Control device, control method, and program for access control system

Abstract

The present invention provides an access control device, an access control system, an access control method and program, and a control device capable of configuring the access control system, all of which are capable of issuing warnings against unauthorized intrusion into a controlled area with a simple configuration. [Solution] The control device 100 includes an acquisition unit 151 that acquires the tag ID of an RF tag read by a tag reader installed at the entrance and exit of the controlled area, a camera control unit 152 that causes a camera installed in the controlled area to photograph the controlled area after the tag ID has been acquired by the tag reader, and a transfer unit 153 that transfers the tag ID acquired by the camera control unit 152 and the image data of the controlled area that the camera control unit 152 has photographed to the access control server.

Description

Technical Field

[0004] , , , ,

[0005] , , ,

[0003] , , ,

[0001] The present invention relates to a control device, an entrance / exit management device, an entrance / exit management system, an entrance / exit management method, and a program.

Background Art

[0002] In buildings and rooms that require strict management, such as data centers, offices, and control command rooms, an entrance / exit management system for regulating the entry and exit of people is used. In a conventional entrance / exit management system, there are cases where it is impossible to detect unauthorized intrusion by others other than authorized entrants when the door is opened or closed, and methods for solving such problems have been developed. For example, Patent Document 1 discloses a security system that counts the number of mobile radios within a security area using a communication antenna and counts the number of monitored objects from an image of the security area captured by a camera, and outputs an alarm signal if the number of monitored objects is greater than the number of mobile radios.

Prior Art Documents

Patent Documents

[0003]

Patent Document 1

Summary of the Invention

Problems to be Solved by the Invention

[0004] In the security system of Patent Document 1, when a monitored object is detected, an image of the entire area within the security area is captured, and the number of mobile radios within the security area is counted. Therefore, there is a problem that at least three components, namely a communication antenna, a camera, and object detection means, need to be installed, and the system configuration becomes complicated.

[0005] The present invention was made based on the above background, and aims to provide an access control device, an access control system, an access control method and program that can issue warnings against unauthorized intrusion into a controlled area with a simple configuration, as well as a control device that can configure said access control system. [Means for solving the problem]

[0006] To achieve the above objective, the control device according to the present invention is An acquisition unit that acquires identification information read by an authentication device installed at the entrance and exit of the controlled area, After the authentication device reads the identification information, a camera control unit causes a camera installed within the controlled area to take pictures of the controlled area, A transfer unit transfers the identification information acquired by the acquisition unit and the image data of the controlled area captured by the camera by the camera control unit to the access control server. It is equipped with. [Effects of the Invention]

[0007] According to the present invention, it is possible to provide an access control device, an access control system, an access control method and program that can issue a warning against unauthorized intrusion into a controlled area with a simple configuration, and a control device that can configure the access control system. [Brief explanation of the drawing]

[0008] [Figure 1] This is a schematic diagram showing the configuration of an access control system according to an embodiment of the present invention. [Figure 2] This figure shows the arrangement of a tag reader and a camera in an access control system according to an embodiment of the present invention. [Figure 3] This is a block diagram showing the hardware configuration of a control device according to an embodiment of the present invention. [Figure 4] (a) is a diagram showing an example of a data table for the entry / exit history storage unit, and (b) is a diagram showing an example of a data table for the image data storage unit. [Figure 5] This is a block diagram showing the hardware configuration of an access control server according to an embodiment of the present invention. [Figure 6] This is a flowchart showing the flow of access control processing performed by the control device according to an embodiment of the present invention. [Figure 7] This is a flowchart showing the flow of access control processing performed by the access control server according to an embodiment of the present invention. [Modes for carrying out the invention]

[0009] Hereinafter, the control device, access control device, access control system, access control method, and program according to embodiments of the present invention will be described in detail with reference to the drawings. In each drawing, the same or equivalent parts are denoted by the same reference numerals.

