Personnel access verification and access methods, systems, electronic devices and media
By setting up multiple roles and permissions, combined with facial recognition and other technologies, the unified management of internal and external personnel access management is achieved, and the problems of low efficiency and safety hazards of external personnel access management in the existing technology are solved, operating costs are reduced, and data is realized Closed-loop management.
Patent Information
- Application Number
- CN202210214381.8
- Authority / Receiving Office
- CN · China
- Patent Type
- Patents(China)
- Current Assignee / Owner
- Filing Date
- 2022-03-04
- Publication Date
- 2025-01-10
- Estimated Expiration
- 2042-03-04
AI Technical Summary
The existing technology lacks digital closed-loop management in personnel entry and exit management, resulting in low efficiency of external personnel entry and exit management and high safety risks, and the management systems of different types of units are not interoperable, which increases operating costs and difficulties.
A method of identity verification and passing through personnel entry and exit is proposed. By setting up multiple roles and corresponding permissions, the integration and unity of internal personnel and external personnel entry and exit management is achieved, and face recognition, fingerprint recognition, IC card swiping, QR code recognition and other methods are adopted. Perform identity verification, and collaborate between the server and the client to realize appointment access audit and identity verification, regularly update visitor information, manage people who have not left the site and join the blacklist.
It has achieved the unified management of internal and external personnel, improved management effect, reduced management costs, realized data-based closed-loop management, and improved security and traceability of incoming and outgoing data.
Smart Images

Figure CN114926927B_ABST
Abstract
Description
Technical Field
[0001] The present invention relates to the field of computer technology, and in particular to a method, system, electronic equipment and medium for checking and passing the identity of personnel entering and leaving the premises. Background Art
[0002] The access management of personnel in enterprises, units and communities has been a hot development area in recent years, and it is also one of the key points of security management in many occasions. For a long time, many units still use simple manual paper visitor registration, but the visitor management method of the doorman contacting the visitor by phone can no longer meet the needs of digital development. In addition, all enterprises and units need to strengthen the safe access management of personnel. Summary of the invention
[0003] The present invention aims to solve at least one of the technical problems existing in the prior art. To this end, the present invention proposes a personnel entry and exit identity verification and passage method, system, electronic equipment and medium, which can improve management effect, reduce management cost and realize digital closed-loop management.
[0004] On the one hand, an embodiment of the present invention provides a method for personnel entry and exit identity verification and passage, which is used on a server side and includes the following steps: setting personnel information, a role corresponding to the personnel information, and permissions corresponding to the role; the roles include at least a first role and a second role; in response to a login request sent by a first client and a second client, according to the personnel information in the login request, determining that the role of the first client is the first role and the role of the second client is the second role, and returning the first role information to the first client, and returning the second role information to the second client, so that the second client collects the first verification information or the second verification information; in response to receiving the first verification information collected and sent by the second client, performing identity verification on the first role, and feeding back the identity verification result to the second client, so that the second client Determine whether to pass according to the identity verification result; in response to receiving the appointment access information sent by the third client, match the corresponding first role according to the visitee information in the appointment access information, and send the appointment access review information to the first client corresponding to the first role, so that the appointment access review page of the first role information of the first client displays the appointment access review information; if the first client feeds back the review pass information, send the review pass information to the third client, so that the third client performs identity verification according to the second verification information in the review pass information; in response to receiving the second verification information collected and sent by the second client, perform identity verification on the visitor corresponding to the first role, and feed back the identity verification result to the second client, so that the second client determines whether to pass according to the identity verification result.
[0005] According to some embodiments of the present invention, the permissions of the first role are divided into first permissions and second permissions; the response to receiving the first verification information collected and sent by the second client, performing an identity check on the first role, and feeding back the identity check result to the second client includes: matching the corresponding permission of the first role according to the first verification information, if the permission is the first permission, performing an identity check on the first role, and feeding back the identity check result to the second client; if the permission is the second permission, obtaining the current date and time, and judging whether the current date and time are within the range of the pass date and the pass time according to the pass date and the pass time corresponding to the second permission; if so, performing an identity check on the first role, and feeding back the identity check result to the second client; if not, determining that the identity check result is a check failure, and feeding back the identity check result to the second client.
[0006] According to some embodiments of the present invention, the appointment access information includes visitor identity information; the response to receiving the second verification information collected and sent by the second client, performing an identity check on the visitor corresponding to the first role, and feeding back the identity check result to the second client includes: receiving the second verification information, and obtaining the visitor identity information; performing an identity check based on the second verification information and the visitor identity information, and if they match, feeding back a result of the identity check passed to the second client.
[0007] According to some embodiments of the present invention, the appointment visit information includes: identity authentication information, visitee information, entry time, exit time and review information; the method also includes: performing identity verification on the visitor corresponding to the first role and obtaining visitor information based on the appointment visit information and actual entry time after the identity verification passes; receiving the actual departure time of the visitor sent by the second client, and updating the visitor information based on the actual departure time; regularly obtaining the visitor information, and determining whether there is a visitor who has not left the site before the departure time based on the current date and time; if so, sending an exit reminder message to the third client or the first client corresponding to the visitee information.
[0008] According to some embodiments of the present invention, the method further includes: obtaining identity authentication information of visitors who have failed to leave on time for multiple times based on the visitor information; and adding the identity authentication information to a blacklist.
[0009] According to some embodiments of the present invention, before receiving the appointment access information sent by the third client, the method also includes: receiving customized setting information of the appointment access page sent by the first client; in response to the access request sent by the third client, generating an appointment access page according to the customized setting information of the appointment access page, and feeding back the appointment access page to the third client; the appointment access page includes a customized visitor information form, a visited information form and an epidemic prevention and control form.
[0010] On the other hand, an embodiment of the present invention provides a method for identity verification and passage of personnel entering and exiting, which is used for a first client and includes the following steps: sending a login request to a server, the login request including personnel information; receiving first role information returned by the server, the first role information including an appointment access review page; receiving appointment access review information sent by the server and displaying it on the appointment access review page; responding to user operations on the appointment access review page, determining whether the review is passed, and if the review is passed, sending review pass information to the server.
[0011] According to some embodiments of the present invention, the method also includes: customizing the appointment access page to obtain customized setting information of the appointment access page; the customized appointment access page includes a customized visitor information form, a visited information form and an epidemic prevention and control form, as well as required items of the customized setting form; and sending the customized setting information of the appointment access page to the server.
