WO2018095182A1 - Method and system for data exchange - Google Patents

Abstract

Provided are a method and system for data exchange. The method comprises: a first server receives first information transmitted by a client; the first server assigns a target user for the location information and determines identity information of the target user; the first server transmits second information to the second server; the second server receives the second information and transmits the second information to a permission control device; the permission control device receives the second information and stores the second information; the permission control device detects that a carrier for first information to be authenticated entered a detection range and reads first information to be authenticated from the carrier for the first information to be authenticated, the first information to be authenticated comprising identity information to be authenticated; the permission control device uses the stored identity information of the target user to perform a first authentication with respect to the identity information to be authenticated; and the permission control device executes an authentication operation when the first authentication is successful.

Description

Data interaction method and system

Cross-reference to related applications

This application claims Li Ming's priority on the Chinese Patent Application submitted to the China Patent Office on November 25, 2016, the application number is 201611059494.6, and the invention name is "a data interaction method and system", and Li Ming in November 2016. The priority of the Chinese patent application filed on the 25th is the China Patent Office, the application number is 201611060585.1, and the invention name is "a data interaction method and system".

Technical field

The present invention relates to the field of electronic technologies, and in particular, to a data interaction method and system.

Background technique

At present, in order to improve the security of the community, the entrance of some community gates and the entrances of various buildings in the community usually have access control. The owner who lives in the community can use the access card issued by the community to enter and exit the cell and the building, and the person without the access card cannot enter the cell.

With the rapid development of the Internet, more and more users choose to shop online, order online, or apply for electrical repairs online. When service personnel, such as couriers or maintenance workers, need to provide services, the location is located in the community with access control. Service personnel are usually unable to enter the community. How to enable the service personnel without access rights to enter the cell while providing services to the user without affecting the security of the management of the cell itself is an urgent problem to be solved.

Summary of the invention

The present invention is directed to solving the above problems.

The main object of the present invention is to provide a data interaction method;

Another object of the present invention is to provide a data interaction system;

Another object of the present invention is to provide a data interaction method;

Another object of the present invention is to provide a data interaction system.

In order to achieve the above object, the technical solution of the present invention is specifically implemented as follows:

An aspect of the present invention provides a data interaction method, including: a first server receives first information sent by a client, where the first information includes location information; and the first server allocates a target user to the location information, and determines The identity information of the target user; the first server sends second information to the second server, the second information includes at least identity information of the target user; the second server receives the second information, and Transmitting the second information to the authority control device; the rights control device receiving the second information, and storing the second information; the rights control device detecting that the first to-be-certified information carrier enters a detection range, The first to-be-certified information carrier reads the first to-be-authenticated information, and the first to-be-authenticated information includes identity information to be authenticated; the rights control device uses the stored identity information of the target user to the identity information to be authenticated. Performing the first authentication; the authority control device performs an authorization operation after the first authentication is passed.

Another aspect of the present invention provides a data interaction system, including: a first server, configured to receive first information sent by a client, where the first information includes location information; assign a target user to the location information, determine a location Determining identity information of the target user; transmitting second information to the second server, the second information including at least identity information of the target user; the second server, configured to receive the second information, and control the rights The device sends the second information; the rights control device is configured to receive the second information, and store the second information; and detect that the first to-be-authenticated information carrier enters a detection range, from the first to be authenticated The information carrier reads the first to-be-authenticated information, the first to-be-authenticated information includes the identity information to be authenticated, and performs the first authentication on the to-be-authenticated identity information by using the stored identity information of the target user; After the first authentication is passed, the authorization operation is performed.

An aspect of the present invention provides a data interaction method, including: a first server receives first information sent by a client, the first information includes location information; and the first server allocates a target user to the location information, Determining identity information of the target user; the first server sends second information to the second server, the second information includes at least identity information of the target user; and the second server receives the second information, Storing the second information; the right control device detects that the first to-be-certified information carrier enters the detection range, and reads the first to-be-certified information from the first to-be-authenticated information carrier, where the first to-be-certified information includes the identity to be authenticated Information; and, The rights control device sends an identity information acquisition request to the second server; the second server receives the identity information acquisition request, and sends the second information to the rights control device; the rights control device receives the The second information is used to perform the first authentication on the identity information to be authenticated by using the received identity information of the target user; after the first authentication is passed, the rights control device performs an authorization operation.

According to another aspect of the present invention, a data interaction system is provided, including: a first server, configured to receive first information sent by a client, where the first information includes location information; assign a target user to the location information, determine The second user information is sent to the second server, the second information includes at least the identity information of the target user, and the second server is configured to receive the second information, and store the The second information; the authority control device is configured to detect that the first to-be-certified information carrier enters the detection range, and reads the first to-be-certified information from the first to-be-certified information carrier, where the first to-be-certified information includes the identity to be authenticated And sending the identity information acquisition request to the second server; the second server is further configured to receive the identity information acquisition request, and send the second information to the rights control device; the rights control device, The method is further configured to receive the second information, and perform first authentication on the to-be-authenticated identity information by using the received identity information of the target user. And after the first authentication, performs authorization operations.

