Visitor authorization method, device and system

Abstract

The present invention provides a visitor authorization method, device and system, which belongs to the field of information security technology and can be applied to the field of financial technology or other technical fields. The visitor authorization method includes: determining a transit access control according to the historical number of passes of the historical access control; determining the routes to be selected corresponding to each transit access control according to the starting point, the destination point and the location of the transit access control; determining the path index of each route to be selected according to the distance corresponding to each route to be selected and the access control congestion index; determining the access control on the route to be selected corresponding to the minimum value of the path index as the target access control, generating the authorization certificate of the target access control, and sending the authorization certificate to the mobile phone client held by the visitor. The present invention can reduce the security risk of the authorization system.

Description

Technical Field

[0001] The present invention relates to the field of information security technology, and in particular to a visitor authorization method, device and system. Background Art

[0002] The park sets up physical access control for key passages and entrances to prevent security risks and authorizes those who are authorized to pass through. Level control is generally adopted for access control, that is, the authorized person is allowed to pass through a certain level or several levels of access control. However, this type of setting has poor flexibility. When temporarily granting access rights to designated places, it is impossible to set the access control rights of the target place and all access control rights on the passage path alone. In addition, the access restrictions for unrelated places are weak, which poses certain security risks. Summary of the invention

[0003] The main purpose of the embodiments of the present invention is to provide a visitor authorization method, device and system to reduce the security risk of the authorization system.

[0004] In order to achieve the above object, an embodiment of the present invention provides a visitor authorization method, including:

[0005] Determine the transit access control according to the historical number of passes through the access control system;

[0006] Determine the routes to be selected corresponding to each transfer gate according to the starting point, the destination point and the location of the transfer gate;

[0007] Determine the path index of each route to be selected according to the distance and access control congestion index corresponding to each route to be selected;

[0008] The access control on the to-be-selected route corresponding to the minimum value of the path index is determined as the target access control, an authorization certificate of the target access control is generated, and the authorization certificate is sent to the mobile client held by the visitor.

[0009] In one embodiment, it also includes: determining historical access control based on the starting location, destination point and visitor permissions.

[0010] In one embodiment, determining the transit access control according to the historical number of passes through the access control includes:

[0011] Sort the historical travel times from largest to smallest;

[0012] The historical access control corresponding to the historical number of passes ranked before the pass threshold is determined as the transit access control.

[0013] In one embodiment, determining the to-be-selected route corresponding to each transfer gate according to the starting location, the destination location, and the location of the transfer gate includes:

[0014] Determine the corresponding front route according to the starting location and the location of the transfer gate;

[0015] Determine the corresponding subsequent route based on the destination point and the location of the transfer gate;

[0016] The route to be selected is determined based on the previous route and the next route.

[0017] In one embodiment, it also includes:

[0018] The distance corresponding to the route to be selected is determined according to the distance between each gate control in the route to be selected.

[0019] In one embodiment, it also includes:

[0020] The access control congestion index corresponding to the route to be selected is determined according to the passing frequency of each access control in the route to be selected.

[0021] The embodiment of the present invention further provides a visitor authorization device, comprising:

[0022] A transfer access control determination module is used to determine the transfer access control according to the historical number of passes through the access control;

[0023] The route module to be selected is used to determine the route to be selected corresponding to each transfer gate according to the starting point, the destination point and the location of the transfer gate;

[0024] A path index module is used to determine the path index of each route to be selected according to the distance and access control congestion index corresponding to each route to be selected;

[0025] The credential generation module is used to determine the access control on the to-be-selected route corresponding to the minimum value of the path index as the target access control, generate the permission credential of the target access control, and send the permission credential to the mobile client held by the visitor.

[0026] An embodiment of the present invention further provides a computer device, including a memory, a processor, and a computer program stored in the memory and running on the processor, and the processor implements the steps of the visitor authorization method when executing the computer program.

[0027] An embodiment of the present invention further provides a computer-readable storage medium on which a computer program is stored. When the computer program is executed by a processor, the steps of the visitor authorization method are implemented.

[0028] The embodiment of the present invention further provides a visitor authorization system, including:

[0029] A visitor authorization device as described above;

[0030] The mobile client is used to receive the authorization certificate from the visitor authorization device.

