Security system, security method, and program

Abstract

To notify that an article delivery device or its installation area is not guarded by a security processing part.SOLUTION: A security system comprising: a security processing unit that guards an article delivering and receiving device for delivering and receiving an article or an area in which the article delivering and receiving device is installed; and a notification unit that notifies a predetermined notification destination that the security processing unit is not activated even after a predetermined time elapses in a state in which the security processing unit is deactivated.SELECTED DRAWING: Figure 6

Description

[Technical Field]

[0001] The present invention relates to a security system, a security method, and a program. [Background technology]

[0002] Patent document 1 describes a safe device comprising: a first door provided on a first side, which is one of the ATM corner side and the back yard side of a financial institution; a second door provided on a second side, which is the other of the ATM corner side and the back yard side; a first operating unit provided on the first side and operated to input first information regarding items to be stored through the first door; and a second operating unit provided on the second side and operated to input second information regarding items to be removed through the second door. [Prior art documents] [Patent documents]

[0003] [Patent Document 1] Japanese Patent Application Publication No. 2024-033345 Summary of the Invention [Problem to be solved by the invention]

[0004] Generally, an article transfer device for transferring articles is provided with a security processing unit that guards the article transfer device or its installation area. However, when storing or retrieving an article in the article transfer device, the security processing unit may be disabled. In such a case, the security processing unit is activated after storing or retrieving an article in the article transfer device. However, even in such a case, it is possible that the security processing unit may not be activated. In such a case, the security processing unit is not guarding the article transfer device or its installation area, which is problematic from a security perspective.

[0005] An object of the present invention is to notify that the security processing unit is not guarding an article transfer device or its installation area. [Means for solving the problem]

[0006] With this objective in mind, the present invention provides a security system comprising a security processing unit that guards an item transfer device for transferring items or an area in which the item transfer device is installed, and a notification unit that notifies a predetermined notification destination when the security processing unit is disabled and the security processing unit is not enabled even after a predetermined time has elapsed.

[0007] The notification unit may notify a predetermined notification destination when the security processing unit is disabled and the security processing unit is not enabled even after a predetermined time has elapsed since a predetermined operation was performed on the item transfer apparatus. In this case, the predetermined operation may be an operation to close the door of the item transfer apparatus. The predetermined operation may also be an operation to log out of the item transfer apparatus. The notification unit may switch at least one of the predetermined time and the predetermined notification destination based on the state of the item transfer device. In this case, the state of the item transfer device may be a state related to the opening and closing of a door of the item transfer device. The state of the item transfer device may also be a state related to the user's login or logout of the item transfer device. The notification unit may switch at least one of the predetermined time and the predetermined notification destination based on the current date or the current time. The security system may further include a control unit that controls the security processing unit to be enabled if the item transfer device is in a predetermined state when the security processing unit is disabled and the security processing unit is not enabled even after a predetermined time has elapsed. The notification unit may notify a predetermined notification destination if no operation to log in to the item transfer device is performed even after a predetermined time has elapsed since the security processing unit was disabled.

[0008] The security system may further include an article transfer device. In this case, the article transfer device may include a first door provided on the ATM corner side of the financial institution and a second door provided on the back yard side of the financial institution. In this case, the security processing unit may guard the article transfer device using a security sensor provided on the ATM corner side of the article transfer device. In addition, the security processing unit may guard the area where the article transfer device is installed using a security sensor provided on the ATM corner side.

[0009] The present invention also provides a security method including the steps of: a security processing unit of a computer guarding an item transfer device for transferring items or an area in which the item transfer device is installed; and a notification unit of the computer notifying a predetermined notification destination when the security processing unit is disabled and the security processing unit is not enabled after a predetermined time has elapsed.

[0010] Furthermore, the present invention also provides a program that causes a computer to function as a security processing unit that guards an item transfer device for transferring items or an area in which the item transfer device is installed, and a notification unit that notifies a predetermined notification destination when the security processing unit is disabled and the security processing unit is not enabled even after a predetermined time has elapsed. [Effects of the Invention]

[0011] According to the present invention, it is possible to notify that the security processing unit is not guarding the article transfer device or its installation area. [Brief explanation of the drawings]

[0012] [Figure 1] 1 is a diagram showing an outline of a safe device according to an embodiment of the present invention; [Figure 2] 1 is a perspective view showing an example of the external configuration of a safe device according to an embodiment of the present invention; [Figure 3]1 is a diagram showing an example of the external configuration of a safe device according to the present embodiment when a small door of the locking / unlocking operation unit is opened. FIG. [Figure 4] 1 is a perspective view showing an example of the external configuration of a safe device according to an embodiment of the present invention; [Figure 5] 1 is a diagram illustrating an example of the configuration of a safe system according to an embodiment of the present invention. [Figure 6] 1 is a diagram schematically illustrating a security system according to an embodiment of the present invention. [Figure 7] 2 is a block diagram showing an example of a functional configuration of a safe device according to the present embodiment. FIG. [Figure 8] 10 is a diagram showing a function of a control unit to switch notification destinations in notification processing. FIG. [Figure 9] 10 is a flowchart showing an example of pre-operation operation of the safe device according to the present embodiment. [Figure 10] 10 is a flowchart showing an example of operation after work is performed on the safe device according to the present embodiment. [Figure 11A] 10 is a flowchart showing the processing content of a third notification process. [Figure 11B] 10 is a flowchart showing the processing content of a third notification process. [Figure 12] FIG. 10 is a diagram illustrating an example of a first screen that may cause a problem if automatic logout is performed. [Figure 13] FIG. 10 is a diagram illustrating a second screen that may cause a problem if automatic logout is performed. [Figure 14] 10 is a flowchart showing an example of the operation of a safe apparatus according to a first modified example. [Figure 15] FIG. 10 is a diagram illustrating an example of a pop-up screen displayed by a safe apparatus in a second modified example. [Figure 16] FIG. 10 is a diagram illustrating an example of the configuration of a safe device according to a third modified example. DETAILED DESCRIPTION OF THE INVENTION

[0013] Hereinafter, embodiments of the present invention will be described in detail with reference to the accompanying drawings.

[0014] [Background and Overview of the Implementation Form] Financial institutions entrust important items and other goods to transportation companies every day for collection and delivery between branches and centers, for example. Items to be collected and delivered include checks that need to be sent on the same day, so typically, mail deliveries are sent to each branch at least twice a day. However, as financial institutions began using electronic checks from the second half of 2022, same-day delivery of mail deliveries is no longer necessary. Therefore, financial institutions are considering reducing the number of mail deliveries and the labor costs. Currently, collected and delivered items are handed over in person, but if non-face-to-face delivery is possible using an item delivery device, further efficiency improvements can be expected.

[0015] On the other hand, the number of ATMs (Automatic Teller Machines) installed at financial institutions is decreasing year by year. As a result, some financial institutions are removing ATMs and creating vacant spaces. Hereinafter, we will refer to such vacant spaces created by ATM removal as "vacant ATM spaces." As a result, some financial institutions are exploring ways to utilize vacant ATM spaces. For this reason, it is conceivable to install the goods transfer device used for the transfer of goods in the empty space of the ATM, as this is a space where both financial institutions and security companies can operate safely.

[0016] Hereinafter, the article transfer device will be described as a "safe device." Also, a bank will be assumed as the financial institution, and its staff will be described as "bank employees." Furthermore, a security transportation company will be assumed as the business that transfers articles between financial institutions, and its staff will be described as "security transportation personnel."

[0017] FIG. 1 is a diagram showing an outline of a safe apparatus 1 according to the present embodiment. As shown in the figure, the safe apparatus 1 in this embodiment is installed between the ATM corner S1 and the backyard S2. The space between the wall W and floor F that separates the ATM corner S1 and the backyard S2 is the free space for the ATM. Therefore, the safe apparatus 1 has a housing size that fits into the free space for the ATM. The housing size is, for example, about 1.2 m in height and 1 m in width. Here, the ATM corner S1 refers to a space where general customers can enter to operate the ATM from the front. The ATM corner S1 is also called an automatic transaction machine corner or a CD (cash dispenser) corner. The backyard S2 refers to a space where financial institution employees operate the ATM from the rear. In other words, the backyard S2 is a space that general customers cannot enter.

