A blockchain-based electronic access control access management method, device and medium
By using blockchain technology to verify the user's entry and exit proof in the access control system, the problems of low security and inability to trace information are solved, and data security and traceability are achieved, and it is suitable for a variety of community and business scenarios.
Patent Information
- Application Number
- CN202010499987.1
- Authority / Receiving Office
- CN · China
- Patent Type
- Patents(China)
- Current Assignee / Owner
- Filing Date
- 2020-06-04
- Publication Date
- 2025-03-25
- Estimated Expiration
- 2040-06-04
AI Technical Summary
Traditional access control cards are low in security, easy to lose, and the entry and exit information of personnel cannot be traced.
The electronic access control and exit management method based on blockchain is adopted to receive the user's entry and exit certificate through the access control sensor, such as QR code, dynamic password and biometric information, and verify the authenticity and timeliness of the entry and exit certificate through the blockchain smart contract to determine whether the access control is allowed to be opened.
It realizes data security and traceability, ensures the security and reliability of access control information, avoids the problem of easy loss of traditional access control cards, and provides a variety of authorization verification mechanisms, which are suitable for different scenarios.
Smart Images

Figure CN111931197B_ABST
Abstract
Description
Technical Field
[0001] The present application relates to the field of blockchain technology, and in particular to a method, device and medium for managing game transactions based on blockchain. Background Art
[0002] With the development of mobile Internet, all aspects of citizens' lives are gradually becoming electronic. Physical access control cards are easy to lose and forget to bring. "Putting access control cards into mobile phones" has become a real demand of citizens. In recent years, the momentum of community + Internet has become stronger, but the security of electronic personal community information has become a primary problem. Therefore, only by reliably solving security issues and ensuring data security can users' personal community privacy information be actually loaded into mobile phones. Blockchain technology can just solve the problem of certificate data security. It can not only ensure data security, but its traceability characteristics can also well meet the needs of community residents for information use and authorization records. Summary of the invention
[0003] The embodiments of this specification provide a blockchain-based electronic access control access management method, device and medium to solve the following technical problems in the prior art:
[0004] Traditional access control cards have low security, are easy to lose, and people's entry and exit information cannot be traced.
[0005] The embodiments of this specification adopt the following technical solutions:
[0006] A first aspect of an embodiment of the present invention provides a blockchain-based electronic access control access management method, comprising:
[0007] Receive the user's access certificate through the access control sensor, wherein the access certificate includes at least one of the following: a QR code, a dynamic password and biometric information;
[0008] The smart contract of the blockchain determines whether the user's access certificate can open the door based on the association between the user's access certificate and the information in the blockchain.
[0009] In one example, it also includes:
[0010] receiving a visit appointment of a first user, and endorsing the first user through a second user involved in the visit appointment;
[0011] The smart contract of the blockchain generates a temporary access certificate for the first user based on the endorsement of the second user, so that the first user has the authority to open the door within a specified time, wherein the temporary access certificate is one of the access certificates.
[0012] In one example, the second user involved in the visit appointment endorses the first user, including:
[0013] The identity information of the first user is encrypted by the private key of the second user to form an electronic signature.
[0014] In one example, generating an entry and exit certificate for the first user includes:
[0015] A temporary access certificate is generated for the first user through the electronic signature, the identity information of the first user and the visit appointment.
[0016] In one example, the smart contract of the blockchain determines whether the user's access certificate can open the door according to the association between the user's access certificate and the information in the blockchain, including:
[0017] Determine the authenticity of the temporary access certificate by using the electronic signature in the temporary access certificate and the public key of the second user;
[0018] Determine the validity of the temporary access certificate based on the visit appointment and current time in the temporary access certificate;
[0019] Whether the temporary access certificate of the second user can open the door is determined by the authenticity and validity of the temporary access certificate.
[0020] In one example, receiving the user's entry and exit certificate through a door access sensor includes:
[0021] Receiving a temporary access certificate of the first user through a door access sensor;
[0022] The electronic signature and visit appointment in the temporary access certificate are written into the blockchain.
[0023] In one example, it also includes:
[0024] Receive certification information submitted by the user, wherein the certification information includes at least one of the following: facial information, property certificate name, lease contract, and work certificate;
[0025] The proof information is sent to a designated node in the blockchain for confirmation to determine whether the proof information is written into the blockchain.
[0026] In one example, the nodes specified in the blockchain include at least one of the following: a community property, a housing rental agency, a community neighborhood committee, and a commercial company.