[0010] The access control system according to this embodiment manages entry and exit to a controlled area by detecting unauthorized entry by persons other than those authorized to enter and issuing a warning based on the reading history of a tag reader and images taken of the controlled area. Unauthorized entry is when someone other than an authorized person enters the controlled area, and includes, for example, simultaneous entry where another person enters together with an authorized person. The controlled area is an area where people's entry and exit are restricted and is separated by structures such as buildings or rooms. The tag reader is used, for example, to unlock a door installed at the entrance to the controlled area. In this embodiment, we will explain using the example of managing entry and exit from the office space to the control room, which is the controlled area, and where a lockable door is installed between the office space and the control room.

[0011] In the access control system according to this embodiment, RF tags are individually assigned to authorized entrants. The RF tags are embedded, for example, in a mobile terminal or IC card, and each RF tag stores a tag ID (Identification), which is an example of information that identifies the RF tag. The tag ID is an example of identification information that identifies authorized entrants. RFID (Radio Frequency Identification) is used to read the tag ID by the tag reader. The RF tag is a passive tag that operates using electromagnetic waves from a tag reader as an energy source, for example. The tag reader is an example of an authentication device that causes the access control server to authenticate whether the read tag ID is legitimate.

[0012] In the access control system according to this embodiment, when an authorized user touches an RF tag to a tag reader installed near the door upon entering or leaving, the door between the workspace and the control room is unlocked. Once the tag ID of the RF tag is read by the tag reader, the entire area of ​​the control room is photographed by a camera a certain period of time from that point. Based on the tag ID reading history and the images of the entire area of ​​the control room, the number of people in the control room at the time of entry and exit is counted, and if the number of people counted in each does not match, a warning is issued to the supervisor.

[0013] As shown in Figures 1 and 2, the access control system 1 comprises tag readers 2A and 2B, an unlocking device 3, a camera 4, a monitoring device 5, a control device 100, and an access control server 200. Tag reader 2A is installed on the office side (entrance side) of the door, and tag reader 2B is installed on the command room side (exit side) of the door. The unlocking device 3, camera 4, and control device 100 are installed in the command room, the monitoring device 5 is installed in the office space, and the access control server 200 is installed in a data center outside the command room.

[0014] The tag readers 2A and 2B are communicably connected to the unlocking device 3 and the control device 100 via a wired or wireless communication circuit, and the camera 4 is communicably connected to the control device 100 via a wired or wireless communication circuit. Further, the entry / exit management server 200 is communicably connected to the unlocking device 3, the monitoring device 5, and the control device 100 via a communication network.

[0015] The tag reader 2A is touched when an entry-permitted person enters, and the tag reader 2B is touched when an entry-permitted person exits. When both the tag readers 2A and 2B read the tag ID of an entry-permitted person, they transmit the read tag ID to the unlocking device 3 and the control device 100 in real time together with the terminal ID stored in the memory and the reading time of the tag ID. The tag readers 2A and 2B read the tag ID by, for example, transmitting electromagnetic waves toward the RF tag and receiving the electromagnetic waves transmitted from the RF tag, and then decoding the tag ID carried on the electromagnetic waves.

[0016] When the unlocking device 3 receives the tag ID read by the tag readers 2A and 2B, it transmits the read tag ID to the entry / exit management server 200. The entry / exit management server 200 has a database storing the tag IDs of entry-permitted persons. When it collates the read tag ID with the tag IDs stored in the database and confirms that it is a legitimate tag ID, it transmits a notification indicating that the read tag ID has been authenticated. When the unlocking device 3 receives a notification indicating that the read tag ID has been authenticated from the entry / exit management server 200, it unlocks the door for a limited period and locks it after a certain period has elapsed since the door was unlocked. Thereby, an entry-permitted person can temporarily unlock the door and enter or exit by simply touching the RF tag to the tag readers 2A and 2B. In the embodiment, "unlock" means to release the lock of the locked door and make the door freely openable and closable.