[0012] According to some embodiments of the present invention, the appointment access review information includes epidemic prevention and control information; the method further includes: determining whether there is a risk based on the epidemic prevention and control information; if so, displaying epidemic warning information.
[0013] On the other hand, an embodiment of the present invention provides a method for identity verification and passage of personnel entering and exiting, which is used for a second client and includes the following steps: sending a login request to a server, the login request including personnel information; receiving second role information returned by the server, the second role information including an identity verification page; collecting first verification information or second verification information by operating the identity verification page, and sending the first verification information or the second verification information to a server so that the server performs an identity verification; receiving the identity verification result sent by the server, and determining whether to pass based on the identity verification result.
[0014] On the other hand, an embodiment of the present invention provides a method for identity verification and passage of personnel entering and exiting, which is used for a third client and includes the following steps: obtaining an appointment access page; obtaining appointment access information in response to user operations on the appointment access page; sending the appointment access information to a server; and receiving the review pass information sent by the server.
[0015] On the other hand, an embodiment of the present invention provides a personnel entry and exit identity verification and passage system, including: a personnel information module, used to set personnel information, roles corresponding to the personnel information, and permissions corresponding to the roles; the roles include at least a first role and a second role; a login module, used to respond to login requests sent by a first client and a second client, determine that the role of the first client is the first role, and the role of the second client is the second role according to the personnel information in the login request, and return the first role information to the first client, and return the second role information to the second client, so that the second client collects the first verification information or the second verification information; a first identity verification module, used to respond to the receipt of the first verification information collected and sent by the second client, perform identity verification on the first role, and feedback the identity verification result to the second client, so that the second client can verify the identity of the first role according to the identity verification information The access control module is used to determine whether to pass based on the verification result of the first verification; an appointment access module is used to respond to the appointment access information sent by the third client, match the corresponding first role according to the visitee information in the appointment access information, and send the appointment access verification information to the first client corresponding to the first role, so that the appointment access verification page of the first role information of the first client displays the appointment access verification information; an audit pass module is used to send the audit pass information to the third client if the first client feeds back the audit pass information, so that the third client performs identity verification according to the second verification information in the audit pass information; a second identity verification module is used to respond to the second verification information collected and sent by the second client, perform identity verification on the visitor corresponding to the first role, and feed back the identity verification result to the second client, so that the second client determines whether to pass based on the identity verification result.
[0016] Another aspect of an embodiment of the present invention provides an electronic device, including a processor and a memory; the memory is used to store a program; the processor executes the program to implement the method described above.
[0017] Another aspect of the embodiments of the present invention provides a computer-readable storage medium having a computer program stored thereon. When the computer program is executed by a processor, the method described above is implemented.
[0018] The embodiments of the present invention achieve at least the following beneficial effects: the embodiments of the present invention realize the integration and unification of multiple scenarios of entry and exit management of internal and external personnel by setting multiple roles and corresponding different entry and exit permissions, and setting up an appointment access service, and realizes both differentiated management and unified management for different types of personnel. Compared with the methods of the prior art, the management effect is improved, the management cost is reduced, and digital closed-loop management is realized.
[0019] Additional aspects and advantages of the present invention will be given in part in the following description and in part will be obvious from the following description, or will be learned through practice of the present invention. BRIEF DESCRIPTION OF THE DRAWINGS
[0020] The above and / or additional aspects and advantages of the present invention will become apparent and easily understood from the description of the embodiments in conjunction with the following drawings, in which:
[0021] Figure 1 A schematic block diagram of the structure of a system according to an embodiment of the present invention;
[0022] Figure 2 A schematic diagram of a flow chart of a method for a server according to an embodiment of the present invention;
[0023] Figure 3 Schematic diagram of a sub-flow of step S300 of the method for the server according to an embodiment of the present invention;
[0024] Figure 4 A schematic diagram of a sub-flow chart of step S600 of the method for the server according to an embodiment of the present invention;
[0025] Figure 5 A schematic diagram of a sub-flow diagram of a method for a server according to another embodiment of the present invention;
[0026] Figure 6 A schematic diagram of a sub-flow diagram of a method for a server according to another embodiment of the present invention;
[0027] Figure 7 A schematic diagram of a sub-flow diagram of a method for a server according to another embodiment of the present invention;
[0028] Figure 8 is a flow chart of a method for a first client according to an embodiment of the present invention;
[0029] Fig. 9 A schematic diagram of a sub-flow chart of a method for a first client according to another embodiment of the present invention;
[0030] Fig.10 A schematic diagram of a sub-flow chart of a method for a first client according to another embodiment of the present invention;
[0031] Fig.11 is a flow chart of a method for a second client according to an embodiment of the present invention;
[0032] Fig.12 is a flow chart of a method for a third client according to an embodiment of the present invention;
[0033] Fig.13A schematic block diagram of modules of a system according to another embodiment of the present invention;
[0034] Fig.14 A flowchart of a method applied to employees and visitors according to another embodiment of the present invention;
[0035] Fig.15 A flowchart of a method applied to food delivery personnel according to another embodiment of the present invention;
[0036] Fig.16 The present invention is a schematic block diagram of modules of an electronic device according to an embodiment of the present invention. DETAILED DESCRIPTION
[0037] Embodiments of the present invention are described in detail below, examples of which are shown in the accompanying drawings, wherein the same or similar reference numerals throughout represent the same or similar elements or elements having the same or similar functions. The embodiments described below with reference to the accompanying drawings are exemplary and are only used to explain the present invention, and cannot be understood as limiting the present invention.
[0038] In the description of the present invention, "several" means one or more, "more" means two or more, "greater than", "less than", "exceed" etc. are understood as not including the number itself, and "above", "below", "within" etc. are understood as including the number itself. If there is a description of "first" or "second", it is only used for the purpose of distinguishing the technical features, and cannot be understood as indicating or implying the relative importance or implicitly indicating the number of the indicated technical features or implicitly indicating the order of the indicated technical features.
[0039] The following describes the application of access control in the current technical environment for scenarios such as enterprises, office buildings, and schools.
