Entrance guard remote online control system and method based on property end access confirmation

Abstract

The invention provides an access control remote online control system and method based on property end access confirmation, and the system replaces manual registration: paper registration / talkback confirmation is needed traditionally, and the system realizes non-contact electronic initiation; the cloud platform realizes active security upgrade: traditionally, the cloud platform depends on naked eye judgment of security personnel, and the system realizes intelligent risk early warning (such as abnormal wandering, multi-person following and the like) through AI behavior analysis; no tracing exists after door opening traditionally, but the system realizes double-link image retention during door opening and after door opening, so that the behavior tracing capability is enhanced; the system realizes full-link visualization: traditional process information is split, and the system realizes'request-approval-execution-recording 'full-process data penetration and real-time monitoring; according to the system, dynamic safety protection is realized, and a triple protection mechanism of geocoding binding, dynamic two-dimensional code (traditional static password is easy to leak) and encryption instruction transmission is adopted.

Description

Technical Field

[0001] The present invention relates to the field of access control technology, and in particular to a remote online access control system based on property-side access confirmation, a remote online access control method based on property-side access confirmation, an electronic device, and a computer-readable storage medium. Background Art

[0002] The traditional property visitor access control management model is usually as follows:

[0003] Procedure: Visitors arrive at the main entrance of the complex (security booth).

[0004] The security guard will stop you and ask: "Which building? Which household? What's the owner's name?" (Sometimes you will also need to simply register your name and reason for the visit)

[0005] Security will contact the owner via a landline to verify their identity. Visitors will be required to present their ID card for paper registration (requiring name, contact information, address, and arrival time). A temporary paper pass will be issued (returned upon departure). Visitors' vehicles will be registered (manually recording license plate and room number).

[0006] After the owner confirms, the security guard manually opens the gate or door to let people pass (or indicates the direction).

[0007] Building intercom system confirmation:

[0008] The visitor arrives at the door of the target unit building.

[0009] Use the visual intercom on the unit door to enter the room number or name to call the owner.

[0010] The owner answers the call on the indoor phone and confirms the visitor's identity through the camera; or the owner informs the property management or security department in advance and states the visitor's information (name, phone number, expected arrival time).

[0011] When visitors arrive, they provide their name / phone number / appointment password, and the security guard will check the paper records / registration before letting them in.

[0012] After the owner confirms, the door can be opened and released remotely with one click.

[0013] With the popularization of intelligent Internet of Things systems, the traditional property visitor access control management model has gradually exposed the following management shortcomings:

[0014] 1. Inefficiency and traffic congestion

[0015] The operation is cumbersome: inquiries, registrations, phone calls and other steps are time-consuming.

[0016] Long waiting times: Long queues are common during peak hours.

[0017] Poor communication: The owner didn’t answer the phone or the communication was unclear.

[0018] Impact on express delivery and takeout: Duplicate registration seriously affects its delivery time.

[0019] 2. Prominent safety hazards

[0020] Risk of identity fraud: Security guards have limited ability to identify people, and someone pretending to be a visitor may sneak in.

[0021] False registration information: It is impossible to verify the real identity by simply registering.

[0022] Difficult to identify forged documents: It is difficult for security guards to identify forged documents.

[0023] Passes can be forged / lost: Paper passes are easily counterfeited or not recycled.

[0024] Security loopholes: During non-peak hours, there is a risk of oversight or intentional release of passengers.

[0025] 3. Poor owner / visitor experience

[0026] Frequently disturbing the owner: The owner must answer the phone to confirm each visitor.

[0027] The process is lengthy and inconvenient: Waiting in the open air to register during bad weather is very inconvenient.

[0028] Complex operation: It is not easy for elderly visitors to use the unit intercom system.

[0029] Waiting anxiety: Queuing at the property management office makes visitors and security guards feel irritated.

[0030] 4. High labor costs

[0031] A dedicated person is required to be on duty 24 hours a day for inspection, which will increase the property's manpower investment.

[0032] Unable to effectively share security personnel with other security tasks.

[0033] Visitor data cannot be effectively managed and analyzed:

[0034] Difficulty in retrieval: Finding paper records is time-consuming and laborious.

[0035] Data isolation: cannot be linked with other security systems (such as surveillance).

[0036] Lack of statistics: It is difficult to count data such as visitor numbers to assist management decisions.

[0037] Data is easily lost / tampered with: Paper records are difficult to preserve and can be easily damaged or modified.

[0038] 5. Privacy and Liability Risks

[0039] Visitor information is easily leaked: paper registration books are visible to anyone.

[0040] Owner information is easily leaked: privacy during telephone communication can be easily heard by people around.

[0041] Dispute risk: Difficulty in defining responsibilities after safety issues arise due to verification omissions.

[0042] Improper management of sensitive information: such as improper use of identity documents and contact information.

[0043] Therefore, traditional property management systems rely on manual registration and phone confirmation for visitor access control, relying heavily on manpower for security. This model presents significant efficiency bottlenecks, potential safety hazards, and management blind spots. These drawbacks are particularly pronounced in large residential communities with frequent visitors and complex personnel, making them unable to adapt to the demands of modern security management and intelligent development. Summary of the Invention

[0044] In order to solve the technical problems existing in the prior art, the present invention provides the following technical solutions:

[0045] On the one hand, a remote online access control system based on property-side access confirmation is provided, the system comprising:

[0046] Visitor terminal: used for visitors to scan the dynamic QR code displayed on the access control terminal and issue access requests;

[0047] The access control terminal is used to generate a dynamic QR code including the device geocode and device ID of the current access control terminal, and report the access request to the property cloud platform;

[0048] The property cloud platform is used to display the access request, control the access control terminal to capture the visitor's screen, and perform behavioral analysis on the visitor in the visitor screen based on the AI ​​visitor behavior risk assessment system and output the behavior anomaly detection result. If the assessment passes, an encrypted instruction is sent to the access control terminal;

[0049] The access control terminal parses the encrypted command and drives the electronic lock execution unit to open the electronic door, and at the same time, feeds back the door opening notification to the visitor terminal, captures the visitor's image in real time and transmits it back to the property cloud platform; the visitor terminal responds to the door opening notification, and the property cloud platform plays the real-time returned visitor image;

[0050] The visitor terminal interacts with the access control terminal by scanning a code;

[0051] The access control terminal is communicatively connected to the property cloud platform.

[0052] Preferably, the access control terminal includes:

[0053] Access control server, used to implement access control according to platform instructions;

[0054] A power supply, for providing power;

[0055] An electronic lock execution unit, configured to provide lock control services for the access control terminal;

[0056] A dual-mode communication unit, used to provide data transmission and communication control services between the access control terminal and the property cloud platform;

[0057] A dynamic encrypted QR code generation module is used to generate the dynamic QR code containing the device geographic code and device ID of the current access control terminal, encrypt the visitor information after the visitor scans the code, generate the access request, and report it to the property cloud platform through the dual-mode communication unit;

[0058] A visitor behavior analysis camera, configured to respond to a capture instruction from the property cloud platform, capture visitor images, and report the images to the property cloud platform via a dual-mode communication unit;

[0059] The power supply, electronic door, dual-mode communication unit, dynamic encryption QR code generation module and visitor behavior analysis camera are electrically connected to the access control server respectively;

[0060] The access control terminal and the property cloud platform are communicatively connected via the dual-mode communication unit.

[0061] Preferably, the property cloud platform is deployed on a property customer service workstation;

[0062] The property customer service workstation is also equipped with:

[0063] The call management screen is used to issue call management instructions to the access control terminal, interact with visitors, and support visitor intercom, voice interpretation, and multilingual translation;

[0064] Access control monitoring screen, used to display the real-time video stream transmitted by the access control terminal, as well as the visitor's screen at the time of visit, as well as the results of behavior analysis and anomaly detection;

[0065] The command control panel is used to send corresponding control commands to the access control terminal, including a door opening button, a door status indicator light, and an emergency lock button;

[0066] The call management screen, access control monitoring screen and command control screen are respectively connected to the property cloud platform for communication, and control interaction is performed with the corresponding access control terminal through the property cloud platform.

[0067] Preferably, the AI ​​visitor behavior risk assessment system performs behavior analysis on the visitor in the visitor screen and outputs behavior anomaly detection results, including:

[0068] Detect whether there are abnormal behavior characteristics in the visitor's image based on CNN model recognition:

[0069] If it does not exist, the assessment passes and an encrypted instruction is sent to the access control terminal;

[0070] If it exists, the evaluation fails, and an access denial notification is sent to the access control terminal, and the access control terminal feeds back the access denial notification to the visitor terminal.

