The present invention relates to an entry/exit management system and an entry/exit management method.
In recent years, entry/exit management systems installed in offices, commercial buildings, facilities for events, etc. have been capable of achieving a high level of security due to development of information and communication technology and dramatic improvement in performance of electronic devices. This is because various information communication technology and utilization of a large number of electronic devices have been widely spread.
For example, in an entry/exit management system that operates on a worker platform that performs identification (ID) management, a system that determines whether to permit entry using a quick response (QR) code (registered trademark, the same applies hereinafter) has been achieved. In other words, when a QR code is displayed on a worker or visitor's smartphone and presented at a gate at an entrance, the QR code is read. Then, the gate is opened only when the system determines that entry is possible.
Although a QR code is a convenient medium in such an entry/exit management system, a QR code itself has a problem that the QR code is easily copied. For this reason, it is also adopted to create an application that prohibits acquisition of a screenshot of a QR code, but it cannot be prevented that a QR code displayed on another smartphone is directly captured and abused.
Patent Literature 1 describes an access control system that maintains security without using an access card.
A technique described in Patent Literature 1 captures an image of a user standing in front of a door of a room with a monitoring camera, analyzes the captured image, and registers an extracted image of the user in a database. Then, a QR code including a door ID and a user ID registered together with the captured image is generated and sent to a terminal held by the user. As a result, in the access control system, the user effectively uses the terminal carried by the user, so that security is maintained without using an access card.
Patent Literature 1: JP 2020-042374 A
However, face authentication adopted in the access control system described in Patent Literature 1 has a problem that it is difficult to perform an accurate determination in a short period of time due to the influence of brightness/darkness of a photographing environment, glasses, a mask, and a hat of the user, and the like. In other words, in order to perform an accurate determination, it is necessary to install a camera having a high resolution at an appropriate position, capture an image of the user, and use a determination device having high processing performance.
An object of the present invention is to provide an entry/exit management system and an entry/exit management method that maintain security by shortening a period during which a QR code can be imaged by giving time limit information to the QR code and giving the QR code near a gate when giving the QR code to an authentic user.
In order to solve the above problem, for example, configurations described in the claims are adopted.
The present application includes a plurality of means for solving the above problem. As an example, the entry/exit management system of the present invention is an entry/exit management system in which an entering person terminal, a reception server, and an entry/exit management server are connected by a network line.
The entry/exit management system of the present invention includes an input/output unit that receives a request for issuing a two-dimensional code from the entering person terminal and sends the two-dimensional code to the entering person terminal, an employee determination unit that determines that the entering person terminal from which the request for issuing has been made is a terminal operated by an employee when there is the request for issuing the two-dimensional code from the entering person terminal, and a database inquiry unit that makes an inquiry as to whether the employee who has made the request for issuing the two-dimensional code from the entering person terminal is registered in an employee database.
Furthermore, the entry/exit management system of the present invention includes: a right-to-enter determination unit that determines whether the employee who has made the request for issuing the two-dimensional code is an employee registered in the employee database and has a right to enter a facility in response to the inquiry from the database inquiry unit and; and a two-dimensional code generating/issuing unit that generates and issues a two-dimensional code containing time limit information with an expiration date for entry when the right-to-enter determination unit determines that the employee who has made the request for issuing the two-dimensional code from the entering person terminal has the right to enter.
Note that the request for issuing the two-dimensional code from the entering person terminal to the reception server is made when the employee enters a predetermined range of the facility to enter and the employee does not have a valid two-dimensional code.
According to the entry/exit management system of the present invention, it is possible to maintain high security of entry/exit management to the facility by giving time limit information to the QR code and giving near an entrance gate when giving the QR code to an authentic entering person.
Problems, configurations, and effects other than the problem, configurations, and effects described above will be clarified by the following description of embodiments.
