Access control system, communication device, access control method, and program

Abstract

To provide a technology for suppressing deterioration of security or convenience due to locking / unlocking of a door caused by unnecessary and unexpected authentications.SOLUTION: A control unit 320 controls at least one of unlocking and opening of a door provided between a first area and a second area by an authentication based on a wireless communication between the first communication device provided in the first area and a terminal device. A restriction unit 322 causes the control unit 320 to control the unlocking and opening of the door based on a wireless communication between a second communication device provided in the second area and the terminal device until a specified condition is satisfied.SELECTED DRAWING: Figure 3

Description

[Technical Field]

[0001] The present disclosure relates to an entrance / exit management technology, and in particular to an entrance / exit management system, a communication device, an entrance / exit management method, and a program that manage movement across two areas. [Background technology]

[0002] In a door control system, when a user enters a room, an outdoor reader authenticates the portable device carried by the user, unlocking and opening the door. If an unnecessary or unexpected authentication occurs in the indoor reader at this time, there is a risk of unauthorized entry or a discrepancy with the user's entry / exit log. This reduces security. To prevent this, an invalid flag stored in the portable device is turned on when authentication is successfully completed upon entry, and authentication (locking / unlocking) is disabled while the flag is on. This invalid flag is cleared when the device is out of communication range (see, for example, Patent Document 1). [Prior art documents] [Patent documents]

[0003] [Patent Document 1] Japanese Patent Application Publication No. 2019-94627 Summary of the Invention [Problem to be solved by the invention]

[0004] Even if you want to leave immediately after entering the room because you forgot something, you will have to move out of the communication range, which reduces convenience.

[0005] The present disclosure has been made in light of these circumstances, and its purpose is to provide technology that suppresses the deterioration of security or convenience caused by locking and unlocking doors due to unnecessary or unexpected authentication. [Means for solving the problem]

[0006] In order to solve the above problems, an access control system according to one embodiment of the present disclosure includes a control unit that controls at least one of unlocking and opening of a door located between a first area and a second area through authentication based on short-range wireless communication between a first communication device located in the first area and a terminal device, and a restriction unit that restricts the control unit from controlling the unlocking and opening of the door based on short-range wireless communication between a second communication device located in the second area and the terminal device until a predetermined condition is met. The predetermined condition includes that communication with the terminal device continues for a predetermined period of time or more after successful authentication. . Another aspect of the present disclosure is also an access control system. The system includes: a control unit that controls at least one of unlocking and opening of a door provided between a first area and a second area through authentication based on short-range wireless communication between a first communication device provided in a first area and a terminal device; and a restriction unit that restricts the control unit from controlling the unlocking and opening of the door based on short-range wireless communication between a second communication device provided in the second area and the terminal device until a predetermined condition is met. The predetermined condition includes receiving information from the terminal device through a user operation on the terminal device. Another aspect of the present disclosure is also an access control system. The system includes: a control unit that controls at least one of unlocking and opening of a door provided between a first area and a second area through authentication based on short-range wireless communication between a first communication device provided in a first area and a terminal device; and a restriction unit that restricts the control unit from controlling the unlocking and opening of the door based on short-range wireless communication between a second communication device provided in the second area and the terminal device until a predetermined condition is met. The predetermined condition includes that, after successful authentication, the terminal device moves toward the first and second communication devices, not away from the first communication device. Another aspect of the present disclosure is also an access control system. The system includes: a control unit that controls at least one of unlocking and opening of a door provided between a first area and a second area through authentication based on short-range wireless communication between a first communication device provided in a first area and a terminal device; and a restriction unit that restricts the control unit from controlling the unlocking and opening of the door based on short-range wireless communication between a second communication device provided in the second area and the terminal device until a predetermined condition is met. The predetermined condition includes a condition in which the terminal device is not continuously communicating with the first communication device after successful authentication.

[0007] Another aspect of the present disclosure is a communication device. The communication device is provided in a second area of ​​a first area and a second area sandwiched between the first area and a door, and includes a communication unit that performs short-range wireless communication with a terminal device, a management device communication unit that communicates with a management device, and a control unit. When at least one of unlocking and opening of the door is controlled by authentication based on short-range wireless communication between another communication device provided in the first area and the terminal device, the control unit restricts communication of at least one of the communication unit and the management device communication unit until a predetermined condition is satisfied.

