High-safety self-service pickup authentication system and method
Through multimodal biometric collection, dynamic QR code generation and abnormal detection sensor array, combined with blockchain evidence storage, the security problem of self-service pickup cabinet is solved and high-security self-service pickup authentication is achieved.
Patent Information
- Application Number
- CN202510353153.2
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2025-03-25
- Publication Date
- 2025-08-01
AI Technical Summary
Traditional self-service pickup cabinets have the risks of forgery, leakage and man-in-the-middle attacks. The biometric system has a high rejection rate in extreme environments, dynamic QR codes are prone to be counterfeited, and lacks real-time abnormal behavior detection, resulting in insufficient security.
It adopts multi-modal biometric acquisition unit, dynamic QR code generator, IoT door lock control module and abnormal unboxing detection sensor array, combined with blockchain evidence storage nodes, to realize multi-level security authentication and real-time monitoring.
It improves the security of the self-service pickup cabinet, prevents false caps, improves biometric accuracy, realizes real-time detection and alarm of abnormal behaviors, and enhances the system's anti-counterfeiting capabilities.
Smart Images
Figure CN120412153A_ABST
Abstract
Description
Technical Field
[0001] The present invention relates to the technical field of self-service terminals, and particularly to a high-security self-service pick-up authentication system and method. Background Art
[0002] Traditional self-service pick-up cabinets rely on single authentication methods such as two-dimensional codes / passwords, and there are risks of forgery, leakage, and man-in-the-middle attacks; existing biometric recognition systems (such as fingerprints / faces) have a rejection rate of 20%-30% in extreme scenarios such as humidity and strong light; dynamic two-dimensional codes lack an anti-counterfeiting mechanism and are easily captured / simulated, resulting in frequent cases of misappropriation; there is a lack of real-time abnormal behavior detection, and violent box-opening cases have occurred under camera occlusion. Summary of the Invention
[0003] The purpose of the present invention is to provide a high-security self-service pick-up authentication system and method for the above problems in the prior art, and thus solve all or one of the above problems existing in the prior art.
[0004] To solve the above technical problems, the specific technical solutions of the present invention are as follows: On the one hand, the present invention provides a high-security self-service pick-up authentication system, including: A multi-modal biometric collection unit for integrating a finger vein recognition module and an iris camera; A dynamic two-dimensional code generator for supporting encryption by the national cryptography SM4 algorithm; An Internet of Things door lock control module for being compatible with triple unlocking protocols of NFC, Bluetooth, and password; An abnormal box-opening detection sensor array for integrating a three-axis accelerometer, an inclination sensor, and a sound and light alarm device; A blockchain evidence storage node for recording permission changes and operation logs.
[0005] As an improved solution, the multi-modal biometric collection unit is further used for: adopting a finger vein image enhancement algorithm to complete the recognition action in a low-light environment of 0.1 lux.
[0006] As an improved solution, the dynamic two-dimensional code generator includes: An AES-256 encryption channel for preventing the two-dimensional code data from being tampered with; An anti-counterfeiting watermark embedding module for supporting dual verification of ultraviolet light / infrared light.
[0007] As an improved solution, the Internet of Things door lock control module is provided with an anti-pry alarm sensor, a multi-level permission management system, and an unlocking log blockchain evidence storage.
[0008] As an improved solution, a triaxial accelerometer, an inclination sensor and an acoustic-optic alarm linkage mechanism are provided in the abnormal unpacking detection sensor array; The measurement range of the inclination sensor is ±45°, and the resolution is 0.01°; The response time of the acoustic-optic alarm linkage mechanism is ≤200 ms.
[0009] On the other hand, the present invention also provides a high-security self-service pick-up authentication method, including the following steps: Obtain the user's vein and iris features through the multi-modal biometric acquisition unit; The dynamic QR code generator creates an encrypted token and pushes it to the user terminal; The user scans the QR code through the mobile terminal to trigger an unlocking request; The Internet of Things door lock control module verifies the permission and unlocks the box body; The abnormal unpacking detection sensor monitors physical attack behaviors in real time; The blockchain node records the full-process operation log; Generate a security audit report regularly; Optimize the biometric recognition model through federated learning; When an abnormal event is triggered, start an acoustic-optic alarm and push it to the security platform; Support the administrator to remotely and forcibly lock high-risk devices.
