JP2008046723A - Manager terminal, management target device, and managing system - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a managing system allowing a manager to simply and automatically use an electronic device and equipment only when being in a room without bothering the manager. <P>SOLUTION: In the managing system, when the manager enters the room 4, a non-contact IC card 3a is put on an IC card reader 9. When management authority information is included in the IC card 3a, use permission information is transmitted to a locker 70 by a personal computer 50. A lock control unit 72 controls the locker 70 to be enabled when the use permission information is received. Accordingly, the lock control unit 72 can automatically control the locker 70 to be disabled only when the manager is in the room 4 without bothering the administrator. <P>COPYRIGHT: (C)2008,JPO&INPIT

Description

  The present invention relates to a management system that manages the use of managed objects such as electronic devices and equipment provided in a room in a facility where entry is managed.

  When an operator uses an electronic device or facility in a predetermined room, it may be a condition that the administrator is in the room from the viewpoint of preventing information leakage. In this case, in order for an operator to use an electronic device or facility, “the administrator who entered the room must make the electronic device or facility available” or “when the operator uses the electronic device or facility, "When the administrator uses the electronic device or facility, the operator receives a medium for making the electronic device or the like available from the administrator, and the operator makes the electronic device or the like available." Is set to a state where the electronic device or the like can be used. Similarly, in order to stop the use of an electronic device or facility, a method such as “the administrator puts the electronic device or facility into a use stop state” is used.

  However, in the conventional method, in order to make an electronic device or facility available or in a suspended state, it is necessary for the administrator himself to deal with it each time. Therefore, when the number of electronic devices and facilities is large, there has been a problem that a great burden is placed on the administrator.

  On the other hand, a security technique using an information storage medium such as an IC card has already been known as a security technique for preventing unauthorized use of a computer by a third party who does not have the use authority. In one example, when a computer is used, identification information is read from an information storage medium such as an IC card in which identification information for authenticating the person in advance is stored, and the person is identified by a matching process based on the read identification information. When authentication is performed and the authentication is established, the computer can be used (see, for example, Patent Documents 1 and 2).

JP 2003-30155 A JP 2004-70542 A

  The present invention has been made in view of the above points, and uses an information storage medium to easily and automatically perform electronic equipment only while the administrator is in the room without bothering the administrator. It is an object of the present invention to provide a management system that can use facilities and facilities.

  One aspect of the present invention is an administrator terminal that manages the use of a management target device installed in a facility using an information storage medium possessed by a user, wherein the administrator terminal An information reading unit that reads information from a storage medium is provided, and is connected to the management target device via a network so that communication is possible. The information storage medium is an administrator according to the user. Management authority information indicating that the administrator terminal reads information from the information storage medium arranged in the information reading unit, and the information read by the information reading means A management determination unit that determines whether or not the authority information is included, and a usage permission that permits the use of the managed device when the management determination unit determines that the management authority information is included. It includes a use permission information transmission means for transmitting the broadcast to the management target device.

  The administrator terminal configured as described above can automatically use the management target apparatus only while a person having management authority is in the facility. Examples of the facility include a building such as a building, its floor, and a room. Examples of devices to be managed include electronic devices such as personal computers and printers, time recorders having an electronic control function, equipment such as cabinets and lockers, and rooms inside buildings. Examples of the administrator terminal include a terminal that can control the usage state of the management target device such as a personal computer. In the facility, the management target device and the administrator terminal are communicably connected via a network such as the Internet. For convenience, a user who uses the administrator terminal and has administrator authority is called an “administrator”, a user who uses the management target device and does not have administrator authority is called an “operator”.

  In this system, a user possesses an information storage medium, and an administrator terminal manages the usage state of the management target device based on information read from the information storage medium. As the information storage medium, a medium capable of reading information, such as an IC chip mounted on an IC card, a mobile phone, or a UIM (User Identity Module), is used. Specifically, in this system, one or a plurality of management target devices and an administrator terminal are provided in the facility. When the manager enters the facility, the manager places an information storage medium owned by the manager in the information reading unit of the manager terminal. Here, the information reading unit is, for example, an IC card reader connected to the administrator terminal. The administrator terminal reads information from the information storage medium arranged in the information reading unit, and determines whether the information includes management authority information that can manage the management target device. When the management authority information is included, the administrator terminal activates the administrator terminal and transmits use permission information to the management target device via the network. The usage permission information is information for requesting that the management target device be made available for use by an operator. When receiving the usage permission information from the administrator terminal via the network, the management target device controls the management target device to be usable by the operator. That is, when the administrator uses an administrator terminal installed in the facility, the management target device is automatically made available for use by the operator. Therefore, the management target device can automatically perform control such that the management target device can be used only when the administrator has entered the facility without bothering the administrator. .

  In one aspect of the administrator terminal, an arrangement determination unit that determines whether or not the information storage medium has been removed from the information reading unit, and a case where the arrangement determination unit determines that the information storage medium has been removed. Use stop information transmitting means for transmitting use stop information for stopping use of the management target device to the management target device. According to this, when the IC card that is the information storage medium is removed from the IC card reader connected to the administrator terminal, the use suspension information is automatically transmitted to the management target device. Therefore, the management target device can be controlled to be in a state where it cannot be used by the operator based on the use stop information. In other words, when the administrator stops using the administrator terminal and leaves the facility, the managed device can be automatically controlled to be in an unusable state without bothering the administrator. .

  In another aspect of the manager terminal, the manager terminal includes a display unit that displays information, and uses a type for identifying the management target device from the management target device and the management target device. Usage status information acquisition means for acquiring user identification information for identifying a user who is present as usage status information, and display means for displaying the usage status information by the display unit. In this case, the management target device stores the identification information of the operator who uses the device in the storage unit or the like in advance. Then, the management target device associates the type for identifying the management target device with the identification information stored in the storage unit and transmits the usage status information at a predetermined timing. The administrator terminal displays the usage status information received from the management target device via the network on the display unit. As a result, the administrator terminal can easily grasp the usage status such as which operator is using which managed device.

  In yet another aspect of the manager terminal, based on the usage status information, based on the usage status information, non-permitted user designating means for designating a user who is not permitted to use the management target device. A non-permitted type designating unit for designating a management target device that is not permitted to be used by a user designated by the non-permitted user designating unit, and a user identification information designated by the non-permitted user designating unit, And a non-permission information transmitting unit that transmits the type of the management target device designated by the non-permission type designation unit to the management target device as non-permission information.