[0008] Yet another aspect of the present disclosure is an entry / exit management method, comprising: controlling at least one of unlocking and opening of a door provided between a first area and a second area by authentication based on short-range wireless communication between a first communication device provided in the first area and a terminal device; and restricting control of unlocking and opening of the door based on short-range wireless communication between a second communication device provided in the second area and the terminal device until a predetermined condition is satisfied. The predetermined condition includes that communication with the terminal device continues for a predetermined period of time or more after successful authentication. . Another aspect of the present disclosure is also an access control method. This method includes the steps of: controlling at least one of unlocking and opening of a door provided between a first area and a second area through authentication based on short-range wireless communication between a first communication device provided in the first area and a terminal device; and restricting control of unlocking and opening of the door based on short-range wireless communication between a second communication device provided in the second area and the terminal device until a predetermined condition is satisfied. The predetermined condition includes receiving information from the terminal device through a user operation on the terminal device. Another aspect of the present disclosure is also an access control method. This method includes the steps of: controlling at least one of unlocking and opening of a door provided between a first area and a second area through authentication based on short-range wireless communication between a first communication device provided in a first area and a terminal device; and restricting control of unlocking and opening of the door based on short-range wireless communication between a second communication device provided in the second area and the terminal device until a predetermined condition is met. The predetermined condition includes that, after successful authentication, the terminal device moves toward the first and second communication devices, not away from the first communication device. Another aspect of the present disclosure is also an access control method. This method includes the steps of: controlling at least one of unlocking and opening of a door provided between a first area and a second area through authentication based on short-range wireless communication between a first communication device provided in the first area and a terminal device; and restricting control of unlocking and opening of the door based on short-range wireless communication between a second communication device provided in the second area and the terminal device until a predetermined condition is met. The predetermined condition includes a condition in which the terminal device is not continuously communicating with the first communication device after successful authentication.

[0009] Any combination of the above components, and conversion of the present disclosure into a method, device, system, recording medium, computer program, etc., are also valid aspects of the present disclosure. [Effects of the Invention]

[0010] According to the present disclosure, it is possible to suppress a decrease in security or convenience due to the locking and unlocking of doors caused by unnecessary or unexpected authentication. [Brief explanation of the drawings]

[0011] [Figure 1] 1 is a diagram illustrating a configuration of an entrance / exit management system according to an embodiment of the present invention. [Figure 2] 2 is a sequence diagram showing a procedure of a process that is a prerequisite for the access control system of FIG. 1. FIG. [Figure 3] 3(a) and 3(b) are diagrams showing the configurations of the communication device and the management device of FIG. [Figure 4] 2 is a sequence diagram showing a procedure of processing by the entrance / exit control system of FIG. 1. [Figure 5] FIG. 4 is a sequence diagram showing a procedure of processing by the management device of FIG. DETAILED DESCRIPTION OF THE INVENTION

[0012] Before describing the present disclosure in detail, an overview will be provided. The embodiment relates to an access control system that controls users' entry into a predetermined area (room) in a facility or their exit from the area (room). A door that can be automatically locked and unlocked or closed and opened is provided at the entrance and exit of the room. A communication device (hereinafter referred to as a "first communication device") is provided outside the room, and a communication device (hereinafter referred to as a "second communication device") is provided inside the room. When the first communication device is referred to as an entry sensor, the second communication device is referred to as an exit sensor.

[0013] When a user carrying a terminal device enters the room, the first communication device performs wireless communication with the terminal device to measure the distance to the terminal device, etc., and then authenticates the terminal device. The first communication device is connected to the management device, and the management device unlocks or opens the door when the first communication device authenticates the terminal device. Meanwhile, when the user leaves the room, the second communication device performs wireless communication with the terminal device to measure the distance to the terminal device, etc., and then authenticates the terminal device. The second communication device is also connected to the management device, and the management device unlocks or opens the door when the second communication device authenticates the terminal device.

[0014] In such a configuration, if the second communication device mistakenly authenticates the terminal device when a user enters the room, the door will be unlocked or opened, resulting in a risk of unauthorized entry or a discrepancy with the user's entry / exit log. This reduces security. On the other hand, to prevent a decrease in security, authentication is invalidated when authentication is completed upon entry until the user moves out of the communication range. However, this control prevents the user from leaving the room until they move out of the communication range, reducing convenience. To prevent a decrease in security and convenience, in this embodiment, authentication is invalidated when authentication is completed upon the user entering the room, and is then enabled after a predetermined time has passed.

[0015] 1 shows the configuration of an access control system 1000. The access control system 1000 is provided in an area including a first area 10 and a second area 12, and includes a terminal device 100, a first communication device 200a, a second communication device 200b collectively referred to as communication devices 200, and a management device 300. The first communication device 200a and the second communication device 200b are connected to the management device 300, and the management device 300 is connected to a door 400 provided in the area. The terminal device 100 is carried by a user 110.

