Access control system, access control device, and access control method

Abstract

To provide an entry / exit management system, an entry / exit management device, and an entry / exit management method for allowing a last exiting person remaining in facilities or the like to exit when operation not allowing a single exit from the facilities or the like is performed.SOLUTION: In an entry / exit management system, an entry / exit management device 10 issues a card L1 for a last exit person, reads data of the card L1 for the last exit person held over by an employee A at the time of the last exit to perform authentication. The device also reads data of an employee card A1 of the employee A to perform authentication and performs authentication such that the employee A is a valid employee based on authentication of the card L1 for the final exit person and the employee card A1 to control an electronic lock 30 to be unlocked.SELECTED DRAWING: Figure 2

Description

Technical Field

[0001] The present invention relates to an entrance / exit management system, an entrance / exit management device, and an entrance / exit management method that enable the last person remaining in a facility to exit when the operation does not allow individual exits from the facility or the like.

Background Art

[0002] Conventionally, in facilities that require extremely strict security, such as data centers and development laboratories, strict entrance / exit management has been carried out. For example, Patent Document 1 discloses a gate management system that performs authentication processing for authenticating a person and inspection processing for inspecting the luggage carried by the person when a person moves from a first area to a second area in a facility.

[0003] At this time, in facilities that require particularly strict security, when a person enters or exits, a two-person verification that requires the authentication of another person may be adopted. For example, there is a known system in which when Mr. A tries to exit the facility, the door cannot be unlocked unless not only the card given to Mr. A is held up to the reader but also the card given to another Mr. B is held up to the reader.

Prior Art Documents

Patent Documents

[0004] [[ID=A]]

Patent Document 1

Summary of the Invention

Problems to be Solved by the Invention

[0005] However, in such a conventional system, when the last person remains in the facility, this person may be left behind in the facility and locked in the facility. In particular, such a situation may occur in an environment where the number of remaining people in the facility cannot be grasped, or when one person has to remain due to business reasons.

[0006] Therefore, when implementing a policy that does not allow individuals to leave a facility on their own, a crucial issue is how to ensure that the last person remaining inside the facility leaves. This issue arises not only when leaving various types of facilities, but also when leaving mobile vehicles.

[0007] The present invention was made to solve the problems (issues) of the above-mentioned prior art, and aims to provide an entry / exit management system, entry / exit management device, and entry / exit management method that allows the last person remaining in a facility to leave when the system is operated in a way that does not allow independent exit from the facility. [Means for solving the problem]

[0008] To solve the above-mentioned problems and achieve the objective, the present invention provides an access control system that, when a user located within a predetermined facility leaves the facility, unlocks a lock installed on the door of the facility, provided that the user medium possessed by the user is properly authenticated, thereby enabling the user to leave the facility, and for the user who is the last to leave the facility Depending on the situation, each time, The system is characterized by comprising: an issuing means for issuing a medium for the last person to leave the building; an authentication means for authenticating whether the user medium and the last person to leave the building are legitimate; and a control means for controlling the unlocking of a lock installed on the door of the facility, provided that at least the user medium and the last person to leave the building are authenticated as legitimate.

[0009] Furthermore, the present invention is characterized in that, in the above invention, the control means controls the unlocking of a lock installed on the door of the facility, provided that the user who is the last person to leave the facility is present in the facility, no other users are present in the facility, and the user medium and the last person to leave medium are authenticated as legitimate.

[0010] Furthermore, the present invention is characterized in that, in the above invention, the issuing means issues a medium for the last person to leave the facility to the user, who is the last person to leave the facility, which is valid for a predetermined period from the time of issuance.

[0011] Furthermore, the present invention is characterized in that, in the above invention, the control means controls the system to disable the last exiting user medium even within the predetermined period when it receives a predetermined deactivation operation.

[0014] Furthermore, the present invention is characterized in that, in the above invention, the control means controls the unlocking of the lock installed on the door of the facility when the user enters the facility after the last time the user leaves the facility, provided that the authentication means has authenticated the user medium and the last person to leave the facility as legitimate.

[0015] Furthermore, the present invention is characterized in that, in the above invention, the control means controls the system to disable the last exiter medium if the user has exited the building using the last exiter medium.

[0016] Furthermore, the present invention is characterized in that, in the above invention, the control means controls the lock installed on the door of the facility not to be unlocked when the user leaves the facility using the last exiting medium, if there are other users inside the facility.

[0017] Furthermore, the present invention is characterized in that, in the above invention, the issuing means issues the medium for the last person to leave the building on the condition that a predetermined issuing operation is performed in the presence of multiple users.

[0018] Furthermore, the present invention further comprises, in the above invention, a means for identifying the last person to leave the building based on a scheduler that manages the schedules of multiple users, and the issuing means is characterized in that it issues the last person to leave the building medium to the user identified as the last person to leave by the identification means.

