A digital certificate access control opening method and corresponding device and system, storage device

Abstract

The present application provides a method for opening a digital certificate access control system, and also provides a corresponding actor terminal device, a digital certificate access control device, and a storage device, and also provides a corresponding system; in the method of the present application, the actor terminal obtains the right to open the digital certificate access control, and then sends an opening application digital certificate to the digital certificate access control system through a public disclosure platform, and the digital certificate access control system verifies the received opening application digital certificate, and if the verification passes, returns the access control opening digital certificate and opens the digital certificate access control system; the entire opening process is performed by the actor terminal submitting the opening application through the public disclosure platform, and the digital certificate access control system is opened after the verification passes, and the opening process is irrevocably publicized by the public disclosure platform, thereby ensuring the security of the opening of the digital certificate access control system and the traceability of the entire process, thereby building a safe and reliable digital certificate access control system.

Description

Technical Field

[0001] The present application relates to the field of digital certificate technology, and specifically to a digital certificate access control opening method, as well as corresponding actor terminal equipment, digital certificate access control equipment, and a digital certificate access control opening system, and a storage device. Background Art

[0002] As the name implies, the entrance and exit access control system is a system for controlling the entrance and exit channels. It is developed on the basis of traditional door locks. Traditional mechanical door locks are just simple mechanical devices. No matter how reasonable the structural design is or how strong the material is, people can always open it by various means. In channels with many people in and out (such as offices and hotel rooms), key management is very troublesome. If the key is lost or the personnel are replaced, the lock and the key must be replaced together. In order to solve these problems, electronic magnetic card locks and electronic password locks have appeared. The emergence of these two locks has improved people's management of entrance and exit channels to a certain extent, and channel management has entered the electronic age. However, with the continuous application of these two electronic locks, their own defects have gradually been exposed. The problem with magnetic card locks is that information is easy to copy, there is a lot of wear between the card and the card reader, the failure rate is high, and the safety factor is low. The problem with password locks is that the password is easy to leak and there is no way to check it, so the safety factor is very low. At the same time, since most of the products of this period use the card reader part (password input) and the control part installed outside the door, it is easy for people to open the lock outdoors. The access control system during this period was still in its early and immature stage, so the access control system at that time was usually called an electronic lock and was not widely used.

[0003] Digital certificate is a term in the field of information technology. The goal of the digital certificate platform is to have a non-differential public disclosure mechanism and take the route of universal currency. It is a shared database, and the data or information stored in it has the characteristics of "unforgeable", "full traceability", "traceability", "openness and transparency", and "collective maintenance". In recent years, with the continuous development and maturity of the technology of unalterable digital certificates, the security of the access control system is in urgent need of a new technical improvement to meet the security of the unalterable digital certificate behavior of the access control system in many high-value places. Summary of the invention

[0004] The purpose of this application is to solve the problems that the existing access control system is easy to crack, has a low security factor, and is difficult to trace. This application provides a digital certificate access control opening method, and also provides corresponding actor terminal equipment, digital certificate access control equipment, and a digital certificate-based access control opening system, as well as a storage device.

[0005] In order to solve the above technical problems, the present application provides a digital certificate access control method, which is suitable for execution in a computing device, and includes:

[0006] The terminal of the actor obtains the right to open the digital certificate access control through the terminal of the right holder;

[0007] The opening application digital certificate is sent to the digital certificate access control through the public disclosure platform and the opening application digital certificate is publicized by the public disclosure platform. The opening application digital certificate includes the access control ID and its public key, the actor's terminal ID and its public key, and the opening request, and is signed with the private key of the actor's terminal, and the opening application digital certificate is verified by the digital certificate access control;

[0008] After receiving the access control digital certificate returned by the public announcement platform after the digital certificate access control verifies the access control application digital certificate, the access control digital certificate is publicized by the public announcement platform. The access control digital certificate includes: access control ID and public key, actor terminal ID and public key, access control opening event and opening time, and is signed with the private key of this digital certificate access control;

[0009] Enable digital certificate access control.

