Safety control method and device for public space password-free login equipment and computer equipment

Abstract

The invention relates to a public space password-free login equipment safety control method and device and computer equipment. The method comprises the following steps: scanning a two-dimensional code identifier configured for a target public space to obtain encrypted verification information corresponding to the two-dimensional code identifier, the encrypted verification information being information obtained by encrypting based on an item number identifier and a space number identifier of the target public space; the encrypted verification information is sent to a server, and if the encrypted verification information is matched with stored information in the server, Mesh network information set based on the target public space and returned by the server is received; and establishing a Mesh network connection between the terminal and the intelligent public equipment in the target public space based on the Mesh network information, generating a control instruction based on the Mesh network connection, and sending the control instruction to the intelligent public equipment to realize security control of the intelligent public equipment. By adopting the method, the password-free security control of the intelligent public equipment in the public space can be realized.

Description

Technical Field

[0001] This application relates to the technical field of public safety, and particularly to a method, device, and computer device for secure control of passwordless login devices in public spaces. Background Art

[0002] In the technical field of public safety, it involves network login connections to servers to control intelligent public devices in public spaces.

[0003] In related network login connection methods, user identity verification is achieved by entering account passwords, and then the control of intelligent public devices by the terminal is realized through the interaction of control instructions between the server and the verified terminal. However, this method has drawbacks such as cumbersome operations and being easily counterfeited, resulting in problems such as low access efficiency, poor security, and difficulty in limiting control permissions to specific spaces in actual public scenarios. Summary of the Invention

[0004] Based on this, to address the above technical problems, it is necessary to provide a method, device, computer device, and computer-readable storage medium for secure control of passwordless login devices in public spaces, which are used to achieve passwordless and secure control of intelligent public devices in public spaces, so as to improve the security management ability and usage convenience of intelligent public devices.

[0005] In a first aspect, this application provides a method for secure control of passwordless login devices in public spaces, including: Scanning a QR code identifier configured for a target public space to obtain encrypted verification information corresponding to the QR code identifier, where the encrypted verification information is information obtained by encrypting the project number identifier and space number identifier of the target public space; Sending the encrypted verification information to a server, and if the encrypted verification information matches the stored information in the server, receiving Mesh network information set for the target public space returned by the server; Based on the Mesh network information, establishing a Mesh network connection between the terminal and intelligent public devices in the target public space, and generating and sending a control instruction to the intelligent public device based on the Mesh network connection to achieve secure control of the intelligent public device.

[0006] [[ID=**28**]]In a second aspect, this application also provides a device for secure control of passwordless login devices in public spaces, including: A scanning module for scanning a QR code identifier configured for a target public space to obtain encrypted verification information corresponding to the QR code identifier, where the encrypted verification information is information obtained by encrypting the project number identifier and space number identifier of the target public space; A verification module, configured to send the encrypted verification information to a server. If the encrypted verification information matches the information stored in the server, it receives the Mesh network information set based on the target common space returned by the server. A connection module, configured to establish a Mesh network connection between the terminal and intelligent public devices in the target common space based on the Mesh network information, and generate and send a control instruction to the intelligent public devices based on the Mesh network connection to achieve secure control of the intelligent public devices.

[0007] In a third aspect, the present application further provides a computer device, including a memory and a processor. The memory stores a computer program, and when the processor executes the computer program, the above steps are implemented.

[0008] In a fourth aspect, the present application further provides a computer-readable storage medium, on which a computer program is stored. When the computer program is executed by a processor, the above steps are implemented.

[0009] For the above public space password-free login device security control method, device, computer device and computer-readable storage medium, first, by scanning the QR code identifier binding the target public space to obtain the encrypted verification information including the encrypted combination of the project number identifier and the space number identifier, the unique identity association between the terminal and the physical public space is realized; furthermore, by sending the encrypted verification information to the server and comparing it with the stored information to return the Mesh network information corresponding to the target public space, it is ensured that only the terminals that have passed the identity verification can obtain the subsequent network access permission; furthermore, based on the Mesh network information, a Mesh network connection between the terminal and the intelligent public devices is established and a control instruction is issued by the terminal, so as to realize the secure control execution link between the terminal and the intelligent public devices in the target public space. Based on this, by introducing the QR code recognition and encryption verification mechanism to realize the space binding control permission, and then constructing a secure device control path through the network information authorization and network access process, the password-free secure control of the intelligent public devices in the public space is realized, so as to improve the security management ability and use convenience of the intelligent public devices. Description of the Drawings

[0010] In order to more clearly illustrate the technical solutions in the embodiments of the present application or related technologies, the following will briefly introduce the drawings required for use in the description of the embodiments or related technologies. Obviously, the drawings in the following description are only some embodiments of the present application. For those of ordinary skill in the art, other drawings can be obtained based on these drawings without creative efforts.

[0011] Figure 1Schematic flowchart of the security control method for password-free login devices in public spaces in one embodiment; Figure 2 Schematic flowchart of the security control method for password-free login devices in public spaces in another embodiment; Figure 3 Block diagram of the structure of the security control device for password-free login devices in public spaces in one embodiment. Detailed implementation manners

[0012] In order to make the objectives, technical solutions, and advantages of the present application clearer, the present application will be further described in detail below with reference to the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present application and are not used to limit the present application.

[0013] In one embodiment, as Figure 1 shown, a security control method for password-free login devices in public spaces is provided. In this embodiment, it is exemplified that the method is applied to a terminal. The method includes the following steps S101 to S103.

[0014] Among them, the terminal refers to a user-side operation device with the capabilities of scanning codes, communicating, and controlling, and is used to scan two-dimensional code identifiers, receive server responses, and control intelligent public devices, such as smartphones, tablets, or handheld controllers.

[0015] Step S101: Scan the two-dimensional code identifier configured for the target public space to obtain the encrypted verification information corresponding to the two-dimensional code identifier. The encrypted verification information is information obtained by encrypting the project number identifier and the space number identifier of the target public space.

[0016] Among them, the target public space refers to a specific physical area where controlled intelligent public devices are deployed, and is used to provide the function of binding the scanning code entrance and the device control scenario, that is, the public space where the intelligent public device to be controlled is located, such as a shared office, a meeting room, or a self-service area.

[0017] Among them, the two-dimensional code identifier refers to a two-dimensional graphic code used for identity recognition in the target public space, and is used to encapsulate the encrypted verification information corresponding to the project number identifier and the space number identifier, such as a two-dimensional code label pasted beside the entrance door of the device.

[0018] Among them, the encrypted verification information represents the encrypted data obtained by parsing after scanning the QR code identifier, which is used to verify the legitimacy of the space to the server; the project number identifier represents the code used to uniquely identify the project or operation system to which a public space belongs, and is used to distinguish the specific deployments in different projects or scenarios when multiple projects share the same system; the space number identifier represents the unique number used to distinguish different public spaces within the project, and is used to identify a specific public space and / or the corresponding smart public equipment in the specific public space.

[0019] For example, first, a QR code identifier for identity verification is pre-set in each public space. This QR code identifier is usually pasted or embedded at the entrance or key control area of the public space so that the terminal can scan and process it through a camera or image recognition module. Secondly, the QR code image obtained by scanning the QR code identifier corresponding to the target public space will be converted into a digital signal and transmitted to the terminal's parsing module. The parsing module decodes the data contained in the QR code image according to preset encoding rules; the decoding result is an encrypted verification information that has been encrypted. The encrypted information is formed by combining the project number identifier and the space number identifier of the target public space based on a symmetric or asymmetric encryption mechanism to form an anti-tampering encrypted information.

