JPH0288862A - Systematized control for entering or leaving room with ic card - Google Patents

Abstract

PURPOSE:To simplify the setting of terminal equipments without the limit of the number of users by combining IC cards and terminal equipments having password numbers and having levels which are in accordance with partitioned positions according to the arbitrary partitioned positions of tree structures, with each other. CONSTITUTION:On a user card 3, a security level is set, and when the card is used, then the security level and the security level of an entering and leaving room terminal equipment are compared with each other, and the entering or leaving room qualification of a user in the security area is checked. Then, based on the result of discrimination, it is determined whether an exit or entry where the terminal equipment is set can or cannot be released. In this case, the terminal equipment of an IC card with the necessary identification of a password number is specified, and on the specified terminal equipment, levels are compared with each other, and password numbers are identified with each other, and in the terminal equipment which is not specified, level comparison only is carried out.

Description

[Detailed Description of the Invention] [Industrial Application Field] The present invention relates to a system for controlling entry and exit in a large number of areas such as a building and each room therein. The present invention relates to an IC card entry/exit control system in which an entrance/exit can be unlocked by installing a terminal device and attaching an IC card as a key to the terminal device.

[Conventional technology]

Conventionally, systems are known in which a card is used as a key to a room or the like. This is because a terminal device that is a league writer for the card is installed at the entrance of the room, etc., and the PIN number is stored on this terminal.The PIN number is also stored on the card, and this card is inserted into the terminal device. These passwords are compared, and when they match, the terminal operates the door unlocking means to unlock the door.

Conventionally, magnetic cards have been generally used as cards in this case, but there are problems in terms of data confidentiality, and the use of IC cards has also been proposed (
For example, Japanese Patent Application Laid-Open No. 61-49081).

By the way, in such a system, there is no problem when there is one-on-one correspondence between rooms and people using the rooms, such as in hotels. However, for example, in laboratories and factories,
If one person uses many rooms, a card for each room is required, and the more rooms are used, the more difficult it becomes to manage the cards, and the more difficult it becomes to find the card you want to use. It takes time and effort.

Therefore, as a way to deal with this, each terminal stores the PIN number of the card used for it, and when a card with a PIN number that matches one of these is inserted,
A system that unlocks the door, or a host side that manages the cards that can be used for each terminal, and when a card is inserted into the terminal, the terminal can unlock the door by installing this card. A system has been proposed in which the host side determines whether or not to lock the lock. According to these systems, a user can use one card as a key for multiple required doors.

[Problem to be solved by the invention]

However, in any of the above conventional systems, the number of cards that can be used in the terminal is limited, and in particular, in systems managed by the host, wiring between the host and the terminal is required, and system installation is difficult. , problems arise when adding more terminals.

Furthermore, anyone with a card can enter and exit a room, and even if the room is restricted to specific people, unauthorized use of the card may allow entry and exit from the room.

The purpose of the present invention is to solve such problems, to allow an unlimited number of users, to simplify the installation of terminals, and to
To provide an IC card person leaving room management system which can also prevent unauthorized use of cards.

[Means to solve the problem]

In order to achieve the above object, the present invention divides each area into a tree structure according to the mutual relationship and level of security, and allows a terminal to locate the area in which the area is set in the tree structure. The IC card has a PIN number and is assigned a level corresponding to an arbitrary division position in the tree structure, and the level of the terminal and the level of the IC card attached to the terminal. By comparing the level with the IC card and comparing the password of the IC card with the password input on the terminal, it is determined whether the entrance/exit can be unlocked.

Further, the present invention adds designation information of a terminal that requires PIN verification to the IC card, and the terminal designated by the designation information performs the level verification and the PIN verification; The terminals other than the terminals designated by the above only perform the level verification and are allowed to unlock their respective entrances and exits.

Determine whether or not it is possible.

[Effect]

When you insert your IC card into the terminal and enter your PIN,
The level of the IC card and the level of the terminal are compared, and it is determined whether this terminal is positioned in the inter-technical division position with respect to this IC card in the tree structure, or in the same-technical division position with respect to this IC card. If so, it is determined whether the rank is lower than that of the same rank, and furthermore, the password of the IC card and the input password are compared and determined. and,
Based on these determination results, it is determined whether the entrance/exit where this terminal is installed can be unlocked.

In this case, you can specify the terminal that requires PIN verification on the IC card, and the above level comparison and PIN verification will be performed on the specified terminal, and the above level comparison will be performed on the terminal that is not specified. Only the following can be done.

〔Example〕

Embodiments of the present invention will be described below with reference to the drawings.

