Display method, program, and display system

Abstract

To improve management and monitoring operations while minimizing any deterioration in security related to data management. [Solution] The authentication method relates to multiple servers 2 of an integrated system 1 that performs at least one of monitoring, management, and control within one or multiple facilities F1. The multiple servers 2 include at least a first server 21 and a second server 22. The authentication method includes a first step, a second step, and a third step. In the first step, authentication for a first access to the first server 21 is accepted. In the second step, if the authentication for the first access is successful, the first access is permitted. In the third step, if the authentication for the first access is successful, further authentication processing for a second access to the second server 22 is performed, thereby permitting the second access.

Description

Technical Field

[0001] The present disclosure generally relates to a display method, a program, and a display system. More specifically, the present disclosure relates to a display method, a program, and a display system for displaying, as an image, information on a plurality of servers of an integrated system that performs at least one of monitoring, management, and control.

Background Art

[0002] As a conventional example, an entrance / exit management system (integrated system) described in Patent Document 1 is exemplified. This entrance / exit management system includes an identifier having an identifier possessed by a user, an identification device provided near a door at an entrance / exit of a management area existing in a building, and a controller as a control device that gives an instruction to permit unlocking of the door when authentication is considered to be successful. The controller is installed at a remote location and is connected via a communication line to an entrance / exit room center device that manages data regarding the success or failure of unlocking all doors in a management area for each building to be managed, including buildings other than the building.

Prior Art Documents

Patent Documents

[0003]

Patent Document 1

Summary of the Invention

Problems to be Solved by the Invention

[0004] Incidentally, in an integrated system, when the data on the success or failure of unlocking all the doors in a plurality of facilities is collectively managed by an entrance / exit center device, it may be desirable for the administrator or monitor of the entrance / exit center device to be able to view the data through a display unit. However, when the data can be viewed through the display unit, considering the security aspect of data management, it is desirable to perform authentication processing for access in units of groups (server units connected to one or more controllers). On the other hand, for the administrator or monitor, if authentication input is required each time for each group, the operations such as management or monitoring may become complicated.

[0005] In view of the above reasons, the present disclosure is made, and an object thereof is to provide a display method, a program, and a display system capable of suppressing a decrease in security related to data management and improving operations such as management or monitoring.

Means for Solving the Problems

[0006] A display method according to an aspect of the present disclosure has a display unit for screen-displaying information on a plurality of servers in a system within one or more facilities, and is a display method of a display system separate from the plurality of servers. The plurality of servers includes at least a first server and a second server. The display method includes an authentication display step, a main display step, and a sub-display step. In the authentication display step, an authentication window for receiving authentication for a first access to the first server is displayed on the display unit. In the main display step, when the authentication for the first access is successful, a main window regarding first information acquired from the first server is displayed on the display unit. In the sub-display step, Entrance / exit management for performing entrance / exit management in response to a selection operation on the main window, When the authentication for the second access to the second server, which is executed when the authentication for the first access is successful, is successful, a sub-window regarding second information acquired from the second server by a second access is displayed on the display unit. The first

[0007] A program according to an aspect of the present disclosure is a program for causing one or more processors to execute the above display method.​

[0008] A display system according to one aspect of the present disclosure includes a display unit that displays information regarding a plurality of servers in one or more facilities, and is separate from the plurality of servers. The plurality of servers includes at least a first server and a second server. The display system further includes an image processing unit that causes the display unit to display an authentication window for receiving authentication for a first access to the first server. When the authentication for the first access is successful, the image processing unit causes the display unit to display a main window regarding first information acquired from the first server. Further, the image processing unit Entrance / exit management for performing entrance / exit management causes the display unit to display a sub-window regarding second information acquired from the second server by a second access in response to a selection operation on the main window. When the authentication for the second access to the second server, which is executed when the authentication for the first access is successful, is successful, The first

Advantages of the Invention

[0009] According to the present disclosure, there is an advantage that it is possible to improve operations such as management or monitoring while suppressing a decrease in security regarding data management.

Brief Description of the Drawings

[0010]

Figure 1

Figure 2

Figure 3

Figure 4

Figure 5

Modes for Carrying Out the Invention

[0011] (1) Summary In the following embodiments, each figure described is a schematic diagram, and the ratio of the size and thickness of each component in each figure does not necessarily reflect the actual dimensional ratio.

[0012] The authentication method according to this embodiment is an authentication method for a plurality of servers 2 of an integrated system 1 that performs at least one of monitoring, management, and control in one or more (two in FIG. 1) facilities F1 (see FIG. 1). The plurality of servers 2 includes at least a first server 21 and a second server 22 (only these two are illustrated in FIG. 1). Further, here, the plurality of servers 2 further includes an ID management server 8.

[0013] Hereinafter, as an example, it is assumed that the integrated system 1 has a function as an entrance and exit management system for performing management of entrance and exit in a facility F1 such as an office building and monitoring of one or more areas 4 in the facility F1. In other words, the integrated system 1 performs "management" and "monitoring" within the facility F1. However, the integrated system 1 may have a function as a BEMS (Building Energy Management System) that performs "control" and "management" of electrical equipment in the facility F1 instead of (or in addition to) the function of entrance and exit management. Further, the facility F1 may be a non-residential facility such as a theater, cinema, concert hall, amusement park, complex facility, restaurant, department store, school, hotel, inn, hospital, nursing home, kindergarten, library, museum, art museum, underground shopping mall, station, airport, etc. in addition to an office building. Also, the facility F1 may be a detached house or a collective housing such as an apartment in addition to a non-residential facility.

[0014] When there are a plurality of facilities F1 managed and monitored by the integrated system 1, the plurality of facilities F1 may be facilities existing within a specific area (for example, within the same town), or may be facilities existing in regions separated from each other (for example, regions straddling prefectures).

[0015] The first server 21 and the second server 22 respectively have jurisdiction over information regarding two facilities F1. The facility F1 under the jurisdiction of the first server 21 may be referred to as the first facility F11, and the facility F1 under the jurisdiction of the second server 22 may be referred to as the second facility F12. However, the object under the jurisdiction of each server 2 does not necessarily have to be in units of the facility F1. For example, the first server 21 may have jurisdiction over the lower floors of a certain facility F1, and the second server 22 may have jurisdiction over the upper floors of the same facility F1.

[0016] Here, the authentication method includes a first step, a second step, and a third step. In the first step, authentication for the first access to the first server 21 is received. In the second step, when the authentication for the first access is successful, the first access is enabled. In the third step, when the authentication for the first access is successful, the authentication process for the second access to the second server 22 is further executed to enable the second access. Hereinafter, it is assumed that the first to third steps of the authentication method are executed by the ID management server 8 (see FIG. 1) of the integrated system 1.

[0017] According to this configuration, when the authentication for the first access is successful, the authentication process for the second access is executed to enable the second access without receiving the authentication for the second access to the second server 22. Therefore, for a user (e.g., the administrator or monitor of the facility F1) using the integrated system 1, after inputting for the authentication for the first access, the trouble of further inputting for the authentication for the second access can be saved. As a result, while suppressing a decrease in security regarding data management, it is possible to improve operations such as management or monitoring.

[0018] Also, the display method according to one aspect of the present embodiment is a display method of a display system 6 (see FIG. 1) having a display unit 61 that displays information regarding a plurality of servers 2 of the integrated system 1. Here, the display system 6 is applied to a monitoring device 5 separate from the ID management server 8.