Hereinafter, exemplary embodiments (hereinafter, each referred to as “the present example”) related to an entry/exit management system and an entry/exit management method of the present invention will be described in detail with reference to
As illustrated in
The employee server 2 has an employee database 2a, and the visitor server 3 has a visitor database 3a. Note that in
The gate device 4 includes a gate control unit 4a that controls opening and closing of a gate and a QR code reader 4b that reads a QR code. Note that the QR code is a registered trademark of DENSO WAVE INCORPORATED and refers to a two-dimensional code in a matrix format. In the present description or the drawings, the term “QR code” is used as a representative of two-dimensional codes.
In other words, when an entering person such as an employee or a visitor holds a QR code with an entering person terminal 5, the QR code reader 4b reads the QR code and sends the QR code to the gate control unit 4a. In response to this, the gate control unit 4a unlocks the gate to allow the entering person to pass.
The entering person terminal 5 is a terminal such as a smartphone or a tablet held by the employee or the visitor. As will be described later, the QR code is sent to the entering person terminal 5 from the reception server in which the employee server 2 and the visitor server 3 are integrated, and the entering person enters by holding the entering person terminal 5 over the gate device 4.
The determination unit 22 includes an employee determination unit 22a, a visitor determination unit 22b, and a right-to-enter determination unit 22c. The employee determination unit 22a determines whether an entering person who has applied for an issuance of a QR code from the gate device 4 is an employee registered in the employee database 2a.
The visitor determination unit 22b similarly determines whether the entering person who has applied for the issuance of the QR code from the gate device 4 is a visitor registered in the visitor database 3a.
Before issuing a QR code for entry to an entering person who desires to enter a facility (building), the right-to-enter determination unit 22c determines whether the entering person who has made a request for issuing a QR code for entry has a right to enter the facility.
The database selection unit 23 selects either the employee database 2a or the visitor database 3a to which an inquiry is to be made in order to confirm the registration of the entering person who has made the request for issuing the QR code from gate device 4.
The database inquiry unit 24 makes an inquiry for information on the entering person who has made the request for issuing the QR code in the gate device 4 illustrated in
In addition, in a case where there is the request for issuing the QR code from the entering person or the visitor who is an employee, the database inquiry unit 24 makes a request for a QR code value necessary for generating a QR code to the entry/exit management server 1. Note that an expiration date of an issued QR code is added to a QR code value provided from the entry/exit management server 1.
As illustrated in
Meanwhile, in a case where the employee determination unit 22a determines that the inquired employee is not registered, the control unit 21 instructs the QR code generating/issuing unit 25 to send an error code to the entering person terminal (employee terminal) 5.
Similarly, in a case where the database selection unit 23 selects the visitor database 3a, the database inquiry unit 24 searches the visitor database 3a and sends a result of the search to the visitor determination unit 22b. Then, the visitor determination unit 22b determines whether the inquired visitor is a registered visitor. Then, in a case where the visitor determination unit 22b determines that the inquired visitor is a registered visitor, the control unit 21 instructs the QR code generating/issuing unit 25 to generate a QR code and send the QR code to the entering person terminal (visitor terminal) 5.
Meanwhile, in a case where the visitor determination unit 22b determines that the inquired visitor is not registered, the control unit 21 instructs the QR code generating/issuing unit 25 to send an error code to the entering person terminal (visitor terminal) 5.
The Input/output unit 26 receives the request for issuing the QR code from the gate device 4, and outputs a QR code generated by QR code generating/issuing unit 25 to the entering person terminal 5. In addition, the input/output unit 26 outputs an error code to an entering person to whom a QR code cannot be issued. Note that all the functions of the reception server illustrated in
The control unit 31 controls processing of each unit of the entry/exit management server 1. The QR code value generating unit 32 generates a value of a QR code containing time limit information requested from the reception server.
Here, the QR code value is a numerical value necessary for generating the QR code by the QR code generating/issuing unit 25 of the reception server. The input/output unit 33 receives a request for a value of a QR code containing time limit information from the reception server and sends a value of a QR code containing time limit information generated by the QR code value generating unit 32 to the reception server.
As illustrated in
The CPU 41 reads a program code of software for implementing the functions of the reception server and the entry/exit management server from the ROM 42 and executes arithmetic processing. Variables and the like generated during arithmetic processing performed in the reception server and the entry/exit management server are temporarily written to the RAM 43. The CPU 41 implements the functions of the reception server illustrated in
The nonvolatile storage 44 includes a nonvolatile memory such as a solid state drive (SSD). The nonvolatile storage 44 stores programs, data, and the like necessary for the operation of the CPU 41.
