Entrance management system, access control device, access control method, and recording medium

Abstract

To provide an admission management system, an access control device, an access control method, and a recording medium capable of notifying one user of determination result information concerning a determination result without being known to other users when the one user's admission to a managed area is not permitted.SOLUTION: An admission management system SYS includes a user terminal (hearable terminal), which is owned by a user and capable of notifying the user of information, and an access control device 3. The access control device includes: an acquisition unit 311 for acquiring biometric information of the user; a determination unit 312 for determining, based on the biometric information, whether or not to allow the user to enter the managed area MTA; and a control unit 313 for outputting determination result information to the user terminal when it is determined that the user's admission to the managed area is not permitted.SELECTED DRAWING: Figure 6

Description

Technical Field

[0001] This disclosure relates to the technical fields of an admission management system, an access control device, an access control method, and a recording medium for managing the admission of users to an area to be managed.

Background Art

[0002] An admission management system for managing the admission of users to an area to be managed is known. For example, Patent Document 1 describes, as an example of an admission management system, an admission control system that acquires biometric information of a user detected by a biometric information measurement device (e.g., a wearable device) worn by the user and determines whether to permit the user to enter a management space such as an automatic door, an admission gate, or a room equipped with a smart lock based on the acquired biometric information. In particular, the admission control system described in Patent Document 1 acquires biometric information (e.g., body temperature) that can determine the presence of a predetermined virus or disease as biometric information. In this case, the admission control system described in Patent Document 1 determines that if the body temperature acquired as biometric information is equal to or higher than a reference body temperature (e.g., 39 degrees), the user is considered to be suffering from a predetermined disease or the like, and does not permit the user to enter the management space. In addition, Patent Documents 2 to 6 are cited as prior art documents related to this disclosure.

Prior Art Documents

Patent Documents

[0003]

Patent Document 1

Patent Document 2

Patent Document 3

Patent Document 4

Patent Document 5

Patent Document 6

Summary of the Invention

Problems to be Solved by the Invention

[0004] When a user's entry into the area to be managed is not permitted, it is desirable from the user-friendly perspective to notify the user of the determination result information regarding the determination result that the entry into the area to be managed is not permitted.

[0005] Here, generally, an access control system often acquires the user's body temperature when the user approaches the entrance / exit of the area to be managed, and determines whether to permit the user to enter the area to be managed based on the acquired body temperature. For this reason, the access control system will notify the determination result information to the user near the entrance / exit of the area to be managed.

[0006] However, near the entrance / exit of the area to be managed, there may be not only one user whose entry into the area to be managed is not permitted, but also other users different from the one user. Therefore, if the access control system carelessly notifies the determination result information to one user, there is a possibility that the determination result information will be notified to other users unintentionally. For example, if the access control system notifies the determination result information to one user by displaying the determination result information on a display arranged at the entrance / exit of the area to be managed, there is a possibility that the determination result information displayed on the display will be seen by other users unintentionally. As a result, there arises a technical problem that the personal information of one user whose entry into the area to be managed is rejected may not be sufficiently protected.

[0007] This disclosure aims to provide an admission management system, an admission management device, an admission management method, and a recording medium that can solve the above-described technical problems. As an example, this disclosure aims to provide an admission management system, an access control device, an access control method, and a recording medium that can notify a user of determination result information regarding a determination result without being known to other users when the admission of one user to a management target area is not permitted.

Means for Solving the Problems

[0008] One aspect of the admission management system of this disclosure is an admission management system for managing the admission of a user to a management target area. The admission management system includes a user terminal that the user possesses and can notify the user of information, and an access control device. The access control device includes an acquisition means for acquiring the biometric information of the user, a determination means for determining whether to permit the user's admission to the management target area based on the biometric information, and an output means for outputting determination result information regarding the determination result to the user terminal when it is determined that the user's admission to the management target area is not permitted. The user terminal includes a notification means for notifying the received determination result information to the user.

[0009] One aspect of the access control device of this disclosure is an access control device for managing the admission of a user to a management target area. The access control device includes an acquisition means for acquiring the biometric information of the user, a determination means for determining whether to permit the user's admission to the management target area based on the biometric information, and an output means for outputting determination result information regarding the determination result to a user terminal that the user possesses and can notify the user of information when it is determined that the user's admission to the management target area is not permitted.

[0010] One aspect of the access control method for entry management disclosed herein is an access control method for managing a user's entry into a management target area, which acquires biometric information of the user, determines whether to permit the user to enter the management target area based on the biometric information, and outputs determination result information regarding the determination result to a user terminal that the user possesses and that can notify the user when it is determined that the user's entry into the management target area is not permitted.

[0011] One aspect of the recording medium disclosed herein is a recording medium in which a computer program for controlling a computer to execute an access control method is recorded, the access control method being for managing a user's entry into a management target area, which acquires biometric information of the user, determines whether to permit the user to enter the management target area based on the biometric information, and outputs determination result information regarding the determination result to a user terminal that the user possesses and that can notify the user when it is determined that the user's entry into the management target area is not permitted.

Brief Description of the Drawings

[0012]

Figure 1

Figure 2

Figure 3

Figure 4

Figure 5

Figure 6

Figure 7

Figure 8

Figure 9

Figure 10

Figure 11

Figure 12

Figure 13

Figure 14

Figure 15

Figure 16

DETAILED DESCRIPTION OF THE INVENTION

[0013] Hereinafter, embodiments of an entrance management system, an access control device, an access control method, and a recording medium will be described with reference to the drawings. Hereinafter, an entrance management system SYS to which embodiments of an entrance management system, an access control device, an access control method, and a recording medium are applied will be described. (1) Overview of the Entrance Management System SYS

[0014] The entry management system SYS is a system capable of managing the entry of user U (see FIG. 2) into the management target area MTA (see FIG. 2). Specifically, the entry management system SYS is a system capable of acquiring the biometric information of user U who is attempting to enter the management target area MTA and determining whether to permit the entry of user U into the management target area MTA based on the acquired biometric information.

[0015] The management target area MTA may be an area where, for example, the entry of a user U who satisfies a predetermined entry condition is permitted, while the entry of a user U who does not satisfy the predetermined entry condition is restricted. As an example of such a management target area MTA, a specific site (for example, an area where a user U cannot enter (that is, enter) unless passing through the entrance of the site) can be given. As an example of a site, at least one of the sites of condominiums, hotels, office buildings, schools, factories, research institutes, government agencies, and embassies can be given. In this case, the entry management system SYS may manage the entry of the user U into a specific site. As another example of the management target area MTA, an area inside a specific building (for example, an area where a user U cannot enter (that is, enter) unless passing through the entrance and exit of the building) can be given. As an example of a building, at least one of condominiums, hotels, office buildings, school buildings, factory buildings, research institute buildings, government agency buildings, and embassy buildings, etc. can be given. In this case, the entry management system SYS may manage the entry of the user U into a specific building. As another example of the management target area MTA, a specific room inside a building (for example, an area where a user U cannot enter (that is, enter) unless passing through the entrance of the room) can be given. As an example of a room, at least one of the living rooms of condominiums, hotel guest rooms, office building floors, school classrooms, factory offices, research institute research rooms, government agency offices, and embassy offices, etc. can be given. In this case, the entry management system SYS may manage the entry of the user U into a specific room. As another example of the management target area MTA, a specific section partitioned by a structure such as a door inside a building (for example, a section where a user U cannot enter (that is, enter) unless passing through a door or the like) can be given. In this case, the entry management system SYS may manage the entry of the user U into a specific section inside the building. As another example of the management target area MTA, an area partitioned by a structure such as a fence outdoors (for example, an event venue held outdoors) can be given. In this case, the entry management system SYS may manage the entry of the user U into a specific outdoor area.

[0016] As described above, the entrance management system SYS can determine whether to permit the user U to enter the management target area MTA based on biometric information. Therefore, the above-described entrance conditions indicating the conditions for the user U permitted to enter the management target area MTA may include entrance conditions related to biometric information. In the following description, the entrance conditions related to biometric information are referred to as "biometric conditions". For example, the biometric condition may include a condition that "the biometric information indicates that there is no risk of the user U suffering from a disease". In this case, the entrance management system SYS may determine whether the biometric information indicates that there is a risk of the user U suffering from a disease based on the biometric information. When the biometric information indicates that there is no risk of the user U suffering from a disease, the entrance management system SYS may determine to permit the user U to enter the management target area MTA. On the other hand, when the biometric information indicates that there is a risk of the user U suffering from a disease, the entrance management system SYS may determine not to permit the user U to enter the management target area MTA. That is, when the biometric information indicates that there is a risk of the user U suffering from a disease, the entrance management system SYS may determine to restrict (in other words, prohibit) the user U from entering the management target area MTA.

[0017] In this embodiment, an example will be described in which body temperature information regarding the body temperature (for example, surface body temperature) of user U is used as the biological information. In this case, the above-described admission condition indicating the condition for user U to be permitted to enter the management target area MTA may include an admission condition regarding body temperature. In this case, the admission management system SYS may determine, based on the body temperature information, whether the body temperature information indicates that user U may be suffering from an illness. When the body temperature information indicates that there is no possibility that user U is suffering from an illness, the admission management system SYS may determine to permit user U to enter the management target area MTA. On the other hand, when the body temperature information indicates that there is a possibility that user U is suffering from an illness, the admission management system SYS may determine not to permit user U to enter the management target area MTA. That is, when the body temperature information indicates that there is a possibility that user U is suffering from an illness, the admission management system SYS may determine to restrict (in other words, prohibit) the entry of user U into the management target area MTA. Hereinafter, the configuration and operation details of the admission management system SYS that performs such admission management operations will be described in order. (2) Configuration of the Entrance Management System SYS First, the configuration of the admission management system SYS of this embodiment will be described. (2-1) Overall Configuration of the Entrance Management System SYS

[0018] First, with reference to FIG. 1, the overall configuration of the admission management system SYS of this embodiment will be described. FIG. 1 is a block diagram showing the overall configuration of the admission management system SYS of this embodiment.

[0019] As shown in FIG. 1, the admission management system SYS includes a wearable terminal 1 which is a specific example of a "user terminal", an admission management server 2, and an access control device 3. The admission management system SYS may include a single wearable terminal 1 or may include a plurality of wearable terminals 1. The admission management system SYS may include a single access control device 3 or may include a plurality of access control devices 3.

[0020] The wearable terminal 1 is a terminal device (in other words, an information processing device) owned by the user U. The wearable terminal 1 is a device that can be worn by the user U. In particular, the wearable terminal 1 is a device that can be worn on the ear of the user U. For example, the wearable terminal 1 may be a device including earphones (or headphones) that can be worn on the ear of the user U. Therefore, the wearable terminal 1 may be referred to as a wearable device.