[0019] The display method includes a first step and a second step. In the first step, a first window (authentication window W1: see FIG. 2) for receiving authentication for the first access to the first server 21 is displayed on the display unit 61. In the second step, when the authentication for the first access is successful, a second window (main window W2: see FIG. 2) is displayed on the display unit 61. The second window (main window W2) relates to the first information acquired from the first server 21 and the second information acquired from the second server 22 by the second access to the second server 22 executed upon successful authentication.

[0020] According to this configuration, when the authentication for the first access is successful, a second window (main window W2) related to the first information acquired from the first server 21 and the second information acquired from the second server 22 is displayed. Therefore, it is possible to improve operations such as management or monitoring while suppressing a decrease in security related to data management.

[0021] Also, the display method according to another aspect of the present embodiment includes an authentication display step, a main display step, and a sub-display step. In the authentication display step, an authentication window W1 for receiving authentication for the first access to the first server 21 is displayed on the display unit 61. In the main display step, when the authentication for the first access is successful, a main window W2 related to the first information acquired from the first server 21 is displayed on the display unit 61. In the sub-display step, in response to a selection operation on the main window W2, a sub-window W3 related to the second information acquired from the second server 22 by the second access to the second server 22 is displayed on the display unit 61.

[0022] According to this configuration, when the authentication for the first access is successful, a main window W2 related to the first information acquired from the first server 21 is displayed, and a sub-window W3 related to the second information acquired from the second server 22 is displayed. Therefore, it is possible to improve operations such as management or monitoring while suppressing a decrease in security related to data management.

[0023] (2) Details Next, the overall configuration of the integrated system 1 according to this embodiment will be described in detail with reference to FIGS. 1 to 5.

[0024] (2.1) Overall configuration As shown in FIG. 1, the integrated system 1 according to this embodiment includes a monitoring device 5, an ID management server 8 (authentication server), a first group G1 that has jurisdiction over the first facility F11, and a second group G2 that has jurisdiction over the second facility F12. As described above, as an example, the integrated system 1 has a function as an entrance and exit management system.

[0025] (2.2) Entrance and exit management Next, the first group G1 and the second group G2 will be described.

[0026] As shown in FIG. 1, the first group G1 is composed of, for example, a first server 21 and a plurality (three in the illustrated example) of controllers 3 (facilities). The first group G1 may further include one or more imaging units (facilities: for example, cameras) installed in one or more areas 4 within the first facility F11. The first group G1 may further include one or more people sensors (facilities) installed within one or more areas 4 to detect people present within the area 4. Each area 4 may correspond to, for example, one floor.

[0027] Each controller 3 is installed, for example, near the door (security gate) of an area where restrictions should be imposed on entry into the first facility F11, etc., and controls the unlocking and locking of the door. Each controller 3 is communicably connected to, for example, a card reader capable of reading identification information from a contactless IC (Integrated Circuit) card having identification information with a specific privilege. When a user using the first facility F11 brings the contactless IC card close to the card reader, the controller 3 authenticates the identification information, and if the authentication is successful, it executes the unlocking of the door. Each controller 3 may be communicably connected to an operation panel for inputting a password. Each controller 3 may be communicably connected to a device having an authentication function such as fingerprint, iris, or voiceprint.

[0028] The first server 21 is one server that constitutes the "plurality of servers 2" in the present disclosure. The first server 21 is, for example, a web server. The first server 21 is installed in a room (such as a server management room) within the first facility F11. The first server 21 is communicably (either wired or wirelessly) connected to a plurality of controllers 3, imaging units, and human sensors belonging to the first group G1. The first server 21 performs management regarding the "first target". Here, the "first target" refers to the plurality of controllers 3 (facilities) and areas 4 of the first facility F11. Here, it is assumed that the first server 21 is composed of one server device, but it may be composed of a plurality of server devices.

[0029] The first server 21 receives, from each controller 3 in the first group G1, a signal including an identifier that can identify the controller 3 and door opening / closing information, etc. Also, the first server 21 receives, from each imaging unit in the first group G1, a signal including an identifier that can identify the imaging unit and the captured video (information). Further, the first server 21 receives, from each human sensor in the first group G1, a detection signal including an identifier that can identify the human sensor and information indicating that a person has been detected, etc. That is, the first server 21 is a management server that manages various information received from facilities such as the controller 3 in the first group G1. Also, the first server 21 manages map information (first map information of one or more first areas 41) of one or more areas 4 in the first facility F11.

[0030] The first server 21 can communicate with the monitoring device 5 and the ID management server 8 via a gateway in the first facility F11 connected to a public network such as the Internet. When the first server 21 receives ID information (operator ID) and a password necessary for authentication processing in the ID management server 8 from the monitoring device 5, it transfers them to the ID management server 8. When the first server 21 receives an authentication result from the ID management server 8, it transmits it to the monitoring device 5. Also, the first server 21 transmits information received from facilities such as the controller 3 belonging to the first group G1 and the first map information, etc. to the monitoring device 5 (when authentication for the first access described later is successful).

[0031] As shown in FIG. 1, the second group G2 is composed of, for example, a second server 22 and a plurality (three in the illustrated example) of controllers 3 (facilities). Similar to the first group G1, the second group G2 may further include one or more imaging units (facilities: for example, cameras) and one or more human sensors (facilities).

[0032] Since each controller 3 in the second group G2 has substantially the same configuration as the controller 3 in the first group G1, the description thereof is omitted.

[0033] The second server 22 is one of the "multiple servers 2" in the present disclosure. The second server 22 is, for example, a web server. The second server 22 is installed in a room (such as a server management room) within the second facility F12. The second server 22 is communicably connected (either wired or wirelessly) to a plurality of controllers 3, imaging units, and human sensors belonging to the second group G2. The second server 22 manages the "second target". Here, the "second target" refers to the plurality of controllers 3 (equipment) and areas 4 of the second facility F12. That is, the second server 22 manages a "second target" different from the "first target" of the first server 21. Here, it is assumed that the second server 22 is composed of a single server device, but it may also be composed of a plurality of server devices.

[0034] The second server 22 receives from each controller 3 of the second group G2 a signal including an identifier that can identify the controller 3 and door opening / closing information, etc. Further, the second server 22 receives from each imaging unit of the second group G2 a signal including an identifier that can identify the imaging unit and the captured video (information). Further, the second server 22 receives from each human sensor of the second group G2 a detection signal including an identifier that can identify the human sensor and a detection indication such as detecting a person. That is, the second server 22 is a management server that manages various information received from equipment such as the controllers 3 of the second group G2. Also, the second server 22 manages map information (second map information of one or more second areas 42) of one or more areas 4 in the second facility F12.

[0035] The second server 22 can communicate with the monitoring device 5 and the ID management server 8 via a gateway in the second facility F12 connected to a public network such as the Internet. When the second server 22 receives the ID information (operator ID) and password necessary for the authentication process in the ID management server 8 from the monitoring device 5, it transfers them to the ID management server 8. When the second server 22 receives the authentication result from the ID management server 8, it transmits it to the monitoring device 5. Also, the second server 22 transmits the information received from facilities such as the controller 3 of the second group G2 and the second map information, etc. to the monitoring device 5 (when the authentication for the first access described later is successful).

[0036] (2.3) Monitoring Device The monitoring device 5 can be used by a monitor (or administrator) who collectively monitors a plurality of facilities F1. The monitoring device 5 can communicate with a plurality of servers 2. The monitoring device 5 is installed, for example, in a security company or in a monitoring room, etc. in any of the plurality of facilities F1. The monitoring device 5 is configured, for example, as a personal computer equipped with a display unit 61 described later.