FIG. 1 is a block diagram showing an embodiment of the IC card person exit management system according to the present invention, in which 1 is a host, 2 is a system card, 3 is a user card, 4a and 4b are entry/exit terminals, and 5 is a An electric lock controller, 6 is an electric lock, 7 is an automatic door controller, and 8 is an automatic door.

In the figure, entry/exit terminals are installed at the entrances and exits of security areas that require control of people's access, such as factories where specific people such as employees are allowed to enter and exit, and rooms where only a limited number of people can enter and exit. Here, it is assumed that the entry/exit terminal 4a is provided at the entrance of the club room, and the entry/exit terminal 4b is provided at the side gate of the building where this room is located.

In addition, entry/exit terminals are installed at all entrances and exits of the security area, but each entrance also has an entrance terminal outside this entrance that enters the security area, and an entrance terminal that enters the security area from here inside this entrance. There are exit terminals for each person on the exit side of the tea area. However, in FIG. 1, only two gate terminals 4a and 4b are shown, and the entrance/exit terminal 4a is located on the entrance side of the entrance of the club room, and the entrance/exit terminal 4b is located on the side of the entrance of the building where this room is located. It is assumed that each is provided on the entrance side.

By the way, when considering the above room and building, -m,
Entrances and exits to and from the rooms in this building are strictly controlled. In other words, although there are relatively loose restrictions on the number of people who can enter and exit the building, there are strict restrictions on the number of people who can enter and exit the rooms within the building. Also, although they are on the same site, depending on the building inside, people may be able to come and go in and out slowly or strictly. In this way, when the access of people is strictly restricted, it is said to be high security, and conversely, when it is loosely restricted, it is said to be low security, and these high and low security levels are expressed as security levels.

Therefore, a security level is set for the entry/exit terminal according to the security level of the security area in which it is installed, but here, it is assumed that the entry/exit terminal 4a has a higher security level than the entry/exit terminal 114b. become.

An electric lock controller 5 and an electric lock 6 are provided on the door of the room in which the entrance/exit terminal 4a is installed.
A corresponds to the keyhole of this lock. Also, large exit terminal 4b
An auto door controller 7 is provided at the side gate provided with the auto door 8, and the entry/exit terminal 4b also corresponds to the keyhole of the key that puts the auto door 8 into operation.

The user card 3 corresponds to these keys. This user card 3 is an IC card, and has the same security level as the room entry/exit terminal. A user card with a high security level can generally be unlocked in a security area with a high security level.

For example, if the security level of the user card 3 is higher than the security level of the room entry/exit terminal 4a, the electric lock 6 can be unlocked by attaching the user card 3 to the large exit terminal 114a. Instead, by attaching the same user card 3 to the entry/exit terminal 4b, the auto door controller 7 can control the auto door 8.
It also makes it possible to put it into operation. However, if the security level of the user card 3 is higher than that of the entry/exit terminal 4b but lower than that of the large exit terminal 4a, the auto door 8 is activated by attaching the user card 3 to the entry/exit terminal 4b. However, even if this user card 3 is attached to the exit terminal 4a, the electric lock 6 will not be unlocked.

In this way, a security level is set for the user card 3, and when this security level is used, a comparison is made between this security level and the security level of the entry/exit terminal. Eligibility checks will be conducted for entry and exit.

Furthermore, with this user card 3, each time you enter or leave a security area, the number of the security area you entered and exited from, the date and time of entry and exit, etc. data is written and entry/exit history is recorded.

The security level settings for the user card as described above are performed on the host 1 terminal, and the user card 3
The entry/exit history recorded in the host 1 is transferred to the host 1, where it can be managed.

On the other hand, there are three types of system cards 2, which are IC cards: gate cards, alarm cards, and data cards. The gate card is used to set terminal conditions such as the security level of each large exit terminal 4a, 4b. These terminal conditions are created by the host 1 for each large exit terminal i4a, 4b, and written to the gate card. This gate card is attached to the entry/exit terminal for which terminal conditions are to be set, and the terminal conditions are read out from the gate card by operating the keyboard and stored in this large exit terminal. As a result, a security level is set on the entry/exit terminal.

Further, each of the large exit terminals 4a and 4b records a history of entering and exiting the room (user card number, entry/exit date and time based on the user card number, etc.). A data card, which is the system card 2, is used to collect the recorded entry/exit history from each large exit terminal and transfer it to the host 1.