[0020] Based on this, the encrypted verification information formed by combining the encrypted data of the project number identifier and the space number identifier is verifiable, ensuring that the encrypted verification information obtained after the terminal scans is spatially unique and clearly identifies the project. In addition, after the terminal completes the QR code scanning and data decoding, the encrypted verification information is temporarily stored in the local cache to serve as the input data source for subsequent communication verification, ensuring the integrity and traceability of the information flow. The terminal records the user information and user behavior trajectory obtained from each scan operation to enable monitoring and traceability of the terminal user's use of the device. This processing logic ensures that the input data for subsequent operations is derived from direct scanning behavior in the space, avoiding the risk of forgery or remote impersonation.

[0021] Optionally, the encrypted data corresponding to the project number identifier and the space number identifier respectively may represent a random long character string of a specified length and combined with a preset character format (such as numbers, letters, symbols, and character strings).

[0022] In step S102 , the encrypted verification information is sent to the server. If the encrypted verification information matches the information stored in the server, the Mesh network information set based on the target public space is received from the server.

[0023] Among them, the server refers to the background management system responsible for verifying the encrypted authentication information, providing network configuration information and permission verification, and is used to uniformly manage the access control of intelligent public devices in each public space, such as a security authentication platform deployed in the cloud.

[0024] Among them, the stored information refers to a legal copy of encrypted data that is pre-stored in the server and used for comparison and verification, and is used to verify the authenticity of the encrypted authentication information uploaded by the terminal.

[0025] Among them, the Mesh network information refers to a set of network configuration information generated and distributed by the server according to the target public space, and is used to guide the construction of a multi-node ad hoc network structure between the terminal and the intelligent public device. For example, it includes data packets such as a routing table, device ID allocation, and channel configuration.

[0026] Exemplarily, first, the terminal sends the obtained encrypted authentication information to the server, and attaches the identity parameters of the terminal and the current network status parameters during this process, so that the server can perform a two-way verification operation after receiving the request. Furthermore, after receiving the encrypted authentication information, the server will retrieve the stored information that matches it in its database, that is, the encrypted data copies corresponding to each public space pre-stored in the server during the system initialization phase or the space deployment phase; when the server identifies the stored information that exactly matches the encrypted authentication information, it means that the terminal is indeed in the corresponding target public space, and the legitimacy verification of the space identity has been passed. Furthermore, the server retrieves the corresponding Mesh network information from the data table associated with the target public space. The Mesh network information usually includes key communication configuration contents such as the identification data of the node topology structure, device access authentication parameters, network routing distribution strategy, and device identification mapping table; these key communication configuration contents are packaged and encapsulated into a data response packet in a specific format and sent back to the terminal through a secure channel.

[0027] Based on this, not only the identity verification of the terminal is completed, but also the distribution of the network initialization configuration information for the target public space is completed, which builds a network environment foundation for the connection between the terminal and the intelligent public devices in the target public space, and ensures that only the terminals that pass the verification can obtain the access permission to this network environment, thereby isolating the acquisition of the control authority of intelligent public devices by illegal or unauthorized terminals in the structural design.

[0028] Step S103, based on the Mesh network information, establish a Mesh network connection between the terminal and the intelligent public device in the target public space, and based on the Mesh network connection, generate a control instruction and send it to the intelligent public device to achieve the secure control of the intelligent public device.

[0029] Among them, intelligent public devices refer to devices deployed in public spaces and equipped with network communication and remote control functions, which are used to execute specified actions according to received control instructions, such as access control controllers, air-conditioning terminals or lighting devices.

[0030] Among them, Mesh network connection refers to a multi-hop communication link established between a terminal and an intelligent public device based on the Mesh network protocol, which is used to implement a stable data exchange channel.

[0031] Among them, a control instruction refers to a device operation command generated by a terminal based on a Mesh network connection, which is used to remotely drive an intelligent public device to execute a specific function, such as control instructions like "open the access control", "start the air conditioner" or "adjust the brightness".

[0032] Exemplarily, first, after receiving the Mesh network information returned by the server, the terminal parses the Mesh network information to extract content such as the communication identifiers, topological hierarchy information, and data forwarding paths of each node in the Mesh network, and selects appropriate channel parameters and transmission strategies for local configuration based on the current network state parameters. Furthermore, after the configuration is completed, the terminal performs the corresponding Mesh network access operation. During this access operation, a physical connection and a logical communication channel with surrounding intelligent public devices are established, and network synchronization based on the topological structure is completed. Furthermore, after successful access, the terminal constructs a control instruction suitable for the control requirements of the current target public space according to its control authority and task type. This control instruction is sent to the corresponding intelligent public device according to the addressing logic between Mesh network nodes; among them, the control instruction not only contains specific device operation instructions, but also parameters such as device identifiers, execution time sequences, and response flags to ensure that the control instruction can be accurately received and executed by the intelligent public device; after receiving the control instruction, the intelligent public device parses the control instruction to restore the control content and drives the execution component to complete the corresponding operation.

[0033] Based on this, as Figure 2 shown, during the entire control process, it does not rely on the traditional password input process. Instead, during the information interaction process between the terminal and the server, based on the encrypted verification information corresponding to the QR code identifier sent by the terminal and the Mesh network information authorized and returned by the server based on the encrypted verification information, a dynamic Mesh communication control link based on the Mesh network is constructed between the terminal and the intelligent public device; this processing logic ensures that the distribution of the terminal control authority is controlled by the on-site QR code scanning behavior and the background authorization feedback in a specific space, avoids remote control risks, and realizes a closed control mechanism for the public space and intelligent public devices through the limitation of the network access path and data content.

[0034] Optionally, the server can also identify the identity and permissions of the terminal user based on the user information obtained from the terminal, and thereby dynamically configure the control functions and operation permissions of the terminal, so that the terminal generates applicable control instructions according to the dynamically configured control functions and operation permissions to ensure the security of device control. Optionally, the server can also automatically register the terminal user based on the user information; if the terminal user has already registered, the scan code login authentication can be directly completed quickly based on the user information without entering the account password.

[0035] Optionally, the user can directly input control information through the terminal interface, so that the terminal converts the input control information into computer-readable control instructions, thereby realizing the visual control of the intelligent public device by the terminal.

[0036] In the above public space password-free login device security control method, first, the encrypted verification information containing the encrypted combination of the project number identifier and the space number identifier is obtained by scanning the QR code identifier bound to the target public space, thereby realizing the unique identity association between the terminal and the physical public space; furthermore, the encrypted verification information is sent to the server and compared with the stored information to return the Mesh network information corresponding to the target public space, thereby ensuring that only the authenticated terminal can obtain the subsequent network access permission; furthermore, a Mesh network connection between the terminal and the intelligent public device is established based on the Mesh network information and the terminal issues a control instruction, thereby realizing the security control execution link between the terminal and the intelligent public device in the target public space. Based on this, by introducing the QR code recognition and encryption verification mechanism to realize space binding control permissions, and then constructing a secure device control path through network information authorization and network access processes, the password-free and secure control of the intelligent public device in the public space is realized, so as to improve the security management ability and use convenience of the intelligent public device.

[0037] In an exemplary embodiment, before scanning the QR code identifier configured for the target public space to obtain the encrypted verification information corresponding to the QR code identifier, the method further includes step S201 to step S202.

[0038] Step S201, obtain the device location information and device status information of the intelligent public device in the target public space, and obtain the environmental status information corresponding to the target public space.

[0039] Among them, the device location information represents the data used to describe the physical location of the intelligent public device in the target public space, and is used to judge whether the intelligent public device is within the preset control area. For example, the physical coordinate location of an intelligent public device in the target public space, the type of building it is located in, and the floor height and other information.