[0037] The monitoring device 5 has an image processing unit 60, a display unit 61, etc. The image processing unit 60 and the display unit 61 constitute the "display system 6" in the present disclosure.

[0038] As shown in FIGS. 2 to 4, the display unit 61 has a display screen 610 made of, for example, a liquid crystal display. The display unit 61 displays the image generated by the image processing unit 60. The display unit 61 may be provided integrally with the housing that houses the image processing unit 60, or may be provided separately.

[0039] The image processing unit 60 includes, for example, a computer system. The computer system mainly includes one or more processors and one or more memories as hardware. The functions of the image processing unit 60 are realized by one or more processors executing a program recorded in one or more memories of the computer system. The program is pre-recorded in one or more memories of the computer system. Note that the program may be provided through a telecommunication line, or may be provided by being recorded on a non-transitory recording medium such as a memory card, an optical disk, or a hard disk drive that can be read by the computer system.

[0040] The image processing unit 60 causes the display unit 61 to display on the screen information regarding the plurality of servers 2.

[0041] The image processing unit 60 causes an authentication window W1 (see FIG. 2) for receiving authentication for the first access to the first server 21 to be displayed on the display screen 610 of the display unit 61. Specifically, the authentication window W1 includes an input area for receiving input of information necessary for the first access to the first server 21. As shown in FIG. 2, the input area includes two areas for inputting the ID information (operator ID) and password (hereinafter sometimes simply referred to as "input information" collectively) given to the supervisor. The authentication window W1 further includes a transmission button area for determining the transmission of the input information to the first server 21 after the input information is input. When the supervisor uses the mouse to move the cursor to the input area to input the input information and then clicks on the transmission button area with the pointer, the monitoring device 5 transmits an authentication request signal including the input information to the first server 21.

[0042] The authentication window W1 includes a menu bar at the upper end in addition to the input area. The authentication window W1 can be closed by clicking on the area of the "×" mark at the right end of the menu bar with the pointer.

[0043] The authentication window W1 is displayed on the display unit 61 together with the main window W2 (application screen) described later by starting a dedicated management application software (hereinafter simply referred to as "management software") pre-installed in the monitoring device 5. The authentication window W1 is displayed on the screen in, for example, the form of a web browser.

[0044] As described above, the image processing unit 60 causes the main window W2 to be displayed on the display unit 61 by starting the management software. The main window W2 is a vertically long window for presenting information acquired from a plurality of servers 2. The main window W2 is a window in a separate frame from the authentication window W1 and is output side by side to the left of the authentication window W1.

[0045] As shown in FIGS. 2 to 4, the main window W2 includes an operation area B1 and a display area B2.

[0046] The operation area B1 includes five small square areas B10 (see FIG. 2) respectively indicated by "1" to "5". Hereinafter, when distinguishing the five small areas B10 from each other, they may be referred to as small areas B11 to B15 in order from the left. The five small areas B10 present to the monitor, by means of color differences, whether the connection state regarding each of a plurality of servers 2 (excluding the ID management server 8) is "connected" or "not connected" (status information). For example, the color of the small area B11 indicates the connection state regarding the first server 21, and the color of the small area B12 indicates the connection state regarding the second server 22. Also, the small areas B13 to B15 indicate the connection states regarding the third to fifth servers (not shown in FIG. 1). That is, the main window W2 (the second window) includes status information indicating the access states to the first server 21 and the second server 22.

[0047] Immediately after the management software is started, if the authentication for accessing the first server 21 has not been completed yet, the colors of all five small regions B10 are gray (see FIG. 2: light dot hatching in the illustrated example), indicating "not connected". When the connection status to the server 2 becomes "connected", the image processing unit 60 changes the color of the small region B10 corresponding to the server 2 to white, for example.

[0048] Also, the operation area B1 functions as an area for receiving a selection operation from the monitor. If the connection status to the server 2 is "connected", the monitor can select, for example, a white small region B10 indicating connection in progress with a pointer using a mouse. The image processing unit 60 causes the display unit 61 to display information about the server 2 corresponding to the selected small region B10 as a sub-window W3 described later. Also, the image processing unit 60 changes the color of the selected small region B10 from white to green (see FIGS. 3 and 4: dark dot hatching in the illustrated example).

[0049] As shown in FIGS. 2 to 4, the main window W2 further includes a name area B3 for displaying the name of the facility F1 in characters. The name area B3 is arranged immediately below the operation area B1. The monitoring device 5 stores, in its own storage unit, data in which, for example, the identification information and name information of each server 2 are associated. The storage unit is composed of a device selected from a ROM (Read Only Memory), a RAM (Random Access Memory), or an EEPROM (Electrically Erasable Programmable Read Only Memory), etc. The image processing unit 60 causes the display unit 61 to display the name (name information) of the server 2 corresponding to the (green) small region B10 currently selected in the operation area B1 by referring to the data in the storage unit. If the connection status to all servers 2 is "not connected" and there is no selected small region B10, the name area B3 is in a blank state as shown in FIG. 2.

[0050] The display area B2 is an area for displaying event information. The image processing unit 60 outputs, in characters, information (notification information) regarding events that occurred in the server 2, based on information acquired from all the servers 2 (excluding the ID management server 8) whose connection state is "connected", to the display area B2. In other words, the main window W2 includes notification information based on information (including the first information acquired from the first server 21 and the second information acquired from the second server 22) for notifying an authenticated monitor (user).

[0051] A plurality of event columns B20 indicated by "No.001", "No.002", "No.003",... in the display area B2 each present one piece of event information. Each event column B20 includes, for example, a content display area B21 of five lines.

[0052] In the content display area B21 of the first line of each event column B20, for example, date and time information regarding the date and time when the event occurred can be output.

[0053] In the content display area B21 of the second line of each event column B20, for example, location information regarding the location where the event occurred can be output. The location information is information that can identify the facility F1, information that can identify the server 2, information that can identify the controller 3, information that can identify the door corresponding to the controller 3, and the like. The information that can be identified may be name information or code information. In short, since the notification information includes location information under the jurisdiction of the server 2, it can be said that it includes information that can identify the first server 21 or the second server 22. Therefore, through the main window W2, it is possible to know which server 2 the notification information relates to, and thus operations such as management or monitoring are further improved.

[0054] In the content display area B21 of the third to fifth lines of each event column B20, information that can identify the type of event can be output. Examples of the type of event include communication abnormality, locking / unlocking abnormality, recovery of communication abnormality, and detection of a suspicious person.

[0055] The image processing unit 60 outputs, in real time, the event information in all the servers 2 (excluding the ID management server 8) whose connection state is "connected" to the event column B20. The latest event information is always output to the event column B20 of "No.001". Each time the latest event information is output, the old event information is shifted down and output to "No.002", "No.003" in order.

[0056] In response to a selection operation on the operation area B1 on the main window W2, the image processing unit 60 causes the display unit 61 to display a sub-window W3 (see FIG. 4: the second sub-window W32 described later) regarding the second information acquired from the second server 22 by the second access on the screen. In particular, the image processing unit 60 executes a screen transition regarding a plurality of sub-windows W3 in response to a selection operation on the operation area B1 on the main window W2.

