JP2008158644A - Device security level setting change system - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a device security level setting changing system capable of maintaining an optimum security level according to the attribute status of a resident.
An information storage medium includes storage means for storing owner attribute information, and an entrance / exit management device transmits the attribute information read from the information storage medium to the management server. The management server has security level setting means set in accordance with the occupant's attribute information, and usage condition information is preset for each security level. When the attribute level information is received from the device usage condition setting means and the entry / exit management device, if the security level is changed, the usage condition information is transmitted to the device corresponding to the changed security level. And the device has a use condition setting means and a means for changing the setting of the use condition setting means to a device use condition based on the received device use condition information. ing.
[Selection] Figure 1

Description

  The present invention relates to a security level setting change system for a device that enables setting change of a security level related to authentication processing of a device provided in a room according to attribute information of a resident in the room.

2. Description of the Related Art Conventionally, for example, a room where many employees work in a company or the like is provided with various devices such as a personal computer (hereinafter also referred to as a personal computer), a printer, a telephone set, and a copying machine.
In addition, there are cases where a reception room or a meeting room for receiving visitors from outside has equipment such as a personal computer and a telephone.
If these devices are used illegally, highly confidential information registered in databases etc. is stolen, data is altered, data is lost, etc. Will be damaged.
For this reason, as a security measure for device use, when using the device, authentication by entering a password or authentication by an IC card is performed, and the security level is further increased to perform personal authentication processing using biometric information such as fingerprints. Techniques have been developed that can confirm the legitimacy of the user of a device, for example. (For example, see Patent Documents 1 to 3)

JP 2002-229955 A JP 2003-317100 A JP 2006-5810 A

However, if the security level when using the device is raised, unauthorized use of the device can be prevented at a high level, but there is the inconvenience that the work efficiency is reduced due to the time and effort required for various authentication processes. Arise.
For example, when a user of a personal computer is authenticated by using a combination of three authentication processes: authentication by entering a password, authentication by an IC card, and authentication by biometric information such as a fingerprint, the right to use the personal computer However, there is a problem in that it takes time and labor to perform these three authentication processes, and the work efficiency is lowered.

  Therefore, the present invention makes it possible to automatically change the authentication processing method at the time of use of the device provided in the room according to the attribute situation of the occupant in the room provided with the device, and is unnecessary. A device security level setting change system is provided that enables the device to be used without excessively advanced authentication processing, maintains work efficiency when the device is used, and maintains an optimum security level.

  In order to achieve the above object, a security level setting change system for an apparatus according to the present invention includes an information storage medium, and an entrance / exit management device that controls a locked state of an entrance / exit door based on information read from the information storage medium, The attributes of the occupants in the room by the equipment provided in the room managed by the entrance / exit management device and the management server communicatively connected to the entrance / exit management device and the equipment A security level setting change system for a device that changes the security level setting of the device according to information, wherein the information storage medium has storage means in which attribute information of the owner of the information storage medium is stored. The entrance / exit management device reads the attribute information from the information storage medium when entering the room and leaving the room, and reads the attribute information from the management server. And a means for controlling the locked state of the entrance / exit door of the room, and the management server sets the security level stepwise in advance according to the attribute information of the occupants in the room Security level setting means, device usage condition setting means for which usage condition information of the equipment is preset for each security level, and the security level setting when receiving attribute information from the entrance / exit management device When the security level set by the means is changed, the device usage condition information corresponding to the changed security level set by the device use condition setting means is transmitted to the device. Condition information transmitting means, and the device includes use condition setting means for setting a use condition of the device, and device use condition information from the management server. When receiving the setting of the use condition setting means, characterized in that it comprises means for setting change to the equipment operating conditions based on the received apparatus used condition information.

  In the security level setting change system for an apparatus according to the present invention, the information storage medium is an IC card, and the apparatus is a personal computer, a printer, a telephone set, or a copying machine.

  Therefore, the device security level setting change system of the present invention automatically reads the attribute information of the owner stored in the information storage medium by the entrance / exit management device, and automatically optimizes the device provided in the room. Since the setting can be changed to the security level at which processing is performed, it is possible to use the device without performing unnecessary excessive authentication processing, maintaining the work efficiency when using the device, and maintaining the optimal security level. is there.

  In addition, the security level setting changing system for an apparatus according to the present invention is a room entry / exit system using an IC card, and the security levels of personal computers, printers, telephones, copying machines, etc. provided in the room are set in the room. The device can be automatically changed to the optimum level according to the attribute information of the user, and the device can be used without unnecessarily excessive authentication processing, maintaining the work efficiency when using the device and the optimum security level. The effect that it can hold.