[0071] Preferably, the property cloud platform includes:

[0072] Cloud processors, used to provide cloud processing and analysis services;

[0073] Cloud database, used to provide cloud storage services;

[0074] An intelligent call distribution engine is used to perform location routing based on the device ID of the current access control terminal accessed by the visitor in the access request, find the customer service representative corresponding to the device ID of the current access control terminal, and place a call to the customer service representative's smart terminal; after receiving the call, the customer service representative inputs their customer service biometrics through the voiceprint recognition engine;

[0075] Visual access control status dashboard, used to visualize the status of each access control terminal;

[0076] Voiceprint recognition engine, used to collect and extract customer service biometrics;

[0077] A communication module, used for data transmission and communication control with the access control terminal;

[0078] The cloud database, intelligent call distribution engine, visual access control status dashboard, voiceprint recognition engine and communication module are respectively connected to the cloud processor for communication.

[0079] Preferably, the process of the property cloud platform issuing the encryption instruction is as follows:

[0080] Calculating an operation timestamp based on a time at which the access request is received;

[0081] Parse and read the QR code information in the access request to obtain the device geocode and device ID of the current access control terminal;

[0082] The customer service staff at the property customer service workstation enters the corresponding customer service biometrics;

[0083] Generate a dynamic signature key based on the SM3 hash operation of the operation timestamp, device geocode and customer service biometrics;

[0084] The dynamic signature key is used to encrypt the corresponding door opening instruction input by the customer service staff, generate the encrypted instruction and send it to the access control terminal corresponding to the device ID.

[0085] Preferably, after controlling the access control terminal to capture the visitor's image, the property cloud platform further includes:

[0086] Acquire a visitor's facial image from the visitor screen;

[0087] Call the public security database to perform facial recognition and verification on the visitor's facial image:

[0088] If the verification is successful, the AI ​​visitor behavior risk assessment system will analyze the visitor behavior in the visitor screen and output the abnormal behavior detection results;

[0089] Otherwise, an access denial notification is sent to the access control terminal, and the access control terminal feeds back the access denial notification to the visitor terminal.

[0090] On the other hand, a method for remote online access control based on property-side access confirmation is provided, which is implemented based on the above-mentioned remote online access control system based on property-side access confirmation, and the method includes:

[0091] Visitors scan the dynamic QR code displayed on the access control terminal through the visitor terminal and send an access request to the access control terminal;

[0092] The access control terminal generates a dynamic QR code including the device geocode and device ID of the current access control terminal, and reports the access request to the property cloud platform;

[0093] The property cloud platform displays the access request and controls the access control terminal to capture the visitor's screen. The system then analyzes the visitor's behavior based on the AI ​​visitor behavior risk assessment system and outputs the abnormal behavior detection result. If the assessment passes, an encrypted instruction is sent to the access control terminal.

[0094] The access control terminal parses the encrypted instruction and drives the electronic lock execution unit to open the electronic door, and at the same time feeds back the door opening notification to the visitor terminal, captures the visitor's image in real time and transmits it back to the property cloud platform; the visitor terminal responds to the door opening notification, and the property cloud platform plays the real-time transmitted visitor image.

[0095] On the other hand, an electronic device is provided, comprising: a processor; a memory, wherein the memory stores computer-readable instructions, and when the computer-readable instructions are executed by the processor, the access control remote online control method based on property-side access confirmation as described above is implemented.

[0096] On the other hand, a computer-readable storage medium is provided, in which at least one instruction is stored. The at least one instruction is loaded and executed by a processor to implement the above-mentioned access control remote online control method based on property-side access confirmation.

[0097] The beneficial effects brought about by the technical solution provided by the embodiment of the present invention include at least:

[0098] Based on a cloud platform and smart IoT technology, this invention enables remote visitor management. The access control terminal generates a dynamic QR code containing the device's geocode and ID. The visitor scans the dynamic QR code on the access control terminal to initiate an access request, which the access control terminal then reports to the cloud platform in real time. The property cloud platform then performs intelligent verification: 1. Receives and displays the access request; 2. Controls the access control camera to capture the image; 3. The AI ​​behavior analysis system performs real-time risk assessment; 4. Issues an encrypted instruction after the assessment is passed. The access control terminal parses the encrypted instruction to drive the electronic lock to open the door, captures the visitor's image in real time, and transmits it back to the cloud platform, which pushes a door opening notification to the visitor. The visitor receives the door opening notification in real time, and the cloud platform simultaneously plays the image transmitted by the access control.

[0099] Therefore, compared with the traditional model, the present invention replaces manual registration: the traditional method requires paper registration / intercom confirmation, while this system realizes contactless electronic initiation; the cloud platform realizes active security upgrade: the traditional method relies on the security guard's naked eye judgment, while this system realizes intelligent risk warning (such as abnormal wandering, multiple people following, etc.) through AI behavior analysis; it realizes closed-loop control: the traditional method has no traceability after opening the door, while this system realizes "opening the door + after opening the door" dual-link image retention, enhancing the behavior traceability capability; this system realizes full-link visualization: the traditional process information is separated, while this system realizes "request-approval-execution-recording" full-process data connection and real-time monitoring; this system realizes dynamic security protection: it adopts a triple protection mechanism of geocoding binding + dynamic QR code (traditional static passwords are easy to leak) + encrypted instruction transmission. BRIEF DESCRIPTION OF THE DRAWINGS

[0100] In order to more clearly illustrate the technical solutions in the embodiments of the present invention, the following briefly introduces the drawings required for use in the description of the embodiments. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without creative work.

[0101] Figure 1 Schematic diagram of the topology of a remote online access control system based on property-side access confirmation provided by an embodiment of the present invention;

[0102] Figure 2 This is a schematic diagram of a dynamic encryption mechanism provided by an embodiment of the present invention;

[0103] Figure 3 This is a schematic diagram of an operation flow provided by an embodiment of the present invention;

[0104] Figure 4 It is a structural diagram of an electronic device provided by an embodiment of the present invention. DETAILED DESCRIPTION

[0105] The technical solution of the present invention is described below in conjunction with the accompanying drawings.

[0106] In the embodiments of the present invention, words such as "exemplarily" and "for example" are used to indicate examples, illustrations, or explanations. Any embodiment or design described as an "exemplary" in the present invention should not be interpreted as being preferred or advantageous over other embodiments or designs. Rather, the use of the word "exemplary" is intended to present concepts in a concrete manner. Furthermore, in the embodiments of the present invention, "and / or" can mean both or either of the two.

[0107] In the embodiments of the present invention, the terms "image" and "picture" may sometimes be used interchangeably. It should be noted that, when the distinction is not emphasized, the meanings they convey are the same. The terms "of," "corresponding," and "corresponding" may sometimes be used interchangeably. It should be noted that, when the distinction is not emphasized, the meanings they convey are the same.

[0108] In the embodiments of the present invention, sometimes a subscript such as W1 may be mistakenly written as a non-subscript form such as W1. When the difference is not emphasized, the meanings to be expressed are the same.

[0109] In order to make the technical problems, technical solutions and advantages to be solved by the present invention clearer, a detailed description will be given below with reference to the accompanying drawings and specific embodiments.

[0110] The embodiment of the present invention provides a remote online access control system based on property access confirmation. The method can be implemented by an electronic device, which can be a terminal or a server. Figure 1 The topology diagram of the access control remote online control system based on property-side access confirmation is shown. A access control remote online control system based on property-side access confirmation includes:

[0111] Visitor terminal: used for visitors to scan the dynamic QR code displayed on the access control terminal and issue access requests;

[0112] The access control terminal is used to generate a dynamic QR code including the device geocode and device ID of the current access control terminal, and report the access request to the property cloud platform;

[0113] The property cloud platform is used to display the access request, control the access control terminal to capture the visitor's screen, and perform behavioral analysis on the visitor in the visitor screen based on the AI ​​visitor behavior risk assessment system and output the behavior anomaly detection result. If the assessment passes, an encrypted instruction is sent to the access control terminal;

[0114] The access control terminal parses the encrypted command and drives the electronic lock execution unit to open the electronic door, and at the same time, feeds back the door opening notification to the visitor terminal, captures the visitor's image in real time and transmits it back to the property cloud platform; the visitor terminal responds to the door opening notification, and the property cloud platform plays the real-time returned visitor image;

[0115] The visitor terminal interacts with the access control terminal by scanning a code;

[0116] The access control terminal is communicatively connected to the property cloud platform.