[0057] The plurality of sub-windows W3 includes, for example, a first sub-window W31 (see FIG. 3) and a second sub-window W32 (see FIG. 4). Each sub-window W3 is displayed on the screen in, for example, a web browser format. The first sub-window W31 shows first map information regarding one or a plurality of first areas 41 under the jurisdiction of the first server 21. The second sub-window W32 shows second map information regarding one or a plurality of second areas 42 under the jurisdiction of the second server 22. The first map information may be included in the first information. The second map information may be included in the second information.

[0058] For example, when a white small area B11 indicating that the connection state of the first server 21 is "connected" is clicked, the image processing unit 60 causes the display unit 61 to display a first sub-window W31 showing the first map information. Here, when a white small area B12 indicating that the connection state of the second server 22 is "connected" is further clicked, the image processing unit 60 switches the first sub-window W31 to a second sub-window W32. In this case, the image processing unit 60 may close and hide the first sub-window W31, or may move and hide the first sub-window W31 so as to be hidden behind the second sub-window W32. In short, the main window W2 includes an operation area B1 for switching between the first map information and the second map information, and the first sub-window W31 and the second sub-window W32 can be switched according to a selection operation on the operation area B1.

[0059] Note that the switching of the map information does not necessarily need to be linked to the switching between the first sub-window W31 and the second sub-window W32 by a click operation on the operation area B1. For example, an operation area for map switching may be displayed on the main window W2, and the map information to be displayed in the first sub-window W31 may be switched in floor units according to an operation on the operation area for map switching. Alternatively, for example, icons corresponding to each floor may be displayed on the first sub-window W31, and the map information to be displayed in the first sub-window W31 may be switched in floor units by a click operation on the icon.

[0060] The sub-window W3 also includes a menu bar at the upper end. When there are a plurality of first areas 41 (when there are a plurality of floors), the first map information displayed in the first sub-window W31 may be selected from one of the plurality of first areas 41 through the menu bar. Similarly, when there are a plurality of second areas 42, the second map information displayed in the second sub-window W32 may be selected from one of the plurality of second areas 42 through the menu bar.

[0061] (2.4) ID Management Server The ID management server 8 collectively manages a plurality of operator IDs and passwords and executes authentication processing. The ID management server 8 can communicate with the first server 21 and the second server 22. The ID management server 8 is one of the servers constituting the "plurality of servers 2" in the present disclosure. The ID management server 8 stores, for example, in its own storage unit, reference data in which a plurality of operator IDs and passwords are associated. The storage unit is composed of a device selected from ROM, RAM, EEPROM, etc. In the reference data, each operator ID is also associated with an authority level regarding the viewing of information acquired from the server 2. For example, a monitor to whom an operator ID with the highest authority level is assigned can view all information, and as the authority level decreases, the information that can be viewed is more restricted.

[0062] It is assumed that the ID management server 8 is composed of one server device, but it may also be composed of a plurality of server devices. In particular, the functions of the ID management server 8 may be provided, for example, in each of the first server 21 and the second server 22. Also, the ID management server 8 may collectively manage the identification information regarding the IC cards owned by the users who use the facility F1.

[0063] Similar to the monitoring device 5, the ID management server 8 may be installed, for example, in a monitoring room or the like in a security company or in one of the plurality of facilities F1, or may be installed at a location different from the monitoring device 5.

[0064] As shown in FIG. 1, the ID management server 8 has a control unit 70. The control unit 70 includes, for example, a computer system. The computer system mainly includes one or more processors as hardware and one or more memories. The functions of the control unit 70 are realized by one or more processors executing a program recorded in one or more memories of the computer system. The program is pre-recorded in one or more memories of the computer system. Note that the program may be provided through a telecommunication line, or may be provided by being recorded on a non-transitory recording medium such as a memory card, an optical disk, or a hard disk drive that can be read by the computer system.

[0065] The control unit 70 has a reception unit 71 and an authentication processing unit 72. In other words, the control unit 70 has a function as the reception unit 71 and a function as the authentication processing unit 72. The reception unit 71 and the authentication processing unit 72 constitute the "authentication system 7" in the present disclosure.

[0066] The reception unit 71 is configured to receive authentication for the first access to the first server 21. That is, when input information (operator ID and password) is input into the authentication window W1 by the monitoring device 5, the ID management server 8 receives an authentication request signal including the input information from the monitoring device 5 via the first server 21. The reception unit 71 receives the authentication (request) for the first access by receiving the authentication request signal.

[0067] The authentication processing unit 72 is configured to execute authentication processing regarding the success or failure of the authentication for the first access. In the authentication processing, the authentication processing unit 72 searches the reference data in the storage unit of the ID management server 8 for data that matches the input information included in the received authentication request signal. If matching data exists, the authentication processing unit 72 determines that "authentication is successful". If no matching data exists, the authentication processing unit 72 determines that "authentication fails".

[0068] When the authentication processing unit 72 succeeds in the authentication for the first access, it enables the first access. That is, when the authentication processing unit 72 determines "authentication successful" for the first server 21, it transmits an authentication result signal including an instruction to permit the first access to the monitoring device 5 via the first server 21. That is, the first server 21 also obtains information that the authentication has succeeded. When the monitoring device 5 receives an authentication result signal including an instruction to permit the first access, it changes the color of the small area B11 corresponding to the first server 21 from gray to white to indicate that the connection state of the first server 21 is "connected". It is desirable for the monitoring device 5 to cause the display unit 61 to display a message including the fact that "authentication is successful". Then, since the first access is permitted, the monitoring device 5 can acquire first information (such as map information) from the first server 21 and display it on the display unit 61.

[0069] When the authentication processing unit 72 determines "authentication failed" for the first server 21, it transmits an authentication result signal including an instruction to not permit the first access to the monitoring device 5 via the first server 21. That is, the first server 21 also obtains information that the authentication has failed. When the monitoring device 5 receives an authentication result signal including an instruction to not permit the first access, it maintains the color of the small area B11 corresponding to the first server 21 as gray to indicate that the connection state of the first server 21 is "not connected". It is desirable for the monitoring device 5 to cause the display unit 61 to display a message including the fact that "authentication failed". Since the first access is not permitted, the monitoring device 5 cannot acquire first information (such as map information) from the first server 21.

[0070] Here, when the authentication processing unit 72 of the present embodiment succeeds in the authentication for the first access, it further executes authentication processing regarding a second access to the second server 22 and enables the second access (if the authentication is successful). That is, without the reception unit 71 receiving an authentication (request) for the second access to the second server 22, the authentication processing unit 72 automatically executes the authentication processing regarding the second access. Therefore, the monitor does not need to input input information for obtaining permission for the second access to the second server 22 in the authentication window W1.

[0071] Here, as an example, the operator ID is associated in the reference data so as to have the authority not only for the first access to the first server 21 but also for the accesses to the second server 22 and the third to fifth servers. In short, the operator ID of the first server 21 and the operator ID of the second server 22 are, for example, common. Therefore, as long as there are no abnormalities such as communication errors or setting mistakes in the operator ID and password, etc., when the authentication process for the second access to the second server 22 is executed, the second access is substantially permitted.

[0072] It is desirable that the passwords be different between the first server 21 and the second server 22. The ID management server 8 stores information associating the first password for the first server 21 and the second password for the second server 22. When automatically executing the authentication process for the second access when the input information includes the first password, the second password associated with the first password is used.