DESCRIPTION OF EMBODIMENTS Hereinafter, a device security level setting changing system according to an embodiment of the present invention will be described in detail with reference to the drawings.
FIG. 1 is a system configuration diagram for explaining an overview of a device security level setting change system according to an embodiment of the present invention. FIG. 2 is a system block diagram of a device security level setting change system according to an embodiment of the present invention. FIG. 3 is a diagram for explaining an example of conversion of the level set in the security level setting means of the management server according to the system for changing the security level setting of the device according to the embodiment of the present invention, and FIG. FIG. 5 is a diagram for explaining an example of device usage conditions for each level set in the device usage condition setting means of the management server according to the device security level setting change system according to the embodiment, and FIG. 5 shows the device according to the embodiment of the present invention. It is a flowchart figure explaining the processing procedure of the security level setting change system.

The device security level setting changing system according to the embodiment of the present invention includes an IC card 3 that is an information storage medium for a user 2 who is authorized to enter a room 1 in which entry / exit is managed. And an entrance / exit management device 4 for controlling the lock state of the electronic lock provided in the entrance / exit door 8 based on the information read from the IC card 3, and a room in which entrance / exit is managed by the entrance / exit management device 4 1, a device 5 such as a personal computer 5a, a printer 5b, a telephone 5c, and a copying machine 5d, and an entry / exit management device 4 and a management server 6 to which these devices 5 are communicably connected via a communication network 7. have.
In the embodiment of the present invention, the case where the IC card 3 uses a non-contact type IC card is described. However, the contact type IC card and the stored information are read correspondingly. It is also possible to use a reader / writer that can

The device 5 such as a personal computer 5a, a printer 5b, a telephone 5c, and a copying machine 5d provided in the room 1 has a legitimate authority for the user to use the device 5 when using the device 5. An authentication processing function is provided for performing an authentication processing to determine whether or not the device has
Therefore, when these devices 5 are used, they cannot be used unless they are authenticated using a predetermined authentication processing function.
As these authentication processing functions, for example, password authentication for authenticating by comparing the password stored in the storage means in the device with the password input by the user, or the IC card 3 as an information storage medium. Based on the stored authentication information, card authentication for collating with authentication information input from the outside, biometric authentication based on biometric information such as fingerprints, and the like are well-known technologies. It has a processing function.
Further, by using these plural types of authentication processing functions in combination, it is possible to prevent use by unauthorized users as a higher security level.

FIG. 1 shows a configuration in which each device 5 is provided with an IC card reader so that authentication information stored in the IC card 3 can be read by the IC card reader. Each device 5 is provided with the various authentication processing functions described above, and is configured to perform authentication processing corresponding to a high security level by using a plurality of types of authentication processing functions in combination.
The entrance / exit door 8 in the room 1 is locked with an electronic lock. When the user 2 enters / exits, the IC card 3 possessed by the user 2 is brought close to the entrance / exit management device 4 so that the IC 2 If the authentication information stored in the card 3 is read and authentication is not received, the electronic lock is configured not to be unlocked, and the authentication information stored in the IC card 3 by the entrance / exit management device 4 When reading, the attribute information other than the authentication information can be read.

  The attribute information stored in the IC card 3 is information that makes it possible to identify what kind of person the owner of the IC card 3 is socially. For example, employees of the company, There is attribute information such as a customer who is a visitor, an external contractor such as a maintenance worker, and a cleaning worker. These attribute information are coded according to different positions and are stored as code information in the storage means of the IC card 3. You may make it memorize | store attribute information.

  Next, the management server 6 is communicably connected to the entrance / exit management device 4 and a plurality of types of devices 5 through the communication network 7, and the attribute information read from the IC card 3 by the entrance / exit management device 4 is entered / exited. When the usage condition on the device 5 side needs to be changed by transmitting device usage condition information to the device 5 and received from the management apparatus 4, the usage condition setting means for the device 5 is used. Change the settings as necessary.

Next, the system configuration of the device security level setting change system according to the embodiment of the present invention will be described based on the system block diagram shown in FIG.
FIG. 2 does not show all the devices such as the personal computer 5a, the printer 5b, the telephone 5c, and the copying machine 5d provided in the room 1 shown in FIG. Only one device 5 is shown.
Therefore, the device 5 shown in FIG. 2 omits the display of the specific functions of the individual devices of the personal computer 5a, printer 5b, telephone 5c, and copier 5d.

First, the non-contact type IC card 3 is provided with transmission / reception means 9, control means 10, and storage means 11.
The storage means 11 stores authentication information used when entering and leaving the room 1 in advance, and attribute information that makes it possible to identify the position for each holder of the IC card 3.
The transmission / reception means 9 has a function of wirelessly transmitting information stored in the IC card 3 between the entrance / exit management device 4 and the IC card reader / writer 12 provided in the device 5.