[0017] The camera 4 is a camera installed so as to be able to photograph the entire area within the command room. The camera 4 is preferably, for example, a camera installed on the ceiling of the command room and equipped with a wide-angle lens capable of photographing a wide range. The camera 4 photographs the entire area within the command room after a certain period of time has elapsed since the tag ID was read by the tag readers 2A and 2B. The camera 4 may take a still image or a moving image. The camera 4 transmits the data of the entire area image of the command room taken in real time to the control device 100.

[0018] The control device 100 is, for example, a general-purpose computer. When the tag ID is read by the tag readers 2A and 2B, the control device 100 acquires the read tag ID and causes the camera 4 to photograph the entire area within the command room after a certain period of time has elapsed since the tag ID was read by the tag readers 2A and 2B. Next, the control device 100 transmits the tag ID read by the tag readers 2A and 2B and the image of the entire area within the command room photographed by the camera 4 to the entry / exit management server 200. In addition, the control device 100 receives a user operation regarding the registration and deletion of authorized entrants and transmits an instruction based on the operation to the entry / exit management server 200.

[0019] The entry / exit management server 200 is an example of an entry / exit management device and is, for example, a general-purpose computer. The entry / exit management server 200 acquires the tag ID read by the tag readers 2A and 2B and the image data photographed by the camera 4, and stores the read tag ID in a database that stores the tag ID reading history (entry / exit history). The entry / exit management server 200 calculates the number of people present in the command room based on each of the tag ID reading history and the image photographed by the camera 4, and issues a warning if the respective numbers of people present do not match. In addition, the entry / exit management server 200 receives an instruction regarding the registration and deletion of authorized entrants from the control device 100 and updates the database in which the tag IDs of authorized entrants are stored.

[0020] Monitoring device 5 is a computer that allows a monitor to check for unauthorized intrusions to confirm whether an unauthorized intrusion has occurred. When monitoring device 5 receives a warning notification from the access control server 200, it notifies the monitor with at least one of the following: a warning screen and / or audio. The above describes the configuration of the access control system 1.

[0021] Next, with reference to Figure 3, the hardware configuration of the control device 100 according to the embodiment will be described. The control device 100 comprises an operation unit 110, a display unit 120, a communication unit 130, a storage unit 140, and a control unit 150. Each part of the control device 100 is interconnected via an internal bus (not shown).

[0022] The operation unit 110 receives user instructions and supplies an operation signal corresponding to the received operation to the control unit 150.

[0023] The display unit 120 includes a display and a display driving circuit, and displays various images to the user based on data supplied from the control unit 150.

[0024] The communication unit 130 is a communication interface for the control device 100 to communicate with external devices. The communication unit 130 communicates with external devices via a communication network such as the Internet. The communication unit 130 also has input / output terminals and communicates with external devices via a communication cable. The input / output terminals are, for example, USB (Universal Serial Bus).

[0025] The storage unit 140 includes, for example, RAM (Random Access Memory), ROM (Read Only Memory), flash memory, and a hard disk. The storage unit 140 stores programs and various data executed by the control unit 150. The storage unit 140 also temporarily stores various information and functions as work memory for the control unit 150 to execute processing. Furthermore, the storage unit 140 includes an entry / exit history storage unit 141 and an image data storage unit 142.

[0026] As shown in Figure 4(a), the entry / exit history storage unit 141 stores the tag IDs read by the tag readers 2A and 2B in association with the terminal IDs individually assigned to the tag readers 2A and 2B and the time the tag IDs were read. Since the terminal IDs individually assigned to the tag readers 2A and 2B are associated with the read tag IDs, it is possible to distinguish whether the tag ID was read at the time of entry or exit.

[0027] As shown in Figure 4(b), the image data storage unit 142 stores the image data captured by the camera 4, associating it with the time of capture by the camera 4.

