Access control system

Abstract

To provide an access management system capable of notifying of more appropriate information regarding one or more persons who stayed in the same compartment simultaneously with at least one infected person.SOLUTION: An access management system 1 comprises: a storage unit 12 for storing, for each of a plurality of compartments, history information in which one or more users having stayed in each compartment and time points when the respective users entered or exited each compartment are associated, and risk levels that indicates levels of infection risk of being infected with an infectious disease in each compartment; registration means 133 for registering at least one designated user from among a plurality of users; generation means 135 for identifying on the basis of the history information one or more users having stayed in the same compartment simultaneously with the registered designated person and generating a list that includes the identified users and the risk level corresponding to the compartment in which the identified users stayed simultaneously with the registered designated user; and output means for outputting the list.SELECTED DRAWING: Figure 5

Description

[Technical Field]

[0001] The present invention relates to an access control system. [Background technology]

[0002] Conventionally, systems have been developed to identify people who may have come into contact with people infected with infectious diseases.

[0003] For example, Patent Document 1 discloses a system used in hospitals that, when the name of a patient infected with an infectious disease during hospitalization or after discharge is input, creates a list of other patients who may have come into contact with that patient. When the name of the infected patient is input, this system searches a database that stores the rooms in which each patient stayed while hospitalized and the length of their stay, and creates a list of other patients who stayed in the same room or ward as the infected patient during the same period.

[0004] Patent Document 2 discloses an entrance / exit management system that identifies facility users who may have been in contact with an infected person by sharing the same activities as the infected person as suspected infection users. This system operates to prohibit infected and suspected infection users from entering a specific room until the symptom-related period has passed. [Prior art documents] [Patent documents]

[0005] [Patent Document 1] Japanese Patent Application Laid-Open No. 2005-25457 [Patent Document 2] Japanese Patent Application Publication No. 2019-200503 Summary of the Invention [Problem to be solved by the invention]

[0006] It is required that information be provided to those who were in the same area at the same time as the infected person, which will allow for a better assessment of the possibility of infection.

[0007] An object of the present invention is to provide an access control system that can notify more appropriate information about people who have been staying in the same area at the same time as a person suffering from an infectious disease. [Means for solving the problem]

[0008] According to one aspect of the present invention for solving such problems, there is provided an access control system for managing the entry and exit of multiple users in multiple areas, comprising: a storage means for storing, for each area, historical information relating the users who stayed in each area to the times when the users entered or exited each area, and a risk level indicating the level of risk of infection with an infectious disease in each area; a registration means for registering designated users from among the multiple users; a generation means for identifying users who stayed in the same area at the same time as the registered designated user based on the historical information, and generating a list including the identified users and the risk levels corresponding to the areas where the users stayed at the same time as the registered designated user; and an output means for outputting the list.

[0009] In this access control system, it is preferable that the risk levels of multiple compartments be determined based on at least one of the layout of each compartment, the number of people that each compartment can accommodate, the purpose of each compartment, the air conditioning equipment in each compartment, or infection control indicators in each compartment.

[0010] Preferably, the access control system further comprises a determination means for changing the risk level depending on the usage status of the index.

[0011] In this access control system, it is preferable that the generation means include in the list users whose stay time in the same area as the designated user is greater than or equal to a threshold value, and that the threshold value be varied depending on the risk level of each area.

[0012] In this access control system, it is preferable that the generation means include a user in the list if the user is present in two or more areas simultaneously with a designated user and the total time spent by the user in the two or more areas simultaneously with the designated user is equal to or greater than a threshold value.

[0013] In this access control system, it is preferable that the generation means generates the list so as to distinguish between users who have been present simultaneously with the designated user in two or more consecutive areas from users who have been present simultaneously with the designated user in only one area. [Effects of the Invention]

[0014] The access control system according to the present invention can more appropriately notify information about people who have been staying in the same area at the same time as a person suffering from an infectious disease. [Brief explanation of the drawings]

[0015] [Figure 1] 1 is a diagram showing a schematic configuration of an access control system 1 according to an embodiment of the present invention. [Figure 2] 1A is an example of the data structure of the history table 122, and FIG. 1B is an example of the data structure of the infection risk table 123. [Figure 3] 1 is an example of a floor plan of an office including multiple bays. [Figure 4] 10 is a flowchart showing an example of an entrance / exit management process performed by the management device 10. [Figure 5] 10 is a flowchart showing an example of a notification process performed by the management device 10. [Figure 6] 10 is a flowchart showing an example of a list generation process performed by the management device 10. [Figure 7] This is an example of a list of infection candidates. [Figure 8] 10 is a flowchart showing an example of a suspected infection extraction process performed by the management device 10. [Figure 9] This is an example of information about suspected infections. DETAILED DESCRIPTION OF THE INVENTION

[0016] An access control system according to an embodiment of the present invention will be described below with reference to the drawings. However, it should be understood that the present invention is not limited to the drawings or the embodiments described below.

[0017] FIG. 1 is a diagram illustrating a schematic configuration of an access control system 1 according to an embodiment of the present invention. As illustrated in FIG. 1, the access control system 1 includes a management device 10, operation terminals 20a, 20b, 20c, etc., and an administrator terminal 30. The management device 10 is an information processing device that manages access to an access control area, such as an office, store, or factory, which is divided into multiple sections, and is communicatively connected to the operation terminal 20 and the administrator terminal 30. The operation terminals 20a, 20b, 20c, etc. are terminals through which users request entry to or exit from each section, and are communicatively connected to the management device 10. Hereinafter, the operation terminals 20a, 20b, 20c, etc. may be collectively referred to as operation terminals 20. The number of operation terminals 20 per section is not limited to one and may be multiple. The administrator terminal 30 is a terminal used by an administrator who manages each section, and is communicatively connected to the management device 10 via a communication network 40, such as the Internet.

