Exit-entry license management system and method based on intelligent terminal

Abstract

The invention discloses an exit-entry license management system and method based on an intelligent terminal, and the system comprises a management platform which comprises a system client, a management background, a core database and a rule engine, and is used for achieving the closed-loop management of online application approval and offline terminal operation; the certificate management terminal equipment is used for reading the certificate key information and performing matching verification on the certificate key information and the employee identity information in the core database; the early warning equipment is used for sending an early warning prompt to a certificate holder and a manager based on a rule engine detection result; and the block chain equipment comprises an intelligent contract and an oracle machine, the oracle machine is used for encrypting the dynamic certificate data and then transmitting the encrypted dynamic certificate data to the block chain to trigger the intelligent contract, and the intelligent contract automatically executes early warning judgment on the dynamic data based on a built-in coding early warning rule and generates an on-chain early warning event. According to the system, the certificate management efficiency is improved.

Description

Technical Field

[0001] This invention relates to the field of blockchain technology, and in particular to an entry and exit document management system and method based on a smart terminal. Background Technology

[0002] Currently, there are electronic and information-based management systems in the field of entry and exit document management, but these systems mainly focus on document digitization and identity authentication, and do not provide an integrated management solution for the entry and exit of fixed personnel.

[0003] The current management of entry and exit documents relies on paper documents and manual operations, which has problems such as low efficiency, easy error, difficulty in tracking, poor security and decentralized management. For example, manual registration is time-consuming, records are prone to errors, document status is difficult to monitor in real time, and there are loopholes in the approval process. There is an urgent need to solve these problems through systematic and automated means. Summary of the Invention

[0004] This invention provides an entry and exit permit management system and method based on a smart terminal to solve the technical problem of how to optimize the integrated management of entry and exit permits and achieve the effect of improving permit management efficiency.

[0005] To address the aforementioned technical problems, embodiments of the present invention provide an entry / exit document management system based on a smart terminal, comprising:

[0006] The management platform includes a system client, a management backend, a core database, and a rules engine. The system client is used by employees to submit applications for document submission / retrieval and to check the status of their personal documents. The management backend is used by administrators to perform application approval, document information entry / import, status monitoring, and viewing and processing of early warning information. The core database is used to store personnel information, document information, application records, approval records, access records, operation logs, and early warning records. The rules engine has built-in document management rules to automatically execute approval workflow logic, status change logic, and early warning triggering logic.

[0007] The document management terminal device is connected to the management platform and is used to read key information of the documents and match and verify it with the employee identity information in the core database, so as to realize the automatic collection and distribution of documents.

[0008] The early warning device is connected to the rule engine and is used to send early warning reminders to the holders and managers of the certificates based on the certificates that are about to expire, overdue, or have not been used for a long time detected by the rule engine.

[0009] A blockchain device includes a smart contract and an oracle. The oracle is used to encrypt and sign the dynamic data of the certificate in the management platform and transmit it to the blockchain device to trigger the smart contract. The smart contract automatically performs an early warning judgment on the encrypted dynamic data based on the built-in code-based early warning rules and generates an on-chain early warning event. The on-chain early warning event is pushed back to the management platform through the oracle.

[0010] As one preferred embodiment, the document management terminal device further includes: multiple lockable document storage slots, an identity verification module, a document information reading module, a control motherboard, and a network communication module;

[0011] The control motherboard is connected to the electric lock of the document storage compartment, the identity verification module, the document information reading module, and the network communication module, respectively. It is used to control the locking and unlocking of the document storage compartment after the identity verification and document information verification are passed, and to synchronize the document status and operation records to the management platform in real time through the network communication module.

[0012] As one preferred embodiment, the document information reading module includes an OCR recognition unit and an RFID / NFC reading unit, which are used to automatically extract the name, document number, validity period, and issuing authority information from the document and perform consistency verification with the document information pre-stored in the core database.

[0013] As one preferred option, the identity verification module supports one or more of the following verification methods: passport chip information reading, facial recognition, fingerprint recognition, and mobile phone verification code, and the verification result is matched with the employee identity information in the core database in real time.

[0014] As one preferred embodiment, the entry and exit permit management system based on smart terminals further includes: a security audit device, connected to the management platform and the document management terminal device, used to record key operation logs and provide log query and audit functions, the key operation logs including user login, application submission, approval actions, terminal access operations, early warning triggering and processing, and system configuration changes.