[0027] A second aspect of an embodiment of the present invention provides a blockchain-based electronic access control access management device, including:
[0028] at least one processor; and,
[0029] a memory communicatively connected to the at least one processor; wherein,
[0030] The memory stores instructions executable by the at least one processor, the instructions being executed by the at least one processor to enable the at least one processor to:
[0031] Receive the user's access certificate through the access control sensor, wherein the access certificate includes at least one of the following: a QR code, a dynamic password and biometric information;
[0032] The smart contract of the blockchain determines whether the user's access certificate can open the door based on the association between the user's access certificate and the information in the blockchain.
[0033] A third aspect of an embodiment of the present invention provides a blockchain-based electronic access control management non-volatile computer storage medium storing computer executable instructions, wherein the computer executable instructions are configured as follows:
[0034] Receive the user's access certificate through the access control sensor, wherein the access certificate includes at least one of the following: a QR code, a dynamic password and biometric information;
[0035] The smart contract of the blockchain determines whether the user's access certificate can open the door based on the association between the user's access certificate and the information in the blockchain.
[0036] At least one of the above technical solutions adopted in the embodiments of this specification can achieve the following beneficial effects:
[0037] Generate and verify access certificates such as QR codes or dynamic passwords based on blockchain technology, or verify access certificates based on face recognition technology, ensuring data security and traceability;
[0038] Blockchain technology is used to encrypt and upload operations such as user collection, viewing, and authorization of access codes, community face recognition information, and community personal basic information, making the data safe, reliable, and tamper-proof.
[0039] Close to the actual use scenarios of users, it provides a variety of authorization and verification mechanisms, mainly divided into three methods: face recognition door opening, dynamic QR code door opening, and dynamic password door opening. It can well cover the use scenarios of access control in existing communities. The mechanism is cleverly designed, has excellent data security, broad market prospects, and strong replicability. BRIEF DESCRIPTION OF THE DRAWINGS
[0040] The drawings described herein are used to provide a further understanding of the present application and constitute a part of the present application. The illustrative embodiments of the present application and their descriptions are used to explain the present application and do not constitute an improper limitation on the present application. In the drawings:
[0041] Figure 1 A schematic diagram of a method flow chart provided in an embodiment of this specification;
[0042] Figure 2 A schematic diagram of the device framework provided in the embodiments of this specification. DETAILED DESCRIPTION
[0043] In order to make the purpose, technical solutions and advantages of this specification more clear, the technical solutions of this application will be clearly and completely described below in combination with the specific embodiments of this specification and the corresponding drawings. Obviously, the described embodiments are only part of the embodiments of this application, not all of them. Based on the embodiments in the specification, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of this application.
[0044] The technical solutions provided by various embodiments of the present application are described in detail below in conjunction with the accompanying drawings.
[0045] The embodiment of the present application provides a blockchain-based electronic access control management method and corresponding solution, which generates access certificates such as QR codes or dynamic passwords based on blockchain technology, or realizes access certificates based on face recognition technology, ensuring data security and traceability; through blockchain technology, users receive, view, and authorize access codes, community face recognition information, community personal basic information and other operations are encrypted and chained, making the data safe and reliable and cannot be tampered with; close to the actual user usage scenario, a variety of authorization verification mechanisms are provided, mainly divided into three methods: face recognition door opening, dynamic QR code door opening, and dynamic password door opening, which can well cover the existing community access control usage scenarios. The mechanism is ingeniously designed, with excellent data security, broad market prospects, and strong replicability.
[0046] Figure 1 The method flow chart provided in the embodiment of this specification is as follows. As shown in the figure, the method includes:
[0047] S101 receives a user's access certificate through a sensor of a door access control system, wherein the access certificate includes at least one of the following: a QR code, a dynamic password, and biometric information;
[0048] S102 The smart contract of the blockchain determines whether the user's access certificate can open the door based on the association between the user's access certificate and the information in the blockchain.
[0049] It can be understood that the association relationship indicates whether the information is directly the same or indirectly the same.
[0050] If the user has the authority to open the access control, the verification is successful, and the blockchain sends the verification information to the access control, then the access control is opened and the person enters.
[0051] Blockchain is a chain data structure that combines data blocks in a sequential manner in chronological order, and a distributed ledger that is cryptographically guaranteed to be tamper-proof and unforgeable. Although the underlying technology of blockchain has been developed for many years, it cannot be effectively applied in specific scenarios.
