Access control system, access control method, and program

Abstract

To provide an access control system capable of improving security.SOLUTION: The access control system 100 includes an authentication unit 121, an acquisition unit 122, a determination unit 123, and a control unit 124. The authentication unit 121 performs authentication based on authentication information received from the information terminal 101 by wireless communication using a short-range wireless communication method different from the proximity method. The acquiring unit 122 acquires determination information for determining whether or not the mobile object 10 has an intention of accessing a predetermined area A1, the determination information being information on at least one of the information terminals 101 and the mobile objects 10 holding the information terminals 101. The determination section 123 determines the presence or absence of the intention of the mobile vehicle 10 based on the determination condition using the determination information acquired by the acquisition section 122. The control unit 124 has an operation mode for controlling access to the predetermined area A1 based on the determination result of the determination unit 123 and the verification result of the verification unit 121.SELECTED DRAWING: Figure 1

Description

[Technical Field]

[0001] The present disclosure relates to an access control system, an access control method, and a program, and more particularly to an access control system, an access control method, and a program that control access to a predetermined area. [Background technology]

[0002] Patent Document 1 describes a card reading device having a card, a specification switching means, an intrusion monitoring verification means, and a main control means. The card stores individual ID information of people permitted to enter and exit a room in the entry / exit control device specification, and stores information indicating this in the intrusion monitoring device specification. The reading means reads the information stored on the card. The specification switching means manually switches between the entry / exit control device specification and the intrusion monitoring device specification. Information indicating the intrusion monitoring specification is pre-stored in memory, and the intrusion monitoring verification means compares the information read by the reading means with the information stored in the memory and, if they match, outputs information to set or cancel the intrusion monitoring status. The main control means outputs the information read by the reading means as is when the entry / exit control device specification is set by the specification switching means, and outputs information to set or cancel the intrusion monitoring status from the intrusion monitoring control means when the intrusion monitoring device specification is set. [Prior art documents] [Patent documents]

[0003] [Patent Document 1] Japanese Patent Application Publication No. 7-160963 Summary of the Invention [Problem to be solved by the invention]

[0004] Although the card reading device in Patent Document 1 can perform both entry / exit management and intrusion monitoring, the user must perform an operation (touch operation) to touch the card to the reader in order for the card reading device to read the ID information on the card.

[0005] In recent years, hands-free authentication (reading authentication information without touching the door) using wireless communication with short-range wireless communication methods such as UWB has become common. However, with hands-free authentication, there is a possibility that a user will be authenticated simply by passing in front of the door, causing the door to open, which raises concerns about a decrease in security.

[0006] An object of the present disclosure is to provide an access control system, an access control method, and a program that can improve security. [Means for solving the problem]

[0007] An access control system according to one aspect of the present disclosure includes an authentication unit, an acquisition unit, a determination unit, and a control unit. The authentication unit performs authentication based on authentication information received from an information terminal via a short-range wireless communication method different from a proximity method. The acquisition unit acquires determination information, which is information about at least one of the information terminal and a mobile object possessing the information terminal, for determining whether or not the mobile object intends to access a predetermined area. The determination unit determines whether or not the mobile object intends to access a predetermined area based on a determination condition using the determination information acquired by the acquisition unit. The control unit has an operation mode that controls access to the predetermined area based on the determination result of the determination unit and the authentication result of the authentication unit.

[0008] An access control method according to one aspect of the present disclosure includes an authentication step, an acquisition step, a determination step, and a control step. In the authentication step, authentication is performed based on authentication information received from an information terminal via a short-range wireless communication method different from a proximity method. In the acquisition step, determination information is acquired, the determination information being information about at least one of the information terminal and a mobile object possessing the information terminal, for determining whether or not the mobile object intends to access a predetermined area. In the determination step, the presence or absence of the intention of the mobile object is determined based on a determination condition using the determination information acquired in the acquisition step. The control step has an operation mode in which access to the predetermined area is controlled based on the determination result of the determination step and the authentication result of the authentication step.

[0009] A program according to one aspect of the present disclosure is a program for causing one or more processors to execute the access control method. [Effects of the Invention]

[0010] The access control system, access control method, and program of the present disclosure have the effect of improving security. [Brief explanation of the drawings]

[0011] [Figure 1] FIG. 1 is a block diagram of an access control system according to an embodiment of the present disclosure. [Figure 2] FIG. 2 is a flowchart of the access control system. [Figure 3] FIG. 3 is a schematic diagram showing the positional relationship between a mobile object that is subject to access control by the access control system and a predetermined area. [Figure 4] FIG. 4 is a block diagram of an access control system according to a modified example. DETAILED DESCRIPTION OF THE INVENTION

[0012] An access control system 100 according to an embodiment of the present disclosure will be described below with reference to Figures 1 to 3. Note that the specific communication methods and specific hardware etc. mentioned in the following description are merely examples and may be changed as appropriate.

[0013] As shown in Fig. 1, the access control system 100 of this embodiment is realized by a single access control device 1. The access control device 1 is installed near an access point AL1 to a predetermined area A1. A mobile object 10 located near the predetermined area A1 is authorized to access the predetermined area A1 when the access control device 1 authenticates the mobile object 10 based on authentication information received via short-range wireless communication from an information terminal 101 carried by the mobile object 10 and determines that the mobile object 10 intends to access the predetermined area A1.

[0014] (1) Main parts of the access control device First, the main parts of the access control device 1 will be described.

[0015] 1, the access control device 1 includes a reception unit 11, a processing unit 12, an output unit 13, a communication unit 14, and a detection unit 15. As shown in FIG. 1, the processing unit 12 includes an authentication unit 121, an acquisition unit 122, a determination unit 123, and a control unit 124.

[0016] (1-1) Reception The reception unit 11 receives various types of information and various operations. The various types of information include, for example, registered authentication information (described later) for authentication by the authentication unit 121. The various operations include, for example, a switching operation (described later) for switching the operation mode of the control unit 124.

[0017] (1-2) Processing section The processing unit 12 performs various types of processing. The various types of processing are, for example, the processing of each of the authentication unit 121, acquisition unit 122, determination unit 123, control unit 124, and setting unit 125 (all of which will be described later). The processing unit 12 also measures the position of the mobile object 10 based on short-range wireless communication by the communication unit 14, and acquires position information and position change information. The processing unit 12 also performs various types of judgments that will be explained in the flowcharts.

[0018] (1-3) Output section The output unit 13 outputs various types of information. In this embodiment, the output is displayed on a display. However, the output may be audio output from a speaker or transmission to an external device such as a server. The various types of information include, for example, an image of a selection tab listing one or more conditions (described below) that can be selected by the setting unit 125, and an image of a switch button for switching the operation mode of the control unit 124.

[0019] (1-4) Communications Department The communication unit 14 performs short-distance wireless communication with the information terminal 101 held by the mobile object 10. The short-distance wireless communication here is short-distance wireless communication using a short-distance wireless communication method (described later) that is different from the proximity method.

[0020] (1-5) Detection unit The detection unit 15 detects the movement of the moving object 10. The movement of the moving object 10 is, for example, a gesture, a line of sight movement to the access location AL1, a knock on the door at the access location AL1, and the like.

[0021] The detection unit 15 in this embodiment detects the movement of the moving object 10 based on the video signal from the camera and the audio signal from the microphone.

[0022] The detection unit 15 detects a gesture of the moving object 10 based on, for example, an image signal from a camera, and outputs motion information indicating that the gesture has been detected to the acquisition unit 122. Note that the motion information may further include information indicating the content of the gesture detected by the detection unit 15 (for example, what kind of movement and which part of the body it is).

[0023] The detection unit 15 detects, for example, eye movement and thus gaze movement to a specified area A1 based on an image signal from a camera, and outputs operation information indicating that gaze movement to the specified area A1 has been detected to the acquisition unit 122.

[0024] The detection unit 15 may, for example, detect hand movement and therefore touch on the access point AL1 based on an image signal from a camera, and output to the acquisition unit 122 operation information indicating that a touch on the access point AL1 has been detected.

[0025] The detection unit 15 detects a knock at or near the access point AL1, for example, based on an image signal from a camera and an audio signal from a microphone, and outputs operation information indicating that a knock has been detected at or near the access point AL1 to the acquisition unit 122.

[0026] In detail, the detection unit 15 may, for example, detect a moving body 10 present at or near the access point AL1 based on an image signal from a camera, and then further detect a knocking sound from the detected moving body 10 based on an audio signal from a microphone, thereby detecting a knock at or near the access point AL1 and outputting operation information.

[0027] (1-6) Authentication section The authentication unit 121 performs authentication based on authentication information received from the information terminal 101 via wireless communication using a short-distance wireless communication method different from the close-proximity method.

[0028] (1-6-1) Information terminals and mobile devices The information terminal 101 is a terminal having functions for performing information processing and communication. The information terminal 101 is held by a mobile object 10.

[0029] The mobile body 10 in this embodiment is an autonomously moving object, and is a general term for a human body and an autonomously moving robot (hereinafter, sometimes simply referred to as a "robot"). The mobile body 10 in this embodiment is basically a human body, that is, a user's body (hereinafter, sometimes simply referred to as a "user"), but may also be a robot.

[0030] The information terminal 101 in this embodiment is basically a mobile information terminal carried by a user. The mobile information terminal is, for example, a smartphone, a tablet terminal, a mobile phone, etc. However, the information terminal 101 may also be mounted on a robot.

[0031] (1-6-2) A short-distance wireless communication method different from the proximity method A short-distance wireless communication method is a wireless communication method in which the communication distance is equal to or less than a first reference value (for example, about several tens of meters). Short-distance wireless communication methods include a proximity method and a short-distance wireless communication method different from the proximity method.

[0032] The proximity method is a short-distance wireless communication method in which the communication distance is equal to or less than a second reference value (for example, about 1 meter) that is smaller than the first reference value. Examples of the short-distance wireless communication method of the proximity method include the NFC (Near Field Communication) method, which has a communication distance of about several centimeters to 10-odd centimeters, and the infrared communication method, which has a communication distance of about several tens of centimeters to 1 meter.

[0033] A short-distance wireless communication method different from the proximity method is a wireless communication method among short-distance wireless communication methods in which the communication distance is greater than the second reference value and smaller than the first reference value. Short-distance wireless communication methods different from the proximity method are, for example, wireless communication methods in which the communication distance is about several meters to 10 and several meters, and specific examples include the UWB (Ultra Wide Band) wireless communication method, Bluetooth (registered trademark) method, ZigBee (registered trademark) method, and wireless LAN (Local Area Network) method. A particularly suitable short-distance wireless communication method different from the proximity method is a wireless communication method in which the communication distance is about 10 meters and the resolution is about several centimeters to 10 and several centimeters.