[0019] Furthermore, the present invention relates to an access control system that, when a user located within a predetermined facility leaves the facility, unlocks a lock installed on the door of the facility, provided that the user is properly authenticated, thereby enabling the user to leave the facility, and for the user who is the last to leave the facility Depending on the situation, each time, The system is characterized by comprising: an issuing means for issuing a medium for the last person to leave the building; an authentication means for authenticating whether or not the medium for the last person to leave is legitimate; and a control means for controlling the unlocking of a lock installed on the door of the facility, conditional on the medium for the last person to leave being authenticated as legitimate.

[0020] Furthermore, the present invention relates to an access control system that, when a user located within a predetermined facility leaves the facility, unlocks a lock installed on the door of the facility, provided that the user medium held by the user is properly authenticated, thereby enabling the user to leave the facility, wherein the user medium held by the user who is the last to leave the facility, Depending on the situation, each time, The system is characterized by comprising: an attribute assignment means for assigning the attribute of the last person to leave the building; an authentication means for authenticating whether or not the user medium is legitimate; and a control means for controlling the unlocking of a lock installed on the door of the facility, provided that the user medium is authenticated as legitimate and the attribute of the last person to leave the building is assigned to the user medium.

[0021] Furthermore, the present invention relates to an access control device that, when a user located within a predetermined facility leaves the facility, unlocks a lock installed on the door of the facility, provided that the user medium possessed by the user is properly authenticated, thereby enabling the user to leave the facility, and for the user who is the last to leave the facility Depending on the situation, each time, The system is characterized by comprising: an issuing means for issuing a medium for the last person to leave the building; an authentication means for authenticating whether the user medium and the last person to leave the building are legitimate; and a control means for controlling the unlocking of a lock installed on the door of the facility, provided that at least the user medium and the last person to leave the building are authenticated as legitimate.

[0022] Further, the present invention provides an entrance / exit management method in an entrance / exit management device that unlocks a lock disposed on a door of the facility to enable a user to leave the facility on the condition that a user medium possessed by the user is properly authenticated when the user located within a predetermined facility leaves the facility. For the user who is the last person to leave the facility from the facility Depending on the situation, each time, a issuing step of issuing a medium for the last person to leave the facility, an authentication step of authenticating whether the user medium and the medium for the last person to leave the facility are valid, and a control step of controlling to unlock the lock disposed on the door of the facility on the condition that at least the user medium and the medium for the last person to leave the facility are authenticated as valid.

Advantages of the Invention

[0023] According to the present invention, when an operation that does not allow a single person to leave a facility or the like is performed, the last person to leave the facility or the like can leave. <关于本发明】

Brief Description of the Drawings

[0024] [Figure 1] FIG. 1 is an explanatory diagram for explaining a situation where an employee leaves the facility while performing two-factor authentication in the entrance / exit management system according to Embodiment 1. [Figure 2] FIG. 2 is an explanatory diagram for explaining a situation where the last person to leave the facility leaves the facility in the entrance / exit management system according to Embodiment 1. [Figure 3] FIG. 3 is a functional block diagram showing the configuration of the entrance / exit management device. <000009> [Figure 4] FIG. 4 is a diagram showing an example of the data structure of the employee card data and the card data for the last person to leave the facility shown in FIG. 3. [Figure 5] FIG. 5 is a flowchart showing a procedure for leaving the facility using the card for the last person to leave the facility by the entrance / exit management device shown in FIG. 3. [Figure 6] FIG. is an explanatory diagram for explaining a case where the use of the card for the last person to leave the facility is set as a condition for entering the facility. [Figure 7]Figure 7 is a flowchart showing the procedures for processing employees entering the building, as shown in Figure 6. [Figure 8] Figure 8 is an explanatory diagram illustrating the case where the final exit is made using only the final exit card. [Figure 9] Figure 9 is an explanatory diagram illustrating the case where the employee card is used for final exit from the building. [Figure 10] Figure 10 is a diagram showing an overview of the access control system according to Embodiment 2. [Figure 11] Figure 11 is a functional block diagram showing the configuration of the access control system shown in Figure 10. [Figure 12] Figure 12 shows an example of the access control data shown in Figure 11. [Figure 13] Figure 13 is a flowchart showing the processing procedure of the access control system shown in Figure 11. [Modes for carrying out the invention]

[0025] The following describes in detail, with reference to the drawings, embodiments of the access control system, access control device, and access control method according to the present invention. In the embodiments shown below, the case of employee A leaving the building is shown, provided that two people, employee A located in the work area and employee B located in the monitoring area, are authenticated.

[0026] [Embodiment 1] <Overview of the access control system> First, let's describe the access control system according to Embodiment 1. Figure 1 is an explanatory diagram illustrating the situation in which an employee leaves the building while two people are authenticated in the access control system according to Embodiment 1. As shown in Figure 1, this building is equipped with an entrance / exit area, a work area, and a monitoring area. Employee A is located in the work area, and employee B is located in the monitoring area.