  The administrator terminal configured as described above is based on the usage status information displayed on the display unit, the unauthorized user who cannot use the managed device, and the managed device that cannot be used by the unauthorized user Any non-permitted type that is the type of. Then, the administrator terminal transmits information regarding the unauthorized user and the unauthorized type as unauthorized information to the managed device via the network. Based on the received non-permission information, the management target device controls the management target device so that it cannot be used when a non-permitted user attempts to use a non-permission type management target device. In other words, even if the management target device has received the usage permission information in advance and is already in a usable state, if the unauthorized user decides to use the management target device of the unauthorized type, Control the managed device so that it cannot be used. This makes it possible to limit the use of the management target device by an operator arbitrarily designated by the administrator. Therefore, for example, by restricting use to an operator who uses the management target device for a long time, it is possible to indirectly issue a warning or prevent unauthorized use.

  In another aspect of the present invention, the management target device is installed in a facility and is managed by an administrator terminal used by an administrator having management authority. The management target device is connected to the administrator via a network. A terminal that is communicably connected to the terminal, and uses permission information receiving means for receiving, from the administrator terminal, permission information for permitting the use of the management target apparatus; and the use of the management target apparatus from the administrator terminal. The use suspension information receiving means for receiving the use suspension information for stopping the use, and the use permission information receiving means for controlling the device to be usable when the use permission information is received and receiving the use suspension information. Control means for controlling the management target device to be unavailable when the means receives the use suspension information.

  In the management target device configured as described above, when the manager enters the facility, the manager places an information storage medium owned by the manager in the information reading unit of the manager terminal. The administrator terminal reads information from the information storage medium arranged in the information reading unit, and determines whether the information includes management authority information that can manage the management target device. When the management authority information is included, the administrator terminal activates the administrator terminal and transmits use permission information to the management target device via the network. When receiving the usage permission information from the administrator terminal via the network, the management target device controls the management target device to be usable by the operator. That is, when the administrator uses an administrator terminal that is installed after entering the facility, the management target device automatically becomes available for use by the operator.

  In addition, when the information storage medium is removed from the information reading unit, the administrator terminal transmits use suspension information to the management target apparatus via the network. When receiving the use stop information from the administrator terminal via the network, the management target device controls the management target device so that it cannot be used by the operator. In other words, when the administrator leaves the manager terminal and leaves the facility, the management target device automatically becomes unusable by the operator. Therefore, using the information storage medium, the management target apparatus can be automatically used only while the administrator is in the facility, without bothering the administrator.

  In one aspect of the management target device, the user possesses an information storage medium having identification information for identifying each user, and the management target device reads information from the information storage medium. Information reading means for reading information from the information storage medium arranged in the information reading unit, identification information specifying means for specifying identification information included in the information read by the information reading means, and the identification information specifying means Usage status information transmitting means for transmitting the identification information identified by the management device and the type for identifying the management target device as usage status information to the administrator terminal. According to this, the management target device specifies identification information for identifying the operator based on information included in the information storage medium possessed by the operator. Then, the management target device transmits the identified identification information and the type for identifying the management target device as usage status information to the administrator terminal via the network. Based on the usage status information, the administrator terminal can easily grasp which operator is using which managed device.

  In another aspect of the management target device, identification information of a user who is not permitted to use the management target device and a type of the management target device that is not permitted to be used by the user from the administrator terminal. Whether or not the identification information specified by the identification information specifying means matches the identification information included in the non-permission information received by the non-permission information receiving means. Non-permitted user determination means for determining whether or not the type of the device to be managed and the type included in the non-permission information received by the non-permission information receiving means match. Means for disposing an information storage medium possessed by the user in the information reading unit when both of the non-permitted user determination unit and the non-permission type determination unit match. Has been It is controlled to be unavailable to the managed device.

  In the management target device configured as described above, the administrator terminal includes a non-permitted user who cannot use the management target device, and a non-permission type that is a type of the management target device that cannot be used by the non-permitted user. Is specified arbitrarily. Then, the administrator terminal transmits information regarding the unauthorized user and the unauthorized type as unauthorized information to the managed device via the network. Based on the received non-permission information, the management target device controls the management target device so that it cannot be used when a non-permitted user attempts to use a non-permission type management target device. In other words, even if the management target device has received the usage permission information in advance and is already in a usable state, if the unauthorized user decides to use the management target device of the unauthorized type, Control the managed device so that it cannot be used. This makes it possible to limit the use of the management target device by an operator arbitrarily designated by the administrator. Therefore, for example, by restricting use to an operator who uses the management target device for a long time, it is possible to indirectly issue a warning or prevent unauthorized use.

  In another aspect of the present invention, management that uses an information storage medium possessed by a user to manage the use of a management target device installed in a facility by an administrator terminal used by an administrator having management authority The management system is configured such that the administrator terminal and the management target device are communicably connected via a network, and the information storage medium is managed by the user according to the user. Management authority information indicating that the user is an administrator, and the administrator terminal reads information from the information storage medium arranged in the information reading unit, and information read by the information reading unit Management determining means for determining whether or not the management authority information is included, and when the management determining means determines that the management authority information is included, use of the management target device Usage permission information transmitting means for transmitting the permitted usage permission information to the management target device, wherein the management target device receives the usage permission information from the administrator terminal, and Control means for controlling the management target device to be usable when the use permission information receiving means receives the use permission information. According to this, using the information storage medium, the management target device can be automatically used only while the administrator is in the facility, without bothering the administrator. .

  In one aspect of the management system, the manager terminal determines whether the information storage medium has been removed from the information reading unit, and whether the information storage medium has been removed by the placement determination means. A utilization suspension information transmitting means for transmitting utilization suspension information for halting utilization of the management target device to the management target device when determined, the management target device from the administrator terminal, The system further comprises usage suspension information receiving means for receiving usage suspension information, and the control means controls the device to be managed to be unavailable when the usage suspension information receiving means receives the usage suspension information. According to this, when the administrator stops using the administrator terminal and leaves the facility, the managed device automatically controls the device so that it cannot be used without bothering the administrator. be able to.