[0018] In this state, safe apparatus 1 is used to receive and deliver items delivered by a security transport company to a financial institution. That is, first, a security transport officer from the security transport company stores the items to be delivered in safe apparatus 1 on the ATM corner S1 side. Then, a bank employee of the financial institution takes out the delivered items from safe apparatus 1 on the backyard S2 side. The safe device 1 is also used to deliver and receive items collected by a security transport company from a financial institution. That is, first, a bank employee of the financial institution stores the collected items in the safe device 1 on the backyard S2 side. Then, a security transport officer from the security transport company takes the collected items out of the safe device 1 on the ATM corner S1 side. In some cases, a bank employee of the financial institution may operate the safe 1 at the ATM corner S1 side. However, in the following description, it is assumed that only a security guard operates the safe 1 at the ATM corner S1.

[0019] Here, as shown in the figure, the safe device 1 has an ATM corner-side housing 10 and a backyard-side housing 20. The ATM corner-side housing 10 is located on the ATM corner S1 side. The backyard-side housing 20 is located on the backyard S2 side. However, the internal space of the safe device 1 must have a structure that allows the above-mentioned items to be exchanged. Therefore, the safe device 1 is not partitioned between the ATM corner-side housing 10 and the backyard-side housing 20, but is integrated. This internal space is fireproof and theft-proof.

[0020] Generally, a security sensor is installed in the ATM corner S1. The security sensor is activated outside business hours, and if there is an intruder, the security sensor detects the intruder and notifies a security company, etc. In this state, the security sensor is activated. On the other hand, when a transport officer delivers or collects goods outside of business hours, he or she deactivates the security sensor before entering ATM corner S1. In this state, the security sensor is disabled. Specifically, the security sensor itself can be turned off, or the security sensor can be left on but its alarm function can be disabled. After completing work, the transport officer resets the security sensor when leaving ATM corner S1.

[0021] If the security guard forgets to reset the security sensor at this time, the security sensor at ATM corner S1 will not be operational, which is a problem from a security standpoint.

[0022] [External configuration of safe device] Fig. 2 is a perspective view showing an example of the external configuration of the safe apparatus 1 in this embodiment. In particular, Fig. 2 shows the external configuration of the safe apparatus 1 as seen from the ATM corner side. Therefore, Fig. 2 shows the components of the ATM corner side housing 10. As shown in the figure, the ATM corner-side housing 10 includes a door 11, a locking / unlocking mechanism 12, and an opening / closing detection mechanism 122. The ATM corner-side housing 10 further includes a locking / unlocking operation unit 13 and an operation terminal 14. The ATM corner side is an example of the first side.

[0023] Door 11 is opened and closed when a security officer puts or takes out an article. Door 11 is an example of a first door provided on the first side. The locking / unlocking mechanism 12 locks and unlocks the door 11. It is preferable that the locking / unlocking mechanism 12 is controlled so as not to unlock the door 11 when a door 21 (described later) on the backyard side is unlocked. The open / close detection mechanism 122 detects the open / close state of the door 11. As the open / close detection mechanism 122, for example, an open / close detection switch or an open / close sensor may be used. The locking / unlocking operation unit 13 is operated by a security guard so that the locking / unlocking mechanism 12 locks and unlocks the door 11 when storing or retrieving items in an emergency such as a power outage. As will be described later, the locking / unlocking operation unit 13 includes a key operation unit 131, a numeric keypad 132, and a small door 133. However, only the small door 133 is visible in FIG. 2.

[0024] The operation terminal 14 is a terminal used by the security officer when operating the safe device 1. The operation terminal 14 includes a display operation unit 141, a camera 142, a light emitting unit 143, a reading unit 144, and a printer 145.

[0025] The display operation unit 141 is, for example, a touch panel display, and receives information input by the user and displays information to be presented to the user.

[0026] Specifically, the display operation unit 141 is operated by a security guard so that the locking / unlocking mechanism 12 locks and unlocks the door 11 during normal storage of goods when there is no power outage or the like. Furthermore, when the security guard inputs storage information regarding the items to be stored when storing the items, the display operation unit 141 accepts this storage information. Here, the storage information may be any information regarding the items to be stored. For example, the storage information may be the name and number of the items. On the other hand, the display operation unit 141 is operated by a security guard so that the locking / unlocking mechanism 12 locks and unlocks the door 11 when retrieving goods under normal circumstances when there is no power outage or the like. Furthermore, when a security guard inputs removal information regarding the item to be removed when removing the item, the display operation unit 141 accepts this removal information. Here, the removal information may be any information regarding the item to be removed. For example, the removal information may be information resulting from the security guard actually removing the item stored by the bank employee and determining whether the storage information input by the bank employee when storing the item is correct.

[0027] Furthermore, when the open / close detection mechanism 122 detects that the door 11 has been open for a predetermined time or longer, the display operation unit 141 displays that fact. Here, the predetermined time is, for example, one minute. However, the predetermined time can be set. On the other hand, the display operation unit 141 may display a message to the effect that the backyard door 21 (described later) has been open for a predetermined period of time or longer when the backyard door opening / closing detection mechanism 222 (described later) detects this. The display operation unit 141 is an example of a first display device provided on the first side.

[0028] The camera 142 captures an image of the transport officer operating the display operation unit 141. In particular, the camera 142 is directed toward the position where the face of the transport officer operating the display operation unit 141 is located, and captures an image of the face of the transport officer. The captured image is then recorded in the safe device 1, as will be described later.

[0029] When an article is stored in the safe apparatus 1, the light emitting unit 143 notifies the ATM corner by emitting light to that effect. The light emitting unit 143 may be realized by, for example, a lamp, but may be realized by any device that emits light. Incidentally, the information notified by the light emitting unit 143 may be configured to be notified by the display operation unit 141.

[0030] When the display operation unit 241 (described later) on the backyard side is operated, the light emitting unit 143 may emit light to notify the ATM corner side that the display operation unit 241 on the backyard side is being operated. Alternatively, the safe apparatus 1 may notify the ATM corner side that the display operation unit 241 on the backyard side is being operated by means other than light emission, such as sound.

[0031] When the open / close detection mechanism 122 detects that the door 11 has been open for a predetermined time or longer, the light emitting unit 143 may emit light to notify the ATM corner of this fact. Alternatively, the safe apparatus 1 may notify the ATM corner that the door 11 has been open for a predetermined time or longer by means other than light emission, such as sound. The light emitting unit 143 may emit light to notify the ATM corner when the backyard door 21 (described later) has been open for a predetermined time or longer. Alternatively, the safe apparatus 1 may notify the ATM corner that the backyard door 21 has been open for a predetermined time or longer by means other than light emission, such as sound.

[0032] When an error occurs in the safe apparatus 1, the light emitting unit 143 may emit light to notify the ATM corner side of the error. When the printer 145 runs out of paper, the light emitting unit 143 may emit light to notify the ATM corner of this. When any other state change occurs in the safe apparatus 1, the light emitting unit 143 may notify the ATM corner side of that fact by emitting light.

[0033] Here, one light emitting unit 143 is configured to notify multiple states of the safe apparatus 1. This can be achieved, for example, by associating a light emitting pattern with each of the multiple states and causing one light emitting unit 143 to emit light in the light emitting pattern corresponding to the state to be notified. However, this is not limiting, and multiple light emitting units 143 may be configured to notify multiple states of the safe apparatus 1. This can be achieved, for example, by associating a light emitting unit 143 with each of the multiple states and causing the light emitting unit 143 corresponding to the state to be notified to emit light.

[0034] The reading unit 144 reads information from an IC (Integrated Circuit) card when the IC card is held over the reader. Alternatively, the reading unit 144 may read information from a smartphone or the like equipped with FELICA (registered trademark) functionality when the smartphone or the like is held over the reader. The information read in this manner is used for authentication of the security guard when logging in. However, authentication at the time of login may be performed using biometric information read by a biometric information reading unit (not shown). Alternatively, authentication at the time of login may be performed using an ID and password input from the display operation unit 141.

[0035] The printer 145 prints on paper such as roll paper a copy of the processing of the safe apparatus 1. The paper printed by the printer 145 is discharged, for example, to the front of the safe apparatus 1.

