CN105447928B - Access control method and control system - Google Patents

Abstract

The invention discloses an access control method and a control system. The method includes: acquiring a connection request message of a mobile terminal, and judging whether the terminal identifier carried in the connection request message matches a pre-stored preset identifier; if so, judging The mobile terminal is an owner's mobile terminal or an administrator's mobile terminal; judging whether the fingerprint data collected by the mobile terminal matches the pre-stored fingerprint data corresponding to the preset identification; if so, unlocking the access control. The method provided by the invention has high security and great convenience, and does not need to leave fingerprints in public areas, avoiding the risk of fingerprints being stolen.

Description

Access control method and control system

technical field

The invention relates to intelligent community control technology, in particular to an access control method and control system.

Background technique

In recent years, smart communities have developed rapidly, and many communities are equipped with advanced access control. Among them, fingerprint locks are widely used. Since fingerprint locks do not require keys, it avoids the trouble of changing locks when the old lock key is lost; and because fingerprints are unique. , thus ensuring security to a certain extent.

Although the current fingerprint lock does not need to use a key, the user needs to press the fingerprint on the fingerprint reader in the public area (most of them are installed on the access control), and the fingerprint reader can recognize and unlock. On the fingerprint reader, there is the possibility of being copied and stolen, so there is still a certain risk in using a fingerprint lock.

Contents of the invention

One of the objectives of the present invention is to provide an access control method to solve the problem in the prior art that fingerprints need to be left on fingerprint readers in public areas and there is a risk of fingerprints being copied and embezzled.

In order to achieve the above object, the method provided by the invention adopts the following technical solutions to realize:

An access control method, the method comprising:

Obtaining a connection request message of the mobile terminal, and judging whether the terminal identifier carried in the connection request message matches a pre-stored preset identifier;

If so, determine that the mobile terminal is the owner's mobile terminal or the administrator's mobile terminal;

judging whether the fingerprint data collected by the mobile terminal matches the pre-stored fingerprint data corresponding to the preset identifier;

If so, unlock the access control.

The second object of the present invention is to provide a control system applied to access control, so that the access control can be unlocked under the control of a mobile terminal.

In order to achieve the above-mentioned technical purpose, the control system provided by the present invention adopts the following technical solutions to realize:

A control system applied to access control, the control system comprising:

A connection request message acquisition and determination module, configured to obtain a connection request message of a mobile terminal, and determine whether the terminal identifier carried in the connection request message matches a pre-stored preset identifier;

The fingerprint data receiving module is used to receive the fingerprint data collected by the mobile terminal when the connection request message acquisition and determination module determines that the mobile terminal is the owner's mobile terminal or the administrator's mobile terminal;

A fingerprint data judging module, configured to judge whether the received fingerprint data matches the pre-stored preset fingerprint data corresponding to the preset identifier;

An unlocking access control module, configured to unlock the access control when the fingerprint data decryption and determination module determines that the decrypted fingerprint data matches the preset fingerprint data;

Wherein, if the terminal identifier carried in the connection request message matches a pre-stored preset identifier, the connection request message acquiring and judging module judges that the mobile terminal is an owner's mobile terminal or an administrator's mobile terminal.

The third object of the present invention is to provide an access control system applied to mobile terminals for controlling access control, which uses mobile terminals to collect fingerprints and control access control, so as to avoid fingerprints that need to be left on fingerprint readers in public areas in the prior art The problem of the risk of being copied and misappropriated.

In order to achieve the above-mentioned technical purpose, the access control system provided by the present invention adopts the following technical solutions to realize:

An access control system applied to a mobile terminal for controlling access control, the access control system comprising:

A connection request message sending module, configured to send a connection request message to the gate to be controlled, wherein the connection request message carries the terminal identification of the mobile terminal;

A fingerprint data collection module, used to collect fingerprint data when the access control to be controlled determines that the mobile terminal is the owner's mobile terminal or the administrator's mobile terminal;

A fingerprint data sending module, configured to send the collected fingerprint data to the gate to be controlled;

Wherein, the access control to be controlled determines that the mobile terminal is the owner's mobile terminal or the administrator's mobile terminal when determining that the terminal identifier carried in the connection request message matches the preset identifier stored in the access control.

Compared with the prior art, the advantages and positive effects of the present invention are: the present invention collects the user's fingerprint through the mobile terminal and sends it to the access control, the access control verifies the fingerprint and controls the unlocking of the access control in combination with the verification of the mobile terminal, and the fingerprint verification The method does not require the user to carry a key, which is convenient and safe; the fingerprint is scanned and collected by the mobile terminal, and the user does not need to touch the access control, which avoids the risk of being stolen by leaving the fingerprint in a public area; moreover, the unique identification of the mobile terminal and the user The way of double verification of fingerprint data improves the security of verification.

Other characteristics and advantages of the present invention will become clearer after reading the detailed description of the present invention in conjunction with the accompanying drawings.

Description of drawings

Fig. 1 is the flowchart of the first embodiment of the access control method of the present invention;

Fig. 2 is a flowchart of another embodiment of the access control method of the present invention;

Fig. 3 is the flow chart that mobile terminal among the present invention binds with access control;

Fig. 4 is a flow chart of adding a bound mobile terminal in the present invention;

Fig. 5 is the structural block diagram of an embodiment of the control system that the present invention is applied to access control;

FIG. 6 is a structural block diagram of an embodiment of an access control system applied to a mobile terminal controlling access according to the present invention.

Detailed ways

Specific embodiments of the present invention will be described in detail below in conjunction with the accompanying drawings.