[0031] The visitor authorization method, device and system of the embodiment of the present invention first determine the transit access control to determine the corresponding route to be selected according to the location of the transit access control, then determine the path index of each route to be selected to determine the target access control, and finally generate the permission certificate of the target access control, and send the permission certificate to the mobile phone client held by the visitor to complete the visitor authorization, which can reduce the security risk of the authorization system. BRIEF DESCRIPTION OF THE DRAWINGS

[0032] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings required for use in the description of the embodiments will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0033] Figure 1 is a flow chart of a visitor authorization method in an embodiment of the present invention;

[0034] Figure 2 is a flow chart of a visitor authorization method in another embodiment of the present invention;

[0035] Figure 3 is a flow chart of S102 in an embodiment of the present invention;

[0036] Figure 4 is a structural block diagram of a visitor authorization device in an embodiment of the present invention;

[0037] Figure 5 is a structural block diagram of a computer device in an embodiment of the present invention;

[0038] Figure 6 is a schematic diagram of a visitor authorization system in an embodiment of the present invention;

[0039] Figure 7 is a schematic diagram of path change in an embodiment of the present invention;

[0040] Figure 8 This is a flow chart after adjusting the visitor's destination point in an embodiment of the present invention. DETAILED DESCRIPTION

[0041] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0042] Those skilled in the art will appreciate that the embodiments of the present invention may be implemented as a system, device, apparatus, method or computer program product. Therefore, the present disclosure may be specifically implemented in the following forms, namely: complete hardware, complete software (including firmware, resident software, microcode, etc.), or a combination of hardware and software.

[0043] In view of the fact that the prior art has weak restrictions on access to irrelevant places and there are certain security risks, the embodiment of the present invention provides a visitor authorization method and device, which can reduce the security risks of the authorization system by refining access control management and the shortest path algorithm. The present invention is described in detail below with reference to the accompanying drawings.

[0044] Figure 1 4 is a flow chart of a visitor authorization method in an embodiment of the present invention. Figure 2 FIG. 1 is a flow chart of a visitor authorization method in another embodiment of the present invention. Figure 1-Figure 2 As shown, visitor authorization methods include:

[0045] S101: Determine a transit access control according to the historical number of passes through the access control.

[0046] Before executing S101, the method further includes: determining a historical access control according to a starting point, a destination point and visitor authority.

[0047] In specific implementation, the historical visitor path is retrieved according to the starting point and the destination point, a set of access control points appearing on the historical visitor path is obtained, and the access control points that the current visitor is prohibited from passing through are eliminated from the set according to the visitor's permissions to obtain the access control points on the historical path.

[0048] Table 1

[0049]

[0050]

[0051] Table 2

[0052] Personnel ID Name Security Level 001 Zhang San 10 002 Li Si 4 …… …… ……

[0053] Table 3

[0054] Personnel ID Name No entry ban 001 Zhang San M004,M010 …… …… ……

[0055] Table 1 is a schematic table of access levels and locations. Table 2 is a schematic table of security levels (visitor permissions). Table 3 is a schematic table of prohibited access to personnel. All access control systems in the park are registered in the system, and each access control is assigned a unique ID. Table 1 sets the minimum security level required for access to the access control and the three-dimensional coordinates (X, Y, and Z) of the access control relative to the center point of the park; Table 2 sets the security level allowed for visitor access. The higher the level, the greater the authority; Table 3 sets the access control IDs that visitors are prohibited from accessing, which is equivalent to a blacklist. Determine the prohibited access to the visitor (personnel) and the access control corresponding to the minimum access level higher than the visitor's permissions as the access control that the current visitor is prohibited from accessing.

[0056] In one embodiment, S101 includes: sorting the historical pass counts from large to small; determining the historical access control corresponding to the historical pass counts before the pass threshold as the transit access control. In specific implementation, the pass threshold may be 6, at which time the first five historical access control counts after sorting are taken out as the transit access control. If there are less than five, the actual number shall prevail.

[0057] S102: Determine the to-be-selected routes corresponding to the transfer gates according to the starting location, the destination location, and the location of the transfer gates.

[0058] Before executing S102, the present invention first obtains all the access control sets in the park, and then deletes the access control sets that the current visitor is prohibited from passing through in all the access control sets according to the visitor's authority, so as to obtain the access control set that is allowed to pass through.

[0059] Figure 3 is a flow chart of S102 in an embodiment of the present invention. Figure 3 As shown, S102 includes:

[0060] S201: Determine the corresponding front route according to the starting location and the location of the transfer gate.

[0061] Table 4

[0062] ID1 ID2 Distance (m) M001 M002 1964.34 M003 M001 746.21 ……

[0063] Table 4 is a schematic table of door control relationships. As shown in Table 4, the present invention establishes an association relationship between each door control that can be directly connected, and sets a connection path distance.