[0036] FIG. 3 is a diagram showing an example of the external configuration when the small door 133 of the locking / unlocking operation unit 13 of the safe apparatus 1 in this embodiment is open. As shown in the figure, the locking / unlocking operation unit 13 includes a key operation unit 131 , a numeric keypad 132 , and a small door 133 .

[0037] In an emergency such as a power outage, the key operation unit 131 locks and unlocks the locking / unlocking mechanism 12 by inserting a physical key and operating it.

[0038] The numeric keypad 132 is provided to lock and unlock the locking / unlocking mechanism 12 without using a physical key in an emergency such as a power outage. The transport officer can unlock the locking / unlocking mechanism 12 by entering a password from the numeric keypad 132. The numeric keypad 132 may be powered by a battery, for example, so that it can operate even in an emergency such as a power outage. If only the key operation unit 131 were provided, the transport officer would patrol multiple stores to collect and deliver goods, and would therefore need to carry physical keys for multiple safe devices 1 with him / her at all times in case of an emergency. Therefore, in this embodiment, the numeric keypad 132 is provided so that the physical keys for multiple safe devices 1 do not need to be carried with him / her at all times. It is desirable that the password entered into the numeric keypad 132 be a password that can only be used for a certain period of time. Examples of such passwords include a one-day password and a one-time password.

[0039] The small door 133 hides the key operation unit 131 and the numeric keypad 132 so that the safe device 1 installed in the empty space of the ATM does not attract the interest of general customers.

[0040] Fig. 4 is a perspective view showing an example of the external configuration of the safe apparatus 1 in this embodiment. In particular, Fig. 4 shows the external configuration of the safe apparatus 1 as seen from the backyard side. Therefore, Fig. 4 shows the components of the backyard-side housing 20. As shown in the figure, the backyard side housing 20 includes a door 21, a locking / unlocking mechanism 22, and an opening / closing detection mechanism 222. The backyard side housing 20 further includes a locking / unlocking operation unit 23 and an operation terminal 24. The backyard side is an example of the second side opposite to the first side.

[0041] Door 21 is opened and closed when a bank employee puts or takes out an item. Door 21 is an example of a second door provided on the second side. The locking / unlocking mechanism 22 locks and unlocks the door 21. It is preferable that the locking / unlocking mechanism 22 is controlled so as not to unlock the door 21 when the door 11 on the ATM corner side is unlocked. The open / close detection mechanism 222 detects the open / close state of the door 21. As the open / close detection mechanism 222, for example, an open / close detection switch or an open / close sensor may be used. The locking / unlocking operation unit 23 is operated by a bank clerk so that the locking / unlocking mechanism 22 locks and unlocks the door 21 when storing or retrieving items in an emergency such as a power outage. The locking / unlocking operation unit 23 includes a key operation unit 231.

[0042] In an emergency such as a power outage, the key operation unit 231 locks and unlocks the locking / unlocking mechanism 22 by inserting a physical key and operating it. There is no numeric keypad in the backroom because the only physical key used by bank employees is the physical key for their own bank's safe device 1, and there is no need for them to always carry physical keys for multiple safe devices 1 in case of an emergency. There is also no small door on the back yard side. This is because general customers do not enter the back yard side, and there is no reason to not want general customers to be interested in it. However, a small door may be installed on the back yard side.

[0043] The operation terminal 24 is a terminal used by a bank clerk to operate the safe apparatus 1. The operation terminal 24 includes a display operation unit 241 , a camera 242 , a light emitting unit 243 , and a reading unit 244 .

[0044] The display operation unit 241 is, for example, a touch panel display, and receives information input by the user and displays information to be presented to the user.

[0045] Specifically, the display operation unit 241 is operated by a bank clerk so that the locking / unlocking mechanism 22 locks and unlocks the door 21 during normal storage of goods when there is no power outage or the like. When a bank employee inputs storage information about the items to be stored, the display operation unit 241 accepts the storage information. The storage information may be any information about the items to be stored. For example, the storage information may be the name and number of items. On the other hand, the display operation unit 241 is operated by a bank clerk so that the locking / unlocking mechanism 22 locks and unlocks the door 21 when taking out an item under normal circumstances when there is no power outage or the like. Furthermore, when a bank employee inputs removal information regarding the item to be removed when removing the item, the display operation unit 241 accepts this removal information. Here, the removal information may be any information regarding the item to be removed. For example, the removal information may be information resulting from the bank employee actually removing the item stored by the security guard and determining whether the storage information input by the security guard when storing the item is correct.

[0046] Furthermore, when the open / close detection mechanism 222 detects that the door 21 has been open for a predetermined time or longer, the display operation unit 241 displays that fact. Here, the predetermined time is, for example, one minute. However, the predetermined time can be set. On the other hand, when the open / close detection mechanism 122 on the ATM corner side detects that the door 11 on the ATM corner side has been open for a predetermined period of time or more, the display operation unit 241 may display that fact. The display operation unit 241 is an example of a second display device provided on the second side.

[0047] The camera 242 captures an image of the bank clerk operating the display operation unit 241. In particular, the camera 242 is directed toward the position where the face of the bank clerk operating the display operation unit 241 is located, and captures an image of the bank clerk's face. The captured image is then recorded in the safe apparatus 1, as will be described later.

[0048] When an article is stored in the safe device 1, the light emitting unit 243 notifies the backyard side by emitting light to that effect. The light emitting unit 243 may be realized by, for example, a lamp, but may be realized by any device that emits light. Incidentally, the information notified by the light emitting unit 243 may be configured to be notified by the display operation unit 241.

[0049] When the display operation unit 141 on the ATM corner side is operated, the light emitting unit 243 may emit light to notify the backyard side that fact. Alternatively, the safe apparatus 1 may notify the backyard side that the display operation unit 141 on the ATM corner side is operated by means other than light emission, such as sound.

[0050] When the open / close detection mechanism 222 detects that the door 21 has been open for a predetermined time or longer, the light emitting unit 243 may emit light to notify the backyard side of that fact. Alternatively, the safe apparatus 1 may notify the backyard side that the door 21 has been open for a predetermined time or longer by means other than light emission, such as sound. The light emitting unit 243 may emit light to notify the backyard side when the door 11 on the ATM corner side has been open for a predetermined time or longer. Alternatively, the safe apparatus 1 may notify the backyard side that the door 11 on the ATM corner side has been open for a predetermined time or longer by means other than light emission, such as sound.

[0051] When an error occurs in the safe apparatus 1, the light emitting unit 243 may emit light to notify the backyard side of the occurrence of the error. When the printer 145 at the ATM corner runs out of paper, the light emitting unit 243 may emit light to notify the backyard side of the situation. When any other state change occurs in the safe apparatus 1, the light emitting unit 243 may notify the backyard side of that fact by emitting light.

[0052] Here, one light emitting unit 243 is configured to indicate multiple states of the safe apparatus 1. This can be achieved, for example, by associating a light emitting pattern with each of the multiple states and causing one light emitting unit 243 to emit light in the light emitting pattern corresponding to the state to be notified. However, this is not limiting, and multiple light emitting units 243 may be configured to indicate multiple states of the safe apparatus 1. This can be achieved, for example, by associating a light emitting unit 243 with each of the multiple states and causing the light emitting unit 243 corresponding to the state to be notified to emit light.

[0053] The reading unit 244 reads information from an IC (Integrated Circuit) card when the IC card is held over the counter. Alternatively, the reading unit 244 may read information from a smartphone or the like equipped with FELICA (registered trademark) functionality when the smartphone or the like is held over the counter. The information read in this manner is used for authentication of the bank employee when logging in. However, authentication at the time of login may be performed using biometric information read by a biometric information reading unit (not shown). Alternatively, authentication at the time of login may be performed using an ID and password entered from the display operation unit 241.

[0054] There is no printer installed in the backyard because the bank does not want to print out the operation information for the safe apparatus 1 on paper to take home. In other words, since the safe apparatus 1 itself is installed in the bank, if the bank wants to check the operation information, it can check the operation information stored in the safe apparatus 1 directly.

[0055] [Safe system configuration] FIG. 5 is a diagram showing an example of the configuration of a safe system 100 according to this embodiment. As shown in the figure, the safe system 100 includes a safe device 1 and mobile terminals 2 and 3. The safe system 100 further includes a security transport company server 4, a management computer 5, and a management center server 6. The safe system 100 further includes a security sensor system 70 and a monitoring server 75. The safe system 100 further includes a communication line 80 such as a LAN (Local Area Network). The safe system 100 further includes a communication line 81 such as the Internet, and access points 82 and 83 connected to the communication line 81.