[0040] There are many employees in the enterprise park, and the flow of people in and out is large during the working hours every day. Most enterprises install gates at the entrances and exits, and employees enter the enterprise by swiping IC cards through the gates. Some enterprises use facial recognition instead of swiping cards, and enter the photos of employees in advance and synchronize them to the face recognition machine. Employees pass through the face recognition verification after entering and leaving. When visitors visit, they first register with the gate guard, and the security guard calls the visitor to confirm the visitor information before allowing entry. The enterprise park uses two types of IC card gates and facial recognition gates for personnel access control. The IC card has built-in identification information to identify the entry and exit of employees. The facial recognition gate has a facial photo entered in advance. The facial recognition gate scans the current person's face and matches it with the local photo. The gate is opened if the match is successful. Whether it is card swiping or facial recognition, it is aimed at internal employees of the enterprise. There is no integrated and unified digital solution for visitors to visit the enterprise. In addition, both of these access solutions may be followed, which poses a safety hazard to the enterprise.
[0041] The situation in office buildings is similar to that in corporate units. Gate passages are installed at the elevator entrances of office buildings. For companies in office buildings, the property company distributes pass IC cards to employees of each company. For visitors, they must first register at the front desk of the office building, and the person being visited will go downstairs to pick up the visitor. Most office buildings use gates to manage the passage of internal personnel, and the management of visitors is still mostly paper registration. There are also a small number of newly built office buildings that purchase visitor machines for visitor identity verification. When visitors visit, they place their identity documents in the ID card sensing area of the visitor machine. At the same time, the visitor machine collects faces for recognition to verify whether the identity document and face are the same person. It can be seen that office buildings also use two different systems and management methods for internal and external personnel, and there is no integrated and unified solution.
[0042] School safety management is particularly important. Currently, almost all schools have implemented closed management. Students and teachers enter the school by swiping campus cards or facial recognition gates. Parents of students who want to enter the school need to register at the gate, and the security guard will call the teacher to be visited. After the teacher's confirmation, they will be allowed to enter. The school has very strict management of personnel entry and exit, and the focus is on verifying the true identity of the person and confirming whether the visit is permitted. In terms of verifying the identity of the person, the school generally uses paper registration, and for visit permission, the teacher is notified by phone.
[0043] From the above technology application status, we can see that different types of units use two different systems and solutions for internal and external personnel access management. The most common is to install gate channels to manage internal personnel access, and the digital application level of visitor access management is low. There is a lack of coordination between security, front desk, corporate visitors, and visitors. The dataization and traceability of personnel access are low, and there is no integrated and unified access control solution for entrances and exits.
[0044] In the existing application of personnel access management technology, the types of personnel entering and leaving are mainly divided into two types: one is internal personnel management, and the other is external personnel management. For the access management of internal personnel, there are mainly the following solutions: fingerprint attendance machine, password access control machine, IC card access control, face recognition machine and gate machine, etc. Each enterprise chooses different hardware equipment according to its own usage scenarios. Its technical characteristics are that the hardware equipment and auxiliary equipment are used to uniquely identify personnel. The personnel holding the identification are considered legal when entering and leaving, and those without legal identification are not allowed to enter and leave. This solution requires the purchase of hardware equipment, some of which are costly, difficult to install and implement, and easy to damage. For the access management of external personnel, most units currently use paper registration, which is inefficient, difficult to preserve, has a high error rate, is difficult to verify the true identity of personnel, has high security risks, and cannot be used for data analysis. Some key units have installed ID machines to identify the authenticity of external personnel's ID cards, but this solution only solves the problem of identity recognition, and does not achieve closed-loop management for visitor access, and has low digital collaboration efficiency and high security risks. Since internal and external personnel adopted two sets of system solutions, the procurement cost of the system was high. Many units cancelled the procurement needs due to the increased difficulty of cost management.
[0045] From the current status of existing technology applications, we can see that each unit needs to use two systems for internal and external personnel management. The data of the two systems cannot be interoperable, which increases operating costs and difficulties. There is no digital real-time online collaboration between the various roles involved in entrance and exit control, such as security, front desk, and visitors, and personnel entry and exit are not managed in a safe closed loop. For units and parks with multiple office locations, the personnel entry and exit control data between multiple parks cannot be interoperable and uniformly authorized, which adds operating costs to the group management of the park.
[0046] In order to solve the above application problems and realize the integrated unified visitor and access control capabilities of digitization, security, traceability and multi-scenario adaptability, the embodiments of the present invention provide a personnel entry and exit identity verification and passage method, system, electronic device and storage medium, which realizes digital collaborative access control with a lightweight, simple and low-cost solution.
[0047] Reference Figure 1 The embodiment of the present invention provides a personnel entry and exit identity verification and access system, including a server, a first client, a second client and a third client. The first client, the second client and the third client can be a personal computer (PC), a smart phone, a personal digital assistant (PDA), a wearable device, a Pocket PC (PPC), a tablet computer, etc.
[0048] Among them, the server stores personnel information, and can determine the role corresponding to the personnel information and the authority corresponding to the role according to the setting of the personnel information. The roles in this embodiment include a first role and a second role. The first role can be an enterprise employee, a school student or a teacher, etc., who has the authority to pass through the identity verification in his unit and can enter the place (enterprise, school, etc.) of access management in this embodiment without making an access request. The second role can be a security guard, a doorman, a front desk, etc., who has the authority to check the identity of the person entering and leaving the place to ensure that the entry and exit of the personnel in the place complies with the regulations.
[0049] In this embodiment, the first role logs in through the first client according to its personnel information and enters the first role page, including but not limited to the appointment access review page. The first role can enter and exit the place managed by this embodiment through face recognition, fingerprint recognition, IC card swiping, QR code recognition, etc., where face recognition or fingerprint recognition can be input into the personnel information, and the identity is identified by the face recognition or fingerprint recognition device (the device can be used as the second role) when entering and exiting and sent to the server for inspection. Passing through the inspection. QR code recognition can be that the user operates the first role page to apply for a pass QR code from the server, and the server returns a dynamic QR code to the first client, and the user enters by swiping the dynamic QR code.
[0050] The first role can also act as a visitor, accept the visitor's reservation application, and review the reservation visit information on the reservation visit review page. After passing, the review information will be sent to the server. The server can manage the flow of people in the venue based on the reservation visit information.
[0051] The technical implementation method of this system designs the closed loop of personnel access control to be composed of multiple links. In different application scenarios, the system can flexibly configure the combination of links as needed. The four default links of the system are: registration, review, entry verification, and exit. In different application scenarios, the operation configuration and process flow of each link are also different.
[0052] In this embodiment, the second role logs in through the second client according to the personnel information or device information, and performs the identity verification of the person entering and leaving.