[0021] The wearable terminal 1 is a device capable of outputting sound. When the wearable terminal 1 outputs sound while being worn on the ear of the user U, the sound output by the wearable terminal 1 is heard by the user U. On the other hand, it is preferable that the sound output by the wearable terminal 1 is not heard by a user U who is not wearing the wearable terminal 1. Therefore, the wearable terminal 1 may be a device capable of outputting sound that can be heard by the user U wearing the wearable terminal 1 while not being heard by a user U who is not wearing the wearable terminal 1. The wearable terminal 1 may be a device capable of outputting sound only to the user U wearing the wearable terminal 1.

[0022] The wearable terminal 1 is a device capable of detecting (that is, measuring) the body temperature of the user U wearing the wearable terminal 1. The body temperature information regarding the body temperature of the user U detected by the wearable terminal 1 (for example, information quantitatively indicating the body temperature detected by the wearable terminal 1) is used to determine whether to permit the entry of the user U into the management target area MTA.

[0023] The entry management server 2 is a device capable of setting the above-described entry conditions indicating the conditions of the user U permitted to enter the management target area MTA. The entry management server 2 transmits (in other words, distributes) the set entry conditions to the access control device 3. Further, the entry management server 2 may store and manage history information regarding the history of the determination result of whether to permit the entry of the user U into the management target area MTA.

[0024] Since the entrance management server 2 transmits the entrance conditions to the access control device 3, the entrance management server 2 can communicate with the access control device 3. For example, the entrance management server 2 may be able to communicate with the access control device 3 via the communication network 4. The communication network 4 may include a wired communication network. The communication network 4 may include a wireless communication network.

[0025] The access control device 3 is a device that can determine whether to permit the user U to enter the management target area MTA using the entrance conditions transmitted from the entrance management server 2. In particular, as described above, the access control device 3 is a device that can determine whether to permit the user U to enter the management target area MTA based on the body temperature information. For this reason, the access control device 3 receives (i.e., acquires) the body temperature information from the wearable terminal 1. The wearable terminal 1 transmits the body temperature information to the access control device 3.

[0026] The wearable terminal 1 transmits the body temperature information to the access control device 3. For this reason, the wearable terminal 1 can communicate with the access control device 3. The wearable terminal 1 is typically preferably able to communicate with the access control device 3 via a wireless communication network. However, the wearable terminal 1 may be able to communicate with the access control device 3 via a communication network including a wired communication network.

[0027] The access control device 3 notifies the user U of determination result information regarding the determination result of whether to permit the user U to enter the management target area MTA. For example, when the access control device 3 determines to permit the user U to enter the management target area MTA, the access control device 3 may notify the user U of the determination result information regarding the determination result that the user U is permitted to enter the management target area MTA. For example, when the access control device 3 determines not to permit the user U to enter the management target area MTA, the access control device 3 may notify the user U of the determination result information regarding the determination result that the user U is not permitted to enter the management target area MTA.

[0028] The access control device 3 notifies the user U of the determination result information by using the wearable terminal 1 worn by the user U. Therefore, the operation performed by the access control device 3 to notify the user U of the determination result information becomes the operation of outputting the determination result information to the wearable terminal 1. In this case, the wearable terminal 1 worn by the user U notifies the user U of the determination result information output by the access control device 3 and received by the wearable terminal 1. That is, instead of directly notifying the user U of the determination result information, the access control device 3 indirectly notifies the user U of the determination result information by using the wearable terminal 1. As described above, the wearable terminal 1 can output sound. Therefore, the wearable terminal 1 notifies the user U of the determination result information by using sound.

[0029] As shown in FIG. 2, the access control device 3 may include a device (for example, the gate mechanism 31 described later with reference to FIG. 5) disposed in the management target area MTA or in the vicinity of the management target area MTA. For example, when an entrance / exit through which the user U can enter the management target area MTA is provided, the access control device 3 may include a device disposed at the entrance / exit of the management target area MTA.

[0030] The access control device 3 may include a device (for example, the gate mechanism 31 described later with reference to FIG. 5) that can restrict the entry of the user U into the management target area MTA. A device that can restrict the entry of the user U into the management target area MTA may be arranged in the management target area MTA or in the vicinity of the management target area MTA. A device that can restrict the entry of the user U into the management target area MTA may be arranged at the entrance of the management target area MTA. For example, the access control device 3 may be able to restrict the entry of a user U whose entry into the management target area MTA is not permitted by the access control device 3. For example, when the access control device 3 includes a door (that is, a specific example of the gate mechanism 31), the access control device 3 may be able to restrict the entry of the user U into the management target area MTA by maintaining the state of the door in the closed state. On the other hand, the access control device 3 may not restrict the entry of a user U whose entry into the management target area MTA is permitted by the access control device 3. For example, when the access control device 3 includes a door, the access control device 3 may permit the entry of the user U into the management target area MTA by switching the state of the door from the closed state to the open state. Therefore, the state of the access control device 3 (especially the state of the device that can restrict the entry of the user U into the management target area MTA) may switch between a restricted state in which the entry of the user U into the management target area MTA can be restricted and an unrestricted state in which the entry of the user U into the management target area MTA is not restricted. The access control device 3 may switch the state of the device that can restrict the entry of the user U into the management target area MTA between the restricted state and the unrestricted state based on the determination result of whether to permit the entry of the user U into the management target area MTA. (2-2) Configuration of the Wearable Terminal 1

[0031] Subsequently, with reference to FIG. 3, the configuration of the wearable terminal 1 of the present embodiment will be described. FIG. 3 is a block diagram showing the configuration of the wearable terminal 1 of the present embodiment.

[0032] As shown in FIG. 3, the wearable terminal 1 includes a body temperature sensor 11, an arithmetic unit 12, a storage device 13, a communication device 14, and a speaker 15. The body temperature sensor 11, the arithmetic unit 12, the storage device 13, the communication device 14, and the speaker 15 may be connected via a data bus 16.

[0033] The body temperature sensor 11 is a detection device capable of detecting the body temperature of the user U wearing the wearable terminal 1. The body temperature sensor 11 may be a detection device (for example, a thermistor type body temperature sensor) capable of detecting the body temperature of the user U by contacting the user U. The body temperature sensor 11 may be a detection device (for example, an infrared type body temperature sensor (for example, a body temperature sensor using a thermal camera or a thermographic camera)) capable of detecting the body temperature of the user U without contacting the user U.

[0034] The arithmetic unit 12 includes, for example, a CPU (Central Processing Unit). The arithmetic unit 12 reads a computer program. For example, the arithmetic unit 12 may read the computer program stored in the storage device 13. For example, the arithmetic unit 12 may read a computer program stored in a computer-readable and non-transitory recording medium using a recording medium reading device (not shown). The arithmetic unit 12 may acquire a computer program from a device (not shown) disposed outside the wearable terminal 1 via the communication device 14 (or other communication devices) (that is, it may be downloaded or read). The arithmetic unit 12 executes the read computer program. As a result, logical functional blocks for executing operations to be performed by the wearable terminal 1 (for example, as described above, the operation of transmitting body temperature information to the access control device 3 and notifying the user U of the determination result information) are realized in the arithmetic unit 12. That is, the arithmetic unit 12 can function as a controller for realizing logical functional blocks for executing operations to be performed by the wearable terminal 1.

[0035] FIG. 3 shows an example of logical function blocks realized in the arithmetic unit 12. As shown in FIG. 3, a communication control unit 121 and a notification control unit 122 are realized in the arithmetic unit 12. The communication control unit 121 transmits the body temperature information regarding the body temperature of the user U detected by the body temperature sensor 11 to the access control device 3 using the communication device 14. Further, the communication control unit 121 receives (i.e., acquires) the determination result information regarding the determination result of the access control device 3 (that is, the determination result as to whether or not to permit the entry of the user U into the management target area MTA) from the access control device 3 using the communication device 14. The notification control unit 122 controls the speaker 15 so as to notify the user U of the determination result information received by the communication control unit 121.

[0036] The storage device 13 can store desired data. For example, the storage device 13 may temporarily store a computer program executed by the arithmetic unit 12. The storage device 13 may temporarily store data temporarily used by the arithmetic unit 12 when the arithmetic unit 12 is executing a computer program. The storage device 13 may store data that the wearable terminal 1 stores in the long term. Note that the storage device 13 may include at least one of a RAM (Random Access Memory), a ROM (Read Only Memory), a hard disk device, a magneto-optical disk device, an SSD (Solid State Drive), and a disk array device. That is, the storage device 13 may include a non-temporary recording medium.

[0037] The communication device 14 can communicate with the access control device 3. The communication device 14 can communicate with the access control device 3. Typically, the communication device 14 can communicate with the access control device 3 via a wireless communication network. However, the communication device 14 may also be able to communicate with the access control device 3 via a communication network including a wired communication network. Since the access control device 3 can communicate with the admission management server 2, the communication device 14 may be able to communicate with the admission management server 2 via the access control device 3. In the present embodiment, the communication device 14 transmits body temperature information to the access control device 3 under the control of the communication control unit 121. Also, the communication device 14 receives (i.e., acquires) determination result information from the access control device 3 under the control of the communication control unit 121.

[0038] The speaker 15 is an audio output device capable of outputting sound. That is, the speaker 15 is an audio output device capable of outputting information using sound. In the present embodiment, the speaker 15 outputs determination result information using sound under the control of the notification control unit 122. As a result, the user U wearing the wearable terminal 1 can recognize the determination result information aurally via the speaker 15 that forms part of the earphone (or headset) worn on the user's ear. (2-3) Configuration of the Entrance Management Server 2

[0039] Subsequently, with reference to FIG. 4, the configuration of the admission management server 2 of the present embodiment will be described. FIG. 4 is a block diagram showing the configuration of the admission management server 2 of the present embodiment.

[0040] As shown in FIG. 4, the admission management server 2 includes an arithmetic device 21, a storage device 22, and a communication device 23. Further, the admission management server 2 may include an input device 24 and an output device 25. However, the admission management server 2 may not include at least one of the input device 24 and the output device 25. The arithmetic device 21, the storage device 22, the communication device 23, the input device 24, and the output device 25 may be connected via a data bus 26.