[0010] Furthermore, the step of obtaining the right to open the digital certificate access control through the right holder terminal includes:

[0011] Submit a digital certificate for applying for access control rights to the rights holder's terminal through the public disclosure platform. The digital certificate for applying for access control rights includes the terminal ID and the corresponding public key of the actor, the access control ID and the corresponding public key, and is signed with the private key of the actor's terminal;

[0012] After receiving the digital certificate of the digital certificate access control opening rights application, the digital certificate of approval to become the rights holder is returned through the public announcement platform. The digital certificate of approval to become the rights holder is announced by the public announcement platform. The digital certificate of approval to become the rights holder includes the ID and public key corresponding to the terminal of the actor, the access control ID and the corresponding public key, the ID and public key corresponding to the rights holder terminal, the authorization to open the access control rights scope, and is signed with the private key corresponding to the terminal of the rights holder;

[0013] Obtain the right to open digital certificate access control.

[0014] Furthermore, before the step of submitting the digital certificate access control opening right application digital certificate to the rights holder terminal through the public disclosure platform, the step also includes:

[0015] The actor's terminal submits a digital certificate access control opening rights application to the rights holder's terminal through the public disclosure platform, and the application includes the actor's terminal ID and opening rights.

[0016] In order to solve the above technical problems, the present application also provides a digital certificate access control opening method, which is suitable for execution in a computing device, and includes:

[0017] The digital certificate access control receives the opening application digital certificate sent by the actor's terminal through the public announcement platform, and the opening application digital certificate is publicized on the public announcement platform. The opening application digital certificate includes the access control ID and its public key, the actor's terminal ID and its public key, and the opening request, and is signed with the private key of the actor's terminal;

[0018] Verifying the opening application digital certificate;

[0019] If the verification is successful, the access control digital certificate is returned to the actor's terminal through the public display platform, and the access control digital certificate is publicized on the public display platform. The access control digital certificate includes: access control ID and public key, actor's terminal ID and public key, access control opening event and opening time, and is signed with the private key of the digital certificate access control;

[0020] Open this digital certificate access control.

[0021] Furthermore, the step of verifying the digital certificate for opening the application includes:

[0022] According to the terminal ID and public key of the actor carried in the digital certificate for opening application, search whether there is a door opening rights holder corresponding to the actor's terminal ID in the rights tree of the local access control of this digital certificate, and the corresponding rights scope;

[0023] If the retrieved actor's terminal ID is the person who has the right to open the door and is within the scope of rights, the verification is successful.

[0024] Furthermore, after the step of verifying the digital certificate for opening the application, the following steps may also be performed:

[0025] If the verification fails, a digital certificate access control intrusion digital certificate is generated, which includes the access control ID and public key, the actor's terminal ID and public key, the access control intrusion event and the access control intrusion time, and is signed with the private key of this digital certificate access control;

[0026] The access control intrusion digital certificate is sent to a public disclosure platform for public disclosure.

[0027] In order to solve the above technical problems, the present application also provides a storage device, which stores multiple instructions, and the instructions are suitable for being loaded and executed by the processor such as the instructions executed by the actor terminal in the aforementioned digital certificate access control opening method; or the instructions are suitable for being loaded and executed by the processor such as the instructions executed by the digital certificate access control in the aforementioned digital certificate access control opening method.

[0028] In order to solve the above technical problems, the present application also provides a terminal device of an actor, including:

[0029] a processor adapted to implement the instructions; and

[0030] A storage device is suitable for storing multiple instructions, and the instructions are suitable for being loaded and executed by a processor such as the instructions executed by the actor's terminal in the aforementioned digital certificate access control opening method.

[0031] In order to solve the above technical problems, the present application also provides a digital certificate access control device, including:

[0032] a processor adapted to implement the instructions; and

[0033] A storage device is suitable for storing a plurality of instructions, wherein the instructions are suitable for being loaded and executed by a processor such as the instructions executed by the digital certificate access control in the aforementioned digital certificate access control opening method.