[0018] The management device 10 includes a communication unit 11, a storage unit 12, a control unit 13, and an interface unit 14.

[0019] The communication unit 11 has a communication interface circuit conforming to wired / wireless communication standards such as Ethernet (registered trademark) and IEEE802.11, and is connected to the administrator terminal 30 via the communication network 40 to transmit and receive various information.

[0020] The storage unit 12 includes a semiconductor memory, a magnetic storage medium, and / or an optical storage medium, etc. The storage unit 12 stores various data and computer program codes executed by the control unit 13 to control the operation of the management device 10. The computer program can be installed in the storage unit 12 by a known method via a computer-readable storage medium such as a DVD-ROM or a communication line. The storage unit 12 is an example of a storage means. The storage unit 12 stores user information 121, a history table 122, and an infection risk table 123. As the user information 121, a user ID for identifying a user who can use a section is stored for each section ID for identifying that section. Details of the history table 122 and the infection risk table 123 will be described later.

[0021] The control unit 13 has a processor such as a CPU or a multiprocessor and its peripheral circuits, and the processor controls the operation of the management device 10 by executing a computer program stored in the storage unit 12. The control unit 13 may be a DSP, an LSI, an ASIC, an FPGA, or the like. The control unit 13 has, as functional modules of a program that runs on the processor, an acquisition means 131, an authentication means 132, a registration means 133, a determination means 134, a generation means 135, an extraction means 136, and a notification means 137. The notification means 137 is an example of the output means of the present invention.

[0022] The interface unit 14 has an interface circuit conforming to a serial bus standard such as USB, and transmits and receives various signals by communicating with the operation terminal 20. Note that the interface unit 14 may have an interface circuit conforming to a wired / wireless communication standard such as Ethernet (registered trademark), IEEE802.11, Bluetooth (registered trademark), etc., instead of an interface circuit conforming to a serial bus standard.

[0023] The operation terminal 20 has an input unit (not shown) such as a card reader, camera, microphone, touch panel, etc., for inputting authentication information such as a user ID, an authentication code, and biometric information such as fingerprint, face, and voice. The input unit reads authentication information such as a user ID stored on an IC (Integrated Circuit) card held by the user. The operation terminal 20 generates an entry / exit request signal including an entry request or exit request, a zone ID that identifies the zone to be entered or exited, and the read authentication information, and notifies the management device 10 of the signal. The operation terminal 20 also has an entrance / exit control unit (not shown) or a door opening / closing unit (not shown). The entrance / exit control unit is an electric lock or the like that is installed on an entrance / exit door to control entry into or exit from a section, and is unlocked / locked in accordance with a command signal transmitted from the management device 10. The door opening / closing unit is an automatic opening / closing device or the like that opens and closes the entrance / exit door of the section in accordance with a command signal transmitted from the management device 10. Note that the operation terminal 20 does not necessarily have to have an entrance / exit control unit or a door opening / closing unit.

[0024] FIG. 2(A) is an example of the data structure of the history table 122. The history table 122 stores a zone ID, a user ID, a time period during which the user stayed, and other information associated with each other. The zone ID indicates the zone where the user's entry and exit were detected. The user ID indicates the user who stayed in that zone. The time period during which the user stayed in that zone indicates the time period during which the user stayed in that zone, and includes the time of entry into the zone and the time of exit from the zone. Hereinafter, a set of zone ID, user ID, time of stay, and other information may be referred to as a record. Each record is stored in the history table 122 in order of earliest entry time. The history table 122 is created on a daily basis, but may also be created so that the entry time and exit time include the date and store information for multiple days in one history table 122. The history table 122 is an example of history information.

[0025] FIG. 2(B) is an example of the data structure of the infection risk table 123. The infection risk table 123 stores, in association with one another, zone IDs, risk levels, risk indices, etc. The risk level indicates the level of risk of infection with an infectious disease in the zone corresponding to the zone ID, and is determined based on the risk indices. The risk indices include indices related to the zone layout, the zone's capacity, the zone's size, the air conditioning equipment within the zone, the zone's use, infection control measures in the zone, etc. Note that the risk indices are not limited to those described above, and the risk level may also be determined from some of the risk indices.