Please refer to FIG. 1 , which is a flow chart of the first embodiment of the access control method of the present invention.

As shown in Figure 1, the method for controlling access control in this embodiment is as follows:

Step S001: Obtain a connection request message of a mobile terminal.

The access control can obtain the connection request message sent by the mobile terminal, and, according to setting, the connection request message carries the terminal identifier of the mobile terminal. The access control obtains the connection request message, reads out the terminal identification in it, and matches it with the preset identification stored in advance by the access control.

Step S002: Determine whether the identifier matching is successful. If successful, execute step S003; otherwise, go to step S006.

Step S003: If the ID matching is successful, that is, the terminal ID in the connection request message is consistent with the preset ID, determine that the mobile terminal sending the connection request message is the owner's mobile terminal or the administrator's mobile terminal, and receive the information collected by the mobile terminal. fingerprint data.

Moreover, after receiving the fingerprint data collected and sent by the mobile terminal, it is matched with the preset fingerprint data stored in the access control and corresponding to the preset identifier.

Step S004: Determine whether the fingerprint matching is successful. If successful, execute step S005; otherwise, go to step S006.

Step S005: After the fingerprint matching is successful, unlock the access control.

Step S006: If the identification matching or fingerprint matching is unsuccessful, perform other processing.

Applying the control method of this embodiment realizes unlocking control of access control by using fingerprints. Moreover, the fingerprint is sent through the mobile terminal, and there is no need to collect the fingerprint on the access control, avoiding the risk of being stolen by leaving the fingerprint in a public area. In addition, fingerprints are collected and judged only after the mobile terminal passes verification, and the way of double verification of the unique identifier of the mobile terminal and the fingerprint data of the user improves the security of verification.

2 to 4 show the flow charts of another embodiment of the access control method of the present invention. The specific workflow of the access control method of this embodiment will be described in detail below with reference to FIGS. 2 to 4 .

As shown in Figure 2, it is a flow chart of another embodiment of the access control method of the present invention, the method includes the following steps:

Step S11, the mobile terminal sends a connection request message to the access control, the connection request message carries a terminal identifier, and the terminal identifier is a unique identifier of the mobile terminal.

In this embodiment, the user performs the operation of connecting to the access control through a mobile terminal such as a mobile phone or an iPad, and the connection method may be but not limited to Bluetooth. The terminal identifier as the unique identifier includes: one or more of the mobile phone's MAC address, bluetooth address or string value IMEI.

Preferably in this embodiment, when the mobile terminal sends a connection request to the access control, when the distance between the access control and the mobile terminal is close to a certain value, the mobile terminal is automatically triggered to send the connection request without user control.

Step S12, the access control receives the connection request message sent by the mobile terminal, and judges whether the terminal identifier in the connection request message matches the pre-stored preset identifier. The preset ID refers to the terminal ID that is pre-stored in the access control and successfully bound. If the matching is successful, it is determined that the mobile terminal is the owner's mobile terminal or the administrator's mobile terminal, and the access control sends a connection success message to the mobile terminal, and enters step S13; if the matching is unsuccessful, then executes step S21.

Specifically, the terminal identification of the mobile terminal of the user within the scope of the access control is stored in the memory of the access control. When the mobile terminal is connected to the access control, the access control compares the terminal identification in the connection request message with the pre-stored preset identification. match. If the match is successful, it means that the mobile terminal is the owner's mobile terminal or administrator's mobile terminal that has been bound and authenticated, and the user is a legal user, then the access control will send a successful connection message to the mobile terminal for the next step of fingerprint authentication.

Step S13, the mobile terminal receives the connection success message, starts the fingerprint scanning function, and collects the user's fingerprint data.

This step is the first step directly related to the user. The mobile terminal prompts the customer to input fingerprint information and collects his fingerprint.

Step S14, the mobile terminal encrypts the collected fingerprint data, and sends the encrypted fingerprint data to the access control.

Preferably in this embodiment, after the mobile terminal sends the encrypted fingerprint data to the access control, the fingerprint data will be deleted.

In other words, the mobile terminal will not save the fingerprint data, so as to prevent the fingerprint from being stolen due to the loss of the mobile terminal.

Step S15, the access control decrypts and identifies the received fingerprint data, and judges whether the fingerprint data matches the pre-stored preset fingerprint data corresponding to the preset identifier. If the matching is successful, execute step S16; if the matching is unsuccessful, execute step S31.

Step S16, the access control unlocks the access control;

Specifically, in the memory of the access control, there is a one-to-one correspondence between the preset identification of the mobile terminal and the preset fingerprint data of the user to which the mobile terminal belongs. It is only judged that the access control can be unlocked.

Step S21, if it is determined in step S12 that the match between the terminal identification and the preset identification is unsuccessful, then it is determined that the mobile terminal is a visitor mobile terminal, and the access control sends a connection failure message to the mobile terminal, and randomly generates visitor verification data, such as a two-dimensional code, and stores the two QR code and send the QR code to the visitor's mobile terminal.

If the identification of the mobile terminal is not pre-stored in the memory of the access control, the access control system judges that the mobile terminal is a visitor mobile terminal, indicating that the owner of the mobile terminal may be a relative or visitor of the owner. The visitor's permission to unlock the door. Therefore, the access control randomly generates visitor verification data, which is used to further confirm the identity of the visitor and whether the visitor's access can be allowed by the owner. Moreover, the access control itself will also temporarily store the visitor verification data for the next step of the visitor's identity verification.

Step S22: After receiving the QR code, the visitor's mobile terminal sends the QR code to the mobile terminal of the owner to be visited by MMS, WeChat or Fetion.

