System and method for preventing copied IC (integrated circuit) card from passing after statistical analysis of passing record data

Abstract

The invention discloses a system and a method for preventing a copied IC card from passing after statistical analysis of passing record data, the system comprises a card swiping device, a passing control and execution device, an upper computer management system, a card issuing device and a camera, the upper computer management system comprises an account opening and card issuing center and a front communication service; the card swiping device is connected with the passing control and execution device, the passing control and execution device is connected with the front communication service, the card issuing device is connected with the account opening and card issuing center, and the camera is connected with the passing control and execution device. Through traffic record statistical analysis and multi-source data fusion, a copy card use path is actively identified and visual evidences are pushed, so that the problems of passivity, isolation and tracing in the prior art are fundamentally solved.

Description

Technical Field

[0001] This invention relates to the field of IC card access technology, and in particular to a system and method for preventing the duplication of IC cards by statistically analyzing access record data. Background Technology

[0002] Currently, access control systems widely use IC cards as identity authentication tools. However, the vulnerability of IC cards to duplication has long been a security risk. Existing technologies mainly improve security through encryption optimization, offline detection mechanisms, physical feature identification technology, and fixed + random sector key technology, but still have significant shortcomings: 1. Passive defense mode: relying on encryption or single verification to intercept copied cards, unable to actively detect and warn of duplication behavior; 2. Data silos: access records are scattered across single devices, lacking cross-regional and cross-device statistical analysis, making it difficult to identify coordinated attacks; 3. Weak traceability: not integrating biometric data (such as captured photos), permission binding, spatiotemporal rules, etc., resulting in low efficiency of manual verification. In view of the above, this application proposes a system and method to prevent the duplication of IC cards by statistically analyzing access record data. Summary of the Invention

[0003] Based on the technical problems existing in the background technology, the present invention proposes a system and method for preventing the copying of IC card passage by statistically analyzing the passage record data.

[0004] The present invention proposes a system for preventing the copying of IC cards by statistically analyzing access record data. The system includes a card reader, access control and execution device, host computer management system, card issuer and camera. The host computer management system includes an account opening and card issuance center and a front-end communication service.

[0005] The card reader is connected to the access control and execution device, the access control and execution device is connected to the front-end communication service, the card issuer is connected to the account opening and card issuance center, and the camera is connected to the access control and execution device.

[0006] Preferably, the host computer management system is used to add or change the configuration data and access area data of the access control and execution device. The configuration data includes device ID, device IP, device name and the area to which it belongs. The device ID is unique and does not repeat in the system. The access area data includes area number, area name, parent area number and physical distance to adjacent areas.

[0007] The configuration data of the host computer management system also includes the maximum passage speed.

[0008] Preferably, the account opening and card issuance center and the card issuer work together to open accounts and issue cards to cardholders, and store the generated card number data in the host computer management system. The host computer management system also stores the cardholder's contact number. Based on the key area the cardholder wants to access, the host computer management system binds the card number to the area code. Simultaneously, the host computer management system generates card permission data, which includes the card number, the ID value of the access control and execution device, and the permitted date and time range. The front-end communication service filters and processes the card permission data before sending it to the access control and execution device, which stores the card permission data. The host computer management system periodically performs time synchronization operations with all access control and execution devices and card-swiping devices in the system through the front-end communication service.

[0009] Preferably, the card swiping device is used to swipe cards and uploads the acquired card number to the access control and execution device. When the card number matches the access control and execution device ID and the current date and time, and the card permission data, the access control and execution device issues a pass command to allow the cardholder to pass. When the card number does not match the access control and execution device ID and the current date and time, and the card permission data, the access control and execution device issues an alarm prompt to prevent the cardholder from passing. After the cardholder swipes the card, the access control and execution device sends a photo capture command to the camera. After the camera captures the photo, it stores the photo data in the access control and execution device. The access control and execution device uploads the current card swiping record data to the host computer management system through a front-end communication service. The card swiping record data includes the card number, access control and execution device ID value, card swiping time, status value, status description, and on-site card swiping capture photo. The status value includes normal card swiping and abnormal card swiping.

[0010] This invention also proposes a method for preventing IC card duplication by statistically analyzing passage record data, comprising the following steps:

[0011] S1: Configure equipment and access areas;

[0012] S2: Authorize account opening, card issuance, and device card swiping permissions;

[0013] S3: Report card swipe data;

[0014] S4: Perform statistical analysis;

[0015] S5: Push notifications for suspected copied IC card transaction records.