[0117] Property managers, such as customer service representatives, can use the property cloud platform to implement cloud office, cloud analysis, and cloud storage services at their property customer workstations. The specific configuration is as follows:

[0118] 1. Access control terminal: dynamic encrypted QR code generation module (including device geocoding), dual-mode communication unit (4G+LoRa emergency link), visitor behavior analysis camera;

[0119] 2. Property management cloud platform: intelligent call distribution engine (based on location routing), visual access control status dashboard, voiceprint recognition engine (extracting customer service biometrics to prevent fraudulent use verification);

[0120] 3. Property customer service workstation: integrated console (call + monitoring + door opening, three-screen collaborative control in one), auxiliary decision-making panel, physical emergency button (power failure protection design).

[0121] The property cloud platform is deployed at the property customer service workstation; the property customer service staff can perform community access control and visitor management through the cloud platform.

[0122] Based on a cloud platform and smart IoT technology, this invention enables remote visitor management. The access control terminal generates a dynamic QR code containing the device's geocode and ID. The visitor scans the dynamic QR code on the access control terminal to initiate an access request, which the access control terminal then reports to the cloud platform in real time. The property cloud platform then performs intelligent verification: 1. Receives and displays the access request; 2. Controls the access control camera to capture the image; 3. The AI ​​behavior analysis system performs real-time risk assessment; 4. Issues an encrypted instruction after the assessment is passed. The access control terminal parses the encrypted instruction to drive the electronic lock to open the door, captures the visitor's image in real time, and transmits it back to the cloud platform, which pushes a door opening notification to the visitor. The visitor receives the door opening notification in real time, and the cloud platform simultaneously plays the image transmitted by the access control.

[0123] Therefore, compared with the traditional model, the present invention replaces manual registration: the traditional method requires paper registration / intercom confirmation, while this system realizes contactless electronic initiation; the cloud platform realizes active security upgrade: the traditional method relies on the security guard's naked eye judgment, while this system realizes intelligent risk warning (such as abnormal wandering, multiple people following, etc.) through AI behavior analysis; it realizes closed-loop control: the traditional method has no traceability after opening the door, while this system realizes "opening the door + after opening the door" dual-link image retention, enhancing the behavior traceability capability; this system realizes full-link visualization: the traditional process information is separated, while this system realizes "request-approval-execution-recording" full-process data connection and real-time monitoring; this system realizes dynamic security protection: it adopts a triple protection mechanism of geocoding binding + dynamic QR code (traditional static passwords are easy to leak) + encrypted instruction transmission.

[0124] The application implementation principle and technical advantages of the present invention will be further described below.

[0125] The access control terminal of the present invention can refer to the existing access control machine and its door control principle. The hardware system configuration of the access control terminal is as follows: The access control terminal includes:

[0126] Access control server, used to implement access control according to platform instructions;

[0127] A power supply, for providing power;

[0128] An electronic lock execution unit, configured to provide lock control services for the access control terminal;

[0129] A dual-mode communication unit, used to provide data transmission and communication control services between the access control terminal and the property cloud platform;

[0130] A dynamic encrypted QR code generation module is used to generate the dynamic QR code containing the device geographic code and device ID of the current access control terminal, encrypt the visitor information after the visitor scans the code, generate the access request, and report it to the property cloud platform through the dual-mode communication unit;

[0131] A visitor behavior analysis camera, configured to respond to a capture instruction from the property cloud platform, capture visitor images, and report the images to the property cloud platform via a dual-mode communication unit;

[0132] The power supply, electronic door, dual-mode communication unit, dynamic encryption QR code generation module and visitor behavior analysis camera are electrically connected to the access control server respectively;

[0133] The access control terminal and the property cloud platform are communicatively connected via the dual-mode communication unit.

[0134] The hardware system of each access control device can refer to the following configuration:

[0135] 1. Access control server (also called access control system or door control)

[0136] Model: DAIC-MJ-SF National Secret Access Control Server

[0137] Configuration parameters:

[0138] Processor: Feiteng D2000 8-core processor, adopts independent instruction set architecture, main frequency 2.3GHz, supports SM4 / SM3 national secret instruction set acceleration;

[0139] Memory: 32GB DDR4 ECC memory, supporting dual-channel configuration and data throughput of 25.6GB / s;

[0140] Storage: 1TB NVMe SSD, supports RAID1 redundant configuration, read and write speed 3500MB / s;

[0141] Expansion capability: Provides two PCIe x16 slots (compatible with x8 signals) to accommodate encryption cards or GPU accelerator cards;

[0142] Network interface: Dual Gigabit RJ45 network ports, using AR8035 network chip, supporting link aggregation and fault switching;

[0143] Industrial-grade design: 2U chassis (400×430×88mm), supports a wide operating temperature range of -25°C to 70°C.

[0144] The access control server implements the following functions:

[0145] Instruction execution: Achieve microsecond-level instruction response through the embedded real-time operating system, and support simultaneous processing of 200+ concurrent control instructions;

[0146] Log management: adopts a circular storage mechanism to save 90 days of complete operation logs (about 5 million records);

[0147] Key management: Built-in SM4 (or SM3 and other encryption algorithms) encryption chip, supports "one machine, one key" dynamic authorization mechanism, and the key update cycle is 24 hours;

[0148] Linkage control: Provides 8-way relay output, supports hard-wired linkage with fire protection, monitoring and other systems, and has a response time of <50ms.

[0149] 2. Power system

[0150] Model: DAIC-MJ-PAC Industrial Power Supply

[0151] Technical Parameters:

[0152] Input voltage: AC 220V±15%, 50 / 60Hz, supports wide voltage input;

[0153] Output voltage: DC 12V±1%, ripple <50mV, rated current 10A (peak 15A);

[0154] Protection mechanism: overcurrent protection (15A trigger), overvoltage protection (15V trigger), short circuit protection (0.1ms response);

[0155] UPS switching: Built-in supercapacitor energy storage module can maintain system operation for 30 minutes in the event of power outage, and the switching time is less than 5ms;

[0156] Environmental adaptability: operating temperature -40℃~85℃, protection level IP54, lightning protection level 6kV;

[0157] The power distribution adopts digital current sharing technology, each output branch has independent current limiting protection, and supports hot-swap replacement.

[0158] 3. Electronic lock execution unit

[0159] Model: DAIC-CLS-P25 magnetic lock

[0160] Mechanical parameters:

[0161] Lock body size: 250×47×25mm (length×width×height), anodized aluminum alloy shell;

[0162] Suction plate size: 180×38×11mm, 16Mn steel material, chrome-plated surface;

[0163] Static tensile strength: 280kg (617lbs), dynamic impact resistance: 150kg;

[0164] Working stroke: 0-5mm air gap, holding force attenuation <5%.

[0165] Electrical characteristics:

[0166] Working voltage: DC 12V±10%, rated current 480mA (1.2A at startup).

[0167] Control interface:

[0168] RS485: supports Modbus RTU protocol, baud rate 9600-115200bps adjustable;

[0169] TTL: 3.3V level, transmission rate 1Mbps, maximum line length 15 meters;

[0170] Status feedback: Provides dry contact signal output (normally open / normally closed optional), contact resistance <100mΩ.

[0171] 4. Dual-mode communication unit

[0172] Communication architecture:

[0173] Wired channel: 10 / 100M adaptive Ethernet, support IEEE 802.3af PoE power supply;

[0174] Wireless channel: LoRaWAN Class A mode, frequency band 470-510MHz, transmit power 27dBm;

[0175] Transmission distance: 100 meters for wired (Category 5e cable), 300 meters for wireless (line of sight environment).

[0176] Security Module:

[0177] Encryption chip: integrated SM4 national encryption algorithm coprocessor, encryption throughput 500Mbps;

[0178] Authentication mechanism: mutual TLS 1.3 authentication, certificate renewal cycle 30 days;

[0179] Data protection: application layer AES-256 encryption + transport layer national secret SM2 signature;

[0180] 5. Dynamic Encrypted QR Code Generation Module

[0181] Encryption engine model: DAIC-QR-EN300;

[0182] Algorithm combination: SM2 elliptic curve digital signature + SM3 hash algorithm;

[0183] Key management: Store the master key in segments and use the derived key each time;

[0184] Random number source: True Random Number Generator (TRNG), entropy value > 0.99.

[0185] QR code features:

[0186] Coding format: Version 10 QR Code (57×57 modules), error correction level H (30%);

[0187] Data capacity: 84 bytes payload, including:

[0188] Device geocoding (GCJ-02 coordinate system, 6 bytes);

[0189] Device ID (8 bytes);

[0190] Timestamp (4 bytes);

[0191] Signature value (32 bytes);

[0192] Refresh mechanism: 60-second scheduled update + event-triggered update (such as door opening event).

[0193] 6. Display unit:

[0194] Screen type: 2.4-inch electronic ink screen, resolution 296×128;

[0195] Viewing angle: 180°, contrast ratio 15:1;

[0196] Power consumption characteristics: static display 0mW, refresh power consumption 50mW@2s interval.