When the visitor is indeed a relative or friend of the owner, the QR code will be sent to the owner's mobile terminal. If the visitor is a stranger, since there is no contact information of the owner, the action of this step will not be performed naturally, and the access control will also enter the standby or dormant state after a preset period of time.

Step S23: After receiving the QR code, the owner's mobile terminal combines and encrypts the QR code with its owner's binding information, such as terminal identification and/or fingerprint data, and sends the visitor authorization information obtained after the encrypted combination to the visitor mobile terminal.

Specifically, the owner's mobile terminal can first encrypt and combine the two-dimensional code and its terminal identification into a visitor identification code, and then encrypt and combine the visitor identification code and the owner's fingerprint data into visitor authorization information.

Step S24, the visitor mobile terminal sends the received visitor authorization information to the access control.

Step S25, the access control parses the visitor authorization information, and obtains the terminal identification of the owner's mobile terminal and/or the owner's fingerprint data, as well as the previously randomly generated QR code. The access control will match the parsed information with the stored information respectively. If the matching is successful, execute step S16 to unlock the access control; if the matching is unsuccessful, execute step S26.

Step S26, the access control is not unlocked, and a reminder message of not unlocking is sent to the visitor's mobile terminal.

Moreover, no matter whether the matching is successful, the randomly generated two-dimensional code and visitor authorization information will be invalid, that is, the two-dimensional code can only be used once, so as to improve the security and effectiveness of verification.

More preferably, in order to further improve the security of temporarily granting unlocking access control authority to visitors, in step 23, when the owner's mobile terminal encrypts and combines the two-dimensional code received from the visitor with its own terminal identification into the visitor identification code, the encryption is limited to Irreversible encryption, that is, the original data cannot be recovered by decrypting the visitor identification code. In this way, malicious decryption can be avoided to obtain the terminal identification of the owner's mobile terminal.

If the owner's mobile terminal uses irreversible encryption to generate a temporary identification code, then in step S25, the access control can only obtain the visitor identification code and the owner's fingerprint data by analyzing the visitor's authorization information. Then, the access control adopts the preset encryption method that is the same as the visitor ID code generated by the owner's mobile terminal to encrypt the previously randomly generated and stored QR code and the pre-stored preset terminal ID to generate a preset ID code. The access control will match the preset identification code with the received visitor identification code, and match the owner's fingerprint data in the visitor authorization information with the preset fingerprint data stored in the access control itself. If the matching is successful, perform step S16 to unlock the access control; if the matching is unsuccessful, perform step S26 to not unlock, and send a reminder message not to unlock to the visitor's mobile terminal.

Furthermore, if the owner's mobile terminal can communicate with the access control, after the owner's mobile terminal generates visitor authorization information, the visitor authorization information is directly transmitted to the access control without forwarding it through the visitor's mobile terminal.

Step S31 , the access control judges whether the number of match failures corresponding to the mobile terminal exceeds a preset threshold within the first preset time period, if yes, execute step S32 , otherwise execute step S33 .

Step S32, the access control starts the temporary protection mode, no longer unlocks the access control and responds to the connection request message of the mobile terminal within the second preset time period, and sends the mobile terminal the failure times exceeding the preset threshold or the matching time exceeding the preset time and disconnect the mobile terminal.

If within a set period of time, for example, within 5 minutes, the number of fingerprint matching failures of the same mobile terminal exceeds the set value, such as 5 times, the access control defaults to the fact that the current mobile terminal holder is not a legitimate user, so a temporary Protection mode to prevent malicious attempts by visitors to host mobile terminals of the owner.

Step S33, the access control sends a reminder message to re-enter the fingerprint to the mobile terminal, records the number of unsuccessful fingerprint data matching, and executes step S15 after receiving the fingerprint data.

In practical applications, the mobile terminal needs to be bound with the access control in advance, and only the bound mobile terminal can perform wireless data transmission and identity verification with the access control. In this embodiment, the binding and initialization of the mobile terminal and the access control are performed through the manner shown in FIG. 3 .

Specifically, the process of binding and initializing the mobile terminal with the access control is as follows:

Step S01, the mobile terminal sends a binding request message to the access control, and the binding request message carries the terminal identifier of the mobile terminal.

Step S02, the access control receives the binding request message, stores the terminal ID as a preset ID, and returns a binding permission response to the mobile terminal.

Step S03, the mobile terminal scans and collects fingerprint data, and sends the collected fingerprint data to the access control system.

Preferably, the mobile terminal encrypts the fingerprint data before sending it to the access control, so as to further improve security.

Step S04, the access control stores the fingerprint data as preset fingerprint data corresponding to the above-mentioned preset identifier, and returns a message of successful binding to the mobile terminal.

In this embodiment, the mobile terminal and the access control can communicate through bluetooth or other communication methods.

The above binding process is the process of binding the owner's mobile terminal with the access control. In addition, in order to facilitate the management of the information of the mobile terminals bound and authenticated in the access control, when using the access control for the first time, you can set up the administrator mobile terminal, grant the mobile terminal management authority, and add and delete the bound mobile terminal of the owner. to manage. When performing management operations, in addition to verifying the terminal identification of the administrator's mobile terminal and the administrator's fingerprint data, it is also necessary to further confirm the administrator's identity information, for example, to determine the administrator's identity through a password. Then, in order to realize the binding of the administrator's mobile terminal, after the above step S04, the following steps are also included:

Step S05, the mobile terminal sends a password input request to the access control.

Step S06, the access control returns a password input response.

Step S07, the mobile terminal sends the password input by the user to the system.