  In another aspect of the management system, the user possesses an information storage medium having identification information for identifying each user, and the administrator terminal includes a display unit for displaying information, and the management Usage status information acquisition means for acquiring, as usage status information, a type for identifying the management target device and user identification information for identifying a user who is using the management target device from the target device, and the display unit Display means for displaying the usage status information, and the managed device reads information from the information storage medium and information from the information storage medium arranged in the information reading section. Information reading means to be read; identification information specifying means for specifying identification information included in information read by the information reading means; identification information specified by the identification information specifying means; , The usage information transmitting means for transmitting to said manager terminal and type as the usage status information identifies a further comprises a. According to this, the administrator can easily grasp which operator is using which managed device based on the usage status information displayed on the administrator terminal.

  In still another aspect of the management system, the manager terminal is based on the usage status information, and a non-permitted user designation unit that designates a user who is not permitted to use the management target device; Based on usage status information, a non-permitted type designation unit that designates a management target device that is not permitted to be used by a user designated by the non-permitted user designation unit, and a use designated by the non-permitted user designation unit A non-permission information transmitting unit that transmits to the management target device as non-permission information the identification information of the user and the type of the management target device specified by the non-permission type specifying unit, Included in the non-permission information receiving means received as the non-permission information from the administrator terminal, the identification information specified by the identification information specifying means, and the non-permission information received by the non-permission information receiving means Non-permitted user determination means for determining whether or not the identification information matches, whether or not the type of the managed device matches the type included in the non-permission information received by the non-permission information reception means A non-permission type determination unit that determines whether or not the control unit determines that both of the non-permission user determination unit and the non-permission type determination unit match. While the information storage medium possessed by the user is arranged, the management target device is controlled so that it cannot be used. According to this, it becomes possible to restrict the use of the management target apparatus by an operator arbitrarily designated by the administrator.

  In another aspect of the present invention, a program executed by a computer that manages the use of a management target device installed in a facility using an information storage medium possessed by a user, wherein the computer includes the computer An information reading unit that reads information from an information storage medium is provided, and is connected to the management target device via a network so that the information storage medium can communicate with the management target device. Management authority information indicating that there is information, and the program reads information from the information storage medium arranged in the information reading unit, information read by the information reading means, the management authority information Management determination means for determining whether or not the management authority information is included by the management determination means, the management target device Use permission information transmitting means for transmitting the use permission information for permitting the use to the management target device, as to function the computer.

  By executing the above program by a computer, the above-described administrator terminal can be realized. Moreover, each aspect of the above-described administrator terminal can be realized in the same manner.

  According to still another aspect of the present invention, there is provided a program executed by a computer that is installed in a facility and managed by an administrator terminal used by an administrator who has management authority. It is connected so as to be communicable with an administrator terminal, usage permission information receiving means for receiving usage permission information permitting the use of the computer from the administrator terminal, and stopping the use of the computer from the administrator terminal Usage suspension information receiving means for receiving usage suspension information, control is made so that the computer can be used when the usage permission information receiving means receives usage permission information, and the usage suspension information receiving means The computer is used as a control means for controlling the computer so that it cannot be used when received. Make.

  By executing the above program by a computer, the above-described managed device can be realized. Moreover, each aspect of the above-described management target device can be realized in the same manner.

  According to the present invention, it is possible to use an electronic device and equipment automatically and simply while the administrator is in the room, without using the information storage medium, and without bothering the administrator.

  Preferred embodiments of the present invention will be described below with reference to the drawings.

  The present invention uses an information storage medium to manage the use of a management target device provided in a facility without bothering an administrator. Here, the information storage medium is, for example, an IC chip or UIM (User Identity Module) mounted on an IC card, a mobile phone, or the like. In this embodiment, an IC card is used.

  FIG. 1 shows an outline of a management system that manages the use of electronic devices in the present embodiment. The facility in the present invention includes, for example, a room, a building, a floor in a building, a specific place, a specific area, a specific area, a specific area, and the like. In the description of the present embodiment, an electronic apparatus is given as an example. Describe the room equipped with.

  The locker 70, which is an electronic device provided in the room 4, can be used by the operator 2 only while the administrator 1 having the authority to manage the electronic device is present in the room. Specifically, a personal computer 50 is installed in the room 4 as an administrator terminal used by the administrator 1, and the operator 2 uses the locker 70 only while the administrator 1 is using the personal computer 50. can do. The personal computer 50 and the locker 70 are communicably connected via a network 60 such as the Internet.

  The manager 1 has the right to enter the room 4 and the right to manage the locker 70, and has a non-contact IC card 3a that is an information storage medium. On the other hand, the operator 2 has the right to enter the room 4 and has a non-contact IC card 3b which is an information storage medium. The non-contact IC card 3 includes both the non-contact IC cards 3a and 3b.

  An entrance management device 6 is provided in the vicinity of the entrance 5a of the room 4. The entrance management device 6 controls the open / close state of the automatic door 7 provided at the entrance 5a. The room entrance management device 6 is configured to be able to transmit information wirelessly to and from the non-contact IC card 3 and can read information stored in the non-contact IC card 3. Further, an exit management device 10 is provided in the vicinity of the outlet 5b of the room 4, and the open / close state of the automatic door 7 is controlled by the exit management device 10. Further, the leaving management apparatus 10 is configured to be able to transmit information wirelessly to and from the non-contact IC card 3 and can read information stored in the non-contact IC card 3. That is, in this embodiment, the non-contact IC card 3 is used as access control for entering and leaving the room.

  In addition, there are a case where the entrance 5a and the exit 5b are separately provided in the room 4, and a case where the entrance 5a and the exit 5b are combined as one entrance, but FIG. 1 shows a case where one entrance is used. It is shown. Further, the entrance / exit management device 6 and the exit management device 10 may be integrated into a single unit, and may be provided on a part of the wall separating the outside and the inside of the room. Here, the entrance / exit management device is, for example, an IC card reader or an IC card reader / writer that can read information from the non-contact IC card 3.

  Further, as shown in the figure, the personal computer 50 that is an administrator terminal used by the administrator and the locker 70 that is a management target device managed by the administrator are provided with an IC card reader 9 and an IC card reader 79, respectively. . The IC card reader 9 and the IC card reader 79 can read information from the non-contact IC card 3 similarly to the entrance / exit management device.