[0027] A card reader 21 is installed in the entrance / exit area, a card reader 20, a personal belongings camera 60, and an intercom 61a are installed in the work area, and an access control device 10, a card reader 13, and an intercom 61b are installed in the monitoring area. A door 31 is provided between the entrance / exit area and the work area, and this door 31 is locked and unlocked by an electronic lock 30.

[0028] The access control device 10 is a management device that manages the entry and exit of employees, and employee cards and the last exiter cards described later are issued using this access control device 10. Specifically, the access control device 10 is used to associate card information with the card IDs of pre-prepared unregistered cards and register them. As a result, employee ID cards or last exiter cards are issued.

[0029] Card readers 13, 20, and 21 are readers that read data stored on employee cards, which are contactless IC cards. Interphones 61a and 61b are interphones for communication between the work area and the monitoring area. Interphone 61a is used when employee A, who is in the work area, leaves the building and requests approval from employee B in the monitoring area to leave. Note that interphones 61a and 61b can also be interphone cameras. Personal belongings camera 60 is a camera that captures images of personal belongings carried by employee A when they leave the work area.

[0030] The access control device 10 performs authentication processing on employee card B1 read by card reader 13 and also performs authentication processing on employee card A1 read by card reader 20. If both employee card B1 and employee card A1 are valid, it controls the electronic lock 30 to open and close the door 31, allowing employee A to leave the building.

[0031] Specifically, employee A notifies employee B of their intention to leave the building via intercom 61a (1). Employee B checks the images of employee A's belongings captured by the personal belongings camera 60, and if there are no problems, employee B holds employee card B1 over card reader 13. Card reader 13 reads the data stored on employee card B1 and notifies access control device 10 (2). Access control device 10 authenticates whether employee B is a legitimate employee based on the data stored on employee card B1 (3).

[0032] Then, employee A holds employee card A1 over card reader 20. As a result, card reader 20 reads the data stored in employee card A1 (4) and outputs it to access control device 10. Access control device 10 authenticates that employee A is a legitimate employee based on the data stored in employee card A1 (5). If access control device 10 authenticates that both employee A and B are legitimate employees, it controls the electronic lock 30 to unlock (6), allowing employee A to leave the building.

[0033] Here, if employee B, who is located in the monitoring area, leaves the building at the scheduled time of 5 PM, employee A, who is located in the work area, will be unable to leave because there will be no one in the monitoring area. For this reason, the access control system according to this embodiment 1 is configured to allow employee A to leave the building even if only employee A is in the work area and there is no one in the monitoring area.

[0034] Figure 2 is an explanatory diagram illustrating the situation when the last person to leave the building exits in the access control system according to this embodiment 1. As shown in Figure 2, in order to enable the last person to leave the building alone, a last person to leave card L1 is issued in advance to employee A, who will be the last person to leave (11). When issuing a last person to leave card L1 to employee A, the card ID of employee A's employee card A1 is stored in association with the last person to leave card L1.

[0035] Subsequently, if employee A attempts to leave the building alone, they place the pre-issued final exiter card L1 over the card reader 20. The card reader 20 then reads the data stored in the final exiter card L1 (12) and outputs it to the access control device 10. The access control device 10 authenticates whether the final exiter card L1 is valid or not based on the data stored in the card (13). For example, it determines that the card is valid if its expiration date has not passed.

[0036] Then, when employee A holds employee card A1 over card reader 20, card reader 20 reads the data stored in employee card A1 (14) and outputs it to access control device 10. Based on the data stored in employee card A1, access control device 10 authenticates whether employee A is a legitimate employee and whether the last exiter card L1 was issued to employee A (15).

[0037] As a result, if the last exiter card L1 is valid, employee A is a legitimate employee, and the last exiter card L1 was issued to employee A, the electronic lock 30 is unlocked (S16), allowing employee A to leave the building. In this way, in the access control system according to this embodiment 1, by using the access control device 10 to associate card information with the card ID of a pre-prepared unregistered card and registering it, and issuing a last exiter card, employee A, who is in the work area, can leave the building even if employee B is not in the monitoring area.

[0038] <Configuration of the access control system 10> Next, the configuration of the access control device 10 will be described. Figure 3 is a functional block diagram showing the configuration of the access control device 10. As shown in Figure 3, the access control device 10 has a display unit 11, an input unit 12 and a card reader 13 connected to it, and also has a communication I / F unit 14, a storage unit 15 and a control unit 16.

[0039] The display unit 11 is a display device such as a liquid crystal display that displays various information. The input unit 12 is an input device such as a mouse or keyboard. The card reader 13 is a device that reads data stored on the employee card B1 using short-range wireless communication such as Bluetooth (registered trademark). The communication I / F unit 14 is an interface unit for communication between the card readers 20 and 21 and the personal belongings camera 60 and the electronic lock 30, etc.

[0040] The storage unit 15 is a storage device such as a hard disk drive or non-volatile memory, and stores employee card data 15a, last exiter card data 15b, exit data 15c, entry data 15d, and image data 15e.