[0026] In the infection risk table 123, a predetermined item value is set for each risk index, and a risk level corresponding to the item value is determined for each risk index. The risk level is expressed in three levels: 0, 1, and 2, and the higher the value, the higher the risk, i.e., the more susceptible to infection with an infectious disease. The layout risk index indicates the degree of seating density within a section, and the item value of "crowded" or "dispersed" is set as the layout risk index. If seats are arranged so that users are crowded together, there is a high possibility that users will become infected by an infectious disease patient (hereinafter simply referred to as "infected person"), so in the layout risk index, the risk level of "crowded" is set to 2, and the risk level of "dispersed" is set to 0. The risk index for capacity indicates the number of people that can be accommodated in a section, and an item value of "large," "medium," or "small" is set as the risk index for capacity. The more people that can be accommodated in a section, the lower the possibility of users being infected by an infected person within the section, so in the risk index for capacity, the risk level for "small" is set to 2, the risk level for "medium" is set to 1, and the risk level for "large" is set to 0. Note that, since it is expected that the risk of infection differs even if the capacity is about the same when the size of the section is different (for example, a section with a "narrow" size and a "large" capacity has a higher risk than a section with a "large" size and a "large" capacity), the capacity per unit area may also be used as the risk index for capacity. The risk index for size indicates the floor area of ​​the section, and an item value of "narrow," "medium," or "large" is set as the risk index for size. The smaller the section, the closer the distance between users and infected people within the section, and the higher the possibility of infection from infected people. Therefore, in the risk index for size, the risk level for "narrow" is set to 2, the risk level for "medium" is set to 1, and the risk level for "large" is set to 0. The risk index for air conditioning equipment indicates whether or not there is air conditioning equipment in the area, and an item value of "no" or "yes" is set as the risk index for air conditioning equipment. Without air conditioning equipment, the area will not be sufficiently ventilated, increasing the risk of infection, so in the risk index for air conditioning equipment, the risk level for "no" is set to 2, and the risk level for "yes" is set to 0. The risk index for use indicates the role of the area, and the item value of "cafeteria," "conference room," or "office" is set as the risk index for use. In the case of infectious diseases transmitted by droplets, the risk of infection increases in the following order: not wearing a mask, wearing a mask and speaking a lot, and wearing a mask and speaking little. For this reason, in the risk index for use, the risk level for "cafeteria" is set to 2, the risk level for "conference room" is set to 1, and the risk level for "office" is set to 0. The risk index for infection control measures indicates the status of infection control measures, such as whether partitions, disinfectants, etc. are placed within the area, and an item value of "no" or "yes" is set as the risk index for infection control measures. Areas without infection control measures have a higher risk of contracting an infectious disease than areas with infection control measures. For this reason, the risk index for infection control measures is set at 2 for "no" and 0 for "yes."

[0027] The determination means 134 determines the risk level of the section corresponding to the section ID based on the risk index corresponding to that section ID, and sets it as the risk level corresponding to that section ID in the infection risk table 123. The determination means 134 determines the risk level of the section corresponding to each risk index based on the number of risk indexes corresponding to a risk level above or below a predetermined level. For example, if the risk indices corresponding to a section include a predetermined number (e.g., three) or more risk indices corresponding to the highest risk level of 2, the determination means 134 determines that the risk level corresponding to that section is "high." If the risk indices corresponding to a section include a predetermined number or more risk indices corresponding to the lowest risk level of 0, the determination means 134 determines that the risk level corresponding to that section is "low." If neither of the above two cases applies, the determination means 134 determines that the risk level corresponding to that section is "medium." Alternatively, the determination means 134 may assign scores to each risk index corresponding to a section in order of risk level, calculate the sum of the scores of each risk index, and determine the risk level corresponding to the section according to the sum of the scores. For example, the determination means 134 assigns a score to each risk index corresponding to a section such that 2 points are assigned for risk level 2, 1 point are assigned for risk level 1, and 0 points are assigned for risk level 0. The determination means 134 determines the risk level corresponding to the section as "high" if the sum of the scores is 6 points or more, "medium" if it is 3 to 5 points, and "low" if it is 2 points or less. The determination means 134 may also determine the risk level of the section corresponding to each risk index based on statistical values ​​such as the average value, weighted average value, median value, maximum value, and minimum value of the risk level of each risk index. Furthermore, instead of the determination means 134 determining the risk level corresponding to each section and storing it in the memory unit 12, the risk level corresponding to each section may be determined in advance by an administrator or the like, taking into consideration the infection risk in each section based on the above-mentioned index, and stored in the infection risk table 123. In this case, each risk index does not need to be registered in the infection risk table 123.

[0028] Fig. 3 is an example of a floor plan of an office including multiple sections. As shown in Fig. 3, floor 501 of office 500 is divided into sections such as office 511, cafeteria 512, small conference room 513, and large conference room 514. A first door 521, a second door 522, a third door 523, and a fourth door 524 are provided at the entrances and exits of office 511, cafeteria 512, small conference room 513, and large conference room 514, respectively. First door 521, second door 522, third door 523, and fourth door 524 are unlocked / locked by an entry / exit restriction unit of operation terminal 20, or opened / closed by a door opening / closing unit. Operation terminals 20a and 20b are located near the first door 521, operation terminals 20c and 20d are located near the second door 522, operation terminals 20e and 20f are located near the third door 523, and operation terminals 20g and 20h are located near the fourth door 524. Seats A, B, C, and D for users A, B, C, and D are located in the office room 511. Each section may be located on a different floor.

[0029] 4 is a flowchart showing an example of an entrance / exit management process by the management device 10. This operation flow is executed mainly by the control unit 13 of the management device 10 in cooperation with each element of the management device 10, based on a program stored in advance in the storage unit 12 of the management device 10.

[0030] First, the acquisition means 131 determines whether or not the user has performed an entry / exit operation for any zone (step S11). When the acquisition means 131 acquires an entry / exit request signal notified from the operation terminal 20 via the interface unit 14, it determines that the user has performed an entry / exit operation for the zone corresponding to that operation terminal 20. If the user has not performed an entry / exit operation to the section (step S11-N), the acquisition means 131 waits. When the user performs an entry / exit operation to enter or exit the zone (step S11-Y), the acquisition means 131 identifies the entry request or exit request, the zone ID, and the user ID from the acquired entry / exit request signal (step S12).

[0031] Next, the authentication means 132 determines whether or not to permit entry or exit based on the identified zone ID and user ID (step S13). If the identified user ID is stored in the user information 121 in correspondence with the identified zone ID, the authentication means 132 permits entry or exit, and if the identified user ID is not stored in correspondence with the identified zone ID, the authentication means 132 does not permit entry or exit. If entry or exit is not permitted (step S13-N), the authentication means 132 outputs a refusal signal indicating that entry or exit is denied to the operation terminal 20 via the interface unit 14 to notify that entry or exit has been denied, and returns the process to step S11. If entry or exit is permitted (step S13-Y), the authentication means 132 outputs a command signal to the operation terminal 20 via the interface unit 14 to unlock or open the door to the target section (step S14).