  For example, as shown in FIGS. 2 to 4, the non-contact IC card 3 as an information storage medium has a configuration in which a non-contact IC tag 8 is built in card bases 30 and 31. The non-contact IC tag 8 is also referred to as, for example, a non-contact data carrier or RFID, and as shown in FIG. 4, a transmission / reception unit 88 formed of a coil pattern is formed on a base material 81 such as plastic. The non-contact IC tag 8 receives and transmits a radio wave having a constant frequency by forming a resonance circuit with a coil and a capacitive element. As another method, power transmission and data transmission may be performed by electromagnetic induction of a carrier wave from a reader / writer. Generally, a frequency band of 135 kHz (medium wave), 13.56 MHz, and 2.45 GHz (microwave) is used.

  In the case of the illustrated example, the transmitting / receiving unit 88 formed of a coil pattern forms a jumping circuit on the back surface of the base material 81 by the conductive member 84 and is connected to the bumps on the back surface of the IC chip 82 by the coil connection terminals 88C. The IC chip 82 includes a control unit 89 that is a CPU and a storage unit 90 that is a memory.

  In the illustrated example, the capacitive element is built in the IC chip 82. Such a non-contact IC tag 8 is formed by forming a coil pattern by photo etching or etching after resist printing on a metal foil such as an aluminum foil laminated on a resin base material, mounting an IC chip 82, and for protection. It is formed by providing a coating. The size can also be set to about 30 mm × 30 mm or less.

  As the resin base material 81 used for the non-contact IC tag 8, various materials such as PET, polypropylene, polyethylene, polystyrene, and nylon can be used, and paper may be used. Although thickness can be 15-300 micrometers, 20-100 micrometers is more preferable from points, such as intensity | strength, workability | operativity, and cost. Although copper foil, aluminum foil, or iron foil can be used as the metal foil, aluminum foil is preferable from the viewpoint of cost and workability, and the thickness is preferably about 6 to 50 μm.

  In reading and writing information recorded on these non-contact IC tags 8, a calling signal that resonates from the IC card reader 9 to the non-contact IC tag 8 is transmitted, and non-contact is performed at a distance of several centimeters to tens of centimeters. The response signal from the contact IC tag 8 is read. Thereby, the information recorded in the memory which is a memory | storage part of IC chip 82 of the non-contact IC tag 8 can be read, or information can be written. In addition, ID information (identification information) for authenticating the person himself / herself is registered in advance in a memory that is a storage unit of the IC chip 82.

  Next, the system configuration will be described in detail with reference to the functional block diagram of FIG. FIG. 5 shows a system configuration including a non-contact IC card 3, an entrance / exit management device, an IC card reader 9, a personal computer 50, an IC card reader 79, and a locker 70.

  The entry / exit management device in the block diagram of FIG. 5 is an apparatus in which the entrance management device 6 and the exit management device 10 in FIG. 1 are integrated.

  The entrance / exit management device provided in the vicinity of the entrance / exit 5 includes a transmission / reception unit 11, an authority determination unit 12, a door opening / closing unit 13, a storage unit 14, and a control unit 15. Each unit is controlled by the control unit 15.

  The transmission / reception unit 11 transmits and receives information wirelessly with the transmission / reception unit 88 of the non-contact IC card 3.

  Based on the identification information received from the non-contact IC card 3 at the time of entry / exit and the authority table stored in the storage unit 14 in advance, the authority determination unit 12 can enter the room. It is determined whether the user has authority.

  Here, the authority table stored in the storage unit 14 will be described with reference to FIG. FIG. 6 is a diagram schematically showing the data structure of the authority table. In the present embodiment, the contactless IC card 3 includes an employee ID as identification information.

  As shown in the figure, the authority table is composed of items of employee ID, room entry authority, and management authority. The employee ID is information for identifying each user such as an administrator or an operator. The entry authority is an authority to enter the room 4, and a circle (◯) is stored in the entry authority item corresponding to the employee ID having the entry authority in the authority table. The management authority is an authority that can use the personal computer 50 that is an administrator terminal in the room 4 and can manage the locker 70 that is a management target device. A circle (○) is stored in the management authority item corresponding to. The operator can use the locker 70 only while an administrator having management authority is using the personal computer 50 installed in the room 4. The authority determination unit 12 refers to the authority table based on the identification information read from the non-contact IC card, that is, the employee ID, to determine whether the person who owns the non-contact IC card has the right to enter the room. It can be easily determined.

  When it is determined by the processing by the authority determining unit 12 that the person who has the non-contact IC card 3 has the authority to enter the room when entering or leaving the door, the door opening / closing unit 13 opens the automatic door 7.

  The personal computer 50 includes a display unit 21, a management determination unit 22, a command information transmission unit 23, a storage unit 24, an input unit 25, an interface (I / F) 26, a control unit 27, a card determination unit 28, and a communication unit 29. ing. Each unit is controlled by the control unit 27.

  The management determination unit 22 transmits a signal from the IC card reader 9 to the non-contact IC card 3. In this way, the information stored in the storage unit 90 of the non-contact IC card 3 is read and the employee ID included in the information is specified. Then, the management determination unit 22 refers to the authority table as shown in FIG. 6 stored in advance in the storage unit 24 based on the identified employee ID, so that the person who owns the non-contact IC card 3 can manage the authority. It is determined whether or not it has.

  Further, when the management determination unit 22 determines that the person who has the non-contact IC card 3 has the management authority, the management determination unit 22 releases the lock of the personal computer 50 and controls it to be usable. That is, the personal computer 50 can be activated. On the other hand, the management determination unit 22 does not unlock the personal computer 50 when it is determined that the person who owns the non-contact IC card 3 does not have management authority. Therefore, a person who does not have management authority, that is, a person other than the administrator cannot use the personal computer 50. Further, the management determination unit 22 locks the personal computer 50 and controls it to an unusable state when the card determination unit 28 described later determines that the non-contact IC card 3 has been removed from the IC card reader 9. . That is, the personal computer 50 is stopped or the screen is locked.

  The card determination unit 28 determines whether or not the non-contact IC card 3 has been removed from the IC card reader 9.