[0056] The safe device 1 is the safe device 1 described in Figures 1 to 4. That is, the safe device 1 has a door 11, a locking / unlocking mechanism 12, a locking / unlocking operation unit 13, and an operation terminal 14 on the ATM corner side. The safe device 1 also has a door 21, a locking / unlocking mechanism 22, a locking / unlocking operation unit 23, and an operation terminal 24 on the backyard side.

[0057] The mobile terminal 2 is a mobile terminal used by a security guard of a security transport company. The mobile terminal 2 is connected to the safe apparatus 1 via the access point 82, the communication line 81, and the communication line 80. This allows the mobile terminal 2 to collect device information from the safe apparatus 1 and provide instruction information to the safe apparatus 1. Note that the access point 82 is merely an example. The mobile terminal 2 may be connected to the safe apparatus 1 via the same access point as the mobile terminal 3. Alternatively, the mobile terminal 2 may be connected to the safe apparatus 1 via an access point connected to the communication line 80. For example, a smartphone or a tablet terminal may be used as the mobile terminal 2.

[0058] The mobile terminal 3 is a mobile terminal used by a bank employee of a financial institution. The mobile terminal 3 is connected to the safe apparatus 1 via the access point 83, the communication line 81, and the communication line 80. This allows the mobile terminal 3 to collect device information from the safe apparatus 1 and provide instruction information to the safe apparatus 1. Note that the access point 83 is merely an example. The mobile terminal 3 may be connected to the safe apparatus 1 via the same access point as the mobile terminal 2. Alternatively, the mobile terminal 3 may be connected to the safe apparatus 1 via an access point connected to the communication line 80. The mobile terminal 3 may be, for example, a smartphone or a tablet terminal.

[0059] The security transport company server 4 is a server computer installed at the security transport company. The security transport company server 4 manages security transport personnel or their mobile terminals 2, delivery vehicles, safe device 1, etc. The security transport company server 4 is connected to the safe device 1 via communication lines 81 and 80. This allows the security transport company server 4 to collect device information from the safe device 1 and provide instruction information to the safe device 1. A PC, for example, may be used as the security transport company server 4.

[0060] The management computer 5 is a computer that manages devices within the branch of a financial institution. Here, the devices managed by the management computer 5 include a currency processing device (not shown) in addition to the safe device 1. The management computer 5 is connected to the safe device 1 and the like via a communication line 80. This allows the management computer 5 to collect device information from the safe device 1 and the like and to provide instruction information to the safe device 1 and the like. A PC, for example, may be used as the management computer 5.

[0061] The management center server 6 is a server computer that manages multiple branches of a financial institution. The management center server 6 is connected to the safe device 1 of each branch via a communication line 81 and a communication line 80 of each branch. This allows the management center server 6 to collect device information from the safe device 1 of each branch and to provide instruction information to the safe device 1 of each branch. A PC, for example, may be used as the management center server 6.

[0062] The security sensor system 70 is a system that guards the safe device 1 or the area where the safe device 1 is installed. The monitoring server 75 is a server computer that monitors the operating status of the safe apparatus 1. In this embodiment, the monitoring server 75 particularly monitors the detection status of the security sensor system . Security sensor system 70 and monitoring server 75 are described in more detail below.

[0063] FIG. 6 is a diagram that shows a schematic diagram of the portion consisting of the security sensor system 70 and the monitoring server 75 shown in FIG.

[0064] The security sensor system 70 includes a security sensor 71 and an operation unit 72 . The security sensor 71 is a sensor that guards the safe device 1 or the ATM corner S1, which is an area where the safe device 1 is installed. In that sense, the security sensor system 70 is an example of a security processing unit that guards an article transfer device for transferring articles or an area where an article transfer device is installed. The security sensor 71 may be, for example, a vibration sensor. The vibration sensor may be attached in a position where it can detect when the safe apparatus 1 is shaken from the ATM corner S1 side. When the vibration sensor detects vibration of the safe apparatus 1, it notifies the monitoring server 75 of this. In this case, the security sensor system 70 is an example of a security processing unit that uses a security sensor provided on the ATM corner side of the article transfer apparatus to guard the article transfer apparatus. Alternatively, the security sensor 71 may be, for example, an infrared sensor. The infrared sensor may be attached to the ATM corner S1 side so as to detect an intruder into the ATM corner S1. When the infrared sensor detects an intruder into the ATM corner S1, it notifies the monitoring server 75 of this. In this case, the security sensor system 70 is an example of a security processing unit that uses a security sensor provided on the ATM corner side of the area where the article transfer device is installed to guard the area.

[0065] The operation unit 72 is installed near the entrance E of the ATM corner S1. When operated by a person with predetermined authority, the operation unit 72 activates or deactivates the security sensor 71. Here, the predetermined authority may be verified by reading an ID card or entering a PIN number.

[0066] The monitoring server 75 is installed in the monitoring center M. The monitoring server 75 receives from the security sensor 71 a notification that the safe device 1 has vibrated or that an intruder has been detected in the ATM corner S1. The monitoring server 75 then notifies predetermined notification destinations. Here, the notification destinations include the mobile terminal 2 of the security transport officer, the security transport company server 4, etc. The notification destinations also include the mobile terminal 3 of the bank employee at the branch where the safe device 1 is installed, and the management computer 5. In this case, the monitoring server 75 is an example of a notification unit.

[0067] Here, the security sensor 71 transmits the detected content to the monitoring server 75, but this is not limited to this. The security sensor 71 may transmit the detected content to the safe device 1, and the safe device 1 may transmit the detected content to the monitoring server 75. In this case, as described above, the monitoring server 75 may also allocate the notification destinations. Alternatively, the safe device 1 may notify the monitoring server 75 of the notification destinations and have the monitoring server 75 make the notification. Furthermore, the safe device 1 may itself allocate the notification destinations. Below, an example will be described in which the safe device 1 itself allocates the notification destinations in this way.

[0068] [Safe device functional configuration] FIG. 7 is a block diagram showing an example of the functional configuration of the safe apparatus 1 according to this embodiment. As shown in the figure, safe apparatus 1 includes a locking / unlocking mechanism 12 and an opening / closing detection mechanism 122. Safe apparatus 1 further includes a display operation unit 141, a camera 142, a light-emitting unit 143, a reading unit 144, and a printer 145. Safe apparatus 1 further includes a locking / unlocking mechanism 22 and an opening / closing detection mechanism 222. Safe apparatus 1 further includes a display operation unit 241, a camera 242, a light-emitting unit 243, and a reading unit 244. Safe apparatus 1 further includes a control unit 30, a memory unit 40, and a communication unit 50.

[0069] The locking / unlocking mechanism 12 and the open / close detection mechanism 122 have already been described using FIGS. 2 to 4, so a description thereof will be omitted here. The display operation unit 141, camera 142, light emitting unit 143, reading unit 144, and printer 145 have already been described using FIGS. 2 to 4, and so a description thereof will be omitted here. The locking / unlocking mechanism 22 and the open / close detection mechanism 222 have also been described using FIGS. 2 to 4, so a description thereof will be omitted here. The display operation unit 241, camera 242, light emitting unit 243, and reading unit 244 have already been described using FIGS. 2 to 4, and so a description thereof will be omitted here.

[0070] The control unit 30 includes an arithmetic circuit such as a CPU (Central Processing Unit), etc. The control unit 30 controls each part of the safe apparatus 1 in accordance with an operation program stored in the storage unit 40.

[0071] In particular, the control unit 30 determines that a login operation to the safe apparatus 1 has not been performed for a predetermined time or longer since the security sensor 71 was deactivated. In this case, the control unit 30 performs a first notification process. Here, the predetermined time may be, for example, five minutes. The predetermined time may be set in one-minute increments. The deactivation of the security sensor 71 may be detected by the communication unit 50. The absence of a login operation to the safe apparatus 1 may be detected by the display operation unit 141. Furthermore, the notification destination in the first notification process may be a predetermined notification destination. The predetermined notification destination may be switched depending on various conditions. In this case, the control unit 30 is an example of a notification unit that notifies a predetermined notification destination when a login operation to the item transfer apparatus has not been performed even after a predetermined time has elapsed since the security processing unit was disabled.