[0041] Employee card data 15a is data that associates the card ID of an employee card with the employee's name, department, contact information, etc. Last exiter card data 15b is data that associates the card ID of the last exiter card with its expiration date and the employee card ID of the employee who possesses the last exiter card.

[0042] Exit data 15c is data that associates the card ID of an employee who has left the building with the time of their departure, and entry data 15d is data that associates the card ID of an employee who has entered the building with the time of their entry. Image data 15e is data of images (still images or moving images) captured by the personal belongings camera 60.

[0043] The control unit 16 is a control unit that controls the entire access control device 10, and includes a card issuance processing unit 16a for the last person to leave, a card data acquisition unit 16b, an authentication processing unit 16c, a determination unit 16d, an electronic lock control unit 16e, and an imaging control unit 16f. In practice, by loading these programs into the CPU and executing them, the processes corresponding to the card issuance processing unit 16a for the last person to leave, the card data acquisition unit 16b, the authentication processing unit 16c, the determination unit 16d, the electronic lock control unit 16e, and the imaging control unit 16f are made to execute, respectively.

[0044] The final exiter card issuance processing unit 16a issues a final exiter card to allow employee A, who is in the work area, to leave the building if employee B, who is in the monitoring area, is not present. The final exiter card can only be issued by employees with certain job responsibilities or higher, such as the person in charge of the work area. Alternatively, the card may be issued only after authentication of employee A, who is in the work area, and authentication of at least one other employee have been performed.

[0045] The card data acquisition unit 16b is a processing unit that acquires data stored in cards held over the card readers 13, 20, and 21.

[0046] When authenticating two employees, employee A located in the work area and employee B located in the monitoring area, the authentication processing unit 16c authenticates whether employee A and employee B are legitimate based on the data stored on the cards obtained from card readers 13 and 20, and outputs the authentication result to the determination unit 16d.

[0047] Furthermore, when the authentication processing unit 16c performs authentication using the last exiter card L1 by employee A located in the work area, it authenticates whether employee A and the last exiter card L1 are legitimate based on the data stored on the card obtained from the card reader 20, and outputs the authentication result to the determination unit 16d. This authentication also includes authentication of whether the last exiter card L1 was assigned to employee A.

[0048] When the determination unit 16d authenticates two employees, employee A located in the work area and employee B located in the monitoring area, if both employee A and employee B are legitimate, it determines that employee A is allowed to leave the building and outputs the determination result to the electronic lock control unit 16e.

[0049] Furthermore, when the determination unit 16d performs authentication using the last exiter card L1 by employee A who is located in the work area, if employee A and the last exiter card L1 are valid, it determines that employee A is allowed to leave the building and outputs the determination result to the electronic lock control unit 16e.

[0050] If the electronic lock control unit 16e receives a determination result from the determination unit 16d that employee A is allowed to leave the building, it controls the electronic lock 30 to unlock. After a predetermined time has elapsed since unlocking, it controls the electronic lock 30 to lock.

[0051] The imaging control unit 16f controls the imaging of the personal belongings camera 60, acquires an image, and stores it as image data 15e in the storage unit 15.

[0052] Next, the employee card data 15a and the card data 15b for the last person to leave the building of the access control device 10 will be described. Figure 4 is a diagram showing an example of the data structure of the employee card data 15a and the card data 15b for the last person to leave the building shown in Figure 3. As shown in Figure 4(a), the employee card data 15a is data that associates employee card ID, name, department, contact information, etc.

[0053] Here, we show the situation where employee card ID "A0001" is associated with the name "Sato △ko", department "Accounting Department", and contact number "090-xxxx-yyyy". We also show the situation where employee card ID "A0002" is associated with the name "Tanaka □o", department "Technical Department", and contact number "080-aaaa-cccc", and employee card ID "A0003" is associated with the name "Yamada ×suke", department "Technical Department", and contact number "080-dddd-ffff".

[0054] Furthermore, as shown in Figure 4(b), the card data 15b for the last person to leave the building shows that the card ID "L0001" is associated with the expiration date "2022 / 1 / 22" and the employee card ID "A0001" of the employee card held by the employee who was the last to leave the building.

[0055] <Processing procedure for the access control device 10> Next, we will explain the exit procedure using the last exiter's card. Figure 5 is a flowchart showing the exit procedure using the last exiter's card by the access control device 10 shown in Figure 3.

[0056] As shown in Figure 5, when the access control device 10 receives an operation to issue a predetermined last exiter card, it issues the last exiter card (step S101). When issuing such a last exiter card, the device manages the expiration date and the card ID of the employee card owned by the employee in association with it.

[0057] Then, the card reader 20 reads the data stored in the last exiter's card (step S102), and if the access control device 10 receives the data, it authenticates whether the last exiter's card is valid or not based on this data. For example, if the expiration date has not passed, it is authenticated as valid (step S103). If the result is that the last exiter's card is not valid (step S103; No), the process proceeds to step S102.