[0040] Among them, the device status information represents a set of data used to describe the current operating status of intelligent public devices, and is used to determine whether the intelligent public devices are in an accessible or controllable operating state. For example, the status of a certain intelligent device is "standby", "running", or "abnormal", etc.

[0041] Among them, the environmental status information represents a set of dynamic parameters used to describe the device control security - related aspects in the current external environmental conditions of the target public space, and is used to determine whether the target public space is in a controllable environmental state. For example, network status parameters, pedestrian flow status parameters, etc.

[0042] Among them, the network status parameter represents the reachability, stability, or channel interference degree of the current network connection in the target public space, and is used to determine whether there is a stable data transmission ability between the terminal and the server or intelligent public devices; the pedestrian flow status parameter represents the number of people or the flow density currently present in the target public space, and is used to evaluate whether it is suitable to initiate a password - free control operation in the current target public space.

[0043] Exemplarily, first, a systematic state perception and location acquisition operation needs to be performed for all intelligent public devices deployed in the target public space; during this process, the current device location information of each intelligent public device is collected, which includes the relative position and distribution area of the intelligent public device in the target public space to determine the spatial relationship between each intelligent public device and other intelligent public devices or the space boundary. At the same time, the device status information of each intelligent public device is collected, which includes information such as whether the intelligent public device is in a working state, whether there is an alarm, and whether the initialization configuration is completed, etc., to assist in clarifying whether the intelligent public device can be controlled currently. Furthermore, the environmental status information of the entire target public space also needs to be obtained, which includes basic environmental indicators such as network status parameters and pedestrian flow status parameters, to be used to judge whether the current target public space is in a stable condition of being accessible and controllable.

[0044] The entire acquisition process needs to ensure the time consistency and spatial correspondence of the device location information, device status information, and environmental status information, so that the subsequent generated QR - code content can truly reflect the current state composition of the target public space, ensuring that the QR - code content has sufficient pertinence and use binding force logically, that is, realizing the dynamic constraint on the generation and effectiveness of the QR - code content, so as to ensure that the QR - code content takes effect only under the conditions of network communication availability and controllable spatial order, enhancing the reliability of device control and the supervision of on - site behavior.

[0045] Step S202: Based on the QR code content encoding logic constructed by combining device location information, device status information, and environmental status information, generate a QR code identifier configured for the target public space, and the QR code identifier becomes effective under the condition that it is consistent at the device location level, device status level, and environmental status level.

[0046] Among them, the QR code content encoding logic represents a rule system for constructing QR code encoding content according to device location information, device status information, and environmental status information, which is used to ensure that the QR code identifier becomes effective only when specific conditions are met. For example, only when the corresponding intelligent control device is at a specified location, the operating state is the standby state, and the environmental status has a stable data transmission ability, the generated QR code identifier is allowed to become effective.

[0047] Exemplarily, the QR code content is constructed based on the joint logic of device location information, device status information, and environmental status information, that is, the QR code content encoding logic clearly stipulates that the QR code content can be successfully generated and become effective only when the device location, device status, and environmental status all meet the established conditions. Specifically, first, compare the mapping of device location information with the structure of the target public space to determine whether the intelligent public device is within its preset control area; second, perform a conditional judgment on the device status information. For example, only when the intelligent device is in a non-fault state or has completed the initialization configuration state, it is allowed to be included in the QR code encoding scope; finally, perform a conditional judgment on the environmental status information to ensure that the generation of the QR code content is only executed when indicators such as the network status and the pedestrian flow status are within a safe range. Through the cross-screening of these three types of information, a set of data combinations that meet the conditions is constructed and encapsulated and encoded into the QR code content in a preset format, so that the generated QR code identifier not only contains basic identifier content such as the project number identifier and the space number identifier, but also contains multi-dimensional status summary information of the intelligent public device status and environmental status in the current target public space, making the QR code content itself have status uniqueness and effective condition restrictions.

[0048] In addition, after the QR code generation process is completed, the QR code identifier is published and posted at a specified spatial location, and its content structure reflects the linkage control constraints of the device status and environmental status. Only when the subsequent QR code scanning behavior meets the conditions corresponding to the consistent location information, device status, and environmental status again, the encrypted verification information carried by the QR code identifier is recognized as valid by the server, thus avoiding the illegal use of the QR code identifier when the above conditions are inconsistent.

[0049] In this embodiment, first, through the joint acquisition and processing of the device location information, device status information, and environmental status information of the intelligent public device, a comprehensive perception of the spatial structure, device operation, and network and traffic conditions of the current control environment is achieved. Furthermore, a QR code identifier with restricted functions is generated according to the QR code content encoding logic constructed based on the above-mentioned multiple types of information, thereby realizing the usage constraint that the QR code identifier can only take effect when the spatial location, device status, and environmental status conditions are consistent. Based on this, by introducing a status perception constraint mechanism and a conditional encoding strategy, the QR code identifier not only carries identity information but also has dynamic activation conditions, effectively avoiding the use of the QR code identifier in an unexpected state and improving the spatio-temporal consistency and usage security of the device control entry.

[0050] In an exemplary embodiment, before scanning the QR code identifier configured for the target public space to obtain the encrypted verification information corresponding to the QR code identifier, the method further includes steps S301 to S303.

[0051] Step S301: Analyze the data features of the QR code identifier to obtain the encrypted reference data corresponding to the QR code identifier.

[0052] Among them, the data features of the QR code identifier represent the structural field information embedded in the QR code graphic encoding, which is used to guide the extraction of key content during the QR code parsing process. For example, it includes basic fields such as the encoding method identifier, position identifier, and status synchronization mark.

[0053] Among them, the encrypted reference data represents the auxiliary input data extracted from the data features of the QR code identifier and formatted for guiding the encryption operation, that is, it is used to generate random and unique perturbation information in the subsequent encryption operation.

[0054] Exemplarily, first, perform a structural analysis on the data content carried in the generated QR code identifier, that is, based on the encoding rule of the QR code identifier, perform reverse decoding on the data characteristics of the graphic information contained therein to obtain the original data information structure; in this process, the QR code identifier is recognized and extracted as a data set containing a number of basic fields, including but not limited to the encoding method identifier, the position identifier, and the status synchronization mark; it may also include a set of random perturbation information, which is composed of non-fixed coding factors introduced when the QR code identifier is generated and has the function of enhancing the uniqueness of the QR code identifier. Furthermore, after standardizing the information extracted above, the encryption reference data used in the next encryption process is obtained; this encryption reference data has the characteristics of a perturbation input source, and its uniqueness and unpredictability can enhance the change space of the encrypted content during the generation process of the QR code identifier. Based on this, in this way, the QR code identifier not only contains the binding information of the spatial identity, but also has non-repetitive perturbation data introduced at the local field level, providing a perturbation input source for subsequent encryption processing and ensuring the irreconstructibility and anti-replay ability of the final encryption result.

[0055] Step S302, use the encryption reference data as a perturbation factor to encrypt the item number identifier and the space number identifier of the target common space respectively to obtain the encrypted verification information corresponding to the QR code identifier, and store the encrypted verification information in the QR code identifier.

[0056] Exemplarily, use the encryption reference data as a perturbation factor to encrypt the item number identifier and the space number identifier of the target common space respectively. Among them, this encryption process does not perform a fixed transformation on the original number identifier using a static key, but introduces a mutation process to the content of each number identifier in combination with the perturbation factor. Specifically, first, segment the item number identifier and the space number identifier structurally, extract the key fields as the input of the encryption operation, and then map the perturbation factor to a dynamic key or an encryption seed according to a preset perturbation function and perform a logical combination with the extracted key fields. Furthermore, after completing the above logical combination, perform a data transformation on the data obtained by the logical combination to obtain the encrypted result after structural encapsulation; this encrypted result is the encrypted verification information corresponding to the QR code identifier, and this encrypted verification information contains the mixed data result of the item number identifier, the space number identifier, and the perturbation factor. Finally, this encrypted verification information is embedded in the reserved encryption field of the QR code identifier and bound to the explicit graphic structure of the QR code identifier to ensure the integrity, consistency, and timeliness of the verification content extracted by the scanning behavior, avoiding the risk of tampering and forgery, and at the same time ensuring the security access threshold of the QR code identifier.