  When the management determination unit 22 determines that the person who owns the non-contact IC card 3 placed on the IC card reader 9 has the management authority, the command information transmission unit 23 receives the locker via the communication unit 29. Use permission information is transmitted to 70. The usage permission information is information for requesting that the locker 70 be used by all operators.

  The command information transmitting unit 23 transmits use stop information to the locker 70 via the communication unit 29 when the card determining unit 28 determines that the non-contact IC card 3 has been removed from the IC card reader 9. To do. The use stop information is information for requesting that the locker 70 be made unavailable to all operators.

  The locker 70 includes an operator determination unit 71, a lock control unit 72, an interface (I / F) 73, a storage unit 74, a communication unit 75, and a control unit 76. Each unit is controlled by the control unit 76.

  The operator determination unit 71 transmits a signal from the IC card reader 79 to the non-contact IC card 3. In this way, the information stored in the storage unit 90 of the non-contact IC card 3 is read and the employee ID included in the information is specified. Then, the operator determination unit 71 refers to the authority table as shown in FIG. 6 stored in advance in the storage unit 74 based on the identified employee ID, so that the person who possesses the non-contact IC card 3 can enter the room. It is determined again whether or not the operator has

  In the present embodiment, the operator determination unit 71 determines again whether or not the person who possesses the non-contact IC card 3 is an operator having the authority to enter the room, but the present invention is not limited to this. is not. For example, the authority table includes information on an operator who has the authority to use the locker 70. By referring to the authority table based on the employee ID, whether the person who owns the non-contact IC card 3 has the authority to use. It is good also as determining. That is, the operator determination unit 71 performs predetermined authentication related to the user based on information read from the non-contact IC card 3 by the IC card reader 79.

  When receiving the use permission information from the personal computer 50 via the communication unit 75, the lock control unit 72 releases the lock of the locker 70 and controls it to be usable. Further, when the use control information is received from the personal computer 50 via the communication unit 75, the lock control unit 72 locks the locker 70 and controls it so that it cannot be used.

  The lock control unit 72 may lock the locker 70 and control the locker 70 so that it cannot be used even if the use permission information is received when there is a problem with the authentication by the operator determination unit 71. .

  In the present embodiment having the above configuration, the room 4 corresponds to a facility. The personal computer 50 functions as an administrator terminal, and the locker 70 functions as a management target device. The IC card reader corresponds to an information reading unit.

  Next, the use permission process by the above management system will be described with reference to FIG. FIG. 7 is a flowchart of the use permission process.

  When entering the room 4 which is a facility where entry is managed, the manager or operator who is a user enters the room 4 from the entrance of the room 4 so that the non-contact IC card 3 which is an information storage medium is entered / exited. Move closer to. At this time, the entrance / exit management device reads the employee ID stored in the storage unit 90 of the non-contact IC card 3. The authority determination unit 12 of the entry / exit management device allows the person who has the non-contact IC card 3 to enter the room based on the read employee ID and the authority table registered in advance in the storage unit 14 of the entry / exit management device. It is determined whether the user has authority. When the user has authority to enter the room, the automatic door 7 is opened by the door opening / closing unit 13 and the room 4 can be entered. On the other hand, when the user does not have the authority to enter the room, the automatic door 7 is not opened by the door opening / closing unit 13 and the room 4 cannot be entered.

  When entering the room 4, the manager places his / her non-contact IC card 3a in the IC card reader 9 of the personal computer 50 which is the manager terminal. At this time, the personal computer 50 reads the employee ID stored in the storage unit 90 of the non-contact IC card 3a (step S1). Specifically, the personal computer 50 specifies an employee ID based on information stored in the storage unit 90. Based on the read employee ID and the authority table registered in advance in the storage unit 24, the management determination unit 22 of the personal computer 50 determines whether the person who owns the non-contact IC card 3a has the management authority. (Step S2).

  When it is determined that the user does not have management authority (step S2; No), the management determination unit 22 does not unlock the personal computer 50 and leaves it unusable, and ends the use permission process. . That is, a person who does not have management authority cannot use the personal computer 50. On the other hand, when it determines with having a management authority (step S2; Yes), the management determination part 22 cancels | releases the lock | rock of the personal computer 50, and controls it in a usable state (step S3). Moreover, the command information transmission part 23 transmits utilization permission information to the locker 70 via the communication part 29 (step S4).

  The locker 70 receives use permission information from the personal computer 50 via the communication unit 75 (step S5). Then, the lock control unit 72 releases the lock of the locker 70 and controls it to be usable (step S6). Thereby, the use permission process is completed.

  According to this, the locker 70 becomes automatically available when the administrator uses the personal computer 50. That is, the locker 70 can be automatically used without any special measures or measures, so that the burden on the administrator can be reduced.

  Next, use stop processing by the above-described management system will be described with reference to FIG. FIG. 8 is a flowchart of the usage stop process.

  When the administrator leaves the room 4, the administrator removes his / her non-contact IC card 3 a from the IC card reader 9 in order to prevent a third party from using the personal computer 50 as the administrator terminal. Then, the manager holds the non-contact IC card 3a over the entrance / exit management device and leaves the room 4.

  The card determination unit 28 of the personal computer 50 always determines whether or not the non-contact IC card 3 has been removed from the IC card reader 9 (step S11). When the card determination unit 28 determines that the non-contact IC card 3 has been removed from the IC card reader 9 (step S11; Yes), the management determination unit 22 locks the personal computer 50 and cannot be used. (Step S12). According to this, the personal computer 50 is automatically in a screen-locked state and can prevent unauthorized use by a third party. Furthermore, when the card determination unit 28 determines that the non-contact IC card 3 has been removed from the IC card reader 9 (step S11; Yes), the command information transmission unit 23 uses the locker 70 via the communication unit 29. Send stop information. (Step S13).

  The locker 70 receives use stop information from the personal computer 50 through the communication unit 75 (step S14). Then, the lock control unit 72 locks the locker 70 and controls it so that it cannot be used (step S14). Thereby, the use suspension process is completed.

  According to this, the locker 70 automatically becomes unusable when the administrator leaves the personal computer 50. That is, the locker 70 automatically becomes unusable without taking any special measures or measures, so that the burden on the administrator can be reduced. Moreover, since the personal computer 50 becomes unusable when the administrator removes his / her non-contact IC card 3a from the reader / writer 9, it prevents unauthorized use of the personal computer 50 and unauthorized use of the locker 70 by a third party. be able to.