[0058] In response, if the last exiter's card is valid (step S103; Yes), the card reader 20 reads the employee card (step S104) and outputs it to the access control device 10. The access control device 10 authenticates whether the employee is valid based on the data stored in the employee card, and also authenticates whether the last exiter's card was issued to that employee (step S105). If the employee card is found to be invalid (step S105; No), the process proceeds to step S102.

[0059] In response, if the employee card is valid (step S105; Yes), the system controls the electronic lock 30 to unlock (step S106), allowing the employee to leave the building and ending the above series of processes.

[0060] <Example 1> By the way, the above explanation described the process of an employee leaving the building using the last exiter card, but it is also possible to make the use of the last exiter card a condition for entry when the employee enters the building again.

[0061] Figure 6 is an explanatory diagram illustrating the case where the use of a last exiter card is a condition for entry. As shown in the figure, when employee A holds employee card A1 over card reader 21 in the entrance area, and card reader 21 reads the data stored in employee card A1 (21), this data is output to the access control device 10. The access control device 10 authenticates whether employee card A1 is valid or not (22). If employee card A1 is valid, it determines whether employee A is the last person to leave the building (23). Since the employee card ID of employee card A1 is registered in the last exiter card data 15b for the card ID of last exiter card L1, once the employee card ID is identified, it can be determined whether employee A used a last exiter card to leave the building.

[0062] If the access control device 10 determines that employee A has left the building using the last exiter card, it prompts employee A to hold the last exiter card over the card reader 21. Once employee A holds the last exiter card L1 over the card reader 21, the card reader 21 reads the data stored in the last exiter card L1 (24) and outputs it to the access control device 10. The access control device 10 authenticates whether the last exiter card L1 is legitimate (25), and if it is legitimate, it unlocks the electronic lock 30 to allow employee A to enter (26). This authentication includes authentication of whether the last exiter card L1 was assigned to employee A.

[0063] In this way, authenticating the last exiter's card upon entry makes it possible to prevent the loss or misuse of the last exiter's card.

[0064] Next, we will explain the procedure for processing employee A's entry into the building, as shown in Figure 6. Figure 7 is a flowchart showing the procedure for processing employee A's entry into the building, as shown in Figure 6. As shown in Figure 7, the card reader 21 installed in the entrance area reads the data stored in employee card A1 (step S201) and outputs the read data to the entry / exit management device 10.

[0065] If the access control device 10 receives such data, it authenticates whether or not employee card A1 is legitimate (step S202). In this authentication, it is determined whether or not employee card A1 is a legitimate employee card issued by the access control device 10.

[0066] Subsequently, the access control device 10 determines whether employee A was the last person to leave the building using the last exiter card L1 (step S203). If employee A is not the last person to leave (step S203; No), the device proceeds to step S207, where it controls the electronic lock 30 to unlock (step S207), allowing employee A to enter the building.

[0067] In response to this, if employee A is the last person to leave the building (step S203; Yes), employee A is instructed to operate the last person to leave card L1 (step S204). For example, the card reader 21 is displayed with the message "Please hold up the last person to leave card." Alternatively, a synthesized voice saying "Please hold up the last person to leave card" may be output from the speaker provided in the card reader 21.

[0068] Then, once the card reader 21 has read the data stored in the last exiter card L1 (step S205), it outputs this data to the access control device 10. The access control device 10 authenticates whether the last exiter card L1 is valid or not based on this data (step S206). If the last exiter card L1 is not valid (step S206; No), the process proceeds to step S201.

[0069] In response to this, if the last exiter's card L1 is valid (step S206; Yes), the system controls the electronic lock 30 to unlock (step S207), allowing employee A to enter the building.

[0070] As described above, the access control system according to this embodiment 1 issues a last exiter card L1 at the access control device 10. The access control device 10 then performs authentication based on the data of the last exiter card L1 that employee A presented when leaving the building, as well as based on the data of employee A's employee card A1. The access control device 10 is configured to unlock the electronic lock 30 by authenticating both the last exiter card L1 and the employee card A1, thus preventing the loss or misuse of the last exiter card L1.

[0071] In the above embodiment 1, the case in which one last exiter card L1 is issued was described, but multiple last exiter cards selected periodically may be issued. For example, different last exiter cards may be issued for each day of the week. Also, if multiple periodically selected last exiter cards have been issued, the other last exiter cards may be disabled. Also, if a last exiter card L1 is authenticated, that last exiter card L1 may be disabled. Furthermore, if a predetermined invalidation operation is performed on the access control device 10, the issued last exiter card L1 may be disabled even if it is within its validity period.

[0072] <Modification 2> In the above embodiment 1, the access control device 10 reads and authenticates both employee card A1 and the last exiter card L1, but it may also read and authenticate only the last exiter card L1. Alternatively, the same data as the last exiter card L1 may be written to employee card A1 and made valid only for a certain period of time.

