An intelligent lock management system and method of use

Abstract

The application provides a smart lock management system and belongs to the field of smart electronic products. The system comprises a smart lock, a smart electronic key, a smart terminal and a data management center. The smart lock is used for sending its identity information LID to the smart electronic key. The smart electronic key is used for acquiring the identity information LID of the smart lock, encrypting the identity information LID of the smart lock, the identity information KID of the smart electronic key and an unlocking request to form first encrypted information and sending the first encrypted information to the smart terminal. The smart terminal is used for receiving the first encrypted information sent by the smart electronic key, encrypting staff identity information UID and the first encrypted information to form second encrypted information and sending the second encrypted information to the data management center. The data management center is used for receiving the second encrypted information sent by the smart terminal, generating a verification code code and a random number R, obtaining smart electronic key ciphertext c and smart lock data integrity label t based on the verification code code and the random number R and obtaining third encrypted information. The application can protect the integrity of unlocking instruction data and switch lock state data and can resist illegal tampering, forgery and data replay attacks.

Description

Technical Field

[0001] The present invention belongs to the technical field of intelligent electronic products, and in particular relates to an intelligent lock management system and a use method thereof. Background Art

[0002] The statements in this section merely provide background information related to the present invention and do not necessarily constitute prior art.

[0003] Currently, various network infrastructures are spread across cities. Many critical facilities require regular maintenance. Network connection points, outdoor cabinets, and outdoor testing equipment, among other things, require security measures such as moisture resistance, fire resistance, and theft prevention. These facilities are typically locked in a secure box or dedicated room with a locked door, requiring maintenance personnel to unlock the door before entering the work area.

[0004] The inventors found that traditional locks are inconvenient to manage, especially locks that use metal keys. If a staff member needs to be temporarily replaced, the temporary staff member who accepts the task must first obtain the key before unlocking the lock. The collection and return of keys require manual records and are prone to errors. If one lock is allowed to correspond to multiple keys, key management will become more complicated, and it will be difficult to find the responsible person in the event of an unexpected situation. Moreover, once a key is lost, the lock needs to be replaced, otherwise it will bring safety hazards. If one lock corresponds to one key, if the person holding the key has something to do temporarily, it will become difficult to unlock the lock. When temporarily finding someone to replace the person holding the key to do the work, the work processing process will often be delayed.

[0005] Even with fingerprint locks, there are still many problems, including the following: (1) unlocking behavior is not recorded, and it is unknown who opened which lock and when; (2) locking time is not recorded, and the actual working hours of the staff are unknown; (3) if multiple people can open the same fingerprint lock, it is difficult to hold them accountable if the equipment under inspection is damaged; (4) emergency response is not convenient. For example, a device has a problem and needs urgent repair, but the maintenance personnel who can open the lock are not nearby.

[0006] In existing services like these, a single maintenance worker can often open multiple locks, and the same lock can be opened by multiple personnel. This complexity presents numerous challenges for managers. Some companies have attempted to address these issues through auxiliary measures, such as adding video surveillance, which allows for full visibility into maintenance personnel's opening and closing of locks, as well as their actual work progress. However, video surveillance systems are expensive, and simply maintaining the video surveillance data requires significant storage devices and service platforms. When the number of locks is large (e.g., thousands or even more), a more cost-effective solution is needed. Summary of the Invention

[0007] In order to overcome the above deficiencies of the prior art, the present application provides an intelligent lock management system and a use method, the intelligent lock and the intelligent electronic key can be flexibly matched among the using personnel, the intelligent electronic key and the intelligent lock through remote authorization, which is very convenient in emergency; the opening lock instruction data and the opening and closing state data are protected in integrity, which can resist illegal tampering and forgery, the use of random number can resist data replay attack, and the security in use is improved; the data management center can master when and who uses which intelligent electronic key to open or close which intelligent lock by recording the related information of opening and closing, and the controllability and traceability of the use process are increased.

[0008] In order to achieve the above object, one or more embodiments of the present application provide the following technical solutions:

[0009] The present application provides an intelligent lock management system in the first aspect.

[0010] The present application provides an intelligent lock management system in the first aspect.