[0053] In this embodiment, the third client can send the reservation access information to the server, and the server matches the corresponding first role, and sends the reservation access review information to the first client corresponding to the first role. The first client determines whether the review is passed according to the reservation access review information. If the review is passed, the visitor can pass through the second client of the second role for identity verification according to the reservation access information and the review pass information.
[0054] Reference Figure 2The personnel entry and exit identity verification and passage method of the embodiment of the present invention is used on the server side, and includes the following steps:
[0055] S100, setting personnel information, roles corresponding to the personnel information, and permissions corresponding to the roles; roles include at least a first role and a second role. This embodiment implements internal personnel management and external personnel management by setting roles and permissions.
[0056] S200, in response to login requests sent by the first client and the second client, determine that the role of the first client is the first role and the role of the second client is the second role according to the personnel information in the login requests, and return the first role information to the first client and return the second role information to the second client, so that the second client collects the first verification information or the second verification information.
[0057] S300, in response to receiving the first verification information collected and sent by the second client, perform identity verification on the first role, and feed back the identity verification result to the second client, so that the second client can determine whether to pass according to the identity verification result. The identity verification method of this embodiment can be through face recognition, fingerprint recognition, IC card swiping, QR code recognition, etc. The personnel information of this embodiment may include face information or fingerprint information. When entering or exiting, the identity is identified by a face recognition or fingerprint recognition device (i.e., the second client) and sent to the server for verification. Passing is allowed if the verification is passed. The server response to QR code recognition is that the user operates the first role page to apply for a pass QR code, and returns a dynamic QR code to the first client. The user enters by swiping the dynamic QR code.
[0058] S400, in response to receiving the appointment access information sent by the third client, matching the corresponding first role according to the interviewee information in the appointment access information, and sending the appointment access review information to the first client corresponding to the first role, so that the appointment access review page of the first role information of the first client displays the appointment access review information. The appointment access information in this embodiment includes the information of the interviewee, and the responding person is matched from the stored personnel information according to the information of the interviewee, and is determined as the person who reviews the appointment access information. It should be understood that if the responding person cannot be matched in the personnel information, the appointment access fails, and the information of the appointment access failure is fed back to the third client.
[0059] It is understandable that the review process of this embodiment can be customized. In addition to the interviewee's access to the appointment information, the management staff can also be set to conduct a secondary review of the appointment access information. In particular, when epidemic prevention and control is needed, the appointment access can be further reviewed based on the epidemic prevention and control information in the appointment access information.
[0060] S500: If the first client feeds back a verification pass message, the verification pass message is sent to the third client, so that the third client performs identity verification according to the second verification information in the verification pass message.
[0061] It is understandable that the second verification information of this embodiment can be the certification information (such as a QR code, etc.) sent to the third client after the review is passed, or it can be the identity information of the visitor. The verification method can be through face recognition, fingerprint recognition, IC card swiping, QR code recognition, etc. The appointment access information of this embodiment can include face information or fingerprint information. When entering or leaving, the identity is identified by the face recognition or fingerprint recognition device (i.e., the second client) and sent to the server for inspection. If the inspection is passed, the visitor can pass.
[0062] S600: In response to receiving the second verification information collected and sent by the second client, perform identity verification on the visitor corresponding to the first role, and feed back the identity verification result to the second client, so that the second client determines whether to pass according to the identity verification result.
[0063] For some special scenarios, such as food delivery drivers needing to go in and out to deliver food every day, if the food delivery driver's information is registered as personnel information and the authority is the same as that of general employees, it may cause security problems. If the food delivery driver is regarded as a visitor and an appointment visit application is made every day, it will cause great inconvenience to the food delivery driver and internal personnel. To solve this problem, the embodiment of the present invention further refines the management of personnel by setting specific permissions.
[0064] In some embodiments, the permissions of the first role are divided into first permissions and second permissions. Figure 3 , step S300 includes the following steps:
[0065] S310, matching the corresponding first role's permission according to the first verification information, if the permission is the first permission, executing step S320; if the permission is the second permission, executing step S330.
[0066] S320: Perform identity verification on the first character, and feed back the identity verification result to the second client.
[0067] S330, obtaining the current date and time, and judging whether the current date and time are within the range of the pass date and pass time according to the pass date and pass time corresponding to the second authority; if so, executing step S320; if not, executing step S340.
[0068] S340: Determine that the identity verification result is failure, and feedback the identity verification result as failure to the second client.
[0069] This embodiment sets specific access conditions (access date and access time range). In addition to identity verification, specific access conditions are also verified when people pass through, thereby achieving efficient control of personnel entry and exit.
[0070] It is understood that the appointment visit information includes the visitor's identity information. Figure 4 , step S600 includes the following steps:
[0071] S610: Receive second verification information and obtain visitor identity information.
[0072] S620: Perform identity verification based on the second verification information and the visitor identity information, and if they match, send a feedback indicating that the identity verification is passed to the second client.
[0073] Exemplarily, the appointment visit information includes: identity verification information, visitee information, entry time, exit time and review information. Figure 5 , the method of the embodiment of the present invention further includes:
[0074] S700: Perform identity verification on the visitor corresponding to the first role, and after the identity verification passes, obtain visitor information according to the scheduled visit information and the actual entry time.
[0075] S800: Receive the actual departure time of the visitor sent by the second client, and update the visitor information according to the actual departure time.
[0076] S900, periodically obtain visitor information, and determine whether there is a visitor who has not left the site before the departure time according to the current date and time; if so, send departure reminder information to the third client or the first client corresponding to the visitee information.
[0077] This embodiment can remind visitors to leave by regularly checking the information of visitors who have not left in time, thereby preventing external visitors from staying for a long time.
[0078] In some embodiments, reference Figure 6 , the method of the embodiment of the present invention further includes:
[0079] S1010, obtaining identity authentication information of visitors who have failed to leave on time for multiple times based on visitor information;
[0080] S1020. Add the identity authentication information to the blacklist.
[0081] This embodiment manages visitors through blacklist management, and visitors who fail to leave on time for multiple times can be banned from entering by adding them to the blacklist.
[0082] In some embodiments, before receiving the reservation access information sent by the third client, refer to Figure 7, the method of the embodiment of the present invention further includes:
[0083] S410: Receive customized setting information of the reservation access page sent by the first client.