[0197] 7. Visitor behavior analysis camera

[0198] Model: DAIC-SXT400 Smart Camera

[0199] Imaging parameters:

[0200] Sensor: 1 / 2.7" CMOS, 4 million effective pixels (2560×1440);

[0201] Lens: f=3.6mm, F1.6, horizontal field of view 92°;

[0202] Low illumination: 0.01Lux@F1.6 (color), 0.001Lux@F1.6 (black and white);

[0203] Encoding format: H.265 / H.264 dual encoding, bit rate 32-4096Kbps adjustable.

[0204] Smart analysis function‌:

[0205] Face capture: supports 30 frames per second continuous capture, with a minimum face detection size of 40×40 pixels;

[0206] Behavior Recognition:

[0207] Loitering detection: stay in the set area for more than 30 seconds to trigger the alarm;

[0208] Objects left behind: The presence of static objects for more than 60 seconds triggers an alarm;

[0209] Area intrusion: supports 8 polygonal warning area settings;

[0210] Feature extraction: Extract 128-dimensional facial feature vectors, with a comparison speed of <200ms / 10,000 times.

[0211] Interface specification:

[0212] Video output: Support GB / T28181-2016, ONVIF Profile S protocol;

[0213] Data interface: Micro SD card slot (supports up to 256GB), USB 2.0 Type-A;

[0214] Alarm input: 2-way dry contact input (door magnet, emergency button, etc.);

[0215] Alarm output: 1 relay output (30V / 1A).

[0216] Workflow‌:

[0217] Visitors scan the code:

[0218] The dynamic QR code module generates an encrypted request package;

[0219] Upload to the property cloud platform through the dual-mode communication unit;

[0220] After the platform passes the verification, it will issue the door opening command;

[0221] Exception handling:

[0222] def handle_abnormal(alert_type):

[0223] if alert_type == "tailgating":

[0224] camera.continuous_shoot(30) # 30 continuous shots

[0225] lock.emergency_lock()

[0226] platform.send_alert(level="high")

[0227] elif alert_type == "loitering":

[0228] camera.record(180) # Record for 3 minutes

[0229] platform.send_alert(level="medium") .

[0231] Emergency Mechanism:

[0232] Power failure protection: UPS keeps the core system running and the electronic lock is automatically released;

[0233] Communication interruption: 2000 records are cached locally and uploaded after the network is restored;

[0234] Hardware failure: Watchdog timer (15 minutes) triggers automatic restart.

[0235] This solution uses full-stack domestic hardware and independent controllable technology to build a safe, reliable, intelligent and efficient access control terminal system to meet the access management needs in various scenarios and provide a solid foundation for smart community and building management.

[0236] like Figure 1 As shown, the access control terminal can also be linked with the owner database on the platform, and can apply for the owner database and realize the call and confirmation of owner information.

[0237] The security monitoring systems deployed at the access control point, such as cameras and alarms, can refer to the control functions of the existing access control machines.

[0238] In order to facilitate customer service management, the property customer service workstation is also deployed with:

[0239] The call management screen is used to issue call management instructions to the access control terminal, interact with visitors, and support visitor intercom, voice interpretation, and multilingual translation;

[0240] Access control monitoring screen, used to display the real-time video stream transmitted by the access control terminal, as well as the visitor's screen at the time of visit, as well as the results of behavior analysis and anomaly detection;

[0241] The command control panel is used to send corresponding control commands to the access control terminal, including a door opening button, a door status indicator light, and an emergency lock button;

[0242] The call management screen, access control monitoring screen and command control screen are respectively connected to the property cloud platform for communication, and control interaction is performed with the corresponding access control terminal through the property cloud platform.

[0243] Function control is as shown in Table 1:

[0244]

[0245] Table 1

[0246] This embodiment adopts the three-screen-in-one mode:

[0247] It adopts a 15.6-inch three-screen folding design, with a 7-inch call management screen (touch LCD) on the left, a 7-inch monitoring screen (IPS LCD) in the middle, and a 1.6-inch command control screen (electronic ink screen + physical buttons) on the right;

[0248] Core processor: Rockchip RK3588 SoC (4×Cortex-A76+4×Cortex-A55), integrated NPU 6TOPS computing power;

[0249] Communication module: Dual-mode design (Gigabit Ethernet + LoRaWAN), supports SM4 national encryption; sends commands to the platform, which forwards the commands to the corresponding access control terminal. The specific configuration is as follows:

[0250] Components Connection method Transport Protocol Power supply standards Call Screen PoE++ (IEEE 802.3bt) WebSocket over TLS 48V / 25W Monitoring screen HDMI 2.1+USB3.0 RTSP / H.265 12V / 15W Control screen RS485 twisted pair Modbus RTU

[0251] The functions are as follows:

[0252] 1. Voice processing pipeline:

[0253] Audio Capture:

[0254] Microphone array: 4×MEMS microphones, SNR ≥ 70dB;

[0255] Sampling rate: 16kHz / 16bit, supports AEC echo cancellation;

[0256] ‌Speech Translation Module‌:

[0257] Hardware: LD3320 chip, supports 300 local instruction recognition;

[0258] Cloud-based ASR: Access to Baidu speech recognition API (recognition rate 98.5% @ 5dB signal-to-noise ratio).

[0259] The multilingual translation architecture is as follows:

[0260] def translate_flow(audio):

[0261] # Speech to Text

[0262] text = asr_engine.process(audio)

[0263] # Language Detection

[0264] lang = detect_language(text)

[0265] # Translation engine selection

[0266] if lang in LOCAL_DB: # local vocabulary matching

[0267] return local_translate(text, 'zh')

[0268] else: #Call cloud API

[0269] return cloud_translate(text, 'zh', engine='baidu') .

[0271] Concurrent call channels: support 3-way simultaneous calls;

[0272] Voice encryption: SM4-CBC mode, 256-bit key.

[0273] 2. Video processing pipeline:

[0274] Video access:

[0275] Protocol: GB / T28181-2016 standard;

[0276] Resolution: 2560×1440@25fps;

[0277] Stream control: H.265 encoding, dynamic bit rate 1-4Mbps;

[0278] Behavioral Analysis Engine:

[0279] Algorithm model: YOLOv5s+CNN or CNN detection;

[0280] Detection capabilities:

[0281] Face capture: minimum detection of 40×40 pixels;

[0282] Abnormal behavior: wandering / falling / left-behind identification;

[0283] Processing delay: <200ms / frame (RK3588 NPU acceleration).

[0284] Visualization interface framework: Vue.js + ECharts.

[0285] 3. Command control screen hardware

[0286] ‌Physical buttons‌:

[0287] Door opening button: with LED backlight (red / green), pressure sensing ≥3N;

[0288] Emergency lock button: mechanical self-locking, IP67 protection;

[0289] Status indicator: RGB three-color LED, brightness adjustable;

[0290] ‌Anti-accidental touch mechanism‌:

[0291] Double-click to confirm (interval 300-700ms);

[0292] Long press to activate (lasts 2s±0.5s);

[0293] Capacitor isolation design (spacing ≥ 5mm);

[0294] ‌Control Logic‌:

[0295] stateDiagram

[0296] [*] --> Standby

[0297] Standby --> Door always open: Double click the door open button

[0298] Standby --> Emergency lock: Long press the lock button

[0299] Door always open --> Standby: 15 seconds timeout

[0300] Emergency Lock --> Standby: Administrator Password Verification .

[0302] Typical scenario processing flow:

[0303] ‌Guest Call‌:

[0304] The call screen initiates a WebSocket notification → cloud platform → access control terminal;

[0305] The corresponding camera image will pop up automatically on the monitoring screen;

[0306] The "Door Status" indicator light on the control panel lights up.

[0307] Anomaly Detection:

[0308] def handle_abnormal(event):

[0309] # Video analysis trigger

[0310] if event['type'] == 'loitering':

[0311] # Three-screen linkage

[0312] control_screen.blink_led('red')

[0313] call_screen.play_alert('WARNING')

[0314] monitor_screen.highlight_area(event['bbox'])

[0315] # Report to the cloud platform

[0316] cloud_report(event).

[0317] ‌Emergency Lock‌:

[0318] The physical button on the control panel triggers a hardware interrupt;

[0319] Broadcast locking instructions to all access control terminals via RS485;

[0320] The call screen / monitoring screen switches to the locked UI.

[0321] Three screens and the cloud platform, for example, use dual-channel communication:

[0322] ‌Control Channel‌:

[0323] Protocol: MQTT 3.1.1 (QoS1);

[0324] Topic: / property / {projectId} / ctrl;

[0325] Payload encryption: SM4-GCM;

[0326] ‌Data channel‌ protocol: HTTP / 2 + gRPC.