[0072] Furthermore, the control unit 30 determines that the security sensor 71 is not reset for a predetermined time or more while the security sensor 71 is in a deactivated state. In this case, the control unit 30 performs a second notification process. Here, the predetermined time may be, for example, five minutes. The predetermined time may be set in one-minute increments. The fact that the security sensor 71 is not reset may be detected by the communication unit 50. Furthermore, the notification destination in the second notification process may be a predetermined notification destination. The predetermined notification destination may be switched depending on various conditions. In this case, the control unit 30 is an example of a notification unit that notifies a predetermined notification destination when the security processing unit is disabled and the security processing unit is not enabled even after a predetermined time has passed.

[0073] The control unit 30 determines that the security sensor 71 is not reset for a predetermined time or more after the security officer has finished working on the safe device 1. In this case, the control unit 30 performs a second notification process. In this case, the control unit 30 is an example of a notification unit that notifies a predetermined notification destination when the security processing unit is disabled and the security processing unit is not enabled even after a predetermined time has passed since a predetermined operation was performed on the article transfer device.

[0074] At this time, the control unit 30 may determine that work on the safe apparatus 1 has ended when the door 11 of the safe apparatus 1 has been closed. The closure of the door 11 of the safe apparatus 1 may be detected by the open / close detection mechanism 122. In this case, the control unit 30 is an example of a notification unit that notifies a predetermined notification destination when the security processing unit is disabled and the security processing unit is not enabled even after a predetermined time has elapsed since an operation to close the door of the article transfer apparatus was performed.

[0075] Alternatively, the control unit 30 may determine that work on the safe apparatus 1 has ended when a logout operation has been performed from the safe apparatus 1. Here, the display operation unit 141 may detect that a logout operation has been performed from the safe apparatus 1. In this case, the control unit 30 is an example of a notification unit that notifies a predetermined notification destination when the security processing unit is disabled and the security processing unit is not enabled even after a predetermined time has elapsed since an operation to log out from the article transfer apparatus was performed.

[0076] However, in the following description, it is assumed that the work on the safe apparatus 1 is completed when the door 11 of the safe apparatus 1 is closed and a logout operation from the safe apparatus 1 is performed.

[0077] In this case, the control unit 30 may notify the notification destination and automatically forcibly reset the security sensor 71. For example, the control unit 30 may forcibly reset the security sensor 71 when there is no bank employee in the store. The control unit 30 may also forcibly reset the security sensor 71 when the safe apparatus 1 is in a state where operation has been completed. Here, the control unit 30 may determine that operation has been completed when the door 11 of the safe apparatus 1 is closed. The control unit 30 may also determine that operation has been completed when a logout operation from the safe apparatus 1 is performed. In this case, the control unit 30 is an example of a control unit that controls the security processing unit to be enabled if the item transfer apparatus is in a predetermined state when the security processing unit is disabled and is not enabled even after a predetermined time has passed.

[0078] Furthermore, instead of the control unit 30 forcibly resetting the security sensor 71, another device may forcibly reset the security sensor 71. For example, the monitoring server 75 may forcibly reset the security sensor 71 remotely.

[0079] Furthermore, the control unit 30 determines that a logout operation from the safe apparatus 1 is not performed for a predetermined time or longer while the security officer is working at the safe apparatus 1. In this case, the control unit 30 performs a third notification process. Here, the predetermined time may be, for example, five minutes. The predetermined time may be set in one-minute increments. The display operation unit 141 may detect that a logout operation from the safe apparatus 1 has been performed. Furthermore, the notification destination in the third notification process may be a predetermined notification destination. The predetermined notification destination may be switched depending on various conditions.

[0080] In this case, the control unit 30 may determine that work is being performed on the safe device 1 if the door 11 of the safe device 1 is not closed. The fact that the door 11 of the safe device 1 is not closed may be detected by the open / close detection mechanism 122. In this case, the control unit 30 may determine that work is being performed on the safe device 1 even if a logout operation from the safe device 1 has been performed.

[0081] When performing these notification processes, the control unit 30 may notify the operator in advance of the notification via the safe apparatus 1 a predetermined time beforehand. Here, the predetermined time may be, for example, one minute. The control unit 30 may also notify the operator in advance by displaying on the display operation unit 141 that the notification process will be performed.

[0082] The storage unit 40 includes a ROM (Read Only Memory), a RAM (Random Access Memory), etc. The storage unit 40 stores the operation program of the control unit 30 and is also used as a work area during control processing by the control unit 30. The operation program includes a program for the control unit 30 to execute processing described below. The storage unit 40 also stores storage information relating to the items stored in the safe apparatus 1. Furthermore, the storage unit 40 also stores operation information regarding operations performed by the security guard or bank employee on the safe apparatus 1. In this case, the storage unit 40 may store a facial image of the security guard or bank employee in association with the operation content.

[0083] The communication unit 50 communicates information with other devices via a communication line. Specifically, the communication unit 50 may communicate information with the security transport officer's mobile terminal 2, the bank employee's mobile terminal 3, etc. The communication unit 50 may also communicate information with the security transport company server 4, the management computer 5, the management center server 6, etc. In this case, the information that the safe device 1 sends to other devices includes device information of the safe device 1, etc. The information that the safe device 1 receives from other devices includes instruction information for the safe device 1, etc.

[0084] The communication unit 50 also receives a detection signal from the security sensor 71. This detection signal includes information that the security sensor 71 has detected vibrations of the safe apparatus 1 or an intruder in the installation area of ​​the safe apparatus 1. This detection signal also includes a signal indicating whether the security sensor 71 is turned on or not. At that time, the communication unit 50 notifies other devices of the operation on the safe device 1. The contents of this notification include the fact that a login operation to the safe device 1 has not been performed for a predetermined time or more since the security sensor 71 was deactivated. The contents of this notification also include the fact that a logout operation from the safe device 1 has not been performed for a predetermined time or more while the security officer is working at the safe device 1. Alternatively, the communication unit 50 notifies other devices about the setting of the security sensor 71. The content of this notification includes the fact that the security sensor 71 has not been reset for a predetermined time or more after being deactivated.

[0085] Furthermore, when multiple safe devices 1 are installed in one store, the communication unit 50 may communicate with other safe devices 1. Specifically, the communication unit 50 may transmit and receive device status and setting information with other safe devices 1. In other words, the communication unit 50 may synchronize device status and setting information with other safe devices 1.

[0086] 8 is a diagram showing the function of switching notification destinations in notification processing by the control unit 30. In the diagram, this function is shown in the form of a notification destination setting table in which notification destinations are set for combinations of condition items and condition contents.

[0087] First, a case where the condition item is the occurrence time period will be described. Next, we will explain the case where the condition content is the time period when a bank employee is in the back yard. The time period when a bank employee is in the back yard is, for example, from 9:00 to 15:00 on weekdays. In this case, the notification destinations are the security officer's mobile terminal 2, the bank employee's mobile terminal 3, and the management computer 5. Next, a case will be described in which the condition content is a time period when there are no bank employees in the back yard. The time period when there are no bank employees in the back yard is, for example, a time period other than 9:00 to 15:00 on weekdays and on holidays. In this case, the notification destinations are the mobile terminal 2 of the security transport officer, the security transport company server 4, and the management center server 6.

[0088] In this way, the control unit 30 switches the notification destination depending on whether the current date and time is during a time period when a bank employee is in the back yard. In this case, the control unit 30 is an example of a notification unit that switches predetermined notification destinations based on the current date or time.

[0089] Although the notification destination in the notification process is set for each combination of the condition item and the condition content here, this is not limiting. A predetermined time in the notification process may also be set for each combination of the condition item and the condition content. In the first notification process, the predetermined time is the time from when the security sensor 71 is deactivated. The predetermined time is also the time for determining that a login operation to the safe apparatus 1 has not been performed. In the second notification process, the predetermined time is the time during which the security sensor 71 is deactivated. The predetermined time is also the time for determining that the security sensor 71 has not been reset. In the third notification process, the predetermined time is the time during which the security officer is working at the safe apparatus 1. The predetermined time is also the time for determining that a logout operation from the safe apparatus 1 has not been performed.