[0057] Step S303: Send the encrypted verification information to the server for storage as the stored information in the server.

[0058] Exemplarily, after embedding the encrypted verification information in the QR code identifier, the encrypted verification information needs to be uploaded to the server for storage to construct the authentication data at the system level. Specifically, during the upload process, the encrypted verification information is first sent to the server through a secure transmission channel, along with auxiliary fields such as the generated timestamp, number identifier, and QR code feature parameters for subsequent verification processes and data archiving on the server side. Furthermore, after receiving it, the server registers the encrypted verification information in the database, that is, incorporates it into the record structure that matches the number identifier of the corresponding project and the corresponding target public space, and marks it as the currently effective authentication data. Thereafter, the encrypted verification information obtained by any terminal's QR code scanning behavior needs to be compared and verified with the authentication data stored on the server to determine whether the terminal scanning the QR code identifier passes the spatial identity verification. Based on this, the processing logic of this step enables the encrypted verification information to not only exist in the local storage location corresponding to the QR code identifier but also have a data basis for remote verification, realizing a collaborative matching mechanism between front-end generation and back-end verification, ensuring that the authentication link in the entire QR code scanning control process is traceable, verifiable, and does not rely on the local configuration of the terminal, thereby enhancing the stability and data consistency of the overall system.

[0059] In this embodiment, first, based on the parsing and processing of the data characteristics in the QR code identifier, the encrypted reference data with uniqueness and perturbation ability is extracted to provide a dynamic perturbation input source for the subsequent encryption process. Furthermore, the project number identifier and the space number identifier are encrypted using the encrypted reference data as a perturbation factor to generate the encrypted verification information with anti-copying and irreversibility and embed it in the QR code identifier. Furthermore, the generated encrypted verification information is uploaded and stored in the server as the only verification benchmark to achieve the consistency verification of local and remote data in the QR code scanning verification link. Based on this, through the collaborative design of the dynamic encryption mechanism driven by the perturbation factor and the verification benchmark on the server side, the dual security construction of the QR code identifier at the structural level and the verification level is realized, thereby enhancing the anti-counterfeiting ability of the QR code password-free control entrance.

[0060] In an exemplary embodiment, if the encrypted verification information matches the stored information in the server, the Mesh network information set based on the target public space returned by the server is received, including Step S401 to Step S402.

[0061] Step S401: If the encrypted verification information matches the stored information in the server, determine the device configuration information obtained by the server decrypting the stored information based on the encrypted reference data corresponding to the encrypted verification information.

[0062] Among them, the device configuration information represents a set of structured parameters of intelligent public devices in the target public space restored by decrypting the verified encrypted verification information, and is used to determine the role, control interface, and functional status of the intelligent public devices in the network. For example, it includes device numbers, communication interface parameters, function types (such as lighting, access control), installation locations, etc.

[0063] Exemplarily, first, the server receives the encrypted verification information uploaded by the terminal and performs a consistency comparison process with the authentication data pre-stored in the server-side database, that is, by means of structural hashing or an equivalent verification mechanism for encrypted fields, to determine whether there is an encrypted consistency relationship between the uploaded encrypted verification information and the valid authentication data registered in the server; if a matching item is identified, it indicates that the encrypted verification information is indeed generated within the authorized scope, so that the terminal scanning the QR code identifier has the access right to the corresponding target public space.

[0064] Subsequently, the server further parses out the encryption reference data used for disturbing encryption according to the logical structure corresponding to the encrypted verification information; uses this encryption reference data as the core input of the decryption path to perform an inverse decryption operation on the authentication data matching the encrypted verification information, and parses out the device configuration information in the original embedded information; the device configuration information refers to the structured set of the location, device type, function parameters, and communication interface definition of the intelligent public device bound to the QR code identifier in the target public space. This decryption operation not only enables the server to restore the spatial configuration corresponding to the QR code identifier, but also clarifies the device range that can be controlled after the terminal accesses and the associated network nodes, providing a complete input basis for the generation of subsequent Mesh network information.

[0065] Step S402: Based on the mapping relationship of the device configuration information in the Mesh network structure, receive the Mesh network information set for the target public space returned by the server.

[0066] Among them, the Mesh network structure represents a multi-hop self-organizing network topology composed of multiple interconnected nodes, and is used to achieve stable communication between intelligent public devices and routing transmission of control data in the target public space. For example, a structure mode in which multiple intelligent public devices act as relay nodes to form a distributed communication link with another intelligent public device to realize data transfer from the terminal through multiple relay nodes to the target device.

[0067] Exemplarily, after the server extracts the device configuration information, it associates the device configuration information with the mapping relationship of the Mesh network structure maintained internally; wherein, the Mesh network structure consists of multiple network nodes and the communication paths between them, and the configuration relationship of different devices in the Mesh network depends on their physical locations, functional levels, and preset data forwarding policies; specifically, the server retrieves and determines the node numbers, parent-child node relationships, communication priorities, and network roles (such as master nodes, relay nodes, or terminal nodes) corresponding to these intelligent public devices in the network topology diagram of the current target public space according to the intelligent public devices corresponding to the device configuration information. Furthermore, after determining the above mapping relationship, the server integrates the communication parameters, identity identifiers of these nodes, and their connection structures with other nodes to generate complete Mesh network information; the Mesh network information includes information such as a network topology structure diagram, network access parameters of each device, data routing configuration, and a security mapping table of device identities; the server then returns the Mesh network information to the requesting terminal through the established secure channel for the terminal to execute access configuration and control instruction sending operations.

[0068] Furthermore, since the Mesh network information is dynamically generated based on the device configuration information and is not fixed data under a unified template, it can ensure that the network configuration received for each terminal QR code scanning access operation strictly corresponds to the actual device state bound to the current QR code identifier, avoiding misaccess to other networks or sending control instructions to non-bound devices.

[0069] In this embodiment, first, the server decrypts the matched stored information based on the encrypted reference data corresponding to the encrypted verification information, thereby restoring the device configuration information bound to the QR code identifier, realizing the mapping consistency between the QR code content and the specific device state; furthermore, the Mesh network information is generated according to the mapping relationship of the device configuration information in the Mesh network structure, thereby ensuring that the returned Mesh network information has spatial pertinence and device limitation; based on this, the network node configuration is dynamically determined, ensuring the unique association between the network access structure and the QR code-bound device, thereby realizing a secure closed-loop of the device control path.

[0070] In an exemplary embodiment, scanning the QR code identifier configured for the target public space to obtain the encrypted verification information corresponding to the QR code identifier includes steps S501 to S502; sending the encrypted verification information to the server includes steps S503 to S504.

[0071] Step S501, scanning the QR code identifiers respectively configured for different target public spaces to obtain the encrypted verification information corresponding to each QR code identifier.

[0072] Exemplarily, the terminal scans the QR code identifiers deployed in multiple target public spaces respectively, obtains the images corresponding to the QR code identifiers and then parses the image content to convert the image into a data string containing structural fields, thereby obtaining the encrypted verification information corresponding to each QR code identifier. Moreover, since different QR code identifiers originate from different target public space deployments, their encrypted verification information is also different. The terminal needs to cache and archive the encrypted verification information corresponding to each QR code identifier respectively to ensure that each encrypted verification information has an independent source space and storage space.

