A method for implementing fingerprint anti-theft access control

Abstract

The present invention discloses a method for implementing fingerprint anti-theft access control, which relates to the field of access control security technology, including a fingerprint algorithm chip, a main control chip, and an internal door system and an external door system connected to the main control chip, wherein the fingerprint algorithm chip is connected to the main control chip and provided with an identity authentication mechanism, wherein the main control chip transmits an authorization serial number to an unauthorized fingerprint algorithm chip through a mass production tool, and performs arithmetic operations with the unique authorization serial number and a random number, and the obtained root key is used for identity binding authentication between the main control chip and the fingerprint algorithm chip, and a secure communication mechanism is provided between the main control chip and the fingerprint algorithm module, and the instructions between the two use a session key and are encrypted and transmitted through SM4, and the session key after each power-on is generated by different random number operations, and the session key is stored in a RAM, and when the fingerprint algorithm chip loses power, the session key is lost therewith. The method of the present invention enhances the reliability and anti-attack capability of the encrypted communication of the access control system, and improves the communication security.

Description

Technical Field

[0001] The present invention relates to the field of identity recognition circuits, and in particular to a method for implementing fingerprint anti-theft access control, which is applicable to the fields of fingerprint recognition, access control, etc. Background Art

[0002] With the progress of society, people's awareness of security and anti-theft is gradually increasing, providing a good development platform for access control systems. Among them, access control systems are widely used in homes, schools, companies and other places. At the same time, people also put forward higher requirements for the humanization and security of the system. Therefore, fingerprint recognition technology is applied to access control systems. Through such a design method, the security of the access control system is further improved, and people's requirements for the humanization of the system are met. Summary of the invention

[0003] In order to solve the defects of the above-mentioned technology, the present invention provides a method for implementing fingerprint anti-theft access control suitable for the fields of fingerprint recognition, access control, etc.

[0004] The technical solution adopted by the present invention to achieve the above technical effects is:

[0005] A method for implementing fingerprint anti-theft access control includes a main control chip and an internal door system and an external door system connected to the main control chip. The external door system includes an external keyboard module, a fingerprint recognition module, an alarm, an environmental sensor module, a pressure sensor, an infrared sensor module, and a two-phase stepper motor module. The internal door system includes an internal keyboard module and an LCD display screen. The LCD display screen is used to display information such as pressure, temperature, and humidity. When an abnormality is detected, the alarm is driven to sound an alarm in the form of a buzzer. The internal door system is used to provide permission operations such as fingerprint addition and deletion and password modification. The external door system is used to determine the identity of a visitor and manage the infrared sensor module in the external door system. When someone is detected, the fingerprint recognition module is automatically restored from a standby state to a working state.

[0006] Preferably, in the above-mentioned implementation method of fingerprint anti-theft access control, in order to ensure the security of information, when entering the system inside the door, it is necessary to complete the authority authentication by fingerprint verification, and then enter the setting interface of the LCD display screen, and according to needs, select the authority operation items such as restore data, fingerprint modification, fingerprint addition and deletion, password modification, etc. through the corresponding buttons on the internal keyboard module.

[0007] Preferably, in the above-mentioned implementation method of fingerprint anti-theft access control, the door system includes a fingerprint recognition function and an infrared recognition function, wherein the fingerprint recognition function includes obtaining fingerprint information, deleting fingerprint information, verifying fingerprint information, and adding fingerprint information; the infrared recognition function is used to detect people near the door system, and transmit the acquired data into the fingerprint recognition module to realize the recognition, control and management of fingerprints.

[0008] Preferably, in the above-mentioned implementation method of fingerprint anti-theft access control, the fingerprint algorithm chip is connected to the main control chip, and the fingerprint algorithm chip and the main control chip are provided with an identity authentication mechanism. The main control chip transmits the authorization serial number to the unauthorized fingerprint algorithm chip through a mass production tool. After the fingerprint algorithm chip receives and saves the serial number, it responds to a success instruction. If the fingerprint algorithm chip has been authorized, it responds to a failure instruction, that is, the fingerprint algorithm chip can only accept an authorization serial number once after leaving the factory, and uses the unique authorization serial number and a random number for calculation operations. The root key obtained is used for identity binding authentication between the main control chip and the fingerprint algorithm chip.