According to the technical solution provided by the present invention, after receiving the location information sent by the client, the first server allocates the target user and sends the identity information of the target user to the second server, where the target user is located in the The location information of the customer providing the service (such as a delivery person or a food delivery staff, etc.), the second server sends the identity information of the target user to the authority control device, and when the target user arrives at the location of the authority control device, The first to-be-certified information carrier is placed in the detection area of the authority control device, the authority control device detects and reads the identity information to be authenticated, and performs the first authentication, and if the authentication passes, performs the authorization operation. It can be seen that in the cell with the access control (the access control is the authority control device), even if the target user (such as a delivery person or a food delivery person, etc.) does not have the access card of the cell, the present invention can be used. The solution sends the identity information of the target user to the second server through the first server, and is sent to the access control by the second server. After the access control uses the identity information of the target user to authenticate and pass the target user, the target user can obtain the authorization. Therefore, the user enters the cell. On the one hand, the client who enjoys the service provided by the target user does not need to go out to open the access control for the target user, and provides convenience for the client. On the other hand, the target user is authenticated by the authority control device when entering the cell. After being authorized to enter, security is guaranteed.

DRAWINGS

In order to more clearly illustrate the technical solutions of the embodiments of the present invention, the drawings used in the description of the embodiments will be briefly described below. It is obvious that the drawings in the following description are only some embodiments of the present invention, Those of ordinary skill in the art will be able to obtain other figures from these drawings without the inventive effort.

1 is a flowchart of a data interaction method according to Embodiment 1 of the present invention;

2 is a schematic structural diagram of a data interaction system according to Embodiment 2 of the present invention;

3 is a flowchart of a data interaction method according to Embodiment 3 of the present invention;

FIG. 4 is a schematic structural diagram of a data interaction system according to Embodiment 4 of the present invention.

detailed description

The technical solutions in the embodiments of the present invention are clearly and completely described in the following with reference to the drawings in the embodiments of the present invention. It is obvious that the described embodiments are only a part of the embodiments of the present invention, and not all of the embodiments. All other embodiments obtained by a person of ordinary skill in the art based on the embodiments of the present invention without creative efforts are within the scope of the present invention.

In the description of the present invention, it is to be understood that the terms "center", "longitudinal", "lateral", "upper", "lower", "front", "back", "left", "right", " The orientation or positional relationship of the indications of "upright", "horizontal", "top", "bottom", "inside", "outside", etc. is based on the orientation or positional relationship shown in the drawings, only for the convenience of describing the present invention and The simplification of the description is not intended to limit or imply that the device or component that is referred to has a particular orientation, is constructed and operated in a particular orientation, and thus is not to be construed as limiting. Moreover, the terms "first" and "second" are used for descriptive purposes only and are not to be construed as indicating or implying a relative importance or quantity or location.

In the description of the present invention, it should be noted that the terms "installation", "connected", and "connected" are to be understood broadly, and may be fixed or detachable, for example, unless otherwise explicitly defined and defined. Connected, or integrally connected; can be mechanical or electrical; can be directly connected, or indirectly connected through an intermediate medium, can be the internal communication of the two components. The specific meaning of the above terms in the present invention can be understood in a specific case by those skilled in the art.

The embodiments of the present invention will be further described in detail below with reference to the accompanying drawings.

To facilitate the understanding of the present invention, a brief description of possible application scenarios in this embodiment is provided below:

The applicable scenarios in this embodiment include, but are not limited to, a client, a first server, a second server, and an authority control device; the client purchases a certain service through the client through the online order (for example, online shopping, online ordering, etc.) , the client will location information (such as shipping The address is sent to the first server, the first server allocates a target user (such as a courier) for the location information, and sends the identity information of the target user to the second server, where the second server sends the identity information of the target user to The authority control device (for example, the access control set by the location of the delivery address identifier), the target user holds the first information carrier to be authenticated, and when the target user arrives at the location of the authority control device, the authority control device uses the identity information of the target user to target The user performs the first authentication and authorization.

Example 1

This embodiment provides a data interaction method. As shown in FIG. 1, the method includes the following steps:

101. The first server receives first information sent by a client, where the first information includes location information.

The first server in this embodiment can communicate with the client. The first server may be a server that provides an online service such as an online supermarket or an online ordering service, and the client may be an application for realizing online shopping or ordering services, and the client may be installed on a device held by the user (for example, a PC). , mobile phones, PDAs, etc.).

In this embodiment, the first information may be order information, and the location information may be an order address; for example, when the online shopping is performed, the location information is specifically a delivery address, and when the online order is ordered, the location information is specifically a delivery address and the like. For different application scenarios, the location information may represent address information of different meanings, and is not limited herein.

In addition, the first information may further include information such as an order number, an order detail, an order amount, an order date, a user name of the order, and the like, and is not limited herein.

102. The first server allocates a target user to the location information, and determines identity information of the target user.

In this embodiment, the target user is a person who provides a corresponding service to the client located in the location information. For example, when the online shopping is performed, the target user is specifically a delivery person. When the online order is ordered, the location information is specifically a food delivery person, etc. . For different application scenarios, the target user can indicate the person providing different services, and there is no limitation here.

The identity information of the target user in this embodiment may be ID information or may be any biometric information such as fingerprint information, palm print information or iris information. The ID card information includes at least an ID card number, and the ID card information can be read from the ID card, or can be read from an order graphic code or an order barcode code carrying the ID card information.

103. The first server sends second information to the second server, where the second information includes at least identity information of the target user.

In this embodiment, the second server may be used to manage the rights control device. For example, in the cell with the access control, the rights control device may be the access control, and the second server is the server that can implement data interaction and management for the access control.

In this embodiment, the first server and the second server are mutually independent servers, and each of them functions differently. The first server is used for providing a server for online shopping, online ordering, and the like, the second server is used for data interaction and management of the authority control device, and the first server and the second server can communicate with each other through a wireless network or a wired network. Communicate.