[0073] Step S502: Based on the encrypted verification information corresponding to each QR code identifier respectively, and combining the roles and permissions of the terminal in different projects, generate the virtual user identity identifiers corresponding to each QR code identifier respectively.

[0074] Among them, the roles and permissions of the terminal in different projects represent the range of functional positioning and operation authorization bound by the terminal in multiple projects, and are used to distinguish the control capabilities of the terminal in different target public spaces according to the project scenarios. For example, the terminal is a visitor role in a certain project and only has query permissions, while in another project, it is an administrator role and has control permissions.

[0075] Among them, the virtual user identity identifier represents an anonymized identity number with project isolation and space binding, and is used as the identity basis for the network access and instruction control corresponding to the terminal.

[0076] Exemplarily, after the terminal obtains the encrypted verification information corresponding to multiple QR code identifiers respectively, based on the project number identifier and space number identifier implied in each encrypted verification information, and combining the role definition and permission level of the terminal in different projects currently, generate a set of corresponding virtual user identity identifiers. Specifically, the virtual user identity identifier is not a direct mapping of the original user identity, but an anonymized identity entity generated based on the logical combination of the terminal role definition and permission level, project number identifier, and space number identifier; each virtual user identity identifier is uniquely corresponding to the encrypted verification information of a specific QR code identifier, thus forming an intermediary identity between the terminal and the device control permissions in different project scenarios. In addition, during the generation process, the terminal can call the locally stored or remotely accessed role permission mapping table, and then perform identity number mapping in combination with the encrypted verification information corresponding to the QR code identifier to ensure that each obtained virtual user identity identifier has spatial directivity, permission independence, and context isolation in terms of structure.

[0077] Step S503: Based on the preset virtual identity mapping mechanism, perform sandbox mapping processing on the virtual user identity identifiers of the terminal to obtain the permission paths and behavior paths independently set for each virtual user identity identifier.

[0078] Among them, the virtual identity mapping mechanism represents a rule system for constructing an isolated virtual identity of a terminal based on the virtual user identity identifier of the terminal and providing a permission boundary.

[0079] Among them, the permission path represents the range of resources and the set of control instructions that each virtual user identity identifier is allowed to access and control in the corresponding target common space, and is used to define the specific control boundary that the terminal can execute. For example, the virtual identity corresponding to a certain virtual user identity identifier can only control access control and lighting and cannot access monitoring equipment.

[0080] Among them, the behavior path represents the sequence of system behaviors that each virtual user identity identifier is allowed to trigger during the operation process, and is used to standardize the instruction execution process, event feedback mode, and log record range. For example, it sequentially standardizes a complete behavior path of sending a door opening instruction, receiving a device response, and writing a log.

[0081] Exemplarily, perform a sandbox mapping process on each virtual user identity identifier according to the virtual identity mapping mechanism based on the sandbox mechanism to construct a permission path and a behavior path corresponding to the virtual user identity identifier; wherein, the sandbox mapping process refers to constructing a logically isolated permission environment for each virtual user identity identifier without affecting the original permission structure of the terminal, and respectively specifying the resources that each virtual user identity identifier can access, the devices that can be operated, and the range of behaviors that can be triggered in the corresponding target common space. Based on this, the sandbox mechanism isolates the operation processes corresponding to different virtual user identity identifiers from each other, prevents cross-contamination of different space permissions, and avoids overlapping or unauthorized utilization of operation permissions of the terminal in multiple projects; this process ensures that each virtual user identity identifier is limited to the behavior domain under its mapped space and role permissions during the operation process, realizing parallel control of multiple role identities in a cross-project scenario without conflicts; in addition, the obtained permission path and behavior path corresponding to each virtual user identity identifier will be used as a reference basis in processes such as data transmission encryption, network access authorization, and control instruction generation, maintaining the precise control mapping ability of the terminal for the source spaces corresponding to multiple two-dimensional code identifiers.

[0082] Step S504, send the encrypted verification information corresponding to each two-dimensional code identifier to the server according to the permission path and behavior path respectively corresponding to each virtual user identity identifier.

[0083] Exemplarily, the terminal encapsulates the encrypted verification information obtained by scanning the QR code identification according to the permission path and behavior path corresponding to each virtual user identification and sends it to the server. Specifically, the sending process needs to pack the data according to the interface format defined by the server protocol, that is, embed the encrypted verification information, the identification number corresponding to the corresponding virtual user identification, the description information related to the permission path, and the description information related to the behavior path into a data packet with a unified format, so as to ensure that the server can identify the space scenario and permission context corresponding to each encrypted verification information when receiving the data. Based on this, this transmission behavior is not a single data upload logically, but a multi-channel control request sequence generated by the terminal according to the sandbox mechanism after operating on different identity requests and configuring permissions. Each channel only corresponds to an operating environment where a virtual user identification is bound to a QR code identification.

[0084] In this embodiment, first, the QR code identifications of multiple target public spaces are scanned respectively, so as to realize the multi-source acquisition of the encrypted verification information corresponding to different target public spaces by the terminal; furthermore, different virtual user identifications are generated according to the combination of the encrypted verification information and the terminal role permissions, so as to realize the identity isolation mapping in the cross-project scenario; furthermore, the sandbox mapping process is carried out on each virtual user identification, so as to configure an independent permission path and behavior path for each identity, avoiding operation conflicts and permission intersections; furthermore, the encrypted verification information bound with the permission path and behavior path is sent to the server, so as to ensure the identity clarity and permission integrity of the space control request corresponding to the terminal. Based on this, a safe, hierarchical, and controllable access mechanism for the terminal to the intelligent public device in the multi-project scenario is realized.

[0085] In an exemplary embodiment, after generating a control instruction based on the Mesh network connection and sending it to the intelligent public device to achieve the safe control of the intelligent public device, the method further includes step S601 to step S603.

[0086] Step S601, use the intelligent public device that receives and executes the control instruction as the target intelligent public device, and determine the response information of the target intelligent public device in response to the control instruction.

[0087] Among them, the response information represents the operation feedback data returned by the target intelligent public device after receiving the control instruction, and is used to confirm whether the target intelligent public device has successfully received and executed the control instruction.

[0088] Exemplarily, after the terminal sends a control instruction to the target intelligent public device based on the Mesh network connection, it is necessary to monitor and determine in real time whether the target intelligent public device makes an effective response to the content of the control instruction. Specifically, after receiving the control instruction, the target intelligent public device executes corresponding actions according to the content of the control instruction, and at the same time generates response information and reports it to the terminal or relay node through the Mesh network structure; the response information usually includes the current operation state, function execution progress, execution result mark, and exception flag field of the target intelligent public device. Based on this, the receipt behavior of the response information is not only used to determine whether the target intelligent public device has received the control instruction, but also to confirm whether the execution of the control instruction is effective, providing a data basis for the inspection and tracking of subsequent response behaviors.

[0089] Step S602, based on the configuration relationship of each intelligent public device in the target public space in the Mesh network structure, determine multiple neighboring nodes corresponding to the target intelligent public device in the target public space.

[0090] Among them, the neighboring node refers to other device nodes that have a direct connection relationship with the target intelligent public device in the Mesh network structure, and is used as an auxiliary perception entity to observe and feedback on the response behavior of the target intelligent public device.

[0091] Exemplarily, identify multiple neighboring nodes in the Mesh network structure that have a connection relationship with the target intelligent public device; specifically, since the core feature of the Mesh network is multi-hop interconnection between devices, each device node usually maintains communication channels with multiple devices that are physically close or logically adjacent; based on this, by calling the node topology configuration data of the Mesh network, the structural position of a device in the network can be clarified, and its neighboring node set can be determined based on the connection boundary; these neighboring nodes are not only physically close to the target intelligent public device, but also have the ability to directly monitor or perceive the response behavior of the target intelligent public device at the network routing level.