[0073] However, like the operator ID, the password may be common between the first server 21 and the second server 22. Conversely, the password may be common between the first server 21 and the second server 22, and the operator ID may be different between the first server 21 and the second server 22. In this case, the ID management server 8 may store information associating the first operator ID for the first server 21 and the second operator ID for the second server 22. When automatically executing the authentication process for the second access when the input information includes the first operator ID, the second operator ID associated with the first operator ID is used.

[0074] When the authentication processing unit 72 succeeds in authenticating for the second access, it enables the second access. When the authentication processing unit 72 determines that the "authentication succeeded" of the second server 22, it transmits an authentication result signal including an instruction to permit the second access to the monitoring device 5 via the second server 22. That is, the second server 22 also obtains information that the authentication has succeeded. When the monitoring device 5 receives an authentication result signal including an instruction to permit the second access, it changes the color of the small area B12 corresponding to the second server 22 from gray to white to indicate that the connection state of the second server 22 is "connected". It is desirable for the monitoring device 5 to cause the display unit 61 to display a message including the fact that the "authentication succeeded" of the second server 22. Then, since the second access is permitted, the monitoring device 5 can acquire second information (such as map information) from the second server 22 and can display it on the display unit 61.

[0075] When the authentication processing unit 72 determines that the "authentication failed" of the second server 22, it transmits an authentication result signal including an instruction not to permit the second access to the monitoring device 5 via the second server 22. That is, the second server 22 also obtains information that the authentication has failed. When the monitoring device 5 receives an authentication result signal including an instruction not to permit the second access, it maintains the color of the small area B12 corresponding to the second server 22 as gray to indicate that the connection state of the second server 22 is "not connected". It is desirable for the monitoring device 5 to cause the display unit 61 to display a message including the fact that the "authentication failed". Since the second access is not permitted, the monitoring device 5 cannot acquire second information (such as map information) from the second server 22. As described above, the "authentication failed" of the second server 22 is likely to be caused by a communication error or a setting mistake such as an operator ID and password, so it is desirable for the monitoring device 5 to cause the display unit 61 to display a message including that fact.

[0076] Even if the authentication processing unit 72 determines "authentication failure" for the authentication processing regarding servers 2 other than the first server 21, it executes the authentication processing by changing the target server 2. Specifically, even if the authentication processing unit 72 determines "authentication failure" regarding the second server 22, it sequentially executes the authentication processing regarding the third to fifth servers. If the authentication processing unit 72 determines "authentication failure" in the authentication processing after the second server 22, it may retry the said authentication processing at least once.

[0077] (2.5) Operation of the integrated system Hereinafter, the operation of the integrated system 1 when the monitor performs the monitoring operation using the monitoring device 5 will be described.

[0078] [Example of operation related to authentication] First, an example of the operation related to authentication will be described with reference to FIG. 5.

[0079] The monitor starts the management software on the monitoring device 5 (step S1). The monitoring device 5 displays the authentication window W1 and the main window W2 on the display unit 61 (step S2). In other words, the authentication window W1 (the first window) for receiving authentication for the first access to the first server 21 is displayed on the display unit 61 (the first step of the display method and the authentication display step of the display method). At this point, the main window W2 may not be displayed.

[0080] The monitor inputs the operator ID and password (input information) into the authentication window W1 (step S3). When the monitor inputs the input information and clicks on the send button area, the authentication window W1 may be closed.

[0081] When the monitoring device 5 receives the input information from the monitor, it transmits an authentication request signal including the input information to the first server 21 (step S4). The first server 21 transmits the authentication request signal received from the monitoring device 5 to the ID management server 8 (step S5).

[0082] The ID management server 8 receives the authentication request signal received from the first server 21. In other words, the reception unit 71 of the ID management server 8 receives the authentication for the first access to the first server 21 (step S6: the first step of the authentication method).

[0083] The authentication processing unit 72 of the ID management server 8 executes the authentication process based on the input information (step S7). When the authentication for the first access is successful, the ID management server 8 enables the first access (the second step of the authentication method). That is, the ID management server 8 transmits an authentication result signal including an instruction to permit the first access to the first server 21 (step S8). If the authentication fails, the ID management server 8 transmits an authentication result signal including an instruction to disallow the first access to the first server 21. The first server 21 transmits the authentication result signal received from the ID management server 8 to the monitoring device 5 (step S9).

[0084] Here, when the authentication processing unit 72 of the ID management server 8 succeeds in the authentication for the first access, it further executes the authentication process (step S10) regarding the second access to the second server 22 to enable the second access (the third step of the authentication method). That is, when the ID management server 8 succeeds in the authentication for the second access after succeeding in the authentication for the first access, it transmits an authentication result signal including an instruction to permit the second access to the second server 22 (step S11). The second server 22 transmits the authentication result signal received from the ID management server 8 to the monitoring device 5 (step S12).

[0085] As a result, in the monitoring device 5, the first access to the first server 21 is permitted, and further the second access to the second server 22 is also permitted. That is, the monitoring device 5 can acquire the first information (such as map information) from the first server 21 (step S13) and can display it on the display unit 61. Also, the monitoring device 5 can acquire the second information (such as map information) from the second server 22 (step S13) and can display it on the display unit 61. The monitoring device 5 sets the colors of the small regions B11 and B12 of the operation region B1 in the main window W2 to white to indicate that the connection states of the first server 21 and the second server 22 are "connected".

[0086] Note that when the authentication fails, the monitoring device 5 cannot acquire information from the corresponding server 2. In particular, if the authentication for the first access to the first server 21 fails, the authentication process for the second access to the second server 22 is not executed either, so the monitoring device 5 cannot acquire information from the first server 21 and the second server 22.

[0087] Thereafter, the image processing unit 60 of the monitoring device 5 outputs, in real time, the event information (notification information) in all the servers 2 (here, the first to fourth servers) whose connection states are "connected" as "latest alert display" to the display area B2 of the main window W2 (step S14). In other words, when the authentication for the first access is successful, the image processing unit 60 causes the main window W2 (the second window) regarding the first information (the first event information) and the second information (the second event information) to be displayed on the display unit (61). (The second step of the display method). Further in other words, when the authentication for the first access is successful, the image processing unit 60 causes the main window W2 regarding the first information acquired from the first server 21 to be displayed on the display unit 61 (the main display step of the display method).

[0088] That is, the display area B2 displays both the first event information and the second event information. The first event information is acquired from the first server 21. The first event information is information regarding an event that occurs in the first area 41 (see FIG. 3) under the jurisdiction of the first server 21. The second event information is acquired from the second server 22 by a second access to the second server 22 that is executed following the successful authentication for the first access. The second event information is information regarding an event that occurs in the second area 42 (see FIG. 4) under the jurisdiction of the second server 22. In this way, since the information including the first information (first event information) and the second information (second event information) is displayed in the main window W2, the monitor can know the information through the main window W2, so that operations such as management or monitoring are further improved.

[0089] Although detailed description is omitted, after executing the authentication process regarding the second access to the second server 22, the ID management server 8 sequentially executes the authentication process for the other servers 2 (the third to fifth servers respectively having jurisdiction over the other three facilities F1). In the examples of FIGS. 3 and 4, the monitoring device 5 receives the authentication results for the access to the third to fifth servers, sets the colors of the small areas B13 and B14 to white, and presents that the connection states of the third server and the fourth server are also "connected". In the illustrated example, the fifth server has failed in authentication. The monitoring device 5 maintains the color of the small area B15 as gray and presents that the connection state of the fifth server is "not connected".