104. The second server receives the second information, and sends the second information to the rights control device.

In this embodiment, the second server and the authority control device can communicate through a wired connection, such as a network cable connection, or can communicate through a wireless network, such as a mobile network, a local area network in a cell, and the like.

The permission control device can be an access control.

This step can also be implemented as follows:

The second server receives the second information, and stores the second information; the rights control device sends an identity information acquisition request to the second server; the second server receives the identity information acquisition request, and The authority control device transmits the second information.

105. The permission control apparatus receives the second information, and stores the second information.

In this embodiment, the second information includes at least the identity information of the target user, and the rights control device stores the identity information of the received target user, so as to subsequently perform identity authentication on the target user by using the identity information of the target user.

106. The permission control device detects that the first to-be-certified information carrier enters the detection range, and reads the first to-be-certified information from the first to-be-certified information carrier, where the first to-be-authenticated information includes identity information to be authenticated;

In this embodiment, the authority control device is provided with a module for supporting the information reading function. For example, the module may be an identity card reading module for reading the identity card information, and correspondingly, the first information carrier to be authenticated is an identity card, and the reading is performed. The first information to be authenticated is the ID information; for example, the module is a scan code module, and correspondingly, the first information carrier to be authenticated may be an order graphic code or an order barcode carrying the identity information, and the like. The first to-be-certified information may be that the identity information of the target user is read from the order graphic code or the order barcode (the identity information may be, for example, an identity card number such as an ID number); for example, the module may be a biometric feature. The biometric reading module, correspondingly, the first to-be-certified information carrier is a biometric feature, and the read first to-be-certified information is biometric information. The biometric feature may be a finger, and the corresponding biometric information may be a fingerprint; or the biometric feature may be a palm, and the corresponding biometric information may be a palm print; or the biometric feature may be an eye, and the corresponding biometric information may be Iris, etc., there is no limit here.

107. The rights control device performs first authentication on the to-be-authenticated identity information by using the stored identity information of the target user.

108. The authority control device performs an authorization operation after the first authentication is passed.

In this embodiment, the first authentication of the identity information to be authenticated is performed by using the stored identity information of the target user, which may be implemented by: determining the stored identity information of the target user and the identity information to be authenticated. Whether they are consistent. If they are consistent, the first authentication is passed. If they are inconsistent, the first authentication fails.

In this embodiment, when the authority control device is an access control, performing the authorization operation may be as follows: opening the door lock.

In this embodiment, after receiving the location information sent by the client, the first server allocates the target user and sends the identity information of the target user to the second server, where the target user provides services for the client located in the location information. a person (such as a delivery person or a food delivery person, etc.), the second server sends the identity information of the target user to the authority control device, and when the target user arrives at the location of the authority control device, the first information carrier to be authenticated is held Placed in the detection area of the authority control device, the authority control device detects and reads the identity information to be authenticated, and performs the first authentication, and if the authentication passes, performs the authorization operation. It can be seen that in the cell with the access control (the access control is the authority control device), even if the target user (such as a delivery person or a food delivery person, etc.) does not have the access card of the cell, the present invention can be used. The solution sends the identity information of the target user to the second server through the first server, and is sent to the access control by the second server. After the access control authenticates the target user by using the identity information of the target user, the target user can also obtain the authorization. Therefore, the user enters the cell. On the one hand, the client who enjoys the service provided by the target user does not need to go out to open the access control for the target user, and provides convenience for the client. On the other hand, the target user is authenticated by the authority control device when entering the cell. After being authorized to enter, security is guaranteed.

As an optional implementation manner of this embodiment, after the first authentication is passed or after the authorization operation is performed, the rights control device deletes the stored second information or sets the state of the second information to a failure state. . In order to improve the security of the authorization operation, the embodiment deletes the stored second information after performing the current authentication or the current authorization operation, so that the second information cannot be used for the next authentication or authorization in the subsequent process. Or setting the state of the second information to a failure state, that is, the second information is invalid after being used for one authentication and authorization operation, and then the second information cannot be used for the next authentication or authorization, thereby avoiding the The second information is illegally used again for authentication and authorization in subsequent processes.

As an optional implementation manner of this embodiment, in order to further ensure the security of the authorization operation, the authorization operation may also be set, and the authority control device performs the authorization operation, including: the authority control device passes the first authentication. After that, it is judged whether the time when the timing arrives exceeds the prescribed time, and if the specified time is not exceeded, the authorization operation is performed, wherein the timing starts when the authority control device receives the second information, or the timing is in the authority The control device begins when it receives an instruction sent by the second server.

For example, the time when the right control device receives the second information or receives the timing start command sent by the second server is 9:00 am, and the time starts, and the predetermined time can be set to 12 am, if the first authentication is passed, When the time when the authority control device counts does not exceed 12 o'clock in the morning, the authorization operation is allowed. If the time exceeds 12 o'clock, the authorization operation is not performed even if the first authentication is passed.

As an optional implementation manner of this embodiment, the second information further includes: the location information. The location information can be used to perform second authentication on the target user to further ensure the security of the authorization operation.