[0016] The first area 10 is outside the room, and the second area 12 is inside the room. Therefore, movement of the user 110 from the first area 10 to the second area 12 corresponds to entering the room, and movement of the user 110 from the second area 12 to the first area 10 corresponds to leaving the room. In addition, a door 400 is provided between the first area 10 and the second area 12, and the door 400 can be locked / unlocked or closed / open under the control of the management device 300.

[0017] The terminal device 100 is a portable wireless communication device such as a smartphone. The terminal device 100 is capable of performing wireless communication using at least two wireless communication methods. For example, the first wireless communication method (hereinafter referred to as the "first wireless communication method") is Bluetooth Low Energy (registered trademark) (BLE), and the second wireless communication method (hereinafter referred to as the "second wireless communication method") is UWB. The first wireless communication method and the second wireless communication method are not limited to these.

[0018] A user 110 carrying a terminal device 100 moves through the first area 10 toward the door 400 to enter the room. The first communication device 200a exchanges parameters with the terminal device 100 by performing wireless communication with the terminal device 100 using a first wireless communication method. The first communication device 200a then uses the exchanged parameters to perform wireless communication with the terminal device 100 using a second wireless communication method, thereby measuring the distance to the terminal device 100 using the second wireless communication method. The first communication device 200a performs authentication processing for the terminal device 100 based on the result of the distance measurement. The first communication device 200a transmits the result of the authentication processing to the management device 300.

[0019] The management device 300 receives the result of the authentication process from the first communication device 200a. Based on the result of the authentication process, the management device 300 controls at least one of unlocking and opening the door 400. As a result, the user 110 moves from the first area 10 to the second area 12. After a certain period of time has passed since the management device 300 controlled at least one of unlocking and opening the door 400, the management device 300 controls at least one of locking and closing the door 400.

[0020] Thereafter, when the user 110 moves into the second area 12 and passes near the second communication device 200b, the terminal device 100 and the second communication device 200b may communicate with each other, similar to the communication between the terminal device 100 and the first communication device 200a. When the second communication device 200b authenticates the terminal device 100 through communication between the terminal device 100 and the second communication device 200b using the first and second wireless communication methods, the door 400 is unlocked or opened. Unnecessary unlocking or opening of the door 400 reduces security. Therefore, as described above, once the management device 300 controls at least one of unlocking and opening of the door 400 based on the result of the authentication process from the first terminal device 100a, it restricts the management device 300 from again controlling at least one of unlocking and opening of the door 400. This restriction is lifted as follows to prevent a decrease in user convenience.

[0021] FIG. 2 is a sequence diagram showing a procedure of processing that is a premise of the access control system 1000. In the following, it is assumed that the first wireless communication method is BLE and the second wireless communication method is UWB. The communication device 200 transmits an advertisement in BLE (S10). When the terminal device 100 receives the advertisement, it transmits a response signal (S12). When the communication device 200 receives the response signal, the communication device 200 and the terminal device 100 perform terminal authentication in BLE (hereinafter referred to as "first terminal authentication") and connection processing in BLE (S14). Here, after the terminal device 100 transmits the advertisement in BLE, the communication device 200 and the terminal device 100 may perform the first terminal authentication in BLE and connection processing in BLE. In other words, either the terminal device 100 or the communication device 200 may be the advertiser.

[0022] The communication device 200 and the terminal device 100 exchange parameters (S16). The exchanged parameters are used for communication by UWB. BLE is used for the processing up to this point. The communication device 200 and the terminal device 100 set parameters (S18). The communication device 200 and the terminal device 100 perform terminal authentication in UWB (hereinafter referred to as "second terminal authentication") (S20), and then perform ranging by UWB (S22). The communication device 200 and the terminal device 100 perform authentication using the ranging result (S24). As shown in the figure, the processing before ranging by UWB takes more than 2 seconds.

[0023] 3(a) and 3(b) show the configurations of a communication device 200 and a management device 300. The communication device 200 in FIG. 3(a) includes a first communication unit 210, a second communication unit 220, a control unit 230, a storage unit 240, and a management device communication unit 260. The control unit 230 includes a first terminal authentication unit 250, a second terminal authentication unit 252, a measurement unit 256, and an authentication unit 258. The first communication unit 210 is capable of communicating with multiple terminal devices 100 using a first wireless communication method. As described above, an example of the first wireless communication method is BLE. The first communication unit 210 transmits an advertisement. Furthermore, upon receiving a response signal from each terminal device 100 that has received the advertisement, the first communication unit 210 measures the reception strength of the response signal and outputs the response signal to the control unit 230. As described above, the first communication unit 210 may receive an advertisement from each terminal device 100.