[0327] Through the deep integration and intelligent collaboration of three screens, the efficiency of the access control management system has been greatly improved. All indicators have met the requirements of smart building design, providing reliable technical support for the construction of smart communities.

[0328] Preferably, the AI ​​visitor behavior risk assessment system performs behavior analysis on the visitor in the visitor screen and outputs behavior anomaly detection results, including:

[0329] Detect whether there are abnormal behavior characteristics in the visitor's image based on CNN model recognition:

[0330] If it does not exist, the assessment passes and an encrypted instruction is sent to the access control terminal;

[0331] If it exists, the evaluation fails, and an access denial notification is sent to the access control terminal, and the access control terminal feeds back the access denial notification to the visitor terminal.

[0332] The present invention can detect abnormal visitor behavior, using CNN for image recognition to detect whether there are abnormal behavior characteristics in the visitor's image, and implement visit detection (abnormal behavior characteristics such as visitors covering their faces for a long time without taking off their clothes for inspection, area intrusion, etc., can be configured by the user with a large number of abnormal feature data sets for CNN model training and application). Specifically:

[0333] A three-stage convolutional block design is used, with each block consisting of 2-5 convolutional layers and 1 pooling layer, ultimately connected to 1-2 fully connected layers. The input layer receives 2560×1440 video frames at 25fps (training video images of various abnormal behaviors). Spatiotemporal features are extracted using a 3×3×3 3D convolution kernel with a stride of 1 and same padding to maintain feature map size.

[0334] Convolutional layer parameter configuration:

[0335] First convolutional block: 32 5×5 convolution kernels, ReLU activation;

[0336] Second convolutional block: 64 3×3 convolution kernels, LeakyReLU activation;

[0337] The third convolutional block: 128 3×3 convolution kernels, Swish activation;

[0338] Pooling layer: 2×2 max pooling, stride 2.

[0339] The integrated Elastic Weight Consolidation (EWC) algorithm determines parameter importance by calculating the Fisher Information Matrix, preserving core features during continuous learning. It supports the addition of 2,000 new visitor data points per month, improving model recognition accuracy.

[0340] The quantitative detection of abnormal behavior characteristics is as follows:

[0341] Exception Type Detection indicators Decision threshold Response Level Loitering Detection Dwell time >30 seconds intermediate Items left behind Static Continuous >60 seconds advanced Area Invasion Cross-border distance >0.5 m advanced Climbing behavior Vertical displacement >1.2 meters urgent Aggregation behavior Population density >3 people / m² intermediate

[0342] Dynamic thresholds are set using the 3 Sigma principle: the mean ± 3 standard deviations are considered normal, and those exceeding this range are considered abnormal. Calibration based on historical data ensures an accuracy rate > 95% and a false alarm rate < 5%.

[0343] Multimodal feature fusion can also be used to achieve fusion feature detection and improve detection accuracy:

[0344] Visual features: Extract human key points (17-point model) through YOLOv5s+DeepSORT;

[0345] Behavioral characteristics: calculate movement speed (0-2m / s) and movement trajectory entropy (0-1);

[0346] Time series features: The LSTM network analyzes changes in behavior patterns in the last 10 frames.

[0347] The national secret SM4-GCM algorithm is used to encrypt control instructions, and the 256-bit dynamic key is rotated every 24 hours. The communication protocol stack includes:

[0348] Transport layer: TLS 1.3 mutual authentication;

[0349] Application layer: Modbus TCP over SM4;

[0350] Data signature: SM3 hash + SM2 digital certificate.

[0351] After the system encrypts, it sends an encryption instruction to the corresponding access control terminal according to the device ID in the request.

[0352] Therefore, through accurate identification of CNN models, multimodal feedback linkage and national-level security protection, real-time risk assessment and intelligent management of visitor behavior can be achieved.

[0353] Preferably, the property cloud platform includes:

[0354] Cloud processors, used to provide cloud processing and analysis services;

[0355] Cloud database, used to provide cloud storage services;

[0356] An intelligent call distribution engine is used to perform location routing based on the device ID of the current access control terminal accessed by the visitor in the access request, find the customer service representative corresponding to the device ID of the current access control terminal, and place a call to the customer service representative's smart terminal; after receiving the call, the customer service representative inputs their customer service biometrics through the voiceprint recognition engine;

[0357] Visual access control status dashboard, used to visualize the status of each access control terminal;

[0358] Voiceprint recognition engine, used to collect and extract customer service biometrics;

[0359] A communication module, used for data transmission and communication control with the access control terminal;

[0360] The cloud database, intelligent call distribution engine, visual access control status dashboard, voiceprint recognition engine and communication module are respectively connected to the cloud processor for communication.

[0361] In terms of specific configuration, the property cloud platform adopts a microservice architecture design, decoupling the core functional modules into independent service units such as cloud processors, and realizing interaction through lightweight communication protocols. The server cluster based on the Feiteng D2000 eight-core processor provides computing support. A single node is configured with 32GB DDR4 ECC memory and 1TB NVMe SSD storage, supporting dual-channel data throughput of up to 25.6GB / s. The computing resource scheduling adopts a dynamic load balancing algorithm to automatically adjust resource allocation according to the number of access control terminal connections (50-200 channels / node) and the amount of video analysis tasks (8 channels 1080P / node). The cloud processor supports PCIe x16 slot expansion encryption cards (such as SM4 acceleration cards) or GPU cards (NVIDIA T4) to improve the processing capabilities of specific tasks.

[0362] The cloud database can use a relational database (MySQL cluster) to store visitor records, access control status, and monitoring data. It can also use SM4-CBC mode to encrypt static data, with keys managed by the HSM hardware module. Field-level permission management is implemented based on the RBAC model, and three-factor authentication storage (account + certificate + biometric) for access control is supported.

[0363] The intelligent call distribution engine uses a location routing algorithm to build a dynamic matching model based on the device's GIS coordinates and the customer service agent's mobile terminal location data:

[0364] ,

[0365] The weight parameters are:

[0366] α=0.6 (distance factor), use the Haversine formula to calculate the distance from the customer service staff to the access control;

[0367] β=0.3 (skill factor), dynamically adjusted based on historical ticket resolution rates;

[0368] γ = 0.1 (load factor), based on the current call duration and the number of pending tasks.

[0369] Routing process:

[0370] Receive access control terminal call request and extract device ID and location code;

[0371] Query the list of service personnel in the associated property area;

[0372] Calculate the matching score of each person and sort them;

[0373] Initiate a two-way confirmation call (ringing timeout 15 seconds);

[0374] Record the assignment results and update the personnel status.

[0375] Abnormal scenario handling:

[0376] No available customer service: Automatically transferred to a backup agent in the cloud, with a voice prompt "Customer service is busy, please wait";

[0377] Call timeout: triggers secondary allocation, expanding the location matching radius by half;

[0378] Communication interruption: The customer service IDs that were successfully allocated three times in the local cache are prioritized for retry.

[0379] The access control status dashboard uses WebGL technology to render large-scale device status and supports the following view modes:

[0380] Heat map: displays the distribution density of abnormal events, with a color gradient from green (normal) to red (emergency);

[0381] Topology map: displays the device communication link status and refreshes the delay indicator (ms) in real time;

[0382] Trend chart: scrolls to display the changes in key indicators in the last hour (such as traffic volume and number of rejections).

[0383] The voiceprint recognition engine uses the MFCC (Mel Frequency Cepstral Coefficient) algorithm to extract voiceprint features. The key steps are as follows:

[0384] ‌Signal processing pipeline‌:

[0385] Pre-emphasis: Use a first-order FIR filter to enhance high-frequency components; s′(n)=s(n)-0.97×s(n-1),

[0386] Framing and windowing: 25ms frame length (400 samples @ 16kHz), 50% overlap, and Hamming window to reduce spectral leakage;

[0387] FFT transformation: 256-point FFT obtains the power spectrum, retaining the first 128 coefficients;

[0388] Mel filtering: 40 triangular filter banks covering 0-8kHz, simulating the nonlinear perception of the human ear;

[0389] DCT transform: take the first 16-dimensional cepstral coefficients as the feature vector.

[0390] Anti-counterfeiting measures:

[0391] Liveness detection: Analyze spectrum continuity and identify recording playback attacks;

[0392] Dynamic password: A 6-digit combination is randomly generated for each authentication to prevent pre-recorded cracking;

[0393] Multi-factor fusion: Combines device ID and timestamp to generate a signature to ensure request uniqueness.

[0394] For the communication module, please refer to the previous dual-module description.