As an optional implementation manner of this embodiment, the sending, by the second server, the second information to the rights control device includes: when the location of the rights control device is consistent with the location information, the second server Sending the second information to the authority control device. In practical applications, the second server can manage multiple rights control devices, and different rights control devices have different locations. When the second server sends the second information, because the location information in the second information indicates the address of the service provided by the target user (for example, the target user may be a courier, the location information may be a delivery address, and the permission control device is an access control), First determining whether the location information in the second information is consistent with the location information of the rights control device (eg, determining whether the shipping address is consistent with the location of the access control), and if yes, sending the second information to the rights control device, if not, Then the second message is not sent. In this embodiment, the authority control device that matches the location information and the location information in the second information receives the second information, and the rights control device that does not match the location information in the second information does not receive the second information. Therefore, the authority control device can authorize the target user when the location information of the target user is consistent with the location of the authority control device in the subsequent process; otherwise, the target user is not authorized.

In the above embodiment, when the second server sends the second information to the authority control device, the second server determines that the location information in the second information is consistent with the location of the authority control device, and of course, the second server is transmitting. The second information may also not care whether the location information in the second information is consistent with the location of the rights control device, but directly sends the second information to each rights control device, and the rights control device determines the second information. Whether the location information is consistent with the location information of the self, and then corresponding processing:

As an optional implementation manner of this embodiment, after receiving the second information, the rights control device may perform the following operations: the location information and the rights control in the second information by the rights control device When the location information of the device is consistent, the second information is stored. In this embodiment, the second information sent by the second server to the authority control device may occur, and the location information carried by the second information is inconsistent with the location of the rights control device, and the rights control device is in the second information. When the location information in the location is consistent with the location information of the rights control device, the second information is stored, and if not, the second information is not stored, so that the subsequent rights control device uses the location information to perform the second At the time of authentication, when the location of the service provided by the target user is consistent with the location information stored by the authority control device, authorization of the authority control device may be obtained; otherwise, authorization may not be obtained, further ensuring authorization operation Safety.

As an optional implementation manner of this embodiment, before the authorization control apparatus performs the authorization operation, in addition to performing the first authentication on the target user by using the identity information, the second location may be performed on the target user by using the stored location information. The method further includes: the authority control device detects that the second to-be-certified information carrier enters the detection range, and reads the second to-be-certified information, wherein the second to-be-certified information includes: location information to be authenticated; The rights control device performs the second authentication on the to-be-authenticated location information by using the stored location information; at this time, the rights control device performs an authorization operation, specifically: after the first authentication and the second authentication are both passed, the authorization is performed. operating. In this embodiment, the second to-be-certified information carrier includes an order graphic code or an order barcode carrying the location information, and when the target user carries the goods (the order graphic code or the order barcode indicating the order information is attached to the goods), the access control device is located. In the position, the authority control device can read the delivery address from the order graphic code or the order barcode, the delivery address is equivalent to the location information to be authenticated, and since the permission control device has previously stored the location information, if the read location to be authenticated If the information is consistent with the previously stored location information, the second authentication passes, otherwise the second authentication fails.

In the following, the target user is the courier and the location information is the delivery address as an example: for example, there are 8 buildings in a community, each building has an access control, and the access control in the 8th building receives the second information. If the delivery address in the second information is the 8th floor, the access control of the 8th building stores the second information (the second information includes the courier's identity information and the shipping address), otherwise the second is not stored. Information, follow-up If the courier arrives at Building 8, if the delivery address of the goods that the courier needs to deliver is the No. 8 building, the access control of Building No. 8 reads the shipping address through the scanning order information, and passes the location information. The result of the comparison is that the delivery address is the same as the previously stored delivery address, then the access control of the 8th building is authorized by the courier, so the courier enters the 8th building; and if the courier needs to deliver the goods When the delivery address is not the 8th floor, the access control of the 8th building reads the delivery address by scanning the order information. If the result of the position information comparison is that the delivery address is inconsistent with the previously stored delivery address, then the Courier can't get 8 Floor access authorization, they can not enter the Building 8.

As an optional implementation manner of this embodiment, before the authorization control device performs the authorization operation, in addition to performing the first authentication on the target user by using the identity information, the location information of the permission control device may be used to perform the first In the second embodiment, the privilege control device does not need to store the location information in the second information, and directly performs the second authentication by using the location information of the privilege control device. Specifically, the method further includes: the privilege control device Detecting that the second to-be-certified information carrier enters the detection range, and reading the second to-be-certified information from the second to-be-certified information carrier, wherein the second to-be-certified information includes: to-be-authenticated location information; The second authentication is performed on the to-be-authenticated location information by using the location information of the permission control device. The authorization control device performs an authorization operation, including: after the first authentication and the second authentication are both passed, performing an authorization operation. In this embodiment, the second to-be-certified information carrier includes an order graphic code or an order barcode carrying the order information, and the permission control device can read the delivery address from the order graphic code or the order barcode, which is equivalent to the authentication to be authenticated. The location information, because the rights control device itself also has location information, if the read location information to be authenticated is consistent with the location information of the rights control device, the second authentication passes, otherwise the second authentication fails. That is to say, when the authority control device performs the second authentication by using the location information, when the location (for example, the delivery address) of the service provided by the target user is consistent with the location information of the authority control device, the authorization of the authority control device can be obtained. Otherwise, authorization cannot be obtained, further ensuring the security of the authorization operation.

It should be noted that, in this embodiment, when the first to-be-authenticated information carrier and the second to-be-certified information carrier both carry the identity information and the location information of the target user, the first to-be-authenticated information carrier and the second to-be-certified information The carrier may be the same carrier. For example, the first to-be-certified information carrier and the second to-be-certified information carrier are both an order graphic code or an order barcode, and the order graphic code or the order barcode carries the identity information and location information of the target user. The control device can obtain the identity information of the target user by scanning the code, and can also obtain the location information. Certainly, the first to-be-certified information carrier and the second to-be-certified information carrier may be different carriers. For example, the first to-be-certified information carrier is an identity card of the target user, and the second to-be-certified information carrier is an order graphic code or an order barcode. Location information is carried in the order graphic code or order barcode.