[0024] The first communication unit 210 connects to the terminal device 100 via BLE by transmitting a connection request to the terminal device 100. During this connection process, the first terminal authentication unit 250 performs first terminal authentication on the terminal device 100 based on prior information included in a signal received from the terminal device 100. The prior information is, for example, identification information or credential information in BLE. The signal including the prior information may be a response signal or a signal received during connection via BLE. A known technique may be used for the first terminal authentication, and therefore a description thereof will be omitted here.

[0025] After connecting with the terminal device 100, the first communication unit 210 exchanges parameters with the terminal device 100. As described above, the exchanged parameters are used for communication by UWB. The exchanged parameters include terminal information. The terminal information includes a MAC (Media Access Control) address set in the terminal device 100 and identification information in UWB of the terminal device 100. The first communication unit 210 outputs the parameters to the control unit 230.

[0026] The second communication unit 220 is capable of communicating with the terminal device 100 that has communicated with the first communication unit 210 using the first wireless communication method, using a second wireless communication method that is different from the first wireless communication method. As described above, an example of the second wireless communication method is UWB. Parameters are set in the second communication unit 220 by the control unit 230. After the parameters are set, the second communication unit 220 receives a signal from the terminal device 100. The second communication unit 220 outputs the received signal to the control unit 230.

[0027] The second terminal authentication unit 252 of the control unit 230 executes second terminal authentication for the terminal device 100 based on the signal received from the second communication unit 220 and the terminal information. As described above, examples of the terminal information are the MAC address set in the terminal device 100 and the UWB identification information of the terminal device 100. The second communication unit 220 connects via UWB to the terminal device 100 for which the second terminal authentication has been successful in the second terminal authentication unit 252.

[0028] The measurement unit 256 performs distance measurement for the terminal device 100 during UWB communication with the terminal device 100 via the second communication unit 220. Any known technology may be used for distance measurement, for example, distance estimation based on the time of flight (ToF) of radio waves or angle estimation based on the arrival time difference of radio waves at two or more antennas of the second communication unit 220. The authentication unit 258 accepts the distance measurement result from the measurement unit 256. The authentication unit 258 authenticates the terminal device 100 based on the distance measurement result. For example, the authentication unit 258 authenticates the terminal device 100 if the position of the terminal device 100 measured for distance is within a predetermined range.

[0029] If the authentication of the terminal device 100 is successful, the control unit 230 generates a notification indicating the result of the authentication process (hereinafter referred to as an "authentication notification"). The authentication notification includes identification information of the first communication device 200a and identification information of the terminal device 100. The control unit 230 outputs the authentication notification to the management device communication unit 260. The management device communication unit 260 is capable of communicating with the management device 300, and transmits the authentication notification to the management device 300.

[0030] The management device 300 in FIG. 3(b) includes a communication unit 310, a control unit 320, and a storage unit 330. The control unit 320 includes a restriction unit 322. The communication unit 310 is capable of communicating with the communication device 200 and the door 400. The communication unit 310 receives an authentication notification from the communication device 200. The communication unit 310 outputs the authentication notification to the control unit 320. The control unit 320 acquires information included in the authentication notification and stores the information in the storage unit 330. This corresponds to managing the entry and exit status of the user 110 carrying the terminal device 100. The control unit 320 also generates a signal (hereinafter referred to as an "unlock / open instruction") for controlling at least one of unlocking and opening the door 400. The control unit 320 outputs the unlock / open instruction to the communication unit 310. The communication unit 310 transmits the unlock / open instruction to the door 400. When the door 400 receives an unlock / open command from the management device 300, it executes at least one of unlocking and opening.

[0031] When a certain period of time has elapsed since the control unit 320 output the unlock / open instruction, the control unit 320 generates a signal (hereinafter referred to as a "lock / close instruction") for controlling at least one of locking and closing the door 400. The control unit 320 outputs the lock / close instruction to the communication unit 310. The communication unit 310 transmits the lock / close instruction to the door 400. When the door 400 receives the lock / close instruction from the management device 300, it executes at least one of locking and closing.

[0032] When the restriction unit 322 receives the authentication notification from the communication unit 310, it restricts the control unit 320 from controlling the unlocking and opening of the door 400 until a predetermined condition is met. The predetermined condition will be described later. When the predetermined condition is met, the control unit 320 removes the restriction. As a result, when the control unit 320 receives the authentication notification from the communication device 200, it generates and outputs an unlock / open instruction.