If a user card is lost or stolen, in order to prevent unauthorized use of this user card by a third party, a message indicating that this user card is an accident card will be displayed on the exit terminal where this user card can be used. be registered. A user card registered as an accident card cannot be used at the emergency exit terminal. It is the alarm card as the system card 2 that registers the accident card in this large exit terminal. If there is an accident with the user card in this way, the data regarding the accident is input into the terminal of the host 1, read out, and written into the alarm card. Then, by attaching this to a predetermined room entry/exit terminal and performing a predetermined keyboard operation, the accident card is registered in this large exit terminal.

As described above, the IC card as the system card 2 functions as an information transmission medium between the host 1 and the large exit terminals 1a4a and 4b. This makes it possible to take the system offline, eliminates the need for wiring between the host 1 and each entry/exit terminal, and simplifies installation, making it easy to add large exit terminals or change the installation location. become.

Next, the security level of the large exit terminal and user card in this embodiment will be explained.

The security level of the security area can be arbitrarily set in consideration of the relationship between the security areas, the level of entry/exit conditions for the security area, and the like. For security areas that need to be related to each other, the level of the security area with higher security is set to a higher level to create a relationship between high and low security levels. This is done by grouping into mutually related security areas, and assigning the above levels to each group. Therefore, each security area is associated in a tree structure.

FIG. 2 shows a specific example of a tree structure in which security areas are shown in association with each other.

In the figure, for example, it is assumed that six rooms, one room B, and one room C1 warehouse are related, and the areas that are related to each other are grouped into one block. Then, blocks that are related to the entry/exit conditions are connected to one technique, and blocks that are not related to the entry/exit conditions are connected to different techniques, and each block is related in a tree structure. There is.

In the tree structure shown in the figure, there are seven branches, and these techniques are coded 1, 2, 3°, etc. in order from the left.
Let's represent it by 7. In addition, each technique is classified according to the degree of entry/exit conditions, and these classifications are ranked 1, 2, 3, etc. from top to bottom. ..., it is set to 6. Therefore, the block consisting of Department IA, Room B, Room B, Room C, and Warehouse has a code of 5 and a rank of 4.

For each block, the number written above the name of each area represents the number of the entrance/exit terminal provided at the entrance/exit of this area (gate terminal No.). For example, gate terminal N at the entrance to hall A, which is divided into blocks of code 1 and rank 5.

(Number) is 1. Gate terminal numbers are sequentially assigned to the entry/exit terminals in each area.

Further, each block is numbered in order of area. This is the number enclosed in a circle below the area name, and is hereinafter referred to as setting gate N.

That's what it means. For example, the entrance/exit terminal in Hall A has a code 1, a rank 5 block, and a gate number set to ■.

As described above, each area is divided and the relationship between each area is set, but between blocks that are connected to the same technique (same code), the lower the rank, the higher the security, and the lower the rank, the higher the security. This means that the security level of the entry/exit terminal is high.

The user card 3 (FIG. 1), which is the key to the entrance and exit of the area, is also assigned the same level as the classification shown in FIG. For example, when using the user card 3 as the key to the entrance to room A of gate terminal No. 39, this user card 3 has the code 5. Set rank 4 data. As a result, the user card 3 can be used as the key to the entrance to room A, but it can also be used as the key to the entrance to room B, 1 room, and warehouse C2, which are at the same level, and the code 5, which is at a lower level, Rank 5 block, code 5, rank 6
It can also be used as a key for each area of the block.

The above are general functions of user cards, but even if the area is at the same level or a lower level,
It is possible to prohibit the function as a key. In addition, in general, the user card 3 cannot be used as a key for areas of blocks that are connected to other techniques (codes), but depending on the designation on the user card 3, it is not possible to use the user card 3 as a key for areas that are blocks of other codes. can also act as a key to designated areas. These matters will be explained in detail later.

In FIG. 2, only the IC card as a master key is at rank 1, and it is possible to unlock the entrances and exits of all areas. Also, at rank 2 are IC cards that serve as submasters for each code (S key, L key, M key, N key, A key, and Q key).

Next, each card will be explained.

FIG. 3 shows the format of the user card 3 in FIG. 1.

The user card 3 includes an area where data serving as the heading of the card is stored (Fig. 3(a)), a storage area for basic key information (Fig. 3(b)), and a storage area for key information (Fig. 3(b)). (c)), option key information storage area (third
Figure (d)) and history information storage area (Figure 3 (e))
is provided.

First, in the heading storage area (Fig. 3(a)), there is an item 7N.
o, %1 has the business ID of Nagisa who owns this user card 3,
Item N082 stores the expiration date of the business, and items No. 3 store the start date of use of the business. Item No.0
0 item N where 02 is also the expiration date of this user card 3
o, 4 is the level set for this user card 3 (item No.