[0084] S420. In response to the access request sent by the third client, an appointment access page is generated according to the customized setting information of the appointment access page, and the appointment access page is fed back to the third client; the appointment access page includes a customized setting visitor information form, a visited information form and an epidemic prevention and control form.
[0085] For example, the interviewee information form includes the interviewee's name, mobile phone number, visit type (visit, job application, business negotiation, outsourcing, relatives and friends visit, etc.), planned entry time and planned departure time. Epidemic prevention and control information can include whether the case is confirmed or suspected, whether the person is a close contact, and whether there is a history of travel to medium- and high-risk areas.
[0086] Reference Figure 8 Another aspect of the present invention provides a method for verifying and passing a person's entry and exit identity, which is used for a first client and includes the following steps:
[0087] A100. Send a login request to the server, where the login request includes personnel information.
[0088] A200. Receive the first role information returned by the server, where the first role information includes a reservation access review page.
[0089] A300, receives the appointment access review information sent by the server and displays it on the appointment access review page.
[0090] A400. In response to the user operation of the reservation access review page, determine whether the review is passed. If the review is passed, send the review pass information to the server.
[0091] In some embodiments, reference Fig. 9 , the method of the embodiment of the present invention further includes:
[0092] A500, customize the appointment access page, and obtain the customized setting information of the appointment access page. The customized appointment access page includes the customized visitor information form, the visited information form and the epidemic prevention and control form, as well as the mandatory items of the customized setting form.
[0093] It is understandable that the visitor information form of this embodiment includes the visitor's name, mobile phone number, and ID number. The interviewee information form includes the interviewee's name, mobile phone number, visit type (visit, job application, business negotiation, outsourcing, relatives and friends visit, etc.), planned entry time and planned departure time. Epidemic prevention and control information may include whether the case is confirmed or suspected, whether the person is a close contact, whether there is a history of travel to medium- and high-risk areas, etc.
[0094] A600. Send the customized setting information of the appointment access page to the server.
[0095] Exemplarily, the appointment access review information includes epidemic prevention and control information. Fig.10 , the method of the embodiment of the present invention further includes:
[0096] A700. Determine whether there is a risk based on the epidemic prevention and control information. The epidemic prevention and control information of this embodiment may include whether the patient is a confirmed or suspected case, whether the patient is a close contact, whether the patient has a history of travel to medium- or high-risk areas, etc. The user can also upload relevant proof by uploading photos.
[0097] A800: If it exists, the epidemic warning information will be displayed.
[0098] Reference Fig.11 Another aspect of the present invention provides a method for verifying and passing a person's entry and exit identity, which is used for a second client and includes the following steps:
[0099] B100. Send a login request to the server, where the login request includes personnel information.
[0100] B200. Receive the second role information returned by the server, where the second role information includes an identity authentication page.
[0101] B300. Collect the first verification information or the second verification information by operating the identity verification page, and send the first verification information or the second verification information to the server so that the server performs identity verification.
[0102] B400, receives the identity verification result sent by the server, and determines whether to pass based on the identity verification result.
[0103] The second client of this embodiment may be a smart phone, an IPAD, an intelligent identity detection device, etc. If it is an intelligent identity detection device, the information of the device is registered and managed at the server.
[0104] Reference Fig.12 Another aspect of the present invention provides a method for checking and passing a person's entry and exit identity, which is used for a third client and includes the following steps:
[0105] C100. Get the appointment access page.
[0106] C200. In response to the user operating on the reservation access page, obtaining reservation access information.
[0107] C300, send the appointment access information to the server.
[0108] C400, receive the approval information sent by the server.
[0109] Reference Fig.13 Another aspect of the present invention provides a personnel entry and exit identity verification and access system, including:
[0110] The personnel information module is used to set personnel information, roles corresponding to the personnel information, and permissions corresponding to the roles; the roles include at least a first role and a second role.
[0111] The login module is used to respond to the login requests sent by the first client and the second client, determine the role of the first client is the first role, the role of the second client is the second role according to the personnel information in the login request, and return the first role information to the first client and return the second role information to the second client.
[0112] The first identity verification module is used to perform identity verification on the first character in response to receiving the first verification information collected and sent by the second client, and feed back the identity verification result to the second client, so that the second client determines whether to pass according to the identity verification result.
[0113] An appointment access module is used to respond to the appointment access information received from the third client, match the corresponding first role according to the interviewee information in the appointment access information, and send the appointment access review information to the first client corresponding to the first role, so that the appointment access review page of the first role information of the first client displays the appointment access review information.
[0114] The audit pass module is used to send the audit pass information to the third client if the first client feeds back the audit pass information, so that the third client performs identity verification according to the second verification information in the audit pass information.
[0115] The second identity verification module is used to perform identity verification on the visitor corresponding to the first role in response to receiving the second verification information collected and sent by the second client, and feed back the identity verification result to the second client, so that the second client determines whether to pass according to the identity verification result.
[0116] In a specific embodiment, the system of the embodiment of the present invention further includes a scene selection module, and the enterprise or unit selects a corresponding scene when registering, such as an enterprise park, an industrial park, an office building, a school, and a government agency, etc. The system of this embodiment provides corresponding services according to the corresponding scene.
[0117] In a specific embodiment, the system of the embodiment of the present invention also includes an information module, which provides personalized services through specific information of the enterprise unit or school, including the full name of the enterprise, the abbreviation of the enterprise, the scale of employees, the city where the enterprise is located, etc. For example, through the specific geographical location, weather information can be obtained through a third-party service, and weather reminder services can be provided to visitors in the corresponding time period in special weather (rain, etc.).
[0118] In a specific embodiment, the method steps for a user to use the system of the embodiment of the present invention include: the user registers a server account through the WeChat applet. After completing the registration, the applet QR code can be displayed in the server backend system menu, and the user can enter the guest applet client by scanning the applet QR code through WeChat.
[0119] The specific steps of account registration and login include: open the Chrome browser, enter the URL in the address bar to enter the registration and login page, enter the mobile phone number and verification code to register. After the user registers, it will be included in the system application scenario selection page, and the user will select the appropriate type according to the characteristics of their own company and the application scenario. After selecting the application scenario, the system will enter the form process page for creating the basic information of the company, and the user will fill in the company's full name, company abbreviation, employee size, city, etc. Then the user sets the administrator. After completion, enter the creation success page. This page displays the exclusive WeChat applet QR code entrance for visitor reservations of the newly created company. Share the QR code with visitors, and visitors can start making reservations for entry and exit.