[0034] In order to solve the above technical problems, the present application also provides a digital certificate access control opening system, which includes:

[0035] The actor terminal as mentioned above, the digital certificate access control as mentioned above, as well as the public disclosure platform and the rights holder terminal;

[0036] The disclosure platform is used to disclose the digital certificate of access application submitted by the actor's terminal. The digital certificate of access application includes the access control ID and its public key, the actor's terminal ID and its public key, and the access request, and is signed with the private key of the actor's terminal; disclose the access control digital certificate submitted by the digital certificate access control. The access control digital certificate includes: the access control ID and public key, the actor's terminal ID and public key, the access control access event and the access time, and is signed with the private key of the digital certificate access control, and the access control digital certificate is sent to the actor's terminal.

[0037] The digital certificate access control opening method provided in the present application obtains the right to open the digital certificate access control, and then sends the opening application digital certificate to the digital certificate access control through the public disclosure platform, wherein the digital certificate is publicized by the public disclosure platform, and the digital certificate access control verifies the received opening application digital certificate. If the verification passes, the access control opening digital certificate is publicized and returned through the public disclosure platform, and the digital certificate access control is opened, thereby completing the opening of the digital certificate; the entire opening process is completed by the actor's terminal submitting the opening application through the public disclosure platform, and the digital certificate access control is opened after the verification is passed, and the opening process is irrevocably publicized by the public disclosure platform, thereby ensuring the security of the digital certificate access control opening and the traceability of the entire process, thereby building a safe and reliable digital certificate access control system.

[0038] The above description is only an overview of the technical solution of the present application. In order to more clearly understand the technical means of the present application, it can be implemented in accordance with the contents of the specification. In order to make the above and other purposes, features and advantages of the present application more obvious and easy to understand, the following specifically cites the preferred embodiments and describes them in detail with the accompanying drawings. BRIEF DESCRIPTION OF THE DRAWINGS

[0039] Figure 1 A data flow diagram of a digital certificate access control opening method provided in an embodiment of the present application.

[0040] Figure 2 Another data flow diagram of a digital certificate access control opening method is provided for an embodiment of the present application.

[0041] Figure 3 A schematic diagram of the logical structure of a terminal device of an actor provided in an embodiment of the present application.

[0042] Figure 4 A schematic diagram of the logical structure of a digital certificate access control device provided in an embodiment of the present application.

[0043] Figure 5 A schematic diagram of the logical structure of a digital certificate access control system provided in an embodiment of the present application. DETAILED DESCRIPTION

[0044] In order to further explain the technical means and effects adopted by the present application to achieve the intended application purpose, the present application is described in detail below in conjunction with the accompanying drawings and preferred embodiments.

[0045] Through the description of the specific implementation methods, a deeper and more specific understanding can be obtained of the technical means and effects adopted by the present application to achieve the predetermined purpose. However, the attached drawings are only for reference and illustration purposes and are not used to limit the present application.

[0046] Embodiment 1:

[0047] See also Figure 1 , an embodiment of the digital certificate access control opening method of the present invention includes:

[0048] 101. The terminal of the actor obtains the right to open the digital certificate access control through the terminal of the right holder;

[0049] When an actor, such as a temporary opener of a door access control system, an employee of a company, etc., needs to open an electronic certificate door access control system, he or she must first apply to the authorized rights holder for the right to open the digital certificate door access control system. The actor applies to the rights holder terminal through the actor terminal. The digital certificate in the application process is publicized through the public disclosure platform to form a record that cannot be tampered with.

[0050] 102. Send an application for a digital certificate to the digital certificate access control system through the public disclosure platform, and the public disclosure platform will publicize the digital certificate;

[0051] After the actor obtains the right to open the digital certificate access control, he / she will send the opening application digital certificate to the digital certificate access control through the public disclosure platform. The digital certificate includes the access control ID and its public key, the actor's terminal ID and its public key, the opening request, and is signed with the private key of the actor's terminal; and the opening application digital certificate is publicly disclosed on the public disclosure platform.