In addition, the reception server includes the input/output unit 26, and the entry/exit management server includes the input/output unit 33. The input unit 46 and the output unit 47 in
First, the employee logs in using the entering person terminal 5 (step S1) and selects the facility to enter (step S2).
Then, a request for a QR code is made from the entering person terminal 5 to the reception server (step S3).
In response to the request for the QR code from the entering person terminal 5, the employee determination unit 22a of the reception server determines whether the employee is registered in the employee database 2a (step S4).
When it is determined in step S4 that the employee who has made the request for the QR code is registered in the employee database 2a (YES in step S4), subsequently, the right-to-enter determination unit 22c of the reception server determines whether the employee who has made the request for the QR code has a right to enter (step S5).
When it is determined in step S5 that the employee who has made the request for the QR code has the right to enter (YES in step S5), the reception server makes an inquiry for a QR code value necessary for generating a QR code to the entry/exit management server 1 (step S6).
In response to the inquiry for the QR code value from the reception server, the entry/exit management server 1 generates a QR code value to which time limit information is added and sends the QR code value to the reception server (step S7). Then, the QR code generating/issuing unit 25 of the reception server generates a QR code on the basis of the QR code value sent from the entry/exit management server 1 and sends the QR code to the entering person terminal 5 (step S8).
In step S7, the time limit information is added to the QR code value in order to shorten a use period of the QR code to prevent fraud due to photographing by a camera or the like. In other words, since short-time limit information is added to the QR code used in the entry/exit management system of the present example, it is possible to shorten a period in which the QR code may be copied as much as possible.
Note that in a case where it is determined in step S4 that the employee who has made the request for the QR code is not registered (NO in step S4) and in a case where it is determined in step S5 that the employee who has made the request for the QR code does not have the right to enter (NO in step S5), the reception server sends an error code to the entering person terminal 5.
The entering person terminal 5 to which the QR code has been sent from the reception server in step S8 displays the QR code on a screen of the entering person terminal 5 (step S9). Note that in step S9, the entering person terminal 5 may display the error code sent in the case that determination in steps S4 and S5 is NO. Finally, the entering person terminal 5 logs out (step S10) and ends processing of sending the QR code to the employee.
Although in
As illustrated in
A term defined by a registered registration date and a registered end date in
In other words, it can be seen from
In addition, for an employee 3, entry to both the building A and the building B was registered on Jun. 1, 2012, and it is registered that the entry into the building A ends on Jun. 1, 2025 and the entry into the building B ends on Oct. 31, 2017. For an employee 2 and an employee n, registration dates and end dates of only the building A are registered. The registration date and the end date may also be considered to correspond to a period of a contract in which a company to which each employee belongs occupies as a tenant.
In addition, for a visitor 3, an entry time of 13:00 and a scheduled exit time of 15:00 are registered in the visitor database 3a of the visitor server 3 on Nov. 3, 2020 on which the visitor 3 visited a building C.
Note that the display screen illustrated in
As a result, an expiration date of the QR code to be issued can be further shortened. In other words, since the QR code is issued after the employee or the visitor approaches the facility to enter, for example, a validity period of the QR code can be set to about several hours. Therefore, it is possible to further shorten a period during which fraud such as copying of the QR code can be performed.
First, the employee or the visitor logs in using the entering person terminal 5 (step S11) and selects the facility to enter (step S12). Then, using a GPS function of the entering person terminal 5, the entering person terminal 5 determines whether the logged-in employee or visitor is near the selected facility to enter (step S13).
When it is determined that the logged-in employee or visitor is not near the facility to enter (NO in step S13), processing waits until the employee or visitor comes near the facility to enter. Then, in a case where it is determined that the logged-in employee or visitor is near the facility to enter (YES in step S13), next, the entering person terminal 5 determines whether the logged-in employee or visitor already hold a QR code for entering (step S14).