[0090] [Operation example after authentication] Next, the operation example after authentication will be described with reference to FIGS. 3 and 4.

[0091] The monitor clicks (selects "1") on the small area B11 ("1") showing white (indicating being connected) in the main window W2 with a pointer.

[0092] In response to the click operation, the monitoring device 5 changes the color of the small area B11 from white to green indicating that it is being selected, and further causes the display unit 61 to display the first sub-window W31 (see FIG. 3) showing the first map information so as to be arranged side by side to the right of the main window W2. The first sub-window W31 includes the first map information (e.g., a floor plan) of the first area 41 under the jurisdiction of the first server 21. The first map information may include markers indicating the positions of doors, the controller 3, the imaging unit, the human presence sensor, and the like.

[0093] Further, the monitoring device 5 displays, in the name area B3 of the main window W2, the name "Building A of Office" of the first facility F11 under the jurisdiction of the first server 21 as information that can identify the currently selected first server 21. In other words, the main window W2 includes information that can identify the first server 21.

[0094] When the monitor clicks, for example, the marker of the imaging unit on the first map information shown in the first sub-window W31 with a pointer, another window showing the video currently being captured by the imaging unit may be pop-up displayed so as to overlap on the first sub-window W31. When the monitor clicks the marker of the controller 3 on the first map information shown in the first sub-window W31 with a pointer, identification information related to the controller 3, history information related to locking and unlocking, and the like may be pop-up displayed.

[0095] For example, it is assumed that the monitor finishes the monitoring operation of the first area 41 under the jurisdiction of the first server 21 and then performs the monitoring operation of the second area 42 under the jurisdiction of the second server 22. The monitor clicks on the small area B12 (labeled "2") shown in white (indicating connection) in the main window W2 with a pointer (selection of "2").

[0096] Then, in response to the click operation, the monitoring device 5 changes the color of the small area B12 from white to green, indicating that it is being selected. Further, the monitoring device 5 causes the display unit 61 to display the second sub-window W32 (see FIG. 4) showing the second map information beside the right side of the main window W2. That is, in response to the selection operation on the operation area B1, the monitoring device 5 causes the display unit 61 to display the sub-window W3 regarding the second information acquired from the second server 22 by the second access to the second server 22 (sub-display step of the display method). Stated more simply, in response to the selection operation on the operation area B1, the monitoring device 5 switches from the first sub-window W31 showing the first map information to the second sub-window W32 showing the second map information (screen transition: switching step of the sub-display step).

[0097] The second sub-window W32 includes the second map information (e.g., a floor plan) of the second area 42 under the jurisdiction of the second server 22. Similar to the first map information, the second map information may include markers indicating the positions of doors, the controller 3, the imaging unit, the human sensor, and the like.

[0098] In addition, the monitoring device 5 displays the name "Building B Office" of the second facility F12 under the jurisdiction of the second server 22 in the name area B3 of the main window W2 as information that can identify the currently selected second server 22. In other words, the main window W2 includes information that can identify the second server 22.

[0099] Similarly, when the monitor clicks on the small area B13 (or small area B14) with the pointer, the sub-window W3 showing the map information of the area under the jurisdiction of the third server (or fourth server) is switched in response to the click operation.

[0100] In this embodiment, as in the operation example described above, when the authentication for the first access is successful, the authentication process for the second access is executed without accepting the authentication for the second access to the second server 22, enabling the second access. Therefore, for a user who uses the integrated system 1 (for example, an administrator or a monitor of the facility F1), the labor of performing an input operation related to the authentication for the second access after performing an input operation related to the authentication for the first access can be saved. As a result, it is possible to improve operations such as management or monitoring while suppressing a decrease in security related to data management.

[0101] Also, since the first to third steps of the authentication method are executed in the ID management server 8, the configuration of the monitoring device 5 can be simplified compared to the case where it is executed in the monitoring device 5 (management terminal), for example.

[0102] Also, as in the operation example described above, when the authentication for the first access is successful, the main window W2 (second window) regarding the first information acquired from the first server 21 and the second information acquired from the second server 22 is displayed. Therefore, it is possible to improve operations such as management or monitoring while suppressing a decrease in security related to data management.

[0103] Furthermore, as in the operation example described above, when the authentication for the first access is successful, the main window W2 regarding the first information acquired from the first server 21 is displayed, and the sub-window W3 regarding the second information acquired from the second server 22 is displayed. Therefore, it is possible to improve operations such as management or monitoring while suppressing a decrease in security related to data management.

[0104] Also, as in the operation example described above, the main window W2 (second window) includes state information (the difference in the color of the small area B10 in the operation area B1) indicating the access state to the first server 21 and the second server 22. Therefore, through the main window W2, the access state to the server 2 can be known, so that operations such as management or monitoring are further improved. In addition, since screen transition is executed according to the selection operation on the operation area B1, the management operation is further improved.

[0105] (3) Modification Example The above embodiment is only one of various embodiments of the present disclosure. The above embodiment can be variously modified according to design and the like as long as the object of the present disclosure can be achieved. The authentication system 7 according to the above embodiment may be embodied by an authentication method, a computer program, or a non-transitory recording medium recording the computer program. Also, functions similar to those of the display system 6 according to the above embodiment may be embodied by a display method, a computer program, or a non-transitory recording medium recording the computer program.

[0106] Hereinafter, modification examples of the above embodiment will be listed. The modification examples described below can be applied in appropriate combinations. Hereinafter, the above embodiment may also be referred to as a "basic example".

[0107] The display system 6 and the authentication system 7 in the present disclosure include a computer system. The computer system mainly includes a processor and a memory as hardware. By the processor executing a program recorded in the memory of the computer system, the functions as the display system 6 and the authentication system 7 in the present disclosure are realized. The program may be pre-recorded in the memory of the computer system, may be provided through a telecommunication line, or may be provided by being recorded in a non-transitory recording medium such as a memory card readable by the computer system, an optical disk, or a hard disk drive. The processor of the computer system is composed of one or more electronic circuits including a semiconductor integrated circuit (IC) or a large-scale integrated circuit (LSI). Here, integrated circuits such as the IC or LSI are called differently depending on the degree of integration, and include integrated circuits called system LSI, VLSI (Very Large Scale Integration), or ULSI (Ultra Large Scale Integration). Furthermore, for an FPGA (Field-Programmable Gate Array) that is programmed after the manufacture of the LSI, or a logic device capable of reconfiguring the bonding relationship inside the LSI or reconfiguring the circuit section inside the LSI, it can also be adopted as a processor. The plurality of electronic circuits may be integrated on one chip, or may be provided dispersedly on a plurality of chips. The plurality of chips may be integrated in one device, or may be provided dispersedly in a plurality of devices. The computer system mentioned here includes a microcontroller having one or more processors and one or more memories. Therefore, the microcontroller is also composed of one or more electronic circuits including a semiconductor integrated circuit or a large-scale integrated circuit.

[0108] Moreover, it is not an essential configuration for the display system 6 and the authentication system 7 that a plurality of functions in each of the display system 6 and the authentication system 7 are aggregated in one housing. Each component of the display system 6 and the authentication system 7 may be provided in a distributed manner in a plurality of housings. Conversely, a plurality of functions in each of the display system 6 and the authentication system 7 may be aggregated in one housing. Further, at least some of the functions of each of the display system 6 and the authentication system 7, for example, some of the functions of each of the display system 6 and the authentication system 7 may be realized by a cloud (cloud computing) or the like.