[0032] Next, the registration means 133 updates the history table 122 (step S15). If entry is permitted in the processing of step S13, the registration means 133 generates data that associates the zone ID and user ID acquired in the processing of step S12 with the time when the command signal was output in the processing of step S14 and the unset exit time. The registration means 133 adds the generated data as a record in the history table 122. The zone ID, user ID, time when the command signal was output, and exit time of the generated data correspond to the zone ID, user ID, entry time, and exit time of the record in the history table 122, respectively. If exit is permitted in the processing of step S13, the registration means 133 identifies a record in the history table 122 in which the section ID and user ID acquired in the processing of step S12 and the entry time are set but no exit time is set. The registration means 133 sets the time when the command signal was output in the processing of step S14 as the exit time of the identified record. Next, the registration means 133 returns the process to step S11. This completes the explanation of the series of processes.

[0033] FIG. 5 is a flowchart illustrating an example of a notification process performed by the management device 10. This operational flow is executed primarily by the control unit 13 of the management device 10 in cooperation with each element of the management device 10, based on a program previously stored in the storage unit 12 of the management device 10. This operational flow is initiated when the registration means 133 of the management device 10 receives a user ID corresponding to a designated user. The operation flow then identifies users who were in the same area as the designated user at the same time, extracts suspected infections from these users, and generates a list. The term "designated user" refers to a user designated by an administrator and includes not only individuals diagnosed with an infectious disease but also individuals with a high probability of infection, although for convenience, they may be simply referred to as "infected individuals" below. Once a designated user is registered and selected by the administrator, a list may be automatically generated. Even without the administrator's designation, a designated user may be registered and infection suspects automatically extracted when information about the designated user is received from an external source. The following describes an example in which an infected individual is registered as a designated user.

[0034] First, the registration means 133 accepts the registration of an infected person (step S21). The registration means 133 accepts the registration of an infected person by receiving a user ID corresponding to the infected person from the administrator terminal 30 or a user terminal (not shown) via the communication unit 11.

[0035] Next, the registration means 133 determines whether the infected person stayed in any of the multiple sections within a predetermined period of time (step S22). If the received user ID matches any of the user IDs stored in the history table 122, the registration means 133 determines that the infected person stayed in any of the sections, and if it does not match any of the sections, the registration means 133 determines that the infected person did not stay in any of the sections. The registration means 133 determines whether the infected person stayed in any of the multiple sections within the predetermined period of time by targeting records in the history table 122 whose entry time or exit time is within a predetermined period of time (for example, the last five days). If the infected person was not staying in any of the sections (step S22-N), the notification means 137 notifies the administrator terminal 30 via the communication unit 11 that the infected person was not staying in any of the sections (step S28), and the series of processes is terminated. If the infected person has stayed in any of the sections (step S22-Y), the registration means 133 registers the infected person in the storage unit 12 (step S23). The registration means 133 stores the user ID of the infected person whose registration was accepted in the processing of step S21 in the storage unit 12 as the infected person ID.

[0036] Next, the registration means 133 identifies the zone where the infected person stayed and the time period during which they stayed in that zone (step S24). The registration means 133 refers to the records for the above-mentioned period in the history table 122 to identify the zone ID of the zone where the user corresponding to the infected person ID (i.e., the infected person) stayed and the time period during which the infected person stayed in that zone. Hereinafter, the zone where the infected person stayed may be referred to as the zone where the infected person stayed, the zone ID corresponding to the zone where the infected person stayed zone ID, and the time period during which the infected person stayed in the zone where the infected person stayed may be referred to as the zone where the infected person stayed. The time period during which the infected person stayed includes the time of entry into the zone and the time of exit from the zone. The registration means 133 generates infected person stay information including all identified pairs of zone IDs where the infected person stayed and the time period during which the infected person stayed, and stores this in the memory unit 12.

[0037] Next, the generating means 135 executes a list generating process to generate an infection candidate list including users who stayed in the same section as the infected person at the same time and the risk levels corresponding to the sections where the users stayed at the same time as the infected person (step S25). Hereinafter, users who stayed in the same section as the infected person at the same time may be referred to as infection candidates. Details of the list generating process will be described later.

[0038] Next, the extraction means 136 executes a suspected infection extraction process to extract users suspected of having been infected by an infected person from among the infection candidates, and generates information about the extracted users (step S26). Hereinafter, an infection candidate suspected of having been infected by an infected person may be referred to as an infection suspect. Details of the suspected infection extraction process will be described later.

[0039] Next, the notification means 137 transmits the infection candidate list generated in the list generation process and / or information on the suspected infection individuals generated in the suspected infection individual extraction process to the administrator terminal 30 via the communication unit 11, and outputs it to a predetermined notification destination (step S27). Note that the predetermined notification destination may be the management device 10, in which case the information is output to a display unit such as a monitor of the management device 10. In this way, the notification means 137 (output means) outputs information on the suspected infection individuals. This concludes the explanation of the series of processes.