[0011] The intelligent lock is used for being communicatively connected with the intelligent electronic key, and sends the intelligent lock identity information LID to the intelligent electronic key; receives the verification code code, the random number R and the third encrypted information sent by the intelligent electronic key, generates the verification encrypted information t ’ based on the verification code code, the random number R and the first key LK corresponding to the intelligent lock identity information LID, compares the intelligent lock data integrity label t in the verification encrypted information t ’ and the third encrypted information, and if they are the same, executes the opening lock action;

[0012] The intelligent electronic key is used for being communicatively connected with the intelligent lock, and obtains the identity information LID of the intelligent lock, encrypts the identity information LID of the intelligent lock, the identity information KID of the intelligent electronic key and the opening lock request to form the first encrypted information, and sends the first encrypted information to the intelligent terminal; and is also used for receiving the verification code code and the third encrypted information sent by the intelligent terminal, decrypting the third encrypted information to obtain the random number R, and sending the verification code code, the random number R and the third encrypted information to the intelligent lock;

[0013] The intelligent terminal is used for receiving the first encrypted information sent by the intelligent electronic key, encrypting the staff identity information UID and the first encrypted information to form the second encrypted information, and sending the second encrypted information to the data management center; and is also used for receiving the verification code code and the third encrypted information sent by the data management center, and sending the verification code code and the third encrypted information to the intelligent electronic key;

[0014] The data management center is used to receive the second encrypted information sent by the smart terminal, generate a verification code code and a random number R, and send the verification code code to the smart terminal; based on the verification code code and the random number R, obtain the smart electronic key ciphertext c and the smart lock data integrity tag t, obtain the third encrypted information based on the smart electronic key ciphertext c and the smart lock data integrity tag t, and send the third encrypted information to the smart terminal.

[0015] Preferably, the data management center encrypts the random number R with the second key KK corresponding to the smart electronic key identity information KID to obtain the smart key ciphertext c; edits the unlocking instruction OPEN, and encrypts the verification code code, the random number R, the unlocking instruction OPEN and the first key LK corresponding to the smart lock identity information LID to obtain the smart lock data integrity tag t.

[0016] Preferably, the data management center is also used to determine whether the staff member in the received second encrypted information holds the smart electronic key identity information KID based on the database of correspondence between staff members, smart electronic keys and smart locks, and to determine whether the smart electronic key identity information KID has the authority to open the smart lock identity information LID.

[0017] Preferably,

[0018] The smart electronic key is also used to send a lock instruction to the smart lock;

[0019] The smart lock is further configured to receive a lock instruction sent by a smart electronic key and execute a lock operation; or

[0020] The smart lock is also used to detect the locked state or unlocked state, and after successful unlocking and locking, the unlocking success information, locking success information, and smart lock identity information LID are sent to the smart electronic key;

[0021] The smart electronic key is also used to receive unlocking success information, locking success information, and smart lock identity information LID sent by the smart lock, and send the smart electronic key identity information KID, unlocking success information, locking success information, and smart lock identity information LID to the smart terminal;

[0022] The smart terminal is also used to receive the smart electronic key identity information KID, unlocking success information, locking success information, and smart lock identity information LID sent by the smart electronic key, and send the staff identity information UID, the smart electronic key identity information KID, unlocking success information, locking success information, and smart lock identity information LID to the data management center;

[0023] The data management center is also used to receive staff identity information UID, smart electronic key identity information KID, unlocking success information, locking success information, and smart lock identity information LID, and save the current time T of the data management center, staff identity information UID, smart electronic key identity information KID, unlocking success information, locking success information, and smart lock identity information LID.

[0024] Preferably, the smart lock includes:

[0025] The storage module is used to store key data, including the smart lock identity information LID, the first data encryption key LK shared between the lock and the data management center, and the unlocking and locking record data;

[0026] a communication module, which is used to communicate with the smart electronic key connected to the smart lock, receive the unlocking instruction, locking instruction, verification code code, random number R and third encrypted information sent by the smart electronic key, and send the unlocking instruction, locking instruction, verification code code, random number R and third encrypted information to the computing module;

[0027] The calculation module is used to receive the unlocking instruction, verification code code, random number R and third encrypted information sent by the communication module, obtain the data encryption first key LK in the storage module and execute the data integrity protection algorithm MAC, and generate the verification encryption information t based on the verification code code, random number R and first key LK. ’ , compare and verify the encrypted information t ’ and the smart lock data integrity tag t in the third encrypted information, if the two are the same, then send an unlocking instruction to the mechanical control module; also used to receive a locking instruction sent by the communication module and send the locking instruction to the mechanical control module;

[0028] The mechanical control module is used to receive the unlocking instruction and the locking instruction sent by the calculation module, and perform the unlocking operation and the locking operation based on the unlocking instruction and the locking instruction.