  When the manager returns to the room 4, the PC 50 can be easily unlocked and used by placing the non-contact IC card 3a on the IC card reader / writer 9 of the PC 50 as the manager terminal. Can be in a state. Furthermore, by releasing the lock of the personal computer 50 and making it usable, the lock of the locker 70 is released, and all the operators can use the locker 70 automatically and easily.

  In the present embodiment, the non-contact IC card 3 is used, but the present invention is not limited to this, and a mobile phone equipped with an information storage medium may be used. In other words, in the present invention, any general storage medium can be applied as long as it can be used for access control of entrance / exit and for authentication of the administrator terminal and the management target device.

  Further, in this embodiment, the non-contact IC card 3 has only identification information, and the entrance / exit management device, the personal computer 50 and the locker 70 refer to the authority table based on the read identification information, thereby entering the room. The presence or absence of authority and / or management authority is determined. However, the present invention is not limited to this, and the non-contact IC card 3 may have information indicating presence / absence of entry authority and / or management authority. Specifically, the contactless IC card 3a possessed by the manager includes information (flags, etc.) indicating that there is authority to enter the room and management, and the contactless IC card 3b possessed by the operator Information indicating that the user has authority is included. In this case, the entrance / exit management device, the personal computer 50, and the locker 70 do not need to register an authority table in advance, and determine whether there is an entrance authority and management authority based on information read from the non-contact IC card.

  In the present embodiment, the data structure of the authority table is as shown in FIG. 6, but the present invention is not limited to this, and the room entry authority is based on the identification information read from the non-contact IC card 3. If the presence or absence of management authority can be determined, the data structure can be arbitrarily set. Furthermore, the authority table memorize | stored in the memory | storage part 14 of the entrance / exit management apparatus and the memory | storage part 75 of the locker 70 should just be a table which can determine whether it has room entry authority.

  Further, in the present embodiment, a personal computer is used as an example of the administrator terminal. However, the present invention is not limited to this, and the main controller device may have any function as shown in FIG. It can be applied to any electronic device or facility used by an administrator, such as a locker or a locker. Furthermore, in the present embodiment, a locker is described as an example of a management target device, but the present invention is not limited to this, and can be applied to any electronic device or facility such as a printer or a personal computer.

  In the present embodiment, the personal computer 50 as the administrator terminal transmits command information such as use permission information and / or use stop information, and the locker 70 as the management target device performs lock control based on the command information. . However, the present invention is not limited to this, and the personal computer 50 and the locker 70 are connected to the server via the network 60, and the server determines the usage status of the personal computer 50 and controls the lock of the locker 70. It is good also as performing. In other words, the server may determine the usage status of the administrator terminal and perform lock control of the management target device. In this way, by using the server as a component of the management system, it is possible to apply various electronic devices and equipment that cannot be locked by themselves as management target devices.

[First modification]
Although not described in the above embodiment, the administrator can recognize the usage status of the management target device by the operator through the administrator terminal. Further, based on the usage status, for example, an unpermitted setting such that a specific management target device cannot be used can be performed for an operator who uses the management target device too much.

  In the first modification, it is assumed that the management target device is not only a locker but also a plurality of electronic devices such as a copier and a printer. The information for identifying each managed device is “type”.

  In the first modified example, each managed device stores the employee ID of the operator specified by the operator determination unit and the number of times of use by the operator in the storage unit. Then, the management target device associates the employee ID and the number of uses stored in the storage unit with each other through the communication unit at a predetermined timing, and transmits the correspondence to the administrator terminal as usage status information. At this time, each managed device may include information indicating whether or not the operator is currently using the usage status information.

  Here, the predetermined timing is, for example, when the management target apparatus receives a signal requesting usage status information from the administrator terminal.

  The administrator terminal displays usage status information received from each managed device on a screen or the like as shown in FIG. FIG. 9 is an example of a usage status table displayed on a screen or the like based on usage status information. As shown in the figure, in the usage status table, the vertical axis indicates the type of the management target device and the horizontal axis indicates the employee ID, and stores whether the box is in use and the number of times it is used. When not in use but already in use, only the number of uses is stored in the box.

  For example, the operator with the employee ID “A01” is using the printer, and the number of uses is two. Further, the operator with the employee ID “A02” is not using the printer, but has already used it, and the number of uses is five. The operator with the employee ID “A03” has never used the printer. As described above, based on the usage status table, the administrator can easily grasp which operator is using which management target device in the room 4 and how much.

  In addition, the administrator uses the administrator terminal to specify a non-permitted user whose use is not permitted and a management target device whose use is not permitted. The device can be set not to be used. Such a setting is called “non-permitted setting”.

  Specifically, the administrator can perform the disapproval setting by operating the administrator terminal and specifying a box in the usage status table displayed on the screen or the like. As shown in FIG. 9B, a large cross (x) is displayed in the box designated by the administrator. This box corresponds to the operator of the employee ID “A02” and the type “copy machine”. Therefore, the administrator designates the operator with the employee ID “A02” as an unauthorized user and designates the type “copy machine” as an unauthorized type.

  When the disapproval setting is performed, the administrator terminal uses the employee ID of the operator specified as the disallowed user and the type of the management target device specified in the disapproval type as disapproval information via the communication unit. Send to the managed device. The managed device receives non-permission information from the administrator terminal via the communication unit and stores it in the storage unit. And, if the management target device is based on the non-permission information and the operator who is the non-permission user tries to use the management target device that is the non-permission type, even if the usage permission information is received, Control to unavailable state.

  Here, the non-permission execution process by the management system of the first modification will be described with reference to FIG. FIG. 10 is a flowchart of the non-permission execution process.

  The operator places his / her non-contact IC card 3b on the IC card reader of the managed device. At this time, the management target device reads the employee ID stored in the storage unit 90 of the non-contact IC card 3b (step S31). The operator determination unit of the management target device determines whether or not the read employee ID matches the employee ID of the unauthorized user based on the unauthorized information stored in the storage unit (step S32). If they do not match (step S32; No), the disapproval execution process ends. On the other hand, if they match (step S32; Yes), the operator determination unit specifies that the operator is an unauthorized user.