[0015] As one preferred embodiment, the warning triggering logic of the rule engine includes: triggering an expiration warning when the validity period of the document is less than or equal to the current date (≤ a first preset threshold); and triggering an overdue warning when the number of days the document has been borrowed is greater than or equal to a second preset threshold.

[0016] As one preferred embodiment, the on-chain warning event includes at least the warning type, associated document ID, trigger timestamp, and verification data hash value, which are stored in the blockchain device in an immutable form.

[0017] Another embodiment of the present invention provides a method for managing entry and exit documents based on a smart terminal, comprising:

[0018] The system client or certificate management terminal device submits a certificate submission application, and after identity verification, the target certificate is placed into the storage slot.

[0019] The document management terminal device reads the document information of the target document and matches and verifies it with the core database. If the matching and verification pass, the storage slot is locked, the document status of the target document is updated to "in the database" and synchronized to the management platform.

[0020] As one preferred embodiment, the entry and exit document management method based on smart terminals further includes:

[0021] The system client submits a retrieval application for the target document, which includes the reason for departure and the expected return time.

[0022] Once the management backend approves the retrieval application, the identity verification of the employee corresponding to the target document is completed on the terminal device.

[0023] Once the validity of the approval status is verified through the document management terminal device, the corresponding storage slot is opened, the status is updated to "borrowed" and synchronized to the management platform.

[0024] As one preferred embodiment, the entry and exit document management method based on smart terminals further includes:

[0025] Based on the rule engine, the document status is scanned in real time. When the near-expiration or overdue status is detected, the encrypted dynamic data is transmitted to the blockchain device through the oracle.

[0026] The smart contract, based on the built-in code rules, automatically judges the dynamic data and generates on-chain early warning events.

[0027] The oracle pushes the on-chain warning event back to the management platform to control the warning device to send reminders to relevant personnel via system messages, SMS or email.

[0028] Compared with the prior art, the beneficial effects of the embodiments of the present invention are at least one of the following:

[0029] 1) This invention achieves closed-loop management of online application and approval and offline self-service storage and retrieval through the collaboration of the management platform and document management terminal equipment, replacing manual operation, improving management efficiency, ensuring the accuracy of document storage and retrieval and status synchronization, monitoring document status in real time, and meeting the requirements for entry and exit document management.

[0030] 2) At the same time, this invention introduces blockchain smart contracts and oracles to codify the early warning rules and realize automatic execution on the chain. The oracles ensure the trusted interaction of off-chain data, and the on-chain evidence storage ensures that the early warning events cannot be tampered with. This solves the problems of insufficient transparency of early warning rules and difficulty in auditing and tracing in government administration, and improves management compliance and security. Attached Figure Description

[0031] Figure 1 This is a schematic diagram of an entry and exit document management system based on a smart terminal in one embodiment of the present invention;

[0032] Figure 2 This is a flowchart of document submission data processing in one embodiment of the present invention;

[0033] Figure 3 This is a flowchart of document retrieval / issuance in one embodiment of the present invention;

[0034] Figure 4 This is a flowchart of the document return process in one embodiment of the present invention;

[0035] Figure 5 This is a flowchart of the early warning processing in one embodiment of the present invention. Detailed Implementation

[0036] The technical solutions of the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of the present invention, and not all embodiments. The purpose of providing these embodiments is to make the disclosure of the present invention more thorough and comprehensive. Based on the embodiments of the present invention, all other embodiments obtained by those of ordinary skill in the art without creative effort are within the scope of protection of the present invention.

[0037] In the description of this application, the terms "first," "second," "third," etc., are used for descriptive purposes only and should not be construed as indicating or implying relative importance or implicitly specifying the number of indicated technical features. Therefore, a feature defined with "first," "second," "third," etc., may explicitly or implicitly include one or more of that feature. In the description of this application, unless otherwise stated, "a plurality of" means two or more.

[0038] In the description of this application, it should be noted that, unless otherwise expressly specified and limited, the terms "installation," "connection," and "linking" should be interpreted broadly. For example, they can refer to fixed connections, detachable connections, or integral connections; they can refer to mechanical connections or electrical connections; they can refer to direct connections or indirect connections through an intermediate medium; and they can refer to the internal communication between two components. The terms "vertical," "horizontal," "left," "right," "upper," "lower," and similar expressions used herein are for illustrative purposes only and do not indicate or imply that the device or component referred to must have a specific orientation, or be constructed and operated in a specific orientation, and therefore should not be construed as limiting the invention. The term "and / or" as used herein includes any and all combinations of one or more of the associated listed items. Those skilled in the art can understand the specific meaning of the above terms in this application based on the specific circumstances.