[0034] In this embodiment, the UWB wireless communication method is used as a short-distance wireless communication method different from the proximity method. Wireless communication using the UWB wireless communication method achieves a communication distance of about 10 m and a resolution of about several cm.

[0035] In the following, wireless communication using a short-distance wireless communication method, such as the UWB wireless communication method, which is different from the close-proximity method, may be simply referred to as "short-distance wireless communication."

[0036] (1-6-3) Authentication information The authentication information is information for authenticating the mobile body 10. As will be described in detail later, the authentication includes identifying the mobile body 10. Furthermore, the authentication may further include confirming that the identified mobile body 10 is a mobile body 10 that is permitted to access the predetermined area A1 (for example, a mobile body 10 whose mobile body ID has been registered in advance).

[0037] The authentication information is, for example, a mobile body ID. The mobile body ID is information that identifies the mobile body 10. The mobile body ID is stored in, for example, the memory of the information terminal 101 that the mobile body 10 possesses.

[0038] The mobile ID in this embodiment is basically a user ID. A user ID is information that identifies a user. The user ID is stored, for example, in the memory of a mobile information terminal carried by the user. Specifically, the user ID is, for example, a telephone number assigned to the mobile information terminal, but it may also be an email address assigned to the user, a My Number, or an employee ID, or any other information that can identify the user. However, the authentication information may also be a robot ID that identifies the robot.

[0039] Alternatively, the authentication information is not limited to a mobile ID, but may be a terminal ID. The terminal ID is information for identifying the information terminal 101, such as a MAC (Media Access Control) address. The MAC address is stored in association with the user ID in the memory of the access control device 1 (or the access control system 100 including the access control device 1). Therefore, the authentication unit 121 can acquire the user ID based on the MAC address.

[0040] In this way, the authentication information may be any information that can directly or indirectly identify the mobile object 10.

[0041] (1-6-4) Authentication and authentication results As described above, authentication means at least identifying the mobile object 10. In other words, authentication includes the communication unit 14 receiving authentication information from the information terminal 101 held by the mobile object 10 via short-range wireless communication.

[0042] In this embodiment, authentication is performed by the communication unit 14 receiving authentication information via short-range wireless communication from the information terminal 101 held by the mobile object 10. The authentication result is a first authentication result indicating that authentication information has been received via short-range wireless communication from the information terminal 101 held by the mobile object 10 (for example, "authentication information present"), or a second authentication result indicating that authentication information has not been received via short-range wireless communication from the information terminal 101 held by the mobile object 10 (for example, "authentication information not present").

[0043] The first authentication result may be the received authentication information itself, and the second authentication result may be indicated, for example, by the fact that the second authentication result is not received even after a predetermined time has elapsed since the first authentication result was received.

[0044] The authentication unit 121 acquires a first authentication result when the communication unit 14 receives authentication information via short-range wireless communication, and acquires a second authentication result when the communication unit 14 does not receive authentication information via short-range wireless communication.

[0045] Here, the case where the communication unit 14 receives authentication information via short-range wireless communication means, in more detail, the case where the communication unit 14 receives a wireless signal via short-range wireless communication and the received wireless signal, i.e., the received signal, contains authentication information. The case where the communication unit 14 does not receive authentication information means, in more detail, the case where the communication unit 14 does not receive a wireless signal via short-range wireless communication, or the case where the communication unit 14 receives a wireless signal via short-range wireless communication but the received signal does not contain authentication information.

[0046] The authentication may further include identifying attributes of the mobile object 10 based on a comparison between the authentication information received from the information terminal 101 and pre-registered authentication information (hereinafter, sometimes referred to as "registered authentication information"), and acquiring attribute information indicating the identification result. A case where the authentication further includes a comparison between the received authentication information and the registered authentication information will be described in a modified example (see "(9-5) Modified example of authentication and modified example of authentication result").

[0047] (1-7) Acquisition part The acquisition unit 122 acquires the determination information.

[0048] (1-7-1) Judgment information The judgment information is information for determining whether or not there is an intention to access a predetermined area A1 of the mobile body 10. The judgment information is information about at least one of the information terminal 101 and the mobile body 10 that possesses the information terminal 101. The judgment information in this embodiment is information about both the information terminal 101 and the mobile body 10.

[0049] (1-7-2) Designated Area The predetermined area A1 is a space that the mobile object 10 can enter and exit. The predetermined area A1 is, for example, the interior of a building or site (inside the building or site). Alternatively, the predetermined area A1 may be a portion of the space within the building or site. The portion of the space within the building is, for example, the entrance area within the building, elevators from the end area to each floor within the building, each room within a floor, etc. The portion of the space within the site is, for example, a garden within the site.

[0050] (1-7-3) Access to designated areas Access to the predetermined area A1 basically means entering the predetermined area A1, but it may also mean leaving the predetermined area A1. For example, if the predetermined area A1 is an indoor area, entering the indoor area from an area other than the predetermined area A1, i.e., from the outdoors. Alternatively, for example, if the predetermined area A1 is the indoor area of ​​a first room, entering the predetermined area A1 may mean entering the indoor area of ​​the first room from the indoor area of ​​a second room adjacent to the first room.

[0051] For example, if the predetermined area A1 is outdoors, going outside the room from an area other than the predetermined area A1, i.e., from inside the room. Alternatively, if the predetermined area A1 is a terrace, going outside the room may mean going onto the terrace from inside a room adjacent to the terrace.

[0052] In this embodiment, access to the predetermined area A1 means entering the predetermined area A1, for example, entering a building or a site. Specifically, access to the predetermined area A1 may be, for example, entering an entrance area of ​​a building, getting on an elevator, entering a room, or entering an outdoor area of ​​the site.

[0053] (1-7-4) Intention to access a specific area: Access Intention The intention to access the predetermined area A1 (hereinafter sometimes referred to as "access intention") is, for example, the intention to enter a building or a site. Alternatively, the intention to access the predetermined area A1 may be the intention to enter an entrance area in a building, the intention to get on an elevator, the intention to enter a room, or the intention to enter a garden or the like on the site.

[0054] The presence or absence of an intention to access a specified area A1 is determined based on, for example, one or more of the position of the mobile body 10 or the information terminal 101, changes in the position of the mobile body 10 or the information terminal 101 over time (hereinafter, may be simply referred to as "position changes"), the behavior of the mobile body 10 (e.g., gestures, eye movement, knocking, etc.), and the state of the information terminal 101 (e.g., movement state, tilt, vibration state, etc.).

[0055] (1-7-5) Details of judgment information The determination information may be, for example, any one of position information, position change information, distance information, state information, and operation information, or a combination of two or more types of information.

[0056] That is, the determination information includes one or more types of information among position information, position change information, status information, and operation information.

[0057] (1-7-5a) Location information The location information is information (for example, coordinates) relating to the location of the mobile object 10 or the information terminal 101. The location information in this embodiment is information (for example, coordinates with the location of the short-range wireless communication module that realizes the communication unit 14 as the origin) relating to the location of the information terminal 101 relative to the communication unit 14 (more specifically, the short-range wireless communication module that realizes the communication unit 14).

[0058] (1-7-5b) Location change information The position change information is information relating to a change in the position of the moving body 10 or the information terminal 101. The position change information is, for example, direction information indicating the moving direction of the information terminal 101, speed information indicating the speed of the information terminal 101, and the like.

[0059] (1-7-5c) Distance information The distance information is information relating to the distance between the communication unit 14 and the information terminal 101. The distance information is, for example, information indicating the distance between the communication unit 14 and the information terminal 101. Alternatively, the distance information may be information indicating the distance from the mobile object 10 to the access point AL1.

[0060] (1-7-5d) Status information The state information is information relating to the state of the information terminal 101. The state of the information terminal 101 is, for example, at least one of the movement state of the information terminal 101, the tilt of the information terminal 101, and the vibration state of the information terminal 101.

[0061] The moving state is the moving state of the information terminal 101. The moving state is either a moving state or a non-moving (i.e., stationary) state. The moving state of the information terminal 101 changes in accordance with the operation of the mobile object 10 that possesses the information terminal 101.

[0062] The movement of the moving body 10 that brings about a change in the moving state is, for example, a user walking or a robot running, or a walking user stopping or a running robot temporarily stopping.

[0063] The information regarding the moving state may include, for example, at least one of directional information indicating the direction of movement and speed information indicating the speed, for a moving state, and may include, for example, information indicating a speed of "0", for a stopped state.

[0064] The tilt is the attitude of the information terminal 101, and may be referred to as, for example, the state of rotation around a reference point (for example, the center of gravity) of the information terminal 101. The tilt of the information terminal 101 changes in accordance with the movement of the mobile object 10 that holds the information terminal 101.

[0065] An example of a motion of the mobile object 10 that changes the tilt of the information terminal 101 is a gesture by a user carrying a smartphone that involves a change in the attitude of the smartphone. An example of a gesture that involves a change in the attitude of the smartphone is when a user bows with the smartphone in their breast pocket.

[0066] Specifically, the tilt is the tilt of the principal axis of the information terminal 101 relative to a reference line, or the tilt of the principal surface of the mobile body 10 relative to a reference plane. The principal axis of the mobile body 10 is, for example, an axis of rotational symmetry in the longitudinal direction of the information terminal 101, and the reference line is, for example, a vertical line (i.e., the direction of gravity). The principal surface of the mobile body 10 is, for example, a plane including the screen, and the reference plane is, for example, a horizontal plane (i.e., a plane perpendicular to the vertical line).

[0067] In this embodiment, the tilt is the tilt of the main axis of the information terminal 101 with respect to the vertical line. Information about the tilt is, for example, the angle that the main axis of the information terminal 101 makes with respect to the vertical line.

[0068] The vibration state is the vibration state of the mobile object 10. The vibration state is either a vibrating state or a non-vibrating state. The vibration state of the information terminal 101 changes in accordance with the operation of the mobile object 10 that holds the information terminal 101.

[0069] The movement of the moving object 10 that causes a change in the vibration state of the information terminal 101 is, for example, when a user carrying a smartphone walks, or when a walking user stops.

[0070] The information regarding the vibration state includes, for example, at least one of acceleration information indicating acceleration and an acceleration waveform indicating the change in acceleration over time, for a vibrating state, and includes, for example, information indicating acceleration "0" for a non-vibrating state.

[0071] (1-7-5e) Operation information The motion information is information relating to a predetermined motion of the moving object 10.

[0072] (1-7-5f) Prescribed operation The predetermined motion of the moving object 10 is a motion of the moving object 10 that corresponds to the motion information acquired as determination information by the acquisition unit 122. The motion of the moving object 10 is a movement of a specific part of the moving object 10. The specific part is, for example, the upper body, head, eyeballs, mouth, eyelids, eyebrows, hands, etc.