[0040] 6 is a flowchart showing an example of the list generation process by the management device 10. The list generation process is executed in step S25 of the notification process. First, for each pair of infected person's stay zone ID and infected person's stay time zone included in the infected person stay information, the generation means 135 identifies the users who stayed in the same zone at the same time as the infected person, and the time period during which the users stayed in the same zone at the same time as the infected person (step S31). Hereinafter, the time period during which a user stayed in the same zone at the same time as the infected person may be referred to as the simultaneous stay time zone. The simultaneous stay time zone includes a start time and an end time. In addition, the time from the start time to the end time of the simultaneous stay time zone may be referred to as the simultaneous stay time. The generation means 135 extracts all records in the history table 122 in which the zone ID is the same as the infected person's staying zone ID, the user ID is different from the infected person's ID, and at least a portion of the time period from the entry time to the exit time overlaps with the infected person's staying time period corresponding to the infected person's staying zone ID. For each extracted record, the generation means 135 specifies a time period in which the later of the entry time of the extracted record and the entry time of the infected person's stay time period is set as the start time, and the earlier of the exit time of the identified record and the exit time of the infected person's stay time period is set as the end time. The generation means 135 specifies the specified time period as a simultaneous stay time period of users corresponding to the user IDs of the identified record, and specifies the time from the start time to the end time of the specified simultaneous stay time period as the simultaneous stay time of users corresponding to the user IDs. The generating means 135 generates a set of data in which the section ID and user ID of the identified record, the simultaneous stay time period, and the simultaneous stay time are associated with each other as a simultaneous stay time period data group, and stores the data in the storage unit 12.

[0041] Next, the generating means 135 executes the processes of steps S32 to S35 for each user whose user ID is included in the simultaneous presence time period data group. First, the generating means 135 determines whether a user whose user ID is included in the simultaneous presence time period data group has been in two or more consecutive compartments at the same time as an infected person (step S32). The generating means 135 determines whether a data set exists in the simultaneous presence time period data group, the data set including the user ID corresponding to the target user, and in which the difference between the end time of the simultaneous presence time period of one data and the start time of the simultaneous presence time period of the other data is within a predetermined range. The predetermined range is, for example, five minutes. If this data set exists, the generating means 135 determines that the target user has been in two or more consecutive compartments at the same time as an infected person; if this data set does not exist, the generating means 135 determines that the target user has not been in two or more consecutive compartments at the same time as an infected person.

[0042] Next, the generating unit 135 calculates the total simultaneous stay time for the target user (step S33). The generating unit 135 calculates the total simultaneous stay time associated with the user ID corresponding to the target user in the simultaneous stay time period data group. Next, the generating means 135 determines whether the total simultaneous stay time is equal to or greater than a predetermined threshold (e.g., 15 minutes) (step S34). If the total simultaneous stay time is equal to or greater than the threshold (step S34-Y), the generating means 135 identifies the user as an infection candidate (step S35), and if the total simultaneous stay time is less than the threshold (step S34-N), the generating means 135 does not identify the user as an infection candidate.

[0043] After executing steps S32 to S35 for all users whose user IDs are included in the simultaneous presence time period data group, the generation means 135 identifies a risk level corresponding to the zone where the infection candidate was present at the same time as the infected person (step S36). For each infection candidate, the generation means 135 extracts all data including the user ID corresponding to the infection candidate from the simultaneous presence time period data group, and identifies all zone IDs included in the extracted data. The generation means 135 refers to the infection risk table 123 to identify the risk level corresponding to the identified zone ID.

[0044] Next, the generating unit 135 generates an infection candidate list including the infection candidate and the risk level corresponding to the zone where the infection candidate was staying at the same time as the infected person (step S37). The generating unit 135 generates an infection candidate list including the user ID corresponding to the infection candidate and the risk level identified in the processing of step S36. When multiple zone IDs are identified for the same infection candidate, the generating means 135 selects the risk level corresponding to each zone ID that indicates the highest infection risk and includes it in the infection candidate list. When multiple zone IDs are identified for the same infection candidate, the generating means 135 may associate the risk levels corresponding to each zone ID with the user ID and include them in the infection candidate list. The generating means 135 may further include in the infection candidate list one or more of the zone ID, the simultaneous stay time of the infection candidate, and whether the infection candidate and the infected person were consecutively present in two or more zones. The extracting means 136 generates the infection candidate list by including in the infection candidate list whether the infection candidate and the infected person were consecutively present in two or more zones, thereby distinguishing users who were consecutively present in two or more zones with the infected person from users who were only present in one zone with the infected person. The generating means 135 may generate the infection candidate list in a format that can be sorted by each item, such as zone ID. This completes the series of processes.

[0045] Figure 7 shows an example of an infection candidate list. In the example shown in FIG. 7, the infection candidate list stores user IDs, zone IDs, risk levels, simultaneous stay times, consecutive simultaneous stay information, and the like, in association with one another.

[0046] FIG. 8 is a flowchart showing an example of the suspected infection extraction process performed by the management device 10.

[0047] Next, the extraction means 136 executes the processing of steps S41 to S45 for each infection candidate. First, the extraction means 136 identifies the risk level corresponding to the zone where the infection candidate was present at the same time as the infected person (step S41). As with the processing of step S36, the extraction means 136 extracts all data including the user ID corresponding to the infection candidate from the simultaneous presence time period data group, and identifies all zone IDs included in the extracted data. The extraction means 136 refers to the infection risk table 123 to identify the risk level corresponding to the identified zone ID. Next, the extraction means 136 weights the simultaneous stay time of infection candidates according to the risk level corresponding to each section (step S42). The extraction means 136 weights the simultaneous stay time included in the data extracted in the processing of step S41 according to the risk level identified in the processing of step S41 corresponding to the section associated with that simultaneous stay time. The extraction means 136 weights the simultaneous stay time so that the weight for the simultaneous stay time increases as the infection risk indicated by the risk level increases. The generation means 135 multiplies the simultaneous stay time by 3 times if the risk level corresponding to the section is "high," by 1.5 times if it is "medium," and by 1 time if it is "low."