[0064] In specific implementation, the present invention can use the A* algorithm, the Freud algorithm or the Dijkstra algorithm to determine the shortest path from the starting point to the location of the transfer access control as the front route. For example, the starting point, the location of the transfer access control in Table 1 (three-dimensional coordinates), the three-dimensional coordinates of the access control set allowed to pass, and the access control relationship diagram are input into the A* algorithm model as input data of the A* algorithm model to obtain the front route.

[0065] S202: Determine the corresponding subsequent route according to the destination point and the location of the transfer gate.

[0066] In specific implementation, the present invention can use the A* algorithm, the Freud algorithm or the Dijkstra algorithm to determine the shortest path from the transfer access control point to the destination point as the latter route. For example, the destination point, the location (three-dimensional coordinates) of the transfer access control in Table 1, the three-dimensional coordinates of the access control set allowed to pass, and the access control relationship diagram are input into the A* algorithm model as input data of the A* algorithm model to obtain the latter route.

[0067] S203: Determine a route to be selected according to the previous route and the next route.

[0068] Among them, each route to be selected corresponds to the transfer access control one by one.

[0069] S103: Determine the path index of each route to be selected according to the distance and access control congestion index corresponding to each route to be selected.

[0070] In specific implementation, the path index of the route to be selected can be determined by the following formula:

[0071] V = ∑L / 100×0.75+(∑T) 2 ×0.25;

[0072] Among them, V is the path index, ∑L is the distance, and ∑T is the access control congestion index corresponding to the route to be selected.

[0073] Before executing S103, the method further includes:

[0074] 1. Determine the distance corresponding to the route to be selected based on the distance between each access control in the route to be selected.

[0075] In specific implementation, the distances between the gates in the route to be selected can be obtained according to Table 4, and further, the sum of the distances between the gates in the route to be selected can be used as the distance ∑L corresponding to the route to be selected.

[0076] 2. Determine the access control congestion index corresponding to the route to be selected based on the access frequency of each access control in the route to be selected.

[0077] During specific implementation, the access records of the gates corresponding to the routes to be selected in the past 5 minutes can be queried to calculate the real-time congestion index of each gate.

[0078] For example, when the number of passes per minute is 0, the congestion index T is 1; when the number of passes per minute is greater than or equal to 30, the congestion index is 10; in the range of 0 to 30, the congestion index T is calculated according to the following formula:

[0079] T = a / 30×(10-1)+1; where a is the number of passes per minute.

[0080] The access control congestion index is the sum ∑T of the real-time congestion indexes of each access control.

[0081] S104: Determine the access control on the to-be-selected route corresponding to the minimum value of the path index as the target access control, generate an authorization certificate for the target access control, and send the authorization certificate to the mobile client held by the visitor.

[0082] In specific implementation, the present invention also records the visitor's route plan. Each access control is equipped with a QR code scanning device. The visitor authorization device reads the visitor's QR code permission certificate information through the scanning device to determine whether the visitor's certificate-associated path contains the current access control. If it contains the current access control, the visitor is allowed to pass, otherwise, the visitor is prohibited from passing.

[0083] Figure 1 The execution subject of the visitor authorization method shown can be a computer. Figure 1 As can be seen from the process shown, the visitor authorization method of the embodiment of the present invention first determines the transit access control to determine the corresponding route to be selected according to the location of the transit access control, then determines the path index of each route to be selected to determine the target access control, and finally generates the permission certificate of the target access control, and sends the permission certificate to the mobile phone client held by the visitor to complete the visitor authorization, which can reduce the security risk of the authorization system.

[0084] Based on the same inventive concept, an embodiment of the present invention further provides a visitor authorization device. Since the principle of solving the problem by the device is similar to that of the visitor authorization method, the implementation of the device can refer to the implementation of the method, and the repeated parts will not be repeated.

[0085] Figure 4 is a structural block diagram of a visitor authorization device in an embodiment of the present invention. Figure 4 As shown, the visitor authorization device includes:

[0086] A transfer access control determination module is used to determine the transfer access control according to the historical number of passes through the access control;

[0087] The route module to be selected is used to determine the route to be selected corresponding to each transfer gate according to the starting point, the destination point and the location of the transfer gate;

[0088] A path index module is used to determine the path index of each route to be selected according to the distance and access control congestion index corresponding to each route to be selected;

[0089] The credential generation module is used to determine the access control on the to-be-selected route corresponding to the minimum value of the path index as the target access control, generate the permission credential of the target access control, and send the permission credential to the mobile client held by the visitor.