[0052] 103. After the digital certificate access control verification is passed, the access control opening digital certificate returned through the public announcement platform is received, and the digital certificate is publicized by the public announcement platform;

[0053] After receiving the digital certificate of the opening application sent by the public announcement platform, the digital certificate will be verified. If the verification is successful, the digital certificate of the opening of the access control will be returned to the terminal of the actor through the public announcement platform. The digital certificate includes: the access control ID and public key, the actor's terminal ID and public key, the access control opening event and the opening time, and is signed with the private key of this digital certificate access control; the public announcement platform will publicize the digital certificate of the opening of the access control;

[0054] At the same time, the digital certificate access control side and the public announcement platform will record the access control opening request event of the actor's terminal, and the public announcement platform will notify the beneficiary terminal of the access control opening request event;

[0055] 104. Enable digital certificate access control;

[0056] Digital Certificate Access Control Enable digital certificate access control.

[0057] In the method provided in this embodiment, the actor's terminal obtains the right to open the digital certificate access control, and then sends the opening application digital certificate to the digital certificate access control through the public disclosure platform, wherein the digital certificate is publicized by the public disclosure platform, and the digital certificate access control verifies the received opening application digital certificate. If the verification passes, the access control opening digital certificate is publicized and returned through the public disclosure platform, and the digital certificate access control is opened, thereby completing the opening of the digital certificate access control; the entire opening process is completed by the actor's terminal submitting the opening application through the public disclosure platform, and the digital certificate access control is opened after verification, and the opening process is irrevocably publicized by the public disclosure platform, thereby ensuring the security of the opening of the digital certificate access control and the traceability of the entire process, thereby building a safe and reliable digital certificate access control system.

[0058] Embodiment 2:

[0059] Please refer to Figure 2 Another embodiment of the digital certificate access control method of the present invention includes:

[0060] When an actor, such as a temporary opener of a door access control system, an employee of a company, etc., needs to open an electronic certificate door access control system, he or she must first apply to the authorized rights holder for the right to open the digital certificate door access control system. The actor applies to the rights holder terminal through the actor terminal. The digital certificate in the application process is publicized through the public disclosure platform to form a record that cannot be tampered with.

[0061] 201. Submit application for digital certificate access control rights;

[0062] The user's terminal submits a digital certificate access control rights and interests application to the public disclosure platform, where the application includes the user's terminal ID and the rights and interests to be opened;

[0063] 202. The public announcement platform receives and forwards the application for the right to open the digital certificate access control system;

[0064] 203. Submit digital certificate to apply for digital certificate for access control rights;

[0065] The terminal of the actor submits a digital certificate to the public disclosure platform to apply for a digital certificate for the right to open the access control system. The digital certificate includes the actor's terminal ID and the corresponding public key, the access control ID and the corresponding public key, and is signed with the private key of the actor's terminal;

[0066] 204. The public announcement platform receives and announces the digital certificate for applying for digital certificate access control rights and interests;

[0067] 205. The public announcement platform sends the digital certificate for applying for digital certificate access control rights to the rights holder's terminal;

[0068] 206. Verify the digital certificate access control to open the rights and interests to apply for a digital certificate;

[0069] The rights holder receives the digital certificate of the digital certificate access control opening rights application submitted by the actor's terminal, and verifies the digital certificate. Specifically: determine whether the actor's terminal ID is in the local rights tree. If it is in the local rights tree, then determine whether the rights corresponding to the actor's terminal ID match, such as whether it is currently in the time period for opening the digital certificate access control. If so, then determine whether the private key that signs the digital certificate corresponds to the public key carried by the digital certificate. If they correspond, the verification is successful; if the verification is successful, a digital certificate is generated to approve the rights holder, where the aforementioned digital certificate includes: access control ID and public key, actor's terminal ID and public key, rights holder terminal ID and public key, authorization to open access control rights scope, and signed with the private key of the digital certificate access control;