[0092] Furthermore, after identifying these neighboring nodes, use them as auxiliary perception sources to participate in verifying the execution of the control instruction. Based on this, introduce multi-source observation paths other than the target intelligent public device itself, thereby enriching the diversity and authenticity of feedback data. In addition, the determination of neighboring nodes needs to be based on the predefined Mesh network structure to exclude device nodes that are unreachable or have too high a delay, ensuring that the determined neighboring nodes have actual perception capabilities or communication link support, and avoiding introducing redundant or invalid information sources.

[0093] Step S603: Receive the sensing feedback information of multiple neighboring nodes in response to the control instruction, and based on the multi-source feedback judgment rule corresponding to the Mesh network structure, comprehensively judge the response information and the sensing feedback information to generate the instruction execution result corresponding to the control instruction.

[0094] Among them, the sensing feedback information represents data such as environmental perception, state change observation, or network activity monitoring related to the response behavior of the target intelligent public device detected by neighboring nodes based on their own sensing capabilities, and is used to indirectly verify the execution effect of the control instruction. For example, indirect behavior indicators such as detected current changes, sound and light feedback, and communication data packet flows.

[0095] Among them, the multi-source feedback judgment rule represents a set of logical conditions for performing consistency verification and joint judgment on the response information of the target intelligent public device and the sensing feedback information of multiple neighboring nodes, and is used as the evaluation basis for forming the instruction execution result. For example, it is determined that the corresponding control instruction of the target intelligent public device is successfully executed only when "the response of the target intelligent public device is successful and the feedback states of at least two neighboring nodes are consistent".

[0096] Among them, the instruction execution result represents the comprehensive judgment conclusion generated after fusing the response information and the sensing feedback information, and is used to reflect whether the control instruction is actually executed by the target intelligent public device as expected. For example, it includes execution states such as "execution successful", "partial execution", "abnormal interruption", or "execution failed".

[0097] Exemplarily, according to the preset multi-source feedback judgment rule, cross-check the fields, timestamps, and content consistency of various response information and sensing feedback information to form a composite judgment on the actual execution situation of the control instruction. Specifically, parameters such as the number of feedback data required for different types of target intelligent public devices, the type of feedback data, and the matching tolerance threshold will be defined in the multi-source feedback judgment rule to ensure the structural rationality and operational repeatability of the comprehensive judgment of the response information and the sensing feedback information. Finally, after completing the data comparison based on the multi-source feedback judgment rule, generate the instruction execution result corresponding to the control instruction, thereby establishing a two-way verification mechanism in the instruction closed-loop feedback chain, which can effectively reduce the risk of single-point response errors or forgeries, and achieve the behavioral verifiability and result confirmability of control operations in the target public space.

[0098] In this embodiment, first, the response information returned by the target intelligent public device in response to the control instruction is received, thereby achieving a preliminary confirmation of the reception and execution status of the control instruction; furthermore, neighboring nodes are determined according to the configuration relationship of the target intelligent public device in the Mesh network structure, thereby providing a multi-point perception source for the instruction execution process; furthermore, the response information of the target intelligent public device itself and the perception feedback information of neighboring nodes are comprehensively judged, thereby enhancing the ability to determine the authenticity of the instruction execution status; based on this, by constructing a multi-source feedback judgment rule that combines device response feedback and neighboring node perception, a verification closed-loop of the control behavior is achieved, effectively improving the execution confirmability and feedback credibility of the control process of intelligent public devices in the target public space.

[0099] In an exemplary embodiment, based on the Mesh network information, a Mesh network connection is established between the terminal and the intelligent public device in the target public space, including steps S701 to S703; the method further includes step S704.

[0100] Step S701, based on the location information of the target public space, determine the initial electronic fence area corresponding to the target public space.

[0101] Wherein, the location information represents a set of coordinate data used to identify the target public space at the physical or geographical level, and is used to construct the physical boundary basis of the electronic fence. For example, it is the spatial area description information calibrated by a building floor plan, GPS coordinates or a local positioning system.

[0102] Wherein, the initial electronic fence area represents a static space restriction area constructed based on the physical boundary of the target public space, and is used as a preliminary judgment basis for determining whether the terminal has control authority.

[0103] Exemplarily, an initial electronic fence area is constructed according to the location information of the target public space, that is, based on the actual physical boundary of the target public space, it is standardized through spatial coordinate parameters, deployment layout diagrams, area numbers or other location description methods, so as to initially obtain the initial electronic fence area of the target public space at the physical space level.

[0104] Step S702, combine the network space structure corresponding to the target public space and the user inertial behavior corresponding to the terminal to perform feature analysis on the initial electronic fence area, and obtain the perception fence area corresponding to the target public space.

[0105] Wherein, the network space structure corresponding to the target public space represents the deployment relationship, signal coverage characteristics and routing topology characteristics of each intelligent public device node in the Mesh network in the target public space, and is used to optimize the adaptability of the electronic fence to the actual network communication environment.

[0106] The user habitual behavior corresponding to the terminal represents the typical behavioral characteristics historically or currently exhibited by the terminal user in the scene to which the target public space belongs, and is used to optimize the adaptability of the electronic fence to the actual user usage.

[0107] Among them, the perception fence area represents the spatial restriction area obtained by dynamically adjusting the initial electronic fence area based on the network space structure and user inertial behavior. It is used as an effective geographical constraint when the terminal establishes a Mesh network connection with the smart public device.

[0108] For example, after constructing the initial electronic fence area, it is not directly used as the sole criterion for network connection permission. Instead, the network structure of the target public space and the user's habitual behavior of the terminal are introduced to analyze and modify it, resulting in a more dynamically adaptable perception fence area. The network structure mainly refers to the actual deployment density of mesh network nodes in the target public space, signal strength distribution, node connectivity, and physical structure hierarchy. User habitual behavior mainly refers to the typical movement trajectory, rest location, control preferences, and other characteristic factors of terminal users in similar environments.

[0109] Based on this, the above-mentioned characteristic factors serve together as the basis for dynamically adjusting the initial electronic fence area, so that the electronic fence area is no longer limited to the physical boundary, but has the ability to perceive the linkage between user behavior and network connectivity; specifically, the initial electronic fence area is analyzed and the boundary is adjusted according to these characteristic factors, and the boundary range of the electronic fence is expanded or contracted so that it can reflect both the spatial structure and the user's operation intention, thereby constructing a highly adaptable spatial constraint area.

[0110] Step S703: Based on the Mesh network information, a Mesh network connection is established between the terminal in the perception fence area and the smart public device in the target public space.

[0111] Exemplarily, after the construction of the perception fence area is completed, based on the Mesh network information previously sent by the server, a connection relationship is established between the terminal and the intelligent public device within the perception fence area; during this process, the terminal needs to start from its own position, scan the visible device nodes within the perception fence area, and based on the node attributes, communication parameters, routing table configuration, etc. defined in the Mesh network information, select the best access path to establish a data link with the intelligent public device. Furthermore, it is also necessary to verify whether the connection behavior meets the verification conditions corresponding to the current perception fence area, that is, to ensure that the physical distance, signal conditions, and authorization information between the connected device node and the terminal are within a reasonable range; furthermore, the connection behavior not only needs to consider the direct communication ability, but also should consider the stability of the multi-hop relay structure to avoid link instability caused by the poor state of intermediate nodes. On this basis, ensure that the connection behavior occurs within the perception fence area, and record and verify each connection behavior to maintain the boundary security and behavior credibility of the overall network structure.