[0090] In summary, the visitor authorization device of the embodiment of the present invention first determines the transit access control to determine the corresponding route to be selected according to the location of the transit access control, then determines the path index of each route to be selected to determine the target access control, and finally generates the permission certificate of the target access control, and sends the permission certificate to the mobile phone client held by the visitor to complete the visitor authorization, which can reduce the security risk of the authorization system.

[0091] The embodiment of the present invention also provides a specific implementation of a computer device capable of implementing all steps in the visitor authorization method in the above embodiment. Figure 5 is a block diagram of a computer device in an embodiment of the present invention, see Figure 5 , the computer equipment specifically includes the following contents:

[0092] Processor (processor) 501 and memory (memory) 502.

[0093] The processor 501 is used to call the computer program in the memory 502. When the processor executes the computer program, all steps in the visitor authorization method in the above embodiment are implemented. For example, when the processor executes the computer program, the following steps are implemented:

[0094] Determine the transit access control according to the historical number of passes through the access control system;

[0095] Determine the routes to be selected corresponding to each transfer gate according to the starting point, the destination point and the location of the transfer gate;

[0096] Determine the path index of each route to be selected according to the distance and access control congestion index corresponding to each route to be selected;

[0097] The access control on the to-be-selected route corresponding to the minimum value of the path index is determined as the target access control, an authorization certificate of the target access control is generated, and the authorization certificate is sent to the mobile client held by the visitor.

[0098] In summary, the computer device of the embodiment of the present invention first determines the transit access control to determine the corresponding route to be selected according to the location of the transit access control, then determines the path index of each route to be selected to determine the target access control, and finally generates the permission certificate of the target access control, and sends the permission certificate to the mobile phone client held by the visitor to complete the visitor authorization, which can reduce the security risk of the authorization system.

[0099] The embodiment of the present invention also provides a computer-readable storage medium capable of implementing all the steps in the visitor authorization method in the above embodiment. The computer-readable storage medium stores a computer program. When the computer program is executed by a processor, all the steps of the visitor authorization method in the above embodiment are implemented. For example, when the processor executes the computer program, the following steps are implemented:

[0100] Determine the transit access control according to the historical number of passes through the access control system;

[0101] Determine the routes to be selected corresponding to each transfer gate according to the starting point, the destination point and the location of the transfer gate;

[0102] Determine the path index of each route to be selected according to the distance and access control congestion index corresponding to each route to be selected;

[0103] The access control on the to-be-selected route corresponding to the minimum value of the path index is determined as the target access control, an authorization certificate of the target access control is generated, and the authorization certificate is sent to the mobile client held by the visitor.

[0104] In summary, the computer-readable storage medium of the embodiment of the present invention first determines the transit access control to determine the corresponding route to be selected according to the location of the transit access control, then determines the path index of each route to be selected to determine the target access control, and finally generates the permission certificate of the target access control, and sends the permission certificate to the mobile phone client held by the visitor to complete the visitor authorization, which can reduce the security risk of the authorization system.

[0105] Based on the same inventive concept, an embodiment of the present invention further provides a visitor authorization system. Since the principle of solving the problem by the system is similar to that of the visitor authorization method, the implementation of the system can refer to the implementation of the method, and the repeated parts will not be repeated.

[0106] Figure 6 Schematic diagram of a visitor authorization system in an embodiment of the present invention. Figure 6 As shown, the visitor authorization system includes:

[0107] A visitor authorization device as described above;

[0108] The mobile client is used to receive the authorization certificate from the visitor authorization device.

[0109] Figure 7 FIG. 1 is a schematic diagram of path changes in an embodiment of the present invention. Figure 7 As shown, the present invention can monitor and optimize the visitor path in real time. The visitor authorization device dynamically monitors the effectiveness and rationality of the visitor path plan according to the changes in the start and end of the activity events in the park. If the access control authority on the access path is upgraded to above the visitor authority, the planned path will be invalid. A new path plan will be determined according to the latest activity event, and an authorization certificate will be generated according to the new target access control, and the new authorization certificate will be pushed to the mobile client held by the visitor.