  When the operator is identified as a non-permitted user, the operator determination unit further determines that the type of the management target device is associated with the non-permitted user of the read employee ID based on the non-permission information. Is determined (step S33). If they do not match (step S33; No), the non-permission execution process ends. On the other hand, when they match (step S33; Yes), the operator determination unit specifies that the operator who is an unauthorized user intends to use the management target device of the corresponding unauthorized type. Therefore, the lock control unit locks the management target device, and controls so that an operator who is an unauthorized user cannot use the management target device (step S34). Thereby, the unauthorized execution process is completed.

  If it is determined in steps S32 and S33 that they do not match, the unauthorized execution process ends, assuming that the unauthorized user does not execute the non-permitted type management target device. At this time, if the management target device receives the use permission information, the operator can use the management target device. When the operator uses the managed device, the management unit stores the employee ID and the number of times of use of the operator in the storage unit. Based on the employee ID and the usage count stored in this way, the above-described usage status information is created.

  In the first modification, the management target device also has a card determination unit similar to the card determination unit 28 in the embodiment. Specifically, when the usage permission information is received, if the card determination unit of the management target device determines that the non-contact IC card 3b possessed by the unauthorized user has been removed from the IC card reader, the lock control unit Releases the lock of the device to be managed and controls it to be usable again.

  Further, in the usage status table in the first modification, a box in which the employee ID of the operator who has been used for a long time intersects with the type or a box in which the type of the employee ID of the operator who has been used many times intersects is used as a warning. It may be displayed in red or blinking. The usage status table is not limited to that shown in FIG. 9, and items and the like can be arbitrarily set as long as the administrator can grasp the usage status. Furthermore, the usage status information that is the basis of the usage status table may be stored in the storage unit as a log.

  As described above, according to the first modification, the administrator can easily and accurately recognize the usage status of the management target device by the operator by displaying the usage status table on the administrator terminal. Further, it is possible to easily perform a non-permission setting for making a specific management target device unusable for a specific operator based on the usage situation. As a result, it is possible to expect effects such as indirectly calling an operator who uses the management target device excessively and preventing unauthorized use.

[Second modification]
Although not described in the above embodiment and the first modification, the usage range information can be stored in advance in the non-contact IC card 3b possessed by each operator. Here, the usage range information will be described with reference to FIG. FIG. 11 is a diagram illustrating a data structure of usage range information. As shown in the figure, the usage range information is composed of a type item and an available number of times item. The type item is information indicating the type of the management target device. In this modification, for example, a locker, a scanner, a printer, or the like is used. The useable number item is the number of times that the operator can use. The usage range information can be arbitrarily set for each operator as shown in FIGS. 8 (a) and 8 (b). For example, in the case of an operator having the non-contact IC card 3b in which the user range information A shown in FIG. 8A is stored, the printer is used even when the administrator uses the administrator terminal. I can't do it. On the other hand, in the case of an operator who has the non-contact IC card 3b in which the user range information B shown in FIG. 8B is stored, the printer is used up to 10 times when the administrator uses the administrator terminal. can do.

  In this case, the lock control unit of the management target device can be used only when the usage permission information is received and within the usage range information included in the non-contact IC card 3b. Leave in state. In other words, even if the usage permission information is received, the lock control unit locks the device to be managed and is used by the operator if it is outside the range of the usage range information included in the non-contact IC card 3b. Control to impossible state.

  Specifically, the managed device first determines whether or not its type matches the type that can be used in the usage range information. If they do not match, the management target device determines that it is outside the range of the usage range information. On the other hand, if they match, the management target device determines whether or not the number of times of use is less than the number of times of use associated with its type in the use range information. When the number of times of use is greater than the number of times of use, the management target device determines that it is outside the range of the use range information. On the other hand, when the number of uses is less than the number of available times, the management target device determines that it is within the range of the use range information.

  It is assumed that the information regarding the type and number of times the operator has used is stored in the storage unit of the management target device.

  Moreover, in the above-mentioned 2nd modification, although the utilization range information is made into the data structure as shown in FIG. 11, this invention is not limited to this, It can set arbitrarily. For example, it is possible to set an effective time and an effective date and time as the usage range information, and to limit the use of the management target device based on the time and date since the operator entered the room 4.

  According to this, the use of the management target device can be restricted within a range corresponding to each operator based on the use range information.

  According to the present invention, a management system that uses an information storage medium and can automatically use electronic devices and facilities only while the administrator is in the room, without bothering the administrator. Can be used as

It is a figure explaining the outline | summary of a management system. It is a top view of a non-contact IC card. It is sectional drawing by the AA line of FIG. It is a top view of the IC tag built in the non-contact IC card. It is a functional block diagram of a management system. It is a figure which shows typically the data structure of an authority table. It is a flowchart which shows the use permission process by a management system. It is a flowchart which shows the use stop process by a management system. It is an example of a utilization condition table. It is an example of the disapproval execution process in a 1st modification. It is a figure which shows typically the data structure of the use range information in a 2nd modification.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 ... Manager 2 ... Operator 3 ... Non-contact IC tag 4 ... Room 6 ... Entrance management device 10 ... Leaving management device 50 ... Personal computer 60 ... Network 70 ... Locker

Claims (13)