[0016] Preferably, the specific logical steps of S1 are as follows:

[0017] S101: System operators add or change access control and execution device configuration data in the host computer management system;

[0018] S102: System operators add or change access area data in the host computer management system.

[0019] Preferably, the specific logical steps of S2 are as follows:

[0020] S201: System operators use a card issuer to open accounts and issue cards to cardholders through the account opening and card issuance center in the host computer management system, and store the generated card number data in the host computer management system. During the process of opening accounts and issuing cards to cardholders, system operators also save the cardholders' contact phone numbers in the host computer management system.

[0021] S202: The system operator binds the card number to the area number according to the key area that the cardholder wants to pass through in the host computer management system;

[0022] S203: The system operator generates card permission data through the host computer management system. The front-end communication service filters and processes the card permission data and then sends it to the access control and execution device. The access control and execution device saves the card permission data.

[0023] Preferably, the specific logical steps of S3 are as follows:

[0024] S301: The cardholder swipes the card issued to the card reader, and the card reader uploads the obtained card number to the access control and execution equipment.

[0025] S302: When the card number, access control and execution device ID, and current date and time mentioned in S301 match the card permission data, the access control and execution device issues a release command to allow the cardholder to pass.

[0026] S303: When the card number, access control and execution device ID, and current date and time mentioned in S301 do not match the card permission data, the access control and execution device issues an alarm to prevent the cardholder from passing;

[0027] S304: After the cardholder swipes the card, the access control and execution device sends a photo capture command to the camera. After the camera captures the photo, it stores the photo data in the access control and execution device.

[0028] S305: Access control and execution device 2 uploads the current card swipe record data to the host computer management system via the front-end communication service.

[0029] Preferably, the specific logical steps of S4 are as follows:

[0030] S401: Data Preprocessing: Spatiotemporal Standardization: Group the uploaded card swipe records by card number, parse the region associated with the access control and execution device ID, and calculate the time difference Δt between adjacent records and the region switching path;

[0031] Invalid data cleaning: Remove duplicate reporting records caused by malfunctions in access control and execution equipment;

[0032] S402: Composite analysis using multidimensional statistical indicators is shown in the table below:

[0033]

[0034] S403: Perform risk scoring calculation to generate a single card abnormal risk value. The formula used is as follows:

[0035] R = α·I F +β·I T +γ·I σ +δ·I region

[0036] Among them I F I T I σ I region All values ​​are abnormal indicators for each dimension, with abnormal = 1 and normal = 0. α, β, γ, and δ are all weighting coefficients, satisfying α + β + γ + δ = 1. When R ≥ 0.7, it is marked as "high-risk copy card suspected", and when R ≥ 0.4, it is marked as "copy card suspected".

[0037] Based on experience in production projects, the weighting coefficients for α, β, γ, and δ are 0.3, 0.4, 0.2, and 0.1, respectively.

[0038] S404: Perform dynamic threshold optimization, with its historical baseline updated as follows: automatically calculate the average frequency F of each card daily. mean , standard deviation mean σ mean Threshold adaptation, the formula used is: When used for the first time, θ F θ σ The initial values ​​of the threshold parameters are provided based on data from other projects or the experience of system operators, or generated after a period of trial operation in this project.

[0039] Preferably, the specific logical steps of S5 are as follows:

[0040] S501: Based on the statistical analysis results of S4 above, the host computer management system pushes and displays the suspected copied IC card swipe records on the host computer management system software interface. The displayed data includes on-site card swipe photos, swipe time, device name, location, and cardholder contact number.

[0041] S502: System operators make further manual judgments and processes based on the displayed data, including temporarily freezing card number permissions and calling the cardholder to confirm.

[0042] Compared with existing technologies, the beneficial effects of this invention are:

[0043] 1. By integrating four dimensions—time frequency, physical constraints, behavioral consistency, and permission rules—the high misjudgment rate of a single indicator is overcome.

[0044] 2. Based on the cardholder's historical behavior, an adaptive threshold mechanism is used to avoid false negatives caused by fixed thresholds. It also has visual decision support, which links the risk scoring results with the original data, compares the captured photos, and pushes abnormal messages, thus solving the problem of weak traceability in the existing technology.

[0045] This invention proactively identifies the usage path of duplicate cards and pushes visual evidence through statistical analysis of passage records and fusion of multi-source data, fundamentally solving the problems of passivity, isolation, and traceability in existing technologies. Attached Figure Description

[0046] Figure 1 This is a system block diagram for preventing the duplication of IC cards after statistical analysis of passage record data, as proposed in this invention.