[0395] Through full-stack domestic technology architecture and intelligent design, the efficiency of the property access control management system has been greatly improved.

[0396] like Figure 2 As shown, preferably, the process of the property cloud platform issuing the encryption instruction is as follows:

[0397] Calculating an operation timestamp based on a time at which the access request is received;

[0398] Parse and read the QR code information in the access request to obtain the device geocode and device ID of the current access control terminal;

[0399] The customer service staff at the property customer service workstation enters the corresponding customer service biometrics;

[0400] Generate a dynamic signature key based on the SM3 hash operation of the operation timestamp, device geocode and customer service biometrics;

[0401] The dynamic signature key is used to encrypt the corresponding door opening instruction input by the customer service staff, generate the encrypted instruction and send it to the access control terminal corresponding to the device ID.

[0402] like Figure 3 As shown, the system workflow is as follows (Scenario: Property management remotely confirms door opening)

[0403] 1. Visitor's mobile phone → access control terminal: scan the dynamic QR code;

[0404] 2. Access control terminal → property management cloud platform: report visitor location + device ID;

[0405] 3. Property Cloud Platform → Property Customer Service Workstation: A visit request pops up;

[0406] 4. Noterightof property customer service workstation: displays visitor snapshots + location map;

[0407] 5. Property Customer Service Workstation → Property Cloud Platform: Click "One-click door opening" to issue an encrypted command;

[0408] 6. Property cloud platform → access control server: send encrypted instruction package;

[0409] 7. Access control server → electronic lock execution unit: drives the door lock to open;

[0410] 8. Electronic lock execution unit → access control terminal: feedback door status;

[0411] 9. Access control terminal → visitor's mobile phone: voice prompt "door is open";

[0412] 10. Access control terminal → property customer service workstation: real-time monitoring screen transmission.

[0413] Feedback tracking stage: The door opening results are pushed to the visitor's mobile phone in real time, the entire operation is recorded and stored in secure cloud storage, and blockchain evidence is generated (including timestamp + operator's biometric information).

[0414] The platform can also access owner data, conduct owner conversations, and manage visitors based on that information. It can also audit visitor access control operation logs through the operation audit system and store them on the blockchain (this can be implemented using blockchain-based evidence storage methods). This generates operation logs and provides reliable evidence for subsequent visitor tracing. For specific security audit and evidence storage technology implementation plans, please refer to the following implementation plan:

[0415] This solution aims to achieve automated auditing, tamper-proof evidence storage, and reliable traceability of access control operation logs. The solution is divided into three core modules: an operation audit system (Audit System), blockchain-based evidence preservation processing (Blockchain-based Evidence Preservation), and an operation log generation and traceability mechanism.

[0416] 1. Operation audit system

[0417] Open-source or commercial operation auditing systems (such as Graylog, Wazuh, or Splunk) can be deployed on-premises or in the cloud. The system collects visitor operation logs from access controllers (such as HID Global or access control software) via APIs or Syslog protocols. Logs include key fields such as visitor ID, access time, door location, operation type (e.g., door opening success / failure), and verification method (e.g., card swipe, facial recognition).

[0418] Audit analytics applies predefined rules (e.g., behavior-based anomaly detection to identify unauthorized access, frequent failed attempts, or access during off-hours). Audit engines (e.g., Elasticsearch + Kibana) process logs in real time, generate audit reports, and flag risk events.

[0419] Audit analysis and processing:

[0420] (1) Data preprocessing: log standardization (using JSON format), data cleaning (removing duplicate or invalid data) to ensure the reliability and consistency of input data.

[0421] (2) Security reinforcement: Restrict operations through identity authentication (OAuth 2.0) and access control (RBAC), and only authorize administrators to access audit data.

[0422] 2. The steps for blockchain-based evidence storage are as follows:

[0423] Evidence Storage Preparation: The audit system generates log summaries. Each log entry is hashed using a hash function (such as SHA-256) to produce an irreversible digest. A private blockchain platform (such as Hyperledger Fabric) is selected to ensure low latency (<1 second per transaction) and low costs (no public blockchain gas fees) to provide enterprise-grade security and controllability, avoiding the performance overhead of public blockchains. A blockchain gateway is established (e.g., via a REST API) to upload summaries to the blockchain network in batches. A smart contract (or chaincode) is created on the blockchain to record log summaries as transaction data. Transactions include a timestamp, a hash of the operation summary, and relevant metadata (such as the log type). After the transaction is submitted, it is verified by a consensus mechanism (such as PBFT) and written to a new block. The system stores the complete log data in a local database (such as PostgreSQL), linking it to the blockchain transaction hash (TXID), forming a "log body + on-chain evidence" structure.

[0424] Evidence storage frequency: supports batch processing (hourly summary) or real-time processing (highly sensitive events).

[0425] 3. Operation log generation and tracing mechanism

[0426] Integrate audit and blockchain data to generate structured operation log files (e.g., CSV or XML format). Each log entry contains audit results (e.g., risk event identifiers) and a blockchain evidence pointer (e.g., TXID). Develop a web application or API interface (e.g., based on Python Flask or Java Spring Boot) that allows security administrators to query logs by visitor ID, time range, and other criteria. The system displays a complete operation record and provides a "blockchain verification" function: enter the log hash value and compare it with the hash value stored on the blockchain to check for tampering. For high-risk events, the system automatically triggers an alert (e.g., sending an email / SMS) and generates a PDF report for compliance audits.

[0427] The system operation configuration is as follows:

[0428] Automation design: supports scheduled tasks (such as daily generation of audit reports) and post-processing scripts;

[0429] Scalability: Historical data can be retained through distributed storage (such as MinIO) to facilitate long-term tracing.

[0430] The process of operating the audit system to audit visitor access control operation logs and store them on the blockchain is as follows:

[0431] Access control events → Operation audit system (data collection and analysis) → Evidence processing (hash generation + blockchain on-chain) → Operation log storage (database + blockchain association) → User tracing interface.

[0432] This system integrates the operational audit system and blockchain evidence storage, and has significant technical advantages to ensure data integrity, security and credibility, as follows:

[0433] 1. Data immutability

[0434] Advantages: The blockchain's distributed ledger ensures that log summaries cannot be tampered with or deleted (through consensus mechanisms and cryptographic hashing). Any subsequent tampering with the operation log will result in a hash mismatch and be immediately detected, which is superior to traditional databases (which are susceptible to malicious modification).

[0435] 2. High traceability and transparency

[0436] Blockchain provides a complete audit trail, enabling full traceability of visitor behavior. Timestamps and transaction hashes ensure accurate operation times (preventing time window tampering). Furthermore, the audit system can query the details of all access control events, combined with blockchain verification, to achieve end-to-end transparency.

[0437] 3. Security Enhancement

[0438] Two-tier protection: The audit system uses real-time rules to detect abnormal behavior (such as SQL injection attack protection), while blockchain encryption (such as ECDSA digital signatures) prevents unauthorized access. Separate storage strategies (log bodies in the database, summaries in the blockchain) mitigate single point of failure risks.

[0439] 4. Data integrity and credibility

[0440] Blockchain evidence storage ensures the integrity of logs throughout the collection, storage, and traceability process. The on-chain hash value acts as a "fingerprint," instantly identifying any modifications. The evidence generation process complies with electronic evidence regulations and can serve as an authoritative source.

[0441] 5. Efficiency and cost optimization

[0442] Automated auditing and evidence storage reduce manual intervention, and smart contracts efficiently process large volumes of transactions (over 100 transactions per second). Private blockchains avoid the costs of public blockchains and, combined with proven auditing tools like Graylog, reduce costs. This reduces operational costs (no third-party notarization is required), and response times are shortened from minutes to seconds.

[0443] In addition, the platform adopts a dynamic security signature mechanism: it collects the operation timestamp, device geocoding and customer service biometrics at the time of access, performs SM3 hash operations, generates a dynamic signature key (refreshed every 60 seconds) for command encryption, and waits for the property cloud platform to click "One-click door opening", and then sends the encrypted command to open the door to the access control server (that is, the access control system of the access control machine).

[0444] When the cloud platform issues instructions, it performs encryption verification:

[0445] The safety control logic is as follows:

[0446] One-click door opening verification on the property side

[0447] defproperty_open_verify(cmd):

[0448] Four-level safety check

[0449] ifoperator.auth_level>=3: Operator authority verification

[0450] ifverify_geo_match(cmd.device_id): device location match verification

[0451] ifai_risk_evaluate(cmd.visitor_img)<0.2: AI visitor risk assessment

[0452] ifdynamic_sign(cmd.timestamp): dynamic digital signature

[0453] unlock_door()Open the door

[0454] record_blockchain(cmd) blockchain evidence

[0455] else:

[0456] alert_security_center() triggers a security response .