[0039] In the description of this application, it should be noted that, unless otherwise defined, all technical and scientific terms used in this invention have the same meaning as commonly understood by one of ordinary skill in the art. The terminology used in this specification is for the purpose of describing specific embodiments only and is not intended to limit the invention. Those skilled in the art can understand the specific meaning of the above terms in this application based on the specific circumstances.

[0040] One embodiment of the present invention provides an entry and exit document management system based on a smart terminal. For details, please refer to [link / reference]. Figure 1 , Figure 1 The diagram shown illustrates an entry / exit document management system based on a smart terminal, according to one embodiment of the present invention, which includes:

[0041] The management platform 11 includes a system client, a management backend, a core database, and a rules engine. The system client is used by employees to submit applications for document submission / retrieval and to query the status of their personal documents. The management backend is used by administrators to perform application approval, document information entry / import, status monitoring, and viewing and processing of early warning information. The core database is used to store personnel information, document information, application records, approval records, access records, operation logs, and early warning records. The rules engine has built-in document management rules for automatically executing approval workflow logic, status change logic, and early warning triggering logic.

[0042] Specifically, the management platform is the core hub for the integrated management of private travel documents for employees of enterprises and institutions. By integrating the system client, management backend, core database and rule engine, it builds an online and offline collaborative management system. The specific functions are as follows.

[0043] System Client: Serving as the entry point for employee operations, it supports employees to submit applications for document submission (including basic document information) and document retrieval (requiring information such as the reason for departure and expected return time) online. Employees can also check the current status of their personal documents (in storage / loaned / under review) and application progress (pending approval / approved / rejected) in real time, enabling convenient interaction between employees and management processes.

[0044] Management backend: For management personnel (such as staff in the organization department and human resources department), it provides full-process management functions, specifically including:

[0045] Application Approval: Review employee withdrawal applications (approve / reject) and record the approval comments;

[0046] Document Information Management: Supports manual entry or batch import of document information (type, number, validity period, issuing authority, etc.) to maintain basic document data;

[0047] Status monitoring: Real-time monitoring of the status of all documents in stock, borrowed, and overdue through a global view, which can be filtered and viewed by department, personnel, and other dimensions;

[0048] Warning processing: Receive and process warning information (such as near expiration, overdue) triggered by the rule engine, and track the processing progress;

[0049] System configuration: Supports hierarchical user permission management (employee level / administrator level / super administrator level), customizable approval processes, and setting of early warning rule parameters (such as near-expiration threshold, overdue threshold), etc.

[0050] Core Database: As the data storage center, it centrally stores personnel information (name, unit, position, identity identifier, etc.), certificate information (associated personnel, certificate type, number, validity period, etc.), full-process records (application records, approval records, access operation records), and system logs (operator, time, content), providing data support for the management platform and terminal devices and ensuring information consistency.

[0051] Rules engine: Built-in regulations on entry and exit management and internal management rules of the organization to achieve automated logic execution.

[0052] Approval workflow logic: Automatically match approval level and approver based on applicant's job title, organization type, etc.;

[0053] Status change logic: After operations such as submitting, retrieving, and returning documents, the document status is automatically updated and synchronized to the database;

[0054] Warning triggering logic: Scan document data in real time, and when preset conditions are met (such as validity period less than 90 days, loan period more than 30 days), an early warning or overdue warning will be automatically triggered, driving the subsequent notification process.

[0055] The document management terminal device 12 is communicatively connected to the management platform and is used to read key information of the documents and match and verify it with the employee identity information in the core database, so as to realize the automatic collection and distribution of documents.

[0056] As a key node connecting the online management platform and offline physical certificates, this terminal device achieves automatic collection, distribution, information verification, and status synchronization of certificates through real-time communication with the management platform, replacing the traditional manual collection and distribution process and ensuring consistency among "people, certificates, and approvals".

[0057] In this embodiment, the document management terminal device further includes: multiple lockable document storage slots, an identity verification module, a document information reading module, a control motherboard, and a network communication module;

[0058] The control motherboard is connected to the electric lock of the document storage compartment, the identity verification module, the document information reading module, and the network communication module, respectively. It is used to control the locking and unlocking of the document storage compartment after the identity verification and document information verification are passed, and to synchronize the document status and operation records to the management platform in real time through the network communication module.