[0052] According to a specific embodiment of the present invention, a smart contract for managing user information is set on the blockchain. The smart contract is an automated script deployed on the blockchain. Since it is set on the blockchain, it has the characteristics of openness and transparency. Users pre-set rules through smart contracts to write data into the blockchain and obtain data browsing permissions, which largely avoids the disclosure of private information. Of course, smart contracts are not the only implementation method of this application, and are set accordingly according to different blockchain platforms, such as Ethereum, Hyperledger, etc.
[0053] Before the verification step, the system must be debugged and user data must be saved to facilitate information matching by the blockchain-based access control system. The general process is as follows:
[0054] Receive proof information submitted by the user, the proof information includes but is not limited to: facial information, property certificate name, lease contract, work certificate. It can be understood that the embodiment of the present invention only discloses the proof information corresponding to residential areas and workplaces commonly used in production activities. The proof information should be set according to different locations, and it can also be some other special scenes, such as hospitals and schools, etc., which will not be elaborated here.
[0055] The proof information is sent to the designated node in the blockchain for confirmation to determine whether to write the proof information into the blockchain. Depending on the scenario, the node can be a property management company, a housing rental agency, a neighborhood committee, or a company's human resources agency. For example, in a commercial office building, there is a property management company and several other commercial companies. The blockchain is built from the relevant equipment in these companies. When performing authentication, the employee information of each company can be submitted to the adjacent company or property management for authentication.
[0056] Once the proof information is authenticated, the data can be written into the blockchain, and based on the information stored in the blockchain, the user can be provided with access control proof and verification services.
[0057] According to a specific embodiment of the present invention, in step S101, the user's entry and exit proof is received by the sensor on the access control system. There may be multiple types of entry and exit proofs, which are determined by the hardware equipment installed in each residential area or commercial office area. For example, if there is an image sensor with a face recognition function, the face information can be directly obtained through the image sensor and the face information can be used as the entry and exit proof; if it is a button type or a QR code scanner, the user is required to obtain the entry and exit proof, a dynamic password or a dynamic QR code from the blockchain.
[0058] In some preferred embodiments of the present invention, the embodiments of the present invention also provide a method for providing access certificates for temporary outsiders based on the encryption algorithm of the blockchain. In some embodiments of the present invention, such access certificates provided for temporary outsiders are called temporary access certificates. The first user represents an outsider, and the second user represents an internal person. For example, the first user represents a customer who temporarily visits the enterprise, and the second user represents an employee of the enterprise. The general process is as follows:
[0059] The smart contract of the blockchain receives a visit reservation of a first user, and endorses the first user through a second user involved in the visit reservation;
[0060] The smart contract of the blockchain generates a temporary access certificate for the first user based on the endorsement of the second user, so that the first user has the authority to open the door within a specified time, wherein the temporary access certificate is one of the access certificates.
[0061] In particular, the embodiment of the present invention implements the above management process through an asymmetric encryption algorithm. The specific process is as follows:
[0062] Encrypting the identity information of the first user by using the private key of the second user to form an electronic signature;
[0063] Generate a temporary access certificate for the first user through the electronic signature, the identity information of the first user and the visit appointment;
[0064] After the user presents the temporary access certificate to the access control sensor, the sensor sends the temporary access certificate to the backend (blockchain) for verification;
[0065] Determine the authenticity of the temporary access certificate by using the electronic signature in the temporary access certificate and the public key of the second user;
[0066] Determine the validity of the temporary access certificate based on the visit appointment and current time in the temporary access certificate;
[0067] Whether the temporary access certificate of the second user can open the door is determined by the authenticity and validity of the temporary access certificate.
[0068] It should be noted that when the temporary access certificate of the first user is received through the access control sensor, the electronic signature and visit appointment in the temporary access certificate are written into the blockchain.
[0069] The embodiment of the present invention realizes information confirmation and information tracing of the endorser through electronic signature, which is convenient and safe.
[0070] Based on the same idea, some embodiments of the present application also provide devices and non-volatile computer storage media corresponding to the above methods.
[0071] Figure 2 The schematic diagram of the device framework provided in the embodiment of this specification, the electronic access control management device based on blockchain, includes:
[0072] at least one processor; and,
[0073] a memory communicatively connected to the at least one processor; wherein,
[0074] The memory stores instructions executable by the at least one processor, the instructions being executed by the at least one processor to enable the at least one processor to:
[0075] Receive the user's access certificate through the access control sensor, wherein the access certificate includes at least one of the following: a QR code, a dynamic password and biometric information;
[0076] The smart contract of the blockchain determines whether the user's access certificate can open the door based on the association between the user's access certificate and the information in the blockchain.