[0029] Preferably,

[0030] The calculation module is further configured to obtain unlocking success information and locking success information from the mechanical control module, and send the unlocking success information and locking success information to the communication module;

[0031] The communication module is also used to receive the unlocking success information and locking success information sent by the calculation module, and send the unlocking success information, locking success information and the identity information LID of the smart lock to the smart electronic key.

[0032] Preferably, the smart electronic key includes:

[0033] A storage module is configured to store key data, including smart electronic key identity information KID and a built-in second key KK of the key.

[0034] A smart terminal communication module is configured to receive the first encrypted information sent by the computing module and send it to the smart terminal, receive the verification code code and the third encrypted information sent by the smart terminal, and send the verification code code and the third encrypted information to the computing module.

[0035] The computing module is configured to realize data decryption, receive the verification code code and the third encrypted information sent by the smart terminal communication module, decrypt the third encrypted information to obtain the random number R, and send the unlocking instruction, the locking instruction, the verification code code, the random number R and the third encrypted information to the lock communication module. The computing module is also configured to realize data encryption, receive the identity information LID of the smart lock sent by the lock communication module, obtain the smart electronic key identity information KID of the storage module, encrypt the identity information LID of the smart lock and the smart electronic key identity information KID with the unlocking request to form the first encrypted information, and send the first encrypted information to the smart terminal communication module. The computing module is also configured to receive the unlocking success information, the locking success information and the identity information LID of the smart lock sent by the lock communication module and send them to the smart terminal communication module.

[0036] The lock communication module is configured to obtain the unlocking instruction, the locking instruction, the verification code code, the random number R and the third encrypted information sent by the computing module, and send them to the smart lock. The lock communication module is also configured to receive the unlocking success information, the locking success information and the identity information LID of the smart lock sent by the smart lock and send them to the computing module.

[0037] Alternatively,

[0038] The smart electronic key further comprises:

[0039] A power supply module is configured to supply power to the smart electronic key.

[0040] A power output module is configured to provide power supply for the smart lock.

[0041] A signal display module is configured to represent the current processing result through different photoelectric signals.

[0042] The second aspect of the present application provides a use method of the smart lock management system.

[0043] A use method of the smart lock management system, including an unlocking method, the unlocking method comprising the following steps:

[0044] The smart electronic key obtains the smart lock identity information LID, encrypts the smart lock identity information LID, the smart electronic key identity information KID and the unlocking request to form a first encrypted message, and sends the first encrypted message to the smart terminal;

[0045] The smart terminal receives the first encrypted information sent by the smart electronic key, encrypts the staff identity information UID and the first encrypted information to form a second encrypted information, and sends the second encrypted information to the data management center;

[0046] The data management center receives the second encrypted information sent by the smart terminal, generates a verification code code and a random number R, and sends the verification code code to the smart terminal; based on the verification code code and the random number R, obtains the smart electronic key ciphertext c and the smart lock data integrity tag t; based on the smart electronic key ciphertext c and the smart lock data integrity tag t, obtains the third encrypted information, and sends the third encrypted information to the smart terminal;

[0047] The smart terminal receives the verification code and the third encrypted information sent by the data management center, and sends the verification code and the third encrypted information to the smart electronic key;

[0048] The smart electronic key receives the verification code code and the third encrypted information sent by the smart terminal, decrypts the third encrypted information to obtain a random number R, and sends the verification code code, the random number R and the third encrypted information to the smart lock;

[0049] The smart lock receives the verification code code, random number R and third encrypted information sent by the smart electronic key, and generates the verification encrypted information t based on the verification code code, random number R and the first key LK corresponding to the smart lock identity information LID. ’ , compare t ’ And the smart lock data integrity tag t in the third encrypted information, if the two are the same, the unlocking action is performed.