An administrator terminal that manages the use of managed devices installed in a facility using an information storage medium possessed by the user,
The administrator terminal includes an information reading unit that reads information from the information storage medium, and is connected to the management target device via a network so as to be communicable.
The information storage medium has management authority information indicating that the user is an administrator according to the user,
The administrator terminal is
Information reading means for reading information from the information storage medium arranged in the information reading unit;
Management determining means for determining whether or not the management authority information is included in the information read by the information reading means;
Usage permission information transmitting means for transmitting, to the management target device, usage permission information for permitting use of the management target device when the management determination unit determines that the management authority information is included. An administrator terminal characterized by that. Arrangement determination means for determining whether or not the information storage medium has been removed from the information reading unit;
Usage stop information transmitting means for transmitting, to the management target device, usage stop information for stopping use of the management target device when the arrangement determination unit determines that the information storage medium has been removed. The administrator terminal according to claim 1. The manager terminal includes a display unit for displaying information,
Usage status information acquisition means for acquiring, as usage status information, a type for identifying the management target device and user identification information for identifying a user who is using the management target device from the management target device;
The administrator terminal according to claim 1, further comprising display means for displaying the usage status information by the display unit. A non-permitted user designating unit for designating a user who is not permitted to use the managed device based on the usage status information;
Based on the usage status information, a non-permitted type specifying unit that specifies a management target device that is not permitted to be used by a user specified by the non-permitted user specifying unit;
A non-permitted information transmitting unit that transmits the identification information of the user specified by the non-permitted user specifying unit and the type of the management target device specified by the non-permitted type specifying unit to the management target device as non-permission information; The administrator terminal according to claim 3, further comprising: A management target device installed in a facility and managed by an administrator terminal used by an administrator having management authority, wherein the management target device is communicably connected to the administrator terminal via a network. And
Usage permission information receiving means for receiving usage permission information permitting the use of the managed device from the administrator terminal;
Use stop information receiving means for receiving use stop information for stopping use of the management target device from the administrator terminal;
When the usage permission information receiving unit receives the usage permission information, the management target device is controlled to be usable, and when the usage suspension information receiving unit receives the usage suspension information, the management target device uses And a control means for controlling to make it impossible. The user possesses an information storage medium having identification information for identifying each user,
The managed device includes an information reading unit that reads information from the information storage medium,
Information reading means for reading information from the information storage medium arranged in the information reading unit;
Identification information specifying means for specifying identification information included in the information read by the information reading means;
The usage information transmitting means for transmitting the identification information specified by the identification information specifying means and the type for identifying the management target device as usage status information to the administrator terminal. 5. The management target device according to 5. Non-permission information for receiving, as non-permission information, identification information of a user who is not permitted to use the managed device and a type of the managed device that is not permitted to be used by the user from the administrator terminal. Receiving means;
A non-permitted user determination unit that determines whether or not the identification information specified by the identification information specifying unit matches the identification information included in the non-permission information received by the non-permission information receiving unit;
A non-permission type determination unit that determines whether or not the type of the management target device matches the type included in the non-permission information received by the non-permission information reception unit;
When the information storage medium possessed by the user is arranged in the information reading unit when the non-permitted user determination unit and the non-permission type determination unit match, the control unit The management target device according to claim 6, wherein the management target device is controlled so as to be unusable. A management system that uses an information storage medium possessed by a user to manage the use of a device to be managed installed in a facility by an administrator terminal used by an administrator having administrative authority.
In the management system, the administrator terminal and the management target device are connected to be communicable via a network,
The information storage medium has management authority information indicating that the user is an administrator according to the user,
The administrator terminal is
Information reading means for reading information from the information storage medium arranged in the information reading unit;
Management determining means for determining whether or not the management authority information is included in the information read by the information reading means;
Use permission information transmitting means for transmitting, to the management target apparatus, permission information for permitting use of the management target apparatus when the management determination means determines that the management authority information is included. ,
The managed device is:
Usage permission information receiving means for receiving the usage permission information from the administrator terminal;
And a control unit configured to control the device to be managed to be usable when the use permission information receiving unit receives the use permission information. The administrator terminal is
Arrangement determination means for determining whether or not the information storage medium has been removed from the information reading unit;
Usage stop information transmitting means for transmitting, to the management target device, usage stop information for stopping the use of the management target device when the arrangement determining unit determines that the information storage medium has been removed;
The managed device is:
The system further comprises a usage suspension information receiving means for receiving the usage suspension information from the administrator terminal,
The management system according to claim 8, wherein the control unit controls the management target device to be unusable when the usage suspension information receiving unit receives the usage suspension information. The user possesses an information storage medium having identification information for identifying each user,
The administrator terminal is
A display for displaying information;
Usage status information acquisition means for acquiring, as usage status information, a type for identifying the management target device and user identification information for identifying a user who is using the management target device from the management target device;
Display means for displaying the usage status information by the display unit,
The managed device is:
An information reading unit for reading information from the information storage medium;
Information reading means for reading information from the information storage medium arranged in the information reading unit;
Identification information specifying means for specifying identification information included in the information read by the information reading means;
The usage information transmitting means for transmitting the identification information specified by the identification information specifying means and the type for identifying the management target device as usage status information to the administrator terminal. The management system according to 8 or 9. The administrator terminal is
A non-permitted user designating unit for designating a user who is not permitted to use the managed device based on the usage status information;
Based on the usage status information, a non-permitted type specifying unit that specifies a management target device that is not permitted to be used by a user specified by the non-permitted user specifying unit;
A non-permitted information transmitting unit that transmits the identification information of the user specified by the non-permitted user specifying unit and the type of the management target device specified by the non-permitted type specifying unit to the management target device as non-permission information; Further comprising
The managed device is:
Non-permission information receiving means for receiving the non-permission information from the administrator terminal;
A non-permitted user determination unit that determines whether or not the identification information specified by the identification information specifying unit matches the identification information included in the non-permission information received by the non-permission information receiving unit;
A non-permission type determination unit that determines whether or not the type of the management target device matches the type included in the non-permission information received by the non-permission information reception unit;
When the control unit determines that both the unauthorized user determination unit and the unauthorized type determination unit match, while the information storage medium possessed by the user is disposed in the information reading unit, The management system according to claim 10, wherein the management target device is controlled to be unusable. A program executed by a computer that manages the use of a management target device installed in a facility using an information storage medium possessed by a user,
The computer includes an information reading unit that reads information from the information storage medium, and is communicably connected to the management target device via a network.
The information storage medium has management authority information indicating that the user is an administrator according to the user,
The program is
Information reading means for reading information from the information storage medium arranged in the information reading unit;
Management determination means for determining whether or not the management authority information is included in the information read by the information reading means;
The computer as use permission information transmitting means for transmitting use permission information for permitting use of the management target device to the management target device when the management determination unit determines that the management authority information is included. A program characterized by functioning. A program executed by a computer installed in a facility and managed by an administrator terminal used by an administrator having administrative authority,
The computer is communicably connected to the administrator terminal via a network,
Usage permission information receiving means for receiving usage permission information permitting use of the computer from the administrator terminal;
Use stop information receiving means for receiving use stop information for stopping use of the computer from the administrator terminal,
When the usage permission information receiving means receives the usage permission information, the computer is controlled to be usable, and when the usage suspension information receiving means receives the usage suspension information, the computer becomes unusable. A program for causing the computer to function as control means for controlling in such a manner.

Images