[0070] 207. Send the digital certificate of approval to become the rights holder to the public disclosure platform;

[0071] 208. Publicity platform publicizes the digital certificate of approval to become the rights holder;

[0072] The rights holder terminal sends a digital certificate approving the right holder to the public announcement platform. The public announcement platform publicizes the digital certificate, updates the rights tree corresponding to the access control ID, and adds the terminal ID and the corresponding public key of the actor to the rights tree node;

[0073] Furthermore, the public announcement platform sends the rights tree update notification to the digital certificate access control and the rights holder terminal, and the digital certificate access control and the rights holder terminal update the local rights tree after receiving it; of course, the rights holder terminal can also update the local rights tree when generating and sending the digital certificate of approval to become the rights holder to the public announcement platform, which is not limited here;

[0074] 209. The public announcement platform will send the digital certificate of approval to the rights holder to the terminal of the actor;

[0075] The public announcement platform will send the digital certificate of the approved rights holder to the terminal of the actor, so that the terminal of the actor has the right to open the digital certificate access control; the actor has the right to open the corresponding digital certificate access control within the scope of the rights;

[0076] 210. Send the application for opening digital certificate to the public disclosure platform;

[0077] The terminal of the actor sends the opening application digital certificate to the public disclosure platform. The digital certificate includes the access control ID and its public key, the terminal ID of the actor and its public key, the opening request, and is signed with the private key of the terminal of the actor;

[0078] 211. The public announcement platform is open for application of digital certificates;

[0079] 212. The public announcement platform will open the application for digital certificates and send them to the digital certificate access control;

[0080] 213. Verify and start applying for digital certificate;

[0081] After receiving the opening application digital certificate, the digital certificate is verified. Specifically, according to the terminal ID and public key of the actor carried in the digital certificate, the local rights and interests tree of the digital certificate access control is searched to see whether there is a door opening rights holder corresponding to the actor's terminal ID, and the corresponding rights and interests range. For example, if the actor's terminal ID is retrieved as the door opening rights holder, and the rights and interests range is stipulated as the digital certificate access control can be opened from 9:00 to 18:00 every morning, if the current time is within the rights and interests range, the verification is passed;

[0082] 214. If the verification is successful, the access control is opened and the access control opening digital certificate is returned;

[0083] If the verification is successful, the access control will be opened; and a digital certificate for access control opening will be generated, which includes: the access control ID and public key, the actor's terminal ID and public key, the access control opening event and opening time, and is signed with the private key of the digital certificate access control, and the digital certificate is sent to the public display platform;

[0084] 215. The public announcement platform receives the access control opening digital certificate and makes it public;

[0085] 216. If the verification fails, a door intrusion digital certificate is generated;

[0086] If the digital certificate access control verifies the digital certificate for opening the application, and the verification result is that the actor's terminal ID cannot be retrieved in the local rights tree, or exceeds the corresponding rights range, for example, the actor's terminal ID is retrieved as the access control opening rights holder, and the rights range is stipulated that the digital certificate access control can be opened from 9:00 to 18:00 every morning, but the current time is not within the rights range, then the verification fails; generate a digital certificate for access control intrusion, the digital certificate includes the access control ID and public key, the actor's terminal ID and public key, the access control intrusion event and the intrusion time, and is signed with the private key of the digital certificate access control, and the digital certificate is sent to the public announcement platform;

[0087] 217. The public announcement platform receives the access control intrusion digital certificate and makes it public;

[0088] The public disclosure platform receives the access control intrusion digital certificate and makes it public, and records the intrusion event;

[0089] 218. Send the access control intrusion digital certificate to the rights holder terminal for alarm;

[0090] The public disclosure platform sends the access control intrusion digital certificate to the beneficiary terminal to alarm. The beneficiary terminal will be aware of all relevant contents of the intrusion incident in a timely manner and can handle it in a timely manner.