[0047] Figure 2 This is a flowchart of the method proposed in this invention for preventing the copying of IC cards by statistically analyzing passage record data. Detailed Implementation

[0048] The present invention will be further explained below with reference to specific embodiments.

[0049] Example

[0050] Reference Figure 1 This embodiment proposes a system to prevent the copying of IC cards by statistically analyzing the passage record data. The system includes a card reader, a passage control and execution device, a host computer management system, a card issuer, and a camera. The host computer management system includes an account opening and card issuance center and a front-end communication service.

[0051] The host computer management system is used to add or change the configuration data and access area data of the access control and execution equipment. The configuration data includes the device ID, device IP, device name and the area to which it belongs. The device ID is unique and does not repeat in the system. The access area data includes the area number, area name, parent area number and physical distance to adjacent areas. The configuration data of the host computer management system also includes the maximum access speed.

[0052] The card reader is connected to the access control and execution equipment, the access control and execution equipment is connected to the front-end communication service, the card issuer is connected to the account opening and card issuance center, and the camera is connected to the access control and execution equipment.

[0053] The account opening and card issuance center and card issuer work together to open accounts and issue cards to cardholders, and store the generated card number data in the host computer management system. The system also stores the cardholder's contact number. The host computer management system binds the card number to the area code based on the key area the cardholder wants to access. Simultaneously, the system generates card permission data, which includes the card number, the ID value of the access control and execution device, and the permitted date and time range. A front-end communication service filters and processes the card permission data before sending it to the access control and execution device, which then stores the card permission data. The host computer management system periodically performs time synchronization operations with all access control and execution devices and card readers in the system through the front-end communication service.

[0054] The card reader is used to swipe cards and uploads the acquired card number to the access control and execution device. When the card number matches the access control and execution device ID, the current date and time, and the card permission data, the access control and execution device issues a pass command, allowing the cardholder to pass. When the card number does not match the access control and execution device ID, the current date and time, and the card permission data, the access control and execution device issues an alarm, preventing the cardholder from passing. After the cardholder swipes the card, the access control and execution device sends a photo capture command to the camera. After the camera captures the photo, it stores the photo data in the access control and execution device. The access control and execution device uploads the current card swipe record data to the host computer management system through the front-end communication service. The card swipe record data includes the card number, access control and execution device ID value, card swipe time, status value, status description, and on-site card swipe photo. The status value includes normal card swipe access and abnormal card swipe access for unauthorized cards.

[0055] Reference Figure 2 This embodiment also proposes a method to prevent IC card duplication after statistical analysis of passage record data, including the following steps:

[0056] S1: Configure equipment and access areas;

[0057] The specific logical steps are as follows:

[0058] S101: System operators add or change access control and execution device configuration data in the host computer management system;

[0059] S102: System operators add or change access area data in the host computer management system;

[0060] S2: Authorize account opening, card issuance, and device card swiping permissions;

[0061] The specific logical steps are as follows:

[0062] S201: System operators use a card issuer to open accounts and issue cards to cardholders through the account opening and card issuance center in the host computer management system, and store the generated card number data in the host computer management system. During the process of opening accounts and issuing cards to cardholders, system operators also save the cardholders' contact phone numbers in the host computer management system.

[0063] S202: The system operator binds the card number to the area number according to the key area that the cardholder wants to pass through in the host computer management system;

[0064] S203: System operators generate card permission data through the host computer management system. The front-end communication service filters and processes the card permission data and then sends it to the access control and execution device. The access control and execution device saves the card permission data.

[0065] S3: Report card swipe data;

[0066] The specific logical steps are as follows:

[0067] S301: The cardholder swipes the card issued to the card reader, and the card reader uploads the obtained card number to the access control and execution equipment.

[0068] S302: When the card number in S301 matches the access control and execution device ID and the current date and time with the card permission data, the access control and execution device issues a release command to allow the cardholder to pass;

[0069] S303: When the card number in S301 does not match the access control and enforcement device ID and the current date and time with the card permission data, the access control and enforcement device will issue an alarm and prevent the cardholder from passing through;

[0070] S304: After the cardholder swipes the card, the access control and execution device sends a photo capture command to the camera. After the camera captures the photo, it stores the photo data in the access control and execution device.