[0028] Returning to Figure 3, the control unit 150 includes a processor and controls each part of the control device 100. The processor is, for example, a CPU (Central Processing Unit). The control unit 150 also executes the access control process shown in Figure 6 by running the program stored in the memory unit 140. The control unit 150 also includes a Real Time Clock (RTC) that measures time even when the control device 100 is powered off. Functionally, the control unit 150 includes an acquisition unit 151, a camera control unit 152, and a transfer unit 153.

[0029] When tag readers 2A and 2B read the tag ID of an RF tag, the acquisition unit 151 acquires the read tag ID, the terminal ID individually assigned to tag readers 2A and 2B, and the time the tag ID was read. The acquisition unit then associates the tag ID with the terminal ID and the time the tag ID was read and stores it in the entry / exit history storage unit 141 shown in Figure 4(a). Note that data acquisition by the acquisition unit 151 also includes reading data stored in the storage unit 140.

[0030] When the acquisition unit 151 reads the tag ID, the camera control unit 152 causes the camera 4 to photograph the entire area of ​​the control room a certain time after the door is unlocked. Preferably, the timing of the camera 4's photography is set to a certain time after the time when people have finished entering and exiting the room after the door is unlocked, for example, after the unlocking device 3 unlocks the door and then locks it (for example, 10 seconds later). The camera control unit 152 also acquires the image captured by the camera 4 and the time the image was captured, and stores the image data in the image data storage unit 142 in Figure 4(b) in association with the time the image was captured.

[0031] The transfer unit 153 controls the communication unit 130 to transfer the tag ID acquired by the acquisition unit 151, the terminal IDs of the tag readers 2A and 2B that read the tag ID, the time the tag ID was read, and the image acquired by the camera control unit 152, along with the time the image was taken, to the access control server 200. The above describes the configuration of the control device 100.

[0032] Next, with reference to Figure 5, the hardware configuration of the access control server 200 according to the embodiment will be described. The access control server 200 comprises an operation unit 210, a display unit 220, a communication unit 230, a storage unit 240, and a control unit 250. Each part of the access control server 200 is interconnected via an internal bus (not shown) and has the same or equivalent configuration as each part of the control device 100. The following description will focus on the differences between the access control server 200 and the control device 100.

[0033] The storage unit 240 includes an entry / exit history storage unit 241 and an image data storage unit 242. The entry / exit history storage unit 241 stores data identical or equivalent to that of the entry / exit history storage unit 141, and the image data storage unit 242 stores data identical or equivalent to that of the image data storage unit 142.

[0034] The control unit 250 executes the entry / exit management process shown in Figure 7 by running the program stored in the storage unit 240. Functionally, the control unit 250 comprises an acquisition unit 251, a first counting unit 252, a second counting unit 253, and a warning generation unit 254.

[0035] The acquisition unit 251 acquires the tag ID, the terminal IDs of the tag readers 2A and 2B that read the tag ID, and the time the tag ID was read, and stores them in the entry / exit history storage unit 241. The acquisition unit 251 also acquires the image captured by the camera control unit 152 and the time the image was captured, and stores them in the image data storage unit 242.

[0036] The first counting unit 252 counts the number of people in the control room at the time a tag ID is read, based on the history of tag IDs stored in the entry / exit history storage unit 241. Specifically, the counting unit checks the data column of the entry / exit history stored in the entry / exit history storage unit 241 from top to bottom, excludes pairs of the same tag ID where the terminal ID of tag reader 2A and the terminal ID of tag reader 2B are present, and counts the number of tag IDs where only the terminal ID of tag reader 2A exists. For example, in the example data table in Figure 4(a), tag ID "0001" is excluded from the count because there is a data column pair where terminal IDs A and B exist. Tag ID "0002" is included in the count because only the data column where terminal ID A exists exists.