[0091] In this embodiment, the actor's terminal obtains the right to open the digital certificate access control, and then sends the opening application digital certificate to the digital certificate access control through the public disclosure platform, where the digital certificate is publicized by the public disclosure platform, and the digital certificate access control verifies the received opening application digital certificate. If the verification passes, the access control opening digital certificate is publicized and returned through the public disclosure platform, and the digital certificate access control is opened, thereby completing the opening of the digital certificate access control; the entire opening process is completed by the actor's terminal submitting the opening application through the public disclosure platform, and the digital certificate access control is opened after verification, and the opening process is irrevocably publicized by the public disclosure platform, thereby ensuring the security of the opening of the digital certificate access control and the traceability of the entire process, thereby building a safe and reliable digital certificate access control system.

[0092] Embodiment three:

[0093] The storage device in this embodiment stores a plurality of instructions, which are suitable for being loaded and executed by the processor. Figure 1 and Figure 2 The instructions, specific execution process and beneficial effects can be found in the aforementioned embodiments and will not be elaborated here.

[0094] Embodiment 4:

[0095] See also Figure 3 , the terminal device of the actor in this embodiment includes:

[0096] A processor 301 adapted to implement each instruction; and

[0097] The storage device 302 is adapted to store a plurality of instructions, which are adapted to be loaded and executed by the processor. Figure 1 and Figure 2 The instructions, specific execution process and beneficial effects can be found in the aforementioned embodiments and will not be elaborated here.

[0098] Embodiment five:

[0099] See also Figure 4 , the digital certificate access control device in this embodiment includes:

[0100] A processor 401 adapted to implement each instruction; and

[0101] The storage device 402 is adapted to store a plurality of instructions, which are adapted to be loaded and executed by the processor. Figure 1 and Figure 2 The instructions, specific execution process and beneficial effects can be found in the aforementioned embodiments and will not be elaborated here.

[0102] Embodiment six:

[0103] See also Figure 5 The digital certificate access control system in this embodiment includes:

[0104] As mentioned above, the terminal device 501 of the actor, the terminal device 502 of the rights holder, the digital certificate access control device 503, and the public display platform 504 as mentioned above, wherein the terminal device of the actor, the terminal device of the rights holder, the digital certificate access control device and the public display platform are connected to each other in data. The data interaction process and beneficial effects between them can be referred to in the above embodiment, which will not be repeated here.

[0105] The above is only a preferred embodiment of the present application and does not constitute any form of limitation to the present application. Although the present application has been disclosed as a preferred embodiment as above, it is not intended to limit the present application. Any technician familiar with the profession can make some changes or modifications to equivalent embodiments of the technical contents disclosed above without departing from the scope of the technical solution of the present application. However, any simple modification, equivalent change and modification made to the above embodiments based on the technical essence of the present application without departing from the content of the technical solution of the present application are still within the scope of the technical solution of the present application.

Claims

1. A digital certificate access control method, the method is suitable for execution in a computing device, characterized in that: The method comprises: The terminal of the actor obtains the right to open the digital certificate access control through the terminal of the right holder; The opening application digital certificate is sent to the digital certificate access control through the public disclosure platform and the opening application digital certificate is publicized by the public disclosure platform. The opening application digital certificate includes the access control ID and its public key, the actor's terminal ID and its public key, and the opening request, and is signed with the private key of the actor's terminal, and the opening application digital certificate is verified by the digital certificate access control; After receiving the access control digital certificate returned by the public announcement platform after the digital certificate access control verifies the access control application digital certificate, the access control digital certificate is publicized by the public announcement platform. The access control digital certificate includes: access control ID and its public key, the actor's terminal ID and its public key, the access control opening event and its opening time, and is signed with the private key of this digital certificate access control; Enable digital certificate access control.