[0010] As an improved solution, the dynamic QR code generation step includes: Dynamic risk scoring based on user behavior; Set low-risk scenarios and high-risk scenarios based on the dynamic adjustment mechanism of the QR code validity period.
[0011] As an improved solution, the Internet of Things door lock control includes: Unlock the administrator or ordinary user in a timely manner based on the permission level.
[0012] As an improved solution, the abnormal behavior detection includes: Attack pattern recognition based on machine learning and an abnormal event grading response mechanism.
[0013] As an improved solution, the blockchain evidence storage includes: Anchor the hash value of the permission change event to the national cryptographic chain; associate the transaction flow with the zero-knowledge proof of biometric data; desensitize and store sensitive data supporting the national cryptographic SM4 algorithm.
[0014] The beneficial effects of the technical solution of the present invention are: 1. The high-security self-service pick-up authentication system described in the present invention can improve the accuracy of multi-modal biometric recognition through the mutual cooperation of system modules, enhance the security of the interval of the self-service pick-up cabinet, prevent the occurrence of misappropriation events, make up for the defects of the existing technology, and has high application value.
[0015] 2. The high-security self-service pick-up authentication method described in the present invention can orderly call system modules, thereby implementing the system logic of the high-security self-service pick-up authentication system described in the present invention. BRIEF DESCRIPTION OF THE DRAWINGS
[0016] In order to more clearly illustrate the specific embodiments of the present invention or the technical solutions in the prior art, the following will briefly introduce the drawings required for the description of the specific embodiments or the prior art. Obviously, the drawings in the following description are some embodiments of the present invention. For those of ordinary skill in the art, without creative efforts, other drawings can also be obtained based on these drawings.
[0017] Figure 1 is a schematic diagram of the architecture of the high-security self-service pick-up authentication system described in Embodiment 1 of the present invention; Figure 2 is a schematic flow chart of the high-security self-service pick-up authentication method described in Embodiment 2 of the present invention. DETAILED DESCRIPTION OF THE EMBODIMENTS
[0018] The following will elaborate on the preferred embodiments of the present invention in conjunction with the drawings, so that the advantages and features of the present invention can be more easily understood by those skilled in the art, thereby making a clearer and more definite definition of the protection scope of the present invention.
[0019] In the description of the present invention, it should be noted that the embodiments described in the present invention are some embodiments of the present invention, rather than all embodiments; based on the embodiments in the present invention, all other embodiments obtained by those of ordinary skill in the art without creative efforts belong to the protection scope of the present invention.
[0020] The terms "first", "second", etc. in the specification and claims of this article and the above-mentioned drawings are used to distinguish similar objects, and do not necessarily need to be used to describe a specific order or sequence. It should be understood that such used data can be interchanged under appropriate circumstances, so that the embodiments described in this article can be implemented in an order other than those illustrated or described here. In addition, the terms "comprising" and "having" and any variations thereof are intended to cover non-exclusive inclusion. For example, a process, method, device, product, or equipment that includes a series of steps or units does not necessarily have to be limited to those steps or units clearly listed, but may include other steps or units not clearly listed or inherent to these processes, methods, products, or equipment. Example 1
[0021] This example provides a high - security self - service pick - up authentication system, as Figure 1 shown, including: A multi - modal biometric acquisition unit, used to integrate a finger - vein recognition module and an iris camera; A dynamic QR code generator, used to support encryption with the national cryptographic SM4 algorithm; An Internet of Things door lock control module, used to be compatible with triple unlocking protocols of NFC, Bluetooth, and password; An abnormal unpacking detection sensor array, used to integrate a three - axis accelerometer, an inclination sensor, and an acoustic - optical alarm device; A blockchain evidence - storing node, used to record permission changes and operation logs.
[0022] As an improved solution, the multi - modal biometric acquisition unit is also used to: adopt a finger - vein image enhancement algorithm to complete the recognition action in a low - light environment of 0.1 lux.
[0023] As an improved solution, the dynamic QR code generator includes: An AES - 256 encryption channel, used to prevent QR code data from being tampered with; An anti - counterfeiting watermark embedding module, used to support dual verification of ultraviolet light / infrared light.