[0073] Specifically, we will explain the case where the final exiter leaves using only the final exiter card L1. Figure 8 is an explanatory diagram illustrating the case where the final exiter leaves using only the final exiter card. As shown in Figure 8, in order to enable the final exiter to leave alone, a final exiter card L1 is issued in advance to employee A, who will be the final exiter (31).

[0074] Subsequently, if employee A attempts to leave the building alone, they place the pre-issued final exiter card L1 over the card reader 20. The card reader 20 then reads the data stored on the final exiter card L1 (32) and outputs it to the access control device 10. The access control device authenticates whether the final exiter card L1 is valid or not based on the data stored on the card (33).

[0075] As a result, if the last exiter card L1 is valid, the electronic lock 30 is unlocked (34), allowing employee A to leave the building. In this way, employee A can leave the building alone with authentication using only the last exiter card L1.

[0076] Next, we will explain the case where only employee card A1 is used for final exit. Figure 9 is an explanatory diagram illustrating the case where only employee card A1 is used for final exit. As shown in Figure 9, the access control device 10 has already associated employee card A1 with the card used by the final exiter (41).

[0077] Subsequently, if employee A attempts to leave the building alone, they place employee card A1, which has been pre-assigned as the card for the last person to leave, over the card reader 20. The card reader 20 then reads the data stored in employee card A1 (42) and outputs it to the access control device 10. The access control device authenticates whether employee card A1 is valid as the card for the last person to leave, based on the data stored in employee card A1 (43).

[0078] As a result, if employee card A1 is valid, the electronic lock 30 is unlocked (44), allowing employee A to leave the building. In this way, employee A can leave the building alone by authentication using only employee card A1, which is associated as the card for the last person to leave.

[0079] [Embodiment 2] <Overview of the access control system> By the way, in Embodiment 1 described above, we explained a case where employee A, who is the last person to leave the building, is allowed to leave using the last person to leave card. However, when employee A leaves, there is a possibility that another employee C is still in the work area. In such a case, if employee A is allowed to leave, employee C will be left behind in the work area and will not be able to leave. For this reason, in Embodiment 2, if another employee C is still in the work area, employee A will not be able to leave even if they use the last person to leave card.

[0080] The outline of the access control system according to Embodiment 2 will now be described. Figure 10 is a diagram showing the outline of the access control system according to Embodiment 2. Note that the same reference numerals are used for parts similar to those in Embodiment 1, and their detailed descriptions are omitted.

[0081] As shown in Figure 8, the access control device 40 issues a final exiter card L1 to employee A, who will be the last person to exit the building (51). When issuing a final exiter card L1 to employee A, the card ID of employee A's employee card A1 is associated with and stored on the final exiter card L1.

[0082] When employee A attempts to leave the building alone, if they hold the pre-issued last exiter card L1 over the card reader 20, the card reader 20 reads the data stored in the last exiter card L1 (52) and outputs it to the access control device 40. The access control device 40 authenticates whether the last exiter card L1 is valid or not based on the data stored in the last exiter card L1 (53). For example, it determines that the card is valid if its expiration date has not passed.

[0083] As a result, if the last exit card L1 is valid, the system determines whether or not another employee C remains in the work area (54). Specifically, entry and exit management data is generated based on the entry and exit data, and the system determines the status of the employee based on this entry and exit management data. If another employee C remains in the work area, the system outputs "exit not permitted" (55).

[0084] In response, if no other employee C remains in the work area or monitoring area, the access control device 40 requests employee A to authenticate employee card A1. When employee A holds employee card A1 over the card reader 20, the card reader 20 reads the data stored in employee card A1 (56) and outputs it to the access control device 40. Based on the data stored in employee card A1, the access control device 40 authenticates whether employee A is a legitimate employee and whether the last exiter card L1 was issued to employee A (57).

[0085] As a result, if the last exiter card L1 is valid, employee A is a legitimate employee, and the last exiter card L1 was issued to employee A, the system controls the electronic lock 30 to unlock (58), allowing employee A to leave the building.

[0086] <Configuration of the access control system 40> Next, the configuration of the access control device 40 shown in Figure 10 will be described. Figure 11 is a functional block diagram showing the configuration of the access control device 40 shown in Figure 10. As shown in Figure 11, the access control device 40 has a communication I / F unit 14, a storage unit 45, and a control unit 46, to which a display unit 11, an input unit 12, and a card reader 13 are connected.

[0087] The memory unit 45 stores entry / exit management data 45a. The entry / exit management data 45a is data generated based on entry data 15d and exit data 15c, and is associated with the employee card ID, name, department, entry time, exit time, and presence flag of the employee card.

[0088] The control unit 46 has a building occupancy management unit 46a. The building occupancy management unit 46a is a management unit that manages the occupancy status using entry / exit management data 45a generated from entry data 15d and exit data 15c. Specifically, it stores the entry time and exit time associated with the employee card ID, and if both the entry time and exit time are recorded, it means that the employee has entered and exited the building, so the occupancy flag is set to "0". On the other hand, if the entry time is recorded but the exit time is not recorded, it means that the employee is still in the building, so the occupancy flag is set to "1". The building occupancy management unit 46a clears the exit time when the entry time is updated. The occupancy flag can also be forcibly changed from "1" to "0" by the operator.