[0037] The second counting unit 253 performs image recognition processing on the captured image when the tag IDs are read by the tag readers 2A and 2B, thereby recognizing the people in the image and counting the number of people recognized in the image. Any known method can be used for the image recognition processing. Since the image captured by camera 4 captures the entire area of ​​the control room, the number of people recognized in the image matches the actual number of people in the control room at the time the image was captured.

[0038] The warning generation unit 254 compares the number of people in the room counted by the first counting unit 252 with the number of people in the room counted by the second counting unit 253 and determines whether the two numbers match. If the two numbers do not match, it generates a warning notification and sends a warning to the monitoring device 5 monitored by the supervisor that there has been an unauthorized intrusion. The above describes the configuration of the access control server 200.

[0039] (Entry / exit management process) Next, with reference to Figure 6, the flow of the access control process executed by the control device 100 according to the embodiment will be explained. The access control process involves the control device 100 and the access control server 200 working together to detect unauthorized entry by unauthorized persons and issue warnings based on the reading history of tag readers 2A and 2B and images taken of the entire area of ​​the control room, thereby managing the entry and exit of people into and out of the control room. The access control process executed by the control device 100 starts when an authorized person touches the RF tag to either tag reader 2A or 2B. Tag reader 2 is activated before the access control process starts and is in a state where the tag ID can be read.

[0040] When an authorized user touches an RF tag to either tag reader 2A or 2B, and one of the tag readers 2A or 2B reads the tag ID, the acquisition unit 151 acquires the tag ID read by one of the tag readers 2A or 2B, the terminal ID of the tag reader 2A or 2B that read the tag ID, and the time the tag ID was read from the RTC. The acquired tag ID is then associated with the terminal ID and the time the tag ID was read and stored in the entry / exit history storage unit 141 in Figure 4(a) (step S11). The tag ID read by one of the tag readers 2A or 2B is also transmitted to the unlocking device 3, which requests authentication of the tag ID from the entry / exit management server 200. Once the entry / exit management server 200 authenticates the tag ID, the unlocking device 3 unlocks the door for a limited period of time.

[0041] Next, the camera control unit 152 causes the camera 4 to photograph the entire area of ​​the command room after a certain period of time has elapsed since the tag ID was read (step S12). The camera control unit 152 obtains the image captured by the camera 4 and the time of capture of the image read from the RTC, and stores the image in the image data storage unit 142 in Figure 4(b), associating the time of capture with the image.

[0042] Next, the transfer unit 153 transfers the tag ID obtained in step S11, the terminal IDs of the tag readers 2A and 2B that read the tag ID, the time the tag ID was read, the image obtained in step S12, and the time the image was taken to the access control server 200 (step S13), and then terminates the process. The access control process is resumed when an authorized user touches a new RF tag to either tag reader 2A or 2B. The above describes the flow of the access control process executed by the control device 100.

[0043] Next, with reference to Figure 7, the flow of access control processing performed by the access control server 200 according to this embodiment will be explained. The access control processing performed by the access control server 200 starts when it receives the tag ID and image data from the control device 100.

[0044] First, the acquisition unit 251 receives data from the control device 100, including the tag ID, the terminal IDs of the tag readers 2A and 2B that read the tag ID, and the time the tag ID was read, as well as data regarding the captured image and the time the image was captured. The acquisition unit then stores these data in the entry / exit history storage unit 241 and the image data storage unit 242, respectively (step S21).

[0045] Next, the first counting unit 252 performs a first counting process (step S22) that counts the number of people in the control room at the time the tag ID was read, based on the history of tag IDs stored in the entry / exit history storage unit 241. The number of people in the room based on the entry / exit history is an apparent number of people in the room and does not necessarily match the actual number of people in the room if an unauthorized intrusion has occurred.

[0046] Next, the second counting unit 253, triggered by the tag readers 2A and 2B reading the tag IDs, performs image recognition processing on the captured images to recognize people in the images and performs a second counting process to count the number of people recognized in the images (step S23). The number of people present obtained through the image recognition processing is the actual number of people present.