[0024] As an improved solution, the Internet of Things door lock control module is equipped with a pry - proof alarm sensor, a multi - level permission management system, and blockchain evidence - storing for unlocking logs.
[0025] As an improved solution, the abnormal unpacking detection sensor array is equipped with a three - axis accelerometer, an inclination sensor, and an acoustic - optical alarm linkage mechanism; The measurement range of the inclination sensor is ±45°, and the resolution is 0.01°; The response time of the acoustic - optical alarm linkage mechanism is ≤200 ms.
[0026] It should be noted that the examples here are only for explaining the present invention and cannot thus limit the protection scope of the present invention. Example 2
[0027] Based on the same inventive concept as the high - security self - service pick - up authentication system described in Example 1, this example provides a high - security self - service pick - up authentication method, as Figure 2 shown, including the following steps: Obtain the user's vein and iris features through the multi - modal biometric acquisition unit; The dynamic QR code generator creates an encrypted token and pushes it to the user terminal; The user scans the QR code through the mobile terminal to trigger an unlocking request; The Internet of Things door lock control module verifies the permission and unlocks the box; The abnormal unpacking detection sensor monitors physical attack behaviors in real time; The blockchain node records the full-process operation log; Generate a security audit report regularly; Optimize the biometric recognition model through federated learning; When an abnormal event is triggered, start the sound and light alarm and push it to the security platform; Support the administrator to remotely and forcibly lock high-risk devices.
[0028] As an improved solution, the dynamic QR code generation step includes: Dynamic risk scoring based on user behavior; Set low-risk scenarios and high-risk scenarios based on the dynamic adjustment mechanism of the QR code validity period.
[0029] As an improved solution, the Internet of Things door lock control includes: Unlock the administrator or ordinary user in a timely manner based on the permission level.
[0030] As an improved solution, the abnormal behavior detection includes: Attack pattern recognition based on machine learning and an abnormal event grading response mechanism.
[0031] As an improved solution, the blockchain evidence storage includes: Anchor the hash value of the permission change event to the national secret chain; associate the transaction flow with the zero-knowledge proof of biometric data; desensitize and store sensitive data supporting the national secret SM4 algorithm.
[0032] It should be understood that in various embodiments of this article, the magnitudes of the serial numbers of the above processes do not mean the order of execution. The execution order of each process should be determined by its function and internal logic, and should not constitute any limitation to the implementation process of the embodiments of this article.
[0033] It should also be understood that in the embodiments of this article, the term "and / or" is merely a description of the association relationship of associated objects, indicating that three relationships may exist. For example, A and / or B may represent: A exists alone, A and B exist simultaneously, and B exists alone. In addition, the character " / " in this article generally represents an "or" relationship between the associated objects before and after.
[0034] Those of ordinary skill in the art can realize that the units and algorithm steps of each example described in combination with the embodiments disclosed herein can be implemented by electronic hardware, computer software, or a combination of the two. To clearly illustrate the interchangeability of hardware and software, the composition and steps of each example have been generally described according to functions in the above description. Whether these functions are executed in a hardware or software manner depends on the specific application and design constraints of the technical solution. Professional technicians can use different methods to implement the described functions for each specific application, but such implementation should not be considered to exceed the scope of this article.
[0035] Those skilled in the art can clearly understand that for the convenience and brevity of description, the specific logical processes of the methods described above can refer to the corresponding working processes of the systems, devices, and units in the foregoing method embodiments, and will not be elaborated herein.
[0036] In several embodiments provided in this article, it should be understood that the disclosed systems, devices, and methods can be implemented in other ways. For example, the device embodiments described above are merely illustrative. For example, the division of the units is only a logical function division. In actual implementation, there may be other division methods. For example, multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. In addition, the displayed or discussed couplings or direct couplings or communication connections to each other can be indirect couplings or communication connections through some interfaces, devices, or units, and can also be in the form of electrical, mechanical, or other connections.
[0037] The units described as separate components may or may not be physically separated, and the components displayed as units may or may not be physical units, that is, they can be located in one place, or can be distributed to multiple network units. Some or all of the units can be selected according to actual needs to achieve the purpose of the solution of the embodiments in this article.