[0009] Preferably, in the above-mentioned implementation method of fingerprint anti-theft access control, each time the system is powered on after leaving the factory, the main control chip and the fingerprint algorithm chip first need to perform mutual identity binding authentication, and only when the identity binding authentication is successful can they proceed to the next step.

[0010] Preferably, in the above-mentioned implementation method of fingerprint anti-theft access control, the identity binding authentication process is to compare the authentication data generated by the root key in the main control chip with that in the fingerprint algorithm chip. The authentication can be completed only when the comparison is successful, so that the fingerprint algorithm chip and the main control chip can perform unique identity binding authentication with each other, thereby eliminating the possibility of illegal users obtaining the main control chip data by replacing the fingerprint algorithm chip.

[0011] Preferably, in the above-mentioned method for implementing fingerprint anti-theft access control, a secure communication mechanism is provided between the main control chip and the fingerprint algorithm module, and the secure communication mechanism comprises the steps of:

[0012] S1. Send a random number. The main control chip sends a 16-byte random number RN1 to the fingerprint algorithm.

[0013] Chip, the fingerprint algorithm chip sends a 16-Byte random number RN2 to the main control chip;

[0014] S2, obtaining authentication data, the fingerprint algorithm chip uses the value obtained by performing an XOR operation on the random number RN1 and the root key as the key, performs an SM4 encryption operation on the root key to obtain authentication data, and then the fingerprint algorithm chip sends the authentication data to the main control chip for verification and comparison, the main control chip uses the value obtained by performing an XOR operation on the random number RN2 and the root key as the key, performs an SM4 encryption operation on the root key to obtain authentication data, and then the main control chip sends the authentication data to the fingerprint algorithm chip for verification and comparison;

[0015] S3, comparing authentication data, the main control chip and the fingerprint algorithm chip both compare the authentication data calculated by themselves with the received authentication data, if they are the same, the authentication is passed, if they are different, the authentication fails, and after the authentication is passed, a session key is generated for communication between the main control chip and the fingerprint algorithm chip;

[0016] S4, session key generation, the fingerprint algorithm chip and the main control chip both perform XOR operation on the random number RN1 and the random number RN2 to obtain the value as the key, and then perform SM4 encryption operation on the random number RN2 to obtain the session key.

[0017] Preferably, in the above-mentioned implementation method of fingerprint anti-theft access control, the instructions between the main control chip and the fingerprint algorithm chip use session keys and are transmitted through SM4 encryption, and the session keys after each power-on are generated by different random number operations.

[0018] Preferably, in the above-mentioned implementation method of fingerprint anti-theft access control, the session key is stored in RAM, and when the fingerprint algorithm chip loses power, the session key is lost, which is used to minimize the possibility of communication instructions being intercepted and cracked by illegal users.

[0019] Preferably, in the above-mentioned method for implementing fingerprint anti-theft access control, the model of the main control chip is STM32F103, and the model of the fingerprint algorithm chip is BRD501.

[0020] The beneficial effects of the present invention are as follows: the implementation method of the fingerprint anti-theft access control of the present invention provides an identity authentication mechanism between the fingerprint algorithm chip and the main control chip, so that the fingerprint algorithm chip and the main control chip perform unique identity binding authentication with each other, thereby eliminating the possibility of illegal users obtaining the main control chip data by replacing the fingerprint algorithm chip, and greatly improving the identity authentication mechanism. In addition, by adding a secure communication mechanism between the fingerprint algorithm chip and the main control chip, the communication between the two is encrypted to ensure data security. The session key is stored in the RAM. When the fingerprint algorithm chip loses power, the session key is lost. Therefore, the possibility of communication instructions being intercepted and cracked by illegal users is reduced to the greatest extent, the reliability and anti-attack capability of encrypted communication are enhanced, and the communication security is improved. It can give full play to the role of fingerprint recognition technology, improve the overall performance of the access control system, and thus protect the safety of user property. BRIEF DESCRIPTION OF THE DRAWINGS