[0059] In this embodiment, the document information reading module includes an OCR recognition unit and an RFID / NFC reading unit, which are used to automatically extract the name, document number, validity period, and issuing authority information from the document and perform consistency verification with the document information pre-stored in the core database.

[0060] In this embodiment, the identity verification module supports one or more of the following verification methods: passport chip information reading, face recognition, fingerprint recognition, and mobile phone verification code, and the verification result is matched with the employee identity information in the core database in real time.

[0061] Specifically, the hardware composition and function of the document management terminal device are as follows.

[0062] Multiple lockable document storage compartments: Adopting a multi-size design (compatible with different document sizes such as passports and Hong Kong and Macau travel permits), each compartment is equipped with an independent electronic lock, controlled by a mainboard. Compartment status (idle / occupied) is synchronized to the management platform in real time, allowing administrators to view or remotely operate the system.

[0063] The authentication module integrates multimodal authentication methods, including:

[0064] Passport chip information reading: Extracting identity data from the passport's built-in chip using a dedicated reader;

[0065] Biometric recognition: Equipped with a face recognition camera (supporting liveness detection) and a fingerprint scanner to verify employee biometric information;

[0066] Mobile verification code: A dynamic verification code is sent through the system client to assist in identity verification.

[0067] During verification, the module compares the collected information with the employee identity information (name, ID number, job title, etc.) pre-stored in the core database in real time to ensure that "the operation is performed by the actual person".

[0068] The document information reading module combines an OCR recognition unit and an RFID / NFC reading unit. This combination enables rapid collection and dual verification of document information, avoiding errors from manual data entry. The information is then compared with pre-stored information in the core database to confirm a "document-to-document match." Specifically:

[0069] OCR recognition: It automatically extracts visual information such as name, document number, validity period, and issuing authority by taking pictures of the front and back of the document with a high-definition camera;

[0070] RFID / NFC reading: Reads encrypted information from the built-in radio frequency chip in documents (such as NFC data in electronic chip passports).

[0071] The control motherboard serves as the "central hub" of the terminal device, connecting to the electric lock, authentication module, information reading module, and network communication module (supporting wired Ethernet or wireless 4G / 5G / Wi-Fi), and performs the following operations:

[0072] After both identity verification and document information verification are successful, the electronic lock of the corresponding storage compartment is triggered to open / close.

[0073] Access operation records (time, personnel, ID card, grid number) are synchronized to the management platform in real time via the network to update the ID card status (in stock / borrowed);

[0074] It receives remote instructions from the management platform (such as emergency pickup authorization) and drives the hardware to perform corresponding actions.

[0075] The touchscreen interface is equipped with a high-definition touchscreen, providing a visual operation entry point: employees can initiate submission / return applications, enter verification codes, and check document status on their own; managers can log in with their permissions to perform operations such as equipment inspection, document inventory, and anomaly handling, simplifying the human-computer interaction process.

[0076] The following are the key workflows implemented through the document management terminal device.

[0077] Document Submission: Employees select "Submit" on the touchscreen, complete identity verification, and place their documents in the device. The terminal automatically reads the information and verifies it with the database. Once verified, it assigns a slot and locks it, synchronizing the "in stock" status to the platform.

[0078] Document collection: Employees verify their identity at the terminal with the approval notification. After the terminal verifies that the approval status is correct, it automatically opens the corresponding slot and the document is retrieved, and the status is synchronized as "borrowed".

[0079] Error Handling: If authentication fails or document information does not match, the terminal immediately locks the slot, displays an error message, and synchronizes it to the management platform, awaiting management personnel's handling.

[0080] The early warning device 13 is connected to the rule engine and is used to send early warning reminders to the certificate holders and managers based on the certificate that is about to expire, overdue and unused certificates detected by the rule engine.

[0081] The early warning device 13 is a key module for proactive prevention and control of document management. It works in conjunction with the rule engine to solve the problem of lagging traditional manual monitoring through an automated early warning mechanism.

[0082] In this embodiment, the warning triggering logic of the rule engine includes: triggering an expiration warning when the validity period of the document is less than or equal to the current date by a first preset threshold; and triggering an overdue warning when the number of days the document has been borrowed is greater than or equal to a second preset threshold.