Step S08 , the access control system stores the password, the terminal ID of the mobile terminal, and the fingerprint data correspondingly as preset identity information, preset ID, and preset fingerprint data, and identifies the mobile terminal as an administrator mobile terminal.

Thus, the access control will identify the stored one-to-one corresponding preset identification, preset fingerprint data and preset identity information as the information of the administrator's mobile terminal, and the administrator's mobile terminal has the authority to add and delete the information stored in the access control , also has the authority to add and delete the bound owner’s mobile terminal, and the implementation methods may include:

Method 1: The administrator’s mobile terminal with administrator authority sends a request to add a binding device to the access control. After the access control verifies the identity of the administrator, it replies with a response of allowing the addition, and then the new owner’s mobile terminal performs steps S01-S04.

Method 2, as shown in Figure 4, includes the following steps:

Step S41, the owner's mobile terminal sends a request to add a bound device to the access control.

Step S42, the access control randomly generates binding verification data, such as a two-dimensional code, stores the binding verification data and sends it to the owner's mobile terminal.

Step S43, the owner's mobile terminal sends the binding verification data to the administrator's mobile terminal.

Step S44, the administrator's mobile terminal encrypts the combination of the binding verification data and its own administrator binding information into binding authorization information, and then replies to the owner's mobile terminal.

Step S45, the owner's mobile terminal sends the binding authorization information to the access control.

Step S46, the access control verifies the binding authorization information, analyzes and obtains the binding verification data, the terminal identification of the administrator's mobile terminal, the administrator's fingerprint data and password and other administrator binding information, and combines the analyzed information with the stored The preset information is matched, and after the matching is successful, the owner's mobile terminal is notified to allow adding a binding response.

Step S47, the owner's mobile terminal executes the binding of steps S01-S04.

Of course, if the administrator's mobile terminal can communicate with the access control, after it generates the binding authorization information, it can directly transmit the binding authorization information to the access control without forwarding it through the owner's mobile terminal.

In addition, in order to prevent the user from unlocking the access control through the mobile terminal under duress, preferably, preset alarm fingerprint data is also pre-stored in this embodiment. That is, for example, what the owner usually disables for unlocking the door is the fingerprint of the index finger, while the alarm fingerprint stores the fingerprints of other fingers of the owner. When the access control finds that the owner uses the alarm fingerprint through matching, it will send an alarm message to the management center such as the property while unlocking.

In the method of the above-mentioned embodiment, through the fingerprint scanning function on the mobile terminal, the user can unlock the access control without touching it; moreover, through the binding of the mobile terminal and the access control, even if the fingerprint is copied, it cannot be used to unlock the access control, and the security is greatly improved; You can also set alarm fingerprints and prevent malicious attempts.

In order to realize the access control method described above, the present invention also provides a control system applied to access control and an access control system applied to mobile terminals controlling access control. The two control systems work together to complete the control of access control.

Please refer to FIG. 5 , which is a structural block diagram of an embodiment of the control system applied to access control according to the present invention.

As shown in Figure 5, in order to enable the access control to be controlled by the mobile terminal for fingerprint unlocking, the control system applied to the access control in this embodiment includes:

The connection request message acquisition and determination module 501 is used to obtain the connection request message of the mobile terminal, and judge whether the terminal identification carried in the connection request message matches the pre-stored preset identification;

The fingerprint data receiving module 502 is used to receive the fingerprint data collected and encrypted by the mobile terminal when the connection request message acquisition and determination module 502 determines that the mobile terminal is the owner's mobile terminal or the administrator's mobile terminal;

The fingerprint data decryption and determination module 503 is used to decrypt the encrypted fingerprint data, and determine whether the decrypted fingerprint data matches the pre-stored fingerprint data corresponding to the preset identification;

Unlock access control module 504, for unlocking access control when the fingerprint data decryption and determination module 503 determines that the decrypted fingerprint data matches the preset fingerprint data;

Wherein, if the terminal identifier carried in the connection request message matches the pre-stored preset identifier, the connection request message acquiring and determining module 501 determines that the mobile terminal is the owner's mobile terminal or the administrator's mobile terminal.

In order to temporarily authorize visitors so that the owner's visitors can unlock the access control, the control system applied to the access control also includes:

Visitor verification data generation module 505, for randomly generating visitor verification data when the connection request message acquisition and determination module 501 determines that the mobile terminal is a visitor mobile terminal;

Visitor verification data storage and sending module 506, for storing visitor verification data, and sending the visitor verification data to the visitor's mobile terminal;

The visitor authorization information receiving module 507 is used to receive the visitor authorization information returned by the visitor mobile terminal and/or the owner's mobile terminal of the owner to be accessed by the visitor mobile terminal;

The visitor authorization information decryption and determination module 508 is used to decrypt the visitor authorization information, and determine whether the owner binding information and visitor verification data match the stored preset owner binding information and visitor verification data;

The unlocking access control module 504 unlocks the access control when the owner binding information and visitor verification data match the stored preset owner binding information and visitor verification data;

Wherein, if the terminal identification carried in the connection request message does not match the preset identification, the connection request message acquisition and determination module 501 determines that the mobile terminal is a visitor mobile terminal; The combination of owner binding information and visitor verification data is encrypted and generated.

Further, the control system also includes:

The visitor mismatch processing module is used to not unlock the access control when the visitor authorization information decryption and determination module 508 determines that the owner binding information and visitor verification data do not match the stored preset owner binding information and the stored visitor verification data, Delete the stored visitor verification data, and send a reminder message that the visitor's mobile terminal will not be unlocked.