[0050] Preferably, the method further comprises the following steps:

[0051] After the smart lock is unlocked successfully, it sends the unlocking success information and smart lock identity information LID to the smart electronic key;

[0052] The smart electronic key receives the unlocking success information and the smart lock identity information LID sent by the smart lock, and sends the smart electronic key identity information KID, the unlocking success information and the smart lock identity information LID to the smart terminal;

[0053] The intelligent terminal receives the smart electronic key identity information KID, the lock opening success information and the smart lock identity information LID sent by the smart electronic key, and sends the staff identity information UID, the smart electronic key identity information KID, the lock opening success information, the smart lock identity information LID to the data management center;

[0054] The data management center receives the staff identity information UID, the smart electronic key identity information KID, the lock opening success information and the smart lock identity information LID, and saves the current time T of the data management center, the staff identity information UID, the smart electronic key identity information KID, the lock opening success information and the smart lock identity information LID.

[0055] Preferably, the lock closing method further comprises the following steps:

[0056] The smart electronic key sends a lock closing instruction to the smart lock;

[0057] The smart lock receives the lock closing instruction sent by the smart electronic key, and performs a lock closing operation;

[0058] After the lock closing is completed, the smart lock detects the lock closing state, and sends the lock closing success information and the smart lock identity information LID to the smart electronic key;

[0059] The smart electronic key receives the lock closing success information and the smart lock identity information LID sent by the smart lock, and sends the smart electronic key identity information KID, the lock closing success information and the smart lock identity information LID to the intelligent terminal;

[0060] The intelligent terminal receives the smart electronic key identity information KID, the lock closing success information and the smart lock identity information LID sent by the smart electronic key, and sends the staff identity information UID, the smart electronic key identity information KID, the lock opening success information, the lock closing success information and the smart lock identity information LID to the data management center;

[0061] The data management center receives the staff identity information UID, the smart electronic key identity information KID, the lock opening success information and the lock closing success information, and saves the current time T of the data management center, the staff identity information UID, the smart electronic key identity information KID, the lock opening success information and the lock closing success information;

[0062] Alternatively,

[0063] The staff closes the smart lock by external force, so that the lock bolt in the smart lock returns to the original position;

[0064] The smart lock detects the lock closing state, and sends the lock closing success information and the smart lock identity information LID to the smart electronic key.

[0065] One or more of the above technical solutions have the following beneficial effects:

[0066] 1. This invention provides a smart lock management system and usage method. Smart locks and smart electronic keys can be remotely authorized, flexibly matching users, smart electronic keys, and smart locks, providing great convenience in emergency situations. The integrity of unlocking command data and lock / open / close status data is protected to resist tampering and forgery, and the use of random numbers resists data replay attacks, improving security during use. By recording unlocking and locking information, a data management center can track when and by whom, using which smart electronic key, opened or closed a specific smart lock, enhancing controllability and traceability during use.

[0067] 2. The smart electronic key of the present invention has the following features: Different users can use the same smart electronic key, but can only control those smart locks they have authorized; the same smart electronic key can control multiple smart locks; unlocking requires an authorized smart electronic key and smartphone; if either does not match, the unlocking process will not be completed; after each unlocking, the smart electronic key transmits information such as the smart lock's identity information, the smart electronic key's identity information, and an unlock / lock success signal to a data management center via the bound smartphone; by recording relevant unlocking and locking information, the data management center can track when and by whom, which smart electronic key was used to open or close a smart lock. These features are not available in traditional locks or fingerprint password locks. The key technology used in this invention is the integrity protection of unlocking command data and lock / lock status data, which resists tampering and forgery; and the use of random numbers resists data replay attacks.

[0068] Advantages of additional aspects of the present invention will be given in part in the following description and in part will be obvious from the following description, or will be learned through practice of the present invention. BRIEF DESCRIPTION OF THE DRAWINGS

[0069] The accompanying drawings, which constitute a part of the present invention, are used to provide a further understanding of the present invention. The exemplary embodiments of the present invention and their descriptions are used to explain the present invention and do not constitute improper limitations on the present invention.

[0070] Figure 1 This is a structural diagram of a smart lock.

[0071] Figure 2 This is a structural diagram of a smart electronic key.