[0048] Next, the extraction means 136 calculates the weighted sum of simultaneous stay times for the infection candidates (step S43). Next, the extraction means 136 determines whether the sum of the weighted simultaneous stay times is equal to or greater than a predetermined threshold (step S44). If the sum of the weighted simultaneous stay times is equal to or greater than the threshold (step S44-Y), the extraction means 136 extracts the infection candidate as an infection suspect (step S45), and if the sum of the weighted simultaneous stay times is less than the threshold (step S44-N), the extraction means 136 does not extract the infection candidate as an infection suspect. The extraction means 136 uses the same threshold value as that used in the processing of step S34 as the threshold value. The extraction means 136 may use a threshold value different from that used in the processing of step S34 as the threshold value. In addition, the extraction means 136 may extract as suspected infections those infection candidates whose sum, product, weighted sum, etc. of the total time spent together in each section and the risk level corresponding to the section where the infection candidate stayed at the same time as the infected person is above a threshold value.

[0049] After executing the processes of steps S42 to S45 for all infection suspects, the extraction means 136 generates each user ID corresponding to each extracted infection suspect as information about the infection suspect (step S46). The extraction means 136 may further include in the information about the infection suspect whether the infection suspect has been in two or more compartments consecutively with the infected person. By including in the information about the infection suspect whether the infection suspect has been in two or more compartments consecutively with the infected person, the extraction means 136 distinguishes and notifies a suspected infection who has been in two or more compartments consecutively with the infected person from a suspected infection who has been in only one compartment with the infected person. This completes the series of processes.

[0050] Figure 9 is an example of information about suspected infections. 9, the information about the suspected infection person stores the user ID, consecutive simultaneous presence information, etc. in association with each other. The information about the suspected infection person may also be associated with the zone ID, risk level, and simultaneous presence time.

[0051] In this way, the generation means 135 identifies users who were staying in the same section as the infected person at the same time, and generates a list including the identified users and the risk levels of the sections where the users were staying at the same time as the infected person. The notification means 137 (output means) transmits the generated list to the administrator terminal 30 via the communication unit 11, and notifies the predetermined notification destination. Note that the predetermined notification destination may be the management device 10, in which case the list is output to a display unit such as a monitor of the management device 10. In this way, the notification means 137 (output means) outputs the generated list. This allows the access control system 1 to more appropriately output information regarding people who were staying in the same section as the infected person at the same time.

[0052] Furthermore, the determination means 134 determines the risk level of each section based on the layout of each section, the number of people that each section can accommodate, the purpose of each section, the air conditioning equipment in each section, and whether infection control measures are being taken in each section. Because the risk level of each section is determined based on the characteristics of each section, the access control system 1 can accurately extract people who may have been infected from an infected person.

[0053] Furthermore, the generating means 135 includes a user in the list if the user was in two or more compartments at the same time as an infected person, and the total time spent by the user in the two or more compartments together with the infected person is equal to or exceeds a threshold value. Because the susceptibility to infection with an infectious disease is related to the total time spent together with an infected person, the access control system 1 can accurately extract people who may have been infected from an infected person.

[0054] Furthermore, the generating means 135 generates a list that distinguishes users who have been in two or more consecutive compartments with an infected person from users who have been in only one compartment with the infected person. Users who have been in two or more consecutive compartments with an infected person are likely to have been in the same room as the infected person and are therefore likely to have contracted the infectious disease, and therefore need to be observed with particular care. By notifying the administrator of this list via the notifying means 137, the administrator who has checked the notified list can take action such as prioritizing testing of users who have been in two or more consecutive compartments with the infected person.

[0055] The extraction means 136 also identifies users who were in the same area as the infected person at the same time, and extracts suspected infections who are suspected of being infected by the infected person based on the length of time the identified users stayed in the same area as the infected person and the risk level of the area. This allows the access control system 1 to more appropriately notify information about people who were in the same area as the infected person at the same time.

[0056] The extraction means 136 also weights the stay time according to the risk level of each section, and extracts users whose weighted stay time is equal to or exceeds a threshold value as suspected infections. This allows the access control system 1 to accurately extract suspected infections, taking into account the risk level of each section.

[0057] Furthermore, if a user has been in two or more compartments at the same time as an infected person, the extraction means 136 weights the stay time according to the risk level of each compartment, and if the sum of the weighted stay times is equal to or greater than a threshold, extracts the user as a suspected infection. The access control system 1 can accurately extract suspected infections by taking into account the risk level of each compartment, even if a user has been in two or more compartments at the same time as an infected person.

[0058] Furthermore, the notification means 137 notifies suspected infected persons who have been in two or more compartments consecutively with an infected person separately from suspected infected persons who have been in only one compartment at the same time as the infected person. Suspected infected persons who have been in two or more compartments consecutively with an infected person are likely to have been in the same activity as the infected person and are therefore likely to have been infected with an infectious disease, and therefore require particular careful observation. By notifying the information extracted in this way by the notification means 137, an administrator who has confirmed the notified information can take action such as prioritizing testing of suspected infected persons who have been in two or more compartments consecutively with the infected person.

[0059] Note that the generation means 135 may not calculate the total simultaneous stay time in the processing of step S33, and may instead determine whether each individual simultaneous stay time is equal to or greater than a predetermined threshold value in the processing of step S34. If at least one of the identified users' simultaneous stay times is equal to or greater than the threshold value, the generation means 135 identifies the identified users as infection candidates, and if all of the identified users' simultaneous stay times are less than the threshold value, the generation means 135 does not identify the identified users as infection candidates. At this time, the generating means 135 may change the threshold value according to the risk level of each section corresponding to each simultaneous stay time. In this case, the generating means 135 sets the threshold value so that the higher the risk level corresponding to the section corresponding to the simultaneous stay time, the smaller the threshold value. This allows the generating means 135 to accurately extract suspected infections by taking into account the risk level of each section.