To deal with the user unlocking the door under duress, the control system also includes:

The alarm fingerprint data determination and processing module 510 is used to determine whether the fingerprint data matches the preset alarm fingerprint data after the fingerprint data decryption and determination module 503 determines that the decrypted fingerprint data matches the preset fingerprint data, and Send alarm information to the management center when matching.

In order to realize the above functions, the control system also includes:

The administrator's mobile terminal data acquisition module 511 is used to acquire the terminal identification of the administrator's mobile terminal, the administrator's fingerprint data and the administrator's identity information, and correspondingly store them as preset identifiers, preset fingerprint data and preset identity information;

The owner's mobile terminal data acquisition module 512 is used to acquire the terminal identification of the owner's mobile terminal and the owner's fingerprint data, and correspondingly store them as preset identification and preset fingerprint data, and

The alarm fingerprint data acquisition module 513 is used to acquire the alarm fingerprint data of the owner's mobile terminal, and store the alarm fingerprint data as preset alarm fingerprint data corresponding to the preset identification of the owner's mobile terminal.

In order to control the binding of the mobile terminal and the access control, the control system also includes:

Add a binding device request acquisition module 514, configured to acquire the request for adding a bound device sent by the owner's mobile terminal;

A binding verification data generating module 515, configured to randomly generate binding verification data after the request for adding a binding device is acquired by the obtaining module 514 for adding a binding device;

The binding verification data storage and sending module 516 is used to store the binding verification data and send the binding verification data to the owner's mobile terminal;

Binding authorization information receiving module 517, configured to receive binding authorization information returned by the owner's mobile terminal and/or the administrator's mobile terminal;

A binding authorization information decryption and determination module 518, configured to decrypt the binding authorization information, and determine whether the administrator binding information and binding verification data match the stored preset administrator binding information and binding verification data;

The owner's mobile terminal data acquisition module 512 obtains the owner's mobile terminal data after the visitor authorization information decryption and judgment module 518 judges that the administrator's binding information and binding verification data match the stored preset administrator's binding information and binding verification data. The terminal identification and owner fingerprint data of the terminal are correspondingly stored as preset identification and preset fingerprint data;

Among them, the binding authorization information is encrypted and generated by the administrator's mobile terminal according to the combination of the administrator's binding information and binding verification data; the administrator's binding information includes the terminal identification of the administrator's mobile terminal, the administrator's fingerprint data, and any one or more of .

In addition, in order to prevent strangers from maliciously attempting to unlock the access control with the user's mobile terminal, the control system also includes:

The fingerprint mismatch processing module 519 is used to send a reminder message to re-enter the fingerprint to the owner's mobile terminal or the administrator's mobile terminal when the fingerprint data decryption and determination module 503 determines that the decrypted fingerprint data does not match the preset fingerprint data, and Record the number of unsuccessful fingerprint data matching. Moreover, the fingerprint mismatch processing module 519 will not respond to the mobile terminal within the second preset time period if the number of unsuccessful fingerprint data matching exceeds the preset threshold, or fails to match successfully within the first preset time period. connection request message, and send a reminder message to the mobile terminal that the number of failures exceeds a preset threshold or the matching time exceeds a preset time.

The above-mentioned control system runs in the access control, for example, runs in the main controller of the access control, and realizes whether to unlock the access control according to the communication control of the mobile terminal.

Please refer to FIG. 6 , which shows a structural block diagram of an embodiment of an access control system applied to a mobile terminal controlling access according to the present invention. As shown in Figure 6, in order to unlock the access control through the mobile terminal, the access control system applied to the mobile terminal in this embodiment includes a main controller 6, and also includes:

The connection request message sending module 601 is used to send a connection request message to the gate to be controlled, and the connection request message carries the terminal identification of the mobile terminal;

Fingerprint data collection and encryption processing module 602, used to collect fingerprint data when the access control to be controlled determines that the mobile terminal is the owner's mobile terminal or the administrator's mobile terminal, and encrypt the fingerprint data;

Fingerprint data sending module 603, for sending the encrypted fingerprint data to the access control to be controlled;

Wherein, when the gate to be controlled determines that the terminal identifier carried in the connection request message matches the preset identifier stored in the gate, it determines that the mobile terminal is the owner's mobile terminal or the administrator's mobile terminal.

In order to realize the temporary unlocking authorization of visitors, the access control system also includes:

Visitor verification data receiving module 604, for receiving the visitor verification data sent by the access control when the access control to be controlled determines that the mobile terminal is a visitor mobile terminal;

The visitor verification data forwarding module 605 is used to forward the visitor verification data to the owner's mobile terminal of the owner to be visited;

The visitor authorization information generation module 606 is used to generate visitor authorization information according to the combination encryption of the owner binding information and the visitor verification data when receiving the visitor verification data forwarded by the visitor mobile terminal;

Visitor authorization information sending module 607, for sending visitor authorization information to the access control and/or other mobile terminals to be controlled;

Wherein, the owner binding information includes the terminal identification of the owner's mobile terminal of the owner to be accessed and/or the fingerprint data of the owner to be accessed; and

The visitor authorization information receiving and forwarding module 608 is used to receive the visitor authorization information sent by other mobile terminals and forward it to the access control to be controlled.