[0033] The following describes the restriction and lifting in the order of (1) the first pattern, (2) the second pattern, and (3) the third pattern. It is assumed that the first communication device 200a executes the authentication process and then transmits the authentication notification. If the second communication device 200b executes the authentication process and then transmits the authentication notification, the first communication device 200a and the second communication device 200b in the following description will be reversed.

[0034] (1) First pattern In the first pattern, in order to restrict the control unit 320 from controlling the unlocking and opening of the door 400, the restriction unit 322 generates an invalid instruction to instruct the second communication device 200b not to execute communication using the first wireless communication method. The communication unit 310 transmits the invalid instruction to the second communication device 200b. When the management device communication unit 260 of the second communication device 200b receives the invalid instruction from the management device 300, it outputs the invalid instruction to the control unit 230. When the control unit 230 receives the invalid instruction, it turns on an invalid flag to stop communication of the first communication unit 210.

[0035] The predetermined condition for control unit 320 is that a predetermined time has elapsed since successful authentication. Control unit 320 starts a timer after receiving an authentication notification from communication unit 310, and generates a release instruction when the predetermined time has elapsed. Communication unit 310 transmits the release instruction to second communication device 200b. When management device communication unit 260 of second communication device 200b receives the release instruction from management device 300, it outputs the release instruction to control unit 230. When control unit 230 receives the release instruction, it turns off the invalid flag, thereby restarting communication of first communication unit 210.

[0036] The communication device 200 may enter the invalid state independently, rather than the management device 300 issuing an invalidation instruction to the communication device 200. For example, the second communication device 200b receives, from the management device 300, the identification information of the terminal device 100 authenticated by the first communication device 200a, and determines to enter the invalid state based on the identification information.

[0037] (2) Second pattern In the second pattern, in order to restrict the control unit 320 from controlling the unlocking and opening of the door 400, the restriction unit 322 generates an invalid instruction to instruct the second communication device 200b not to execute communication using the second wireless communication method. The communication unit 310 transmits the invalid instruction to the second communication device 200b. When the management device communication unit 260 of the second communication device 200b receives the invalid instruction from the management device 300, it outputs the invalid instruction to the control unit 230. When the control unit 230 receives the invalid instruction, it turns on an invalid flag to stop communication of the second communication unit 220.

[0038] The predetermined condition for the control unit 320 is that communication between the terminal device 100 and the communication device 200 using the first wireless communication method continues for a predetermined time or more after authentication is successful. This corresponds to the user 110 carrying the terminal device 100 staying in the same place for a predetermined time or more. For example, this is detected when the communication unit 310 of the second communication device 200b periodically receives a signal from the terminal device 100 for a predetermined time or more. The control unit 320 starts a timer after receiving an authentication notification from the communication unit 310, and generates a release instruction if the signal continues for a predetermined time or more.

[0039] Furthermore, the predetermined condition for the control unit 320 is that the communication unit 310 receives information from the terminal device 100 via the communication device 200 in response to an operation by the user 110 on the terminal device 100. Here, the communication device 200 receives the information from the terminal device 100 using the first wireless communication scheme. When the control unit 320 receives the information from the terminal device 100 from the communication unit 310, it generates a release instruction.

[0040] The communication unit 310 transmits the release instruction to the second communication device 200b. When the management device communication unit 260 of the second communication device 200b receives the release instruction from the management device 300, it outputs the release instruction to the control unit 230. When the control unit 230 receives the release instruction, it turns off the invalid flag, thereby causing the second communication unit 220 to resume communication.

[0041] (3) Third Pattern In the third pattern, to restrict the control unit 320 from controlling the unlocking and opening of the door 400, the restriction unit 322 generates an invalid instruction to instruct the second communication device 200b not to execute authentication processing. The communication unit 310 transmits the invalid instruction to the second communication device 200b. Upon receiving the invalid instruction from the management device 300, the management device communication unit 260 of the second communication device 200b outputs the invalid instruction to the control unit 230. Upon receiving the invalid instruction, the control unit 230 turns on the invalid flag to stop the authentication processing in the authentication unit 258. The control unit 230 may also reduce the area where authentication is possible by shortening the distance threshold used for authentication. In other words, the restriction unit 322 restricts processing based on communication between the first communication unit 210a and the second communication unit 220b.

[0042] The predetermined condition in the control unit 320 is that after the first communication device 200a has been successfully authenticated, the movement direction of the terminal device 100 is not a direction away from the first communication device 200a, but a direction toward the first communication device 200a and the second communication device 200b. This means that after the terminal device 100 has moved from the first area 10 to the second area 12 (moving leftward in FIG. 1) due to authentication, the terminal device 100 moves in the direction toward the second communication device 200b and the door 400 in the second area 12 (moving rightward in FIG. 1). The movement direction of the terminal device 100 is identified based on the distance estimation results of the terminal device 100 measured by the first communication device 200a and the second communication device 200b using ToF.

