WO2016115788A1

WO2016115788A1 - Access authorization management method and system

Info

Publication number: WO2016115788A1
Application number: PCT/CN2015/078010
Authority: WO
Inventors: 张子敬; 杨建彬; 李春林
Original assignee: 宇龙计算机通信科技(深圳)有限公司
Priority date: 2015-01-22
Filing date: 2015-04-30
Publication date: 2016-07-28
Also published as: CN104732626B; CN104732626A

Abstract

An access authorization management method and system. The method comprises: a first client obtaining at least one secret key from a server (S301); generating temporary access information according to the access card information of the first client and the secret key (S302); sending the temporary access information to a second client (S303); controlling the opening and closing of the access according to the temporary access information of the second client (S304). The method and the system can conveniently realize the access authorization management for visiting customers, and improve the convenience of users.

Description

Access control authorization management method and system

The present application claims priority to Chinese Patent Application No. 201510032680.X, filed on Jan. 22, 2015, entitled "Access Control Authorization Management Method and System", the entire contents of which are incorporated herein by reference. in.

Technical field

The present invention relates to the field of communications technologies, and in particular, to a method and system for managing access authorization.

Background technique

In the existing access control system, the issuance of the access control card needs to be registered. For example, in the building access control system, each owner needs to register the registration card after the property management office, or a separate IC card, or The user's personal data is written in the SE applet access control application of the user's mobile phone. However, the number of the access card is limited, and the owner applies for registration. However, for temporary visitors, the property department can only ask the owner to confirm the visiting status or the owner can open the door to receive the visitors. The operation process is too cumbersome and brings a lot of inconvenience.

In summary, the prior art obviously has inconveniences and defects in practical use, so it is necessary to improve.

Summary of the invention

In view of the above drawbacks, the object of the present invention is to provide a method and system for managing access control authorization, which can conveniently implement access control authorization management for visiting clients and improve user convenience.

In order to achieve the above object, the present invention provides a method for managing an access authorization, the method comprising:

The first client obtains at least one key from the server;

Generating temporary access control information according to the access card information of the first user end and the key;

Sending the temporary access information to the second user end;

The switch of the access control is controlled according to the temporary access control information of the second user end.

According to the access authorization management method of the present invention, the access card information of the first user terminal includes an access card number and ciphertext information;

The step of generating temporary access control information according to the access card information of the first user end and the key include:

And encrypting the ciphertext information by using the key;

The access card number and the encrypted processed essay information are combined into the temporary access information.

According to the access authorization management method of the present invention, the step of controlling the access control according to the temporary access control information of the second user terminal includes:

The access controller reads temporary access information of the second user end;

The access controller sends the temporary access control information to the server for verification. If the access control controller passes the access control, the access control controller keeps the access control closed and issues a reminder.

According to the access authorization management method of the present invention, the server verification includes:

Obtaining the access card number;

Obtaining the key and the first user end information according to the access card number;

Decrypting the encrypted processed ciphertext information by the key;

Matching the ciphertext information with the information in the database.

According to the access authorization management method of the present invention, the method further includes:

Set the number of times the temporary access information is used and/or the time limit for use.

The present invention further provides an access authorization management system, the system comprising at least a first user terminal, a second user terminal, an access controller, and a server, wherein:

The first user terminal includes:

a key acquisition module, configured to acquire at least one key from the server;

An information generating module, configured to generate temporary access control information according to the access card information of the first user end and the key;

a first sending module, configured to send the temporary access control information to the second user end;

The access controller is configured to control the switch of the access control according to the temporary access control information of the second user end.

According to the access authorization management system of the present invention, the access card information of the first user terminal includes an access card number and ciphertext information;

The information generating module includes:

An encryption submodule, configured to encrypt the ciphertext information by using the key;

And a combination submodule configured to combine the access control card number and the encrypted processed ciphertext information into the temporary access control information.

According to the access authorization management system of the present invention, the access controller includes:

An information reading module, configured to read temporary access control information of the second user end;

An information sending module, configured to send the temporary access control information to the server for verification;

a switch control module, configured to control to open the access control when the temporary access control information is verified, or the access control controller keeps the access control closed;

The information reminding module is configured to send a reminding message when the temporary access control information fails to pass the verification.