It should be noted that although the above-mentioned modules related to visitor authorization processing are applied in the mobile terminal as part of the access control system, some modules work and some do not work in a specific mobile terminal. The unified description here is to realize the consistency of the access control system, which can be all set in the mobile terminal, but different modules are enabled to work according to different types of mobile terminals. For example, if the mobile terminal is a visitor's mobile terminal, then the visitor verification data receiving module 604 and the visitor verification data forwarding module 605 in it work, and its visitor authorization information receiving and forwarding module 608 can be started or not started (depending on the visitor's mobile terminal. Whether the mobile terminal of the owner who visits can directly communicate with the access control); and the visitor authorization information generating module 606 and the visitor authorization information sending module 607 do not work. But if the mobile terminal is the owner's mobile terminal, then its built-in visitor verification data receiving module 604, visitor authorization information generating module 606 and visitor authorization information sending module 607 work, while its built-in visitor verification data forwarding module 605, visitor authorization information receiving module And the forwarding module 608 does not work.

Further, the access control system also includes:

The reminder message receiving module is used for receiving the message sent by the access control to be controlled. The messages mentioned here include, but are not limited to, a reminder message that the access control is not unlocked, a reminder message that the fingerprint is re-entered, a reminder message that the number of failures exceeds a preset threshold or the matching time exceeds a preset time.

In addition, in order to bind with access control, the access control system also includes:

The administrator's mobile terminal data sending module 610 is used to send the terminal identification of the administrator's mobile terminal, the administrator's fingerprint data and the administrator's identity information to the access control to be controlled;

The owner's mobile terminal data sending module 611 is used to send the owner's mobile terminal's terminal identification and owner's fingerprint data to the access control to be controlled.

In order to realize the binding between the owner's mobile terminal and the access control under the control of the administrator's mobile terminal, the access control system also includes:

Add a binding device request sending module 612, which is used to send an increase binding device request to the access control to be controlled;

Binding verification data receiving module 613, for receiving the binding verification data sent by the access control to be controlled;

The binding verification data forwarding module 614 is used to forward the binding verification data to the administrator's mobile terminal with management functions;

The binding authorization information generating module 615 is configured to generate binding authorization information according to the administrator binding information and the binding verification data combined encryption when receiving the binding verification data forwarded by other mobile terminals;

The binding authorization information sending module 616 is used to send the binding authorization information to the access control and/or other mobile terminals to be controlled; and

The binding authorization information receiving and forwarding module 617 is configured to receive the binding authorization information sent by other mobile terminals and forward it to the access control to be controlled.

Wherein, the administrator binding information includes any one or more of the terminal identifier of the administrator's mobile terminal, administrator fingerprint data, and administrator identity information.

Similarly, although the above-mentioned binding modules are applied in the mobile terminal as part of the access control system, some modules work and some do not work in a certain mobile terminal. The unified description here is to realize the consistency of the access control system, which can be all set in the mobile terminal, but different modules are enabled to work according to different types of mobile terminals. For example, if the mobile terminal is the mobile terminal of the owner, then the binding verification data receiving module 613 and the binding verification data forwarding module 614 in it work, and its binding authorization information receiving and forwarding module 617 can be started or not (depending on the management Whether the staff mobile terminal can directly communicate with the access control); and the binding authorization information generating module 615 and the binding authorization information sending module 616 do not work. But if the mobile terminal is an administrator's mobile terminal, then its built-in binding verification data receiving module 613, binding authorization information generation module 615 and binding authorization information sending module 616 work, while its built-in binding verification data forwarding module 614 1. The binding authorization information receiving and forwarding module 617 does not work.

Each module of the above-mentioned access control system runs in the mobile terminal under the coordination of the main controller 6, and realizes whether to unlock the access control according to the fingerprint control.

The above embodiments are only used to illustrate the technical solutions of the present invention, rather than to limit them; although the present invention has been described in detail with reference to the foregoing embodiments, those of ordinary skill in the art can still understand the foregoing embodiments. Modifications are made to the technical solutions described, or equivalent replacements are made to some of the technical features; and these modifications or replacements do not make the essence of the corresponding technical solutions deviate from the spirit and scope of the technical solutions claimed in the present invention.

Claims (21)

1. a kind of access control method, which is characterized in that the method includes：

The connection request message for obtaining mobile terminal, judges the terminal iidentification carried in the connection request message and prestores Preset identifications whether match；

If so, judging the mobile terminal for owner's mobile terminal or administrator's mobile terminal；

Judge the finger print data of mobile terminal acquisition and preset finger print datas pre-stored, corresponding to the preset identifications Whether match；

If so, unlock gate inhibition；

If the terminal iidentification carried in the connection request message is mismatched with the preset identifications, the mobile terminal is judged For visitor's mobile terminal, and generate visitor's verify data；

Visitor's verify data is stored, and visitor's verify data is sent to visitor's mobile terminal；

The owner that visitor's verify data is sent to the owner that visitor's mobile terminal to be accessed by visitor's mobile terminal moves Dynamic terminal；

Receive visitor's authorization message that visitor's mobile terminal returns；

Judge whether visitor's authorization message matches with the preset owner's binding information and visitor's verify data of storage；

If so, unlock gate inhibition；

Wherein, owner's binding information includes terminal iidentification and/or the institute of owner's mobile terminal of the owner to be accessed State the finger print data for the owner to be accessed.

2. access control method according to claim 1, which is characterized in that if owner's binding information and the visit Visitor's verify data of the preset owner's binding information and storage of objective verify data and storage mismatches, then not solution is locked a door Prohibit, delete visitor's verify data of the storage, and sends the reminder message of not unlock to visitor's mobile terminal.

3. access control method according to claim 1, which is characterized in that the fingerprint for judging mobile terminal acquisition Data with it is pre-stored, corresponding to the preset identifications preset finger print data whether match after, further include：

Judge the finger print data whether with preset alarm fingerprint data match；

If so, sending warning message to administrative center；

Wherein, the preset alarm fingerprint data refer to：The alarm fingerprint data for obtaining owner's mobile terminal in advance, by this Data after the storage corresponding with the preset identifications of owner's mobile terminal of alarm fingerprint data.