This is a field for specifying entry/exit terminals for entrances and exits of areas where unlocking is prohibited in blocks with ranks lower than 5 (set in the rank and code field), and a maximum of six terminals can be specified.

In item No. 65, first, the card status for identifying the system card or user card and the issue number of this card are stored. The level of this user card in FIG. 2 is set by the rank and code. The lipid layer override is shown in the i layer information shown in FIG. 3(e). The number of data stored in wI is a specified number (here, 4
This flag is used to instruct whether or not to override, such as deleting one piece of old history information and writing new history information, or prohibiting writing of new history information, when the value exceeds 0 (assumed to be 0). In addition, the number of key information stored in the key information storage area shown in FIG. 3(c) and the number of option key information stored in the option key information storage area shown in FIG. 3(d) are also stored. , When issuing a new user card due to theft, etc., enter the card issue number of the old user card.

is stored as the accident card number.

In addition, in the case of a newly issued user card, by attaching it to the emergency exit terminal, this accident card no.
is registered in this large-leave terminal, and even if the old user card is found, it cannot be used thereafter on this large-leave terminal.

The basic key information storage area shown in FIG. 3(b) has the same code as the code set in item N085 in FIG. Information for is stored. The stored information includes the number of the entrance/exit terminal (gate terminal number), entry/exit classification information indicating whether this large exit terminal is on the entrance or exit side of the area, and unlocking conditions. This information includes the flag, expiration date, and 1 hour period on the start date of use. These are provided for each stored gate terminal number. The unlocking condition flag is a flag that determines whether a PIN code is required for unlocking, whether an expiration date, start date of use, and time zone should be set.
Bits are used. These settings are independent of each other; for example, if the unlocking condition flag specifies that a password is only required, the lock can be unlocked at any time by using the password. Further, assuming that a password and a time period are determined by the unlocking condition flag, the door can be unlocked if the password is used within the set time period. Therefore, using the unlocking condition flag, it is possible to restrict the use of the user card based on the password, expiration date, and time of day. Note that the key usage start date represents the date when this user card is first attached to the terminal.

Among these low-rank entry/exit terminals, for large exit terminals whose use is particularly prohibited, please refer to item N in Figure 3 (a).
Specified by 084.

In the key information storage area shown in FIG. 3(c), the key information storage area shown in FIG.
) The information on the unlockable entry/exit terminal in the block with the same level as the code and rank set in item N005 is stored in the same format as in FIG. 3(b). Entry/exit terminals with the same code and the same rank that are not stored in this area cannot be unlocked with this user card.

In the option key information storage area shown in FIG. 3(d),
Other than the entry/exit terminal with the same code as the code set in item N005 of FIG. 3(a) and below the set rank,
For entry/exit terminals that need to be able to be unlocked at the same time,
Information regarding this large exit terminal is stored as an option key.

The format of this storage area is also the same as that in FIG. 3(b), but the amount of information stored therein is limited, and here,
A maximum of 10 areas are possible.

The numbers of entry/exit terminals stored in the above key information storage area and option key information storage area are shown in FIG. 3(a).
The number of key information items is in item N005.

It is stored as the number of option key information items.

In the history information storage area shown in FIG. 3(e), frJ reports indicating the entry/exit terminals that have been unlocked so far and their dates and times are stored as history information. The information stored includes the gate terminal number of the entry/exit terminal used to unlock the room, whether the large exit terminal is installed on the entrance or exit side of the area, the date of use, and the hour, minute, and second. It is information. There is also a limit to the amount of information that can be stored in this storage area.
It is divided into doses. Every time seven pieces of history information are recorded in this storage area, the history information pointer of item N005 in FIG. 3(a) is designated as a fat layer information recording counter.

Information writing in the areas shown in FIG. 3(a) to (c) of this user card is performed by the host 1 (FIG. 1). Excluding the information pointer <), information writing in the area shown in Figure 3(e), 3rd
Item No. in Figure (a).

Writing of the history information pointer No. 5 is performed when the user card is attached to the room entry/exit terminal and the room is unlocked.

This user card also includes the entry/exit terminal written in the area shown in Figure 3(b) (however, item N in Figure 3(a)
(excluding the entry/exit terminals presented in 4) and the entry/exit terminals written in the areas of Figure 3 (C) and (d) can be used for unlocking. . Thus, for example, if the user card contains the code 5 in FIG.
．． If rank 4 is set, the information in the area shown in Figure 3(b) allows unlocking with code 5 using the entrance/exit terminal in the lower level area of rank 5.6; ) If there is information in item N014, there may be cases in which lower-level areas cannot be unlocked. Also,
Code 5. Even if it is a rank 4 area, Figure 3 (C)
If there is no instruction in the area, the lock cannot be unlocked in that area.Furthermore, if there is option key information in the area shown in Figure 3(d), even if the area has a different code, for example, gate terminal No. 1, hall A. For entry/exit terminals,
It becomes possible to unlock.