[0043] Furthermore, the predetermined condition in the control unit 320 is that after the second communication device 200b has been successfully authenticated, the movement direction of the terminal device 100 is not a direction away from the second communication device 200b but a direction toward the first communication device 200a and the second communication device 200b. This means that after the terminal device 100 has moved from the second area 12 to the first area 10 due to authentication (moving to the right in FIG. 1), it moves in the direction of the first communication device 200a and the door 400 in the first area 10 (moving to the left in FIG. 1).

[0044] The predetermined condition in the control unit 320 may be that the terminal device 100 is not in continuous communication with the first communication device 200a after the first communication device 200a has been successfully authenticated. Alternatively, the predetermined condition in the control unit 320 may be that the terminal device 100 is not in continuous communication with the second communication device 200b after the second communication device 200b has been successfully authenticated.

[0045] When these predetermined conditions are satisfied, the control unit 320 generates a release instruction. The communication unit 310 transmits the release instruction to the second communication device 200b. When the management device communication unit 260 of the second communication device 200b receives the release instruction from the management device 300, it outputs the release instruction to the control unit 230. When the control unit 230 receives the release instruction, it turns off the invalid flag, thereby restarting the authentication process in the authentication unit 258.

[0046] The subject of the device, system, or method of the present disclosure includes a computer. The computer executes a program to realize the functions of the subject of the device, system, or method of the present disclosure. The computer includes, as its main hardware component, a processor that operates according to the program. The processor may be of any type, as long as it can realize the functions by executing the program. The processor may be composed of one or more electronic circuits, including a semiconductor integrated circuit (IC) or a large-scale integration (LSI). The electronic circuits may be integrated into a single chip or may be provided on multiple chips. The multiple chips may be integrated into a single device or may be provided on multiple devices. The program is recorded on a non-transitory recording medium, such as a computer-readable ROM, optical disk, or hard disk drive. The program may be pre-stored on the recording medium or may be supplied to the recording medium via a wide-area communication network, including the Internet.

[0047] The operation of the access control system 1000 configured as described above will now be described. FIG. 4 is a sequence diagram showing the processing steps performed by the access control system 1000. The first communication device 200a authenticates the terminal device 100 (S100). The first communication device 200a sends an authentication notification (S102). Upon receiving the authentication notification, the management device 300 unlocks and opens the door 400 (S104). The management device 300 sends an invalidation instruction (S106). The second communication device 200b turns on an invalidation flag (S108). When a predetermined condition is met (S110), the management device 300 sends a release instruction (S112). The second communication device 200b turns off the invalidation flag (S114). The second communication device 200b authenticates the terminal device 100 (S116). The second communication device 200b sends an authentication notification (S118). When the management device 300 receives the authentication notification, it unlocks and opens the door 400 (S120).

[0048] 5 is a sequence diagram showing the procedure of processing by the management device 300. When the communication unit 310 receives an authentication notification from the first communication device 200a (Y in S200), it unlocks and opens the door 400 (S202). The communication unit 310 sends an invalidation instruction (S204). When a predetermined condition is not met (N in S206), it waits. When a predetermined condition is met (Y in S206), the communication unit 310 sends a release instruction (S208). When the communication unit 310 receives an authentication notification from the second communication device 200b (Y in S210), it unlocks and opens the door 400 (S212). When the communication unit 310 does not receive an authentication notification from the first communication device 200a (N in S200) or when the communication unit 310 does not receive an authentication notification from the second communication device 200b (N in S210), the processing ends.

[0049] According to this embodiment, when at least one of unlocking and opening of the door 400 is controlled, the control of unlocking and opening of the door 400 is restricted until a predetermined condition is met, thereby suppressing a decrease in security or convenience due to unnecessary or unexpected authentication of the locking and unlocking of the door 400. Furthermore, since communication or processing based on communication of at least one of the first communication unit 210 and the second communication unit 220 of the communication device 200 is restricted, a decrease in security due to unnecessary or unexpected authentication of the locking and unlocking of the door 400 can be suppressed.