[0083] Specifically, the early warning device 13 uses the dynamic monitoring results of the rule engine as input to proactively push reminders for three types of risk scenarios:

[0084] Expiring document warning: The rule engine calculates the difference between the document's expiry date and the current date in real time. When the difference is less than or equal to the first preset threshold (configurable, default 90 days), an expiry warning is triggered to remind the holder to renew the document in time.

[0085] Overdue document warning: For documents that have been borrowed, the rules engine continuously counts the number of days the document has been borrowed. When the number of days exceeds the second preset threshold (configurable, default 30 days), an overdue warning is triggered to urge the holder to return the document.

[0086] Long-term unused document warning: The rule engine identifies documents that have been in "in storage" for a long time (such as those that have not been applied for to be borrowed for more than 1 year) and triggers an idle warning to help administrators optimize storage resources.

[0087] Early warning equipment pushes information simultaneously through multiple channels to ensure timely response from relevant parties:

[0088] Notification recipients: Both certificate holders (to remind them to take action) and management personnel (such as heads of human resources and foreign affairs departments of their organizations, to facilitate supervision and follow-up).

[0089] Notification formats include system messages from the management platform (client pop-ups), SMS messages (based on contact information stored in the core database), and emails (linked to employee work email addresses). A warning list is also prominently displayed on the touchscreen interface of the document management terminal, forming a comprehensive "online + offline" reminder system.

[0090] As the "decision center," the rules engine continuously scans the document status data (validity period, borrowing time, current status) in the core database. Once the warning conditions are met, it immediately sends a trigger signal and related information (such as document ID, holder, and warning type) to the warning device.

[0091] The early warning device synchronizes the early warning event to the management platform, generates an early warning ledger in the management backend, and managers can view the details, mark the processing status (such as "already reminded" or "resolved"), and trigger subsequent processes (such as a second reminder for overdue payments).

[0092] When an alert is triggered, the rules engine encrypts relevant data (such as overdue days and document information) on the blockchain through an oracle. The smart contract generates an on-chain alert event, which is then pushed back to the management platform through the oracle to drive the alert device to execute the notification, ensuring the credibility and immutability of the alert process.

[0093] The blockchain device 14 includes a smart contract and an oracle. The oracle is used to encrypt and sign the dynamic data of the certificate in the management platform and transmit it to the blockchain device to trigger the smart contract. The smart contract automatically performs early warning judgment on the encrypted dynamic data based on the built-in code-based early warning rules and generates an on-chain early warning event. The on-chain early warning event is pushed back to the management platform through the oracle.

[0094] Blockchain device 14 is the core module for realizing transparent document management rules, trustworthy data, and traceable audits. Through the collaboration of smart contracts and oracles, it constructs a mechanism of "on-chain rule solidification + off-chain data trustworthy interaction".

[0095] In this embodiment, the on-chain warning event includes at least the warning type, associated document ID, trigger timestamp, and verification data hash value, which are stored in the blockchain device in an immutable form.

[0096] Smart contracts, deployed on blockchain networks (such as consortium blockchains), are executable programs that codify document management early warning rules (such as standards for determining near-expiration and overdue documents), and possess the following characteristics:

[0097] Rule coding: Internal warning rules (such as "document validity period ≤ 90 days triggers near-expiration warning" and "loan days > 30 days triggers overdue warning") are converted into machine-executable code to ensure that the rule logic is open, transparent and tamper-proof, and to eliminate the possibility of human adjustment or intervention.

[0098] Automatic judgment: Based on off-chain dynamic data (document validity period, lending time, current status, etc.) transmitted by the oracle, the smart contract automatically matches the coded rules and determines in real time whether the warning conditions are met. For example, when the received data is "document A lending days = 31 days" and the rule is set to ">30 days trigger overdue", the smart contract automatically determines that an overdue warning is issued.

[0099] Generate on-chain alert events: Once an alert is triggered, an on-chain alert event is immediately generated, including the alert type (near expiration / overdue), associated document ID (unique identifier), trigger timestamp (accurate to the second), and verification data hash value (encrypted digest of the original off-chain data). The event is permanently recorded in the form of a blockchain transaction to ensure that the event is tamper-proof and traceable.