Next, the entrance / exit management device 4 is provided with an entrance transmission / reception means 13, an exit / reception means 14, a communication means 15, a lock control device 16, an authentication processing means 17, a storage means 18, a control means 19, and the like. .
The entrance transmission / reception means 13 is provided outside the room 1 in order to read the authentication information and the attribute information, which are stored information of the IC card 3, when entering the entrance / exit door 8 of the room 1. ing.
Further, the leaving transmission / reception means 14 is provided inside the room 1 in order to read the authentication information and the attribute information as the stored information of the IC card 3 when leaving the room 8 with respect to the entrance / exit door 8. Is provided.

The locking control device 16 has a function of controlling the locking state of the electronic lock provided in the entry / exit door 8.
The authentication processing unit 17 compares the authentication information read from the IC card 3 by the entry transmission / reception unit 13 or the leaving transmission / reception unit 14 with the authentication information stored in the storage unit 18 in advance and matches. Has a function of determining whether or not authentication can be received.
Then, when authentication is received by the authentication processing means 17, an instruction signal for unlocking the electronic lock provided to the entry / exit door 8 is transmitted to the lock control device 16.

  The device 5 includes a communication unit 20, an input unit 21, a storage unit 22, a use condition setting unit 23, a use condition setting change unit 24, an interface (I / F) 25, a biometric authentication processing unit 26, a password authentication processing unit 27, A card authentication processing unit 28, a control unit 29, and the like are provided.

The use condition setting means 23 is a means for setting the type of authentication processing that needs to be received when the device 5 is used. The biometric authentication processing means 26, password, which is an authentication process provided in the device 5, is used. The authentication processing means 27 and the card authentication processing means 28 are selected from the three authentication processes.
In addition, the use condition setting unit 23 can be used without any authentication when using the device 5, and various conditions such as a need to perform authentication processing using a combination of a plurality of authentication processes. Is set.
However, the use condition setting means 23 automatically sets the use condition based on the information transmitted from the management server 6 and received by the device 5, and this set condition is subsequently received from the device 5. The use condition setting changing means 24 sequentially changes the setting based on the information on the security level change.

The IC card reader / writer 12 includes an interface (I / F) 30, a transmission / reception unit 31, a control unit 32, and a storage unit 33.
The IC card reader / writer 12 is particularly used where authentication processing by the card authentication processing means 28 is required.

Next, the management server 6 includes a communication unit 34, a security level setting unit 35, a device use condition setting unit 36, a device use condition information transmitting unit 37, a storage unit 38, a control unit 39, and the like.
The security level setting means 35 is set with a security level that is determined in stages according to the attribute information of the occupants in the room 1.
For example, as shown in FIG. 3, when the security level is increased in a stepwise manner in the initial order, L1, L2, and L3, the number of people in the room 1 is zero in the initial stage. In the case of L1, the resident in the room 1 is one employee. In the L2, the resident in the room 1 is a plurality of employees. In the L3, the resident in the room 1 is In the case of an employee, a maintenance worker, or a visitor, it can be arbitrarily set.

Next, the device use condition setting means 36 determines the type of authentication processing that must be received when using each device 5 corresponding to each stage of the security level.
For example, as shown in FIG. 4, when the security level is increased in stages as initial, L1, L2, and L3 in order, all the levels provided in the room 1 are initially set. The device is in a state where it cannot be used. Next, in the L1 stage, all devices can be used without performing an authentication process. In the L2 stage, a personal computer is used in the device. In the L3 stage, it is necessary to perform authentication processing based on biometric information in combination with card authentication processing only when a personal computer is used in the device. There is set to be.
These settings can be freely set in any combination for use of the device.

With the above settings, for example, when there are only employees as occupants in the room 1 as in the security level L2, all devices can be used without authentication processing by the employees. As in level L3, if there are employees and maintenance personnel or visitors as occupants in room 1, card authentication processing should be performed only when using a personal computer in the device. The setting can be changed so that maintenance personnel or visitors cannot use the personal computer without permission.
As described above, the security process is gradually increased in accordance with the attribute information of the occupants in the room 1, so that the authentication process can be further advanced to prevent fraud.

Next, a processing procedure of the device security level setting change system according to the embodiment of the present invention will be described with reference to the flowchart shown in FIG.
First, when the user 2 enters the room 1, the IC card 3 is brought close to the entrance transmission / reception means 13 of the entrance / exit management device 4, and the authentication information and attribute information stored in the IC card 3 are stored. Let me read. (Step S1)
The entrance / exit management device 4 performs authentication processing by comparing the read authentication information with the authentication information registered in the storage unit 18. (Step S2)
If authentication is received in this authentication process, the electronic lock of the entrance / exit door 8 is unlocked to enter the room. (Step S3)
If authentication is not received in this authentication process, the process ends.