[0050] Furthermore, the predetermined condition includes the passage of a predetermined time after successful authentication, thereby suppressing a decrease in convenience. Furthermore, the predetermined condition includes the continuation of communication with the terminal device 100 for a predetermined time or more after successful authentication, thereby suppressing a decrease in convenience. Furthermore, the predetermined condition includes the reception of information from the terminal device 100 due to a user operation on the terminal device 100, thereby suppressing a decrease in convenience. Furthermore, the predetermined condition includes the movement direction of the terminal device 100 being a direction approaching the first communication device 200a and the second communication device 200b after successful authentication, thereby suppressing a decrease in convenience. Furthermore, the predetermined condition includes the terminal device 100 not continuing communication with the first communication device 200a after successful authentication, thereby suppressing a decrease in convenience.

[0051] An outline of one aspect of the present disclosure is as follows. (Item 1) a control unit (320) that controls at least one of unlocking and opening of a door (400) provided between the first area (10) and the second area (12) by authentication based on short-range wireless communication between a first communication device (200) provided in the first area (10) and a terminal device (100); a limiting unit (322) that limits the control unit (320) from controlling the unlocking and opening of the door (400) based on short-range wireless communication between a second communication device (200) provided in the second area (12) and the terminal device (100) until a predetermined condition is satisfied; An access control system equipped with

[0052] (Item 2) The second communication device (200) a first communication unit (210) that communicates with the terminal device (100) in a first wireless communication system; a second communication unit (220) that communicates with the terminal device (100) using a second wireless communication method different from the first wireless communication method; The access control system according to item 1, wherein the restriction unit (322) restricts communication between at least one of the first communication unit (210) and the second communication unit (220) or processing based on the communication.

[0053] (Item 3) 2. The access control system according to item 1, wherein the predetermined condition includes the passage of a predetermined time after the authentication is successful.

[0054] (Item 4) 2. The entrance / exit control system according to item 1, wherein the predetermined condition includes that communication with the terminal device (100) continues for a predetermined period of time or more after the authentication is successful.

[0055] (Item 5) 2. The entrance / exit management system according to item 1, wherein the predetermined condition includes receiving information from the terminal device (100) through a user operation on the terminal device (100).

[0056] (Item 6) The entry / exit control system described in item 1, wherein the specified condition includes that after the authentication is successful, the direction of movement of the terminal device (100) is not a direction away from the first communication device (200), but a direction toward the first communication device (200) and the second communication device (200).

[0057] (Item 7) Item 1. The access control system according to item 1, wherein the predetermined condition includes that the terminal device (100) is not continuously communicating with the first communication device (200) after the authentication is successful.

[0058] (Item 8) 8. The entrance / exit control system according to any one of items 1 to 7, comprising the first communication device (200) and the second communication device (200).

[0059] (Item 9) A communication device (200) provided in a second area (12) of a first area (10) and a second area (12) provided between the first area (10) and a door (400), a communication unit (210, 220) for wireless communication with a terminal device (100); a management device communication unit (260) that communicates with the management device (300); a control unit (320), The control unit (320) is a communication device (200) that, when at least one of unlocking and opening of the door (400) is controlled by authentication based on wireless communication between another communication device (200) provided in the first area (10) and the terminal device (100), restricts communication between at least one of the communication units (210, 220) and the communication unit for management device (260) until a predetermined condition is satisfied.

[0060] (Item 10) a step of controlling at least one of unlocking and opening of a door (400) provided between the first area (10) and the second area (12) by authentication based on wireless communication between a first communication device (200) provided in the first area (10) and a terminal device (100); a step of restricting control of unlocking and opening of the door (400) based on wireless communication between a second communication device (200) provided in the second area (12) and the terminal device (100) until a predetermined condition is satisfied; An entrance / exit management method comprising:

[0061] (Item 11) a step of controlling at least one of unlocking and opening of a door (400) provided between the first area (10) and the second area (12) by authentication based on wireless communication between a first communication device (200) provided in the first area (10) and a terminal device (100); and a step of restricting control of unlocking and opening of the door (400) based on wireless communication between a second communication device (200) provided in the second area (12) and the terminal device (100) until a predetermined condition is met.

[0062] The present disclosure has been described above based on examples. These examples are merely illustrative, and it will be understood by those skilled in the art that various modifications are possible in the combination of each component or each treatment process, and that such modifications are also within the scope of the present disclosure. [Explanation of symbols]

[0063] 10 First area, 12 Second area, 100 Terminal device, 110 User, 200 Communication device, 210 First communication unit, 220 Second communication unit, 230 Control unit, 240 Memory unit, 250 First terminal authentication unit, 252 Second terminal authentication unit, 256 Measurement unit, 258 Authentication unit, 260 Communication unit for management device, 300 Management device, 310 Communication unit, 320 Control unit, 322 Restriction unit, 330 Memory unit, 400 Door, 1000 Access control system.