[0072] Figure 3 This is a structural diagram of the smart lock management system. DETAILED DESCRIPTION

[0073] It should be noted that the following detailed descriptions are exemplary and intended to provide further explanation of the present invention. Unless otherwise specified, all technical and scientific terms used herein have the same meaning as commonly understood by those skilled in the art to which the present invention belongs.

[0074] It should be noted that the terms used herein are for describing particular embodiments only and are not intended to limit the exemplary embodiments according to the present invention.

[0075] In the absence of conflict, the embodiments of the present invention and the features thereof may be combined with each other.

[0076] The inventive concept of the present invention:

[0077] This invention belongs to the field of electronic product technology, involving the integration of electronic technology and cutting-edge information technology, and applies modern cryptography to the application scenario of smart locks controlled by electronic chips. To unlock a smart lock, the smart electronic key first sends an unlock request to the data management platform. After the smart electronic key connects to the smart lock, the request obtains the identity of the smart lock and transmits it, along with the smart electronic key's own identity, to the backend data management center via a smartphone using data integrity protection measures.

[0078] The unlocking command is generated by the data management center, bound to the smart unlocking key and the staff's mobile phone number, and using data integrity protection measures, it is transmitted to the smart electronic key via the smartphone. The smartphone also transmits other information to the electronic key; the smart electronic key transmits the unlocking command together with other data sent by the smartphone to the smart lock; after the smart lock receives the data and performs certain calculations and verifications, it uses a micro motor to pull open a tiny spring latch, and the smart lock automatically opens under the action of the spring force.

[0079] The present invention can solve the following problems:

[0080] (1) The problem of lost keys.

[0081] Lost keys are a common occurrence in everyday life. Traditional metal locks require multiple keys to allow multiple personnel access. However, once a key is lost, there's a risk of unauthorized opening. Whether the key was misplaced and forgotten, dropped, or stolen, it presents a potential safety hazard. For lock-controlled areas with high security requirements, key loss typically requires replacing the lock cylinder and then distributing the key to all personnel authorized to open the lock. While the lock cylinder is easy to replace, distributing the key to each individual locksmith can be inconvenient.

[0082] The lock system designed by the present invention does not present this problem. Even if the smart key is taken away by someone else, no lock can be opened without the data management center's permission. Therefore, losing the smart electronic key does not pose a serious security risk. If someone steals the smart electronic key and a staff member's smartphone, without the staff member's password, they cannot log into the smartphone software management system, communicate with the data management center, obtain authorization from the data center, or use the smart electronic key, thus losing control of the smart lock.

[0083] (2) The problem of malicious absenteeism.

[0084] With traditional locks, it's difficult to verify workers' arrival at the work site. While roadside surveillance footage can provide evidence, such evidence is difficult to obtain unless a criminal case has occurred. Consequently, it's virtually impossible to verify whether workers arrived at the work site to unlock and conduct the necessary inspections, nor can the quality of these inspections be guaranteed, unless there's an emergency, such as equipment maintenance.

[0085] The present invention conveniently solves the problem of monitoring employee absenteeism.

[0086] (3) The problem of unauthorized outsourcing.

[0087] For traditional locks, staff can privately entrust others to open the lock and close the lock after completing the maintenance work without being discovered by company managers.

[0088] However, it is very difficult for the smart lock designed by the present invention to have such OEM incidents, unless the principal also gives his own smart phone to the trustee. In today's increasingly dependent on smart phones, this situation is unlikely to happen. If the trustee uses his own mobile phone to log in to the principal's account in the data management center, and the principal tells the trustee when receiving the SMS verification code, then private OEM can still be done. This problem can be limited by management means, and can also be further achieved technically through the interaction between SMS and mobile terminal APP, that is, the SMS verification code is automatically transferred to the mobile phone APP without manual input. In general applications, the demand for this technology is not strong.

[0089] (4) False reporting of workload.

[0090] With traditional locks, a worker might work for a short time but falsely claim a longer time, leaving management with no way of knowing how long the worker actually worked after unlocking the door.

[0091] The system of the present invention can solve this problem because both unlocking and locking times need to be connected to the data management center, which clearly records the working hours. Taking photos or videos during work through a mobile terminal app can also ensure work quality. However, the possibility of malicious tampering with videos or photos cannot be ruled out, and the specific work quality of staff is not the focus of this system. The evidence information can serve as an auxiliary means to trace the source of accidents.