[0458] The command will be decrypted by the security chip deployed in the door control system of the access terminal, and the door will be opened after verification. Otherwise, an alarm feedback will be triggered.

[0459] Preferably, after controlling the access control terminal to capture the visitor's image, the property cloud platform further includes:

[0460] Acquire a visitor's facial image from the visitor screen;

[0461] Call the public security database to perform facial recognition and verification on the visitor's facial image:

[0462] If the verification is successful, the AI ​​visitor behavior risk assessment system will analyze the visitor behavior in the visitor screen and output the abnormal behavior detection results;

[0463] Otherwise, an access denial notification is sent to the access control terminal, and the access control terminal feeds back the access denial notification to the visitor terminal.

[0464] The platform can connect to the public security monitoring system and verify visitor information based on a third-party public security database. Real-time visitor images are compared with images in the database for facial recognition to verify the visitor's identity. Only qualified individuals are then tested for behavior, enhancing the security level of visitor access to the property.

[0465] On the other hand, a method for remote online access control based on property-side access confirmation is provided, which is implemented based on the above-mentioned remote online access control system based on property-side access confirmation, and the method includes:

[0466] Visitors scan the dynamic QR code displayed on the access control terminal through the visitor terminal and send an access request to the access control terminal;

[0467] The access control terminal generates a dynamic QR code including the device geocode and device ID of the current access control terminal, and reports the access request to the property cloud platform;

[0468] The property cloud platform displays the access request and controls the access control terminal to capture the visitor's screen. The system then analyzes the visitor's behavior based on the AI ​​visitor behavior risk assessment system and outputs the abnormal behavior detection result. If the assessment passes, an encrypted instruction is sent to the access control terminal.

[0469] The access control terminal parses the encrypted instruction and drives the electronic lock execution unit to open the electronic door, and at the same time feeds back the door opening notification to the visitor terminal, captures the visitor's image in real time and transmits it back to the property cloud platform; the visitor terminal responds to the door opening notification, and the property cloud platform plays the real-time transmitted visitor image.

[0470] Please implement and understand the above method in conjunction with the previous system working principle, which will not be repeated here.

[0471] Figure 4 is a schematic structural diagram of an electronic device provided by an embodiment of the present invention, such as Figure 4 As shown, the electronic device 410 may include a first processor 2001 .

[0472] Optionally, the electronic device 410 may further include a memory 2002 and a transceiver 2003 .

[0473] The first processor 2001, the memory 2002 and the transceiver 2003 may be connected via a communication bus.

[0474] The following combination Figure 4 The components of the electronic device 410 are described in detail.

[0475] The first processor 2001 is the control center of the electronic device 410 and can be a single processor or a collective term for multiple processing elements. For example, the first processor 2001 can be one or more central processing units (CPUs), an application-specific integrated circuit (ASIC), or one or more integrated circuits configured to implement embodiments of the present invention, such as one or more digital signal processors (DSPs) or one or more field programmable gate arrays (FPGAs).

[0476] Optionally, the first processor 2001 can execute various functions of the electronic device 410 by running or executing software programs stored in the memory 2002 and calling data stored in the memory 2002.

[0477] In a specific implementation, as an embodiment, the first processor 2001 may include one or more CPUs, such as Figure 4 CPU0 and CPU1 are shown in FIG.

[0478] In a specific implementation, as an embodiment, the electronic device 410 may also include multiple processors, such as Figure 4 1 and 2. The first processor 2001 and the second processor 2004 are shown in FIG. Each of these processors can be a single-core processor (single-CPU) or a multi-core processor (multi-CPU). A processor herein can refer to one or more devices, circuits, and / or processing cores for processing data (e.g., computer program instructions).

[0479] The memory 2002 is used to store the software program for executing the solution of the present invention, and is controlled by the first processor 2001 for execution. The specific implementation method can refer to the above method embodiment and will not be repeated here.

[0480] Alternatively, the memory 2002 may be a read-only memory (ROM) or other type of static storage device that can store static information and instructions, a random access memory (RAM) or other type of dynamic storage device that can store information and instructions, or an electrically erasable programmable read-only memory (EEPROM), a compact disc read-only memory (CD-ROM) or other optical disc storage, an optical disc storage (including a compact disc, laser disc, optical disc, digital versatile disc, Blu-ray disc, etc.), a magnetic disk storage medium or other magnetic storage device, or any other medium that can be used to carry or store desired program code in the form of instructions or data structures and can be accessed by a computer, but is not limited thereto. The memory 2002 may be integrated with the first processor 2001 or exist independently and accessed through the interface circuit ( Figure 4 (not shown) is coupled to the first processor 2001, which is not specifically limited in this embodiment of the present invention.

[0481] The transceiver 2003 is used to communicate with a network device or a terminal device.

[0482] Optionally, the transceiver 2003 may include a receiver and a transmitter ( Figure 4 The receiver is used to implement a receiving function, and the transmitter is used to implement a sending function.

[0483] Optionally, the transceiver 2003 may be integrated with the first processor 2001, or may exist independently and communicate with the first processor 2001 through the interface circuit ( Figure 4 (not shown) is coupled to the first processor 2001, which is not specifically limited in this embodiment of the present invention.

[0484] It should be noted that Figure 4 The structure of the electronic device 410 shown in the figure does not constitute a limitation on the router. The actual knowledge structure recognition device may include more or fewer components than shown in the figure, or combine certain components, or arrange the components differently.

[0485] In addition, the technical effects of the electronic device 410 can refer to the technical effects of the access control remote online control system based on property-side access confirmation described in the above method embodiment, and will not be repeated here.

[0486] It should be understood that the first processor 2001 in the embodiment of the present invention may be a central processing unit (CPU), or may be other general-purpose processors, digital signal processors (DSP), application-specific integrated circuits (ASIC), field programmable gate arrays (FPGA), or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc. A general-purpose processor may be a microprocessor, or the processor may be any conventional processor, etc.

[0487] It should also be understood that the memory in the embodiments of the present invention may be volatile memory or non-volatile memory, or may include both volatile and non-volatile memory. The non-volatile memory may be read-only memory (ROM), programmable read-only memory (PROM), erasable programmable read-only memory (EPROM), electrically erasable programmable read-only memory (EEPROM), or flash memory. The volatile memory may be random access memory (RAM), which is used as an external cache. By way of example and not limitation, many forms of random access memory (RAM) are available, such as static RAM (SRAM), dynamic random access memory (DRAM), synchronous DRAM (SDRAM), double data rate SDRAM (DDR SDRAM), enhanced SDRAM (ESDRAM), synchronous link DRAM (SLDRAM), and direct rambus RAM (DR RAM).

[0488] The above embodiments can be implemented in whole or in part via software, hardware (e.g., circuits), firmware, or any other combination thereof. When implemented using software, the above embodiments can be implemented in whole or in part in the form of a computer program product. The computer program product comprises one or more computer instructions or computer programs. When loaded or executed on a computer, the processes or functions described in accordance with the embodiments of the present invention are fully or partially performed. The computer can be a general-purpose computer, a special-purpose computer, a computer network, or other programmable method. The computer instructions can be stored in a computer-readable storage medium or transmitted from one computer-readable storage medium to another. For example, the computer instructions can be transmitted from one website, computer, server, or data center to another website, computer, server, or data center via wired means (e.g., infrared, wireless, microwave, etc.). The computer-readable storage medium can be any available medium accessible by a computer, or a data storage device such as a server or data center that contains a collection of one or more available media. The available medium can be magnetic media (e.g., floppy disks, hard disks, magnetic tapes), optical media (e.g., DVDs), or semiconductor media. The semiconductor media can be a solid-state drive.

[0489] It should be understood that the term "and / or" as used herein simply describes a relationship between associated objects, indicating that three possible relationships exist. For example, "A and / or B" can represent: A alone, A and B together, or B alone. A and B can be singular or plural. Furthermore, the character " / " as used herein generally indicates an "or" relationship between the associated objects, but it may also indicate an "and / or" relationship. For specific understanding, please refer to the context.

[0490] In this disclosure, "at least one" means one or more, and "plurality" means two or more. "At least one of the following" or similar expressions refers to any combination of these items, including any combination of single or plural items. For example, "at least one of a, b, or c" can mean: a, b, c, ab, ac, bc, or abc, where a, b, and c can be single or plural.

[0491] It should be understood that in various embodiments of the present invention, the size of the serial numbers of the above-mentioned processes does not mean the order of execution. The execution order of each process should be determined by its function and internal logic, and should not constitute any limitation on the implementation process of the embodiments of the present invention.