4. access control method according to claim 1, which is characterized in that the method further includes：

Terminal iidentification, fingerprint of administrator data and the administrator's identity information of administrator's mobile terminal are obtained, and correspondence is deposited Storage is preset identifications, preset finger print data and preset identity information；And

Terminal iidentification, the owner's finger print data of owner's mobile terminal are obtained, and correspondence is stored as preset identifications and preset finger Line data.

5. access control method according to claim 4, which is characterized in that the end for obtaining owner's mobile terminal Before end mark, owner's finger print data, further include：

The increase bound device request that owner's mobile terminal is sent, random generation and storage binding validatation data are obtained, and The binding validatation data are sent to owner's mobile terminal；

Receive the binding authorization message that owner's mobile terminal and/or administrator's mobile terminal return；The binding is awarded Information is weighed to be generated according to administrator's binding information and the binding validatation data combined ciphering by administrator's mobile terminal；

The binding authorization message is decrypted, and judges administrator's binding information and the binding validatation data and storage Whether preset administrator's binding information and binding validatation data match；

If so, executing terminal iidentification, the owner's finger print information for obtaining owner's mobile terminal；

Wherein, administrator's binding information include the terminal iidentification of administrator's mobile terminal, fingerprint of administrator data and Any one or more in administrator's identity information.

6. access control method according to claim 1, which is characterized in that if it is determined that finger print data after the decryption with It is pre-stored, corresponding to the preset identifications the matching of preset finger print data it is unsuccessful, then to owner's mobile terminal or Administrator's mobile terminal sends the reminder message for inputting fingerprint again, and records finger print data and match unsuccessful number.

7. access control method according to claim 6, which is characterized in that

If the finger print data, which matches unsuccessful number, exceeds predetermined threshold value, or fail in the first preset time period matching at Work(then not responds the connection request message of the mobile terminal in the second preset time period, and sends and lose to the mobile terminal Lose the reminder message that number exceeds preset time beyond predetermined threshold value or match time.

8. a kind of control system applied to gate inhibition, which is characterized in that the control system includes：

Connection request message obtains and determination module, the connection request message for obtaining mobile terminal, and judges the connection Whether the terminal iidentification carried in request message matches with pre-stored preset identifications；

Finger print data receiving module judges that the mobile terminal is industry for being obtained in the connection request message with determination module When master mobile terminal or administrator's mobile terminal, the finger print data of mobile terminal acquisition is received；

Finger print data determination module, the finger print data and pre-stored, corresponding to the preset identifications for judging to receive Whether preset finger print data matches；

Unlock gate inhibition's module, for the finger print data decryption with determination module judgement decrypt after finger print data with it is described pre- Gate inhibition is unlocked when setting finger print data matching；

Wherein, if the terminal iidentification carried in the connection request message matches with pre-stored preset identifications, the company It connects request message and obtains and judge that the mobile terminal is owner's mobile terminal or administrator's mobile terminal with determination module；

Visitor's verify data generation module judges the mobile terminal for being obtained in the connection request message with determination module To generate visitor's verify data when visitor's mobile terminal；

Visitor's verify data stores and sending module, for storing visitor's verify data, and by visitor's verify data It is sent to visitor's mobile terminal；

The owner that visitor's verify data is sent to the owner that visitor's mobile terminal to be accessed by visitor's mobile terminal moves Dynamic terminal；

Visitor's authorization message receiving module, the visitor's authorization message returned for receiving visitor's mobile terminal；

Visitor's authorization message determination module, preset owner's binding information for judging visitor's authorization message and storage and visitor Whether verify data matches；

Unlock gate inhibition's module verifies number in the preset owner's binding information and visitor of visitor's authorization message and storage According to unlocking gate inhibition when matching；

Wherein, if the terminal iidentification carried in the connection request message is mismatched with the preset identifications, the connection request Message is obtained judges that the mobile terminal is visitor's mobile terminal with determination module.

9. the control system according to claim 8 applied to gate inhibition, which is characterized in that the control system further includes：

Visitor mismatches processing module, believes for judging that the owner binds with determination module in visitor's authorization message decryption When visitor's verify data of breath and the preset owner's binding information and storage of visitor's verify data and storage mismatches, Gate inhibition is not unlocked, deletes visitor's verify data of the storage, and carrying for not unlock is sent to visitor's mobile terminal Awake message.

10. the control system according to claim 8 applied to gate inhibition, which is characterized in that the control system further includes：

Alarm fingerprint data judging and processing module, for the finger print data determination module judgement finger print data with it is described pre- Set after finger print data matches, judge the finger print data whether with preset alarm fingerprint data match, and when matching Warning message is sent to administrative center.

11. the control system according to claim 10 applied to gate inhibition, which is characterized in that the control system is also wrapped It includes：

Alarm fingerprint data acquisition module, the alarm fingerprint data for obtaining owner's mobile terminal refer to the alarm Line data are as preset alarm fingerprint data, storage corresponding with the preset identifications of owner's mobile terminal.

12. the control system according to claim 8 applied to gate inhibition, which is characterized in that the control system further includes：

Administrator's mobile terminal data acquisition module, for obtaining the terminal iidentification of administrator's mobile terminal, administrator refers to Line data and administrator's identity information, and correspondence is stored as preset identifications, preset finger print data and preset identity information；

Owner's mobile terminal data acquisition module, terminal iidentification, owner's finger print data for obtaining owner's mobile terminal, And correspondence is stored as preset identifications and preset finger print data.