[0021] Figure 1 It is a module block diagram of the present invention;

[0022] Figure 2 The schematic diagram of the secure communication mechanism of the present invention is shown in FIG. DETAILED DESCRIPTION

[0023] In order to further understand the present invention, the present invention is further described below with reference to the accompanying drawings and specific embodiments:

[0024] like Figure 1 and Figure 2 As shown, the present invention discloses a method for implementing fingerprint anti-theft access control, including a main control chip and an internal door system and an external door system connected to the main control chip, wherein the external door system includes an external keyboard module, a fingerprint recognition module, an alarm, an environmental sensor module, a pressure sensor, an infrared sensor module, and a two-phase stepper motor module. The internal door system includes an internal keyboard module and an LCD display screen, wherein the LCD display screen is used to display information such as pressure, temperature, and humidity, and when an abnormality is detected, the alarm is driven to sound an alarm in the form of a buzzer. The internal door system is used to provide permission operations such as fingerprint addition and deletion and password modification.

[0025] Specifically, the permission operations include:

[0026] 1. Restore data: If the user selects this option, the access control system will automatically enter the process of restoring factory settings. At the same time, the password will be automatically reset to the default password "222222", and the fingerprint information saved in the system will be deleted;

[0027] 2. Modify fingerprint: There are two functions for modifying fingerprint in the access control system, namely, deleting fingerprint and adding fingerprint. The former will delete all fingerprint information saved in the system, so users should operate with caution; the latter will add a fingerprint that is not in the system, which can only be performed after completing the authority authentication. During the fingerprint entry process, the same fingerprint needs to be entered three times, and after the comparison is correct, it is added to the fingerprint library of the system;

[0028] 3. Change password: To change the password, the user needs to input the old password to verify the identity, then input the new password, and click the # key on the keyboard to complete the change. Then, if the change is successful, the access control system will prompt "Change Successful", otherwise it will prompt "Change Failed".

[0029] The door system is used to determine the identity of the visitor and manage the infrared sensor module in the door system. When someone is detected, the fingerprint recognition module will automatically return to the working state from the standby state. If the password input error occurs more than 3 times, the door system will trigger an alarm. Then the door can only be opened and closed after the password verification and fingerprint verification are successful.

[0030] To ensure the security of information, when entering the door system, you must complete the permission authentication by fingerprint verification, and then enter the setting interface of the LCD display screen. According to needs, use the corresponding buttons on the internal keyboard module to select permission operation items such as restore data, fingerprint modification, fingerprint addition and deletion, and password modification.

[0031] Furthermore, the out-of-door system includes fingerprint recognition function and infrared recognition function, wherein the fingerprint recognition function includes obtaining fingerprint information, deleting fingerprint information, verifying fingerprint information, and adding fingerprint information; the infrared recognition function is used to detect people near the out-of-door system, and transmit the acquired data into the fingerprint recognition module to realize the recognition, control and management of fingerprints.

[0032] In order to further increase security, the fingerprint algorithm chip is connected to the main control chip, and an identity authentication mechanism is set up between the fingerprint algorithm chip and the main control chip. Each time the system is powered on after leaving the factory, the main control chip and the fingerprint algorithm chip first need to perform mutual identity binding authentication, and only when the identity binding authentication is successful can they proceed to the next step. The identity binding authentication process is to compare the authentication data generated by the root key in the main control chip and the fingerprint algorithm chip. The authentication can only be completed when the comparison is successful, so that the fingerprint algorithm chip and the main control chip can perform unique identity binding authentication with each other, thereby eliminating the possibility of illegal users obtaining the main control chip data by replacing the fingerprint algorithm chip.

[0033] The main control chip transmits the authorization serial number to the unauthorized fingerprint algorithm chip through the mass production tool. After the fingerprint algorithm chip receives and saves the serial number, it responds to the success instruction. If the fingerprint algorithm chip has been authorized, it responds to the failure instruction, that is, the fingerprint algorithm chip can only accept the authorization serial number once after leaving the factory. The unique authorization serial number is used to perform calculations with the random number, and the root key obtained is used for the identity binding authentication between the main control chip and the fingerprint algorithm chip.