[0077] Some embodiments of the present application provide corresponding Figure 1 A blockchain-based electronic access control non-volatile computer storage medium stores computer executable instructions, wherein the computer executable instructions are set to:
[0078] Receive the user's access certificate through the access control sensor, wherein the access certificate includes at least one of the following: a QR code, a dynamic password and biometric information;
[0079] The smart contract of the blockchain determines whether the user's access certificate can open the door based on the association between the user's access certificate and the information in the blockchain.
[0080] Each embodiment in this application is described in a progressive manner, and the same or similar parts between the embodiments can be referred to each other, and each embodiment focuses on the differences from other embodiments. In particular, for the device and medium embodiments, since they are basically similar to the method embodiments, the description is relatively simple, and the relevant parts can be referred to the partial description of the method embodiments.
[0081] The devices and media provided in the embodiments of the present application correspond one-to-one to the methods. Therefore, the devices and media also have similar beneficial technical effects as the corresponding methods. Since the beneficial technical effects of the methods have been described in detail above, the beneficial technical effects of the devices and media will not be repeated here.
[0082] Those skilled in the art will appreciate that embodiments of the present invention may be provided as methods, systems, or computer program products. Therefore, the present invention may take the form of a complete hardware embodiment, a complete software embodiment, or an embodiment combining software and hardware. Moreover, the present invention may take the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.
[0083] The present invention is described with reference to flowcharts and / or block diagrams of methods, devices (systems), and computer program products according to embodiments of the present invention. It should be understood that each process and / or block in the flowchart and / or block diagram, as well as the combination of processes and / or blocks in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing device to produce a machine, so that the instructions executed by the processor of the computer or other programmable data processing device generate instructions for implementing the processes in the flowchart and / or block diagram. Figure 1 A process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.
[0084] These computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing device to operate in a specific manner, so that the instructions stored in the computer-readable memory produce an article of manufacture comprising an instruction device, which implements the process Figure 1 A process or multiple processes and / or boxes Figure 1 A function specified in one or more boxes.
[0085] These computer program instructions can also be loaded onto a computer or other programmable data processing device so that a series of operating steps are executed on the computer or other programmable device to produce a computer-implemented process, thereby providing instructions for implementing the process. Figure 1 A process or multiple processes and / or boxes Figure 1 The steps for the functions specified in one or more boxes.
[0086] In a typical configuration, a computing device includes one or more processors (CPU), input / output interfaces, network interfaces, and memory.
[0087] The memory may include non-permanent storage in a computer-readable medium, random access memory (RAM) and / or non-volatile memory in the form of read-only memory (ROM) or flash RAM. The memory is an example of a computer-readable medium.
[0088] Computer readable media include permanent and non-permanent, removable and non-removable media that can be implemented by any method or technology to store information. Information can be computer readable instructions, data structures, program modules or other data. Examples of computer storage media include, but are not limited to, phase change memory (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), other types of random access memory (RAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), flash memory or other memory technology, compact disk read-only memory (CD-ROM), digital versatile disk (DVD) or other optical storage, magnetic cassettes, magnetic tape magnetic disk storage or other magnetic storage devices or any other non-transmission media that can be used to store information that can be accessed by a computing device. As defined herein, computer readable media does not include temporary computer readable media (transitory media), such as modulated data signals and carrier waves.
[0089] It should also be noted that the terms "include", "comprises" or any other variations thereof are intended to cover non-exclusive inclusion, so that a process, method, commodity or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, commodity or device. In the absence of more restrictions, the elements defined by the sentence "comprises a ..." do not exclude the existence of other identical elements in the process, method, commodity or device including the elements.
[0090] The above is only an embodiment of the present application and is not intended to limit the present application. For those skilled in the art, the present application may have various changes and variations. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present application should be included in the scope of the claims of the present application.