[0109] In the basic example, the first to third steps of the authentication method are executed by the ID management server 8. However, the first to third steps of the authentication method may be executed by another server 2 excluding the ID management server 8, or may be executed by the monitoring device 5 (management terminal). When the first to third steps of the authentication method are executed by another server 2 or the monitoring device 5, a dedicated authentication server (ID management server 8) becomes unnecessary, and for example, installation costs and the like can be reduced. In particular, the functions of the ID management server 8 may be provided in each of the first server 21 and the second server 22, for example. Even in this case, if the monitor successfully logs in to the first server 21, the monitor can also automatically log in to the second server 22. Similarly, if the monitor successfully logs in to the second server 22, the monitor can also automatically log in to the first server 21. Even if the number of servers 2 increases (such as a third server and a fourth server, etc.), by providing the functions of the ID management server 8 in each of these plurality of servers 2, no matter which server 2 the login starts from, it is also possible to automatically log in to other servers 2.

[0110] In the basic example, the first target of the first server 21 is a plurality of controllers 3 (facilities) and areas 4 of the first facility F11, and the second target of the second server 22 is a plurality of controllers 3 (facilities) and areas 4 of the second facility F12. However, the first target may be the controller 3 of the first facility F11, and the second target may be the area 4 of the same first facility F11.

[0111] In the basic example, the authentication window W1, the main window W2, and the sub-window W3 are in a window display format including a menu bar at the upper end. However, the authentication window W1, the main window W2, and the sub-window W3 may be merely screens (image areas). The authentication window W1 can be replaced with an authentication screen. The main window W2 can be replaced with a main screen. The sub-window W3 can be replaced with a sub-screen.

[0112] In the basic example, starting from the first server 21, authentication for the first access is performed first, but starting from the second server 22, authentication for the second access may be performed first. For example, the server 2 to be accessed first may be specified (e.g., with URL information) from the menu bar of the authentication window W1.

[0113] The monitoring device 5 may be, for example, a tablet-type portable terminal. The display unit 61 may be a touch panel type display. For example, screen transitions of a plurality of sub-windows W3 may be possible by touch operations on the operation area B1.

[0114] (4) Summary As described above, the authentication method according to the first aspect is an authentication method for a plurality of servers (2) of an integrated system (1) that performs at least one of monitoring, management, and control within one or more facilities (F1). The plurality of servers (2) includes at least a first server (21) and a second server (22). The authentication method includes a first step, a second step, and a third step. In the first step, authentication for a first access to the first server (21) is received. In the second step, when the authentication for the first access is successful, the first access is enabled. In the third step, when the authentication for the first access is successful, an authentication process for a second access to the second server (22) is further executed to enable the second access. According to the first aspect, an authentication method can be provided that can improve operations such as management or monitoring while suppressing a decrease in security related to data management.

[0115] Regarding the authentication method according to the second aspect, in the first aspect, the first server (21) performs at least one of monitoring, managing, and controlling the first target. The second server (22) performs at least one of monitoring, managing, and controlling a second target different from the first target. The first target is at least one of the equipment (controller 3) and the area (4) in one or more facilities (F1). According to the second aspect, it is possible to improve operations such as management or monitoring while suppressing a decrease in security regarding data management for the first server (21) and the second server (22) with different targets from each other.

[0116] Regarding the authentication method according to the third aspect, in the first aspect or the second aspect, the first step, the second step, and the third step are executed by a management terminal (for example, the monitoring device 5) in the integrated system (1). The management terminal (for example, the monitoring device 5) is communicably connected to the first server (21) and the second server (22). According to the third aspect, a dedicated authentication server is not required, and for example, installation costs and the like can be reduced.

[0117] Regarding the authentication method according to the fourth aspect, in the first aspect or the second aspect, the first step, the second step, and the third step are executed by any one of the plurality of servers (2) (for example, the ID management server 8). According to the fourth aspect, for example, compared to the case where it is executed by a management terminal (for example, the monitoring device 5), it is possible to simplify the configuration of the management terminal.

[0118] The display method according to the fifth aspect is a display method of a display system (6) having a display unit (61) that displays information about a plurality of servers (2) of an integrated system (1) that performs at least one of monitoring, management, and control in one or more facilities (F1). The plurality of servers (2) includes at least a first server (21) and a second server (22). The display method includes a first step and a second step. In the first step, a first window (authentication window W1) for receiving authentication for a first access to the first server (21) is displayed on the display unit (61). In the second step, when the authentication for the first access is successful, a second window (main window W2) is displayed on the display unit (61). The second window (main window W2) relates to first information acquired from the first server (21) and second information acquired from the second server (22) by a second access to the second server (22) executed upon successful authentication. According to the fifth aspect, it is possible to provide a display method capable of improving operations such as management or monitoring while suppressing a decrease in security regarding data management.

[0119] Regarding the display method according to the sixth aspect, in the fifth aspect, the second window (main window W2) includes notification information based on the first information and the second information for notifying the user who has successfully authenticated. According to the sixth aspect, since the notification information can be known through the second window (main window W2), operations such as management or monitoring are further improved.

[0120] Regarding the display method according to the seventh aspect, in the sixth aspect, the notification information includes information capable of identifying the first server (21) or the second server (22). According to the seventh aspect, since it is possible to know which server (2) the notification information relates to through the second window (main window W2), operations such as management or monitoring are further improved.

[0121] Regarding the display method according to the eighth aspect, in any one of the fifth to seventh aspects, the second window (main window W2) includes state information indicating the access state to the first server (21) and the second server (22). According to the eighth aspect, since the access state of the server (2) can be known through the second window (main window W2), operations such as management or monitoring are further improved.

[0122] The display method according to the ninth aspect is a display method of a display system (6) having a display unit (61) for screen-displaying information regarding a plurality of servers (2) of an integrated system (1) that performs at least one of monitoring, management, and control within one or more facilities (F1). The plurality of servers (2) includes at least a first server (21) and a second server (22). The display method includes an authentication display step, a main display step, and a sub-display step. In the authentication display step, an authentication window (W1) for receiving authentication for a first access to the first server (21) is displayed on the display unit (61). In the main display step, when the authentication for the first access is successful, a main window (W2) regarding the first information acquired from the first server (21) is displayed on the display unit (61). In the sub-display step, in response to a selection operation on the main window (W2), a sub-window (W3) regarding the second information acquired from the second server (22) by a second access to the second server (22) is displayed on the display unit (61). According to the ninth aspect, it is possible to provide a display method capable of improving operations such as management or monitoring while suppressing a decrease in security regarding data management.

[0123] Regarding the display method according to the tenth aspect, in the ninth aspect, the main window (W2) includes information capable of identifying the first server (21) or the second server (22). According to the tenth aspect, since the server (2) can be identified through the main window (W2), operations such as management or monitoring are further improved.

[0124] Regarding the display method according to the 11th aspect, in the 9th or 10th aspect, the main window (W2) includes status information indicating the access status to the first server (21) and the second server (22). According to the 11th aspect, since the access status of the server (2) can be known through the main window (W2), operations such as management or monitoring are further improved.

[0125] Regarding the display method according to the 12th aspect, in any one of the 9th to 11th aspects, the main window (W2) includes an operation area (B1). In the sub-display step, in response to a selection operation on the operation area (B1), a screen transition regarding a plurality of sub-windows (W3) including the sub-window (W3) is executed. According to the 12th aspect, since the screen transition is executed in response to the selection operation on the operation area (B1), operations such as management or monitoring are further improved.