[0034] A secure communication mechanism is provided between the main control chip and the fingerprint algorithm module, and the secure communication mechanism includes the following steps:

[0035] S1, send random number, the main control chip sends 16 Byte random number RN1 to the fingerprint algorithm chip, and the fingerprint algorithm chip sends 16 Byte random number RN2 to the main control chip;

[0036] S2. Acquire authentication data. The fingerprint algorithm chip uses the value obtained by performing an XOR operation on the random number RN1 and the root key as the key, performs an SM4 encryption operation on the root key to obtain authentication data, and then the fingerprint algorithm chip sends the authentication data to the main control chip for verification and comparison. The main control chip uses the value obtained by performing an XOR operation on the random number RN2 and the root key as the key, performs an SM4 encryption operation on the root key to obtain authentication data, and then the main control chip sends the authentication data to the fingerprint algorithm chip for verification and comparison;

[0037] S3, compare authentication data. The main control chip and the fingerprint algorithm chip compare the authentication data calculated by themselves with the received authentication data. If they are the same, the authentication is passed. If they are different, the authentication fails. After the authentication is passed, the session key is generated for communication between the main control chip and the fingerprint algorithm chip.

[0038] S4, session key generation, the fingerprint algorithm chip and the main control chip both perform XOR operation on the random number RN1 and the random number RN2 to obtain the value as the key, and then perform SM4 encryption operation on the random number RN2 to obtain the session key.

[0039] Specifically, in a preferred embodiment of the present invention, the instructions between the main control chip and the fingerprint algorithm chip use a session key and are transmitted through SM4 encryption. The session key after each power-on is generated by a different random number operation. The session key is stored in RAM. When the fingerprint algorithm chip loses power, the session key is lost, which is used to minimize the possibility of communication instructions being intercepted and cracked by illegal users. The model of the main control chip is STM32F103, and the model of the fingerprint algorithm chip is BRD501.

[0040] In summary, the implementation method of the fingerprint anti-theft access control of the present invention provides an identity authentication mechanism between the fingerprint algorithm chip and the main control chip, so that the fingerprint algorithm chip and the main control chip perform unique identity binding authentication with each other, thereby eliminating the possibility of illegal users obtaining the main control chip data by replacing the fingerprint algorithm chip, and greatly improving the identity authentication mechanism. In addition, by adding a secure communication mechanism between the fingerprint algorithm chip and the main control chip, the communication between the two is encrypted to ensure data security. The session key is stored in the RAM. When the fingerprint algorithm chip loses power, the session key is lost. Therefore, the possibility of communication instructions being intercepted and cracked by illegal users is reduced to the greatest extent, the reliability and anti-attack capability of encrypted communication are enhanced, and the communication security is improved. It can give full play to the role of fingerprint recognition technology, improve the overall performance of the access control system, and thus protect the safety of user property.

[0041] The above shows and describes the basic principles, main features and advantages of the present invention. Those skilled in the art should understand that the present invention is not limited to the above embodiments, and the above embodiments and descriptions only describe the principles of the present invention. The present invention may have various changes and improvements without departing from the spirit and scope of the present invention, and these changes and improvements fall within the scope of the present invention to be protected, and the scope of protection claimed by the present invention is defined by the attached claims and their equivalents.