[0073] The predetermined action of the mobile object 10 is an action for indicating an access intention of the mobile object 10. The action for indicating an access intention is, for example, a gesture, moving one's eyes toward the access point AL1, touching the access point AL1, knocking at or near the access point AL1, etc.

[0074] A gesture is a predetermined movement of a specific body part that indicates an intention to access, such as leaning the upper body forward (i.e., bowing) or shaking the head back and forth (i.e., nodding). Moving the gaze toward the access location AL1 is a movement of the eyeballs that directs the gaze toward the access location AL1. Touching the access location AL1 is a movement of touching the hand to the access location AL1.

[0075] Knocking at or near the access location AL1 is an action of generating a knocking sound at or near the access location AL1. The knocking sound is generated, for example, by knocking on the door provided at the access location AL1 or on the wall surrounding the door. Knocking at or near the access location AL1 explicitly indicates an intention to access.

[0076] (1-7-6) Acquisition of decision information The determination information is obtained, for example, as follows.

[0077] As described in "(1-2) Processing Unit" and "(1-4) Communication Unit," the processing unit 12 acquires the position information and the position change information based on the short-range wireless communication with the information terminal 101 by the communication unit 14. The acquisition unit 122 acquires at least one of the position information and the position change information thus acquired by the processing unit 12 as determination information.

[0078] (1-7-6a) Obtaining location information In this embodiment, the processing unit 12 measures the position of the information terminal 101 based on one or more types of information among the received signal strength (RSSI: Received Signal Strength Indicator) of the received signal received by the communication unit 14 from the information terminal 101, the delay time, the phase, and the frequency, and the acquisition unit 122 acquires the position information that is the result of the position measurement by the processing unit 12 as judgment information.

[0079] However, as described in "(9-6) Modified Example of Acquiring Location Information and Location Change Information: Acquisition of Own Location by Information Terminal," the location information may be included in the signal from the information terminal 101. The acquisition unit 122 may acquire the location information received from the information terminal 101 as determination information.

[0080] (1-7-6b) Obtaining location change information In this embodiment, for example, the processing unit 12 repeatedly measures the position of the information terminal 101 and calculates a change in the position of the information terminal 101 based on a plurality of pieces of position information corresponding to a plurality of measurement results. However, as described in "(9-6) Variant of Acquisition of Position Information and Position Change Information: Acquisition of Own Position by Information Terminal", the processing unit 12 may calculate the change in position based on a plurality of pieces of position information received from the information terminal 101. The acquisition unit 122 acquires the position change information, which is the calculation result by the processing unit 12, as determination information.

[0081] (1-7-6c) Acquisition of distance information For example, the processing unit 12 calculates the distance between the communication unit 14 and the information terminal 101 based on the above-mentioned position information (e.g., coordinates), and the acquisition unit 122 acquires the distance information calculated by the processing unit 12 as judgment information.

[0082] Alternatively, in this embodiment, since the distance between the short-range wireless communication module that realizes the communication unit 14 and the access location AL1 in the predetermined area A1 is known, for example, the processing unit 12 may calculate the distance from the mobile object 10 to the access location AL1 based on the distance between the communication unit 14 and the information terminal 101 and the distance between the short-range wireless communication module and the access location AL1. In this case, the acquisition unit 122 acquires the distance information that is the calculation result of the processing unit 12 as determination information.

[0083] Alternatively, the distance between the communication unit 14 and the information terminal 101 may be estimated based on short-range wireless communication between the communication unit 14 and the information terminal 101. For example, the processing unit 12 estimates the distance between the communication unit 14 and the information terminal 101 based on the received signal strength indicator (RSSI) of the received signal received by the communication unit 14 from the information terminal 101, and acquires an estimated distance indicating the estimation result.

[0084] Specifically, a set of pairs of received signal strength and estimated distance is stored in the memory of the access control device 1, and the processing unit 12 acquires the received signal strength of the received signal received by the communication unit 14 via short-range wireless communication, and reads out from the memory the estimated distance paired with the acquired received signal strength.

[0085] The acquisition unit 122 may acquire the distance information indicating the estimated distance read out by the processing unit 12 as determination information.

[0086] (1-7-6d) Obtaining status information The state information regarding the moving state of the information terminal 101 is acquired, for example, as follows: That is, the processing unit 12 detects the movement of the information terminal 101 based on the position change information, and the acquisition unit 122 acquires state information indicating that the information terminal 101 is in a moving state based on the detection result of the processing unit 12. Alternatively, the processing unit 12 may further detect that the information terminal 101 has stopped based on the position change information, and the acquisition unit 122 may further acquire state information indicating that the information terminal 101 is in a stopped state.

[0087] State information regarding the tilt of information terminal 101 is acquired, for example, as follows. That is, the received signal received by communication unit 14 from information terminal 101 includes an angular velocity signal output from a gyroscope of information terminal 101. Processing unit 12 detects whether information terminal 101 is rotating and, consequently, the tilt resulting from the rotation, based on the angular velocity signal included in the received signal, and acquisition unit 122 acquires state information indicating the magnitude of the tilt based on the detection result of communication unit 14 when information terminal 101 is in a tilted state. Furthermore, acquisition unit 122 may acquire state information indicating a tilt of "0" based on the detection result of communication unit 14 when information terminal 101 is not tilted.

[0088] The state information regarding the vibration state of the information terminal 101 is acquired, for example, as follows. That is, the received signal received by the communication unit 14 from the information terminal 101 includes an acceleration signal output from an acceleration sensor of the information terminal 101. For example, the processing unit 12 detects vibration of the information terminal 101 based on the acceleration signal included in the received signal, and the acquisition unit 122 acquires state information indicating that the information terminal 101 is in a vibration state based on the detection result of the processing unit 12. Furthermore, the acquisition unit 122 may acquire state information indicating that the information terminal 101 is in a non-vibration state based on the detection result of the processing unit 12 when the information terminal 101 is not vibrating.

[0089] (1-7-6e) Acquisition of operation information The detection unit 15 detects a predetermined action (gesture, eye movement, knock, etc.) of the moving object 10 based on one or more types of signals from the video signal from the camera and the audio signal from the microphone, and the acquisition unit 122 acquires action information indicating that the moving object 10 has performed the predetermined action based on the detection result of the detection unit 15.

[0090] Specifically, when the detection result of the detection unit 15 is the detection of a gesture by the moving object 10, the acquisition unit 122 acquires motion information indicating that the moving object 10 has made a gesture. When the detection result of the detection unit 15 is the detection of a movement of the line of sight of the moving object 10 toward the access location AL1, the acquisition unit 122 acquires motion information indicating that the moving object 10 has moved its line of sight toward the access location AL1. When the detection result of the detection unit 15 is the detection of a knocking sound, the acquisition unit 122 acquires motion information indicating that the moving object 10 has knocked.

[0091] (1-8) Judgment section The determination unit 123 determines whether or not the mobile object 10 intends to access the predetermined area A1 (access intention) based on a determination condition using the determination information acquired by the acquisition unit 122, and acquires a determination result.

[0092] (1-8-1) Judgment based on location conditions using location information The determination unit 123 determines whether or not the mobile object 10 has an intention to access based on a location condition using, for example, location information. When the location condition is that the location indicated by the location information is within a predetermined range, the determination unit 123 may determine that there is an intention to access if the location indicated by the location information is within the predetermined range, and may determine that there is no intention to access if the location indicated by the location information is not within the predetermined range.

[0093] (1-8-2) Judgment based on location change conditions using location change information Alternatively, the determination unit 123 may determine whether or not the mobile object 10 has an intention to access based on a position change condition using the position change information. When the position change condition is that the position change indicated by the position change information is equal to or less than a predetermined value, the determination unit 123 may determine that there is an intention to access if the position change indicated by the position change information is equal to or less than the predetermined value, and may determine that there is no intention to access if the position change indicated by the position change information is not equal to or less than the predetermined value.

[0094] (1-8-3) Judgment based on distance conditions using distance information Alternatively, the determination unit 123 may determine whether or not the mobile object 10 has an intention to access based on a distance condition using distance information. When the distance condition is that the distance indicated by the distance information is equal to or less than a predetermined value, the determination unit 123 may determine that there is an intention to access if the distance indicated by the distance information is equal to or less than the predetermined value, and may determine that there is no intention to access if the distance indicated by the distance information is not equal to or less than the predetermined value.

[0095] (1-8-4) Decision based on state conditions using state information The determination unit 123 determines whether or not there is an access intention of the mobile object 10 based on a state condition using the state information. When the state condition is a condition that the state indicated by the state information is a predetermined state, the determination unit 123 may determine that there is an access intention when the state indicated by the state information is the predetermined state, and may determine that there is no access intention when the state indicated by the state information is not the predetermined state.

[0096] For example, predetermined state information relating to a predetermined state of the information terminal 101 may be stored in the memory of the access control device 1. Then, in the access control device 1, when the similarity between the state information acquired by the acquisition unit 122 and the predetermined state information stored in the memory is equal to or greater than a threshold, the determination unit 123 may determine that the predetermined state has been detected.

[0097] More specifically, one or more pieces of predetermined state information corresponding to one or more predetermined states may be stored in the memory, and the determination unit 123 may identify, from among the one or more pieces of predetermined state information stored in the memory, the predetermined state information that is closest to the state information acquired by the acquisition unit 122. Then, the determination unit 123 may determine that the predetermined state corresponding to the identified predetermined state information has been detected when the similarity between the state information acquired by the acquisition unit 122 and the identified predetermined state information is equal to or greater than a threshold.

[0098] (1-8-5) Judgment based on operating conditions using operating information Alternatively, the determination unit 123 may determine whether or not the mobile object 10 has an intention to access based on an action condition using the action information. When the action condition is that the action indicated by the action information is a predetermined action, the determination unit 123 may determine that there is an intention to access if the action indicated by the action information is the predetermined action, and may determine that there is no intention to access if the action indicated by the action information is not the predetermined action.

[0099] For example, predetermined motion information regarding a predetermined motion of the mobile object 10 may be stored in the memory of the access control device 1. Then, in the access control device 1, when the similarity between the motion information acquired by the acquisition unit 122 and the predetermined motion information stored in the memory is equal to or greater than a threshold, the determination unit 123 may determine that the predetermined motion has been detected.

[0100] More specifically, one or more pieces of predetermined motion information corresponding to one or more predetermined motions may be stored in the memory, and the determination unit 123 may identify, from the one or more pieces of predetermined motion information stored in the memory, the predetermined motion information that is closest to the motion information acquired by the acquisition unit 122. Then, the determination unit 123 may determine that a predetermined motion corresponding to the identified predetermined motion information has been detected when the similarity between the motion information acquired by the acquisition unit 122 and the identified predetermined motion information is equal to or greater than a threshold.