[0041] The arithmetic unit 21 includes, for example, a CPU. The arithmetic unit 21 reads a computer program. For example, the arithmetic unit 21 may read the computer program stored in the storage device 22. For example, the arithmetic unit 21 may read the computer program stored in a computer-readable and non-transitory recording medium using a recording medium reading device (not shown). The arithmetic unit 21 may acquire (i.e., download or read) a computer program from a device (not shown) disposed outside the admission management server 2 via the communication device 23 (or other communication device). The arithmetic unit 21 executes the read computer program. As a result, logical functional blocks for executing the operations to be performed by the admission management server 2 (for example, as described above, operations of setting admission conditions, distributing admission conditions, and managing history information) are realized within the arithmetic unit 21. That is, the arithmetic unit 21 can function as a controller for realizing logical functional blocks for executing the operations to be performed by the admission management server 2.

[0042] FIG. 4 shows an example of logical functional blocks realized within the arithmetic unit 21. As shown in FIG. 4, a condition setting unit 211, a condition distribution unit 212, and a history management unit 213 are realized within the arithmetic unit 21. The condition setting unit 211 sets admission conditions. The condition distribution unit 212 transmits (distributes) the admission conditions set by the condition setting unit 211 to the access control device 3. The history management unit 213 stores and manages history information regarding the history of determination results as to whether to permit the user U to enter the management target area MTA.

[0043] The storage device 22 can store desired data. For example, the storage device 22 may temporarily store a computer program executed by the arithmetic unit 21. The storage device 22 may temporarily store data that the arithmetic unit 21 temporarily uses when the arithmetic unit 21 is executing a computer program. The storage device 22 may store data that the admission management server 2 stores in the long term. Note that the storage device 22 may include at least one of a RAM, a ROM, a hard disk device, a magneto-optical disk device, an SSD, and a disk array device. That is, the storage device 22 may include a non-temporary recording medium.

[0044] The communication device 23 can communicate with the access control device 3 via the communication network 4 (see FIG. 1). Further, since the access control device 3 can communicate with the wearable terminal 1, the communication device 23 may be able to communicate with the wearable terminal 1 via the access control device 3. In the present embodiment, the information acquisition unit 321 communication device 23 transmits admission conditions to the access control device 3 under the control of the conditional distribution unit 212.

[0045] The input device 24 is a device that receives input of information to the admission management server 2 from the outside of the admission management server 2. For example, the input device 24 may include an operating device (for example, at least one of a keyboard, a mouse, and a touch panel) that can be operated by an operator of the admission management server 2. For example, the input device 24 may include a reading device that can read information recorded as data on an externally attachable recording medium with respect to the admission management server 2.

[0046] The output device 25 is a device that outputs information to the outside of the admission management server 2. For example, the output device 25 may output the information as an image. That is, the output device 25 may include a display device (so-called, display) capable of displaying an image indicating the information to be output. For example, the output device 25 may output the information as voice. That is, the output device 25 may include a voice device (so-called, speaker) capable of outputting voice. For example, the output device 25 may output the information on paper. That is, the output device 25 may include a printing device (so-called, printer) capable of printing desired information on paper. (2-4) Configuration of the Access Control Device 3

[0047] Subsequently, with reference to FIG. 5, the configuration of the access control device 3 of the present embodiment will be described. FIG. 5 is a block diagram showing the configuration of the access control device 3 of the present embodiment.

[0048] As shown in FIG. 5, the access control device 3 includes a gate mechanism 31, an arithmetic device 32, a storage device 33, a server communication device 34, and a terminal communication device 35. The gate mechanism 31, the arithmetic device 32, the storage device 33, the server communication device 34, and the terminal communication device 35 may be connected via a data bus 36. Note that the server communication device 34 and the terminal communication device 35 may be integrated as one communication device.

[0049] The gate mechanism 31 is a device that can restrict the entry of the user U into the management target area MTA. For example, the gate mechanism 31 may be able to restrict the entry of a user U whose entry into the management target area MTA is not permitted by the access control device 3. On the other hand, the access control device 3 may not restrict the entry of a user U whose entry into the management target area MTA is permitted by the access control device 3.

[0050] As an example of the gate mechanism 31, an automatic door disposed at the entrance of the management target area MTA can be cited. The automatic door may include, for example, a door that separates the management target area MTA from an area outside the management target area MTA, and a motor or the like that moves the door so as to switch the state of the door between an open state and a closed state. In this case, the access control device 3 may be able to restrict the entry of the user U into the management target area MTA by maintaining the state of the door in the closed state. The access control device 3 may permit the entry of the user U into the management target area MTA by switching the state of the door from the closed state to the open state.

[0051] As an example of the gate mechanism 31, an automatic gate device disposed at the entrance of the management target area MTA can be cited. The automatic gate device may include, for example, a blocking bar (e.g., a rod-shaped member) capable of blocking the passage of a user between the management target area MTA and an area outside the management target area MTA, and a motor or the like that moves the blocking bar so as to switch the state of the blocking bar between a blocking state in which the blocking bar blocks the passage of the user and an open state in which the blocking bar does not block the passage of the user. In this case, the access control device 3 may be able to restrict the entry of the user U into the management target area MTA by maintaining the state of the blocking bar in the blocking state. The access control device 3 may permit the entry of the user U into the management target area MTA by switching the state of the blocking bar from the blocking state to the open state.

[0052] As an example of the gate mechanism 31, a door provided with a smart lock mechanism disposed at the entrance of the management target area MTA can be cited. The smart lock is a key that can be unlocked based on an electronic control signal. In this case, the access control device 3 may be able to restrict the entry of the user U into the management target area MTA by maintaining the state of the smart lock in the locked state. The access control device 3 may permit the entry of the user U into the management target area MTA by switching the state of the smart lock from the locked state to the unlocked state.

[0053] The access control device 3 may include a single gate mechanism 31. That is, the access control device 3 may control the state of the single gate mechanism 31. Alternatively, the access control device 3 may include a plurality of gate mechanisms 31. That is, the access control device 3 may control the states of the plurality of gate mechanisms 31 in parallel.

[0054] The arithmetic unit 32 includes, for example, a CPU. The arithmetic unit 32 loads a computer program. For example, the arithmetic unit 32 may load a computer program stored in the storage device 33. For example, the arithmetic unit 32 may load a computer program stored in a computer-readable and non-transitory recording medium using a recording medium reading device (not shown). The arithmetic unit 32 may obtain a computer program from a device (not shown) disposed outside the access control device 3 via the server communication device 34 (or other communication device) (that is, it may be downloaded or loaded). The arithmetic unit 32 executes the loaded computer program. As a result, logical functional blocks for executing operations to be performed by the access control device 3 (for example, as described above, receiving body temperature information from the wearable terminal 1, determining whether to permit the user U to enter the management target area MTA based on the body temperature information, and transmitting determination result information to the wearable terminal 1) are realized within the arithmetic unit 32. That is, the arithmetic unit 32 can function as a controller for realizing logical functional blocks for executing operations to be performed by the access control device 3.

[0055] FIG. 5 shows an example of logical functional blocks realized in the arithmetic unit 32. As shown in FIG. 5, in the arithmetic unit 32, an information acquisition unit 321 which is a specific example of the "acquisition means", a determination unit 322 which is a specific example of the "determination means", a notification control unit 323 which is a specific example of the "output means", and a gate control unit 324 are realized. The information acquisition unit 321 receives (i.e., acquires) body temperature information from the wearable terminal 1 using the terminal communication device 35. The determination unit 322 determines whether to permit the user U to enter the management target area MTA based on the body temperature information received by the information acquisition unit 321. The notification control unit 323 transmits determination result information regarding the determination result of the determination unit 322 (i.e., the determination result of whether to permit the user U to enter the management target area MTA) to the wearable terminal 1 using the terminal communication device 35. The gate control unit 324 controls the gate mechanism 31 based on the determination result of the determination unit 322. That is, the gate control unit 324 switches the state of the gate mechanism 31 between a restricted state in which the gate mechanism 31 restricts the entry of the user U into the management target area MTA and a non-restricted state in which the gate mechanism 31 permits (i.e., does not restrict) the entry of the user U into the management target area MTA.

[0056] The storage device 33 can store desired data. For example, the storage device 33 may temporarily store a computer program executed by the arithmetic unit 32. The storage device 33 may temporarily store data temporarily used by the arithmetic unit 32 when the arithmetic unit 32 is executing a computer program. The storage device 33 may store data that the access control device 3 stores long-term. Note that the storage device 33 may include at least one of a RAM, a ROM, a hard disk device, a magneto-optical disk device, an SSD, and a disk array device. That is, the storage device 33 may include a non-temporary recording medium.

[0057] The server communication device 34 can communicate with the admission management server 2 via the communication network 4 (see FIG. 1). In the present embodiment, the server communication device 34 transmits the body temperature information transmitted by the wearable terminal 1 to the admission management server 2 under the control of the communication control unit 321. Further, the server communication device 34 receives (i.e., acquires) the determination result information transmitted by the admission management server 2 to the wearable terminal 1 from the admission management server 2 under the control of the communication control unit 321. Further, the server communication device 34 receives (i.e., acquires) the gate control signal from the admission management server 2 under the control of the communication control unit 321. The communication device 23 receives (i.e., acquires) the body temperature information from the wearable terminal 1 via the access control device 3 under the control of the information acquisition unit 321. Further, the communication device 23 transmits the determination result information to the wearable terminal 1 via the access control device 3 under the control of the notification control unit 323. Further, the communication device 23 transmits the gate control signal to the access control device 3 under the control of the gate control unit 214.

[0058] The terminal communication device 35 can communicate with the wearable terminal 1. In the present embodiment, the terminal communication device 35 receives (i.e., acquires) the body temperature information transmitted by the wearable terminal 1 under the control of the information acquisition unit 321. Further, the terminal communication device 35 transmits the determination result information to the wearable terminal 1 under the control of the notification control unit 323.

[0059] The terminal communication device 35 may be arranged together with the gate mechanism 31 at or near the gate mechanism 31. Typically, the terminal communication device 35 may be arranged together with the gate mechanism 31 at or near the gate mechanism 31 such that the terminal communication device 35 and the gate mechanism 31 correspond one-to-one. In this case, the terminal communication device 35 may receive the body temperature information from the user terminal 1 held by the user U who is trying to enter the management target area MTA via the gate mechanism 31 corresponding to the terminal communication device 35. The terminal communication device 35 may transmit the determination result information regarding whether to permit the entry of the user U into the management target area MTA to the user terminal 1 held by the user U who is trying to enter the management target area MTA via the gate mechanism 31 corresponding to the terminal communication device 35.