As an optional implementation manner of this embodiment, the method further includes: after the first authentication is passed, the rights control device sends the identity information of the target user to the client. The permission control device sends the identity information of the target user to the client, so that the client prompts the client that the target user has passed the authorization. For example, after the first pass of the access control to the courier, the access control sends the identity information of the courier to the client, so that The client can prompt the courier to be certified for access control and will be delivered soon.

Example 2

The embodiment provides a data interaction system, which can be used to execute the data interaction method in Embodiment 1, as shown in FIG. 2, the system includes: a first server 11, a second server 12, and an authority control device 13;

The first server 11 is configured to receive first information sent by the client, where the first information includes location information, assign a target user to the location information, determine identity information of the target user, and send the second information to the second server. The server sends the second information, where the second information includes at least the identity information of the target user;

The second server 12 is configured to receive the second information, and send the second information to the rights control device;

The right control device 13 is configured to receive the second information, and store the second information; detecting that the first to-be-certified information carrier enters the detection range, and reading the first to-be-processed information from the first to-be-certified information carrier Authentication information, the first to-be-certified information includes a body to be authenticated And performing the first authentication on the identity information to be authenticated by using the stored identity information of the target user; and performing an authorization operation after the first authentication is passed.

As an optional implementation manner of this embodiment, the rights control apparatus is further configured to delete the stored second information or set the second information after the first authentication is passed or after the authorization operation is performed. The status is a failed state.

As an optional implementation manner of this embodiment, in order to further ensure the security of the authorization operation, the aging control may be set for the authorization operation, and the privilege control device is specifically configured to determine the timing of the arrival of the timing after the first authentication is passed. Whether the specified time is exceeded, and if the specified time is not exceeded, the authorization operation is performed, wherein the timing starts when the authority control device receives the second information, or the timing receives the second server at the authority control device Start when the command is sent.

As an optional implementation manner of the embodiment, the second information further includes: the location information; the location information may be used to perform second authentication on the target user, further ensuring security of the authorization operation.

As an optional implementation manner of this embodiment, the second server is specifically configured to send, by the second server, the first control device to the rights control device when the location of the rights control device is consistent with the location information. Two information.

As an optional implementation manner of this embodiment, the authority control device is configured to: when the location information in the second information is consistent with the location information of the rights control device, storing the Two information.

As an optional implementation manner of this embodiment, the rights control apparatus is further configured to: before detecting the authorization operation, detecting that the second to-be-certified information carrier enters the detection range, and reading the second to-be-certified information, where The second to-be-certified information includes: location information to be authenticated; the rights control device is further configured to perform second authentication on the to-be-authenticated location information by using the stored location information; the rights control device performs an authorization operation, Specifically, after the first authentication and the second authentication are both passed, the authorization operation is performed. As an optional implementation manner of this embodiment, the rights control device is further configured to: before detecting the authorization operation, detecting that the second to-be-certified information carrier enters the detection range, and reading from the second to-be-certified information carrier The second to-be-certified information, wherein the second to-be-certified information includes: location information to be authenticated; and second authentication of the to-be-authenticated location information by using the location information of the rights control device; Specifically, after the first authentication and the second authentication are both passed, the authorization operation is performed.

As an optional implementation manner of this embodiment, the rights control apparatus is further configured to: after the first authentication is passed, send the identity information of the target user to the client.

As an optional implementation manner of this embodiment, the second server is configured to receive the second information, and send the second information to the rights control device: receiving the second information, storing the And receiving the identity information acquisition request, and transmitting the second information to the rights control device.

Example 3

In this embodiment, different from the first embodiment, the permission control device does not store the second information, but the second server stores the second information, and after the permission control device requests the second information from the second server, The first authentication is performed using the identity information of the received target user.

The following is a brief description of the data interaction method provided in this embodiment. For the other parts in the same manner as the first embodiment, reference may be made to the related description in Embodiment 1, and details are not described herein again.

As shown in FIG. 3, the method includes:

201. The first server receives first information sent by a client, where the first information includes location information.

202. The first server allocates a target user to the location information, and determines identity information of the target user.

203. The first server sends second information to the second server, where the second information includes at least identity information of the target user.

204. The second server receives the second information, and stores the second information.

In this embodiment, the second information includes at least the identity information of the target user, and the second server stores the identity information of the target user, so that the second information is provided to the authority control device when the subsequent rights control device requests to obtain the identity information.

205. The permission control device detects that the first to-be-certified information carrier enters the detection range, and reads the first to-be-certified information from the first to-be-authenticated information carrier, where the first to-be-authenticated information includes identity information to be authenticated.

The permission control device sends an identity information acquisition request to the second server; the second server receives the identity information acquisition request, and sends the second information to the rights control device;

In this embodiment, the second server may be used to manage the rights control device. For example, in the cell with the access control, the rights control device may be the access control, and the second server is the server that can implement data interaction and management for the access control.

It should be noted that step 205 and step 206 may be performed at the same time, and step 206 may be performed first and then step 206 is performed, which is not limited herein.

207. The rights control device receives the second information, and performs first authentication on the to-be-authenticated identity information by using the received identity information of the target user.