13. the control system according to claim 12 applied to gate inhibition, which is characterized in that the control system is also wrapped It includes：

Increase bound device acquisition request module, the increase bound device request sent for obtaining owner's mobile terminal；

Binding validatation data generation module, for getting the increase binding in the increase bound device acquisition request module Binding validatation data are generated after device request at random；

Binding validatation data store and sending module, for storing the binding validatation data, and by the binding validatation data It is sent to owner's mobile terminal；

Authorization message receiving module is bound, is returned for receiving owner's mobile terminal and/or administrator's mobile terminal Binding authorization message；

Authorization message decryption and determination module are bound, for decrypting the binding authorization message, and judges administrator's binding Whether information and the binding validatation data match with the preset administrator's binding information and binding validatation data of storage；

Owner's mobile terminal data acquisition module judges the management in visitor's authorization message decryption with determination module The preset administrator's binding information and binding validatation data phase of member's binding information and the binding validatation data and storage After matching, then the terminal iidentification of owner's mobile terminal, owner's finger print data are obtained, and the corresponding preset identifications and preset of being stored as Finger print data；

Wherein, the binding authorization message is tested by administrator's mobile terminal according to administrator's binding information and the binding Data combined ciphering is demonstrate,proved to generate；Administrator's binding information includes the terminal iidentification of administrator's mobile terminal, administrator Any one or more in finger print data and administrator's identity information.

14. the control system according to claim 8 applied to gate inhibition, which is characterized in that the control system further includes：

Fingerprint mismatch processing module, for the finger print data decryption with determination module judgement decryption after finger print data with When the preset finger print data mismatches, sends input again to owner's mobile terminal or administrator's mobile terminal and refer to The reminder message of line, and record finger print data and match unsuccessful number.

15. the control system according to claim 14 applied to gate inhibition, which is characterized in that the fingerprint mismatch processing Module matches unsuccessful number in the finger print data and exceeds predetermined threshold value, or fail in the first preset time period matching at Work(then not responds the connection request message of the mobile terminal in the second preset time period, and sends and lose to the mobile terminal Lose the reminder message that number exceeds preset time beyond predetermined threshold value or match time.

16. a kind of access control system of mobile terminal applied to access control, which is characterized in that the access control system Including：

Connection request message sending module, for sending connection request message, the connection request message to the gate inhibition to be controlled In carry the terminal iidentification of mobile terminal；

Fingerprint data collection module, for judging the mobile terminal for owner's mobile terminal or management in the gate inhibition to be controlled Finger print data is acquired when member's mobile terminal；

Finger print data sending module, for the finger print data of acquisition to be sent to the gate inhibition to be controlled；

Wherein, the gate inhibition to be controlled is advance in the terminal iidentification and the gate inhibition carried in judging the connection request message When the preset identifications of storage match, judge the mobile terminal for owner's mobile terminal or administrator's mobile terminal；

Visitor's verify data receiving module, for the gate inhibition to be controlled judge the mobile terminal for visitor's mobile terminal when Receive visitor's verify data of gate inhibition transmission；

Visitor's verify data forwarding module, the owner for visitor's verify data to be forwarded to the owner to be accessed move eventually End；

Visitor's authorization message generation module, in the visitor's verify data for receiving visitor's mobile terminal forwarding When, visitor's authorization message is generated according to owner's binding information and visitor's verify data combined ciphering；

Visitor's authorization message sending module, for send visitor's authorization message to the gate inhibition to be controlled and/or other Mobile terminal；

Wherein, owner's binding information includes terminal iidentification and/or the institute of owner's mobile terminal of the owner to be accessed State the finger print data for the owner to be accessed.

17. the access control system of the mobile terminal according to claim 16 applied to access control, which is characterized in that The access control system further includes：

Visitor's authorization message receives and forwarding module, and visitor's authorization message for receiving the transmission of other mobile terminals is simultaneously forwarded to The gate inhibition to be controlled.

18. the access control system of the mobile terminal according to claim 16 applied to access control, which is characterized in that The access control system further includes：

Reminder message receiving module, the message sent for receiving the gate inhibition to be controlled.

19. the access control system of the mobile terminal according to claim 16 applied to access control, which is characterized in that The access control system further includes：

Administrator's mobile terminal data sending module, the terminal for sending administrator's mobile terminal to the gate inhibition to be controlled Mark, fingerprint of administrator data and administrator's identity information；

Owner's mobile terminal data sending module, the terminal mark for sending owner's mobile terminal to the gate inhibition to be controlled Know, owner's finger print data.

20. the access control system of the mobile terminal according to claim 16 applied to access control, which is characterized in that The access control system further includes：

Increase bound device request sending module, increases bound device request for being sent to the gate inhibition to be controlled；

Binding validatation data reception module, the binding validatation data sent for receiving the gate inhibition to be controlled；

Binding validatation data forwarding module, for moving the binding validatation data forwarding to the administrator with management function Terminal；

Bind authorization message generation module, for receive other mobile terminals forwarding the binding validatation data when, root Binding authorization message is generated according to administrator's binding information and the binding validatation data combined ciphering；

Bind authorization message sending module, for send the binding authorization message to the gate inhibition to be controlled and/or other Mobile terminal；

Wherein, administrator's binding information include the terminal iidentification of administrator's mobile terminal, fingerprint of administrator data and Any one or more in administrator's identity information.

21. the access control system of the mobile terminal according to claim 20 applied to access control, which is characterized in that The access control system further includes：

Authorization message reception and forwarding module are bound, the binding authorization message for receiving the transmission of other mobile terminals is simultaneously forwarded to The gate inhibition to be controlled.