[0060] The terminal communication device 35 may transmit (in other words, output) a gate detection signal. The gate detection signal is, for example, a signal that can be received (in other words, detected) by the wearable terminal 1 located within a certain distance from the gate mechanism 31 corresponding to the terminal communication device 35. On the other hand, the gate detection signal is, for example, a signal that cannot be received (in other words, detected) by the wearable terminal 1 located at a distance greater than a certain distance from the gate mechanism 31 corresponding to the terminal communication device 35. When such a gate detection signal is transmitted, the wearable terminal 1 can recognize that the wearable terminal 1 is located in the vicinity of the gate mechanism 31 triggered by receiving the gate detection signal. That is, the wearable terminal 1 can recognize that the user U who holds the wearable terminal 1 is located in the vicinity of the gate mechanism 31 triggered by receiving the gate detection signal. (3) Operation of the Entrance Management System SYS

[0061] Subsequently, the operations performed by the access control system SYS will be described. Hereinafter, as the operations performed by the access control system SYS, the operations performed by the wearable terminal 1, the operations performed by the access control server 2, and the operations performed by the access control device 3 will be described in order. (3-1) Operation of the Wearable Terminal 1 First, with reference to FIG. 6, the operations performed by the wearable terminal 1 will be described. FIG. 6 is a flowchart showing the flow of operations performed by the wearable terminal 1.

[0062] As shown in FIG. 6, the communication control unit 121 determines whether the communication device 14 has received the gate detection signal transmitted (output) by the access control device 3 (step S11). As described above, the gate detection signal can be received by the wearable terminal 1 located within a certain distance from the gate mechanism 31, while the wearable terminal 1 located more than a certain distance away from the gate mechanism 31 cannot receive it. Therefore, the operation of determining whether the communication device 14 has received the gate detection signal may be regarded as substantially equivalent to the operation of determining whether the wearable terminal 1 is located within a certain distance from the gate mechanism 31. The operation of determining whether the communication device 14 has received the gate detection signal may be regarded as substantially equivalent to the operation of determining whether the user U is located in the vicinity of the gate mechanism 31.

[0063] If it is determined in step S11 that the communication device 14 has not received the gate detection signal (step S11: No), it is presumed that the user U is not located in the vicinity of the gate mechanism 31. That is, it is presumed that there is no possibility that the user U is about to enter the management target area MTA. Therefore, it is presumed that the access control system SYS does not need to determine whether to permit the user U to enter the management target area MTA yet. Therefore, in this case, the communication control unit 121 continues to determine whether the communication device 14 has received the gate detection signal (step S11).

[0064] On the other hand, if it is determined as a result of the determination in step S11 that the communication device 14 has received the gate detection signal (step S11: Yes), it is presumed that the user U is located in the vicinity of the gate mechanism 31. That is, it is presumed that there is a possibility that the user U is about to enter the management target area MTA. For this reason, it is presumed to be preferable for the entrance management system SYS to determine whether to permit the user U to enter the management target area MTA. Therefore, in this case, the body temperature sensor 11 detects the body temperature of the user U (step S13). However, if the body temperature sensor 11 has already detected the body temperature of the user U (step S12: Yes), the body temperature sensor 11 does not have to detect the body temperature of the user U. That is, if the body temperature sensor 11 has not already detected the body temperature of the user U (step S12: No), the body temperature sensor 11 may detect the body temperature of the user U.

[0065] Thereafter, the communication control unit 121 uses the communication device 14 to transmit body temperature information regarding the body temperature of the user U detected by the body temperature sensor 11 in step S12 (or the body temperature of the user U that the body temperature sensor 11 has already detected) to the access control device 3 (step S14).

[0066] In addition to the body temperature information, the communication control unit 121 uses the communication device 14 to transmit user identification information for identifying the user U to the access control device 3 (step S14). The user identification information may be stored in the storage device 13 of the wearable terminal 1. In this case, the communication control unit 121 may transmit the user identification information stored in the storage device 13.

[0067] Thereafter, the access control device 3 determines whether to permit the user U to enter the management target area MTA based on the body temperature information (and further the user identification information) transmitted in step S14. Note that the operation of the access control device 3 will be described in detail later with reference to FIG. 8, so the description here is omitted.

[0068] After that, the communication control unit 121 receives, via the communication device 14, determination result information regarding the determination result as to whether to permit the user U to enter the management target area MTA from the access control device 3 (step S15).

[0069] After that, the notification control unit 122 controls the speaker 15 so as to notify the user U of the determination result information received by the communication control unit 121 in step S15 (step S16). For this purpose, the speaker 15 outputs the determination result information using voice (step S16). As a result, the user U can recognize the determination result information aurally via the speaker 15. Note that specific examples of the determination result information will be described together with the description of the operation of the access control device 3 later, and thus detailed description here is omitted. (3-2) Operation of the Entrance Management Server 2 Subsequently, with reference to FIG. 7, the operation performed by the entrance management server 2 will be described. FIG. 7 is a flowchart showing the flow of the operation performed by the entrance management server 2.

[0070] As shown in FIG. 7, the condition setting unit 211 sets entrance conditions (step S21). After that, the condition distribution unit 212 transmits (distributes) the entrance conditions set by the condition setting unit 211 in step S21 to the access control device 3 (step). The entrance conditions distributed by the condition distribution unit 212 are used for the access control device 3 to determine whether to permit the user U to enter the management target area MTA.

[0071] In parallel with or before and after the setting and transmission of the entrance conditions, the history management unit 213 receives, via the communication network 4, history information regarding the history of the determination result as to whether to permit the user U to enter the management target area MTA from the access control device 3 (step S23). The history management unit 213 stores the history information received in step S23 in the storage device 22 (step S24). The history information stored in the storage device 22 may be referred to by the history management unit 213 as necessary. (3-3) Operation of the Access Control Device 3 Next, with reference to FIG. 8, the operations performed by the access control device 3 will be described. FIG. 8 is a flowchart showing the flow of operations performed by the access control device 3.

[0072] As shown in FIG. 8, after the entrance management system SYS starts operating, the terminal communication device 35 continues to transmit a gate detection signal (step S31). For this reason, the operations from step S32 to step S35 described below are typically performed while the gate detection signal is being transmitted.

[0073] When the gate detection signal transmitted in step S31 is received by the wearable terminal 1, as described above, the wearable terminal 1 transmits body temperature information and user identification information to the access control device 3. As a result, the information acquisition unit 321 receives the body temperature information and the user identification information from the wearable terminal 1 using the terminal communication device 35 (step S32).

[0074] Thereafter, the determination unit 322 determines whether to permit the user U to enter the management target area MTA based on each of the body temperature information and the user identification information received in step S32 (steps S33 to S34).

[0075] Specifically, the determination unit 322 may determine whether to permit the user U to enter the management target area MTA by determining whether the user U has the right to enter the management target area MTA based on the user identification information (step S33). In this case, for example, the determination unit 322 may determine whether the user U has the right to enter the management target area MTA based on an entry permission policy indicating the entry permission for the management target area MTA and the user identification information received in step S32.

[0076] The access permission policy may include a whitelist. The whitelist may include a list of users U (e.g., a list of user identification information) who have the right to enter the management target area MTA. The whitelist may include information regarding the attributes of users U who have the right to enter the management target area MTA (e.g., at least one of the position of user U, the department to which user U belongs, and the employee classification of user U). The whitelist may include information regarding the time (e.g., at least one of a time zone, a day of the week, and a period) when each user U can enter the management target area MTA. The whitelist may include information regarding the entrance through which each user U can enter the management target area MTA.

[0077] The access permission policy may include a blacklist. The blacklist may include a list of users U (e.g., a list of user identification information) who do not have the right to enter the management target area MTA (i.e., those whose entry into the management target area MTA should be restricted). The blacklist may include information regarding the attributes of users U who do not have the right to enter the management target area MTA (e.g., at least one of the position of user U, the department to which user U belongs, and the employee classification of user U). The blacklist may include information regarding the time (e.g., at least one of a time zone, a day of the week, and a period) when each user U cannot enter the management target area MTA. The blacklist may include information regarding the entrance through which each user U cannot enter the management target area MTA.

[0078] The access permission policy may be included in the access conditions set by the access management server 2 (specifically, the condition setting unit 212). The condition setting unit 212 may generate in advance access conditions including the access permission policy before the access management system SYS starts operating. The condition setting unit 212 may update the access conditions including the access permission policy after the access management system SYS starts operating.

[0079] Furthermore, the determination unit 322 may determine whether to permit the user U to enter the management target area MTA by determining whether there is a possibility that the user U has contracted an illness based on the body temperature information (step S23). For example, the determination unit 322 may determine that there is a possibility that the user U has contracted an illness when the body temperature indicated by the body temperature information exceeds a predetermined first temperature threshold (for example, 37.5 degrees Celsius). For example, the determination unit 322 may determine that there is no possibility that the user U has contracted an illness when the body temperature indicated by the body temperature information is below a predetermined second temperature threshold. The second temperature threshold is set to a value equal to or lower than the first temperature threshold. The second temperature threshold may be set to the same value as the first temperature threshold (for example, 37.5 degrees Celsius). Alternatively, the second temperature threshold may be set to a value different from the first temperature threshold (that is, a value smaller than the first temperature threshold, for example, 37.0 degrees Celsius).

[0080] At least one of the first and second temperature thresholds may be included in the admission conditions set by the admission management server 2 (particularly, the condition setting unit 212) (particularly, the biometric condition which is an admission condition related to biometric information). The condition setting unit 212 may generate in advance the admission conditions including at least one of the first and second temperature thresholds before the admission management system SYS starts operating. The condition setting unit 212 may update the admission conditions including at least one of the first and second temperature thresholds after the admission management system SYS starts operating. That is, the condition setting unit 212 may change at least one of the first and second temperature thresholds. For example, the access control device 3 may determine whether a user U with a relatively high average body temperature may be suffering from an illness, or may also determine whether a user U with a relatively low average body temperature may be suffering from an illness. In this case, the condition setting unit 212 may change the first temperature threshold such that the first temperature threshold used when determining whether a user U with a relatively high average body temperature may be suffering from an illness is greater than the first temperature threshold used when determining whether a user U with a relatively low average body temperature may be suffering from an illness. The condition setting unit 212 may change the second temperature threshold such that the second temperature threshold used when determining whether a user U with a relatively high average body temperature may be suffering from an illness is greater than the second temperature threshold used when determining whether a user U with a relatively low average body temperature may be suffering from an illness. Incidentally, as the average body temperature of the user U, the average value of the body temperature of the user U over a past predetermined period (for example, the most recent 1 hour or the most recent 1 day) may be used. In this case, in order to calculate the average body temperature of the user U, the body temperature sensor 11 of the wearable terminal 1 may continuously detect the body temperature of the user U. When the condition setting unit 212 sets the admission conditions based on the body temperature of the user U, the wearable terminal 1 may transmit the body temperature information to the admission management server 2 in addition to the access control device 3.