Claims

1. A method for implementing fingerprint anti-theft access control, characterized in that: It includes a main control chip and an inner door system and an outer door system connected to the main control chip. The outer door system includes an outer keyboard module, a fingerprint recognition module, an alarm, an environmental sensor module, a pressure sensor, an infrared sensor module, and a two-phase stepper motor module. The inner door system includes an inner keyboard module and an LCD display screen. The LCD display screen is used to display information such as pressure, temperature, and humidity. When an abnormality is detected, the alarm is driven to sound an alarm. The inner door system is used to provide permission operations such as fingerprint addition and deletion and password modification. The outer door system is used to determine the identity of the visitor and manage the infrared sensor module in the outer door system. When someone is detected, the fingerprint recognition module is automatically restored from the standby state to the working state; It also includes a fingerprint algorithm chip, which is connected to the main control chip. The fingerprint algorithm chip and the main control chip are provided with an identity authentication mechanism. The main control chip transmits the authorization serial number to the unauthorized fingerprint algorithm chip through a mass production tool. After the fingerprint algorithm chip receives and saves the serial number, it responds to a success instruction. If the fingerprint algorithm chip has been authorized, it responds to a failure instruction, that is, the fingerprint algorithm chip can only accept an authorization serial number once after leaving the factory, and uses the unique authorization serial number and a random number to perform an operation, and the root key obtained is used for the identity binding authentication between the main control chip and the fingerprint algorithm chip; Each time the system is powered on after leaving the factory, the main control chip and the fingerprint algorithm chip first need to perform mutual identity binding authentication. Only when the identity binding authentication is successful can the next step be entered; The identity binding authentication process is to compare the authentication data generated by the root key of the main control chip with that of the fingerprint algorithm chip. The authentication can be completed only when the comparison is successful, so that the fingerprint algorithm chip and the main control chip can perform a unique identity binding authentication with each other, thereby eliminating the possibility of an illegal user obtaining the data of the main control chip by replacing the fingerprint algorithm chip; A secure communication mechanism is provided between the main control chip and the fingerprint algorithm chip, and the secure communication mechanism comprises the following steps: S1, sending a random number, the main control chip sends a 16-byte random number RN1 to the fingerprint algorithm chip, and the fingerprint algorithm chip sends a 16-byte random number RN2 to the main control chip; S2, obtaining authentication data, the fingerprint algorithm chip uses the value obtained by performing an XOR operation on the random number RN1 and the root key as the key, performs an SM4 encryption operation on the root key to obtain authentication data, and then the fingerprint algorithm chip sends the authentication data to the main control chip for verification and comparison, the main control chip uses the value obtained by performing an XOR operation on the random number RN2 and the root key as the key, performs an SM4 encryption operation on the root key to obtain authentication data, and then the main control chip sends the authentication data to the fingerprint algorithm chip for verification and comparison; S3, comparing authentication data, the main control chip and the fingerprint algorithm chip both compare the authentication data calculated by themselves with the received authentication data, if they are the same, the authentication is passed, if they are different, the authentication fails, and after the authentication is passed, a session key is generated for communication between the main control chip and the fingerprint algorithm chip; S4, session key generation, the fingerprint algorithm chip and the main control chip both perform an XOR operation on the random number RN1 and the random number RN2 to obtain a value as the key, and then perform an SM4 encryption operation on the random number RN2 to obtain the session key; The instructions between the main control chip and the fingerprint algorithm chip use the session key and are transmitted through SM4 encryption. The session key after each power-on is generated by a different random number operation; The session key is stored in the RAM, and when the fingerprint algorithm chip loses power, the session key is lost, thereby minimizing the possibility that the communication instructions are intercepted and cracked by illegal users.

2. The method for implementing fingerprint anti-theft access control according to claim 1 is characterized in that: To ensure the security of information, when entering the door system, you must complete the authority authentication by fingerprint verification, and then enter the setting interface of the LCD display screen. According to needs, select the authority operation items such as restore data, fingerprint modification, fingerprint addition and deletion, password modification, etc. through the corresponding buttons on the internal keyboard module.

3. The method for implementing fingerprint anti-theft access control according to claim 1 is characterized in that: The out-door system includes fingerprint recognition function and infrared recognition function, wherein the fingerprint recognition function includes obtaining fingerprint information, deleting fingerprint information, verifying fingerprint information, and adding fingerprint information; the infrared recognition function is used to detect people near the out-door system, and transmit the acquired data into the fingerprint recognition module to realize the recognition, control and management of fingerprints.

4. The method for implementing fingerprint anti-theft access control according to claim 1 is characterized in that: The model of the main control chip is STM32F103, and the model of the fingerprint algorithm chip is BRD501.

Images