[0047] Next, the warning generation unit 254 compares the number of people in the room counted by the first counting unit 252 with the number of people in the room counted by the second counting unit 253 and determines whether they match (step S24). If they match (step S24; Yes), the process ends. On the other hand, if they do not match (step S24; No), the warning generation unit 254 notifies the monitoring device 5, which is viewed by the monitor, of a warning that there has been an unauthorized intrusion (step S25), and the process ends. The access control process executed by the access control server 200 is resumed when the control device 100 receives the tag ID and image data again. The above describes the flow of access control processing performed by the access control server 200.

[0048] As described above, the control device 100 according to the embodiment includes an acquisition unit 151 that acquires the tag ID of an RF tag read by tag readers 2A and 2B installed at the entrance to the command room, a camera control unit 152 that causes a camera 4 installed in the command room to photograph the inside of the command room when the acquisition unit 151 reads the tag ID, and a transfer unit 153 that transfers the tag ID acquired by the camera control unit 152 and the image data of the inside of the command room that the camera control unit 152 has photographed by the camera 4 to the access control server 200.Therefore, it is possible to count the apparent number of people in the room based on the access history by tag ID and the actual number of people in the room based on the images taken inside the command room, and as a result, an access control system that can issue a warning against unauthorized intrusion into the controlled area can be configured with a simple configuration.

[0049] The present invention is not limited to the embodiments described above, and the following modifications are also possible.

[0050] (modified version) In the above embodiment, touch-type tag readers were used as tag readers 2A and 2B, but the present invention is not limited thereto. For example, gate-type readers may be used as tag readers 2A and 2B. Also, in the above embodiment, passive tags were used as RF tags, but the present invention is not limited thereto. Semi-active tags or active tabs may be used as RF tags.

[0051] In the above embodiment, tag readers 2A and 2B decoded the tag ID carried on the electromagnetic waves transmitted from the RF tag, but the present invention is not limited thereto. For example, tag readers 2A and 2B may convert the electromagnetic waves transmitted from the RF tag into electrical signals, and the control unit 150 of the control device 100 may decode the tag ID from the electrical signals received from tag readers 2A and 2B.

[0052] In the above embodiment, tag readers 2A and 2B were used to unlock the door, but the present invention is not limited to this. Door unlocking may also be performed by means other than tag readers 2A and 2B, for example, a physical key or facial recognition using a camera. In this case, the person authorized to enter must remember to touch the RF tag to tag readers 2A and 2B, so it is advisable to notify them with images or audio messages prompting them to touch the tag readers 2A and 2B.

[0053] In the above embodiment, tag readers 2A and 2B that read the tag ID of the RF tag were used as the authentication device, but the present invention is not limited thereto. For example, as the authentication device, a camera capable of reading a two-dimensional code representing identification information assigned to an authorized entrant, or an antenna that receives identification information transmitted from a mobile terminal carried by the authorized entrant may be used. Alternatively, facial recognition or iris recognition may be performed using an additional camera, voiceprint recognition may be performed using a microphone, or finger vein recognition may be performed using a near-infrared sensor, and the control device 100 may be configured to acquire the identification information assigned to the authorized entrant when the entrant is determined to be a legitimate authorized entrant through these authentications. In the case of facial recognition and iris recognition, the facial region detected from the image should be compared with images of the worker's face and iris that are pre-stored in the storage unit 140.

[0054] In relation to the above modifications, multiple authentication devices may be used in combination to improve security. For example, the tag reader 2A may read the tag ID and an additional camera may perform facial recognition in parallel. If the facial recognition determines that the person is a legitimate authorized entrant, the tag reader 2A may send the tag ID to the unlocking device 3 to unlock the door. In this case, the additional camera may be triggered, for example, by the tag reader 2A reading the tag ID.