[0081] Alternatively, the condition setting unit 212 may change at least one of the first and second temperature thresholds based on the combination of the body temperature information received in step S32 (i.e., the current or most recent body temperature of the user U) and the past body temperature of the user U. Alternatively, 322 may, in addition to or instead of changing at least one of the first and second temperature thresholds based on the combination of the current or most recent body temperature of the user U and the past body temperature of the user U, determine whether the user U may be suffering from an illness. The determination unit 322 may determine that the user U may be suffering from an illness if the current or most recent body temperature of the user U is higher than a predetermined third temperature threshold compared to the past body temperature of the user U.

[0082] As a result of the determinations in steps S33 and S34, if it is determined that the user U has the authority to enter the management target area MTA and that the user U is not likely to be suffering from an illness (step S33: Yes and step S34: No), the determination unit 322 determines to permit the user U to enter the management target area MTA. In this case, the notification control unit 323 transmits determination result information regarding the determination result of permitting the user U to enter the management target area MTA to the wearable terminal 1 using the terminal communication device 35 (step S35).

[0083] The determination result information may include information indicating the determination result itself. That is, the determination result information may include information indicating the determination result itself of permitting the user U to enter the management target area MTA. In this case, the speaker 15 of the wearable terminal 1 that has received such determination result information may output a voice for notifying the user U of the determination result itself of permitting the user U to enter the management target area MTA. For example, the speaker 15 may output a voice such as "You (user U) can enter the management target area MTA". As a result, the user U can recognize the fact that the user U is permitted to enter the management target area MTA.

[0084] The determination result information may include information indicating the reason (i.e., the basis) for reaching the determination result. That is, the determination result information may include information indicating the reason why the access control device 3 determines to permit the user U to enter the management target area MTA. In this case, the speaker 15 of the wearable terminal 1 that has received such determination result information may output a voice for notifying the user U of the reason why the access management server 2 determines to permit the user U to enter the management target area MTA. For example, the speaker 15 may output a voice such as "Since you (user U) are not likely to be suffering from an illness, you can enter the management target area MTA." For example, the speaker 15 may output a voice such as "Since you (user U) have the right to enter the management target area MTA, you can enter the management target area MTA." As a result, the user U can recognize the reason why the user U is permitted to enter the management target area MTA.

[0085] In parallel with or before and after the operation of step S35, the gate control unit 324 sets the state of the gate mechanism 31 to an unrestricted state in which the gate mechanism 31 permits (i.e., does not restrict) the user U to enter the management target area MTA (step S36). As a result, since the gate mechanism 31 does not restrict the user U from entering the management target area MTA, the user U can enter the management target area MTA.

[0086] On the other hand, if as a result of the determination in steps S33 and S34, it is determined that the user U does not have the right to enter the management target area MTA and / or the user U may be suffering from an illness (step S33: No and / or step S34: Yes), the determination unit 322 determines not to permit the user U to enter the management target area MTA. In this case, the notification control unit 323 uses the terminal communication device 35 to transmit determination result information regarding the determination result of not permitting the user U to enter the management target area MTA to the wearable terminal 1 (step S37).

[0087] The determination result information may include information indicating the determination result itself. That is, the determination result information may include information indicating the determination result itself that the entry of user U into the management target area MTA is not permitted. In this case, the speaker 15 of the wearable terminal 1 that has received such determination result information may output a voice for notifying user U of the determination result itself that the entry of user U into the management target area MTA is not permitted. For example, the speaker 15 may output a voice saying, "You (user U) cannot enter the management target area MTA." As a result, user U can recognize the fact that user U's entry into the management target area MTA has not been permitted.

[0088] The determination result information may include information indicating the reason (i.e., basis) for reaching the determination result. That is, the determination result information may include information indicating the reason why the access control device 3 has determined not to permit the entry of user U into the management target area MTA. In this case, the speaker 15 of the wearable terminal 1 that has received such determination result information may output a voice for notifying user U of the reason why the access control server 2 has determined not to permit the entry of user U into the management target area MTA. For example, the speaker 15 may output a voice saying, "You (user U) may be suffering from an illness, so you cannot enter the management target area MTA." For example, the speaker 15 may output a voice saying, "You (user U) do not have the right to enter the management target area MTA, so you cannot enter the management target area MTA." As a result, user U can recognize the reason why user U's entry into the management target area MTA has not been permitted.

[0089] When the entry of user U into the management target area MTA is not permitted, the gate control unit 324 sets the state of the gate mechanism 31 to a restricted state in which the gate mechanism 31 restricts the entry of user U into the management target area MTA (step S38). For this reason, user U cannot enter the management target area MTA. (4) Technical Effects of the Entrance Management System SYS As described above, the access control device 3 notifies the user U of the determination result information using the wearable terminal 1. Therefore, the determination result information is notified to one user U wearing the wearable terminal 1, while it is not notified to other users U not wearing the wearable terminal 1. That is, the determination result information is notified to one user U to whom the determination result information should be notified, while it is not notified to other users U to whom the determination result information should not be notified. For this reason, the personal information of one user U including the determination result as to whether the entry of the user U into the management target area MTA is permitted does not leak to other users U unintentionally. For this reason, the personal information of the user is appropriately protected. For example, even when the access control device 3 determines not to permit the entry of the user U into the management target area MTA on the grounds that there is a possibility of damaging the reputation of the user U, there is a possibility of infringing on the human rights of the user U, there is a possibility of infringing on the privacy of the user, and / or there is a possibility of leading to the leakage of the personal information of the user U, the personal information of the user U regarding the determination result that there is a possibility of damaging the reputation of the user U, there is a possibility of infringing on the human rights of the user U, there is a possibility of infringing on the privacy of the user, and / or there is a possibility of leading to the leakage of the personal information of the user U is appropriately protected.

[0090] Also, in this embodiment, the access control device 3 determines whether to permit the user U to enter the management target area MTA based on the body temperature information regarding the body temperature of the user U and the user identification information. Therefore, even if at least a part of the face of the user U is hidden, the access control device 3 can determine whether to permit the user U to enter the management target area MTA. For example, even if the user U is wearing a mask, the access control device 3 can determine whether to permit the user U to enter the management target area MTA. Therefore, the access control device 3 does not need to prompt the user U with a hidden face to expose the face. Therefore, compared with the access control device of the comparative example that needs to prompt the user U with a hidden face to expose the face, the operation of the access control device 3 is simplified. Furthermore, since the user U also does not need to expose at least a part of the hidden face (for example, remove the mask), the convenience of the user U is also improved. (5) Variants Subsequently, a modified example of the entrance management system SYS will be described. (5-1) First Variant

[0091] First, with reference to FIG. 9, the entrance management system SYS in the first modified example will be described. With reference to FIG. 9, the entrance management system SYS in the first modified example will be described. Incidentally, hereinafter, the entrance management system SYS in the first modified example will be referred to as "entrance management system SYSa" to distinguish it from the above-described entrance management system SYS. Also, in the following description, for the constituent elements that have already been described, the same reference numerals will be given to omit the detailed description thereof.

[0092] As shown in FIG. 9, the entrance management system SYSa in the first modified example is different in that it includes an access control device 3a instead of the access control device 3 as compared with the above-described entrance management system SYS. Other features of the entrance management system SYSa may be the same as other features of the entrance management system SYS.

[0093] The configuration of the access control device 3a according to the first modification example is shown in FIG. 10. As shown in FIG. 10, the access control device 3a is different in that it may not include the gate mechanism 31 and the gate control unit 324 as compared with the above-described access control device 3. That is, the access control device 3a is different in that it may not perform the operations in steps S36 and S38 in FIG. 8 (that is, the operations for controlling the gate mechanism 31) as compared with the admission management server 2. Other features of the access control device 3a may be the same as those of the access control device 3.

[0094] Also in such a first modification example, the access control device 3a notifies the user U of the determination result information using the wearable terminal 1. Therefore, also in the first modification example, the same effects as those achievable in the above-described admission management system SYS can be achieved.

[0095] Note that, in the first modification example, since the access control device 3a does not include the gate mechanism 31, the entry of the user into the management target area MTA is not physically restricted (for example, blocked). However, when the access control device 3a determines not to permit the entry of the user U into the management target area MTA, the user is notified of the determination result information regarding the determination result that the entry of the user U into the management target area MTA is not permitted. The notification of such determination result information to the user U can serve as a deterrent force for deterring the user U from entering the management target area MTA. Therefore, even when the access control device 3a does not include the gate mechanism 32, as long as the determination result information is notified, the admission management system SYSa can substantially manage (for example, restrict) the entry of the user U into the management target area MTA. (5-2) Second Variant

[0096] Next, the entry management system SYS in the second modification will be described. Hereinafter, the entry management system SYS in the second modification will be referred to as "entry management system SYSb" to distinguish it from the above-described entry management system SYS. The above-described entry management system SYS can manage the entry of the user U into the management target area MTA before the user U enters the management target area MTA. On the other hand, compared with the above-described entry management system SYS, the entry management system SYSb of the second modification can manage the entry of the user U into the management target area MTA before the user U enters the management target area MTA, and in addition to or instead of this, after the user U enters the management target area MTA, it can manage the stay of the user U in the management target area MTA. Specifically, the entry management system SYSb can acquire the biometric information (for example, body temperature information) of the user U staying in the management target area MTA, and based on the acquired biometric information, determine whether to permit the stay of the user U in the management target area MTA.

[0097] Furthermore, compared with the above-described entry management system SYS, the entry management system SYSb may be different in that when it is determined that the stay of the user U in the management target area MTA is not permitted, it can notify the user U of the route information regarding the evacuation route that the user U should pass through to evacuate from the management target area MTA. However, the entry management system SYSb may not be able to notify the user U of the route information.

[0098] In order to determine whether to permit the stay of the user U in the management target area MTA and notify the user U of the route information, the entry management system SYSb is different from the above-described entry management system SYS in that it includes an access control device 3b instead of the access control device 3. Other features of the entry management system SYSb may be the same as other features of the entry management system SYS. Therefore, hereinafter, with reference to FIG. 11, the access control device 3b of the second modification will be described. FIG. 11 is a block diagram showing the configuration of the access control device 3b of the second modification.

[0099] As shown in FIG. 11, the access control device 3b is different in that it may include a route generation unit 215b that can generate route information and notify the user U, compared with the above-described access control device 3. Other features of the access control device 3b may be the same as other features of the entry management server 2.