[0120] After completing registration or logging in, the user enters the system homepage, which displays an overview of system data. In the system prompt bar at the top of the homepage, click the "Settings" button to enter the form settings page. Enterprises can customize the information filled in by visitors for appointments based on their management needs, such as whether to fill in the license plate number, whether to enable epidemic prevention and control settings, etc.
[0121] The user sets the staff. This setting function sets whether manual review is required after the visitor fills in the appointment application. When "No review required" is selected, the pass code is automatically generated after the visitor fills in the appointment application. Select "Review required" and the system can set the reviewer and review process. If the visitee is selected for review, the visitee filled in the visitor's appointment record is the reviewer (the visitee's mobile phone number must be entered in the corporate organizational structure). You can also customize the reviewer and multi-level approval process.
[0122] Users can personalize their company settings, including setting the cover photo of the company form, company SMS guidance information and SMS notification settings.
[0123] After a new user completes registration, the system will generate a unique appointment app QR code for each company. Company administrators can use the following three methods to allow users to use the appointment app:
[0124] 1. Download the mini program QR code and post it at the entrance of the company. Visitors can scan the code to use it.
[0125] 2. Enterprise employees scan the QR code to enter the mini program and share the mini program with visiting users
[0126] Company employees scan the QR code to enter the mini program and fill out appointment applications on behalf of visitors, who will then receive appointment text messages.
[0127] Visitors use WeChat to scan the enterprise appointment QR code in the previous section to enter the visitor appointment form filling page. Visitors fill in the visitor information, the person being visited information, and epidemic prevention and control information (optional), and click Submit Appointment to submit the record, waiting for the administrator or the person being visited to review. After the visitor submits the application, the person being visited (or the authorized reviewer) will receive a pending review record in the visitor applet, and the person being visited will receive a pending review text message on his or her mobile phone.
[0128] The person being visited receives the visitor's reservation application, as well as a WeChat notification and a text message notification. The person being visited enters the "My Approval" function tab of the mini program to view the visitor's reservation record. Click the record to enter the visitor's reservation details page, and click the "Approve" button or the "Reject" button. When the review is passed, the mini program pops up a confirmation box, where you can enter your consent.
[0129] After the visitor passes the review, the visitor will receive a pass code. When entering, the visitor will show the pass code to the security guard for inspection, or scan the code through the gate.
[0130] Users can view appointment information on the system. Enter the My Appointment Data List page, and the list will display the latest visitor appointment records and review status in reverse chronological order. Managers can query appointment records based on review status, visitor arrival status, date, visitor name, mobile phone number, visitee name, visitee mobile phone number, etc. At the same time, they can also view review information.
[0131] When users use the system's supporting hardware equipment such as ID machines, facial recognition machines and gates to enter and exit by presenting their ID cards for identity verification, facial recognition, or scanning codes, the system will leave a record of the facial recognition pass.
[0132] The system of this embodiment also includes a device management module, which registers the supporting hardware equipment of the self-service visitor system purchased by the enterprise. There are mainly three types of hardware equipment, namely, identity card machines, face recognition smart machines and face recognition gate machines.
[0133] The system of this embodiment also includes a whitelist module to register all green pass users. Green pass users can enter and exit multiple times within the authorized time range, such as three months, without the need for a single reservation application. The whitelist is mainly used to facilitate the entry and exit of the company's labor cooperation personnel, delivery personnel, engineering construction and decoration personnel, etc., and the validity period can be set for the personnel in the whitelist. The pass code is valid within the authorized validity period.
[0134] The system of this embodiment also includes an organizational structure module, which manages all departments and employees in the enterprise. When a visitor fills out a visitor application, the person being visited must be an employee of the enterprise, otherwise the visitor cannot submit an appointment application. An enterprise employee can be a person being visited. If the person being visited is reviewed in the form settings, then when an enterprise employee is the person being visited, the enterprise employee can have review authority.
[0135] The system of this embodiment also includes a role management module, which displays four roles preset in the system, namely, the front desk, the checker, the approver, and the visitor.
[0136] The system of this embodiment also includes a notification management module, which sets SMS notification and WeChat notification switches, and can set SMS and WeChat notification switches for visitors and auditors respectively.
[0137] The system of this embodiment also includes a novice guidance module, which guides newly registered enterprises to complete tasks according to their own enterprise needs; and provides visit processes and management and control diagrams for each role, showing the flow of different usage process businesses.
[0138] Reference Fig.14 In a specific embodiment, the system of the embodiment of the present invention includes two parts: a user end and a background management system. The user end is an application running on a smart phone or smart tablet. The user end can log in to different roles according to the actual application scenario requirements, such as employees, visitors, doormen, front desk staff, interviewees, and administrators. Different roles have different job functions, and multiple roles work together to complete personnel access control. The background management system provides system configuration, data storage, and data management functions.
[0139] like Fig.14As shown, before internal employees using the embodiment of the present invention enter and exit the system, they must first enter their employee information in the background management system. When an employee passes through, the mobile phone opens the user-side pass code page of this system, and the system automatically generates a dynamic QR code. The employee presents the QR code, and the "doorman" opens the user-side scan page of this system, scans the employee's pass QR code to verify that it is valid and allows access. The "doorman" here in this system has two scenarios. One is that a real doorman installs the user-side software of this system on his mobile phone and scans it. If the verification passes, access is granted, and if the verification fails, access is denied. The other is an "automatic doorman", that is, a mobile phone, tablet computer or smart device that has the user-side software of this system installed and logged in as a doorman. The device monitors the code scan in real time, verifies that the linkage gate is used to open the pass, and if the verification fails, access is prohibited.
[0140] Before using the visitor pass of the embodiment of the present invention, open the user-end software of this system on the WeChat applet on the mobile phone to make a visitor appointment registration, fill in the visitor's name, ID card, license plate number, name of the person being visited, mobile phone number of the person being visited, visit time, purpose of visit, etc. and submit the appointment. The person being visited receives the appointment notification on his mobile phone and enters the user-end system to review the appointment registration. After the review is passed, the visitor user end automatically generates a pass code. At this time, the doorman and the front desk role user end automatically receive the personnel visit notification and display the visitor information. If the review fails, access is prohibited. After the appointment is successful, the visitor will receive a message containing the visit time, company address navigation, warm reminders (WIFI password, waiting area, toilet, etc.), and exclusive identity verification QR code. The visitor presents the pass QR code at the entrance, and the doorman automatically passes after scanning the code for verification, eliminating the need for the doorman to register information, ask the appointment person and the purpose of the visit, etc. After the doorman completes the verification, the person being visited will receive a message reminder and receive the visitor immediately. When a visitor leaves the venue, he or she takes a photo and uploads the exit certificate, presents the pass QR code, and the guard scans the code to record the visitor's departure time. This shows that the access control of visitors and other external personnel is fully closed-loop management. The administrative administrator can directly export the historical visitor visit records in the background, without having to manually enter statistical data.