[0055] In the above embodiment, camera 4 was installed in the control room, but the present invention is not limited to this. For example, an additional camera may be installed to capture the faces of people entering or leaving the room when their tag IDs are read by tag readers 2A and 2B. This additional camera may be installed, for example, near the door to capture the office space side. The image data captured by the additional camera may be transmitted to the access control server 200 along with data such as the read tag ID.

[0056] In the above embodiment, the camera 4 was triggered to start shooting when the tag ID was read by the tag readers 2A and 2B, but the present invention is not limited to this. For example, video may be continuously recorded using the camera 4, and still images may be extracted from the video when the tag ID is read by the tag readers 2A and 2B. Alternatively, after the door is unlocked by reading the tag ID, the camera 4 may start shooting when motion is detected in the control room. For motion detection, for example, difference images may be used.

[0057] In the above embodiment, the unlocking device 3 locked the door after a certain period of time had elapsed since the door was unlocked, but the present invention is not limited to this. If the door itself has a function to lock the door after a certain period of time has elapsed since the door was unlocked, the function of the unlocking device 3 to lock the door may be omitted.

[0058] In the above embodiment, there was one camera 4, but the present invention is not limited to this. For example, multiple cameras 4 may be installed in different positions and orientations to avoid blind spots in the control room.

[0059] In the above embodiment, when the monitoring device 5 receives a warning notification from the access control server 200, it notifies the monitor with at least one of a warning screen and audio; however, the present invention is not limited to this. For example, when the access control server 200 issues a warning, it may send a warning notification to the monitoring device 5 via email or webhook.

[0060] In the above embodiment, the access control server 200 notified the monitoring device 5 in real time of a warning issued when the number of people in the room did not match, but the present invention is not limited to this. For example, the access control server 200 may store a history of warnings (warning history) in the storage unit 140, and generate a report including the warning history at a certain interval or in response to a request from the monitoring device 5, and send it to the monitoring device 5. The timing of generating the report may be, for example, weekly or monthly.

[0061] In the above embodiment, the control device 100 and the access control server 200, which are installed in separate locations, cooperate to perform access control processing. However, the present invention is not limited to this. For example, the access control server 200 may also be provided with the functions of the control device 100, and configured to perform a series of access control processes independently. This eliminates the need to transfer tag IDs and image data between the control device 100 and the access control server 200.

[0062] In the above embodiment, the control device 100 and the access control server 200 stored various data in the storage units 140 and 240, respectively, but the present invention is not limited thereto. For example, all or part of the various data may be stored in an external computer via a communication network.

[0063] In the above embodiment, the control device 100 and the access control server 200 operated based on programs stored in the storage units 140 and 240, respectively, but the present invention is not limited thereto. For example, a functional configuration realized by a program may be realized by hardware.

[0064] In the above embodiment, the control device 100 and the access control server 200 were, for example, general-purpose computers, but the present invention is not limited thereto. For example, the control device 100 and the access control server 200 may be implemented as processing units located on the cloud.

[0065] In the above embodiment, the processing performed by the control device 100 and the access control server 200 was realized by the device having the above-described physical configuration executing a program stored in the storage units 140 and 240. However, the present invention may be realized as a program, or as a storage medium on which that program is recorded.

[0066] Alternatively, a device that performs the above-mentioned processing operations may be configured by distributing a program for executing the above-mentioned processing operations on a non-temporary recording medium readable by a processing unit, such as a flexible disk, CD-ROM (Compact Disk Read-Only Memory), DVD (Digital Versatile Disk), or MO (Magneto-Optical Disk), and installing that program into the processing unit.