[0089] Next, an example of the access control data 45a shown in Figure 11 will be explained. Figure 12 is a diagram showing an example of the access control data 45a shown in Figure 11. As shown in Figure 12, the access control data 45a is data that associates the name, department, entry time, exit time, and presence flag with the employee card ID. Here, the employee card ID "A0001" is associated with the name "Sato △ko", department "Accounting Department", entry time "2022 / 1 / 11 08:36", exit time "2022 / 1 / 11 17:50", and presence flag "0".

[0090] Furthermore, employee card ID "A0002" was associated with the name "Tanaka □o", department "Technical Department", entry time "2022 / 1 / 11 08:41", exit time "-", and presence flag "1", while employee card ID "A0003" was associated with the name "Yamada ×suke", department "Technical Department", entry time "2022 / 1 / 11 08:25", exit time "-", and presence flag "1".

[0091] The occupancy flag indicates whether or not an employee is present in the work area. An occupancy flag of "0" means the employee is not present, and an occupancy flag of "1" means the employee is present. The access control device 40 controls the system so that if the occupancy management unit 46a refers to the access control data 45a and there are two or more occupancy flags of "1", the employee cannot leave using the last exiter's card.

[0092] <Processing procedure for the access control device 40> Next, the processing procedure of the access control device 40 shown in Figure 11 will be described. Figure 13 is a flowchart showing the processing procedure of the access control device 40 shown in Figure 11. As shown in Figure 13, when the access control device 40 receives an operation to issue a predetermined last exiter card, it issues a last exiter card (step S301). When issuing such a last exiter card, the device manages the expiration date and the card ID of the employee card owned by the employee in association with it.

[0093] Then, the card reader 20 reads the data stored in the last exiter's card (step S302), and if the access control device 40 receives the data, it authenticates whether the last exiter's card is valid or not based on this data. For example, if the expiration date has not passed, it is authenticated as valid (step S303). If the result is that the last exiter's card is not valid (step S303; No), the process proceeds to step S302.

[0094] In response, if the last exiter's card is valid (Step S303; Yes), it is determined whether or not other occupants are present (Step S304). If other occupants are present (Step S304; Yes), an error message is displayed (Step S305), and the process proceeds to Step S302. Here, the error message can be displayed on the card reader's display panel, for example, with text such as "Another employee is currently present," or an error code can be displayed.

[0095] If no other occupants are present (step S304; No), the access control device 40 reads the data from the employee card using the card reader 20 (step S306) and outputs it to the access control device 40. The access control device 40 authenticates whether the employee is legitimate based on the data stored on the employee card, and also authenticates whether the card for the last person to leave was issued to that employee (step S307). If the employee card is found to be invalid (step S307; No), the process proceeds to step S302.

[0096] In response, if the employee card is valid (step S307; Yes), the system controls the electronic lock 30 to unlock (step S308), allowing the employee to leave the building and ending the above series of processes.

[0097] Thus, in the above embodiment 2, the access control device 40 issues a card for the last person to leave, and once it reads the data on the card, it determines the location of other employees in the work area using the access control data 45a. If other employees are present, the device is configured to prevent the employee from leaving even if they use the card. Therefore, when implementing a system that does not allow employees to leave facilities alone, it is possible to prevent situations where employees remain in the facility.

[0098] In Embodiments 1 and 2 described above, the case in which an employee card (contactless IC card) is used as the medium for managing entry and exit is explained. However, the present invention is not limited to this, and contact-type IC cards, IC cards with barcodes, smartphones, mobile terminals, etc., can also be used as the medium. When using a contact-type IC card, the IC card is inserted into the card slot of the card reader.

[0099] Furthermore, although the explanation described the case in which the access control system issues the final exiter card L1 upon receiving an operation to issue a predetermined final exiter card, the access control devices 10 and 40 may also be equipped with a schedule management unit that manages the schedules of multiple users, identify the final exiter based on the scheduler, and issue the final exiter card L1 to the identified user.

[0100] The configurations illustrated in each of the above embodiments are functional schematics and do not necessarily have to be physically represented as shown. In other words, the distributed and integrated forms of each device are not limited to those shown, and all or part of them can be functionally or physically distributed and integrated in any unit according to various loads and usage conditions. [Industrial applicability]

[0101] The access control system, access control device, and access control method according to the present invention are suitable for situations where independent exit from a facility is not permitted, and where the last person remaining in the facility is allowed to leave. [Explanation of Symbols]