[0100] Oracles act as a "trusted bridge" between off-chain management platforms and on-chain smart contracts, undertaking the function of two-way data transmission:

[0101] Off-chain data upload to the blockchain: Real-time dynamic data of certificates (such as status changes, expiration dates, and loan records) is obtained from the management platform. After the data is encrypted (e.g., using asymmetric encryption) and digitally signed (to ensure the data source is trustworthy), it is transmitted to the blockchain network, triggering the smart contract to execute its judgment logic. For example, when the expiration date of certificate B is updated to "2024-12-31", the oracle encrypts and signs the data and uploads it to the blockchain for the smart contract to calculate whether to trigger an expiration warning.

[0102] On-chain event callback: Listen for on-chain alert events generated by smart contracts, decrypt them, and push them back to the management platform to drive subsequent processes (such as triggering alert devices to send reminders or updating alert status in the management backend), achieving seamless integration between on-chain judgment results and off-chain business processing.

[0103] On-chain alert events are stored on the blockchain in an immutable form and contain four key types of information:

[0104] Warning type: Clarify whether it is an impending warning, an overdue warning, or a warning for long-term inactivity to determine the type of risk;

[0105] Associated Document ID: A unique identifier for the document linked to the core database, enabling precise matching of "on-chain events - off-chain documents";

[0106] Trigger timestamp: Records the precise time when the alert is triggered, providing a time baseline for auditing;

[0107] Verification data hash value: The hash digest of the original off-chain data (such as the validity period of a certificate, the number of days it has been borrowed), used to verify the consistency between on-chain events and off-chain data, and to prevent data from being tampered with.

[0108] Blockchain device 14 communicates in real time with the rule engine and core database of the management platform via oracles:

[0109] When the rules engine triggers an alert condition, it simultaneously pushes data to the oracle.

[0110] The oracle uploads data to the blockchain, triggering a smart contract that generates an on-chain event and then sends a callback to the management platform, which in turn drives the early warning device to send an alert.

[0111] The security audit module can directly retrieve early warning event records on the blockchain and cross-verify them with off-chain operation logs to form a complete audit chain.

[0112] In summary, blockchain devices, through a three-pronged design of "smart contract-based rule fixing + oracle-based trusted transmission + on-chain evidence storage," ensure the transparency of document management and early warning logic, the authenticity of data, and the immutability of auditing.

[0113] Preferably, in one embodiment of the present invention, the entry and exit permit management system based on a smart terminal further includes: a security audit device, connected to the management platform and the document management terminal device, for recording key operation logs and providing log query and audit functions, wherein the key operation logs include user login, application submission, approval actions, terminal access operations, early warning triggering and processing, and system configuration changes.

[0114] Security audit equipment takes "full-process digital traceability" as its core, recording all key operations in the system operation and document management process, forming an unalterable audit chain, providing a basis for management compliance checks, problem tracing and responsibility determination, and solving the problems of scattered, easily lost and difficult-to-verify operation records in traditional manual management.

[0115] The critical operations captured by the security audit equipment cover the entire system lifecycle, specifically including:

[0116] User login behavior: Record the time, account, IP address, and login status (success / failure) of employees and managers logging into the system client, management backend, or terminal device to prevent unauthorized access.

[0117] Application and approval process: Record in detail the application content (time, reason, expected return time, etc.) of the documents submitted by employees for submission / retrieval, the approver and approval opinion (agree / rejection), the approval process flow and time nodes, to ensure that the approval process is transparent and traceable.

[0118] Terminal access operations: Synchronize the operation records of the document management terminal devices, including the employee's identity verification method at the terminal, the time of document storage / retrieval, the corresponding storage slot number, and the operation result (success / failure reason), to achieve a one-to-one correspondence between "physical operation and digital record".

[0119] Warning Triggering and Handling: Record the type, time, and associated document information of the warnings triggered by the rule engine, as well as the management personnel's actions (such as viewing, reminders, and marking for resolution) and the results of the handling, forming a closed-loop record of the entire warning process.

[0120] System configuration changes: Track system settings adjustments in the management backend, such as changes to user permissions, modifications to approval processes, adjustments to warning thresholds, and configuration of terminal device parameters, to ensure the compliance and traceability of system configurations.

[0121] Security audit equipment not only collects logs but also provides professional log management functions, including:

[0122] Log storage: Encrypted storage is used to ensure that log data is not tampered with or deleted, and the storage period meets the unit's management regulations and relevant legal requirements.

[0123] Query and Filter: Supports querying logs by multiple dimensions such as time, operator, operation type, and associated documents, allowing you to quickly locate specific operation records.