[0141] Reference Fig.15 The embodiment of the present invention realizes the integration and unification of scenes in the access control of internal and external personnel, and uses a set of software system to realize the functions that originally required multiple systems and multiple devices to realize separately at a low cost. This system not only realizes efficient control of the access of internal personnel and external visitors, but also realizes efficient and unified control for takeaway personnel, couriers, temporary personnel and special personnel.
[0142] Delivery personnel, couriers and temporary personnel open the user end of this system, register their identity information and submit it for review. The management personnel of the enterprise or unit review the identity information of the delivery personnel. If the review fails, they are prohibited from passing. After the review is passed, the effective date of the delivery personnel's pass and the time period for daily pass are set. During this time period, the delivery personnel can pass through after the security guard scans the pass QR code for verification. The security guard scans the code by a person who logs in to the user end system as a security guard, or by an intelligent device that logs in as a security guard and automatically monitors and scans the code. The security guard scans the code and verifies and allows passage. When the delivery personnel leave, according to the system settings, they can scan the code to leave, click to leave on the user end software, or leave directly.
[0143] Reference Fig.16 , another aspect of the embodiment of the present invention provides an electronic device, the electronic device includes a processor and a memory;
[0144] The memory stores a program;
[0145] The processor executes the program to execute the aforementioned personnel entry and exit identity verification and passage method; the electronic device has the function of carrying and running the personnel entry and exit identity verification and passage system provided by the embodiment of the present invention, for example, a personal computer (PC), a mobile phone, a smart phone, a personal digital assistant (PDA), a wearable device, a handheld computer PPC (Pocket PC), a tablet computer, etc.
[0146] An embodiment of the present invention further provides a computer-readable storage medium, wherein the storage medium stores a program, and the program is executed by a processor to implement the aforementioned personnel entry and exit identity verification and passage method.
[0147] In some selectable embodiments, the function / operation mentioned in the block diagram may not occur in the order mentioned in the operation diagram. For example, depending on the function / operation involved, the two boxes shown in succession can actually be executed substantially simultaneously or the boxes can sometimes be executed in reverse order. In addition, the embodiment presented and described in the flow chart of the present invention is provided by way of example, for the purpose of providing a more comprehensive understanding of technology. The disclosed method is not limited to the operation and logic flow presented herein. Selectable embodiments are expected, wherein the order of various operations is changed and the sub-operation of a part for which is described as a larger operation is performed independently.
[0148] The embodiment of the present invention also discloses a computer program product or a computer program, which includes a computer instruction stored in a computer-readable storage medium. A processor of a computer device can read the computer instruction from the computer-readable storage medium, and the processor executes the computer instruction, so that the computer device executes the aforementioned business data processing method.
[0149] In addition, although the present invention is described in the context of functional modules, it should be understood that, unless otherwise specified, one or more of the functions and / or features described may be integrated into a single physical device and / or software module, or one or more functions and / or features may be implemented in separate physical devices or software modules. It is also understood that a detailed discussion of the actual implementation of each module is unnecessary for understanding the present invention. More specifically, in view of the properties, functions, and internal relationships of the various functional modules in the device disclosed herein, the actual implementation of the module will be understood within the conventional skills of the engineer. Therefore, those skilled in the art can implement the present invention set forth in the claims without excessive experimentation using ordinary techniques. It is also understood that the specific concepts disclosed are merely illustrative and are not intended to limit the scope of the present invention, which is determined by the full scope of the appended claims and their equivalents.
[0150] If the functions are implemented in the form of software functional units and sold or used as independent products, they can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present invention, or the part that contributes to the prior art or the part of the technical solution, can be embodied in the form of a software product. The computer software product is stored in a storage medium, including several instructions for a computer device (which can be a personal computer, a server, or a network device, etc.) to perform all or part of the steps of the methods described in each embodiment of the present invention. The aforementioned storage medium includes: U disk, mobile hard disk, read-only memory (ROM, Read-Only Memory), random access memory (RAM, Random Access Memory), disk or optical disk, etc., which can store program codes.
[0151] The logic and / or steps represented in the flowchart or otherwise described herein, for example, can be considered as an ordered list of executable instructions for implementing logical functions, and can be embodied in any computer-readable medium for use by an instruction execution system, device or apparatus (such as a computer-based system, a system including a processor, or other system that can fetch instructions from an instruction execution system, device or apparatus and execute instructions), or in conjunction with such instruction execution systems, devices or apparatuses. For the purposes of this specification, "computer-readable medium" can be any device that can contain, store, communicate, propagate or transmit a program for use by an instruction execution system, device or apparatus, or in conjunction with such instruction execution systems, devices or apparatuses.
[0152] More specific examples of computer-readable media (a non-exhaustive list) include the following: an electrical connection with one or more wires (electronic device), a portable computer disk case (magnetic device), a random access memory (RAM), a read-only memory (ROM), an erasable and programmable read-only memory (EPROM or flash memory), an optical fiber device, and a portable compact disk read-only memory (CDROM). In addition, the computer-readable medium may even be a paper or other suitable medium on which the program is printed, since the program may be obtained electronically, for example, by optically scanning the paper or other medium, followed by editing, deciphering or, if necessary, processing in another suitable manner, and then stored in a computer memory.
[0153] It should be understood that the various parts of the present invention can be implemented by hardware, software, firmware or a combination thereof. In the above-mentioned embodiments, a plurality of steps or methods can be implemented by software or firmware stored in a memory and executed by a suitable instruction execution system. For example, if implemented by hardware, as in another embodiment, it can be implemented by any one of the following technologies known in the art or their combination: a discrete logic circuit having a logic gate circuit for implementing a logic function for a data signal, a dedicated integrated circuit having a suitable combination of logic gate circuits, a programmable gate array (PGA), a field programmable gate array (FPGA), etc.