[0067] The above embodiments are illustrative, and the present invention is not limited thereto. Various embodiments are possible without departing from the spirit of the invention as described in the claims. The components described in the embodiments and modifications can be freely combined. Furthermore, inventions equivalent to the invention described in the claims are also included in the present invention. In addition, even if the components of the invention described in the claims have the same names as the components described in the above embodiments, the present invention is not limited to the components described in the above embodiments themselves, and can be modified and applied as appropriate. [Explanation of symbols]

[0068] 1. Access Control System 2A, 2B Tag Leader 3. Unlocking device 4 cameras 5 Monitoring device 100 Control device 140 Storage section 150 Control Unit 151 Acquisition Department 152 Camera Control Unit 153 Transfer section 200 Access Control Server 251 Acquisition Department 252 First counting section 253 Second count section 254 Warning Generation Unit

Claims

1. An acquisition unit that acquires identification information read by an authentication device installed at the entrance and exit of the controlled area, After the authentication device reads the identification information, a camera control unit causes a camera installed within the controlled area to take pictures of the controlled area, A transfer unit transfers the identification information acquired by the acquisition unit and the image data of the controlled area captured by the camera by the camera control unit to the access control server. A control device equipped with the following features.

2. The authentication device is communicated to an unlocking device that unlocks the door provided at the entrance / exit, The unlocking device, upon authentication of the identification information read by the authentication device, unlocks the door for a certain period of time. The control device according to claim 1.

3. The camera control unit causes the camera to photograph the area within the controlled area after a certain period of time has elapsed since the unlocking of the door by the unlocking device was completed and the door was locked. The control device according to claim 2.

4. The authentication device is a tag reader that reads the tag ID stored in the RF tag as identification information. The control device according to any one of claims 1 to 3.

5. An acquisition unit that acquires identification information read by an authentication device installed at the entrance and exit of the controlled area, and image data of the controlled area taken by a camera installed within the controlled area after the identification information has been acquired by the authentication device, A first counting unit counts the number of people in the controlled area at the time the identification information was read, based on the reading history of the identification information acquired by the acquisition unit. A second counting unit performs image recognition processing on the image acquired by the acquisition unit to count the number of people in the controlled area after the identification information has been read, A warning generating unit that generates a warning if the number of people counted by the first counting unit does not match the number of people counted by the second counting unit, An access control device equipped with the following features.

6. An authentication device is installed at the entrance and exit of the controlled area to read identification information, A camera is installed within the aforementioned controlled area, and after identification information is read by the authentication device, it takes pictures of the area within the controlled area. A first counting unit counts the number of people in the controlled area at the time the identification information was read, based on the reading history of the identification information read by the authentication device. A second counting unit counts the number of people in the controlled area after identification information has been read by applying image recognition processing to the image captured by the aforementioned camera, A warning generating unit that generates a warning if the number of people counted by the first counting unit does not match the number of people counted by the second counting unit, An access control system equipped with the following features.

7. An access control method performed by an access control system, An acquisition step of acquiring identification information read by an authentication device installed at the entrance and exit of the controlled area, and image data of the controlled area taken by a camera installed within the controlled area after the identification information has been acquired by the authentication device, A first counting step, based on the reading history of the identification information obtained in the acquisition step, counts the number of people in the controlled area at the time the identification information was read, A second counting step involves performing image recognition processing on the image acquired in the acquisition step to count the number of people in the controlled area after the identification information has been read, A warning generation step that generates a warning if the number of people counted in the first count step does not match the number of people counted in the second count step, Access control methods including entry and exit management.

8. Computers, An acquisition means for acquiring identification information read by an authentication device installed at the entrance and exit of the controlled area, and image data of the controlled area taken by a camera installed within the controlled area after the identification information has been acquired by the authentication device. A first counting means that counts the number of people in the controlled area at the time the identification information was read, based on the reading history of the identification information acquired by the acquisition means. A second counting means that counts the number of people in the controlled area after identification information has been read by applying image recognition processing to the image acquired by the acquisition means. Warning generating means that generates a warning if the number of people counted by the first counting means does not match the number of people counted by the second counting means. A program designed to function as such.

Images