[0071] S305: Access control and execution device 2 uploads the current card swipe record data to the host computer management system via the front-end communication service;

[0072] S4: Perform statistical analysis;

[0073] The specific logical steps are as follows:

[0074] S401: Data Preprocessing: Spatiotemporal Standardization: Group the uploaded card swipe records by card number, parse the region associated with the access control and execution device ID, and calculate the time difference Δt between adjacent records and the region switching path;

[0075] Invalid data cleaning: Remove duplicate reporting records caused by malfunctions in access control and execution equipment;

[0076] S402: Composite analysis using multidimensional statistical indicators is shown in the table below:

[0077]

[0078]

[0079] S403: Perform risk scoring calculation to generate a single card abnormal risk value. The formula used is as follows:

[0080] R = α·I F +β·I T +γ·I σ +δ·I region

[0081] Among them I F I T I σ I region All values ​​are abnormal indicators for each dimension, with abnormal = 1 and normal = 0. α, β, γ, and δ are all weighting coefficients, satisfying α + β + γ + δ = 1. When R ≥ 0.7, it is marked as "high-risk copy card suspected", and when R ≥ 0.4, it is marked as "copy card suspected".

[0082] Based on experience in production projects, the weighting coefficients for α, β, γ, and δ are 0.3, 0.4, 0.2, and 0.1, respectively.

[0083] S404: Perform dynamic threshold optimization, with its historical baseline updated as follows: automatically calculate the average frequency F of each card daily. mean , standard deviation mean σ mean Threshold adaptation, the formula used is: When used for the first time, θ F θ σ The initial values ​​of the threshold parameters are provided based on data from other projects or the experience of system operators, or generated after a period of trial operation in this project.

[0084] S5: Push notifications for suspected copying of IC card transaction records;

[0085] The specific logical steps are as follows:

[0086] S501: Based on the statistical analysis results of S4 above, the host computer management system pushes and displays the suspected copied IC card swipe records on the host computer management system software interface. The displayed data includes on-site card swipe photos, swipe time, device name, location, and cardholder contact number.

[0087] S502: System operators make further manual judgments and processes based on the displayed data, including temporarily freezing card number permissions and calling the cardholder to confirm.

[0088] The above description is only a preferred embodiment of the present invention, but the scope of protection of the present invention is not limited thereto. Any equivalent substitutions or modifications made by those skilled in the art within the scope of the technology disclosed in the present invention, based on the technical solution and inventive concept of the present invention, should be covered within the scope of protection of the present invention.

Claims

1. A system for preventing the copying of IC cards by statistically analyzing passage record data, characterized in that: It includes a card reader, access control and execution equipment, a host computer management system, a card issuer, and a camera. The host computer management system includes an account opening and card issuance center and a front-end communication service. The card reader is connected to the access control and execution device, the access control and execution device is connected to the front-end communication service, the card issuer is connected to the account opening and card issuance center, and the camera is connected to the access control and execution device.

2. The system for preventing IC card duplication after statistical analysis of passage record data according to claim 1, characterized in that, The host computer management system is used to add or change the configuration data and access area data of the access control and execution devices. The configuration data includes device ID, device IP, device name and the area to which it belongs. The device ID is unique and does not repeat in the system. The access area data includes area number, area name, parent area number and physical distance to adjacent areas. The configuration data of the host computer management system also includes the maximum passage speed.

3. The system for preventing IC card duplication after statistical analysis of passage record data as described in claim 1, characterized in that, The account opening and card issuance center and card issuer work together to open accounts and issue cards to cardholders, and store the generated card number data in the host computer management system. The system also stores the cardholder's contact number. The host computer management system binds the card number to the area code based on the key area the cardholder wants to access. Simultaneously, the system generates card permission data, which includes the card number, the ID value of the access control and execution device, and the permitted date and time range. The front-end communication service filters and processes the card permission data before sending it to the access control and execution device, which stores the data. The host computer management system periodically performs time synchronization operations with all access control and execution devices and card-swiping devices in the system through the front-end communication service.

4. The system for preventing IC card duplication after statistical analysis of passage record data according to claim 1, characterized in that, The card reader is used to swipe cards and uploads the acquired card number to the access control and execution device. When the card number, access control and execution device ID, and current date and time match the card permission data, the access control and execution device issues a pass command, allowing the cardholder to pass. When the card number, access control and execution device ID, and current date and time do not match the card permission data, the access control and execution device issues an alarm, preventing the cardholder from passing. After the cardholder swipes the card, the access control and execution device sends a photo capture command to the camera. After the camera captures the photo, it stores the photo data in the access control and execution device. The access control and execution device uploads the current card swipe record data to the host computer management system via a front-end communication service. The card swipe record data includes the card number, access control and execution device ID value, card swipe time, status value, status description, and on-site card swipe capture photo. The status value includes normal card swipe access and abnormal card swipe access for unauthorized cards.