According to the access authorization management system of the present invention, the server includes:

a first obtaining module, configured to acquire the access card number;

a second acquiring module, configured to acquire the key and the first user end information according to the access card number;

An information decryption module, configured to decrypt the ciphertext information of the encryption process by using the key;

The information matching module matches the ciphertext information with the information in the database.

According to the access authorization management system of the present invention, the first user terminal further includes:

The permission setting module is configured to set the number of times of using the temporary access control information and/or the use time limit.

The invention obtains a key from the server through the authorized first user terminal, and further processes the temporary access control information through the key and the access card information of the first user end. When the other user comes to visit, the temporary access information may be sent to the second user end corresponding to the user, and the second user sends a door opening request to the access controller through the access control information, and the access controller is configured according to the second user end. Temporary access control information controls the access control switch. Thereby, the invention can conveniently realize the access authorization management of the visiting client and improve the convenience of the user.

DRAWINGS

1 is a schematic structural diagram of an access authorization management system according to an embodiment of the present invention;

2 is a schematic structural diagram of an access authorization management system according to another embodiment of the present invention;

3 is a flowchart of a method for managing an access authorization according to an embodiment of the present invention;

4 is a flow chart of a method for managing access control authorization according to another embodiment of the present invention.

detailed description

The present invention will be further described in detail below with reference to the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only The invention is only intended to be illustrative, and is not intended to limit the invention.

Referring to FIG. 1, the present invention provides an access authorization management system. The system 100 includes at least a first user terminal 10, a server 20, a second user terminal 30, and an access controller 40. Specifically, the following:

The first user terminal 10, that is, the user terminal corresponding to the authorized user, for example, in the building access control system, the authorized user can be understood as the owner, and the first user terminal can be understood as the terminal integrated with the access control function used by the authorized user, for example, integrated. NFC (Near Field Communication) mobile phone, PDA (Personal Digital Assistant), tablet, etc. And the first client 10 includes:

The key obtaining module 11 is configured to acquire at least one key from the server 20. The key is a temporary key that can be generated and set by the server 20, such as the duration of use.

The information generating module 12 is configured to generate temporary access control information according to the access card information and the key of the first user terminal 10. When the temporary access information is generated, the first client 10 may add the temporary access information to the temporary use identifier through the information generating module 12.

The first sending module 13 is configured to send the temporary access information to the second client 30.

The second user terminal 30 of the present invention is a use terminal of an unauthorized user, and has no right to apply for registration of the access control card. For example, in the building access control system, an unauthorized user can be understood as a temporary visiting guest, and the second user terminal 30 can be understood as an NFC-enabled mobile phone, PDA, tablet, etc. used by unauthorized users. After receiving the temporary access control information, it writes its own SE Applet.

When the second user terminal 30 is close to the access controller 40, the access controller 40 reads the temporary access control information and controls the switch of the access control according to the temporary access control information of the second user terminal 30.

Specifically, the access card information of the first user terminal 10 of the present invention includes an access card number and a ciphertext information. Referring to FIG. 2, the information generating module 12 includes:

The encryption sub-module 121 is configured to process the ciphertext information by using the key encryption process.

The combination sub-module 122 is configured to combine the access control card number and the encrypted processed ciphertext information into the temporary access control information.

In the temporary access control information, the access card number is used as the plaintext information, and the ciphertext information includes the electronic authentication information in the access card of the first user terminal 10.

The access controller 40 includes:

The information reading module 41 is configured to read temporary access control information of the second user terminal 30.

The information sending module 42 is configured to send the temporary access control information to the server 20 for verification.

The switch control module 43 is configured to control the opening of the access control when the temporary access control information is verified, otherwise the access control controller keeps the access control closed.

The information reminding module 44 is configured to send reminder information when the temporary access control information fails to pass the verification.

In an actual application, after the temporary access control information of the second user end is read, the access controller 40 interacts with the server 20 and sends the temporary access control information to the server 20 for verification. The server 20 returns the verification result to the access controller 40, and the access controller 40 controls the switch of the access control system based on the verification result.