2. The method according to claim 1, characterized in that The step of obtaining the right to open the digital certificate access control through the right holder terminal includes: Submit a digital certificate for applying for access control rights to the rights holder's terminal through the public disclosure platform. The digital certificate for applying for access control rights includes the terminal ID and the corresponding public key of the actor, the access control ID and the corresponding public key, and is signed with the private key of the actor's terminal; After receiving the digital certificate of the digital certificate access control opening rights application, the digital certificate of approval to become the rights holder is returned through the public announcement platform. The digital certificate of approval to become the rights holder is announced by the public announcement platform. The digital certificate of approval to become the rights holder includes the ID and public key corresponding to the terminal of the actor, the access control ID and the corresponding public key, the ID and public key corresponding to the rights holder terminal, the authorization to open the access control rights scope, and is signed with the private key corresponding to the terminal of the rights holder; Get the right to open digital certificate access control.

3. The method according to claim 2, characterized in that Before the step of submitting the digital certificate access control opening rights application digital certificate to the rights holder terminal through the public announcement platform, the following steps are also included: The actor's terminal submits a digital certificate access control opening rights application to the rights holder's terminal through the public disclosure platform, and the application includes the actor's terminal ID and opening rights.

4. A digital certificate access control method, the method is suitable for execution in a computing device, characterized in that: The method comprises: The digital certificate access control receives the opening application digital certificate sent by the actor's terminal through the public announcement platform, and the opening application digital certificate is publicized on the public announcement platform. The opening application digital certificate includes the access control ID and its public key, the actor's terminal ID and its public key, and the opening request, and is signed with the private key of the actor's terminal; Verifying the opening application digital certificate; If the verification is successful, the access control digital certificate is returned to the actor's terminal through the public display platform, and the access control digital certificate is publicized on the public display platform. The access control digital certificate includes: access control ID and its public key, actor's terminal ID and its public key, access control opening event and its opening time, and is signed with the private key of this digital certificate access control; Open this digital certificate access control.

5. The method according to claim 4, characterized in that The step of verifying the digital certificate for opening the application includes: According to the terminal ID and public key of the actor carried in the digital certificate for opening application, search whether there is a door opening rights holder corresponding to the actor's terminal ID in the rights tree of the local access control of this digital certificate, and the corresponding rights scope; If the retrieved actor's terminal ID is the person who has the right to open the door and is within the scope of rights, the verification is successful.

6. The method according to claim 5, characterized in that The step of verifying the digital certificate for opening the application also includes: If the verification fails, a digital certificate access control intrusion digital certificate is generated, which includes the access control ID and its public key, the actor's terminal ID and its public key, the access control intrusion event and the access control intrusion time, and is signed with the private key of this digital certificate access control; The digital certificate access control intrusion digital certificate is sent to a public disclosure platform for public disclosure.

7. A storage device storing a plurality of instructions, characterized in that: The instruction is suitable for being loaded by a processor and executing the instruction according to any one of claims 1 to 3; or the instruction is suitable for being loaded by a processor and executing the instruction according to any one of claims 4 to 6.

8. A terminal device of an actor, characterized in that: include: a processor adapted to implement the instructions; as well as A storage device, adapted to store a plurality of instructions, wherein the instructions are adapted to be loaded by a processor and executed as described in any one of claims 1 to 3.

9. A digital certificate access control device, characterized in that: include: a processor adapted to implement the instructions; as well as A storage device, adapted to store a plurality of instructions, wherein the instructions are adapted to be loaded and executed by a processor as described in any one of claims 4 to 6.

10. A digital certificate access control system, characterized in that: The system comprises: The actor terminal device as claimed in claim 8, the digital certificate access control device as claimed in claim 9, as well as the public disclosure platform and the rights holder terminal; The disclosure platform is used to disclose the digital certificate of access application submitted by the terminal device of the actor. The digital certificate of access application includes the access control ID and its public key, the terminal ID and its public key of the actor, and the access request, and is signed with the private key of the terminal device of the actor; disclose the access control digital certificate submitted by the digital certificate access control device. The access control digital certificate includes: the access control ID and its public key, the terminal ID and its public key of the actor, the access control access event and its access time, and is signed with the private key of the digital certificate access control, and the access control digital certificate is sent to the terminal of the actor.

Images