Claims

1. By authentication based on wireless communication between a first communication device provided in the first area and a terminal device, a control unit that controls at least one of unlocking and opening of a door provided between the first area and the second area; a limiting unit that limits the control unit from controlling unlocking and opening of the door based on wireless communication between a second communication device provided in the second area and the terminal device until a predetermined condition is satisfied; Equipped with The predetermined condition includes that communication with the terminal device continues for a predetermined period of time or more after the authentication is successful.

2. By authentication based on wireless communication between a first communication device provided in a first area and a terminal device, a control unit that controls at least one of unlocking and opening of a door provided between the first area and the second area; a limiting unit that limits the control unit from controlling unlocking and opening of the door based on wireless communication between a second communication device provided in the second area and the terminal device until a predetermined condition is satisfied; Equipped with The predetermined condition includes receiving information from the terminal device through a user operation on the terminal device.

3. By authentication based on wireless communication between a first communication device provided in a first area and a terminal device, a control unit that controls at least one of unlocking and opening of a door provided between the first area and the second area; a limiting unit that limits the control unit from controlling unlocking and opening of the door based on wireless communication between a second communication device provided in the second area and the terminal device until a predetermined condition is satisfied; Equipped with An access control system, wherein the specified condition includes that after the authentication is successful, the direction of movement of the terminal device is not a direction away from the first communication device, but a direction toward the first communication device and the second communication device.

4. By authentication based on wireless communication between a first communication device provided in a first area and a terminal device, a control unit that controls at least one of unlocking and opening of a door provided between the first area and the second area; a limiting unit that limits the control unit from controlling unlocking and opening of the door based on wireless communication between a second communication device provided in the second area and the terminal device until a predetermined condition is satisfied; Equipped with The predetermined condition includes a condition that the terminal device is not continuously communicating with the first communication device after the authentication is successful.

5. the second communication device, a first communication unit that communicates with the terminal device using a first wireless communication system; a second communication unit that communicates with the terminal device using a second wireless communication method different from the first wireless communication method; The access control system according to claim 1 , wherein the restriction unit restricts communication between at least one of the first communication unit and the second communication unit, or processing based on the communication.

6. The access control system according to claim 1 , wherein the predetermined condition includes a predetermined time period having elapsed since the authentication was successful.

7. The access control system according to claim 1 , comprising the first communication device and the second communication device.

8. A communication device provided in a second area of ​​a first area and a second area provided between the first area and a door, a communication unit for wirelessly communicating with a terminal device; a management device communication unit that communicates with the management device; a control unit; The control unit is a communication device that, when at least one of unlocking and opening of the door is controlled by authentication based on wireless communication between another communication device installed in the first area and the terminal device, restricts communication between the communication unit and at least one of the communication unit for the management device until a specified condition is met.

9. An access control system comprising the communication device described in claim 8 and the management device.

10. By authentication based on wireless communication between a first communication device provided in the first area and a terminal device, controlling at least one of unlocking and opening a door provided between the first area and the second area; restricting control of unlocking and opening of the door based on wireless communication between a second communication device provided in the second area and the terminal device until a predetermined condition is satisfied; Equipped with The entrance / exit management method, wherein the predetermined condition includes that communication with the terminal device continues for a predetermined period of time or more after the authentication is successful.

11. By authentication based on wireless communication between a first communication device provided in a first area and a terminal device, controlling at least one of unlocking and opening a door provided between the first area and the second area; restricting control of unlocking and opening of the door based on wireless communication between a second communication device provided in the second area and the terminal device until a predetermined condition is satisfied; Equipped with The entrance / exit management method, wherein the predetermined condition includes receiving information from the terminal device through a user operation on the terminal device.

12. By authentication based on wireless communication between a first communication device provided in a first area and a terminal device, controlling at least one of unlocking and opening a door provided between the first area and the second area; restricting control of unlocking and opening of the door based on wireless communication between a second communication device provided in the second area and the terminal device until a predetermined condition is satisfied; Equipped with An entry / exit management method, wherein the specified condition includes that after the authentication is successful, the direction of movement of the terminal device is not a direction away from the first communication device, but a direction toward the first communication device and the second communication device.

13. By authentication based on wireless communication between a first communication device provided in a first area and a terminal device, controlling at least one of unlocking and opening a door provided between the first area and the second area; restricting control of unlocking and opening of the door based on wireless communication between a second communication device provided in the second area and the terminal device until a predetermined condition is satisfied; Equipped with The entrance / exit management method, wherein the predetermined condition includes the terminal device not continuously communicating with the first communication device after the authentication is successful.

14. A program for causing a computer to execute the entry / exit management method described in any one of claims 10 to 13.

Images