[0102] 10 Entrance / exit control device 11 Display section 12 Input section 13, 20, 21 Card readers 14. Communication Interface Section 15 Storage section 15a Employee Card Data 15b Card data for the last person to leave the building 15c Exit Data 15d Entry Data 15e Image Data 16 Control Unit 16a Processing Unit for Issuing Cards for the Last Person to Leave the Building 16b Card data acquisition unit 16c Authentication Processing Unit 16d Judgment section 16e Electronic Lock Control Unit 16f Imaging Control Unit 30 Electronic locks 31 Doors 40 Entrance / exit control device 45 Storage section 45a Access Control Data 46 Control Unit 46a Library Management Department 60. Personal belongings: Camera 61a, 61b Intercom

Claims

1. An access control system that, when a user located within a designated facility leaves the facility, unlocks a lock installed on the door of the facility, provided that the user's personal media is properly authenticated, thereby allowing the user to leave the facility. A means for issuing a final exiter's document to the user who is the last person to leave the facility, as needed, depending on the circumstances. Authentication means for authenticating whether the aforementioned user media and the aforementioned media for the last person to leave the building are legitimate, A control means that controls the unlocking of a lock installed on the door of the facility, provided that at least the user medium and the last exiter medium are authenticated as legitimate. An access control system characterized by having the following features.

2. The control means is The access control system according to claim 1, characterized in that it controls the unlocking of a lock installed on the door of the facility, provided that the user who is the last person to leave the facility is present at the facility, no other users are present at the facility, and the user medium and the last person to leave the facility are authenticated as legitimate.

3. The issuing means is, The access control system according to claim 1, characterized in that it issues a medium for final exiters to the user who is the last person to leave the facility, which is valid for a predetermined period from the time of issuance.

4. The control means is The access control system according to claim 3, characterized in that, when a predetermined deactivation operation is received, the system controls the system to disable the media for the last person to leave the building, even if it is within the predetermined period.

5. The control means is An access control system according to any one of claims 1 to 4, characterized in that when the user enters the facility after the last person has left, the system controls the unlocking of a lock installed on the door of the facility, provided that the authentication means has authenticated the user medium and the last person to leave as legitimate.

6. The control means is An access control system according to any one of claims 1 to 4, characterized in that if the user exits the building using the last exiter medium, the system controls the system to disable the last exiter medium.

7. The control means is An access control system according to any one of claims 1 to 6, characterized in that when the user leaves the facility using the last exiting medium, if there are other users inside the facility, the system controls the system so as not to unlock the lock installed on the door of the facility.

8. The issuing means is, An access control system according to any one of claims 1 to 7, characterized in that it issues the aforementioned medium for the last person to leave the building, on the condition that a prescribed issuance operation is performed in the presence of multiple users.

9. The system further includes a means of identifying the last person to leave the building based on a scheduler that manages the schedules of multiple users. The issuing means is, The access control system according to claim 1, characterized in that it issues the last exiter medium to a user identified as the last exiter by the aforementioned identification means.

10. An access control system that, when a user located within a designated facility leaves the facility, unlocks a lock installed on the facility's door to allow the user to leave the facility, provided that the user is properly authenticated, A means for issuing a final exiter's document to the user who is the last person to leave the facility, as needed, depending on the circumstances. Authentication means for verifying whether the aforementioned medium for the last person to leave the building is legitimate, A control means that controls the unlocking of a lock installed on the door of the facility, provided that the aforementioned medium for the last person to leave the building is authenticated as legitimate. An access control system characterized by having the following features.

11. An access control system that, when a user located within a designated facility leaves the facility, unlocks a lock installed on the door of the facility, provided that the user's personal media is properly authenticated, thereby allowing the user to leave the facility. An attribute assignment means for assigning the attribute of the last person to leave the facility to the user medium held by the user who was the last person to leave the facility, as needed in each instance. Authentication means for authenticating whether the user medium is legitimate, A control means that controls the unlocking of a lock installed on the door of the facility, provided that the user medium is authenticated as legitimate and the user medium is assigned the attribute of the last person to leave the facility. An access control system characterized by having the following features.

12. An access control device that, when a user located within a designated facility leaves the facility, unlocks a lock installed on the door of the facility, provided that the user's medium is properly authenticated, thereby allowing the user to leave the facility. A means for issuing a final exiter's document to the user who is the last person to leave the facility, as needed, depending on the circumstances. Authentication means for authenticating whether the aforementioned user media and the aforementioned media for the last person to leave the building are legitimate, A control means that controls the unlocking of a lock installed on the door of the facility, provided that at least the user medium and the last exiter medium are authenticated as legitimate. An access control device characterized by being equipped with the following features.

13. An access control method for an access control device that, when a user located within a designated facility leaves the facility, unlocks a lock installed on the door of the facility, provided that the user's medium is properly authenticated, thereby allowing the user to leave the facility. A process of issuing a final exiter's document to the user who is the last person to leave the facility, depending on the circumstances, An authentication process for verifying whether the aforementioned user media and the aforementioned media for the last person to leave the building are legitimate, A control step that controls the unlocking of a lock installed on the door of the facility, provided that at least the user medium and the last exiter medium are authenticated as legitimate. An entry / exit management method characterized by including the following.

Images