[0101] (1-8-6) Judgment result The determination result is the result of the determination by the determination unit 123. The determination result is, for example, a first determination result indicating "access intent" or a second determination result indicating "access intent not".

[0102] (1-8-7) Decision based on a decision condition that includes one or more conditions (1-8-7a) First example of judgment For example, when the acquisition unit 122 acquires one type of judgment information from among position information, position change information, status information, and operation information, and the judgment condition is one condition corresponding to the acquired one type of judgment information, an example of judgment is as follows: That is, when one condition that is the judgment condition is satisfied, the judgment unit 123 determines that there is an intention to access and acquires a first judgment result, whereas when the one condition that is the judgment condition is not satisfied, the judgment unit 123 determines that there is no intention to access and acquires a second judgment result.

[0103] (1-8-7b) Second example An example of a judgment when the acquisition unit 122 acquires two or more types of judgment information and the judgment conditions include two or more conditions corresponding to the acquired two or more types of judgment information is as follows: That is, for example, when at least one condition of two or more conditions corresponding to two or more types of judgment information is satisfied, the judgment unit 123 judges that there is an intention to access and acquires a first judgment result, whereas when none of the conditions is satisfied, the judgment unit 123 judges that there is no intention to access and acquires a second judgment result.

[0104] Note that the above second judgment example is an example of judgment when two or more conditions are connected by an "OR" relationship (hereinafter referred to as an "OR relationship"), but two or more conditions may also be connected by an "AND" relationship (hereinafter referred to as an "AND relationship"). When the relationship between two or more conditions is an OR relationship, if at least one of the two or more conditions is satisfied, the judgment result is a positive judgment result (Yes), and if none of the conditions is satisfied, the judgment result is a negative judgment result (No). Also, when the relationship between two or more conditions is an AND relationship, if all of the two or more conditions are satisfied, the judgment result is a positive judgment result (Yes), and if even one condition is not satisfied, the judgment result is a negative judgment result (No).

[0105] (1-8-7c) Third example An example of a judgment when two or more conditions have an AND relationship is as follows: In other words, when two or more conditions corresponding to two or more types of judgment information are all satisfied, the judgment unit 123 judges that there is an intention to access and obtains a first judgment result, whereas when even one condition is not satisfied, the judgment unit 123 judges that there is no intention to access and obtains a second judgment result.

[0106] In the second judgment example described above, the relationship between the conditions is only an OR relationship, and in the third judgment example described above, the relationship between the conditions is only an AND relationship, but if the acquisition unit 122 acquires three or more types of judgment information and the judgment conditions include three or more conditions corresponding to the acquired three or more types of judgment information, there may be a mixture of AND relationships and OR relationships between the three or more conditions.

[0107] (1-8-7d) Fourth Example An example of a judgment when the judgment conditions include a first judgment condition to a third judgment condition, the first judgment condition and the second judgment condition have an AND relationship, and the first judgment condition and the second judgment condition have an OR relationship with the third judgment condition is as follows: That is, when both the first judgment condition and the second judgment condition are satisfied, or when the third judgment condition is satisfied, the control unit 124 judges that there is an intention to access and acquires the first judgment result, whereas when at least one of the first judgment condition and the second judgment condition is not satisfied and the third judgment condition is not satisfied, the control unit 124 judges that there is no intention to access and acquires the second judgment result.

[0108] The first to fourth judgment examples are examples in which the relationships between multiple conditions are predetermined. The relationships between multiple conditions may be configurable. "Configurable" means that it is possible to at least either set a new relationship between multiple conditions or change an already set relationship. Setting the relationships between multiple conditions will be described later (see "(2-1) Setting unit").

[0109] (1-9) Control unit The control unit 124 has various operation modes, for example, operation modes that control access of the mobile object 10 to the predetermined area A1 based on the determination result of the determination unit 123 and the authentication result of the authentication unit 121.

[0110] In this operating mode, the control unit 124 permits the mobile body 10 to access the specified area A1 when the judgment result of the judgment unit 123 is the first judgment result and the authentication result of the authentication unit 121 is the first authentication result, while prohibiting the mobile body 10 from accessing the specified area A1 when the judgment result of the judgment unit 123 is the second judgment result or the authentication result of the authentication unit 121 is the second authentication result.

[0111] Here, "when the judgment result of the judgment unit 123 is the second judgment result, or the authentication result of the authentication unit 121 is the second authentication result" includes not only "when the judgment result of the judgment unit 123 is the second judgment result and the authentication result of the authentication unit 121 is the first authentication result" and "when the judgment result of the judgment unit 123 is the first judgment result and the authentication result of the authentication unit 121 is the second authentication result", but also "when the judgment result of the judgment unit 123 is the second judgment result and the authentication result of the authentication unit 121 is the second authentication result".

[0112] In this embodiment, the control unit 124 further has a second operation mode different from the above operation mode (first operation mode). The second operation mode and the like will be described later (see "(2-2) First operation mode and second operation mode" and "(2-3) Switching between operation modes and switching operation").

[0113] (1-10)Advantages According to the above configuration, the access control system 100, which is configured solely by the access control device 1, can authenticate a mobile body 10 located near a specified area A1, and if it determines that the mobile body 10 intends to access the specified area A1, allow the mobile body 10 to access the specified area A1, thereby improving security.

[0114] (2) Details of the access control device Next, a detailed description will be given of the access control device 1. In the following description, matters that have already been explained as essential parts will be omitted or simplified.

[0115] (2-1) Setting section 1, the processing unit 12 further includes a setting unit 125. The setting unit 125 sets the judgment condition from one or more conditions.

[0116] For example, the setting unit 125 may set one condition selected from one or more conditions as the judgment condition, or may set multiple conditions selected from two or more conditions as the judgment condition. Here, setting one condition as the judgment condition may be rephrased as setting a judgment condition including only one condition. Furthermore, setting multiple conditions as the judgment condition may be rephrased as setting a judgment condition including multiple conditions. In this way, one or more conditions are options prepared in advance when the setting unit 125 sets the judgment condition.

[0117] (2-1-1) One or more conditions In this embodiment, the one or more conditions are, for example, one or more of a position condition, a position change condition, a distance condition, an operation condition, and a state condition. Note that the one or more conditions included in the judgment conditions correspond to the "one or more types of information included in the judgment information" described above.

[0118] (2-1-1a) Location conditions The location condition is a judgment condition based on the location information. For example, the location condition is a condition that the location indicated by the location information is within a predetermined range. The predetermined range may be, for example, a circle with a predetermined radius centered on a representative point P2 (see FIG. 3) of the access location AL1 in the predetermined area A1. The predetermined radius may be, for example, half the length of the side of the rectangular predetermined area A1 on which the access location AL1 is located (for example, 5 m).

[0119] (2-1-1b) Position change conditions The position change condition is a judgment condition based on the position change information. The position change condition may be, for example, a condition that the position change indicated by the position change information is equal to or less than a predetermined value. The predetermined value is, for example, "0" or a value so small that it can be regarded as "0" (for example, "0.1 m").

[0120] (2-1-1c) Distance conditions The distance condition is a judgment condition based on distance information. For example, the distance condition may be a condition that the distance indicated by the distance information is equal to or less than a predetermined value.

[0121] (2-1-1d) State conditions The status condition is a judgment condition based on the status information. The status condition may be, for example, that the status indicated by the status information is a predetermined status, that status information indicating that a predetermined status has been detected has been acquired, or that a status has been detected whose similarity to the predetermined status is equal to or greater than a threshold. The similarity may be, for example, the similarity between the predetermined status information stored in the memory of the access control device 1 and the status information acquired by the acquisition unit 122, as described in "(1-8-4) Judgment Based on Status Conditions Using Status Information."

[0122] (2-1-1e) Operating conditions The action condition is a judgment condition based on the action information. The action condition may be, for example, that the action indicated by the action information is a predetermined action, that action information indicating that a predetermined action has been detected has been acquired, or that an action whose similarity to the predetermined action is equal to or greater than a threshold has been detected. The similarity may be, for example, the similarity between the predetermined action information stored in the memory of the access control device 1 and the action information acquired by the acquisition unit 122, as described in "(1-8-5) Judgment Based on Action Conditions Using Action Information."

[0123] (2-1-2) Example of condition setting: Setting judgment conditions including one condition In this embodiment, the one or more conditions that are options in the condition setting are, for example, five conditions: a position condition, a position change condition, a distance condition, an operation condition, and a state condition. The setting unit 125 may set a judgment condition that includes one condition selected from these five conditions (i.e., any one of the position condition, the position change condition, the distance condition, the operation condition, and the state condition). In more detail, for example, the output unit 13 displays a selection tab listing five conditions on the display, the receiving unit 11 receives a selection operation to select one condition from the five conditions listed on the selection tab displayed on the display, and the setting unit 125 sets a judgment condition that includes the selected one condition.

[0124] In this way, the setting unit 125 can set any one of the position condition, position change condition, distance condition, operation condition, and state condition, thereby making it possible to set conditions according to the level of security required for a specified area A1.

[0125] (2-1-3) Combination of authentication results and judgment results based on various conditions (2-1-3a) Combination of authentication results and location-based judgment results When the setting unit 125 sets the location condition as the judgment condition, the acquisition unit 122 acquires the location information as the judgment information, and the judgment unit 123 judges whether or not the mobile object 10 intends to access based on the location condition using the location information.

[0126] In this way, in addition to the authentication results for at least one of the information terminal 101 and the mobile body 10, security can be improved by taking into account whether or not there is an intention to access, determined based on location conditions using the location information of the mobile body 10.

[0127] (2-1-3b) Combination of authentication results and judgment results based on location change conditions When the setting unit 125 sets the location change condition as the judgment condition, the acquisition unit 122 acquires the location change information as judgment information, and the judgment unit 123 judges whether or not the mobile body 10 intends to access based on the location change condition using the location change information.

[0128] In this way, in addition to the authentication results for at least one of the information terminal 101 and the mobile body 10, security can be improved by taking into consideration whether or not there is an intention to access, determined based on location change conditions using location change information for the mobile body 10.

[0129] (2-1-3c) Combination of authentication results and judgment results based on distance conditions When the setting unit 125 sets the distance condition as the judgment condition, the acquisition unit 122 acquires distance information as judgment information, and the judgment unit 123 judges whether or not the mobile object 10 intends to access based on the distance condition using the distance information.

[0130] In this way, in addition to the authentication results for at least one of the information terminal 101 and the mobile body 10, security can be improved by taking into account whether or not there is an intention to access, determined based on distance conditions using distance information from the information terminal 101.