[0092] (5) Emergency deployment issues.

[0093] In real-world work, situations like this often arise: a piece of equipment that person X is responsible for requires urgent maintenance, but X can't arrive quickly, and nearby person Y doesn't have X's key. This means Y must first obtain a key from the key management department before taking over X's work. This situation is clearly not conducive to handling emergencies.

[0094] The system of the present invention does not have this problem. When the management department dispatches Y to replace X for maintenance work, Y is authorized to use the smart electronic key carried by Y to open a specific smart lock. This flexible configuration efficiently solves emergency deployment issues. This emergency permission can be temporary and can be granted once or multiple times.

[0095] (6) The problem of changing the lock.

[0096] If the lock body or lock core of a traditional lock is replaced, the corresponding key must also be replaced. This problem does not exist in the smart lock system of the present invention. The staff does not need to know whether the lock has been replaced, because the process of opening any smart lock is the same.

[0097] (7) The problem of matching keys and locks.

[0098] If a worker needs to open multiple locks, traditional metal locks require them to carry a bunch of keys and find a matching key each time they open a lock. The more keys there are, the more troublesome it can be to find a matching key, especially when the keys all have the same shape.

[0099] The smart locks of this invention don't have this problem. Regardless of how many smart locks there are, or how many smart electronic keys a given smart lock can be opened with, the process of opening it with a smart electronic key remains identical. This property is ideal for industrial applications with a large number of locks and a large number of locksmiths.

[0100] (8) Issues with changing fingerprint or password on fingerprint lock.

[0101] Fingerprint password lock has many advantages over traditional metal lock, but still has many problems. For example, the operation of eliminating a certain fingerprint requires certain skills, and it is not necessarily timely; eliminating a certain password password may cause all users using the password to lose the ability to open the lock. At the same time, the fingerprint lock needs to be equipped with a battery, which is not conducive to long-term use in harsh outdoor environments.

[0102] The smart lock in the present application does not have this problem. Each time the process of opening the lock is a user identity (based on the registered mobile phone number), the identity of the smart lock (the data management center can verify whether the business of the staff needs to open the smart lock), the smart electronic key (the data management center can verify whether the user carries the smart electronic key), and the smart electronic key (the data management center can verify whether the user carries the smart electronic key) are bound, and can be opened after being authorized by the data management center. The opening authorization is one-time, and the lock cannot be opened again after being closed, unless the opening process is repeated.

[0103] Embodiment one

[0104] The present embodiment discloses a smart lock management system.

[0105] As shown in Figures 1-3 , the present application designs a smart lock composed of an electronic chip controlled mechanical lock body, and a network managed smart electronic key.

[0106] (I) Smart lock

[0107] The composition of the smart lock includes a computing module, a storage module, a communication module, a mechanical control module, a mechanical lock body, etc. The computing module is a small processor that verifies whether the opening or closing instruction is legal through calculation; the storage module stores relevant data, including the identity information LID of the smart lock body, the built-in first key (a secret information) LK of the smart lock, and the opening and closing record data; the communication module is a communication interface with the smart electronic key, which is a physical interface, and sometimes also has the function of power supply for the lock body; the mechanical control module controls a micro motor, which rotates to drive a metal strip similar to a lock latch when receiving an opening instruction, so that the smart lock is opened under the action of a spring; when receiving a closing instruction, the motor rotates and can close the lock under the action of external force, and the lock latch metal strip automatically resets; the mechanical lock body part can be different according to different types of application requirements, but its fundamental principle is the blocking effect of the lock latch on the lock tongue. Removing the blocking of the lock latch is to open the lock; the lock latch restores the blocking of the lock tongue, which is to close the lock.

[0108] The present application discloses a smart lock composed of an electronic chip controlled mechanical lock body, which includes the following components:

[0109] 1) Computing module, used for executing data integrity protection algorithm MAC and other simple operations and judgments;

[0110] 2) a storage module for storing key data, including the identity information LID of the smart lock and a first encryption key LK shared between the smart lock and the data management center;

[0111] 3) a communication module for connecting the smart electronic key of the smart lock;

[0112] 4) a mechanical control module for pulling the lock bolt under the control instruction sent by the computing module.