[0124] Audit report generation: Automatically generates compliance audit reports, and statistically analyzes data such as the frequency of key operations, the percentage of abnormal operations (such as login failures and approval rejections), and the timeliness of early warning processing, to assist managers in risk assessment and management optimization.

[0125] The core database of the security audit equipment and management platform is synchronized in real time to ensure that log records and business operations are generated synchronously. At the same time, the operation logs recorded can be cross-verified with the on-chain evidence data of the blockchain equipment. When an audit is required, by comparing the on-chain warning events with the operation logs of the security audit equipment, a dual evidence chain of "operation behavior - on-chain evidence" is formed, which further strengthens the credibility and authority of the audit.

[0126] Another embodiment of the present invention provides a method for managing entry and exit documents based on a smart terminal, which is applied to the entry and exit document management system based on a smart terminal as described above. See [link to relevant documentation]. Figure 2 , Figure 2 This is a flowchart of document submission data processing in one embodiment of the present invention, which includes:

[0127] The system client or certificate management terminal device submits a certificate submission application, and after identity verification, the target certificate is placed into the storage slot.

[0128] The document management terminal device reads the document information of the target document and matches and verifies it with the core database. If the matching and verification pass, the storage slot is locked, the document status of the target document is updated to "in the database" and synchronized to the management platform.

[0129] Preferably, in one embodiment of the present invention, the entry and exit document management method based on a smart terminal further includes:

[0130] The system client submits a retrieval application for the target document, which includes the reason for departure and the expected return time.

[0131] Once the management backend approves the retrieval application, the identity verification of the employee corresponding to the target document is completed on the terminal device.

[0132] Once the validity of the approval status is verified through the document management terminal device, the corresponding storage slot is opened, the status is updated to "borrowed" and synchronized to the management platform.

[0133] For details, see Figure 3 , Figure 3 This is a flowchart of document retrieval / issuance in one embodiment of the present invention.

[0134] Preferably, in one embodiment of the present invention, the entry and exit document management method based on a smart terminal further includes:

[0135] After employees complete identity verification on the terminal device, they place their identification documents inside. The terminal reads the information, confirms the information, closes the slot, updates the status to "in stock," and synchronizes it to the management platform.

[0136] For details, see Figure 4 , Figure 4 This is a flowchart of the document return process in one embodiment of the present invention.

[0137] Preferably, in one embodiment of the present invention, the entry and exit document management method based on a smart terminal further includes:

[0138] Based on the rule engine, the document status is scanned in real time. When the near-expiration or overdue status is detected, the encrypted dynamic data is transmitted to the blockchain device through the oracle.

[0139] The smart contract, based on the built-in code rules, automatically judges the dynamic data and generates on-chain early warning events.

[0140] The oracle pushes the on-chain warning event back to the management platform to control the warning device to send reminders to relevant personnel via system messages, SMS or email.

[0141] For details, see Figure 5 , Figure 5 This is a flowchart of the early warning processing in one embodiment of the present invention.

[0142] Compared with the prior art, the beneficial effects of the embodiments of the present invention are at least one of the following:

[0143] 1) This invention achieves closed-loop management of online application and approval and offline self-service storage and retrieval through the collaboration of the management platform and document management terminal equipment, replacing manual operation, improving management efficiency, ensuring the accuracy of document storage and retrieval and status synchronization, monitoring document status in real time, and meeting the requirements for entry and exit document management.

[0144] 2) At the same time, this invention introduces blockchain smart contracts and oracles to codify the early warning rules and realize automatic execution on the chain. The oracles ensure the trusted interaction of off-chain data, and the on-chain evidence storage ensures that the early warning events cannot be tampered with. This solves the problems of insufficient transparency of early warning rules and difficulty in auditing and tracing in government administration, and improves management compliance and security.

[0145] The embodiments described above are merely illustrative of several implementations of the present invention, and while the descriptions are specific and detailed, they should not be construed as limiting the scope of the present invention. It should be noted that those skilled in the art can make various modifications and improvements without departing from the concept of the present invention, and these modifications and improvements all fall within the scope of protection of the present invention. Therefore, the scope of protection of this patent should be determined by the appended claims.