[0131] (2-1-3d) Combination of authentication results and judgment results based on state conditions When the setting unit 125 sets the state condition as the judgment condition, the acquisition unit 122 acquires the state information as the judgment information, and the judgment unit 123 judges whether the mobile object 10 intends to access based on the state condition using the state information.

[0132] In this way, in addition to the authentication results for at least one of the information terminal 101 and the mobile body 10, security can be improved by taking into consideration whether or not there is an intention to access, determined based on status conditions using status information of the information terminal 101.

[0133] (2-1-3e) Combination of authentication results and judgment results based on operating conditions When the setting unit 125 sets the operation condition as the judgment condition, the acquisition unit 122 acquires the operation information as the judgment information, and the judgment unit 123 judges whether the mobile object 10 intends to access based on the operation condition using the operation information.

[0134] In this way, in addition to the authentication results for at least one of the information terminal 101 and the mobile body 10, security can be improved by taking into consideration whether or not there is an intention to access, determined based on status conditions using the operation information of the mobile body 10.

[0135] (2-2) First Operation Mode and Second Operation Mode The control unit 124 has a first operation mode, which is the operation mode described above, and a second operation mode, which is different from the first operation mode. The second operation mode is an operation mode in which access to the predetermined area A1 is controlled based on the authentication result of the authentication unit 121, not based on the judgment result of the judgment unit 123.

[0136] When operating in the second operation mode, the control unit 124 permits or prohibits the mobile object 10 from accessing the predetermined area A1 based on the authentication result of the authentication unit 121, not on the determination result of the determination unit 123.

[0137] In detail, when operating in the second operating mode, the control unit 124 permits the mobile body 10 to access the specified area A1 if the authentication result of the authentication unit is the first authentication result, and prohibits (in other words, does not permit) the mobile body 10 from accessing the specified area A1 if the authentication result of the authentication unit is the second authentication result.

[0138] In this embodiment, when the control unit 124 operates in the second operation mode, the acquisition unit 122 and the determination unit 123 both stop operating.

[0139] (2-3) Switching between operation modes and switching operations The operation mode of the control unit 124 is switched between the first operation mode and the second operation mode when the reception unit 11 receives a switching operation. The switching operation is an operation for switching the operation mode of the control unit 124.

[0140] In more detail, when the control unit 124 is operating in the first operation mode and the reception unit 11 receives a switching operation to the second operation mode, the operation mode of the control unit 124 switches from the first operation mode to the second operation mode. Also, when the control unit 124 is operating in the second operation mode and the reception unit 11 receives a switching operation to the first operation mode, the operation mode of the control unit 124 switches from the second operation mode to the first operation mode.

[0141] In this way, the control unit 124 has the first operation mode and the second operation mode, so that security can be improved as needed.

[0142] (3) Hardware (3-1) Information terminal The information terminal 101 has a short-range wireless communication module, an acceleration sensor, a gyroscope, a processor, and a memory. The short-range wireless communication module realizes short-range wireless communication with the communication unit 14. The acceleration sensor outputs an acceleration signal corresponding to the movement of the information terminal 101. The gyroscope outputs an angular velocity signal corresponding to the rotation (e.g., change in tilt) of the information terminal 101. The memory stores various information and programs including authentication information, and the processor operates in cooperation with the short-range wireless communication module, the acceleration sensor, and the gyroscope based on the programs and various information stored in the memory, thereby realizing the functions of the information terminal 101.

[0143] (3-2) Robot A robot, which is a type of moving body 10, has a movement mechanism including wheels and motors for driving the wheels, a detection circuit including an image sensor, and a control circuit that controls the running mechanism based on the output of the detection circuit to achieve autonomous movement. The robot is equipped with an information terminal 101.

[0144] (3-3) Access control device The access control device 1 includes, for example, a short-range wireless communication module, a camera and microphone, a display with a touch panel, a processor, and a memory. The short-range wireless communication module realizes the function of a communication unit 14. The camera and microphone realize the function of a detection unit 15. The touch panel realizes the function of a reception unit 11, and the display realizes the function of an output unit 13.

[0145] One or more of the short-range wireless communication module, camera, microphone, and touch panel display may be external to the access control device 1. When one or more devices are external to the access control device 1, the one or more devices and the access control device 1 are communicatively connected via a communication medium 200 (see FIG. 4, described below).

[0146] In particular, if the camera and microphone are external to the access control device 1, the camera and microphone must be installed near the access point AL1 in the specified area A1, but the access control device 1 may be installed at a location away from the access point AL1.

[0147] The memory stores various information and programs including registered authentication information, and the processor operates based on the programs and various information stored in the memory to realize the functions of the processing unit 12, authentication unit 121, acquisition unit 122, judgment unit 123, control unit 124, and setting unit 125.

[0148] In addition, if the authentication by the authentication unit 121 is to identify the mobile body 10 based on the authentication information received by the communication unit 14 and does not include a comparison between the received authentication information and the registered authentication information, the registered authentication information does not need to be stored in the memory.

[0149] (4) Example of operation The access control device 1 (access control system 100) operates, for example, according to the flowchart of Fig. 2. The processing of Fig. 2 starts when the access control device 1 is started, and ends when the operation of the access control device 1 is stopped.

[0150] The processing unit 12 determines whether the communication unit 14 has received a wireless signal via short-range wireless communication from the information terminal 101 (step S1). If it is determined that the communication unit 14 has not received a wireless signal via short-range wireless communication from the information terminal 101 (No in step S1), the processing returns to step S1.

[0151] If it is determined in step S1 that the communication unit 14 has received a wireless signal from the information terminal 101 via short-range wireless communication (Yes), the authentication unit 121 performs authentication (step S2). More specifically, if the wireless signal received in step S1 includes authentication information, the authentication unit 121 acquires, as the authentication result, a first authentication result indicating that authentication information has been received from the information terminal 101 via short-range wireless communication. On the other hand, if the received wireless signal does not include authentication information, the authentication unit 121 acquires, as the authentication result, a second authentication result indicating that the communication unit 14 has not received authentication information via short-range wireless communication.

[0152] Next, the processing unit 12 determines whether the operation mode of the control unit 124 is the first operation mode (step S3). If it is determined that the operation mode of the control unit 124 is not the first operation mode (No in step S3), the processing proceeds to step S7.

[0153] If it is determined in step S3 that the operation mode of the control unit 124 is the first operation mode (Yes), the acquisition unit 122 acquires determination information (step S4). In more detail, for example, the position information and the position change information are acquired as the determination information based on the wireless signal received by the communication unit 14 from the information terminal 101 via short-range wireless communication.

[0154] The determination unit 123 determines whether or not the mobile object 10 carrying the information terminal 101 has an intention to access the predetermined area A1 (access intention) based on the determination condition using the determination information acquired in step S4 (step S5). In detail, the determination unit 123 determines whether or not the determination condition "the mobile object 10 moves toward the access location AL1 and stops in front of the access location AL1" is satisfied, for example, using the position information and the position change information. If the determination unit 123 determines that the determination condition is satisfied, it acquires a first determination result indicating "there is an intention to access." On the other hand, if the determination unit 123 determines that the determination condition is not satisfied, it acquires a second determination result indicating "there is no intention to access."

[0155] Next, the control unit 124 performs access control based on the determination result of step S5 and the authentication result of step S2 (step S6). More specifically, if a first determination result is acquired as the determination result and a first authentication result is acquired as the authentication result, the control unit 124 permits the mobile object 10 to access the predetermined area A1 (for example, unlocks the access location AL1 in the predetermined area A1). On the other hand, if a second determination result is acquired as the determination result or a second authentication result is acquired as the authentication result, the control unit 124 prohibits the mobile object 10 from accessing the predetermined area A1 (for example, locks the access location AL1 or keeps it locked). Then, the process returns to step S1.

[0156] In step S7, the processing unit 12 determines whether the operation mode of the control unit 124 is the second operation mode. If it is determined in step S7 that the operation mode of the control unit 124 is not the second operation mode (No), the processing returns to step S1.

[0157] If it is determined in step S7 that the operation mode of the control unit 124 is the second operation mode (Yes), the control unit 124 performs access control based on the authentication result of step S2 (step S8). Specifically, if a first authentication result is acquired as the authentication result, the control unit 124 permits the mobile object 10 to access the predetermined area A1 (for example, unlocks the access location AL1). On the other hand, if a second authentication result is acquired as the authentication result, the control unit 124 prohibits the mobile object 10 from accessing the predetermined area A1 (for example, locks the access location AL1 or keeps it locked). Then, the process returns to step S1.

[0158] (5) Specific examples In this specific example, the predetermined area A1 is a room, and the access point AL1 to the predetermined area A1 is a door provided at the entrance to the room. The door is automatically locked and unlocked by the access control device 1. The mobile object 10 is a human body, that is, a user's body (hereinafter simply referred to as "user"), and the information terminal 101 is a smartphone carried by the user.

[0159] The smartphone's memory stores a user ID as authentication information, and the smartphone's communication module transmits a wireless signal containing the user ID stored in the memory via UWB short-range wireless communication. This wireless signal transmission operation is repeated at a predetermined cycle (for example, 10 times per second).

[0160] In the access control device 1, the control unit 124 operates in a first operating mode, and the authentication unit 121 obtains a first authentication result when the communication unit 14 receives a user ID via short-range wireless communication, and obtains a second authentication result when the communication unit 14 does not receive a user ID via short-range wireless communication.

[0161] Here, the case where communication unit 14 receives the user ID via short-range wireless communication means that communication unit 14 receives a wireless signal via short-range wireless communication and the received signal includes the user ID, and the case where communication unit 14 does not receive the user ID via short-range wireless communication means that communication unit 14 receives a wireless signal via short-range wireless communication but the received signal does not include the user ID. Note that even when communication unit 14 does not receive a wireless signal via short-range wireless communication, authentication unit 121 may acquire the second authentication result at regular time intervals.

[0162] The acquisition unit 122 acquires position information and position change information based on the received signal received by the communication unit 14 from the information terminal 101, and further acquires distance information based on the position information. The distance information in this specific example is information indicating the distance from the mobile object 10 to the access location AL1. The distance from the mobile object 10 to the access location AL1 is, for example, the distance from the representative point P1 of the information terminal 101 to the representative point P2 of the access location AL1, as shown in Fig. 3, and more specifically, the length of the line segment LS1 connecting the representative points P1 and P2.

[0163] Furthermore, the acquisition unit 122 acquires movement information based on the position information and the position change information. The movement information is information relating to the movement of the moving object 10. The movement information may be, for example, a vector (hereinafter sometimes referred to as "vector V1") indicating the movement direction and speed of the moving object 10, such as the arrow indicated by reference sign V1 in FIG. 3.