[0110] The present invention can also remind and monitor visitors who deviate from the path. Figure 2As shown in the figure, if a visitor attempts to pass through an unauthorized access control, the visitor authorization device will automatically push a reminder to the visitor to deviate from the path, and re-plan a new path plan with the current unauthorized access control as the starting point and the destination as the end point, and update the visitor's access control permissions. If a visitor attempts to pass through an unauthorized access control more than 3 times, the visitor authorization device will automatically alert the administrator to remind the administrator to pay attention to abnormal behavior.

[0111] Figure 8 1 is a flow chart of adjusting the visitor's destination in an embodiment of the present invention. Figure 8 As shown, when the visitor temporarily adjusts the destination, the visitor authorization device automatically revokes all door access rights of the visitor, sets the visitor's starting position to the person's current location, repeatedly plans a new path plan, calculates the shortest path and authorizes it.

[0112] The specific process of the visitor authorization system of the embodiment of the present invention is as follows:

[0113] 1. The visitor authorization device determines the historical access control based on the starting point, destination point and visitor authority.

[0114] 2. The visitor authorization device sorts the historical pass counts of the historical access control systems in descending order, and determines the historical access control systems corresponding to the historical pass counts before the pass threshold as the transit access control systems.

[0115] 3. The visitor authorization device determines the corresponding front route according to the starting location and the location of the transfer access control.

[0116] 4. The visitor authorization device determines the corresponding subsequent route based on the destination point and the location of the transfer access control.

[0117] 5. The visitor authorization device determines the route to be selected based on the previous route and the next route.

[0118] 6. The visitor authorization device determines the distance corresponding to the route to be selected based on the distance between each door control in the route to be selected.

[0119] 7. The visitor authorization device determines the access control congestion index corresponding to the route to be selected according to the frequency of access to each access control in the route to be selected.

[0120] 8. The visitor authorization device determines the path index of each route to be selected according to the distance corresponding to each route to be selected and the access control congestion index.

[0121] 9. The visitor authorization device determines that the access control on the to-be-selected route corresponding to the minimum value of the path index is the target access control, generates an authorization certificate for the target access control, and sends the authorization certificate to the mobile client held by the visitor.

[0122] 10. The mobile client receives the authorization certificate from the visitor's authorization device.

[0123] In summary, the visitor authorization system of the embodiment of the present invention has the following beneficial effects:

[0124] (1) Fine-grained control of each door access right, allowing positive access control and negative prohibition control of visitors;

[0125] (2) Intelligently match the shortest access path, grant access rights based on the principle of minimum access, and do not authorize irrelevant access control and prohibited access control, significantly reducing security risks;

[0126] (3) Flexibly adjust access destinations and promptly revoke unnecessary permissions.

[0127] The specific embodiments described above further illustrate the objectives, technical solutions and beneficial effects of the present invention in detail. It should be understood that the above description is only a specific embodiment of the present invention and is not intended to limit the scope of protection of the present invention. Any modifications, equivalent substitutions, improvements, etc. made within the spirit and principles of the present invention should be included in the scope of protection of the present invention.

[0128] Those skilled in the art may also understand that the various illustrative logical blocks, units, and steps listed in the embodiments of the present invention may be implemented by electronic hardware, computer software, or a combination of the two. In order to clearly demonstrate the interchangeability of hardware and software, the various illustrative components, units, and steps described above have generally described their functions. Whether such functions are implemented by hardware or software depends on the specific application and the design requirements of the entire system. Those skilled in the art may use various methods to implement the described functions for each specific application, but such implementation should not be understood as exceeding the scope of protection of the embodiments of the present invention.

[0129] The various illustrative logic blocks, or units, or devices described in the embodiments of the present invention can be implemented or operated by a general-purpose processor, a digital signal processor, an application-specific integrated circuit (ASIC), a field programmable gate array or other programmable logic device, a discrete gate or transistor logic, a discrete hardware component, or any combination of the above. The general-purpose processor can be a microprocessor, and optionally, the general-purpose processor can also be any conventional processor, controller, microcontroller or state machine. The processor can also be implemented by a combination of computing devices, such as a digital signal processor and a microprocessor, a plurality of microprocessors, one or more microprocessors combined with a digital signal processor core, or any other similar configuration.

[0130] The steps of the method or algorithm described in the embodiments of the present invention can be directly embedded in hardware, a software module executed by a processor, or a combination of the two. The software module can be stored in a RAM memory, a flash memory, a ROM memory, an EPROM memory, an EEPROM memory, a register, a hard disk, a removable disk, a CD-ROM, or other storage media of any form in the art. Exemplarily, the storage medium can be connected to the processor so that the processor can read information from the storage medium and can write information to the storage medium. Optionally, the storage medium can also be integrated into the processor. The processor and the storage medium can be arranged in an ASIC, and the ASIC can be arranged in a user terminal. Optionally, the processor and the storage medium can also be arranged in different components in the user terminal.