FIG. 4 shows the format of the gate card as the system card 2 of FIG.

As described above, this gate card is for transmitting information on the entry/exit conditions for each entry/exit terminal set by the host 1 to each entry/exit terminal. Although this gate card also has a heading area, the area for storing information on entry/exit conditions will be described here.

FIG. 4 shows this area, and information for 50 entry/exit terminals can be stored in this area.The information to be stored includes the gate terminal numbers of the entry/exit terminals,
Entrance/exit side distinction information indicating whether this entry/exit terminal is installed on the entrance side or exit side of the area, and the set gate number of this entrance/exit terminal in the block shown in Figure 1. (■.

■, ...), the code, rank, history overwrite permission flag, rank code management table, and whether or not the above information has been registered in the entry/exit terminal in Figure 1 of this entry/exit terminal. This is the check code shown.

Each entry/exit terminal has a fixed storage capacity for historical information.
For example, let this be 500 items. The history overwrite permission flag is a flag that instructs what to do when the number of stored history information reaches 500 items. For example, when this flag is 1, when the number of stored history information reaches 500 items, new storage information will not be stored, and at the same time, this entry/exit terminal will not be usable. Furthermore, when this flag is O, even if the number of stored history information reaches 500 items, new information can be stored (overwritten) while erasing old information, and a message is also output.

The rank code management table contains the codes of entry/exit terminals of lower ranks relative to the set rank.

This is a table for managing ranks.

When the gate card with the information stored in this way is attached to the entry/exit terminal and the gate terminal number of this entry/exit terminal is input, the information for this gate terminal No. stored in Fig. 4 is read out. Registered on the entry/exit terminal. Then, in the gate card, a check code (FIG. 4) indicates that information has been registered for this gate terminal number.

When this check code indicates that it has been registered, it is no longer possible to read the gate terminal number information for this check code, and as a result, the same gate terminal number is set for multiple entry/exit terminals. This can be prevented. Furthermore, the check code allows checking whether there is any information that has been omitted from registration.

FIG. 5 shows the format of the data card as the system card 2 in FIG.

As explained above, this card is a card for reading the history information stored in the entry/exit terminal and sending it to the host.

This data card has a heading area shown in FIG. 5(a) and a history information storage area shown in FIG. 5(b).

When the data card is attached to the entry/exit terminal, the history information stored therein is sequentially read and sequentially written into the storage area shown in FIG. 5(b). At this time, Fig. 5(a)
In the heading area, the gate terminal number of the entry/exit terminal from which this H layer information is read is written in item No. 013, and when the information reading of this entry/exit terminal is completed, the number of history information read is also written. .

There are limits to the number of subordinate information items that this data card can store and the number of entry/exit terminals, and here, the former is 380 items and the latter is 3 items. Therefore, when the number of stored history information reaches 380, it is no longer possible to write the history information, and even if the number of stored history information does not reach 380, the history information can be read from the three large exit terminals. When “ is done, it is no longer possible to read history information.

If you want to read further historical information, you can either use another data card, or attach the data card to the host, transfer the historical information to the host, clear the contents of this data card, and reuse it. good.

FIG. 6 shows the format of the alarm card as the system card 2 in FIG.

As explained earlier, this card is used to set this information in the entry/exit terminal in the event that the user card is lost, stolen, or otherwise. area, a storage area for the accident card shown in FIG. 6(b), and a registration flag fJM shown in FIG. 6(c).

In the accident card storage area (FIG. 6(b)), for each accident card, the accident card number and the number of entrances and exits in the area that this card can be used to unlock (number of registered gates) are stored. Here, it is assumed that information on a maximum of six accident cards can be stored.

In the area shown in FIG. 6(c), a registration flag is set for each large exit terminal, and the area shown in FIG. 6(b) is equal to the number of accident cards that can be stored (i.e., 6). It is provided. In each area, 999 registration flags from OO1 to OO999 can be set, and each registration flag has a one-to-one correspondence with the gate terminal number of each large exit terminal.

Now, looking at the first registered accident card in Figure 6(b), there are several large exit terminals that this accident card can be used to unlock, and there are some terminals that can be used to unlock the accident card. Set up these large exit terminals. For this purpose, the registration flags corresponding to these large exit terminals in the area shown in FIG. 6(c) are set to 1. Registration flags corresponding to entry/exit terminals other than these entry/exit terminals are 0. In this way, after setting the registration flag for each accident card, when this alarm card is attached to the entry/exit terminal where the accident card can be used, this major exit terminal is determined by the registration flag, and the accident card is is registered. When this registration is completed, the registration flag corresponding to this large exit terminal becomes 2, and at the same time, the contents of the counter in FIG. 6(b) are incremented by 1.