Preferably, in this embodiment, the server 20 includes:

The first obtaining module 21 is configured to obtain the access card number.

The second obtaining module 22 is configured to acquire the key and the information of the first user terminal 10 according to the access card number.

The information decryption module 23 is configured to decrypt the ciphertext information of the encryption process by using the key.

The information matching module 24 matches the ciphertext information with the information in the database.

When the second user terminal 30 swipes the temporary access card, the access controller 40 reports the read temporary access information to the server 20. After receiving the message, the access control server decomposes the message, first obtaining the plaintext part, and passing the plaintext. (that is, the access card number authorized by the authorized user) searches the database for all the information of the access card, including the authorized user (first user) personal information and the authority and the authority to distribute the temporary access card, and the server 20 will pass the plaintext card number. The decryption key is obtained, and the ciphertext portion of the temporary access control information is decrypted by the decryption key. Finally, the server 20 compares the decrypted information with the information in the database, and after the verification is passed, the access controller 40 is notified to unlock and release. Thereby, the invention can conveniently realize the access authorization management of the visiting client and improve the convenience of the user.

More preferably, the first client 10 of the present invention may further set a permission setting module 14 for setting the number of times of use and/or the use time of the temporary access control information. After the temporary access card is dispatched, it is valid within the set time. After the expiration, the temporary access card is invalid. Or the temporary access card can only use the set number when the temporary access card is distributed. If the number of times exceeds the maximum, the temporary access card is invalid. These settings may be set by the first client 10 or the server 20, or may be carried in temporary access information, and the server 20 records the usage process.

Referring to FIG. 3, the present invention provides a method for managing an access authorization, which can be implemented by the access authorization management system 100 shown in FIG. 1. The method includes:

In step S301, the first client 10 acquires at least one key from the server 20. The key is temporary The key can be generated by the server 20 and set its usage rights, such as the duration of use. Of course, the communication manner between the first client 10 and the server 20 may be a wireless or mobile network, and the wireless network includes Wifi, Bluetooth, NFC, etc., and the mobile network includes mobile cellular networks such as 2G, 3G, and 4G.

Step S302, generating temporary access control information according to the access card information of the first user terminal 10 and the key. When the temporary access information is generated, the first client 10 may add the temporary access information to the temporary use identifier through the information generating module 12.

Step S303, the temporary access control information is sent to the second user terminal 30. The second user terminal 30 of the present invention is a use terminal of an unauthorized user, and has no right to apply for registration of the access control card. For example, in the building access control system, an unauthorized user can be understood as a temporary visiting guest, and the second user terminal 30 can be understood as an NFC-enabled mobile phone, PDA, tablet, etc. used by unauthorized users. After receiving the temporary access control information, it writes its own SE Applet.

Step S304, controlling the switch of the access control according to the temporary access control information of the second user terminal 30.

The invention generates a set of temporary access encryption key for each authorized user by the server 20, and the authorized user can obtain the temporary access encryption key of the corresponding authority through the network. When there is a visitor, the authorized user sequentially obtains a temporary access encryption key. The access card information is encrypted and sent to the visitor's terminal, and the visitor's terminal writes the received information into its own SE Applet, so that the visitor can verify the entry by swiping the access control, which greatly improves the user's convenience.

FIG. 4 is a flowchart of a method for managing access control authorization according to another embodiment of the present invention, which may be implemented by the system 100 shown in FIG. 2, where the access card information of the first user terminal 10 includes an access card number and a ciphertext. Information, the method includes:

In step S401, at least one key is acquired from the server 20.

Step S402, the ciphertext information is processed by the key encryption process.

Step S403, combining the access card number and the encrypted processed ciphertext information into the temporary access control information.

Step S404, sending temporary access control information to the second user terminal 30

Step S405, reading temporary access information of the second user terminal 30.

In step S406, the temporary access control information is sent to the server 20 for verification.

Step S407, acquiring the access card number.

Step S408, acquiring the key and the information of the first user end 10 according to the access card number.

Step S409, decrypting the ciphertext information of the encryption process by using the key.

Step S410, matching the ciphertext information with the information in the database to verify.