208. The authority control device performs an authorization operation after the first authentication is passed.

In this embodiment, the rights control device performs the first authentication on the to-be-authenticated identity information by using the received identity information of the target user, which may be implemented by: determining the identity information and the received target information of the target user. Whether the authentication identity information is consistent. If the identity is consistent, the first authentication is passed. If not, the first authentication fails.

As an optional implementation manner of this embodiment, the method further includes: after the first authentication is passed or after performing the authorization operation, the rights control device sends a security processing instruction to the second server; The second server receives the security processing instruction, deletes the stored second information, or sets the state of the second information to a failure state. In order to improve the security of the authorization operation, the embodiment notifies the second server to delete the stored second information after the authorization control device performs the current authentication or the current authorization operation by using the second information, so that the second information cannot be used subsequently. The information is used for the next authentication or authorization, or the second server is notified to set the state of the second information to a failure state, that is, the second information is invalid after being used for one authentication and authorization operation, and the second information cannot be used again. The second information is used for the next authentication or authorization, and the second information is illegally used for authentication and authorization again in the subsequent process.

As an optional implementation manner of this embodiment, the second information further includes: location information;

As an optional implementation manner of this embodiment, the sending, by the second server, the second information to the rights control device includes: when the location of the rights control device is consistent with the location information, the second server Sending the second information to the authority control device.

As an optional implementation manner of this embodiment, before the authorization control apparatus performs the authorization operation, in addition to performing the first authentication on the target user by using the identity information, the location in the second information may be requested by using the second server. The information is used to perform the second authentication on the target user. Specifically, the method further includes: the permission control device detects that the second to-be-certified information carrier enters the detection range, and reads the second to-be-certified information, where the The second to-be-certified information includes: location information to be authenticated; the rights control device performs second authentication on the to-be-authenticated location information by using the received location information; the rights control device performs an authorization operation, specifically: the first After the authentication and the second authentication are passed, the authorization operation is performed.

As an optional implementation manner of this embodiment, before the authorization control device performs the authorization operation, in addition to performing the first authentication on the target user by using the identity information, the location information of the permission control device may be used to perform the first In the second embodiment, the authority control device does not need to request the second server to obtain the location information in the second information, and directly uses the location information of the rights control device to perform the authentication. Specifically, the rights control device performs the authorization operation. The method further includes: the authority control device detects that the second to-be-certified information carrier enters the detection range, and reads the second to-be-certified information from the second to-be-certified information carrier, wherein the second to-be-certified The information includes: location information to be authenticated; the rights control device performs second authentication on the location information to be authenticated by using location information of the rights control device; and the authorization control device performs an authorization operation, including: the first After the authentication and the second authentication are passed, the authorization operation is performed.

As an optional implementation manner of this embodiment, the method further includes: after the first authentication is passed, the rights control device sends the identity information of the target user to the client.

Example 4

The embodiment provides a data interaction system, which can perform the data interaction method in the above embodiment 4. As shown in FIG. 4, the system includes: a first server 21, a second server 22, and an authority control device 23;

The first server 21 is configured to receive first information sent by the client, where the first information includes location information, assign a target user to the location information, determine identity information of the target user, and send the second information to the second server. The server sends the second information, where the second information includes at least the identity information of the target user;

The second server 22 is configured to receive the second information, and store the second information.

The right control device 23 is configured to detect that the first to-be-certified information carrier enters the detection range, and reads the first to-be-certified information from the first to-be-certified information carrier, where the first to-be-authenticated information includes identity information to be authenticated; Sending 22 an identity information acquisition request to the second server;

The second server 22 is further configured to receive the identity information acquisition request, and send the second information to the rights control device 23;

The rights control device 23 is further configured to receive the second information, perform first authentication on the to-be-authenticated identity information by using the received identity information of the target user, and after the first authentication is passed, Perform an authorization operation.

As an optional implementation manner of this embodiment, the rights control apparatus is further configured to send a security processing instruction to the second server after the first authentication is passed or after performing the authorization operation; The server is further configured to receive the security processing instruction, delete the stored second information, or set the state of the second information to a failure state.

As an optional implementation manner of the embodiment, the second information further includes: location information; using the location information, performing second authentication on the target user, further ensuring security of the authorization operation.

As an optional implementation manner of this embodiment, the second server is specifically configured to send, by the second server, the first control device to the rights control device when the location of the rights control device is consistent with the location information. Two information.

As an optional implementation manner of this embodiment, the privilege control device is further configured to: before detecting the authorization operation, detecting that the second to-be-certified information carrier enters the detection range, and reading the second to-be-certified information, where The second to-be-certified information includes: location information to be authenticated; and second authentication of the to-be-authenticated location information by using the received location information; After the first authentication and the second authentication are both passed, the authorization operation is performed.

As an optional implementation manner of this embodiment, the rights control device is further configured to: before detecting the authorization operation, detecting that the second to-be-certified information carrier enters the detection range, and reading from the second to-be-certified information carrier The second to-be-certified information, wherein the second to-be-certified information includes: location information to be authenticated; and second authentication of the to-be-authenticated location information by using the location information of the rights control device; Specifically, after the first authentication and the second authentication are both passed, the authorization operation is performed.

As an optional implementation manner of this embodiment, the rights control apparatus is further configured to: after the first authentication is passed, send the identity information of the target user to the client.

In the description of the present specification, the description with reference to the terms "one embodiment", "some embodiments", "example", "specific example", or "some examples" and the like means a specific feature described in connection with the embodiment or example. A structure, material or feature is included in at least one embodiment or example of the invention. In the present specification, the schematic representation of the above terms does not necessarily mean the same embodiment or example. Furthermore, the particular features, structures, materials, or characteristics described may be combined in a suitable manner in any one or more embodiments or examples.