When it is determined in step S14 that the employee or the visitor already hold the QR code (YES in step S14), the entering person terminal 5 further determines whether a time limit of the QR code is valid (step S15). In other words, it is determined whether the expiration date of the QR code has not passed. Then, in a case where it is determined in step S15 that the expiration date of the QR code has passed (NO in step S15), the entering person terminal 5 makes a request for issuing a QR code to the reception server (step S16).
In step S15, in a case where the QR code held by the employee or the visitor is within the expiration date (YES in step S15), the processing ends without making the QR code issuance request in step S16.
In addition, in a case where it is determined in step S14 that the employee or the visitor does not hold the QR code (NO in step S14), the entering person terminal 5 makes the request for issuing the QR code in step S16 to the reception server.
In step S16, the reception server that has received the request for issuing the QR code from the entering person terminal 5 causes the determination unit 22 to determine the right to enter the facility of the employee or the visitor and performs QR code issuance processing for the employee or the visitor whose right to enter has been confirmed (step S17). Then, the QR code issuance processing when the employee or the visitor comes near the facility to enter ends.
When a visitor needs to enter (enter) a facility (building), the visitor visits an employee of a tenant company having a room in the building in many cases. In such a case, the employee whom the visitor visits registers a date and time of the visit of the visitor in the visitor database 3a in advance. The procedure for issuing a QR code to a visitor illustrated in
First, the employee logs in to his/her entering person terminal 5 (step S21) and makes a request for registering the visitor to the reception server (step S22). When there is the request for registering the visitor from the employee, the reception server performs processing of registration in the visitor database 3a (step S23).
Then, the reception server notifies the employee terminal 5 that the registration of the visitor has been completed (step S24), so that the processing of registering the visitor by the employee ends.
Next, the reception server sends a login code to the entering person terminal (visitor terminal) 5 held by the visitor (step S25). The visitor receives the login code from the reception server, logs in (step S26), and makes a request for issuing a QR code to the reception server (step S27).
Then, the reception server determines whether the visitor who has made the request for issuing the QR code is a visitor (authentic visitor) registered by the employee (step S28). When it is determined in step S28 that the visitor who has made the request for issuing the QR code is not an authentic visitor (NO in step S28), the reception server sends an error code to the visitor terminal 5. In addition, in a case where it is determined in step S28 that the visitor who has made the request for issuing the QR code is an authentic visitor (YES in step S28), the reception server makes an inquiry for a QR code value necessary for generating the QR code to the entry/exit management server 1 (step S29).
In response to the inquiry from the reception server, the entry/exit management server 1 sends a QR code value to which the time limit information is added to the reception server (step S30). The reception server generates a QR code using the QR code value sent from the entry/exit management server 1 (step S31) and sends the QR code to the visitor terminal 5.
The visitor terminal 5 to which the QR code has been sent in step S31 displays the QR code on a screen of the visitor terminal 5 (step S32). Note that, in a case where an error code is sent from the reception server in the case that determination in step S28 is NO, the visitor terminal 5 displays the error code in step S32.
Note that the present invention is not limited to the above-described exemplary embodiments, and includes various modifications. In addition, the above-described embodiments has been described in order to describe the present invention in an easy-to-understand manner, and the present invention is not necessarily limited to ones including all the described configurations, and can be appropriately applied to other configurations.
For example, description has been given on a configuration in which in the entry/exit management system described as the exemplary embodiment of the present invention, a QR code is generated and issued in the reception server. However, the functions of the reception server illustrated in
In addition, since the entry/exit management server 1 and the reception server (the employee server 2 and the visitor server 3) are determined in relation to a tenant company that occupies a facility (building), the two servers are not necessarily required independently. It is also possible to construct all the functions of the entry/exit management server 1 and the reception server (the employee server 2 and the visitor server 3) as a computer system on a cloud. In this case, the entry/exit management server 1 and the reception server (the employee server 2 and the visitor server 3) are recognized as one function on the computer system.
Note that in the block diagrams illustrated in
Filing Document | Filing Date | Country | Kind |
---|---|---|---|
PCT/JP2020/048084 | 12/23/2020 | WO |