[0038] In addition, the functional units in each embodiment of this article can be integrated into one processing unit, or each unit can exist physically alone, or two or more units can be integrated into one unit. The above integrated units can be implemented in the form of hardware or in the form of software functional units. <s
[0039] When the integrated unit is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution herein, in essence, or the part that contributes to the prior art, or all or part of the technical solution can be embodied in the form of a software product. The computer software product is stored in a storage medium and includes several instructions for causing a computer device (which may be a personal computer, a server, or a network device, etc.) to execute all or part of the steps of the methods described in the various embodiments herein. The foregoing storage medium includes: various media such as USB flash drives, mobile hard disks, read-only memories (ROMs), random access memories (RAMs), magnetic disks, or optical discs that can store program codes.
[0040] The above are only the embodiments of the present invention, and thus do not limit the patent scope of the present invention. Any equivalent structure or equivalent process transformation made by using the content of the specification and drawings of the present invention, or directly or indirectly applied in other related technical fields, shall be equally included in the patent protection scope of the present invention.
Claims
1. A high-security self-service pick-up authentication system, characterized in that, Including: A multi-modal biometric collection unit for integrating a finger vein recognition module and an iris camera; A dynamic QR code generator for supporting encryption with the national cryptographic SM4 algorithm; An Internet of Things door lock control module for being compatible with triple unlocking protocols of NFC, Bluetooth and password; An abnormal unpacking detection sensor array for integrating a three-axis accelerometer, an inclination sensor and an acoustic-optic alarm device; A blockchain evidence storage node for recording permission changes and operation logs.
2. The high-security self-service pick-up authentication system according to claim 1, characterized in that, The multi-modal biometric collection unit is further configured to: adopt a finger vein image enhancement algorithm to complete the recognition action in a low-light environment of 0.1 lux.
3. The high-security self-service pick-up authentication system according to claim 1, characterized in that, The dynamic QR code generator includes: An AES-256 encryption channel for preventing QR code data from being tampered with; A anti-counterfeiting watermark embedding module for supporting dual verification of ultraviolet light / infrared light.
4. The high-security self-service pick-up authentication system according to claim 1, characterized in that, The Internet of Things door lock control module is provided with a pry-proof alarm sensor, a multi-level permission management system and an unlocking log blockchain evidence storage.
5. The high-security self-service pick-up authentication system according to claim 1, characterized in that, The abnormal unpacking detection sensor array is provided with a three-axis accelerometer, an inclination sensor and an acoustic-optic alarm linkage mechanism; The measurement range of the inclination sensor is ±45°, and the resolution is 0.01°; The response time of the acoustic-optic alarm linkage mechanism is ≤200 ms.
6. A high-security self-service pick-up authentication method, characterized in that, Including the following steps: Obtain the user's vein and iris features through the multi-modal biometric collection unit; The dynamic QR code generator creates an encrypted token and pushes it to the user terminal; The user scans the QR code through the mobile terminal to trigger an unlocking request; The Internet of Things door lock control module verifies the permission and unlocks the box; the abnormal unpacking detection sensor monitors physical attack behaviors in real time; The blockchain node records the full-process operation logs; generates a security audit report regularly; optimizes the biometric recognition model through federated learning; starts an acoustic-optic alarm and pushes it to the security platform when an abnormal event is triggered; Supports the administrator to remotely and forcibly lock high-risk devices.
7. The high-security self-pickup authentication method according to claim 6, characterized in that The dynamic QR code generation step includes: A dynamic risk score based on user behavior; Set low-risk scenarios and high-risk scenarios based on a dynamic adjustment mechanism of the QR code validity period.
8. The high-security self-pickup authentication method according to claim 6, wherein The Internet of Things door lock control includes: Unlocking the administrator or ordinary user in a timely manner based on the permission level.
9. The high-security self-service pick-up authentication method according to claim 6, wherein The abnormal behavior detection includes: An attack pattern recognition and abnormal event grading response mechanism based on machine learning.
10. The high-security self-service pick-up authentication method according to claim 6, characterized in that, The blockchain evidence storage includes: Anchoring the hash value of the permission change event to the national cryptographic chain; associating the transaction flow with the zero-knowledge proof of biometric data; storing sensitive data supporting the national cryptographic SM4 algorithm in a desensitized manner.