Although the embodiments of the present invention have been shown and described, it is understood that the foregoing embodiments are illustrative and not restrictive Variations, modifications, alterations and variations of the above-described embodiments are possible within the scope of the invention. The scope of the invention is defined by the appended claims and their equivalents.

Claims (34)

A data interaction method, comprising: The first server receives the first information sent by the client, where the first information includes location information; The first server allocates a target user to the location information, and determines identity information of the target user; The first server sends second information to the second server, where the second information includes at least identity information of the target user; The second server receives the second information, and sends the second information to the rights control device; The authority control device receives the second information and stores the second information; The right control device detects that the first to-be-certified information carrier enters the detection range, and reads the first to-be-certified information from the first to-be-certified information carrier, where the first to-be-certified information includes identity information to be authenticated; The rights control device performs first authentication on the to-be-authenticated identity information by using the stored identity information of the target user. The authority control device performs an authorization operation after the first authentication is passed. The method according to claim 1, further comprising: the authority control means deleting the stored second information or setting the second information after the first authentication is passed or after performing an authorization operation The status is a failed state. The method according to claim 1, wherein the second information further comprises: the location information; The storing, by the permission control device, the second information, when the location information in the second information is consistent with the location information of the rights control device, storing the second information . The method according to claim 3, wherein before the authorization control device performs the authorization operation, the method further includes: The right control device detects that the second to-be-certified information carrier enters the detection range, and reads the second to-be-certified information, wherein the second to-be-certified information includes: to-be-authenticated location information; The authority control device performs second authentication on the to-be-authenticated location information by using the stored location information; The authorization control device performs an authorization operation, where the authorization operation is performed after the first authentication and the second authentication are both passed. The method according to claim 1, wherein the authority control means performs an authorization operation, comprising: after the first authentication is passed, determining, by the authority control means, whether the time of arrival of the time exceeds a prescribed time, if the rule is not exceeded At the time, an authorization operation is performed, wherein the timing starts when the authority control device receives the second information, or the timing starts when the authority control device receives the instruction sent by the second server. The method according to claim 1, wherein the second information further comprises location information; the second server sends the second information to the rights control device, including: the second server is in the permission When the location of the control device coincides with the location information, the second information is sent to the authority control device. The method according to claim 1, wherein before the authorization control device performs the authorization operation, the method further includes: The right control device detects that the second to-be-certified information carrier enters the detection range, and reads the second to-be-certified information from the second to-be-certified information carrier, where the second to-be-certified information includes: to-be-authenticated location information; The rights control device performs second authentication on the to-be-authenticated location information by using the location information of the rights control device; The authorization control device performs an authorization operation, including: after the first authentication and the second authentication are both passed, performing an authorization operation. The method according to any one of claims 1 to 7, wherein the first information to be authenticated is an identity card, a graphic code carrying identity information, a barcode carrying identity information or a biometric. The method according to any one of claims 1 to 7, wherein the method further comprises: after the first authentication is passed, the authority control device sends the identity information of the target user to the client. The method according to claim 1, wherein the second server receives the second information and sends the second information to the rights control device, specifically: The second server receives the second information, and stores the second information; The authority control device sends an identity information acquisition request to the second server; the second server receives the identity information acquisition request, and sends the second information to the rights control device. A data interaction system, comprising: a first server, configured to receive first information sent by a client, where the first information includes location information, assign a target user to the location information, determine identity information of the target user, and send a message to the second server. Two information, the second letter The interest includes at least the identity information of the target user; The second server is configured to receive the second information, and send the second information to the rights control device; The right control device is configured to receive the second information and store the second information; detecting that the first to-be-certified information carrier enters the detection range, and reading the first to-be-certified from the first to-be-certified information carrier Information, the first to-be-authenticated information includes identity information to be authenticated; and the first authentication of the to-be-authenticated identity information is performed using the stored identity information of the target user; and after the first authentication is passed, authorization is performed. operating. The system according to claim 11, wherein the authority control device is further configured to: after the first authentication is passed or after performing an authorization operation, deleting the stored second information or setting the second The status of the message is a failed state. The system according to claim 11, wherein the second information further comprises: the location information; The authority control device is configured to store the second information when the location information in the second information is consistent with the location information of the rights control device. The system of claim 13 wherein: The privilege control device is further configured to: before the performing the authorization operation, detecting that the second to-be-certified information carrier enters the detection range, and reading the second to-be-certified information, where the second to-be-certified information includes: to be authenticated location information; The rights control device is further configured to perform second authentication on the to-be-authenticated location information by using the stored location information. The authorization control device performs an authorization operation, specifically, after the first authentication and the second authentication are passed, performing an authorization operation. The system according to claim 11, wherein the authority control means is configured to determine whether the time of arrival of the time exceeds a predetermined time after the first authentication is passed, and if the specified time is not exceeded, perform an authorization operation, The timing starts when the rights control device receives the second information, or the timing starts when the rights control device receives the command sent by the second server. The system according to claim 11, wherein the second information further comprises location information; the second server is specifically configured to: the location where the rights control device is located and the location information of the second server When they are consistent, the second information is sent to the authority control device. The system of claim 11 wherein: The permission control device is further configured to: before detecting the authorization operation, detecting that the second to-be-certified information carrier enters the detection range, and reading the second to-be-certified information from the second to-be-certified information carrier, where the second to-be-certified information The authentication information includes: location information to be authenticated; and second authentication