[0164] The direction of vector V1 corresponds to the moving direction of moving body 10, and the magnitude of vector V1 corresponds to the speed of moving body 10. The motion information is expressed as a set of direction information indicating the moving direction of moving body 10 (e.g., the direction of vector V1) and speed information indicating the speed of moving body 10 (e.g., the magnitude of vector V1).

[0165] The acquisition unit 122 then acquires deviation information based on the acquired movement information. The deviation information is information indicating the deviation of the moving direction of the moving object 10 with respect to the direction from the moving object 10 to the access location AL1 (hereinafter, may be referred to as "direction deviation"). In this specific example, the direction deviation is the angle θ (hereinafter, may be referred to as "deviation angle") that the moving direction V1 of the moving object 10 makes with respect to the line segment LS1, as shown in FIG. 3. The direction deviation information is information indicating the deviation angle.

[0166] As described above, in this specific example, the acquisition unit 122 acquires distance information and direction deviation information as determination information based on a reception signal received by the communication unit 14 via short-range wireless communication from the information terminal 101. The determination unit 123 determines whether there is an intention to access (enter) a predetermined area A1 (room) based on a determination condition using the acquired distance information and direction deviation information.

[0167] The judgment conditions are judgment conditions related to position and position change, for example, "the mobile object 10 moves toward the access location AL1 and stops in front of the access location AL1." More specifically, this judgment condition is composed of a first judgment condition "the mobile object 10 moves toward the access location AL1" and a second judgment condition "the mobile object 10 stops in front of the access location AL1," and the first and second judgment conditions have an AND relationship.

[0168] Specifically, the first determination condition is a condition "distance≧first distance threshold" and "velocity≧first velocity threshold" and "deviation angle≦deviation angle threshold" that uses the distance information and direction deviation information acquired by the acquisition unit 122 as described above. Furthermore, the second determination condition is a condition "distance≦second distance threshold" and "velocity≦second velocity threshold" (where "second distance threshold<first distance threshold" and "second velocity threshold<first velocity threshold") that uses the distance information and velocity information acquired by the acquisition unit 122 as described above.

[0169] The determination unit 123 determines that the moving object 10 has an intention to enter the predetermined area A1 (entry intention present) when both the first determination condition and the second determination condition are satisfied. Furthermore, the determination unit 123 determines that the moving object 10 does not have an intention to enter the predetermined area A1 (entry intention absent) when at least one of the first determination condition and the second determination condition is not satisfied.

[0170] Note that functions similar to those of the access control system 100 may be embodied as a control method, a computer program, or a non-transitory recording medium on which a program is recorded.

[0171] (6) Access control method An access control method according to one embodiment of the present disclosure includes an authentication step, an acquisition step, a determination step, and a control step. In the authentication step, authentication is performed based on authentication information received from the information terminal 101 via a short-range wireless communication method different from the proximity method. In the acquisition step, determination information is acquired for determining whether or not the mobile body 10 intends to access a predetermined area A1. The determination information is information about at least one of the information terminal 101 and the mobile body 10 that possesses the information terminal 101. In the determination step, whether or not the mobile body 10 intends to access the predetermined area A1 is determined based on a determination condition using the determination information acquired in the acquisition step. The control step has an operation mode for controlling access to the predetermined area A1 based on the determination result of the determination step and the authentication result of the authentication step.

[0172] The access control method may include, for example, step S2 (authentication step), step S4 (acquisition step), step S5 (determination step), and steps S3 and S6 (control steps) out of steps S1 to S8 described in the flowchart of FIG.

[0173] (7) Program A program according to one aspect of the present disclosure is a program for causing a computer system to function as the above-described access control method. The program is, for example, a program for causing one or more processors to execute the access control method. The "one or more processors" includes the case of a single processor and the case of two or more processors. The "single processor" is, for example, the processor of the access control system 100 realized solely by the access control device 1 described in the embodiment, and the "two or more processors" is, for example, the three processors corresponding to the access control device 1, communication device 2, and detection device 3 that constitute the access control system 100 described in the first modification.

[0174] (8) Computer Systems The access control system 100 of the present disclosure includes a computer system. The computer system is primarily composed of a processor and memory as hardware. The processor executes a program stored in the computer system's memory to realize the functions of the access control system 100 of the present disclosure. The program may be pre-stored in the computer system's memory, provided via a telecommunications line, or provided on a non-transitory recording medium readable by the computer system, such as a memory card, optical disk, or hard disk drive. The processor of the computer system is composed of one or more electronic circuits, including a semiconductor integrated circuit (IC) or a large-scale integrated circuit (LSI). The IC or LSI referred to here is referred to by different names depending on the degree of integration, including integrated circuits called system LSIs, very large-scale integrations (VLSIs), and ultra-large-scale integrations (ULSIs). Furthermore, field-programmable gate arrays (FPGAs), which are programmable after the LSI is manufactured, or logic devices capable of reconfiguring the connections within the LSI or the circuit partitions within the LSI, can also be used as processors. The electronic circuits may be integrated into one chip or distributed across multiple chips. The chips may be integrated into one device or distributed across multiple devices. The computer system referred to here includes a microcontroller having one or more processors and one or more memories. Therefore, the microcontroller is also composed of one or more electronic circuits including a semiconductor integrated circuit or a large-scale integrated circuit.

[0175] Furthermore, it is not essential for the access control system 100 that multiple functions are concentrated in one housing, and the components of the access control system 100 may be distributed across multiple housings. Furthermore, at least some of the functions of the access control system 100 may be realized by the cloud (cloud computing) or the like.

[0176] (9) Variations The above embodiment is merely one of various embodiments of the present disclosure, and various modifications can be made to the above embodiment depending on the design and the like as long as the object of the present disclosure can be achieved.

[0177] Various modifications of the embodiment will be described below. Note that, in the following, descriptions of matters common to the embodiment will be omitted or simplified, and differences will be described in detail.

[0178] (9-1) First Modification of Access Control System Next, a first modified example of the access control system 100 will be described with reference to Fig. 4. In the following, explanations of matters common to the embodiment will be omitted or simplified, and differences will be described in detail.

[0179] As shown in FIG. 4, the access control system 100 of this modification includes an access control device 1, a communication device 2, and a detection device 3.

[0180] In this modification, the predetermined area A1 has two access points AL1. The access control device 1 is placed near one of the two access points AL1 (first access point AL1), and the communication device 2 and the detection device 3 are placed near the other of the two access points AL1 (second access point AL1).

[0181] The access control device 1, the communication device 2, and the detection device 3 are communicably connected via a communication medium 200. The communication medium 200 is a communication medium for performing communication using a method other than the short-range wireless communication method (e.g., UWB communication method) of the communication unit 14.

[0182] The method other than the short-range wireless communication method of the communication unit 14 may be, for example, a short-range wireless communication method other than the UWB method, such as a wireless LAN method or a Bluetooth method, or a wired communication method, such as a wired LAN method or a serial communication method such as RS-232C, etc. The communication medium 200 in this specific example is a wired LAN, but may also be, for example, a wireless LAN or a medium other than a LAN.

[0183] As hardware components, the communication device 2 includes a short-range wireless communication module, and the detection device 3 includes at least one of a camera and a microphone. Each of the access control device 1, the communication device 2, and the detection device 3 further includes a communication module for communication via the communication medium 200.

[0184] For a mobile object 10 located near the first access location AL1, the acquisition unit 122 of this modification acquires authentication information from the information terminal 101 held by the mobile object 10 by wireless communication using the short-range wireless communication method via the communication unit 14 of the access control device 1. On the other hand, for a mobile object 10 located near the second access location AL1, the communication unit 14 of the communication device 2 acquires authentication information from the information terminal 101 held by the mobile object 10 by wireless communication using the short-range wireless communication method, and the acquisition unit 122 receives the terminal information from the communication device 2 by communication over the communication medium 200.

[0185] Furthermore, for a mobile body 10 located near the first access location AL1, the acquisition unit 122 acquires the operation information of the mobile body 10 via the detection unit 15 of the access control device 1. On the other hand, for a mobile body 10 located near the second access location AL1, the detection unit 15 of the detection device 3 acquires the operation information of the mobile body 10, and the acquisition unit 122 receives the operation information from the detection device 3 by communication over the communication medium 200.

[0186] This allows authentication information and operation information for access control to be acquired at each of the multiple access points AL1.

[0187] (9-1-1) Setting conditions for each communication unit, access point, or combination of these The setting unit 125 can set a judgment condition for each communication unit 14, or for each access location AL1, or for each combination of a communication unit 14 and an access location AL1. The setting unit 125 in this modified example sets a judgment condition for each combination of a communication unit 14 and an access location AL1. For example, the setting unit 125 may set a first judgment condition for the combination of a first access location AL1 and the communication unit 14 of the access control device 1, and set a second judgment condition for the combination of a second access location AL1 and the communication unit 14 of the communication device 2.

[0188] This allows the level of security to be varied for each location where the communication unit 14 is placed, or for each access point AL1 in a specified area A1, or for each combination of the location where the communication unit 14 is placed and the access point AL1.

[0189] (9-1-2) Use of a method other than the short-range wireless communication method In this modification, the information terminal 101 and the access control device 1 can perform communication other than short-range wireless communication in addition to short-range wireless communication. Communication other than short-range wireless communication is, for example, communication via a communication medium 200 (see FIG. 4). Each of the information terminal 101 and the access control device 1 further includes a communication module for communication via the communication medium 200.

[0190] The acquisition unit 122 in this modified example acquires terminal information about the information terminal 101 by wireless communication using a short-range wireless communication method, and acquires mobile body information about the mobile body 10 by wireless communication using a short-range wireless communication method or by communication using a method other than the short-range wireless communication method.

[0191] The terminal information is information relating to the information terminal 101. The terminal information is, for example, a terminal ID.

[0192] The mobile object information is information relating to the mobile object 10. The mobile object information is, for example, a mobile object ID. The mobile object ID in this modification is authentication information. The mobile object information may be information about the location of the information terminal 101 detected by the information terminal 101.

[0193] The information terminal 101 transmits terminal information such as a terminal ID to the access control device 1 by communication via the communication medium 200. The information terminal 101 also transmits mobile information such as authentication information to the access control device 1 by wireless communication using a short-range wireless communication method.

[0194] In the access control device 1, the communication unit 14 receives terminal information from the information terminal 101 by communication via the communication medium 200 and mobile body information by wireless communication using the short-range wireless communication method. The acquisition unit 122 acquires, from the communication unit 14, the terminal information received by the communication unit 14 by communication via the communication medium 200 and the mobile body information received by the communication unit 14 by wireless communication using the short-range wireless communication method.