[0090] In this way, the control unit 30 may switch the predetermined time depending on whether the current date and time are in a time zone where a bank employee is present in the backroom. In this case, the control unit 30 is an example of a notification unit that switches the predetermined time based on the current date or time.

[0091] A case where the condition item is the state of the safe apparatus 1 will be described. Next, we will explain the case where the condition is work completion. Work completion means, for example, that a logout operation has been performed and the door 11 has been closed and locked. In this case, the notification destination when the security sensor 71 remains in the deactivated state for a predetermined time is set to the notification destination according to the time period of occurrence. Here, the predetermined time may be, for example, five minutes. Next, a case where the condition is that the user is working will be explained. In this case, the notification destination when the user is not operating the device for a predetermined period of time will be determined based on the time period in which the notification occurred. Here, the predetermined period of time may be, for example, five minutes.

[0092] In this way, the control unit 30 switches the predetermined time and the notification destination depending on the state of the safe apparatus 1. However, the control unit 30 may switch only one of the predetermined time and the notification destination instead of switching both. In this case, the control unit 30 is an example of a notification unit that switches at least one of the predetermined time and the predetermined notification destination based on the state of the item transfer apparatus. In particular, the control unit 30 may switch the predetermined time and the notification destination depending on whether the door 11 of the safe apparatus 1 is open or closed. However, the control unit 30 may switch only one of the predetermined time and the notification destination instead of switching both. In this case, the control unit 30 is an example of a notification unit that switches predetermined notification destinations based on the state of the door of the article transfer apparatus being open or closed. The control unit 30 may also switch the predetermined time and the notification destination depending on whether the security officer is logged in or has logged out of the safe apparatus 1. However, the control unit 30 may switch only one of the predetermined time and the notification destination instead of switching both. In this case, the control unit 30 is an example of a notification unit that switches the predetermined notification destination based on the status of the user logging in or out of the item transfer apparatus.

[0093] Furthermore, a case where the condition item is the elapsed time from the occurrence of an event will be described. Next, a case where the condition is immediately after the occurrence of an event will be described. In this case, the notification destination is determined according to the time period during which the event occurred. Next, a case will be described where the condition is immediately after the occurrence of an event. In this case, the notification destination after a predetermined time has elapsed is the security transport company server 4 or the management center server 6. Here, the predetermined time may be, for example, five minutes.

[0094] [Safe mechanism operates] FIG. 9 is a flowchart showing an example of pre-operation operation of the safe apparatus 1 in this embodiment.

[0095] As shown in the figure, first, the control unit 30 determines whether the security sensor 71 has been deactivated (step 301). Specifically, the control unit 30 may make this determination based on whether the communication unit 50 has received a signal that the security sensor 71 has been turned off. Assume that it is determined in step 301 that the security sensor 71 has not been deactivated. In this case, the control unit 30 repeats the process of step 301.

[0096] Assume that it is determined in step 301 that the security sensor 71 has been deactivated. Then, the control unit 30 starts counting the time of the first timer (step 302). Then, the control unit 30 determines whether or not a login operation has been performed on the display operation unit 141 (step 303). Assume that it is determined in step 303 that a login operation has not been performed. Then, the control unit 30 determines whether the first timer has counted a predetermined time (step 304). Here, the predetermined time may be, for example, five minutes. If it is determined in step 304 that the first timer has not counted the predetermined time, the control unit 30 returns the process to step 303.

[0097] On the other hand, if it is determined in step 304 that the first timer has counted the predetermined time, the control unit 30 then performs a first notification process (step 305). Specifically, the control unit 30 may determine the notification destinations in the first notification process in accordance with the notification destination setting table in FIG. 8. For example, suppose the current time is a time period when there are bank employees in the back yard. In that case, the control unit 30 may determine the mobile terminal 2 of the security transport employee, the mobile terminal 3 of the bank employee, and the management computer 5 as the notification destinations. On the other hand, suppose the current time is a time period when there are no bank employees in the back yard. In that case, the control unit 30 may determine the mobile terminal 2 of the security transport employee, the security transport company server 4, and the management center server 6 as the notification destinations. Furthermore, the control unit 30 may notify the user that no login operation has been performed for a predetermined period of time after the security sensor 71 has been deactivated. Thereafter, the control unit 30 ends the process.

[0098] Also, let us assume that it is determined in step 303 that a login operation has been performed. In this case, the control unit 30 does not perform notification processing. Thereafter, the control unit 30 ends the processing. This allows the security officer to perform tasks such as storing and retrieving items in the safe device 1.

[0099] FIG. 10 is a flowchart showing an example of post-operation operation of the safe apparatus 1 in this embodiment.

[0100] As shown in the figure, first, the control unit 30 determines whether the door 11 is closed or not (step 401). Specifically, the control unit 30 may make this determination based on whether the open / close detection mechanism 222 detects that the door 11 is closed or not. Assume that it is determined in step 401 that door 11 is not closed. Then, control unit 30 repeats the process of step 401.

[0101] Assume that it is determined in step 401 that the door 11 is closed. Then, the control unit 30 starts the second timer to count time (step 402). Then, the control unit 30 determines whether or not a logout operation has been performed on the display operation unit 141 (step 403).

[0102] Assume that it is determined in step 403 that a logout operation has been performed. Then, the control unit 30 starts counting the time of the third timer (step 404). Then, the control unit 30 determines whether the security sensor 71 has been reset (step 405). Specifically, the control unit 30 may make this determination based on whether the communication unit 50 has received a signal that the security sensor 71 has been turned on. Assume that it is determined in step 405 that the security sensor 71 has not been reset. Then, the control unit 30 determines whether the third timer has counted a predetermined time (step 406). Here, the predetermined time may be, for example, five minutes. If it is determined in step 406 that the third timer has not counted the predetermined time, the control unit 30 returns the process to step 405.

[0103] On the other hand, if it is determined in step 406 that the third timer has counted the predetermined time, the control unit 30 then performs a second notification process (step 407). Specifically, the control unit 30 may determine the notification destinations in the second notification process in accordance with the notification destination setting table in FIG. 8. For example, suppose the current time is a time period when there are bank employees in the back yard. In that case, the control unit 30 may determine the mobile terminal 2 of the security transport employee, the mobile terminal 3 of the bank employee, and the management computer 5 as the notification destinations. On the other hand, suppose the current time is a time period when there are no bank employees in the back yard. In that case, the control unit 30 may determine the mobile terminal 2 of the security transport employee, the security transport company server 4, and the management center server 6 as the notification destinations. Furthermore, the control unit 30 may notify the user that the security sensor 71 has not been reset for a predetermined period of time or more after the logout operation has been performed. Thereafter, the control unit 30 ends the process.

[0104] Also, suppose that it is determined in step 405 that the security sensor 71 has been reset. In this case, the control unit 30 does not perform the notification process. Thereafter, the control unit 30 ends the process. This allows the security officer to leave the area where the safe device 1 is installed.

[0105] Furthermore, it is assumed that it is determined in step 403 that a logout operation has not been performed. Then, the control unit 30 determines whether the second timer has counted a predetermined time (step 408). Here, the predetermined time may be, for example, five minutes. If it is determined in step 408 that the second timer has not counted the predetermined time, the control unit 30 returns the process to step 403.

[0106] On the other hand, if it is determined in step 408 that the second timer has counted the predetermined time, the control unit 30 then performs a third notification process (step 409). The details of the third notification process will be described later. Thereafter, the control unit 30 ends the process.

[0107] 11A and 11B are flowcharts showing the processing details of the third notification processing in step 409 of FIG.

[0108] As shown in FIG. 11A, first, the control unit 30 performs a warning process (step 421). Specifically, the control unit 30 may perform the warning process by displaying a notification screen on the display operation unit 141. The control unit 30 may perform the warning process by outputting a warning sound to a speaker (not shown). The control unit 30 may perform the warning process by sending a countdown notification to the mobile terminal 2 of the security officer. Furthermore, the control unit 30 may set the warning content to indicate that a logout operation has not been performed for a predetermined time or more after the door 11 is closed. In particular, the control unit 30 may set the countdown notification content to indicate that an action needs to be taken within the predetermined time. Here, the action means performing an extension operation or performing a logout operation to disable the security sensor 71.