of the location information to be authenticated by using location information of the rights control device; The authority control device is specifically configured to perform an authorization operation after the first authentication and the second authentication are both passed. The system according to any one of claims 11-17, wherein the first to-be-certified information carrier is an identity card, a graphic code carrying identity information, a barcode carrying identity information, or a biometric. The system according to any one of claims 11-17, wherein the authority control device is further configured to send the identity information of the target user to the client after the first authentication is passed. The system according to claim 11, wherein the second server implements receiving the second information by transmitting the second information to the rights control device: receiving the second information, and storing the second information Determining the second information; and receiving the identity information acquisition request, and transmitting the second information to the rights control device. A data interaction method, comprising: The first server receives the first information sent by the client, where the first information includes location information; The first server allocates a target user to the location information, and determines identity information of the target user; The first server sends second information to the second server, where the second information includes at least identity information of the target user; The second server receives the second information, and stores the second information; The right control device detects that the first to-be-certified information carrier enters the detection range, and reads the first to-be-certified information from the first to-be-certified information carrier, where the first to-be-certified information includes identity information to be authenticated; and the permission The control device sends an identity information acquisition request to the second server; the second server receives the identity information acquisition request, and sends the second information to the rights control device; The rights control device receives the second information, and performs first authentication on the to-be-authenticated identity information by using the received identity information of the target user. The authority control device performs an authorization operation after the first authentication is passed. The method according to claim 21, further comprising: said authority control means transmitting a security processing instruction to said second server after said first authentication is passed or after performing an authorization operation; said second The server receives the security processing instruction, deletes the stored second information, or sets the state of the second information to a failure state. The method according to claim 21, wherein the second information further comprises: location information; Before the authorization control device performs the authorization operation, the method further includes: The right control device detects that the second to-be-certified information carrier enters the detection range, and reads the second to-be-certified information, wherein the second to-be-certified information includes: to-be-authenticated location information; The authority control device performs second authentication on the to-be-authenticated location information by using the received location information; The authorization control device performs an authorization operation, where the authorization operation is performed after the first authentication and the second authentication are both passed. The method according to claim 21, wherein the second information further comprises location information; the second server sends the second information to the rights control device, comprising: the second server is in the permission When the location of the control device coincides with the location information, the second information is sent to the authority control device. The method according to claim 21, wherein before the authorization control device performs the authorization operation, the method further includes: The right control device detects that the second to-be-certified information carrier enters the detection range, and reads the second to-be-certified information from the second to-be-certified information carrier, where the second to-be-certified information includes: to-be-authenticated location information; The rights control device performs second authentication on the to-be-authenticated location information by using the location information of the rights control device; The authorization control device performs an authorization operation, including: after the first authentication and the second authentication are both passed, performing an authorization operation. The method according to any one of claims 21-25, wherein the first to-be-certified information carrier is an identity card, a graphic code carrying identity information, a barcode carrying identity information, or a biometric. The method according to any one of claims 21 to 25, wherein the method further comprises: after the first authentication is passed, the authority control device sends the identity information of the target user to the client. A data interaction system, comprising: a first server, configured to receive first information sent by a client, where the first information includes location information, assign a target user to the location information, determine identity information of the target user, and send a message to the second server. Second information, the second information includes at least identity information of the target user; The second server is configured to receive the second information, and store the second information. The permission control device is configured to detect that the first to-be-certified information carrier enters the detection range, and reads the first to-be-certified information from the first to-be-certified information carrier, where the first to-be-certified information includes identity information to be authenticated; Sending an identity information acquisition request to the second server; The second server is further configured to receive the identity information acquisition request, and send the second information to the rights control device; The rights control device is further configured to receive the second information, perform first authentication on the to-be-authenticated identity information by using the received identity information of the target user, and perform, after the first authentication is passed, Authorized operation. The system according to claim 28, wherein the authority control means is further configured to send a security processing instruction to the second server after the first authentication is passed or after the authorization operation is performed; The second server is further configured to receive the security processing instruction, delete the stored second information, or set a state of the second information to a failure state. The system according to claim 28, wherein said second information further comprises: location information; The privilege control device is further configured to: before detecting the authorization operation, detecting that the second to-be-certified information carrier enters the detection range, and reading the second to-be-certified information, where the second to-be-certified information includes: a to-be-authenticated location Information; and performing second authentication on the to-be-authenticated location information by using the received location information; The authority control device is specifically configured to perform an authorization operation after the first authentication and the second authentication are both passed. The system according to claim 28, wherein said second information further comprises location information; said second server, specifically for said second server at said location of said rights control device and said location information When they are consistent, the second information is sent to the authority control device. The system of claim 28 wherein: The permission control device is further configured to: before detecting the authorization operation, detecting that the second to-be-certified information carrier enters the detection range, and reading the second to-be-certified information from the second to-be-certified information carrier, where the second to-be-certified information The authentication information includes: location information to be authenticated; and second authentication of the location information to be authenticated by using location information of the rights control device; The authority control device is specifically configured to perform an authorization operation after the first authentication and the second authentication are both passed. The system according to any one of claims 28 to 32, wherein the first to-be-certified information carrier is an identity card, a graphic code carrying identity information, a barcode carrying identity information, or a biometric. The system according to any one of claims 28 to 32, wherein the authority control device is further configured to: after the first authentication is passed, send the identity information of the target user to the client.

Images