[0195] According to this modified example, in addition to being able to obtain both terminal information and mobile body information through wireless communication using a short-range wireless communication method, mobile body information can also be obtained through communication using a method other than the short-range wireless communication method.

[0196] (9-2) Second Modification of Access Control System The access control system 100 of the embodiment is realized by the access control device 1 alone (see FIG. 1), but in this modification, the components of the access control device 1 of the embodiment are distributed between the access control device 1 and other devices.

[0197] That is, in the embodiment, the access control device 1 is equipped with all of the reception unit 11, processing unit 12, output unit 13, communication unit 14 and detection unit 15, but in this modified example, the reception unit 11, processing unit 12 and output unit 13 are equipped with the access control device 1, and the communication unit 14 and detection unit 15 are equipped with another device.

[0198] More specifically, in the access control system 100 of this modified example, the access control device 1 includes a reception unit 11, a processing unit 12, and an output unit 13, the communication device 2 includes a communication unit 14, and the detection device 3 includes a detection unit 15.

[0199] This modified example may have a configuration in which, for example, in the configuration of the first modified example (see Figure 4), the first access point AL1 near the access control device 1 is removed from the specified area A1, and the communication unit 14 and the detection unit 15 are removed from the access control device 1.

[0200] According to this modification, the access control device 1 can be placed at a location away from the predetermined area A1 (for example, farther than the communication distance of short-range wireless communication).

[0201] (9-3) Deformation of the moving body In the embodiment, the mobile body 10 that is the target of access control by the access control system 100 (access control device 1) is a human body or a robot, but robots may be excluded from the target of access control.

[0202] (9-4) Deformation of a specified area In this modification, the predetermined area A1 is outside a building, a site, or the like.

[0203] (9-4-1) Modification of access to a specified area In this modification, access to the predetermined area A1 means exiting from the predetermined area A1. Access to the predetermined area A1 may be, for example, exiting from the inside of a building, a site, or the like to the outside.

[0204] (9-4-2) Variations in the intent to access a given area In this modification, the intention to access the predetermined area A1 is the intention to leave the predetermined area A1. The access to the predetermined area A1 may be, for example, the intention to exit from the inside of a building, a site, or the like to the outside.

[0205] (9-4-3) Modified access control In this modification, the access control is the control of leaving the predetermined area A1. The access control may be, for example, the control of exit from the inside to the outside of a building or site.

[0206] (9-5) Modifications of authentication and modifications of authentication results In this modified example, the authentication includes the communication unit 14 receiving authentication information from the information terminal 101 held by the mobile body 10 via short-range wireless communication, and further including identifying attributes of the mobile body 10 based on a comparison between the received authentication information and pre-registered authentication information (hereinafter sometimes referred to as "registered authentication information"), and obtaining attribute information indicating the identification result.

[0207] The identified attribute of the mobile body 10 is, for example, an attribute (hereinafter sometimes referred to as a "registered attribute") relating to whether the mobile body 10 is a registered mobile body 10 that has already registered authentication information (for example, a registrant whose user ID has already been registered) or an unregistered mobile body 10 that has not yet registered authentication information (for example, an unregistered mobile body whose user ID has not yet been registered).The identification result, that is, attribute information indicating the registered attribute, is then acquired.

[0208] The authentication result in this modification is attribute information indicating the registered attributes acquired as described above. The attribute information indicating the registered attributes may be, for example, first attribute information indicating a registered mobile object 10 (e.g., "Registered"), or second attribute information indicating an unregistered mobile object 10 (e.g., "Unregistered").

[0209] The authentication unit 121 in this modified example may, for example, determine whether the authentication information received by the communication unit 14 matches registered authentication information pre-stored in the memory of the access control system 100, and if they match, acquire first attribute information as the authentication result, or if they do not match, acquire second attribute information as the authentication result.

[0210] When operating in the first operating mode, the control unit 124 may permit access to a specified area A1 if the authentication result of the authentication unit 121 is first attribute information and the judgment result of the judgment unit 123 is a first judgment result, but may prohibit access to the specified area A1 if the authentication result of the authentication unit 121 is second attribute information or the judgment result of the judgment unit 123 is a second judgment result.

[0211] According to this modification, at the time of authentication, the attributes of the mobile object 10 are identified based on a comparison between the received authentication information and the registered authentication information, thereby further improving security.

[0212] (9-6) Modification of Acquisition of Location Information and Location Change Information: Acquisition of Self-Location by Information Terminal In the embodiment, the location information of the information terminal 101 was acquired by the access control device 1, but in this modified example, the information terminal 101 repeatedly measures its own location based on the signal received from the access control device 1, acquires the location information, and includes the acquired location information in a wireless signal and transmits it to the access control device 1.

[0213] In the access control device 1, the communication unit 14 receives a wireless signal from the information terminal 101, and the processing unit 12 repeatedly acquires location information from the received wireless signal and stores it in chronological order in memory. The processing unit 12 acquires location change information based on the multiple pieces of location information stored in chronological order in the memory.

[0214] (9-7) Modified example of acquiring status information In this modified example, the received signal from the information terminal 101 contains its own location information detected by the information terminal 101, and the processing unit 12 of the access control device 1 acquires location change information based on the location information contained in the received signal from the information terminal 101, and further detects movement of the information terminal 101 based on the location change information, and acquires status information indicating that the information terminal 101 is in a moving state.

[0215] In addition, the wireless signal from the information terminal 101 further includes an acceleration signal from the acceleration sensor of the information terminal 101, and the processing unit 12 of the access control device 1 detects vibration of the information terminal 101 based on the acceleration signal included in the received signal received by the communication unit 14, and obtains status information indicating that the information terminal 101 is in a vibrating state.

[0216] (9-8) Modified example of authentication unit In this modified example, if the received authentication information matches the registered authentication information, the authentication unit 121 obtains an authentication result indicating that the mobile body 10 is a registered mobile body 10, but if the received authentication information does not match the registered authentication information, it does not need to obtain authentication information.

[0217] (9-9) Modified example of communication unit In the embodiment, the communication unit 14 is a component of the access control device 1 (see FIG. 1), but it may be a component of a device separate from the access control device 1. In this modification, the access control device 1 does not have the communication unit 14, and the communication device 2 provided near the access point AL1 has the communication unit 14.

[0218] The communication device 2 is communicatively connected to the access control device 1 via a communication medium 200. When the communication unit 14 of the communication device 2 receives a wireless signal including authentication information from the information terminal 101 via short-range wireless communication, the communication device 2 transmits the wireless signal received by the communication unit 14 to the access control device 1 via the communication medium 200.

[0219] (9-10) Modification of judgment information In the embodiment, the determination information is information relating to both the information terminal 101 and the mobile object 10, but in this modification, it may be information relating to either the information terminal 101 or the mobile object 10.

[0220] For example, if the determination information is information about the information terminal 101 and not information about the mobile body 10, the access control system 100 (access control device 1) may not include the detection unit 15. Also, if the determination information is information about the mobile body 10 and not information about the information terminal 101, the access control system 100 (access control device 1) may not include the communication unit 14.

[0221] (9-11) Variation of tilt The inclination in the embodiment is the inclination of the main axis of the information terminal 101 relative to a vertical line, but the inclination in this modification is the inclination of the main surface of the information terminal 101 relative to a horizontal plane.

[0222] (9-12) Other variations of the access control system The access control system 100 of this modification further includes, in addition to the access control device 1, a plurality of pairs of a communication device 2 and a detection device 3. The predetermined area A1 in this modification has three or more access points AL1.

[0223] The access control device 1 is placed near one of the three or more access points AL1. Furthermore, a pair of a communication device 2 and a detection device 3 is placed near each of the plurality of access points AL1, excluding the access point AL1 where the access control device 1 is placed.

[0224] (9-13) Modification of the setting section The setting unit 125 of this modified example is capable of setting the relationship between conditions.

[0225] The setting unit 125 performs a first setting and a second setting. The first setting is to set one judgment condition or two or more judgment conditions from a plurality of conditions including one or more conditions described in the embodiment as judgment conditions. The second setting is to set the relationship between two or more judgment conditions when two or more judgment conditions are set in the first setting.

[0226] The relationship between two or more judgment conditions is, for example, an AND relationship or an OR relationship, but may also be a combination of an AND relationship and an OR relationship.

[0227] When two or more judgment conditions are set in the first setting and the relationship between the two or more judgment conditions is set to an AND relationship in the second setting, the control unit 124 allows the mobile body 10 to access the specified area A1 if all of the two or more judgment conditions are satisfied, and does not allow the mobile body 10 to access the specified area A1 if even one of the two or more judgment conditions is not satisfied.

[0228] When two or more judgment conditions are set in the first setting and the relationship between the two or more judgment conditions is set to an OR relationship in the second setting, the control unit 124 allows the mobile body 10 to access the specified area A1 if at least one of the two or more judgment conditions is satisfied, and does not allow the mobile body 10 to access the specified area A1 if none of the two or more judgment conditions is satisfied.

[0229] When the first setting sets the first to third judgment conditions, and the second setting sets the relationship between the first judgment condition and the second judgment condition to an AND relationship and the relationship between each of the first judgment condition and the second judgment condition and the third judgment condition to an OR relationship, the control unit 124 permits the mobile object 10 to access the predetermined area A1 if both the first judgment condition and the second judgment condition are satisfied (even if the third judgment condition is not satisfied), or if the third judgment condition is satisfied (even if at least one of the first judgment condition and the second judgment condition is not satisfied).Furthermore, the control unit 124 does not permit the mobile object 10 to access the predetermined area A1 if at least one of the first judgment condition and the second judgment condition is not satisfied and the third judgment condition is not satisfied.

[0230] According to this modification, two or more judgment conditions can be set, and further, when two or more judgment conditions are set, the relationship between the judgment conditions can be changed.

[0231] (9-14) Modification of the second operation mode In the embodiment, when the control unit 124 operates in the first operation mode, the acquisition unit 122 and the determination unit 123 stop operating, but in this modification, the acquisition unit 122 and the determination unit 123 may continue to operate even when the control unit 124 operates in the first operation mode. When operating in the first operation mode, the control unit 124 of this modification performs access control by referring only to the authentication result of the authentication unit 121, without referring to the determination result of the determination unit 123.

[0232] (9-15) Modified operation modes The control unit 124 may further have an operation mode other than the first operation mode and the second operation mode. The operation mode other than the first operation mode and the second operation mode may be, for example, a third operation mode that controls access to the predetermined area A1 based on the determination result of the determination unit 123, not based on the authentication result of the authentication unit 121.