[0112] Step S704, if it is detected that the terminal is in an area outside the perception fence area, disconnect the Mesh network connection between the terminal and the intelligent public device in the target public space.

[0113] Exemplarily, the position of the terminal can be continuously monitored dynamically by detecting the sending status of the broadcast packets of the terminal in the Mesh network, and it is judged whether it is still within the previously set perception fence area; if the broadcast packets of the terminal cannot be received, it is detected that the position of the terminal has shifted to an area outside the perception fence area, that is, it is determined that the terminal has left the control permission area, and then the connection disconnection processing flow is immediately initiated. In this processing flow, first, the data channel established between the terminal and the intelligent public device will be closed, and at the same time, the Mesh network will be notified to update the node topology, cancel the forwarding path and caching permission in the original connection link; furthermore, the disconnection behavior will also trigger the permission status update mechanism, clear the identity identification, operation session and instruction record of the terminal in the current network connection, and prevent the offline terminal from initiating control commands or performing pseudo-operations through cached data.

[0114] Based on this, it is ensured that the Mesh network connection has spatial consistency constraints, that is, the connection behavior is limited to the effective range of spatial permissions. Once outside the perception fence area, all control capabilities will be recovered, thus forming a security mechanism that dynamically manages and controls permissions based on the spatial position, preventing the risk of permission abuse caused by terminal position drift or misappropriation of position data, and ensuring the closure and manageability of the intelligent public device control environment.

[0115] Optionally, a session expiration mechanism for device control is preset. Based on this, after the terminal completes the control operation or the user manually logs out, the connection between the terminal and the corresponding intelligent public device is automatically terminated, and the relevant session information is eliminated.

[0116] In this embodiment, first, an initial electronic fence area is constructed according to the location information of the target public space, so as to realize the basic space limitation of the terminal connection range; furthermore, the initial electronic fence area is characterized by combining the network space structure and the user's inertial behavior, so as to dynamically adjust the fence boundary to obtain a perception fence area that better fits the real usage scenario; furthermore, the terminals within the perception fence area are connected to the Mesh network, and the terminals outside the perception fence area are disconnected from the Mesh network, so as to ensure that the connection behavior has spatial constraint conditions; based on this, by introducing a spatial closed-loop control mechanism of static fence construction, dynamic fence adjustment, connection establishment and out-of-bounds disconnection, the refined management of the connection permission of the intelligent public device in the target public space and the consistency control of spatial constraints are realized.

[0117] It should be understood that although the steps in the flowcharts involved in the above-mentioned embodiments are shown in sequence according to the arrows, these steps do not necessarily have to be executed in the order indicated by the arrows. Unless there is a clear indication in this article, the execution of these steps has no strict order limit, and these steps can be executed in other orders. Moreover, at least a part of the steps in the flowcharts involved in the above-mentioned embodiments may include multiple steps or multiple stages. These steps or stages do not necessarily have to be executed at the same time, but can be executed at different times. The execution order of these steps or stages does not necessarily have to be sequential, but can be executed alternately or alternately with at least a part of other steps or steps or stages in other steps.

[0118] Based on the same inventive concept, an embodiment of the present application further provides a public space passwordless login device security control device for implementing the public space passwordless login device security control method described above. The solution provided by this device to solve the problem is similar to the solution described in the above method. Therefore, the specific limitations in one or more embodiments of the public space passwordless login device security control device provided below can refer to the limitations on the public space passwordless login device security control method in the above text, and will not be repeated here.

[0119] In an exemplary embodiment, as Figure 3 shown, a public space passwordless login device security control device is provided, including: a scanning module 301, a verification module 302, and a connection module 303, where: A scanning module 301, configured to scan a two-dimensional code identifier configured for a target public space, and obtain encrypted verification information corresponding to the two-dimensional code identifier, where the encrypted verification information is information obtained by encrypting based on a project number identifier and a space number identifier of the target public space; A verification module 302, configured to send the encrypted verification information to a server, and if the encrypted verification information matches the stored information in the server, receive Mesh network information set for the target public space returned by the server; A connection module 303, configured to establish a Mesh network connection between a terminal and an intelligent public device in the target public space based on the Mesh network information, and generate and send a control instruction to the intelligent public device based on the Mesh network connection to implement secure control of the intelligent public device.

[0120] In an exemplary embodiment, the device further includes an identifier generation module, configured to: obtain device location information and device status information of an intelligent public device in the target public space, and obtain environmental status information corresponding to the target public space; generate a two-dimensional code identifier configured for the target public space based on a two-dimensional code content encoding logic constructed by combining the device location information, the device status information, and the environmental status information, where the two-dimensional code identifier becomes effective under the condition that it is consistent at the device location level, the device status level, and the environmental status level.

[0121] In an exemplary embodiment, the device further includes an encryption module, configured to: analyze data features of the two-dimensional code identifier to obtain encrypted reference data corresponding to the two-dimensional code identifier; use the encrypted reference data as a perturbation factor to perform encryption processing on the project number identifier and the space number identifier of the target public space respectively to obtain encrypted verification information corresponding to the two-dimensional code identifier, store the encrypted verification information in the two-dimensional code identifier; send the encrypted verification information to the server for storage to be used as the stored information in the server.

[0122] In an exemplary embodiment, the device further includes a decryption module, configured to: if the encrypted verification information matches the stored information in the server, determine device configuration information obtained by the server decrypting the stored information based on the encrypted reference data corresponding to the encrypted verification information; receive Mesh network information set for the target public space returned by the server based on the mapping relationship of the device configuration information in the Mesh network structure.

[0123] In an exemplary embodiment, the scanning module 301 is further configured to: scan the two-dimensional code identifiers respectively configured for different target public spaces to obtain the encrypted verification information respectively corresponding to each two-dimensional code identifier; based on the encrypted verification information respectively corresponding to each two-dimensional code identifier, combine the roles and permissions of the terminal in different projects to generate the virtual user identity identifiers respectively corresponding to each two-dimensional code identifier; the verification module 302 is further configured to: based on a preset virtual identity mapping mechanism, perform sandbox mapping processing on the virtual user identity identifiers of the terminal to obtain the permission paths and behavior paths independently set for each virtual user identity identifier; according to the permission paths and behavior paths respectively corresponding to each virtual user identity identifier, send the encrypted verification information respectively corresponding to each two-dimensional code identifier to the server.

[0124] In an exemplary embodiment, the connection module 303 is further configured to: use the intelligent public device that receives and executes the control instruction as the target intelligent public device, and determine the response information of the target intelligent public device in response to the control instruction; based on the configuration relationship of each intelligent public device in the Mesh network structure in the target public space, determine multiple neighboring nodes corresponding to the target intelligent public device in the target public space; receive the perception feedback information of the multiple neighboring nodes in response to the control instruction, and based on the multi-source feedback judgment rule corresponding to the Mesh network structure, comprehensively judge the response information and the perception feedback information to generate the instruction execution result corresponding to the control instruction.

[0125] In an exemplary embodiment, the connection module 303 is further configured to: based on the location information of the target public space, determine the initial electronic fence area corresponding to the target public space; combine the network space structure corresponding to the target public space and the user inertial behavior corresponding to the terminal to perform feature analysis on the initial electronic fence area to obtain the perception fence area corresponding to the target public space; based on the Mesh network information, establish a Mesh network connection between the terminal in the perception fence area and the intelligent public device in the target public space; if it is detected that the terminal is in an area outside the perception fence area, disconnect the Mesh network connection between the terminal and the intelligent public device in the target public space.

[0126] Each module in the above public space passwordless login device security control device can be implemented in whole or in part by software, hardware, and their combination. The above modules can be embedded in the processor of the computer device in hardware form or be independent of it, or be stored in the memory of the computer device in software form, so that the processor can call and execute the operations corresponding to the above modules.