Claims

1. An entry / exit document management system based on a smart terminal, characterized in that, include: The management platform includes a system client, a management backend, a core database, and a rules engine; The system client is used by employees to submit applications for document submission / retrieval and to check the status of their personal documents; the management backend is used by administrators to perform application approval, document information entry / import, status monitoring, and viewing and processing of early warning information; the core database is used to store personnel information, document information, application records, approval records, access records, operation logs, and early warning records; the rule engine has built-in document management rules to automatically execute approval workflow logic, status change logic, and early warning triggering logic; The document management terminal device is connected to the management platform and is used to read key information of the documents and match and verify it with the employee identity information in the core database, so as to realize the automatic collection and distribution of documents. The early warning device is connected to the rule engine and is used to send early warning reminders to the holders and managers of the certificates based on the certificates that are about to expire, overdue, or have not been used for a long time detected by the rule engine. A blockchain device includes a smart contract and an oracle. The oracle is used to encrypt and sign the dynamic data of the certificate in the management platform and transmit it to the blockchain device to trigger the smart contract. The smart contract automatically performs an early warning judgment on the encrypted dynamic data based on the built-in code-based early warning rules and generates an on-chain early warning event. The on-chain early warning event is pushed back to the management platform through the oracle.

2. The entry and exit document management system based on intelligent terminals as described in claim 1, characterized in that, The document management terminal device also includes: multiple lockable document storage slots, an identity verification module, a document information reading module, a control motherboard, and a network communication module; The control motherboard is connected to the electric lock of the document storage compartment, the identity verification module, the document information reading module, and the network communication module, respectively. It is used to control the locking and unlocking of the document storage compartment after the identity verification and document information verification are passed, and to synchronize the document status and operation records to the management platform in real time through the network communication module.

3. The entry and exit document management system based on intelligent terminals as described in claim 2, characterized in that, The document information reading module includes an OCR recognition unit and an RFID / NFC reading unit, which are used to automatically extract the name, document number, validity period, and issuing authority information from the document and perform consistency verification with the document information pre-stored in the core database.

4. The entry and exit document management system based on intelligent terminals as described in claim 2, characterized in that, The identity verification module supports one or more of the following verification methods: passport chip information reading, facial recognition, fingerprint recognition, and mobile phone verification code, and the verification results are matched with the employee identity information in the core database in real time.

5. The entry and exit document management system based on a smart terminal as described in claim 1, characterized in that, Also includes: The security audit device is connected to the management platform and the certificate management terminal device, and is used to record key operation logs and provide log query and audit functions. The key operation logs include user login, application submission, approval actions, terminal access operations, early warning triggering and processing, and system configuration changes.

6. The entry and exit document management system based on a smart terminal as described in claim 1, characterized in that, The rule engine's warning triggering logic includes: triggering an expiration warning when the document's validity period is less than or equal to a first preset threshold; and triggering an overdue warning when the number of days the document has been borrowed is greater than a second preset threshold.

7. The entry and exit document management system based on a smart terminal as described in claim 1, characterized in that, The on-chain warning event includes at least the warning type, associated document ID, trigger timestamp, and verification data hash value, and is stored in the blockchain device in an immutable form.

8. A method for managing entry and exit documents based on a smart terminal, characterized in that, The entry and exit document management system based on a smart terminal as described in claim 1 includes: The system client or certificate management terminal device submits a certificate submission application, and after identity verification, the target certificate is placed into the storage slot. The document management terminal device reads the document information of the target document and matches and verifies it with the core database. If the matching and verification pass, the storage slot is locked, the document status of the target document is updated to "in the database" and synchronized to the management platform.

9. The entry and exit document management method based on a smart terminal as described in claim 8, characterized in that, Also includes: The system client submits a retrieval application for the target document, which includes the reason for departure and the expected return time. Once the management backend approves the retrieval application, the identity verification of the employee corresponding to the target document is completed on the terminal device. Once the validity of the approval status is verified through the document management terminal device, the corresponding storage slot is opened, the status is updated to "borrowed" and synchronized to the management platform.

10. The method for managing entry and exit documents based on a smart terminal as described in claim 9, characterized in that, Also includes: Based on the rule engine, the document status is scanned in real time. When the near-expiration or overdue status is detected, the encrypted dynamic data is transmitted to the blockchain device through the oracle. The smart contract, based on the built-in code rules, automatically judges the dynamic data and generates on-chain early warning events. The oracle pushes the on-chain warning event back to the management platform to control the warning device to send reminders to relevant personnel via system messages, SMS or email.

Images