5. A method for preventing IC card duplication after statistical analysis of passage record data, characterized in that, Includes the following steps: S1: Configure equipment and access areas; S2: Authorize account opening, card issuance, and device card swiping permissions; S3: Report card swipe data; S4: Perform statistical analysis; S5: Push notifications for suspected copied IC card transaction records.

6. The method for preventing IC card duplication after statistical analysis of passage record data according to claim 5, characterized in that, The specific logical steps of S1 are as follows: S101: System operators add or change access control and execution device configuration data in the host computer management system; S102: System operators add or change access area data in the host computer management system.

7. The method for preventing IC card duplication after statistical analysis of passage record data according to claim 5, characterized in that, The specific logical steps of S2 are as follows: S201: System operators use a card issuer to open accounts and issue cards to cardholders through the account opening and card issuance center in the host computer management system, and store the generated card number data in the host computer management system. During the process of opening accounts and issuing cards to cardholders, system operators also save the cardholders' contact phone numbers in the host computer management system. S202: The system operator binds the card number to the area number according to the key area that the cardholder wants to pass through in the host computer management system; S203: The system operator generates card permission data through the host computer management system. The front-end communication service filters and processes the card permission data and then sends it to the access control and execution device. The access control and execution device saves the card permission data.

8. The method for preventing IC card duplication after statistical analysis of passage record data according to claim 5, characterized in that, The specific logical steps of S3 are as follows: S301: The cardholder swipes the card issued to the card reader, and the card reader uploads the obtained card number to the access control and execution equipment. S302: When the card number, access control and execution device ID, and current date and time mentioned in S301 match the card permission data, the access control and execution device issues a release command to allow the cardholder to pass. S303: When the card number, access control and execution device ID, and current date and time mentioned in S301 do not match the card permission data, the access control and execution device issues an alarm to prevent the cardholder from passing; S304: After the cardholder swipes the card, the access control and execution device sends a photo capture command to the camera. After the camera captures the photo, it stores the photo data in the access control and execution device. S305: Access control and execution device 2 uploads the current card swipe record data to the host computer management system via the front-end communication service.

9. The method for preventing IC card duplication after statistical analysis of passage record data according to claim 5, characterized in that, The specific logical steps of S4 are as follows: S401: Data Preprocessing: Spatiotemporal Standardization: Group the uploaded card swipe records by card number, parse the region associated with the access control and execution device ID, and calculate the time difference Δt between adjacent records and the region switching path; Invalid data cleaning: Remove duplicate reporting records caused by malfunctions in access control and execution equipment; S402: Composite analysis using multidimensional statistical indicators is shown in the table below: S403: Perform risk scoring calculation to generate a single card abnormal risk value. The formula used is as follows: R=α·I F +β·I T +γ·I σ +δ·I region Where I F I T I σ I region All values ​​are abnormal indicators for each dimension, with abnormal = 1 and normal = 0. α, β, γ, and δ are all weighting coefficients, satisfying α + β + γ + δ = 1. When R ≥ 0.7, it is marked as "high-risk copy card suspected", and when R ≥ 0.4, it is marked as "copy card suspected". Based on experience in production projects, the weighting coefficients for α, β, γ, and δ are 0.3, 0.4, 0.2, and 0.1, respectively. S404: Perform dynamic threshold optimization, with its historical baseline updated as follows: automatically calculate the average frequency F of each card daily. mean , standard deviation mean σ mean Threshold adaptation, the formula used is: When used for the first time, θ F θ σ The initial values ​​of the threshold parameters are provided based on data from other projects or the experience of system operators, or generated after a period of trial operation in this project.

10. The method for preventing IC card duplication after statistical analysis of passage record data according to claim 5, characterized in that, The specific logical steps of S5 are as follows: S501: Based on the statistical analysis results of S4 above, the host computer management system pushes and displays the suspected copied IC card swipe records on the host computer management system software interface. The displayed data includes on-site card swipe photos, swipe time, device name, location, and cardholder contact number. S502: System operators make further manual judgments and processes based on the displayed data, including temporarily freezing card number permissions and calling the cardholder to confirm.

Images