[0060] Furthermore, the extraction means 136 does not need to weight the simultaneous stay times in the processing of step S42. Furthermore, the extraction means 136 does not need to calculate the total simultaneous stay times in the processing of step S43. In this case, instead of the processing of step S44, the extraction means 136 determines whether each simultaneous stay time is equal to or greater than a predetermined threshold. If at least one of the simultaneous stay times of the infection candidate is equal to or greater than the threshold, the extraction means 136 extracts the infection candidate as an infection suspect, and if none of the simultaneous stay times are equal to or greater than the threshold, the extraction means 136 does not extract the infection candidate as an infection suspect. In this case, the extraction means 136 may use different thresholds depending on the risk level corresponding to the section corresponding to the simultaneous stay time. In this case, the extraction means 136 uses a smaller threshold as the risk level corresponding to the section increases. For example, the extraction means 136 uses different thresholds, such as 5 minutes if the risk level corresponding to the section is "high," 10 minutes if it is "medium," and 15 minutes if it is "low." This allows the extraction means 136 to accurately extract suspected infections by taking into account the risk level for each section.

[0061] Furthermore, the designated users in this embodiment include not only people who are actually infected with an infectious disease, but also people who are determined to have a high probability of being infected, such as close contacts of people infected with COVID-19. That is, the designated users whose registration is accepted by the registration means 133 in the processing of step S21 include people who are determined to have a high probability of being infected. Because it takes time from infection testing to diagnosis, by registering people who are determined to have a high probability of being infected by the registration means 133, the access control system 1 can identify potential infections or extract suspected infections before the infection spreads.

[0062] Furthermore, when the acquisition means 131 acquires an entry request or the like in the processing of step S12, the authentication means 132 may execute the processing of unlocking and opening the door in step S14 without executing the determination of whether entry or exit is permitted in step S13.

[0063] Furthermore, if there is an area where no operation is required at the time of exit and the authentication means 132 permits entry in the processing of step S13, the registration means 133 may set an exit time that has not been stored in the history table 122 in the processing of step S15. The registration means 133 determines whether an exit time has been set in the previous record that includes the same user ID as the record added in the processing of step S15, and if not, sets the entry time of the added record to the exit time that has not been set. This allows the registration means 133 to set the exit time in the history table 122, and the access control system 1 to perform appropriate processing. Furthermore, the registration means 133 may set only one of the entry time or the exit time in the history table 122. In this case, if the entry time or the exit time of an infected person and a user falls within a predetermined time period, the generation means 135 identifies the user as a user who was staying in the same area at the same time as the infected person, and estimates the time period in which the infected person's stay time period overlaps with the predetermined time period from the entry time or the predetermined time before the exit time as the simultaneous stay time period.

[0064] The memory unit 12 may also store the seating position of each user in the section, and the determination means 134 may change the identified risk level in the processing of step S36 or S41 depending on the seating positions of the infection candidate and the infected person. The determination means 134 dynamically changes the risk level so that the closer the seating position of the infection candidate is to the seating position of the infected person, the higher the risk level becomes. For example, in the office room 511 of the office 500 shown in FIG. 3, the determination means 134 changes the risk level so that the risk level of the infection candidate (users B and C) seated close to the infected person (user A) is higher than the risk level of the infection candidate (user D) seated farther away. This allows the access control system 1 to accurately identify infection candidate and extract suspected infection candidates depending on the positional relationship between the user and the infected person.

[0065] Furthermore, the memory unit 12 may store the time periods when the air conditioning equipment was operating in the section or the time periods when the windows were open (i.e., the ventilation status, detected by an open / close sensor or the like), and the determination means 134 may dynamically change the identified risk level in the processing of step S36 or S41 according to the ventilation status. The determination means 134 dynamically changes the risk level so that the risk level for the time periods when the air conditioning equipment was not operating or the windows were closed is higher than the risk level for the time periods when the air conditioning equipment was operating or the windows were open. Furthermore, the determination means 134 may dynamically change the identified risk level in the processing of step S36 or S41 based on the calculated number of people in each section by referring to the history table 122. The determination means 134 may identify a time period in which the number of people in the section exceeded the section's capacity, and, other conditions being the same, change the risk level of the time period in which the number of people in the section exceeded the section's capacity to a higher level than the risk level of the time period in which the number of people in the section was equal to or less than the section's capacity. The determination means 134 may also change the risk level based on the ratio of the number of people in the section to the section's capacity. For example, if this ratio is less than 50%, the risk level is lowered by one level, and if it is greater than 100%, the risk level is raised by one level. In this case, the access control system 1 installs cameras in each section to capture images of the section. The control unit 13 detects people from the images captured by each camera using known image processing techniques and calculates the number of people detected at each specified time. Furthermore, if the use of a section varies depending on the time period, the use for each time period may be associated with the same section ID and stored in the infection risk table 123. In this case, the generating means 135 or the extracting means 136 identifies the risk level corresponding to the use for each time period for each time period in the processing of step S37 or S42, respectively. This allows the access control system 1 to accurately identify infection candidates according to the status of the section, and accurately extract suspected infection individuals.