In the same manner, when the accident card is registered in the necessary entry/exit terminal, the registration flag becomes 1-2 and the contents of the counter are incremented. When the contents of this counter match the number of registered gates, this This means that the accident card has been registered in all necessary entry/exit terminals. Therefore, it can be determined whether registration is completed by comparing the contents of the counter and the number of registered gates, and unregistered entry/exit terminals can be confirmed from the registration flag in FIG. 6(C).

Note that even a user card registered as an accident card can be made reusable. In this case, the information of this user card is similarly stored in the area shown in FIG. 6(b), and the registration flag of FIG. 6(c) corresponding to the large exit terminal used by this user card is set to 3. Make it. After the information is registered in the large exit terminal, the corresponding registration flag becomes 2, indicating that the information has been registered.

In addition, a user card that specifies a deadline and cannot be used after this period can be treated as a similar accident card, and if this is registered in the entry/exit terminal,
When this period has elapsed, this user card becomes an accident card and cannot be used at this major exit terminal.

The formatting of the user card and system card has been described above, and now the operation of this embodiment will be described.

(Start-up Process) This process is a process for setting entry/exit conditions for each large exit terminal, and will be explained below with reference to FIG.

First, as explained in FIG. 4, when a gate card on which information on entry/exit conditions is written for each entry/exit terminal is attached to the entry/exit terminal (step 700), the system stored in this gate card A password check is performed (step 701).

This password consists of, for example, a password managed by the manufacturer and a password managed by the person purchasing and using the product. If this password is not correct (step 702), it is determined that the gate card is incorrect and an error message is output (step 71).
1) Eject the card (step 712).

If the password is correct, it is determined whether the card is an accident or not and whether the expiration date has passed (step 703). If the card cannot be used (step 704), an error message is displayed. output and eject the card. If the card is usable, it is determined whether this card is a gate card or another card (step 705), and if it is other than a gate card, an error message is output and the card is ejected. Entry/exit terminals that have not been processed for start-up will not accept anything other than gate cards.

If it is determined that the gate card is correct, a message to input the gate terminal number is output (step 706), and in response to this, the gate terminal number to be set to this large exit terminal is input by keyboard operation. (
Step 707), it is determined whether this gate terminal number is correct or not (step 708). As already explained in the figure, the process returns to step 706 to prompt the user to input the correct gate terminal number (which can be determined using the check code).

When the correct gate terminal number is input, information on the corresponding entry/exit conditions is read from the gate card (FIG. 4) (step 709) and written into the memory of this large exit terminal (step 710).

This completes the setting of entry/exit conditions for this large exit terminal (startup process), and the gate card is ejected (step 712).

The above startup process is performed for each entry/exit terminal. 5
If there are 0 or more entry/exit terminals, after starting up multiple gate cards or 50 large exit terminals, the host will request entry/exit conditions for other entry/exit terminals. All you have to do is read the information and perform the above process again on other large exit terminals.

(Card Processing) This process determines the type of card and performs processing accordingly, and is a process performed during actual use after the start-up process shown in FIG. 7. This process will be explained below with reference to FIG.

In the figure, steps 801 to 806 from inserting the card into the entrance/exit terminal to checking the accident card are similar to steps 700 to 70 in Figure 7 for the previous gate card.
It is the same as 4.

If the inserted card is not an accident card (step 8)
07), the type of card is determined (step 808).

If this card is a user card, proceed to step 809; if this card is a gate card, proceed to step 810;
In the case of an alarm card, the process proceeds to step 811, and in the case of a data card, the process proceeds to step 812, and after predetermined processing is performed, the card is ejected (step 816).

Also, if the installed card is an accident card,
Step 81: Output alarm buzzer and error message
3), the card is destroyed in its contents (step 814).
) is discharged.

(Details of Step 809 in FIG. 8) When it is determined in Step 808 of FIG. 8 that the card is a user card, the process proceeds to Step 809 where user card processing is performed. This processing will be explained below with reference to FIG. 9.

First, it is determined whether the number of historical information stored in the entry/exit terminal has reached the maximum number (500 in the above example) (step 900), and if it has not reached the maximum number, step 902)
If it has been reached, it is determined whether overwriting is possible or not based on the history overwriting permission flag shown in FIG. 4 (step 901).