[0233] (10) Summary An access control system (100) according to a first aspect of the present disclosure includes an authentication unit (121), an acquisition unit (122), a determination unit (123), and a control unit (124). The authentication unit (121) performs authentication based on authentication information received from an information terminal (101) via wireless communication using a short-range wireless communication method different from a proximity method. The acquisition unit (122) acquires determination information, which is information about at least one of the information terminal (101) and a mobile object (10) possessing the information terminal (101), for determining whether or not the mobile object (10) intends to access a predetermined area (A1). The determination unit (123) determines whether or not the mobile object (10) intends to access a predetermined area (A1) based on a determination condition using the determination information acquired by the acquisition unit (122). The control unit (124) has an operation mode for controlling access to the predetermined area (A1) based on the determination result of the determination unit (123) and the authentication result of the authentication unit (121).

[0234] According to this aspect, when a mobile object (10) existing in the vicinity of a predetermined area (A1) is authenticated and is determined to have the intention to access the predetermined area (A1), the mobile object (10) is permitted to access the predetermined area (A1), thereby improving security.

[0235] The access control system (100) according to the second aspect is the same as the first aspect, and further includes a setting unit (125). The setting unit (125) sets the judgment condition from one or more conditions.

[0236] According to this aspect, it is possible to set conditions according to the level of security required for the predetermined area (A1).

[0237] In the access control system (100) according to the third aspect, in the second aspect, the acquisition unit (122) acquires location information as determination information. The location information is information relating to the location of the information terminal (101) relative to the communication unit (14). The location of the information terminal (101) relative to the communication unit (14) is estimated based on wireless communication between the communication unit (14) and the information terminal (101) using a short-range wireless communication method. The communication unit (14) performs wireless communication with the information terminal (101) using the short-range wireless communication method. The one or more conditions include a location condition based on the location information.

[0238] According to this aspect, security can be improved by considering the location of the mobile object in addition to the authentication result of at least one of the information terminal 101 and the mobile object 10. By performing location estimation based on wireless communication using a short-range wireless communication method, location information with the accuracy required for access control can be obtained without using a camera or other device to measure the location.

[0239] In the access control system (100) according to the fourth aspect, in the second or third aspect, the one or more conditions include a location change condition based on a change in the location of the information terminal (101) over time.

[0240] According to this aspect, security can be improved by taking into consideration the change in the location of the mobile object in addition to the authentication result of at least one of the information terminal (101) and the mobile object (10).

[0241] In the access control system (100) according to the fifth aspect, in any of the second to fourth aspects, the acquisition unit (122) acquires terminal information about the information terminal (101) by wireless communication using a short-range wireless communication method. The acquisition unit (122) acquires mobile body information about the mobile body (10) by wireless communication using the short-range wireless communication method or by communication using a method other than the short-range wireless communication method.

[0242] According to this aspect, both the terminal information and the mobile object information can be acquired by performing wireless communication using a short-range wireless communication method. The mobile object information can also be acquired by performing communication using a method other than the short-range wireless communication method.

[0243] In the access control system (100) according to a sixth aspect, in any one of the second to fifth aspects, the acquisition unit (122) acquires distance information as determination information. The distance information is information relating to the distance between the communication unit (14) and the information terminal (101). The communication unit (14) performs wireless communication with the information terminal (101) using a short-range wireless communication method.

[0244] The one or more conditions include a distance condition based on distance information.

[0245] According to this aspect, in addition to the authentication result of at least one of the information terminal (101) and the mobile object (10), the distance between the communication unit (14) and the information terminal (101) is also taken into consideration, thereby improving security.

[0246] In the access control system (100) according to a seventh aspect, in any one of the second to fifth aspects, the acquisition unit (122) acquires state information as determination information. The state information is information about at least one of the movement state, tilt state, and vibration state of the information terminal (101). The one or more conditions include a state condition based on the state information.

[0247] According to this aspect, in addition to the authentication result of at least one of the information terminal (101) and the mobile object (10), the state of the mobile object is also taken into consideration, thereby improving security.

[0248] In an access control system (100) according to an eighth aspect, in any of the second to seventh aspects, an acquisition unit (122) acquires motion information from a detection unit (15) as determination information. The detection unit (15) detects motion of a moving object (10). The motion information is information related to a predetermined motion of the moving object (10). The one or more conditions include a motion condition based on the motion information.

[0249] According to this aspect, in addition to the authentication result of at least one of the information terminal (101) and the mobile object (10), the actions of the mobile object (touch, gesture, line of sight, etc.) are taken into consideration, thereby improving security.

[0250] In the access control system (100) according to a ninth aspect, in any of the second to eighth aspects, the setting unit (125) can set a judgment condition for each communication unit (14), or for each access location (AL1), or for each combination of the communication unit (14) and the access location (AL1). The communication unit (14) performs wireless communication with the information terminal (101) using a short-range wireless communication method. The access location is a location from which a predetermined area (A1) can be accessed.

[0251] According to this aspect, the level of security can be made different for each communication unit (14), each access point (AL1), or each combination of a communication unit (14) and an access point (AL1).

[0252] In an access control system (100) according to a tenth aspect, in any one of the first to ninth aspects, the control unit (124) has a first operation mode and a second operation mode, which are operation modes. The second operation mode is an operation mode in which access to a predetermined area (A1) is controlled based on an authentication result, not on a judgment result.

[0253] According to this aspect, the control unit (124) has the first operation mode and the second operation mode, so that security can be improved as needed.

[0254] In an access control system (100) according to an eleventh aspect, in any of the second to ninth aspects, the setting unit (125) performs a first setting and a second setting. The first setting is to set one judgment condition or two or more judgment conditions from a plurality of conditions including one or more conditions as judgment conditions. The second setting is to set a relationship between two or more judgment conditions when two or more judgment conditions are set in the first setting.

[0255] According to this aspect, two or more judgment conditions can be set, and further, when two or more judgment conditions are set, the relationship between the judgment conditions can be changed.

[0256] The access control method according to the twelfth aspect includes an authentication step (S2), an acquisition step (S4), a determination step (S5), and control steps (S3, S6). In the authentication step (S2), authentication is performed based on authentication information. The authentication information is information received from an information terminal (101) via wireless communication using a short-range wireless communication method different from a proximity method. In the acquisition step (S4), determination information is acquired. The determination information is information about at least one of the information terminal (101) and a mobile object (10) that possesses the information terminal (101), and is information for determining whether or not the mobile object (10) intends to access a predetermined area (A1). In the determination step (S5), whether or not the mobile object (10) intends to access a predetermined area (A1) is determined based on the determination information acquired in the acquisition step (S4). The control steps (S3, S6) have an operation mode in which access to the predetermined area (A1) is controlled based on the determination result of the determination step (S5) and the authentication result of the authentication step (S2).

[0257] According to this aspect, when a mobile object (10) existing in the vicinity of a predetermined area (A1) is authenticated and is determined to have the intention to access the predetermined area (A1), the mobile object (10) is permitted to access the predetermined area (A1), thereby improving security.

[0258] A program according to a thirteenth aspect is a program for causing one or more processors to execute the access control method of the twelfth aspect.

[0259] According to this aspect, when a mobile object (10) existing in the vicinity of a predetermined area (A1) is authenticated and is determined to have the intention to access the predetermined area (A1), the mobile object (10) is permitted to access the predetermined area (A1), thereby improving security. [Explanation of symbols]

[0260] 10 Mobile 101 Information terminal 100 Access Control Systems 1. Access control device 11 Reception 121 Authentication Department 122 Acquisition Department 123 Judgment Department 124 Control Unit 125 Settings 14 Communications Department 15 Detector A1 designated area AL1 access point

Claims

1. an authentication unit that performs authentication based on authentication information received from the information terminal by a short-distance wireless communication method different from the proximity method; an acquisition unit that acquires information about at least one of the information terminal and a mobile object having the information terminal, the information being used to determine whether or not the mobile object intends to access a predetermined area; a determination unit that determines whether or not the moving object has the intention based on a determination condition using the determination information acquired by the acquisition unit; a control unit having an operation mode for controlling access to the predetermined area based on the determination result of the determination unit and the authentication result of the authentication unit, Access control system.

2. The determination condition may be set by a setting unit that sets one or more conditions. The access control system of claim 1 .

3. the acquisition unit acquires, as the determination information, location information regarding a location of the information terminal relative to a communication unit that performs wireless communication with the information terminal using the short-range wireless communication method, the location information being estimated based on the wireless communication between the information terminal and the communication unit; the one or more conditions include a location condition based on the location information; The access control system of claim 2 .

4. the one or more conditions include a location change condition based on a change in the location of the information terminal over time; 4. An access control system according to claim 2 or 3.

5. The acquisition unit acquiring terminal information about the information terminal by wireless communication using the short-range wireless communication method; acquiring mobile object information about the mobile object by wireless communication using the short-range wireless communication method or by communication using a method different from the short-range wireless communication method; The access control system of claim 2 .

6. the acquisition unit acquires, as the determination information, distance information relating to a distance between the information terminal and a communication unit that performs wireless communication with the information terminal using the short-range wireless communication method; the one or more conditions include a distance condition based on the distance information; The access control system of claim 2 .

7. the acquisition unit acquires state information relating to at least one of a movement state, a tilt state, and a vibration state of the information terminal as the determination information; the one or more conditions include a state condition based on the state information; The access control system of claim 2 .

8. the acquisition unit acquires, as the determination information, motion information relating to a predetermined motion of the moving object from a detection unit that detects a motion of the moving object; the one or more conditions include an operating condition based on the operating information; The access control system of claim 2 .

9. the setting unit is capable of setting the judgment condition for each communication unit that wirelessly communicates with the information terminal using the short-range wireless communication method, for each access location that can access the predetermined area, or for each combination of the communication unit and the access location. The access control system of claim 2 .

10. The control unit a first operation mode, which is the operation mode; a second operation mode in which access to the predetermined area is controlled based on the authentication result, not based on the determination result; The access control system of claim 1 .

11. The setting unit a first setting for setting one or more judgment conditions from a plurality of conditions including the one or more conditions as the judgment condition; When the two or more judgment conditions are set in the first setting, a second setting is performed to set a relationship between the two or more judgment conditions. The access control system of claim 2 .

12. an authentication step of performing authentication based on authentication information received from the information terminal by a short-distance wireless communication method different from the proximity method; an acquisition step of acquiring information about at least one of the information terminal and a mobile object having the information terminal, the information being used to determine whether or not the mobile object intends to access a predetermined area; a determination step of determining whether or not the intention of the moving object is present based on a determination condition using the determination information acquired in the acquisition step; a control step having an operation mode for controlling access to the predetermined area based on the determination result of the determination step and the authentication result of the authentication step. Access control methods.

13. 13. A method for causing one or more processors to execute the access control method of claim 12. program.

Images