[0100] However, after the user U enters the management target area MTA, in order to manage the stay of the user U in the management target area MTA, the access control device 3b needs to receive temperature information from the user U staying in the management target area MTA and transmit determination result information to the user U staying in the management target area MTA. For this reason, in the second modification example, it is preferable that the access control device 3b includes a terminal communication device 35 disposed in the management target area MTA. The terminal communication device 35 disposed in the management target area MTA does not necessarily have to be disposed together with the gate mechanism 31. In addition, when the access control device 3b does not manage the entry of the user U into the management target area MTA before the user U enters the management target area MTA, the access control device 3b does not have to include the gate mechanism 31 and the gate control unit 324.

[0101] Subsequently, with reference to FIGS. 12 and 13, the operations of the wearable terminal 1 and the access control device 3b in the second modification example will be described. FIG. 12 is a flowchart showing the flow of operations performed by the wearable terminal 1 in the second modification example. FIG. 13 is a flowchart showing the flow of operations performed by the access control device 3b in the second modification example. The operations shown in FIGS. 12 and 13 are typically performed after the user U enters the management target area MTA. That is, the operations shown in FIGS. 12 and 13 are typically performed at least in part during the period when the user U stays in the management target area MTA. Also, for operations that have already been described, detailed description thereof will be omitted by assigning the same step numbers.

[0102] First, as shown in FIG. 12, the communication control unit 121 of the wearable terminal 1 determines whether a predetermined determination start condition is satisfied (step S11b). The determination start condition is a condition that should be satisfied for the access control device 3b to start determining whether to permit the stay of the user U in the management target area MTA. For example, the determination start condition may include a condition that a predetermined first time has elapsed since the user U entered the management target area MTA. For example, the determination start condition may include a condition that a predetermined second time has elapsed since the access control device 3b last determined whether to permit the stay of the user U in the management target area MTA. For example, the determination start condition may include a condition that the operator of the entrance management server 2 wishes for the access control device 3b to start determining whether to permit the stay of the user U in the management target area MTA.

[0103] As a result of the determination in step S11b, if it is determined that the determination start condition is not satisfied (step S11b: No), the communication control unit 121 continues to determine whether the determination start condition is satisfied (step S11b).

[0104] On the other hand, as a result of the determination in step S11b, if it is determined that the determination start condition is satisfied (step S11b: Yes), the body temperature sensor 11 detects the body temperature of the user U (step S13). However, if the body temperature sensor 11 has already detected the body temperature of the user U (step S12: Yes), the body temperature sensor 11 does not have to detect the body temperature of the user U. Thereafter, the communication control unit 121 transmits the body temperature information to the access control device 3b using the communication device 14 (step S14). Further, the communication control unit 121 transmits the user identification information to the access control device 3b using the communication device 14 (step S14).

[0105] As a result, as shown in FIG. 13, the information acquisition unit 321 of the entrance management server 2 receives the body temperature information and the user identification information from the wearable terminal 1 using the communication device 23 (step S32).

[0106] Thereafter, the determination unit 322 of the admission management server 2 determines whether to permit the stay of user U in the management target area MTA based on each of the body temperature information and user identification information received in step S21 (from step S33b to step S34b).

[0107] Specifically, the determination unit 322 may determine whether to permit the stay of user U in the management target area MTA by determining whether user U has the right to stay in the management target area MTA based on the user identification information (step S33b). For example, the determination unit 322 may determine whether user U has the right to stay in the management target area MTA based on the stay authority policy indicating the stay authority in the management target area MTA and the user identification information received in step S32. Note that the stay authority policy may be the same data as the above-described admission authority policy. That is, the description of the above-described admission authority policy can be used as the description of the stay authority policy by replacing the word "admission" with the word "stay". Therefore, a detailed description of the stay authority policy is omitted.

[0108] Furthermore, the determination unit 322 may determine whether to permit the stay of user U in the management target area MTA by determining whether user U may be suffering from an illness based on the body temperature information (step S34b). Note that the operation of step S34b may be the same as the operation of step S34 in FIG. 8 described above. That is, the description of the operation of step S34 in FIG. 8 described above can be used as the description of the operation of step S34b by replacing the word "admission" with the word "stay". Therefore, a detailed description of the operation of step S34b is omitted.

[0109] As a result of the determinations in steps S33b and S34b, when it is determined that user U has the right to stay in the management target area MTA and there is no possibility that user U is suffering from an illness (step S33b: Yes and step S34b: No), the determination unit 322 determines to permit the stay of user U in the management target area MTA. In this case, the notification control unit 323 transmits, using the terminal communication device 35, determination result information regarding the determination result of permitting the stay of user U in the management target area MTA to the wearable terminal 1 (step S35b). Note that the operation in step S35b may be the same as the operation in step S35 of FIG. 8 described above. That is, the description regarding the operation in step S35 of FIG. 8 described above can be used as the description regarding the operation in step S35b by replacing the term "entry" with the term "stay". For this reason, a detailed description of the operation in step S35b is omitted.

[0110] On the other hand, as a result of the determinations in steps S33b and S34b, when it is determined that user U does not have the right to stay in the management target area MTA and / or there is a possibility that user U is suffering from an illness (step S33b: No and / or step S34b: Yes), the determination unit 322 determines not to permit the stay of user U in the management target area MTA. In this case, the notification control unit 323 transmits, using the terminal communication device 35, determination result information regarding the determination result of not permitting the stay of user U in the management target area MTA to the wearable terminal 1 (step S37b). Note that the operation in step S37b may be the same as the operation in step S37 of FIG. 8 described above. That is, the description regarding the operation in step S37 of FIG. 8 described above can be used as the description regarding the operation in step S37b by replacing the term "entry" with the term "stay". For this reason, a detailed description of the operation in step S37b is omitted.

[0111] In parallel with or before and after the operation of step S37b, the route generation unit 325b generates route information (step S38b). For example, the route generation unit 325b may generate route information regarding an evacuation route from the current location of the user U to the entrance / exit of the management target area MTA. For example, when a plurality of entrances / exits are provided in the management target area MTA, the route generation unit 325b may generate route information regarding an evacuation route from the current location of the user U to the entrance / exit among the plurality of entrances / exits that is closest to the user U. Thereafter, the route generation unit 325b transmits the route information to the wearable terminal 1 using the terminal communication device 35 (step S38b).

[0112] When the access control device 3b transmits the determination result information to the wearable terminal 1, as shown in FIG. 12, the communication control unit 121 of the wearable terminal 1 receives the determination result information from the access control device 3b using the communication device 14 (step S15). Thereafter, the notification control unit 122 controls the speaker 15 to notify the user U of the determination result information received by the communication control unit 121 in step S15 (step S16).

[0113] Furthermore, when the access control device 3b transmits the route information to the wearable terminal 1, as shown in FIG. 12, the communication control unit 121 of the wearable terminal 1 receives the route information from the access control device 3b using the communication device 14 (step S17b). Thereafter, the notification control unit 122 controls the speaker 15 to notify the user U of the route information received by the communication control unit 121 in step S17b (step S18b). As a result, the user U can recognize the route information aurally via the speaker 15. That is, the user U can recognize the evacuation route to be passed through when evacuating within the management target area MTA. For this reason, the user U can evacuate (i.e., exit) from the management target area MTA to the outside of the management target area MTA by passing through the evacuation route.

[0114] As described above, in the second modification example, even after the user U enters the management target area MTA, the entrance management server 2b determines whether to permit the user U to stay in the management target area MTA. Therefore, when the physical condition of the user U deteriorates (for example, the body temperature of the user U rises) after the user U enters the management target area MTA, the entrance management server 2b can prompt the user U to evacuate from the management target area MTA of the user U. Alternatively, when the stay permission of the user U in the management target area MTA has expired after the user U enters the management target area MTA, the entrance management server 2b can prompt the user U to evacuate from the management target area MTA of the user U. Also in this case, since the determination result information is notified to the user U using the wearable terminal 1, the personal information of the user U regarding the determination result is appropriately protected.

[0115] In addition, the entrance management server 2b can notify the user U of the route information regarding the evacuation route that the user U should pass through to evacuate from the management target area MTA. Therefore, compared with the case where the route information is not notified to the user U, the user U can evacuate from the management target area MTA smoothly.

[0116] Note that in the above description, the access control device 3b includes the route generation unit 325b. However, the entrance management server 2 may include the route generation unit 325b. In this case, the wearable terminal 1 may receive the route information generated by the route generation unit 325b of the entrance management server 2.

[0117] Note that the entrance management system SYSa of the first modification example described above may include the constituent elements specific to the entrance management system SYSb of the second modification example. The constituent elements specific to the entrance management system SYSb of the second modification example may include, for example, the constituent elements related to the management of the stay of the user U in the management target area MTA. The constituent elements specific to the entrance management system SYSb of the second modification example may include, for example, the constituent elements related to the generation and notification of the route information. (5-3) Third Variant

[0118] Next, the entrance management system SYS in the third modification example will be described. In the following, the entrance management system SYS in the third modification example is referred to as the "entrance management system SYSc" to distinguish it from the above-described entrance management system SYS. The entrance management system SYSc in the third modification example is different from the entrance management system SYSb in the second modification example described above in that the route generation unit 325b may generate route information regarding an evacuation route that passes through a partial area where the number of users U staying is relatively small within the management target area MTA. That is, in the third modification example, the route generation unit 325b may generate route information regarding an evacuation route that passes through at least one partial area where the number of users U staying is relatively small compared to other partial areas within the management target area MTA. For example, when a plurality of routes from the current location of the user U to the entrance / exit of the management target area MTA can be generated, the route generation unit 325b may select, as the evacuation route through which the user U should pass, one route with the smallest number of users staying in the partial area through which it passes among the plurality of routes. Note that the route generation unit 325b may calculate the number of users U staying within the management target area MTA based on, for example, an image captured by a monitoring camera for monitoring the management target area MTA. The route generation unit 215b may specify a partial area where the number of users U staying is relatively small based on an image captured by a monitoring camera for monitoring the management target area MTA. Other features of the entrance management system SYSc may be the same as other features of the entrance management system SYSb.

[0119] As described above, in the third modification example, the entrance management server 2b can notify the user U of the route information generated based on the number of users U staying therein. For this reason, compared with the case where the route information generated without considering the number of users U staying therein is notified to the user U, the number of users U that come into contact with the user U when the user U evacuates from the management target area MTA is reduced. As a result, the possibility of a disease being transmitted from a user U whose stay in the management target area MTA is not permitted because of the possibility of suffering from some disease to other users U is lowered. (5-4) Fourth Variant

[0120] Subsequently, the entrance management system SYS in the fourth modification example will be described. Hereinafter, the entrance management system SYS in the fourth modification example is referred to as "entrance management system SYSd" to distinguish it from the above-described entrance management system SYS. The entrance management system SYSd of the fourth modification example differs in that when it is determined not to permit the entry of the user U into the management target area MTA, it can notify the user U of recommended action information regarding actions that are recommended for the user U to take thereafter. In order to notify the user U of the recommended action information, the entrance management system SYSd differs in that it includes an access control device 3d instead of the above-described access control device 3. Other features of the entrance management system SYSd may be the same as other features of the entrance management system SYS. For this reason, hereinafter, the access control device 3c of the fourth modification example will be described with reference to FIG. 14. FIG. 14 is a block diagram showing the configuration of the access control device 3c of the fourth modification example.