In step S411, the temporary access control information is opened by the verification control.

In step S412, the temporary access control information does not pass the verification access controller to keep the access control closed.

In step S413, a reminder message that the verification fails is issued.

More preferably, the present invention can also set the number of uses and/or the time limit of use of the temporary access control information by the first client terminal 10. After the temporary access card is dispatched, it is valid within the set time. After the expiration, the temporary access card is invalid. Or the temporary access card can only use the set number when the temporary access card is distributed. If the number of times exceeds the maximum, the temporary access card is invalid. These settings may be set by the first client 10 or the server 20, or may be carried in temporary access information, and the server 20 records the usage process.

In summary, the present invention obtains a key from the server through the authorized first user terminal, and further processes the temporary access control information through the key and the access card information of the first user end. When the other user comes to visit, the temporary access information may be sent to the second user end corresponding to the user, and the second user sends a door opening request to the access controller through the access control information, and the access controller is configured according to the second user end. Temporary access control information controls the access control switch. Thereby, the invention can conveniently realize the access authorization management of the visiting client and improve the convenience of the user.

The invention may, of course, be embodied in a variety of other embodiments without departing from the spirit and scope of the invention. Changes and modifications are intended to be included within the scope of the appended claims.

Claims

A method for managing an access authorization, characterized in that the method comprises:

The first client obtains at least one key from the server;

Generating temporary access control information according to the access card information of the first user end and the key;

Sending the temporary access information to the second user end;

The switch of the access control is controlled according to the temporary access control information of the second user end.
The access authorization management method according to claim 1, wherein the access card information of the first user end comprises an access card number and ciphertext information;

The step of generating the temporary access control information according to the access card information of the first user end and the key includes:

And encrypting the ciphertext information by using the key;

The access card number and the encrypted processed essay information are combined into the temporary access information.
The access authorization management method according to claim 2, wherein the step of controlling the access control according to the temporary access control information of the second user terminal comprises:

The access controller reads temporary access information of the second user end;

The access controller sends the temporary access control information to the server for verification. If the access control controller passes the access control, the access control controller keeps the access control closed and issues a reminder.
The access authorization management method according to claim 3, wherein the server verification comprises:

Obtaining the access card number;

Obtaining the key and the first user end information according to the access card number;

Decrypting the encrypted processed ciphertext information by the key;

Matching the ciphertext information with the information in the database.
The access authorization management method according to any one of claims 1 to 4, wherein the method further comprises:

Set the number of times the temporary access information is used and/or the time limit for use.
An access authorization management system, characterized in that the system comprises at least a first user end, a second user end, an access controller and a server, wherein:

The first user terminal includes:

a key acquisition module, configured to acquire at least one key from the server;

An information generating module, configured to generate temporary access control information according to the access card information of the first user end and the key;

a first sending module, configured to send the temporary access control information to the second user end;

The access controller is configured to control the switch of the access control according to the temporary access control information of the second user end.
The access authorization management system according to claim 6, wherein the access card information of the first user end comprises an access card number and esoteric information;

The information generating module includes:

An encryption submodule, configured to encrypt the ciphertext information by using the key;

And a combination submodule configured to combine the access control card number and the encrypted processed ciphertext information into the temporary access control information.
The access authorization management system according to claim 7, wherein the access controller comprises:

An information reading module, configured to read temporary access control information of the second user end;

An information sending module, configured to send the temporary access control information to the server for verification;

a switch control module, configured to control to open the access control when the temporary access control information is verified, or the access control controller keeps the access control closed;

The information reminding module is configured to send a reminding message when the temporary access control information fails to pass the verification.
The access authorization management system according to claim 8, wherein the server comprises:

a first obtaining module, configured to acquire the access card number;

a second acquiring module, configured to acquire the key and the first user end information according to the access card number;

An information decryption module, configured to decrypt the ciphertext information of the encryption process by using the key;

The information matching module matches the ciphertext information with the information in the database.
The access authorization management system according to any one of claims 6 to 9, wherein the first user terminal further comprises:

The permission setting module is configured to set the number of times of using the temporary access control information and/or the use time limit.