If override is possible, proceed to step 902;
If override is prohibited, a message is output (step 926) and the card is ejected (step 816 in FIG. 8).

Regarding the user card, the number of history information and whether override is possible or not are determined in the same way (step 902.90).
3).

Next, read rank and code information from the heading area of the user card (FIG. 3(a)) (step 904);
Next, these ranks, codes and gate cards (Figure 4)
Compare the rank and code set for this major exit terminal with step 905), and this major exit terminal is
Does it have the same code and lower rank as the user card (this is called "card dominance"), has the same code and rank as the user card and is called "equivalent to card"), or is it something other than these (this is called "card dominance")? (referred to as "out of card control") is determined (step 906).

In the case of "card control", the main exit terminal of the prohibited lower rank is identified by item No. 4 in the heading area of the user card (FIG. 3(a)) (step 907), and then,
In the basic key information area of the user card (FIG. 3(b)), the unlocking condition flag is processed for major exit terminals other than the entry/exit terminals of the lower rank of prohibition (Step 9).
08).

If it is "equivalent to the card", the key information area (FIG. 3(C)) of the user card is searched (step 909), and if no information is stored there (step 910), step 912 Proceed to. If the key information area stores information on another entry/exit terminal with the same code and rank, the unlocking condition flag for this major exit terminal is processed (step 911).

Additionally, if the card is out of control, or step 910
If the information cannot be found, check the presence or absence of the option key information H6i area (Fig. 3(d)) on the user card (
Step 912). If there is no option key information area, a message is output (step 926) and the card is ejected (step 816 in FIG. 8). Even if there is an option key information area, search this area (step 9
13) Even when information cannot be obtained (step 914), a message is output and the card is ejected. If the information of the entry/exit terminal is found from the option key information area,
The unlocking condition flag for this large exit terminal is processed (step 915).

In steps 908, 911 or 915, the unlocking condition flag is processed, and this flag is used to preempt the locking conditions shown in FIG.
As explained in b) to (d), if the expiration date is set to one hour, etc. (step 916), the basic key information area (Fig. 3(b)) and the key information area (Fig. 3(b)) are set (step 916). C))
Alternatively, it is determined whether or not this user card has been used within one hour within the expiration date set in the option key information area (FIG. 3(d)) (steps 917 to 920).
), and as long as these are satisfied, the process proceeds to the next step 921. If none of the one-hour expiration dates are set by the unlocking condition flag in step 916, the process directly proceeds to step 921.

In step 921, it is determined whether the unlocking condition flag requires the use of a password. If this is not requested, the entrance is unlocked immediately (step 924), but if a PIN is requested, the PIN is input using the keyboard of the exit terminal (step 922). and the password stored in the user card are verified in the user card (step 923), and when they match, the large exit terminal allows the doorway to be unlocked (step 924).

If the two do not match, a message is output and the card is ejected.

After that, in the emergency exit terminal, the history information of the use of this user card is written in the memory, and the history information of the unlocking with this emergency exit terminal is written in the user card. It is written into the information area (FIG. 3(e)) (step 925).

(Details of step 810 in FIG. 8) This step 810 is for changing the main exit condition of the entry/exit terminal using a gate card, and will be explained below with reference to FIG. 10.

The format of the gate card in this case is the same as that shown in FIG.

The gate card stores a PIN number, and when the PIN number is entered into the terminal by keyboard operation (step 1000), this is compared with the PIN read out from the gate card (step 1001). If these do not match, a message is output (step 1005) and the gate card is ejected (step 816 in FIG. 8).

When the above PIN numbers match, the 4th one on the gate card
Search for the gate terminal number set for this entry/exit terminal in the area shown in the figure (step 1002), and if this gate terminal number exists (step 1003), read out the information on the entry/exit conditions for this entry/exit terminal This is rewritten in the memory of the terminal (step 1004), thereby setting new entry/exit conditions in this entry/exit terminal. If this gate terminal number cannot be found through the search, a message is output (step 1005).
) Eject the card (step 816 in Figure 8).

(Details of step 811 in FIG. 8) This step 811 is a process of registering an accident card in the entry/exit terminal using an alarm card, and will be explained below with reference to FIG. 11.

The alarm card also stores the PIN number, and the 10th
The PIN number is verified in the same way as shown in the figure (step 11).
00.1101>, if the passwords match, the entry/exit terminal reads the number of registered accident cards from the heading area of the alarm card (FIG. 6(a)) (step 1102).
, it is determined whether this number is 0 or not (step 1103).

If it is 0, a message is output (step 111).
2) Eject the card (step 816 in Figure 8).