[0121] As shown in FIG. 14, the access control device 3c differs in that it may include an action recommendation unit 326c that can generate recommended action information and notify the user U, compared with the above-described access control device 3. Other features of the access control device 3c may be the same as other features of the access control device 3.

[0122] Next, with reference to FIGS. 15 and 16, the operations of the wearable terminal 1 and the access control device 3c in the fourth modification will be described. FIG. 15 is a flowchart showing the flow of operations performed by the wearable terminal 1 in the fourth modification. FIG. 16 is a flowchart showing the flow of operations performed by the access control device 3c in the fourth modification.

[0123] First, as shown in FIG. 15, also in the fourth modification, the wearable terminal 1 performs operations from step S11 to step S14. That is, the communication control unit 121 determines whether the communication device 14 has received the gate detection signal (step S11), the body temperature sensor 11 detects the body temperature of the user U (steps S12 to S13), and the communication control unit 121 transmits the body temperature information and the user identification information to the access control device 3c.

[0124] As a result, as shown in FIG. 16, the information acquisition unit 321 of the access control device 3c receives the body temperature information and the user identification information from the wearable terminal 1 using the terminal communication device 35 (step S32). Thereafter, also in the fourth modification, the access control device 3c performs operations from step S33 to step S38. That is, the determination unit 322 determines whether to permit the entry of the user U into the management target area MTA based on each of the body temperature information and the user identification information (steps S33 to S34). When it is determined to permit the entry of the user U into the management target area MTA, the notification control unit 323 transmits the determination result information regarding the determination result of permitting the entry of the user U into the management target area MTA to the wearable terminal 1 (step S35), and the gate control unit 324 sets the state of the gate mechanism 31 to the unrestricted state (step S36). When it is determined not to permit the entry of the user U into the management target area MTA, the notification control unit 323 transmits the determination result information regarding the determination result of not permitting the entry of the user U into the management target area MTA to the wearable terminal 1 (step S37), and the gate control unit 324 sets the state of the gate mechanism 31 to the restricted state (step S38).

[0125] In parallel with or before and after the operations from step S37 to S38, the action recommendation unit 326c generates recommendation action information (step S39c). For example, the action recommendation unit 326c may generate the recommendation action information so that the action of the user U who acts according to the recommendation action information does not become an action that a user U whose entry to the management target area MTA is not permitted would normally take. As an example, there may be a surprised expression on the face of the user U whose entry to the management target area MTA is not permitted, due to the fact that the entry is not permitted. Therefore, for example, the action recommendation unit 216c may generate the recommendation action information so as to recommend that the user U takes an action of leaving through the entrance / exit with an unfamiliar face and returning. As another example, if the user U whose entry to the management target area MTA is not permitted passes by many other users U during the process of returning, the action of the user U who is going in the opposite direction from the entrance / exit because the entry to the management target area MTA is not permitted may attract the attention of many users U. As a result, some users U may notice that the user U going in the opposite direction from the entrance / exit is a user U whose entry to the management target area MTA is not permitted. Therefore, for example, the action recommendation unit 326c may generate the recommendation action information so that the user U can return through an area with relatively fewer other users U.

[0126] When the access control device 3c transmits the determination result information to the wearable terminal 1, as shown in FIG. 15, the communication control unit 121 of the wearable terminal 1 receives the determination result information from the access control device 3c (step S15). Thereafter, the notification control unit 122 controls the speaker 15 so as to notify the user U of the determination result information received by the communication control unit 121 in step S15 (step S16).

[0127] Furthermore, when the access control device 3c transmits the recommended action information to the wearable terminal 1, as shown in FIG. 15, the communication control unit 121 of the wearable terminal 1 receives the recommended action information from the access control device 3c using the communication device 14 (step S17c). Thereafter, the notification control unit 122 controls the speaker 15 so as to notify the user U of the recommended action information received by the communication control unit 121 in step S17c (step S18c). As a result, the user U can recognize the recommended action information aurally via the speaker 15. That is, the user U can recognize the action that is recommended to be taken now. For this reason, the user U can take the action recommended by the recommended action information.

[0128] As described above, in the fourth modification, the access control device 3c can notify the user U of the recommended action information. As described above, the recommended action information is generated so that the action of the user U who acts according to the recommended action information does not become the action that a user U whose entry to the management target area MTA is not permitted would normally take. For this reason, when the user U acts according to the recommended action information, the action of the user U is different from the action that a user U whose entry to the management target area MTA is not permitted would normally take, as compared with the case where the user U acts instinctively without following the recommended action information. As a result, the possibility that a user U moving in the reverse direction from the entrance is noticed by other user Us as a user U whose entry to the management target area MTA is not permitted is reduced. As a result, the personal information of the user U regarding the determination result is appropriately protected.

[0129] In the above description, the access control device 3c includes the action recommendation unit 326c. However, the entrance management server 2 may include the action recommendation unit 326c. In this case, the wearable terminal 1 may receive the recommended action information generated by the action recommendation unit 326c of the entrance management server 2.

[0130] Furthermore, the entry management system SYSa of the first modification example and the entry management system SYSb of the second modification example described above may have configuration requirements specific to the entry management system SYSc of the third modification example. The configuration requirements specific to the entry management system SYSc of the third modification example may include, for example, configuration requirements related to the generation and notification of recommended action information. (5-5) Other Variants (5-5-1) Variant of the Wearable Terminal 1

[0131] In the above description, all of the body temperature detection operation for detecting the body temperature of the user U, the user identification operation for acquiring user identification information, the communication operation for transmitting the body temperature information and the user identification information to the access control server 2 and receiving the determination result information, and the notification operation for notifying the user U of the determination result information are performed by one wearable terminal 1. However, the entry management system SYS may separately include a wearable terminal 1 (or any user terminal) that performs at least one of the body temperature detection operation, the user identification operation, the communication operation, and the notification operation, and a wearable terminal 1 (or any user terminal) that performs at least one of the other body temperature detection operation, the user identification operation, the communication operation, and the notification operation. The user U may separately possess a wearable terminal 1 (or any user terminal) that performs at least one of the body temperature detection operation, the user identification operation, the communication operation, and the notification operation, and a wearable terminal 1 (or any user terminal) that performs at least one of the other body temperature detection operation, the user identification operation, the communication operation, and the notification operation. As an example, the user U may include a wearable terminal 1 and a smartphone paired with the wearable terminal 1. The wearable terminal 1 may perform the body temperature detection operation and the notification operation. On the other hand, the smartphone may perform the communication operation. In this case, the body temperature information regarding the body temperature of the user U detected by the wearable terminal 1 may be transmitted from the wearable terminal 1 to the access control device 3 via the smartphone. The determination result information transmitted from the access control device 3 may be transmitted from the access control device 3 to the wearable terminal 1 via the smartphone.

[0132] In the above description, the wearable terminal 1 unconditionally notifies the user U of the determination result information received from the access control device 3. However, the wearable terminal 1 notifies the user U of the determination result information when a predetermined notification condition is satisfied, and may not notify the user U of the determination result information when the predetermined notification condition is not satisfied. For example, the notification condition may include a condition that the user identification information included in the determination result information matches the user identification information of the user U who owns the wearable terminal 1 that has received the determination result information. In this case, the notification control unit 323 of the access control device 3 may transmit the determination result information including the user identification information for specifying the user U to whom the determination result information should be notified to the wearable terminal 1. When the user identification information included in the determination result information does not match the user identification information of the user U who owns the wearable terminal 1 that has received the determination result information, the determination result information transmitted by the access control device 3 may have been transmitted to the wearable terminal 1 owned by another user U different from the one user U to whom the determination result information should be notified. In such a case, if the determination result information is notified to another user U, the personal information of the one user U included in the determination result information may be leaked to another user U. Therefore, when the user identification information included in the determination result information does not match the user identification information of the user U who owns the wearable terminal 1 that has received the determination result information, the notification control unit 122 of the wearable terminal 1 may not control the speaker 15 to notify the determination result information. As a result, the personal information of the user U is appropriately protected.

[0133] In the above description, the wearable terminal 1 transmits the body temperature information and the user identification information to the access control device 3 when the communication device 14 detects the gate detection signal. That is, the wearable terminal 1 transmits the body temperature information and the user identification information to the access control device 3 when the user U is located in the vicinity of the gate mechanism 31. However, the wearable terminal 1 may transmit the body temperature information and the user identification information to the access control device 3 even when the communication device 14 does not detect the gate detection signal. The wearable terminal 1 may transmit the body temperature information and the user identification information to the access control device 3 even when the user U is not located in the vicinity of the gate mechanism 31. The wearable terminal 1 may transmit the body temperature information and the user identification information to the access control device 3 at a desired timing. For example, the wearable terminal 1 may transmit the body temperature information and the user identification information to the access control device 3 at the timing when the user U wears the wearable terminal 1. For example, the wearable terminal 1 may transmit the body temperature information and the user identification information to the access control device 3 before or at the timing when the user U departs from home in order to enter the management target area MTA. In this case, before the user U actually visits the management target area MTA, the user U can recognize whether the entry to the management target area MTA is permitted. Therefore, compared with the case where the user U first recognizes whether the entry to the management target area MTA is permitted after visiting the management target area MTA, the user U does not need to take the unnecessary action of visiting the management target area MTA. Therefore, the convenience of the user U is improved.