[0066] The memory unit 12 may also store information about whether or not a user has undergone sterilization treatment upon entering a zone, and the determination means 134 may change the risk level determined in step S36 or S41 depending on whether or not the user has undergone sterilization treatment in step S37 or S42. The determination means 134 changes the risk level determined in step S36 or S41, depending on whether or not the user has undergone sterilization treatment, so that the risk level determined in the case where a user has not undergone sterilization treatment upon entering a zone where infection control measures are in place is higher than the risk level determined in the case where no user has undergone sterilization treatment, assuming other conditions are the same. In this case, the access control system 1 installs an alcohol sterilization device and an infrared detection device at the entrance to each zone that detects whether or not the user has placed their hand over the alcohol sterilization device. When permitting entry in step S13, the control unit 13 determines whether or not the user has performed sterilization treatment by determining whether or not the user has placed their hand over the alcohol sterilization device in accordance with the signal output from the infrared detection device. This allows the access control system 1 to accurately identify infection candidates according to the user's situation and accurately extract suspected infection individuals. Furthermore, in the processing of step S37 or S42, the determination means 134 may change the risk level determined in the processing of step S36 or S41 depending on whether the infected person and non-infected users were wearing masks when they entered the area. The determination means 134 changes the risk level when a user without a mask is present when entering the area so that it is higher than the risk level when no user without a mask is present when entering the area, other conditions being the same. In this case, the operation terminal 20 has a camera and uses the camera to capture an image of the user during user authentication during entry / exit processing. In the processing of step S13, the authentication means 132 determines whether the user is wearing a mask from the image captured by the camera using known image processing technology. This allows the access control system 1 to accurately identify infection candidates according to the user's situation and accurately extract suspected infection individuals. As described above, the access control system 1 can accurately extract suspected infections by dynamically changing the risk level according to the usage status of each area, such as the air conditioning equipment, the number of people entering, changes in the area's use, and whether or not alcohol disinfection has been performed, in order to determine potential infection candidates.

[0067] Furthermore, in the processing of step S42, if an infection candidate and an infected person are traveling together, the extraction means 136 may increase the weighting of the infection candidate's simultaneous presence time. If the difference between the entry time and the exit time of the infection candidate and the infected person is within a predetermined range (e.g., within 5 minutes for both) for two areas, the generation means 135 determines that the infection candidate and the infected person are traveling together and increases the weighting (e.g., 4 times if the risk level is "high," 2 times if the risk level is "medium," and 1 time if the risk level is "low"). Furthermore, if the difference between the exit time of one area and the entry time of the other area is within a predetermined range (e.g., within 5 minutes) for both the infection candidate and the infected person, the generation means 135 may further increase the weighting (e.g., 5 times if the risk level is "high," 3 times if the risk level is "medium," and 1.5 times if the risk level is "low"). This allows the access control system 1 to accurately extract infection candidates who are likely to have traveled together with an infected person as suspected infections. Note that the weighting of the threshold value may be changed instead of the simultaneous presence time. In this case, the threshold value is set to be smaller as the risk level increases.

[0068] Furthermore, the determination means 134 may determine the risk level by weighting any of the risk indexes. For example, for the indices related to use, the risk level of "dining room" may be set to 4, the risk level of "conference room" to 2, and the risk level of "office" to 0, and for the indices related to layout, the risk level of "crowding" may be set to 1 and the risk level of "dispersion" to 0. In this way, by weighting each risk index according to its importance, the risk level can be determined more appropriately.

[0069] Furthermore, the management device 10 may omit either the list generation process or the suspected infection extraction process in the notification process. If the list generation process is omitted, in the process of step S27, the notification means 137 does not transmit the infection candidate list to the administrator terminal 30. Also, in the suspected infection extraction process, the control unit 13 executes the processes of steps S41 to S45 for all users, not for each infection candidate. When the suspected infection extraction process is omitted, the notification means 137 does not transmit the infection suspect list to the administrator terminal 30 in the process of step S27.

[0070] Furthermore, in the list generation process, the generation means 135 may not execute the process of step S32. In this case, in the process of step S37, the generation means 135 does not include in the infection candidate list whether or not the infection candidate has been in two or more consecutive compartments at the same time as the infected person. Furthermore, in the process of step S46, the extraction means 136 does not include in the information on the suspected infection candidate whether or not the infection candidate has been in two or more consecutive compartments at the same time as the infected person.

[0071] As described above, various modifications can be made to the embodiments within the scope of the present invention. [Explanation of symbols]

[0072] 1 Access control system, 12 Memory unit (memory means), 133 Registration means, 134 Decision means, 135 Generation means, 136 Extraction means, 137 Notification means

Claims

1. An access control system for managing the entry and exit of multiple users in multiple sections, a storage means for storing, for each of the zones, history information associating users who stayed in each zone with the times when the users entered or left each zone, and a risk level indicating the level of risk of infection with an infectious disease in each zone; a registration means for registering a designated user from among the plurality of users; a generating means for identifying users who stayed in the same zone at the same time as the registered designated user based on the history information, and generating a list including the identified users and risk levels corresponding to the zones where the identified users stayed at the same time as the registered designated user; an output means for outputting the list; An access control system comprising:

2. 2. The access control system of claim 1, wherein the risk levels of the multiple compartments are determined based on at least one of the layout of each compartment, the number of people that can be accommodated in each compartment, the purpose of each compartment, the air conditioning equipment in each compartment, or infection control indicators in each compartment.

3. The access control system according to claim 2 , further comprising a determination unit for changing the risk level in accordance with a usage status relating to the index.

4. The access control system of any one of claims 1 to 3, wherein the generation means generates the list to include users who were in the same area at the same time as the registered designated user and whose stay time in the same area at the same time as the designated user is greater than or equal to a threshold value, and the threshold value is varied depending on the risk level of each area.

5. An access control system as described in any one of claims 1 to 3, wherein the generation means generates the list to include users who were in the same area at the same time as the registered designated user, who were in two or more areas at the same time as the designated user, and whose total stay time in the two or more areas at the same time as the designated user is greater than a threshold value.

6. An access control system as described in any one of claims 1 to 5, wherein the generation means generates the list so as to distinguish between users who stayed consecutively at the same time as the designated user in two or more areas from users who stayed at the same time as the designated user in only one area.

Images