Claims
1. A blockchain-based electronic access control access management method, characterized in that: include: Receive the user's access certificate through the access control sensor, wherein the access certificate includes at least one of the following: a QR code, a dynamic password and biometric information; The smart contract of the blockchain determines whether the user's access certificate can open the door according to the association between the user's access certificate and the information in the blockchain; The method further includes: receiving a visit appointment of a first user, and endorsing the first user through a second user involved in the visit appointment; The smart contract of the blockchain generates a temporary access certificate for the first user based on the endorsement of the second user, so that the first user has the right to open the door within a specified time, wherein the temporary access certificate is one of the access certificates; The second user involved in the visit appointment endorses the first user, including: Encrypting the identity information of the first user by using the private key of the second user to form an electronic signature; The step of generating an entry and exit certificate for the first user includes: Generate a temporary access certificate for the first user through the electronic signature, the identity information of the first user and the visit appointment; The smart contract of the blockchain determines whether the user's access certificate can open the door according to the association between the user's access certificate and the information in the blockchain, including: Determine the authenticity of the temporary access certificate by using the electronic signature in the temporary access certificate and the public key of the second user; Determine the validity of the temporary access certificate based on the visit appointment and current time in the temporary access certificate; Whether the temporary access certificate of the second user can open the door is determined by the authenticity and validity of the temporary access certificate.
2. The method according to claim 1, characterized in that The receiving of the user's access certificate by the access control sensor includes: Receiving a temporary access certificate of the first user through a door access sensor; The electronic signature and visit appointment in the temporary access certificate are written into the blockchain.
3. The method according to claim 1, characterized in that Also includes: Receive certification information submitted by the user, wherein the certification information includes at least one of the following: facial information, property certificate name, lease contract, and work certificate; The proof information is sent to a designated node in the blockchain for confirmation to determine whether the proof information is written into the blockchain.
4. The method according to claim 3, characterized in that The nodes designated in the blockchain include at least one of the following: a community property, a housing rental agency, a community neighborhood committee, and a commercial company.
5. An electronic access control management device based on blockchain, characterized in that: include: at least one processor; as well as, a memory communicatively connected to the at least one processor; wherein, The memory stores instructions executable by the at least one processor, the instructions being executed by the at least one processor to enable the at least one processor to: Receive the user's access certificate through the access control sensor, wherein the access certificate includes at least one of the following: a QR code, a dynamic password and biometric information; The smart contract of the blockchain determines whether the user's access certificate can open the door according to the association between the user's access certificate and the information in the blockchain; receiving a visit appointment of a first user, and endorsing the first user through a second user involved in the visit appointment; The smart contract of the blockchain generates a temporary access certificate for the first user based on the endorsement of the second user, so that the first user has the right to open the door within a specified time, wherein the temporary access certificate is one of the access certificates; The second user involved in the visit appointment endorses the first user, including: Encrypting the identity information of the first user by using the private key of the second user to form an electronic signature; The step of generating an entry and exit certificate for the first user includes: Generate a temporary access certificate for the first user through the electronic signature, the identity information of the first user and the visit appointment; The smart contract of the blockchain determines whether the user's access certificate can open the door according to the association between the user's access certificate and the information in the blockchain, including: Determine the authenticity of the temporary access certificate by using the electronic signature in the temporary access certificate and the public key of the second user; Determine the validity of the temporary access certificate based on the visit appointment and current time in the temporary access certificate; Whether the temporary access certificate of the second user can open the door is determined by the authenticity and validity of the temporary access certificate.
6. A blockchain-based electronic access control non-volatile computer storage medium storing computer executable instructions, characterized in that: The computer executable instructions are configured to: Receive the user's access certificate through the access control sensor, wherein the access certificate includes at least one of the following: a QR code, a dynamic password and biometric information; The smart contract of the blockchain determines whether the user's access certificate can open the door according to the association between the user's access certificate and the information in the blockchain; receiving a visit appointment of a first user, and endorsing the first user through a second user involved in the visit appointment; The smart contract of the blockchain generates a temporary access certificate for the first user based on the endorsement of the second user, so that the first user has the right to open the door within a specified time, wherein the temporary access certificate is one of the access certificates; The second user involved in the visit appointment endorses the first user, including: Encrypting the identity information of the first user by using the private key of the second user to form an electronic signature; The step of generating an entry and exit certificate for the first user includes: Generate a temporary access certificate for the first user through the electronic signature, the identity information of the first user and the visit appointment; The smart contract of the blockchain determines whether the user's access certificate can open the door according to the association between the user's access certificate and the information in the blockchain, including: Determine the authenticity of the temporary access certificate by using the electronic signature in the temporary access certificate and the public key of the second user; Determine the validity of the temporary access certificate based on the visit appointment and current time in the temporary access certificate; Whether the temporary access certificate of the second user can open the door is determined by the authenticity and validity of the temporary access certificate.
Citation Information
Patent Citations
Method and apparatus for realizing simulation tags in NFC equipment
CN104517077A
System and method for constructing trusted node network
CN109104415A
Access control methods and systems based on block chain, management terminal and access control terminal
CN109767534A