[0131] In one or more exemplary designs, the above functions described in the embodiments of the present invention can be implemented in hardware, software, firmware or any combination of the three. If implemented in software, these functions can be stored on a computer-readable medium, or transmitted in the form of one or more instructions or codes on a computer-readable medium. Computer-readable media include computer storage media and communication media that facilitate the transfer of computer programs from one place to another. The storage medium can be any available medium that can be accessed by any general or special computer. For example, such computer-readable media can include but are not limited to RAM, ROM, EEPROM, CD-ROM or other optical disk storage, disk storage or other magnetic storage devices, or any other medium that can be used to carry or store program codes in the form of instructions or data structures and other forms that can be read by general or special computers, or general or special processors. In addition, any connection can be appropriately defined as a computer-readable medium, for example, if the software is transmitted from a website site, server or other remote resource through a coaxial cable, fiber optic cable, twisted pair, digital subscriber line (DSL) or wirelessly, such as infrared, wireless and microwave, it is also included in the defined computer-readable medium. The disk and disc include compact disk, laser disk, optical disk, DVD, floppy disk and blue-ray disk. Disks usually copy data magnetically, while discs usually copy data optically with lasers. The above combination can also be included in computer readable media.

Claims

1. A visitor authorization method, characterized in that: include: Determine the transit access control according to the historical number of passes through the access control system; Determine the routes to be selected corresponding to each transfer gate according to the starting point, the destination point and the location of the transfer gate; Determine the path index of each route to be selected according to the distance and access control congestion index corresponding to each route to be selected; Determine the access control on the to-be-selected route corresponding to the minimum value of the path index as the target access control, generate an authorization certificate for the target access control, and send the authorization certificate to a mobile client held by the visitor; Determine the transit access control based on the historical number of passes through the access control system, including: Sort the historical travel times from largest to smallest; Determine the historical access control corresponding to the historical pass count ranked before the pass threshold as the transfer access control; The routes to be selected corresponding to each transfer gate are determined based on the starting point, destination point and transfer gate location, including: Determine the corresponding front route according to the starting location and the location of the transfer gate; Determine the corresponding subsequent route according to the destination point and the location of the transfer gate; The route to be selected is determined according to the previous route and the next route.

2. The visitor authorization method according to claim 1, characterized in that: Also includes: The historical access control is determined according to the starting location, the destination point and the visitor's authority.

3. The visitor authorization method according to claim 1, characterized in that: Also includes: The distance corresponding to the route to be selected is determined according to the distance between each gate control in the route to be selected.

4. The visitor authorization method according to claim 1, characterized in that: Also includes: The access control congestion index corresponding to the route to be selected is determined according to the passing frequency of each access control in the route to be selected.

5. A visitor authorization device, characterized in that: include: A transfer access control determination module is used to determine the transfer access control according to the historical number of passes through the access control; The route module to be selected is used to determine the route to be selected corresponding to each transfer gate according to the starting point, the destination point and the location of the transfer gate; A path index module is used to determine the path index of each route to be selected according to the distance and access control congestion index corresponding to each route to be selected; A credential generation module is used to determine the access control on the to-be-selected route corresponding to the minimum value of the path index as the target access control, generate an authority credential for the target access control, and send the authority credential to a mobile client held by the visitor; The transfer access control determination module is specifically used for: Sort the historical travel times from largest to smallest; Determine the historical access control corresponding to the historical pass count ranked before the pass threshold as the transfer access control; The route module to be selected is specifically used for: Determine the corresponding front route according to the starting location and the location of the transfer gate; Determine the corresponding subsequent route according to the destination point and the location of the transfer gate; The route to be selected is determined according to the previous route and the next route.

6. A computer device comprising a memory, a processor, and a computer program stored in the memory and running on the processor, characterized in that: When the processor executes the computer program, the steps of the visitor authorization method according to any one of claims 1 to 4 are implemented.

7. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the steps of the visitor authorization method according to any one of claims 1 to 4 are implemented.

8. A visitor authorization system, characterized in that: include: The visitor authorization device as claimed in claim 5; The mobile client is used to receive the authorization certificate from the visitor authorization device.

Images