When the number of registered accident cards is not O, read out the accident card number from the area shown in FIG. 6(b) of the alarm card (Step 1104),
Step 1105) Read the registration flag for the entry/exit terminal to which this alarm card is attached from the area c), Determine whether this registration flag is 1, 3, or something else (Step 1106). When the flag is 1, the accident card No. is registered in the entry/exit terminal (Step 1107), and when the registration flag is 3, the registration of the user card as an accident card in the entry/exit terminal is canceled (Step 1108). , the corresponding registration flag in the area shown in FIG. 6(c) on the alarm card is set to 2.

If the registration flag is other than 1 or 3, directly go to step 11.
Proceed to step 10.

After that, the count value N is incremented by 1 (step 1110), and if this value N does not match the number of registered accident cards (step 1111), the next accident card N is incremented.
o is read out and the same process is performed again. When the registration of all accident cards is completed, the cards are ejected.

(Details of step 812 in FIG. 8) This step 812 is a process of reading history information of the entry/exit terminal into a data card, and will be explained below with reference to FIG. 12.

The data card also has a PIN number, and like the previous cards, the PIN number is first verified (steps 1200 and 1201). ), the number of history information and the number of room entry/exit terminals stored therein are read out, and it is determined whether this data card can be used (step 1201). If it is not available, send a message (step 120).
9) Eject the card (step 816 in Figure 8).

Step 1203: If the data card can be used, read the history information stored in this entry/exit terminal.
), written to the data card (step 1204), and the total number of history information written to the data card is 3.
80 (step 1205) and whether all the history information of this entry/exit terminal has been written to the data card (step 1206), and when either of these is satisfied, the number of entry/exit terminals is determined. Increment (
In step 1207), this and the number of history information on the data card are written in the area shown in FIG. 5(a) of this data card. In addition, the gate terminal number of this large exit terminal and the number of history information collected from now on are also written into this data card at the same time.

(Step 1208).

〔Effect of the invention〕

As explained above, according to the present invention, the amount of information can be reduced by only requiring leveling information in the terminal, and there is no restriction on the number of IC cards that can be used. In addition, the judgment process can be performed on the terminal, making offline processing possible. By simply adding a PIN and specified information to the IC card, the IC card can be used without increasing the information on the terminal. Unauthorized use of cards can be prevented, and access to the area can be reliably restricted to only specific people.

[Brief explanation of drawings]

FIG. 1 is a block diagram showing an embodiment of the IC card person exit management system according to the present invention, FIG. 2 is a diagram showing a specific example of a tree structure for dividing areas, and FIG. 3 is a diagram showing the user card in FIG. 1. FIG. 4 is a diagram showing a specific example of the format of the gate card as the system card in FIG. 1, and FIG. 5 is a diagram showing the format of the data card as the system card in FIG. 1. Figure 6 is a diagram showing a specific example of the format of the alarm card as the system card in Figure 1. Figure 7 is the operation for setting the large exit condition of the entry/exit terminal in Figure 1. FIG. 8 is a flowchart showing the operation of using the large exit terminal in FIG. 1, FIG. 9 is a flowchart showing details of the user card processing steps in FIG. 8, and FIG. 11 is a flowchart showing details of the alarm card processing step in FIG. 8; FIG. 12 is a flowchart showing details of the alarm card processing step in FIG.
3 is a flowchart showing details of the data card processing steps in the figure. l... Host for... 2... System card, 3... User card, 4a,
4b・Old・・・・・・Entrance/exit terminal, 5・・・・・・・・・
・Electric lock controller, 6...Electric lock,
7...Auto door controller, 8...
・・・・・・Auto door. Funeral map 21111111” ■

Claims (2)

[Claims] (1) A system in which a terminal device connected to the unlocking means of the entrance/exit is installed at each entrance/exit of each area, and the entrance/exit can be unlocked by attaching an IC card to the terminal,
The areas are divided according to their mutual relationship and security level.
The IC card is divided into a tree structure, and the terminal is leveled according to the division position in the tree structure of the area in which it is installed, and the IC card has a PIN number and can be read at any division position in the tree structure. A level is assigned according to the classification position in association with the terminal, and the level of the terminal and the IC card attached to it are compared, and the PIN number of the IC card and the terminal are input. Corresponding I with PIN number
An IC card entry/exit management system characterized by determining whether or not an entrance/exit can be unlocked based on verification within a C card. (2) In claim (1), designation information of a terminal that requires PIN verification is added to the IC card, and the terminal specified by the designation information performs the level verification and the PIN verification. The IC card entry/exit management system is characterized in that the terminals other than the terminal designated by the designation information perform only the level verification and determine whether each entrance/exit can be unlocked.