[0492] Those skilled in the art will appreciate that the units and algorithm steps of each example described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, or a combination of computer software and electronic hardware. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Professionals and technicians can use different methods to implement the described functions for each specific application, but such implementation should not be considered beyond the scope of the present invention.

[0493] Those skilled in the art will clearly understand that, for the convenience and brevity of description, the specific working processes of the above-described devices, methods and units can refer to the corresponding processes in the aforementioned method embodiments and will not be repeated here.

[0494] In the several embodiments provided by the present invention, it should be understood that the disclosed devices, methods, and methods can be implemented in other ways. For example, the method embodiments described above are merely illustrative. For example, the division of the units is merely a logical function division. In actual implementation, there may be other division methods, such as multiple units or components can be combined or integrated into another device, or some features can be ignored or not executed. In addition, the mutual coupling or direct coupling or communication connection shown or discussed can be an indirect coupling or communication connection through some interface, method or unit, which can be electrical, mechanical or other forms.

[0495] The units described as separate components may or may not be physically separate, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed across multiple network units. Some or all of these units may be selected to achieve the purpose of this embodiment according to actual needs.

[0496] In addition, each functional unit in each embodiment of the present invention may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit.

[0497] If the functions are implemented as software functional units and sold or used as independent products, they can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present invention, or the portion that contributes to the prior art, or the portion of the technical solution, can be embodied in the form of a software product. This computer software product is stored in a storage medium and includes several instructions for enabling a computer device (which can be a personal computer, server, or network device, etc.) to execute all or part of the steps of the methods described in various embodiments of the present invention. The aforementioned storage media include various media that can store program code, such as USB flash drives, mobile hard drives, read-only memories (ROM), random access memories (RAM), magnetic disks, or optical disks.

[0498] The above description is merely a specific embodiment of the present invention, but the scope of protection of the present invention is not limited thereto. Any modifications or substitutions that can be easily conceived by a person skilled in the art within the technical scope disclosed in the present invention should be included in the scope of protection of the present invention. Therefore, the scope of protection of the present invention should be based on the scope of protection of the claims.

Claims

1. A remote online access control system based on property access confirmation, characterized in that: The system comprises: Visitor terminal: used for visitors to scan the dynamic QR code displayed on the access control terminal and issue access requests; The access control terminal is used to generate a dynamic QR code including the device geocode and device ID of the current access control terminal, and report the access request to the property cloud platform; The property cloud platform is used to display the access request, control the access control terminal to capture the visitor's screen, and perform behavioral analysis on the visitor in the visitor screen based on the AI ​​visitor behavior risk assessment system and output the behavior anomaly detection result. If the assessment passes, an encrypted instruction is sent to the access control terminal; The access control terminal parses the encrypted command and drives the electronic lock execution unit to open the electronic door, and at the same time, feeds back the door opening notification to the visitor terminal, captures the visitor's image in real time and transmits it back to the property cloud platform; the visitor terminal responds to the door opening notification, and the property cloud platform plays the real-time returned visitor image; The visitor terminal interacts with the access control terminal by scanning a code; The access control terminal is communicatively connected to the property cloud platform.

2. The access control remote online control system based on property-side access confirmation according to claim 1 is characterized in that: The access control terminal includes: Access control server, used to implement access control according to platform instructions; A power supply, for providing power; An electronic lock execution unit, configured to provide lock control services for the access control terminal; A dual-mode communication unit, used to provide data transmission and communication control services between the access control terminal and the property cloud platform; A dynamic encrypted QR code generation module is used to generate the dynamic QR code containing the device geographic code and device ID of the current access control terminal, encrypt the visitor information after the visitor scans the code, generate the access request, and report it to the property cloud platform through the dual-mode communication unit; A visitor behavior analysis camera, configured to respond to a capture instruction from the property cloud platform, capture visitor images, and report the images to the property cloud platform via a dual-mode communication unit; The power supply, electronic door, dual-mode communication unit, dynamic encryption QR code generation module and visitor behavior analysis camera are electrically connected to the access control server respectively; The access control terminal and the property cloud platform are communicatively connected via the dual-mode communication unit.

3. The access control remote online control system based on property-side access confirmation according to claim 1 is characterized in that: The property cloud platform is deployed on the property customer service workstation; The property customer service workstation is also equipped with: The call management screen is used to issue call management instructions to the access control terminal, interact with visitors, and support visitor intercom, voice interpretation, and multilingual translation; Access control monitoring screen, used to display the real-time video stream transmitted by the access control terminal, as well as the visitor's screen at the time of visit, as well as the results of behavior analysis and anomaly detection; The command control panel is used to send corresponding control commands to the access control terminal, including a door opening button, a door status indicator light, and an emergency lock button; The call management screen, access control monitoring screen and command control screen are respectively connected to the property cloud platform for communication, and control interaction is performed with the corresponding access control terminal through the property cloud platform.

4. The access control remote online control system based on property-side access confirmation according to claim 3 is characterized in that: The AI ​​visitor behavior risk assessment system performs behavior analysis on the visitor in the visitor screen and outputs behavior anomaly detection results, including: Detect whether there are abnormal behavior characteristics in the visitor's image based on CNN model recognition: If it does not exist, the assessment passes and an encrypted instruction is sent to the access control terminal; If it exists, the evaluation fails, and an access denial notification is sent to the access control terminal, and the access control terminal feeds back the access denial notification to the visitor terminal.

5. The access control remote online control system based on property-side access confirmation according to claim 1 is characterized in that: The property cloud platform includes: Cloud processors, used to provide cloud processing and analysis services; Cloud database, used to provide cloud storage services; An intelligent call distribution engine is used to perform location routing based on the device ID of the current access control terminal accessed by the visitor in the access request, find the customer service representative corresponding to the device ID of the current access control terminal, and place a call to the customer service representative's smart terminal; after receiving the call, the customer service representative inputs their customer service biometrics through the voiceprint recognition engine; Visual access control status dashboard, used to visualize the status of each access control terminal; Voiceprint recognition engine, used to collect and extract customer service biometrics; A communication module, used for data transmission and communication control with the access control terminal; The cloud database, intelligent call distribution engine, visual access control status dashboard, voiceprint recognition engine and communication module are respectively connected to the cloud processor for communication.

6. The access control remote online control system based on property-side access confirmation according to claim 5 is characterized in that: The process of the property cloud platform issuing encryption instructions is as follows: Calculating an operation timestamp based on a time at which the access request is received; Parse and read the QR code information in the access request to obtain the device geocode and device ID of the current access control terminal; The customer service staff at the property customer service workstation enters the corresponding customer service biometrics; Generate a dynamic signature key based on the SM3 hash operation of the operation timestamp, device geocode and customer service biometrics; The dynamic signature key is used to encrypt the corresponding door opening instruction input by the customer service staff, generate the encrypted instruction and send it to the access control terminal corresponding to the device ID.

7. The access control remote online control system based on property-side access confirmation according to claim 1 is characterized in that: After controlling the access control terminal to capture the visitor's image, the property cloud platform further includes: Acquire a visitor's facial image from the visitor screen; Call the public security database to perform facial recognition and verification on the visitor's facial image: If the verification is successful, the AI ​​visitor behavior risk assessment system will analyze the visitor behavior in the visitor screen and output the abnormal behavior detection results; Otherwise, an access denial notification is sent to the access control terminal, and the access control terminal feeds back the access denial notification to the visitor terminal.

8. A method for remote online access control based on property-side access confirmation, implemented based on the remote online access control system based on property-side access confirmation according to any one of claims 1 to 7, characterized in that: The method comprises: Visitors scan the dynamic QR code displayed on the access control terminal through the visitor terminal and send an access request to the access control terminal; The access control terminal generates a dynamic QR code including the device geocode and device ID of the current access control terminal, and reports the access request to the property cloud platform; The property cloud platform displays the access request and controls the access control terminal to capture the visitor's screen. The system then analyzes the visitor's behavior based on the AI ​​visitor behavior risk assessment system and outputs the abnormal behavior detection result. If the assessment passes, an encrypted instruction is sent to the access control terminal. The access control terminal parses the encrypted instruction and drives the electronic lock execution unit to open the electronic door, and at the same time feeds back the door opening notification to the visitor terminal, captures the visitor's image in real time and transmits it back to the property cloud platform; the visitor terminal responds to the door opening notification, and the property cloud platform plays the real-time transmitted visitor image.

9. An electronic device, characterized in that: The electronic device comprises: processor; A memory having computer-readable instructions stored thereon, wherein when the computer-readable instructions are executed by the processor, the method according to claim 8 is implemented.

10. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores program code, which can be called by a processor to execute the method according to claim 8.

Images