Access control management system and access control management method thereof

Abstract

This invention provides an access control management system and its method, which uses a mobile phone and an access control management host for multi-layered authentication to ensure the security of access control. The system includes a mobile phone and an access control management host. The mobile phone has a built-in biometric module that identifies the user's biometric characteristics and transmits the encrypted user identification code and user identity information to the access control management host via the access control management module. After parsing, the access control management host first compares the information with the access control approval list. If approved, it then verifies the user identification code and user identity information with the telecommunications platform. Finally, after confirming authorization, it sends an unlocking command to the access control device.

Claims

1. An access control management system, comprising: a mobile phone belonging to a user, the mobile phone comprising: a biometric module for identifying a pending biometric code generated from a pending biometric feature, and verifying whether the pending biometric code matches a user biometric code of the user, thereby obtaining a biometric verification result; a SIM card for storing a user identification code of the user; and an access control management module having an access control management application and electrically connected to the SIM card and the biometric module, the access control management module obtaining the user identification code from the SIM card, obtaining user identity information entered by the user during registration in the access control management application from an internal storage unit of the mobile phone, and receiving the biometric verification result from the biometric module; and an access control management host, comprising: A communication module is connected to the access control management module of the mobile phone, and also to a telecommunications platform and an access control device. The communication module receives the user identification code and user identity information from the access control management module, wherein the telecommunications platform holds the user identification code and user identity information. A storage module stores an access control approval list from the access control device. A computing module is electrically connected to the communication module and the storage module. When the biometric verification result is "successful," the access control management module encrypts the user identification code and user identity information, and then transmits it to the computing module through the communication module. The computing module then decrypts the encrypted user identification code and user identity information, and receives the access control approval list from the storage module to verify whether the user identification code and user identity information are listed on the access control approval list, thus obtaining an approval verification result. When the verification result is "successful", the computing module encrypts the user identification code and the user identity information and transmits them to the telecommunications platform through the communication module. The telecommunications platform decrypts the encrypted user identification code and the user identity information to verify the user identification code and the user identity information, obtains a telecommunications verification result, and sends it back to the computing module through the communication module. When the telecommunications verification result is "successful", the computing module sends an unlocking command to the access control device through the communication module.

2. The access control management system as described in claim 1, wherein the biometric module includes at least one of a fingerprint recognition module, a face recognition module, and an iris recognition module.

3. As described in Request 1, the access control management system of the mobile phone requests the computing module of the access control management host to provide the system public key and system private key, so that the access control management module can use the system private key to encrypt the user identification code and the user identity information before transmitting them to the computing module, and then the computing module can use the system public key to decrypt the encrypted user identification code and the user identity information.

4. The access control management system as described in claim 1, wherein the computing module of the access control management host requests a telecommunications public key and a telecommunications private key from the telecommunications platform through the communication module, so that the computing module encrypts the user identification code and the user identity information with the telecommunications private key before transmitting them to the telecommunications platform, and then the telecommunications platform uses the telecommunications public key to decrypt the encrypted user identification code and the user identity information.

5. The access control management system as described in claim 1, wherein the access control management module generates a timestamp before transmitting the user identification code and the user identity information, and encrypts the timestamp together with the user identification code and the user identity information before transmitting it to the access control management host.

6. The access control management system as described in claim 1, wherein the storage module of the access control management host also stores access control permission settings for the access control device. After the telecommunications verification result is "successful", the computing module receives and, based on the access control permission settings, limits the access control usage scope and access control time period of the user identification code and the user identity information, confirms whether the user requests to enter or exit the access control device within the access control usage scope and access control time period, and only when the conditions are met does the computing module issue the unlocking command to the access control device.

7. An access control management method, applicable to the access control management system described in claim 1, the access control management method comprising: the biometric identification module identifying the pending biometric feature and verifying whether the pending biometric identification code matches the user's biometric identification code, thereby obtaining the biometric verification result; when the biometric verification result is "successful", the access control management module encrypts the user identification code and the user's identity information and transmits them to the computing module through the communication module, then the computing module decrypts the encrypted user identification code and the user's identity information, and receives the access control approval list from the storage module to verify whether the user identification code and the user's identity information are listed on the access control approval list, thereby obtaining the approval verification result; When the verification result is "successful", the computing module encrypts the user identification code and the user identity information and transmits them to the telecommunications platform through the communication module. The telecommunications platform decrypts the encrypted user identification code and the user identity information to verify the user identification code and the user identity information, obtains the telecommunications verification result, and sends it back to the computing module. When the telecommunications verification result is "successful", the computing module sends the unlocking command to the access control device through the communication module.

8. The access control management method as described in claim 7, wherein the access control management module of the mobile phone requests the computing module of the access control management host to provide a system public key and a system private key, so that the access control management module uses the system private key to encrypt the user identification code and the user identity information before transmitting them to the computing module, and then the computing module uses the system public key to decrypt the encrypted user identification code and the user identity information.

9. The access control management method as described in claim 7, wherein the computing module of the access control management host requests a telecommunications public key and a telecommunications private key from the telecommunications platform through the communication module, so that the computing module encrypts the user identification code and the user identity information with the telecommunications private key and then transmits them to the telecommunications platform, and then the telecommunications platform uses the telecommunications public key to decrypt the encrypted user identification code and the user identity information.

10. The access control management method as described in claim 7, wherein before transmitting the user identification code and the user identity information, the access control management module further generates a timestamp, and encrypts the timestamp together with the user identification code and the user identity information before transmitting it to the access control management host.

Images