[0109] Next, the control unit 30 starts the fourth timer (step 422). Then, the control unit 30 determines whether an extension operation has been performed on the display operation unit 141 (step 423). Here, the extension operation is an operation for extending the time to perform the logout operation because door 11 has been closed but there is other work to be done. The extension operation may be performed, for example, by pressing the extension button on the notification screen displayed on the display operation unit 141.

[0110] If it is determined in step 423 that the extension operation has not been performed, the control unit 30 then determines whether or not a logout operation has been performed on the display operation unit 141 (step 424). Assume that it is determined in step 424 that a logout operation has been performed. Then, the control unit 30 determines whether the security sensor 71 has been reset (step 425). Specifically, the control unit 30 may make this determination based on whether the communication unit 50 has received a signal that the security sensor 71 has been turned on. Here, suppose that it is determined in step 424 that a logout operation has not been performed. Alternatively, suppose that it is determined in step 425 that the security sensor 71 has not been reset. Then, the control unit 30 determines whether the fourth timer has counted a predetermined time (step 426). Here, the predetermined time may be, for example, five minutes. If it is determined in step 426 that the fourth timer has not counted the predetermined time, the control unit 30 returns the process to step 423.

[0111] On the other hand, if it is determined in step 426 that the fourth timer has counted the predetermined time, the control unit 30 then determines whether the current time period is a time period in which a bank employee is present in the back room (step 427).

[0112] Assume that in step 427 it is determined that the current time period is a time period when a bank employee is in the back yard. Then, the control unit 30 further notifies the bank employee's mobile terminal 3 and the management computer 5 (step 428). Specifically, the control unit 30 may notify the bank employee that no action has been taken for a predetermined time or more since the door 11 was closed. Here, "action" refers to performing an extension operation or performing a logout operation to disable the security sensor 71. The control unit 30 may also add to the notification content a message indicating that the logout operation and the security sensor 71 are not disabled despite the warning. The control unit 30 then terminates the process.

[0113] Assume that in step 427 it is determined that the current time period is not a time period when a bank employee is in the back yard. Then, the control unit 30 further notifies the security transport company server 4 and the management center server 6 (step 429). Specifically, the control unit 30 may notify the same content as that described in step 428. Thereafter, the control unit 30 ends the process.

[0114] Also, let us assume that it is determined in step 425 that the security sensor 71 has been reset. In this case, the control unit 30 does not perform the notification process. Thereafter, the control unit 30 ends the process. This allows the security officer to leave the area where the safe device 1 is installed.

[0115] On the other hand, if it is determined that an extension operation has been performed in step 423, then the control unit 30 stops the warning process (step 441), as shown in FIG. 11B. Specifically, the control unit 30 may stop the warning process by not displaying the notification screen on the display operation unit 141. The control unit 30 may stop the warning process by not outputting a warning sound to a speaker (not shown). The control unit 30 may stop the warning process by canceling the countdown notification on the mobile terminal 2 of the security officer.

[0116] Next, the control unit 30 starts the fifth timer (step 442). Then, the control unit 30 determines whether or not a logout operation has been performed on the display operation unit 141 (step 443). Assume that it is determined in step 443 that a logout operation has been performed. Then, the control unit 30 determines whether the security sensor 71 has been reset (step 444). Specifically, the control unit 30 may make this determination based on whether the communication unit 50 has received a signal that the security sensor 71 has been turned on. Here, suppose that it is determined in step 443 that a logout operation has not been performed. Alternatively, suppose that it is determined in step 444 that the security sensor 71 has not been reset. Then, the control unit 30 determines whether the fifth timer has counted a predetermined time (step 445). Here, the predetermined time may be, for example, three minutes. If it is determined in step 445 that the fifth timer has not counted the predetermined time, the control unit 30 returns the process to step 443.

[0117] On the other hand, if it is determined in step 445 that the fifth timer has counted the predetermined time, the control unit 30 then determines whether the current time period is a time period in which a bank employee is present in the back room (step 446).

[0118] Assume that in step 446 it is determined that the current time period is a time period when a bank employee is in the back yard. Then, the control unit 30 notifies the security officer's portable terminal 2, the bank employee's portable terminal 3, and the management computer 5 (step 447). Specifically, the control unit 30 may notify that an extension operation was performed after the door 11 was closed, but that no action has been taken for a predetermined time or more. Here, "action" refers to performing a logout operation to disable the security sensor 71. The control unit 30 then terminates the process.

[0119] Assume that in step 446 it is determined that the current time period is not a time period when a bank employee is in the back yard. Then, the control unit 30 notifies the mobile terminal 2 of the security transport employee, the security transport company server 4, and the management center server 6 (step 448). Specifically, the control unit 30 may notify the same content as that described in step 447. Thereafter, the control unit 30 ends the process.

[0120] Also, let us assume that it is determined in step 444 that the security sensor 71 has been reset. In this case, the control unit 30 does not perform the notification process. Thereafter, the control unit 30 ends the process. This allows the security officer to leave the area where the safe device 1 is installed.

[0121] [Modification of the embodiment] In the above description, the safe apparatus 1 is configured with the door 11 on one side and the door 21 on the other side, but this is not limited to this. The safe apparatus 1 may also be configured like a normal safe or locker with one door on one side. In this case, for example, the door may be provided on the ATM corner S1 side. Then, both the security guard and the bank employee may open the door from the ATM corner S1 side to store and retrieve items.

[0122] In the above description, it is assumed that the safe apparatus 1 is installed in an ATM corner of a branch of a financial institution, but this is not limiting. For example, it may be assumed that the safe apparatus 1 is installed in an ATM corner of a commercial facility other than a branch of a financial institution.

[0123] [Effects of the embodiment] In this embodiment, the safe device 1 determines that the security sensor 71 has been deactivated and has not been reset for a predetermined period of time. When such a determination is made, the safe device 1 notifies a predetermined notification destination. This makes it possible to notify that the security sensor 71 is no longer guarding the safe device 1 or its installation area.

[0124] [First Modification] The first modified example is an invention relating to an improvement to the login / logout function of the safe apparatus 1. In the first modified example, the safe apparatus 1 does not automatically log out under certain conditions, even if a user forgets to log out.

[0125] Specifically, the safe device 1 performs automatic logout when a screen for which automatic logout is not a problem is displayed. Here, examples of screens for which automatic logout is not a problem include a standby screen and a setting menu screen.

[0126] On the other hand, if a screen that would cause problems if automatic logout is performed is displayed, the safe apparatus 1 does not perform automatic logout. Here, an example of a screen that would cause problems if automatic logout were performed is the following screen.

[0127] FIG. 12 is a diagram illustrating a first screen that may cause problems if automatic logout is performed. This first screen is a storage screen 610. Until the Complete button 611 is pressed on the storage screen 610, the door 11 may be open to store or remove an item. Here, assume that logout is not performed while the storage screen 610 is displayed. In that case, if the safe apparatus 1 automatically logs out, the door 11 will remain open. Therefore, the storage screen 610 can be said to be a screen that may cause problems if automatic logout is performed.

[0128] FIG. 13 is a diagram illustrating a second screen that may cause problems if automatic logout is performed. This second screen is a user setting screen 615. On this user setting screen 615, input data is not saved until the complete button 616 is pressed. Here, assume that logout is not performed while the user setting screen 615 is displayed. In that case, if the safe apparatus 1 automatically logs out, the input data will be erased. Therefore, it can be said that this user setting screen 615 is a screen that may cause problems if automatic logout is performed.

[0129] In the first modified example, the safe apparatus 1 operates as follows. 14 is a flowchart showing an example of the operation of the safe apparatus 1 in the first modified example. When the period of no operation exceeds a set period for determining whether or not to perform automatic logout, the control unit 30 performs this operation.

[0130] As shown in the figure, first, the control unit 30 determines whether the currently displayed screen is a screen for which automatic logout is permitted (step 511). Here, the currently displayed screen is the screen currently displayed on the display operation unit 141 or the display operation unit 241. Assume that it is determined in step 511 that the currently displayed screen is a screen for which automatic logout is not a problem, and then the control unit 30 performs automatic logout (step 512).

[0131] On the other hand, if it is determined in step 511 that the currently displayed screen is not a screen for which automatic logout is acceptable. In other words, if it is determined that the currently displayed screen is a screen for which automatic logout is unacceptable. Then, the control unit 30 determines whether the current time is daytime or not (step 513).