[0126] Regarding the display method according to the 13th aspect, in any one of the 9th to 12th aspects, the first information includes at least first event information regarding an event occurring in the first area (41) under the jurisdiction of the first server (21). The second information includes at least second event information regarding an event occurring in the second area (42) under the jurisdiction of the second server (22). The main window (W2) includes a display area (B2) for displaying both the first event information and the second event information. According to the 13th aspect, since both the first event information and the second event information can be known through the display area (B2), operations such as management or monitoring are further improved.

[0127] Regarding the display method according to the 14th aspect, in any one of the 9th to 13th aspects, the first information includes at least first map information regarding a first area (41) under the jurisdiction of the first server (21). The second information includes at least second map information regarding a second area (42) under the jurisdiction of the second server (22). The main window (W2) includes an operation area (B1) for switching between the first map information and the second map information. The sub-display step includes a switching step of switching between a first sub-window (W31) showing the first map information and a second sub-window (W32) showing the second map information as the sub-window (W3) in response to a selection operation on the operation area (B1). According to the 14th aspect, since the switching between the first sub-window (W31) and the second sub-window (W32) can be easily performed, operations such as management or monitoring are further improved.

[0128] The program according to the 15th aspect is a program for causing one or more processors to execute the authentication method in any one of the 1st to 4th aspects or the display method in any one of the 5th to 14th aspects. According to the 15th aspect, it is possible to provide a function capable of improving operations such as management or monitoring while suppressing a decrease in security regarding data management.

[0129] The authentication system (7) according to the 16th aspect performs authentication regarding a plurality of servers (2) of an integrated system (1) that performs at least one of monitoring, management, and control within one or more facilities (F1). The plurality of servers (2) includes at least a first server (21) and a second server (22). The authentication system (7) includes a reception unit (71) and an authentication processing unit (72). The reception unit (71) receives authentication for a first access to the first server (21). The authentication processing unit (72) executes an authentication process regarding the success or failure of the authentication for the first access, and enables the first access when the authentication for the first access is successful. When the authentication for the first access is successful, the authentication processing unit (72) further executes an authentication process regarding a second access to the second server (22) to enable the second access. According to the 16th aspect, it is possible to provide an authentication system (7) capable of improving operations such as management or monitoring while suppressing a decrease in security regarding data management.

[0130] The display system (6) according to the 17th aspect includes a display unit (61) that displays information regarding a plurality of servers (2) of an integrated system (1) that performs at least one of monitoring, management, and control within one or more facilities (F1) on a screen. The plurality of servers (2) includes at least a first server (21) and a second server (22). The display system (6) further includes an image processing unit (60) that causes the display unit (61) to display a first window (authentication window W1) for receiving authentication for a first access to the first server (21). When the authentication for the first access is successful, the image processing unit (60) causes the display unit (61) to display a second window (main window W2). The second window (main window W2) relates to first information acquired from the first server (21) and second information acquired from the second server (22) by a second access to the second server (22) executed upon successful authentication. According to the 17th aspect, it is possible to provide a display system (6) capable of improving operations such as management or monitoring while suppressing a decrease in security regarding data management.

[0131] The display system (6) according to the 18th aspect includes a display unit (61) that displays information regarding a plurality of servers (2) of an integrated system (1) that performs at least one of monitoring, management, and control within one or more facilities (F1). The plurality of servers (2) includes at least a first server (21) and a second server (22). The display system (6) further includes an image processing unit (60) that causes the display unit (61) to display an authentication window (W1) for receiving authentication for a first access to the first server (21). When the authentication for the first access is successful, the image processing unit (60) causes the display unit (61) to display a main window (W2) regarding first information acquired from the first server (21). Further, in response to a selection operation on the main window (W2), the image processing unit (60) causes the display unit (61) to display a sub-window (W3) regarding second information acquired from the second server (22) by a second access to the second server (22). According to the 18th aspect, it is possible to provide a display system (6) capable of improving operations such as management or monitoring while suppressing a decrease in security regarding data management.

[0132] Regarding the configurations according to the second to fourth aspects, they are not essential configurations for the authentication method according to the first aspect and can be appropriately omitted. Also, regarding the configurations according to the sixth to eighth aspects, they are not essential configurations for the display method according to the fifth aspect and can be appropriately omitted. Further, regarding the configurations according to the tenth to fourteenth aspects, they are not essential configurations for the display method according to the ninth aspect and can be appropriately omitted.

Explanation of Reference Numerals

[0133] 1 Integrated system 2 Server 21 First server 22 Second server 3 Controller (facility) 4 Area 41 First area 42 Second area 5 Monitoring device (management terminal) 6 Display system 60 Image processing unit 61 Display unit 7 Authentication system 71 Reception unit 72 Authentication processing unit 8 ID management server (server) B1 Operation area B2 Display area F1 Facility W1 Authentication window (first window) W2 Main window (second window) W3 Sub-window W31 First sub-window W32 Second sub-window

Claims

1. A display method of a display system separate from the plurality of servers, which has a display unit for displaying information regarding the plurality of servers of an entrance / exit management system that manages entrance and exit in one or more facilities, wherein the plurality of servers includes at least a first server and a second server, an authentication display step of displaying an authentication window for receiving authentication for a first access to the first server on the display unit; a main display step of displaying a main window regarding first information acquired from the first server on the display unit when the authentication for the first access is successful; a sub-display step of displaying a sub-window regarding second information acquired from the second server by the second access on the display unit according to a selection operation on the main window when the authentication for a second access to the second server, which is executed when the authentication for the first access is successful, is successful; comprising: A display method.

2. The main window includes information capable of specifying the first server or the second server, The display method according to claim 1.

3. The main window includes status information indicating the access status to the first server and the second server, The display method according to claim 1 or claim 2.

4. The main window includes an operation area, In the sub-display step, screen transition regarding a plurality of sub-windows including the sub-window is executed according to a selection operation on the operation area. The display method according to any one of claims 1 to 3.

5. The first information includes at least first event information regarding an event occurring in a first area under the jurisdiction of the first server, The second information includes at least second event information regarding an event occurring in a second area under the jurisdiction of the second server, The main window includes a display area for displaying both the first event information and the second event information. The display method according to any one of claims 1 to 4.

6. The first information includes at least first map information regarding a first area under the jurisdiction of the first server, The second information includes at least second map information regarding a second area under the jurisdiction of the second server, The main window includes an operation area for switching between the first map information and the second map information. The sub-display step includes a switching step of switching between a first sub-window showing the first map information and a second sub-window showing the second map information as the sub-window, in response to a selection operation on the operation area. The display method according to any one of claims 1 to 5.

7. A program for causing one or more processors to execute the display method according to any one of claims 1 to 6.

8. A display system including a display unit for screen-displaying information regarding a plurality of servers of an entrance / exit management system that manages entrance and exit in one or more facilities, the display system being separate from the plurality of servers, and the plurality of servers including at least a first server and a second server. The display system further includes an image processing unit for causing the display unit to display an authentication window for receiving authentication for a first access to the first server. The image processing unit is configured to: When authentication for the first access is successful, cause the display unit to display a main window regarding first information acquired from the first server. When authentication for a second access to the second server, which is executed when authentication for the first access is successful, is successful, cause the display unit to display a sub-window regarding second information acquired from the second server by the second access, in response to a selection operation on the main window. Display system.

Images