[0127] In an exemplary embodiment, a computer device is provided, including a memory and a processor. A computer program is stored in the memory, and when the processor executes the computer program, the steps in any of the above embodiments are implemented.

[0128] In an embodiment, a computer-readable storage medium is provided, on which a computer program is stored. When the computer program is executed by a processor, the steps in any of the above embodiments are implemented.

[0129] Those of ordinary skill in the art can understand that all or part of the processes of implementing the methods in the above embodiments can be completed by instructing relevant hardware through a computer program. The computer program can be stored in a non-volatile computer-readable storage medium. When the computer program is executed, it can include the processes of the embodiments of the above methods. Among them, any reference to a memory, a database, or other media used in the embodiments provided in the present application can include at least one of non-volatile and volatile memories. Non-volatile memory can include read-only memory (ROM), magnetic tape, floppy disk, flash memory, optical memory, high-density embedded non-volatile memory, resistive random access memory (ReRAM), magnetoresistive random access memory (MRAM), ferroelectric random access memory (FRAM), phase change memory (PCM), graphene memory, etc. Volatile memory can include random access memory (RAM) or external cache memory, etc. By way of illustration and not limitation, RAM can be in various forms, such as static random access memory (SRAM) or dynamic random access memory (DRAM), etc. The databases involved in the embodiments provided in the present application can include at least one of relational databases and non-relational databases. Non-relational databases can include distributed databases based on blockchain, etc., and are not limited thereto. The processors involved in the embodiments provided in the present application can be general-purpose processors, central processors, graphics processors, digital signal processors, programmable logic devices, data processing logics based on quantum computing, etc., and are not limited thereto.

[0130] The technical features of the above embodiments can be combined arbitrarily. For the sake of brevity of description, not all possible combinations of the technical features in the above embodiments are described. However, as long as there is no contradiction in the combination of these technical features, it should be considered as the scope described in this specification.

[0131] The above-described embodiments merely represent several implementation manners of the present application. The description is relatively specific and detailed, but it should not be construed as a limitation on the patent scope of the present application. It should be noted that for those of ordinary skill in the art, without departing from the concept of the present application, several modifications and improvements can still be made, and these all fall within the protection scope of the present application. Therefore, the protection scope of the present application shall be subject to the appended claims.

Claims

1. A security control method for passwordless login devices in public spaces, characterized in that, Applied to a terminal, the method includes: Scanning a QR code identifier configured for a target public space to obtain encrypted verification information corresponding to the QR code identifier, where the encrypted verification information is information obtained by encrypting based on the project number identifier and the space number identifier of the target public space; Sending the encrypted verification information to a server, and if the encrypted verification information matches the stored information in the server, receiving Mesh network information set for the target public space returned by the server; Based on the Mesh network information, establishing a Mesh network connection between the terminal and intelligent public devices in the target public space, and based on the Mesh network connection, generating a control instruction and sending it to the intelligent public devices to achieve secure control of the intelligent public devices.

2. The method according to claim 1, characterized in that, Before the step of scanning the QR code identifier configured for the target public space to obtain the encrypted verification information corresponding to the QR code identifier, it further includes: Obtaining the device location information and device status information of intelligent public devices in the target public space, and obtaining the environmental status information corresponding to the target public space; Based on the QR code content encoding logic constructed by combining the device location information, the device status information, and the environmental status information, generating a QR code identifier configured for the target public space, and the QR code identifier becomes effective under the condition of being consistent at the device location level, the device status level, and the environmental status level.

3. The method according to claim 1, characterized in that, Before the step of scanning the QR code identifier configured for the target public space to obtain the encrypted verification information corresponding to the QR code identifier, it further includes: Analyzing the data characteristics of the QR code identifier to obtain encrypted reference data corresponding to the QR code identifier; Using the encrypted reference data as a perturbation factor to encrypt the project number identifier and the space number identifier of the target public space respectively to obtain the encrypted verification information corresponding to the QR code identifier, and storing the encrypted verification information in the QR code identifier; Sending the encrypted verification information to the server for storage to serve as the stored information in the server.

4. The method according to claim 3, wherein The step of if the encrypted verification information matches the stored information in the server, receiving the Mesh network information set for the target public space returned by the server includes: If the encrypted verification information matches the stored information in the server, determining the device configuration information obtained by the server decrypting the stored information based on the encrypted reference data corresponding to the encrypted verification information; Based on the mapping relationship of the device configuration information in the Mesh network structure, receiving the Mesh network information set for the target public space returned by the server.

5. The method according to claim 1, characterized in that The step of scanning the QR code identifier configured for the target public space to obtain the encrypted verification information corresponding to the QR code identifier includes: Scanning QR code identifiers respectively configured for different target public spaces to obtain encrypted verification information corresponding to each QR code identifier; Based on the encryption verification information corresponding to each QR code identifier, combined with the role and permissions of the terminal in different projects, generate virtual user identity identifiers corresponding to each QR code identifier; The sending the encryption verification information to the server includes: Based on a preset virtual identity mapping mechanism, perform sandbox mapping processing on the virtual user identity identifiers of the terminal to obtain permission paths and behavior paths independently set for each virtual user identity identifier; According to the permission paths and behavior paths corresponding to each virtual user identity identifier, send the encryption verification information corresponding to each QR code identifier to the server.

6. The method according to claim 1, wherein After generating a control instruction based on the Mesh network connection and sending it to the intelligent public device to achieve secure control of the intelligent public device, it further includes: Regarding the intelligent public device that receives and executes the control instruction as the target intelligent public device, determine the response information of the target intelligent public device in response to the control instruction; Based on the configuration relationship of each intelligent public device in the Mesh network structure in the target public space, determine a plurality of neighboring nodes corresponding to the target intelligent public device in the target public space; Receive the perception feedback information of the plurality of neighboring nodes in response to the control instruction, and based on the multi-source feedback judgment rule corresponding to the Mesh network structure, comprehensively judge the response information and the perception feedback information to generate the instruction execution result corresponding to the control instruction.

7. The method according to claim 1, wherein The establishing a Mesh network connection between the terminal and the intelligent public device in the target public space based on the Mesh network information includes: Based on the location information of the target public space, determine the initial electronic fence area corresponding to the target public space; Combined with the network space structure corresponding to the target public space and the user inertial behavior corresponding to the terminal, perform feature analysis on the initial electronic fence area to obtain the perception fence area corresponding to the target public space; Based on the Mesh network information, establish a Mesh network connection between the terminal in the perception fence area and the intelligent public device in the target public space; The method further includes: If it is detected that the terminal is in an area outside the perception fence area, disconnect the Mesh network connection between the terminal and the intelligent public device in the target public space.

8. A security control device for password-free login devices in public spaces, characterized in that, The device includes: A scanning module, configured to scan the QR code identifier configured for the target public space to obtain the encryption verification information corresponding to the QR code identifier, where the encryption verification information is information obtained by encrypting based on the project number identifier and the space number identifier of the target public space; A verification module, configured to send the encryption verification information to the server, and if the encryption verification information matches the information stored in the server, receive the Mesh network information set based on the target public space returned by the server; A connection module, configured to establish a Mesh network connection between the terminal and an intelligent public device in the target public space based on the Mesh network information, and generate and send a control instruction to the intelligent public device based on the Mesh network connection to achieve secure control of the intelligent public device.

9. A computer device, comprising a memory and a processor, the memory storing a computer program, characterized in that, When the processor executes the computer program, the steps of the method according to any one of claims 1 to 7 are implemented.

10. A computer-readable storage medium having a computer program stored thereon, characterized in that, When the computer program is executed by a processor, the steps of the method according to any one of claims 1 to 7 are implemented.

Images