation type information indicating whether the reservation for use of resource RS1 by user U1 is an individual reservation or a group reservation. The reservation type information is included, for example, in the reservation request information for resource RS1 of user U1 transmitted from communication terminal 120. Processor 170 stores the acquired reservation type information in storage device 180.

[0063] The processor 170 determines whether the reservation for the resource RS1 by the user U1 is an individual reservation or a group reservation based on the reservation type information stored in the storage device 180. If the reservation for the resource RS1 by the user U1 is a group reservation, the processor 170 selects, as the access route RT1, a route from among the multiple access routes RT whose width is greater than a threshold value. More specifically, the processor 170 selects, as the access route RT1, a route whose widths of the passages in the individual areas 2-i and the widths of the gates 3-i are greater than their respective threshold values ​​based on the area map information.

[0064] According to the seventh selection example, the access route RT1 can be selected while taking into consideration the reservation mode of the resource RS1 by the user U1.

[0065] 3-2-8. Example of the 8th selection Also, unlike the first to seventh selection examples described above, the selection of the access route RT1 may be performed according to the desire of the user U1. Specifically, the processor 170 may present information on the recognized plurality of access routes RT to the user U1 via the communication terminal 120 and request the user U1 to select one of the plurality of access routes RT. Then, the processor 170 may select (determine) the route selected by the user U1 as the access route RT1. [Explanation of symbols]

[0066] 1 designated area, 2 individual area, 3 gate, 100 access control system, 110 management device, 120 communication terminal, 130 authentication device, 140 speaker, 150 irradiation device, 160 communication device, 170 processor, 180 storage device

Claims

1. 1. An access management system for managing user access to resources within a predetermined area, comprising: one or more storage devices for storing map information of the predetermined area; one or more processors; Equipped with the one or more processors: acquiring information on a first resource that a first user plans to access in the predetermined area; recognize, based on the map information, a plurality of access routes from a movement start position of the first user within the predetermined area to the first resource; selecting one of the plurality of access routes as a first access route; Setting the access authority of the first user in the predetermined area so that the first user can reach the first resource through the selected first access route and cannot reach the first resource through any route other than the selected first access route. It was configured as Access control system.

2. 2. The access control system of claim 1, The one or more processors select the shortest one of the plurality of access paths as the first access path. Access control system.

3. 2. The access control system of claim 1, the one or more storage devices further store area management information for managing the status within the predetermined area; The one or more processors select the first access route from the plurality of access routes according to the situation in the predetermined area based on the area management information. Access control system.

4. 4. The access control system according to claim 3, the area management information includes congestion status information indicating a current distribution or a predicted distribution of congestion levels within the predetermined area, The one or more processors select the first access route based on the congestion status information so that the congestion degree on the first access route when the first user passes through does not exceed a threshold. Access control system.

5. 4. The access control system according to claim 3, the area management information includes maintenance / cleaning information indicating the status of maintenance or cleaning within the specified area, The one or more processors select the first access route based on the maintenance / cleaning information so as not to pass through a location where maintenance or cleaning is being performed. Access control system.

Images