[0154] In the description of this specification, the description with reference to the terms "one embodiment", "some embodiments", "examples", "specific examples", or "some examples" means that the specific features, structures, materials or characteristics described in conjunction with the embodiment or example are included in at least one embodiment or example of the present invention. In this specification, the schematic representation of the above terms does not necessarily refer to the same embodiment or example. Moreover, the specific features, structures, materials or characteristics described may be combined in any one or more embodiments or examples in a suitable manner.
[0155] Although the embodiments of the present invention have been shown and described, it will be appreciated by those skilled in the art that various changes, modifications, substitutions and variations may be made to the embodiments without departing from the principles and spirit of the present invention, and that the scope of the present invention is defined by the claims and their equivalents.
[0156] The above is a specific description of the preferred implementation of the present invention, but the present invention is not limited to the described embodiments. Those skilled in the art may make various equivalent modifications or substitutions without violating the spirit of the present invention. These equivalent modifications or substitutions are all included in the scope defined by the claims of this application.
Claims
1. A method for checking and passing the identity of people entering and exiting, used at a service end, characterized in that: The following steps are involved: Setting personnel information, roles of the personnel information and permissions of the roles; the roles include at least a first role and a second role; In response to login requests sent by a first client and a second client, determining, according to personnel information in the login requests, that the role of the first client is the first role and the role of the second client is the second role, and returning the first role information to the first client and returning the second role information to the second client, so that the second client collects the first verification information or the second verification information; In response to receiving the first verification information collected and sent by the second client, performing identity verification on the first character, and feeding back the identity verification result to the second client, so that the second client determines whether to pass according to the identity verification result; In response to receiving the appointment access information sent by the third client, matching the corresponding first role according to the interviewee information in the appointment access information, and sending the appointment access review information to the first client corresponding to the first role, so that the appointment access review page of the first role information of the first client displays the appointment access review information; If the first client feeds back a verification pass message, the verification pass message is sent to the third client, so that the third client performs identity verification according to the second verification information in the verification pass message; In response to receiving the second verification information collected and sent by the second client, the identity of the visitor corresponding to the first role is verified, and the identity verification result is fed back to the second client, so that the second client determines whether to pass according to the identity verification result.
2. The method for checking and passing the identity of persons entering and exiting according to claim 1, characterized in that: The permissions of the first role are divided into first permissions and second permissions; The step of performing identity verification on the first role in response to receiving the first verification information collected and sent by the second client, and feeding back the identity verification result to the second client includes: Matching the corresponding first role's authority according to the first verification information, and if the authority is the first authority, performing identity verification on the first role, and feeding back the identity verification result to the second client; If the permission is the second permission, the current date and time are obtained, and according to the access date and access time corresponding to the second permission, whether the current date and time are within the range of the access date and access time is determined; If yes, then perform identity verification on the first role and feed back the identity verification result to the second client; If not, the identity verification result is determined to be a failure, and the identity verification result is fed back to the second client.
3. The method for checking and passing the identity of persons entering and exiting according to claim 1, characterized in that: The appointment access information includes visitor identity information; in response to receiving the second verification information collected and sent by the second client, performing identity verification on the visitor corresponding to the first role, and feeding back the identity verification result to the second client, comprises: receiving the second verification information and obtaining the visitor identity information; An identity check is performed based on the second verification information and the visitor identity information, and if they match, a feedback that the identity check is passed is sent to the second client.
4. The method for checking and passing the identity of persons entering and exiting according to claim 1, characterized in that: The appointment visit information includes: identity authentication information, visitee information, entry time, exit time and review information; the method also includes: Performing identity verification on the visitor corresponding to the first role and obtaining visitor information according to the scheduled visit information and the actual entry time after the identity verification passes; receiving the actual departure time of the visitor sent by the second client, and updating the visitor information according to the actual departure time; Periodically obtain the visitor information and determine whether there is a visitor who has not left the venue before the departure time according to the current date and time; If yes, then send the departure reminder information to the third client or the first client corresponding to the interviewee information.
5. The method for checking and passing the identity of people entering and exiting according to claim 4, characterized in that: The method further comprises: According to the visitor information, obtaining identity authentication information of visitors who have repeatedly failed to leave on time; The identity verification information is added to a blacklist.
6. The method for checking and passing the identity of people entering and exiting according to claim 1, characterized in that: Before receiving the reservation access information sent by the third client, the method further includes: Receiving the customized setting information of the reservation access page sent by the first client; In response to the access request sent by the third client, generating a reservation access page according to the reservation access page custom setting information, and feeding back the reservation access page to the third client; The appointment access page includes a customized visitor information form, a visited information form and an epidemic prevention and control form.
7. A personnel entry and exit identity verification and access system, characterized in that: include: A personnel information module is used to set personnel information, roles of the personnel information and permissions of the roles; The roles include at least a first role and a second role; A login module, configured to respond to login requests sent by a first client and a second client, determine, based on personnel information in the login requests, that the role of the first client is the first role and the role of the second client is the second role, and return the first role information to the first client and return the second role information to the second client, so that the second client collects the first verification information or the second verification information; A first identity verification module, configured to perform an identity verification on the first character in response to receiving the first verification information collected and sent by the second client, and feed back the identity verification result to the second client, so that the second client determines whether to pass according to the identity verification result; A reservation access module, configured to, in response to receiving the reservation access information sent by the third client, match the corresponding first role according to the interviewee information in the reservation access information, and send the reservation access review information to the first client corresponding to the first role, so that the reservation access review page of the first role information of the first client displays the reservation access review information; An audit passing module, configured to send the audit passing information to the third client if the first client feeds back the audit passing information, so that the third client performs identity verification according to the second verification information in the audit passing information; The second identity verification module is used to perform identity verification on the visitor corresponding to the first role in response to receiving the second verification information collected and sent by the second client, and feed back the identity verification result to the second client, so that the second client determines whether to pass according to the identity verification result.
8. An electronic device, characterized in that: including a processor and a memory; The memory is used to store programs; The processor executes the program to implement the method according to any one of claims 1 to 6.
9. A computer-readable storage medium having a computer program stored thereon, wherein the computer program implements the method according to any one of claims 1 to 6 when executed by a processor.
Citation Information
Patent Citations
Identity verification system used in immigration hall
CN106157405A
Witness consistency check method, terminal device and computer readable storage medium
CN108197557A