Next, the attribute information read from the IC card 3 is transmitted from the entrance / exit management device 4 to the management server 6. (Step S4)
After receiving the attribute information from the entry / exit management device 4, the management server 6 determines whether there is a change in the security level of the room that has already been set by the user 2 entering the room from the security level setting means 35. Is done. (Step S5)
If the management server 6 determines that there is no change in the security level, the process ends.
If it is determined that there is a change in this determination, the device use condition information corresponding to the security level after the change is obtained based on the device use condition set in the device use condition setting unit 36. Transmit to the device 5 that needs to be changed. (Step S6)

In the device 5 that has received the device use condition information, the use condition setting changing unit 24 changes and sets the authentication processing necessary for using the device 5 in the use condition setting unit 23. (Step S7)
Therefore, according to the above processing, a user who uses the device 5 after that cannot use the device 5 unless authentication based on the authentication process whose setting is changed by the use condition setting unit 23 is received.
In other words, the situation of what kind of person is present in the room 1 varies, but by reading the attribute information from the IC card 3 by the entrance / exit management device 4, the device automatically 5 is systematized so that the authentication process required when using 5 can be changed.

Further, when leaving the room 1, the IC card 3 is brought close to the leaving transmission / reception means 14 of the entry / exit management device 4, and the authentication information and attribute information stored in the IC card 3 are read.
Subsequent processing procedures are the same as the processing procedures described above, and the security level is lowered.
As described above, in the present invention, the security level related to the authentication process of the device provided in the room is increased or decreased according to the attribute information of the occupants in the room, and the security level of the device is increased. Since settings can be changed, the relationship between work efficiency and security can be adjusted moderately.

It is a system configuration figure explaining an outline of a security level setting change system of an apparatus concerning an embodiment of the present invention. It is a system block diagram of the security level setting change system of the apparatus which concerns on embodiment of this invention. It is a figure explaining the example of conversion of the level set to the security level setting means of the management server according to the security level setting change system of the apparatus which concerns on embodiment of this invention. It is a figure explaining the example of apparatus use conditions for every level which concerns on the security level setting change system of the apparatus which concerns on embodiment of this invention, and is set to the apparatus use condition setting means of the management server. It is a flowchart figure explaining the process sequence of the security level setting change system of the apparatus which concerns on embodiment of this invention.

Explanation of symbols

1 room
2 users
3 IC card
4 Entrance / exit management device
5 Equipment
5a PC
5b printer
5c telephone
5d copier
6 management server
7 Communication network
8 Entry / exit door
9,31 Transmission / reception means
10, 19, 29, 32, 39 Control means
11, 18, 22, 33, 38 Storage means
12 IC card reader / writer
13 Transmission / reception means for entering the room
14 Transmission / reception means for leaving the room
15, 20, 34 Communication means
16 Locking control device
17 Authentication processing means
21 Input means
23 Use condition setting means
24 Use condition setting change means
25, 30 interface (I / F)
26 Biometric authentication processing means
27 Password authentication processing means
28 Card authentication processing means
35 Security level setting means
36 Device usage condition setting means
37 Device usage condition information transmission means

Claims (2)

An information storage medium, an entrance / exit management device for controlling the locked state of the entrance / exit door based on information read from the information storage medium, and equipment provided in a room managed by the entrance / exit management device, The security level setting change of the device that changes the security level setting of the device according to the attribute information of the occupants in the room by the management server that is communicably connected to the entry / exit management device and the device A system,
The information storage medium has storage means for storing attribute information of the owner of the information storage medium,
The entrance / exit management device includes means for reading attribute information from the information storage medium when entering and exiting the room, means for transmitting the read attribute information to the management server, and an entrance / exit door of the room. Means for controlling the locked state,
The management server includes security level setting means in which security levels are set in advance in accordance with attribute information of occupants in the room, and usage condition information of the device is set in advance for each security level. Set by the device use condition setting means when the security level set by the security level setting means is changed when the attribute information is received from the device use condition setting means and the entry / exit management device. Use condition information transmitting means for transmitting the use condition information of the device corresponding to the changed security level to the device,
When the device receives the device use condition information from the management server, the use condition setting unit for setting the use condition of the device is set based on the received device use condition information. A security level setting change system for equipment, comprising means for changing settings to use conditions. 2. The security level setting change system for a device according to claim 1, wherein the information storage medium is an IC card, and the device is a personal computer, a printer, a telephone, or a copier.

Images