[0132] Assume that it is determined in step 513 that the current time is daytime. Then, the control unit 30 notifies the monitoring center M to contact the bank branch (step 514). As a result, a person in charge at the monitoring center M notifies the bank branch that a user has forgotten to log out from the safe apparatus 1. Then, the bank employee performs the logout operation. Alternatively, the monitoring server 75 at the monitoring center M may remotely and forcibly perform the logout.

[0133] Assume that it is determined in step 513 that the current time is not daytime. Then, the control unit 30 notifies the monitoring center M to contact the bank headquarters or the security transportation company (step 515). As a result, a person in charge at the monitoring center M contacts the bank headquarters or the security transportation company to inform them that a logout has been forgotten in the safe device 1. Then, the bank employee or security transportation person performs the logout operation. Alternatively, the monitoring server 75 of the monitoring center M may remotely and forcibly perform the logout.

[0134] [Second Modification] The second modified example is an invention relating to improvements to the operability of the double-sided operation type safe apparatus 1. In such a safe apparatus 1, suppose that a security guard accesses the display operation unit 141 while a bank employee is operating the display operation unit 241. Here, the access by the security guard from the display operation unit 141 can be detected by touch panel operation or card operation. In response, the safe apparatus 1 displays a pop-up screen on the display operation unit 241 on the bank employee side. Here, the pop-up screen can include information indicating that the security guard is waiting for an operation and a notice of automatic logout.

[0135] 15 is a diagram illustrating a pop-up screen 620 that the safe apparatus 1 displays on the display operation unit 241 in the second modified example. As shown in the figure, the pop-up screen 620 includes a message 621, a "Yes" button 622, and a "No" button 623. Let us assume that the bank clerk presses the "Yes" button 622 on this pop-up screen 620. Alternatively, let us assume that "XX seconds" have passed as indicated in the message 621. Then, the safe apparatus 1 will automatically log out the bank clerk after XX seconds. Also, suppose that the bank clerk presses the "No" button 623 on this pop-up screen 620. Then, the safe apparatus 1 continues the bank clerk's logged-in state.

[0136] Let us consider again the case where a security guard accesses the display operation unit 141 while a bank employee is operating the display operation unit 241. In this case, the safe apparatus 1 may display on the display operation unit 141 on the security guard's side that a request for operation is being made to the bank employee. Consider again the case where the bank clerk presses the "No" button 623 on the pop-up screen 620. In this case, the safe apparatus 1 may display a message to that effect on the display operation unit 141 on the security officer's side as a result of the operation request. Furthermore, to prevent the guard from making successive operation requests, the bank employee may press the "No" button 623. In this case, the safe apparatus 1 may display on the display operation unit 141 on the guard's side a message indicating that a predetermined time or more must be waited until the next operation request is possible.

[0137] According to the second modified example, the following effects can be obtained. First, in the second modified example, the safe apparatus 1 is configured to automatically log out if the bank employee forgets to log out. This makes it possible for the security guard to operate the safe apparatus 1 from the security guard's side even if the bank employee forgets to log out. In the second modification, the safe apparatus 1 notifies the bank staff that the guard is waiting for operation. This makes it possible to transfer the operation right to the guard, thereby shortening the transport time of the guard.

[0138] [Third Modification] In the third modified example, a camera is added inside the safe apparatus 1 to capture an image of the items in the storage area when storing the items. The third modified example then compares the captured image with the input information to prevent input errors or incorrect storage.

[0139] FIG. 16 is a diagram showing an example of the configuration of a safe apparatus 1 in the third modified example. As shown in the figure, the safe device 1 has a camera 631 on the top surface of the storage area 630. The camera 631 is equipped with a light source. The camera 631 is provided separately from the cameras 142, 242 (see FIGS. 2 and 4) that capture images of the operator. The camera 631 can capture images of the range indicated by the dashed line in the storage area 630. The camera 631, like the cameras 142, 242, is controlled by the control unit 30.

[0140] In the third modification, the safe device 1 records images showing the state of the storage area 630 before and after storage and before and after removal. The safe device 1 then compares the operator's input, i.e., the operations before storage and removal, with the recorded images. This enables strict management of stored and removed items. For example, it becomes possible to check the progress of items even in the event of incorrect input, such as forgetting to remove an item or making an incorrect number. Furthermore, by using a network, remote monitoring of the storage area 630 becomes possible. Furthermore, by linking with the security sensor 71, it becomes possible to record the state of stored items in an emergency.

[0141] The third modification provides the following effects. First, in the third modified example, the safe apparatus 1 takes a still image of the storage area 630 before and after unlocking the doors 11 and 21. This makes it possible to compare the actual stored items with the input contents and to more strictly manage the storage and removal of stored items. In the third modified example, the safe apparatus 1 is connected to a network, so that the inside of the storage area 630 can be checked remotely. This makes it easy to give instructions to the safe apparatus 1 remotely and to manage it remotely. Furthermore, in the third modified example, it is possible to link with the security sensor 71. This makes it possible to monitor and record the state of the goods when an alarm is sounded, for example, when the door is broken into. [Explanation of symbols]

[0142] 1...Safe device, 2, 3...Mobile terminal, 4...Security transport company server, 5...Management computer, 6...Management center server, 10...ATM corner side housing, 20...Backyard side housing, 11, 21...Door, 141, 241...Display operation unit, 30...Control unit, 40...Storage unit, 50...Communication unit, 70...Security sensor system, 71...Security sensor, 72...Operation unit, 75...Monitoring server

Claims

1. a security processing unit that guards an article transfer device for transferring articles or an area where the article transfer device is installed; a notification unit that notifies a predetermined notification destination when the security processing unit is disabled and the security processing unit is not enabled even after a predetermined time has elapsed; A security system comprising:

2. The security system described in claim 1, wherein the notification unit notifies the predetermined notification destination when the security processing unit is disabled and the security processing unit is not enabled even after the predetermined time has elapsed since a predetermined operation was performed on the item transfer device.

3. 3. The security system according to claim 2, wherein the predetermined operation is an operation of closing a door of the article transfer apparatus.

4. The security system according to claim 2 , wherein the predetermined operation is an operation of logging out from the article transfer apparatus.

5. The security system according to claim 1 , wherein the notification unit switches at least one of the predetermined time period and the predetermined notification destination based on a state of the article transfer apparatus.

6. 6. The security system according to claim 5, wherein the state of the article transfer apparatus is a state relating to opening and closing of a door of the article transfer apparatus.

7. The security system according to claim 5 , wherein the state of the article transfer apparatus is a state related to a user's login or logout from the article transfer apparatus.

8. The security system according to claim 1 , wherein the notification unit switches at least one of the predetermined time and the predetermined notification destination based on a current date or a current time.

9. The security system described in claim 1, further comprising a control unit that controls the security processing unit to be enabled if the item transfer device is in a predetermined state when the security processing unit is disabled and the security processing unit is not enabled even after the predetermined time has elapsed.

10. The security system of claim 1, wherein the notification unit notifies a predetermined notification destination if no operation to log in to the item transfer device is performed even after a predetermined time has elapsed since the security processing unit was disabled.

11. The security system according to claim 1 , further comprising the article transfer device.

12. The article transfer device includes: The first door is located on the ATM corner side of the financial institution, a second door provided on the back yard side of the financial institution; 12. The security system of claim 11, comprising:

13. 13. The security system according to claim 12, wherein the security processing unit guards the article transfer apparatus using a security sensor provided on the ATM corner side of the article transfer apparatus.

14. 13. The security system according to claim 12, wherein the security processing unit uses a security sensor provided on the ATM corner side of an area where the article transfer device is installed to guard the area.

15. a step in which a security processing unit of the computer guards an article transfer device for transferring an article or an area in which the article transfer device is installed; a notification unit of the computer notifying a predetermined notification destination when the security processing unit is disabled and the security processing unit is not enabled even after a predetermined time has elapsed; security methods, including

16. Computer, a security processing unit that guards an article transfer device for transferring articles or an area where the article transfer device is installed; a notification unit that notifies a predetermined notification destination when the security processing unit is disabled and the security processing unit is not enabled even after a predetermined time has elapsed; A program that functions as a

Images