[0134] In the above description, when the wearable terminal 1 detects body temperature with the body temperature sensor 11, it unconditionally transmits the body temperature information regarding the detected body temperature to the access control device 3. However, the wearable terminal 1 may perform an operation for authenticating (e.g., biometric authentication) the user U whose body temperature is being detected during at least a part of the period when the body temperature sensor 11 is detecting body temperature. Alternatively, for example, the wearable terminal 1 may perform an operation for authenticating the user U whose body temperature is scheduled to be detected before the body temperature sensor 11 detects body temperature, and may also perform an operation for authenticating the user U whose body temperature has been detected after the body temperature sensor 11 detects body temperature. In this case, the operation for authenticating the user U may be performed to prevent impersonation of the user U. That is, the operation for authenticating the user U may be performed to prevent a user U different from the user U who owns (typically wears) the wearable terminal 1 from impersonating the user U who owns (typically wears) the wearable terminal 1. As a result, the possibility that the body temperature information regarding a user U different from the user U who owns (typically wears) the wearable terminal 1 is transmitted to the access control device 3 as the body temperature information regarding the user U who owns (typically wears) the wearable terminal 1 is reduced. Note that any authentication method can be adopted as the authentication method for authenticating the user U. For example, an authentication method may be used in which the user U is authenticated by comparing the reflection characteristics in the ear canal of the user U observed when sound is output from the speaker 15 of the wearable terminal 1 with the pre-registered reflection characteristics of the user U. (5-5-2) Variant of the Access Control Device 3

[0135] In the above description, the access control device 3 determines whether to permit a user to enter the management target area MTA based on the body temperature information. However, the access control device 3 may also determine whether to permit a user to enter the management target area MTA based on any biometric information different from the body temperature information. As an example of any biometric information different from the body temperature information, there is pulse information regarding the pulse (for example, information regarding the pulse rate). As another example of any biometric information different from the body temperature information, there is blood pressure information regarding the blood pressure (for example, information regarding at least one of the maximum blood pressure and the minimum blood pressure). As another example of any biometric information different from the body temperature information, there is voice information regarding the user's voice (for example, information regarding at least one of the voice volume, the voice pitch (that is, the frequency), and the speech speed). As another example of any biometric information different from the body temperature information, there is movement information regarding the movement of the user's body (for example, information regarding at least one of the user's walking rhythm and the user's walking speed). As another example of any biometric information different from the body temperature information, there is movement information regarding the user's facial expression (for example, information regarding an action unit corresponding to the movement of at least one of a plurality of face parts constituting the user's face). When the access control device 3 uses any biometric information different from the body temperature information in this way, the wearable terminal 1 may be provided with a sensor capable of detecting any biometric information different from the body temperature information in addition to or instead of the body temperature sensor 11.

[0136] In the above description, the access control device 3 acquires body temperature information from the wearable terminal 1. However, the access control device 3 may acquire body temperature information from a device different from the wearable terminal 1. In this case, the wearable terminal 1 may not be equipped with the body temperature sensor 11. For example, the access control device 3 may be equipped with a body temperature sensor disposed near the entrance and exit of the management target area MTA. In this case, the body temperature sensor included in the access control device 3 may detect the body temperature of the user U located near the access control device 3 (particularly, near the gate mechanism 31). The body temperature sensor included in the access control device 3 may detect the body temperature of the user U who holds the wearable terminal 1 that has detected the gate detection signal. For example, the access control device 3 may use the body temperature sensor of the access control device 3 to detect the body temperature of the user U triggered by the communication device 14 receiving the gate detection signal transmitted by the terminal communication device 35 of the access control device 3. Alternatively, triggered by the communication device 14 receiving the gate detection signal transmitted by the terminal communication device 35 of the access control device 3, the wearable terminal 1 transmits user identification information to the access control device 3, and the access control device 3 uses the body temperature sensor of the access control device 3 to detect the body temperature of the user U triggered by receiving the user identification information transmitted from the wearable terminal 1. Thereafter, the access control device 3 may determine whether to permit the user to enter the management target area MTA using the body temperature information regarding the body temperature of the user U detected by the body temperature sensor of the access control device 3 and the user identification information received from the wearable terminal 1.

[0137] Note that the access control device 3 is not a device worn by the user U. Therefore, the body temperature sensor included in the access control device 3 may be a sensor capable of detecting the body temperature of the user U from a position away from the user U. The body temperature sensor included in the access control device 3 may be a sensor capable of detecting the body temperature of the user U without contacting the user U. As an example, an infrared type body temperature sensor (for example, a body temperature sensor using a thermal camera or a thermographic camera) may be used as the body temperature sensor included in the access control device 3.

[0138] In the above description, the access control device 3 determines whether to permit a user to enter the management target area MTA based on user identification information. However, the access control device 3 may also determine whether to permit a user to enter the management target area MTA without using the user identification information. In this case, the wearable terminal 1 does not have to transmit the user identification information to the access control device 3.

[0139] In the above description, the access control device 3 notifies the user U of the determination result information using the voice output by the wearable terminal 1. However, the access control device 3 may notify the user U of the determination result information using any user terminal that is different from the wearable terminal 1 and is owned by the user U. For example, when the user terminal is equipped with an image output device (i.e., a display) capable of outputting information as an image, the access control device 3 may notify the user U of the determination result information using the image displayed on the user terminal. In this case, the user U can visually recognize the determination result information. For example, when the user terminal is equipped with a vibration device capable of vibrating, the access control device 3 may notify the user U of the determination result information using the vibration of the vibration device. In this case, the user U can tactilely recognize the determination result information. Also, the user terminal may be a device that the user can wear (i.e., a wearable terminal). As an example of a user terminal that the user can wear, at least one of a user terminal having an appearance like glasses, a user terminal having an appearance like a wristwatch, a user terminal having an appearance like a pen, and a user terminal having an appearance like a ring can be mentioned. Alternatively, the user terminal may not be a device that the user can wear. For example, at least one of a smartphone and a tablet terminal owned by the user may be used as the user terminal. In any case, the user terminal that notifies the user U of the determination result information is preferably a device that can notify (i.e., output) the determination result information in a notification mode (in other words, an output mode) in which the user U who owns the user terminal can recognize the determination result information while a user U who does not own the user terminal cannot recognize the determination result information.

[0140] In the above description, the access control device 3 determines that it does not permit the user U to enter the management target area MTA for reasons that the user U does not have the right to enter the management target area MTA and that the user U is suffering from an illness. However, the access control device 3 may also determine not to permit the user U to enter the management target area MTA based on other reasons. Even in this case, since the determination result information indicating the other reasons is notified to the user U using the wearable terminal 1, the personal information of the user regarding the other reasons is still appropriately protected. That is, even when the access control device 3 determines not to permit the user U to enter the management target area MTA based on any reason that may damage the reputation of the user U, may violate the human rights of the user U, may violate the privacy of the user, and / or may lead to the leakage of the personal information of the user U, the personal information of the user is appropriately protected.

[0141] In the above description, the access control device 3 is a device separate from the entrance management server 2. However, at least a part of the access control device 3 may be provided in the entrance management server 2. At least a part of the entrance management server 2 may be provided in the access control device 3. That is, the entrance management server 2 and the access control device 3 may be at least partially integrated. The entrance management system SYS may include a single device including at least a part of the entrance management server 2 and at least a part of the access control device 3. (5-5-3) Variant of the Entrance Management Server 2

[0142] The history management unit 213 of the entrance management server 2 may store (i.e., save) history information regarding the history of the determination result as to whether or not to permit the entrance of the user U to the management target area MTA in the storage device 22. At this time, as described above, in consideration of the fact that the personal information of the user U may be included in the determination result, the storage device 22 may store the history information in a form in which the personal information of the user U is protected. For example, the storage device 22 may store the history information in a state where the user identification information and the history information are not associated. That is, the storage device 22 may store the history information in an anonymous state. For example, when the user U who should be able to enter the management target area MTA according to the entrance permission policy is not permitted to enter the management target area MTA, the storage device 22 may not store (i.e., may not leave) the history information regarding the history of the user U. For example, when the entrance management system SYS includes a monitoring camera capable of monitoring the periphery of the gate mechanism 31, the storage device 22 may store the history information including the images captured by the monitoring camera while not including the history of the determination result. For example, the storage device 22 may erase the stored history information after a certain period of time (e.g., one day, several days, or one week) has elapsed.

[0143] This disclosure can be appropriately changed within a range not contrary to the gist or idea of this disclosure that can be read from the claims and the entire specification, and the entrance management system, entrance management device, entrance management method, computer program, and recording medium involving such changes are also included in the technical idea of this disclosure.

Explanation of Signs

[0144] SYS Entrance management system 1 Wearable terminal 11 Temperature sensor 12 Arithmetic unit 121 Communication control unit 122 Notification control unit 15 Speaker 2 Entrance management server 3 Access control device 32 Arithmetic unit 321 Information acquisition unit 322 Determination Unit 323 Notification Control Unit

Claims

1. A wearable terminal that is worn on a user's ear, retains the user's identification information, and is capable of acquiring the user's biological information, and an access control device that determines whether the user can enter or stay in the management target area, wherein the access control system comprises: the access control device includes: a determination means for determining whether the user can enter or stay in the management target area based on the biological information and the identification information; an output means for outputting the determination result information obtained by the determination to the wearable terminal; and the wearable terminal includes a notification means for notifying the user who has acquired the biological information of the determination result information by voice. An access control system.

2. The wearable terminal authenticates the user by comparing the reflection characteristics in the user's ear canal with the pre-registered reflection characteristics of the user. The access control system according to claim 1.

3. The authentication is performed before and after the acquisition of the biological information. The access control system according to claim 2.

4. The biological information is the body temperature information of the user. The access control system according to any one of claims 1 to 3.

5. When the output means determines whether the user can enter or stay in the management target area, the output means outputs information indicating the basis of the determination as the determination result information to the wearable terminal. The access control system according to any one of claims 1 to 4.

6. The determination means determines whether to permit the user to stay in the management target area based on the biological information acquired after the user enters the management target area. When the output means determines that the user's stay in the management target area is not permitted, the output means outputs route information regarding an evacuation route that the user should pass through to evacuate from the management target area to the wearable terminal. The access control system according to any one of claims 1 to 5.

7. The evacuation route includes a route passing through at least one partial area in the management target area where the number of other users staying is smaller compared to other partial areas. The access control system according to claim 6.

8. In addition to the determination result information, the output means outputs, to the wearable terminal, action information regarding actions recommended for the user whose entry to the management target area has been rejected. The notification means of the wearable terminal notifies the user of the received action information. The access control system according to any one of claims 1 to 7.

9. An access control method for managing the entry or stay of a user in a management target area, comprising: acquiring biometric information of the user and identification information of the user from a wearable terminal worn on the user's ear; determining whether entry or stay in the management target area is permitted based on the biometric information and the identification information; notifying, to the user from whom the biometric information has been acquired, the determination result information obtained by the determination in voice via the wearable terminal. An access control method executed by a computer.

10. A computer program for causing a computer to manage the entry or stay of a user in a management target area, comprising: acquiring biometric information of the user and identification information of the user from a wearable terminal worn on the user's ear; determining whether entry or stay in the management target area is permitted based on the biometric information and the identification information; notifying, to the user from whom the biometric information has been acquired, the determination result information obtained by the determination in voice via the wearable terminal. A computer program for causing a computer to execute an access control method.

Images