[0113] The unlocking process of the smart lock includes the following steps:

[0114] 1) connecting the smart lock with a smart electronic key;

[0115] 2) the communication module receives the unlocking instruction sent by the smart electronic key connected with the smart lock, and transmits the instruction data to the computing module;

[0116] 3) the computing module performs calculation according to the data format, including data integrity protection algorithm and data comparison judgment. If the data verification is correct, the computing module sends the unlocking instruction to the mechanical control module;

[0117] 4) after receiving the unlocking instruction of step 2), the mechanical control module starts the micro motor to pull the lock bolt, and feeds back the execution result to the computing module;

[0118] 5) the computing module sends the unlocking success information together with the identity information LID of the smart lock to the smart electronic key through the communication module.

[0119] The schematic diagram of the smart lock disclosed in the present application is shown in Figure 1 .

[0120] The locking process of the smart lock disclosed in the present application includes the following steps:

[0121] 1) connecting the smart lock with a smart electronic key;

[0122] 2) inserting the lock tongue into the lock body by external force, and restoring the lock bolt to the original position under the action of the spring;

[0123] 3) after the computing module detects the locking success signal, the execution result together with the identity information LID of the smart lock is sent to the smart electronic key connected with the smart lock through the communication module.

[0124] or the following steps:

[0125] 1) connecting the smart lock with a smart electronic key;

[0126] 2) Insert the lock tongue into the lock body through external force;

[0127] 3) The smart electronic key sends a lock instruction to the smart lock;

[0128] 4) The calculation module transmits the locking instruction to the mechanical control module;

[0129] 5) The mechanical control module activates the micro motor to push the latch back to its original position;

[0130] 6) After the computing module detects the locking success signal, it sends the execution result together with the identity information LID of the smart lock to the smart electronic key connected to the smart lock through the communication module.

[0131] (2) Intelligent electronic key

[0132] The smart electronic key designed in the present invention is an electronic device with the following functions: (1) communication with a smart lock, including sending and receiving data to the smart lock, which is completed through a physical interface or a wireless interface; (2) communication with a smart phone, including sending and receiving data, which is achieved through a wireless connection (such as Bluetooth, WIFI); (3) data encryption algorithm E and decryption algorithm D; (4) identity authentication of the data source to avoid data forgery.

[0133] To this end, the physical components of the smart electronic key include the following parts: (1) a computing module, i.e. a microprocessor, which can realize data encryption and decryption; (2) a storage module, which stores key data, including the smart electronic key identity information KID, the key's built-in second key KK, the address of the data management center, etc.; (3) a communication module, which includes a communication interface with the smart lock and wireless communication with the smartphone; (4) a power supply module, which is powered by a rechargeable battery; (5) a power output module, which provides power to the internal processor of the smart lock when necessary; and (6) a signal display module, which indicates the results of different processing, such as success, failure, or in progress, through different photoelectric signals.

[0134] The smart electronic key disclosed in the present invention includes the following components:

[0135] 1) Computing module, used to execute encryption algorithm E and decryption algorithm D, as well as other simple calculations and judgments;

[0136] 2) a storage module for storing key data, including the identity information KID of the smart electronic key and a second data encryption key KK shared between the smart electronic key and a data management center;

[0137] 3) Lock communication module, used to connect to the smart lock, send instructions to the smart lock through the physical interface, and receive data sent by the smart lock;

[0138] 4) Mobile phone communication module, used to connect to the staff's smart phone, and connect to the background data management center through the mobile phone to send and receive data;

[0139] 5) A power input module, used to charge the smart electronic key;

[0140] 6) Power output module, which provides power supply to the smart lock physically connected to it.

[0141] The schematic diagram of the structure of the smart electronic key disclosed in the present invention is as follows Figure 2 shown.

[0142] The smart electronic key disclosed in the present invention performs the following steps during the unlocking process:

[0143] 1) Send a communication request to the connected smart lock through the physical communication interface, and the smart lock replies with its own identity information LID;

[0144] 2) After receiving the identity information LID of the smart lock connected to it, the smart electronic key sends the unlocking command CMD, the identity information LID of the smart lock, and the identity information KID of the smart electronic key to the smart phone connected to the smart electronic key, which is then forwarded to the data management center by the smart phone.

[0145] The smart electronic key disclosed in the present invention performs the following steps during the locking process:

[0146] 1) receiving a lock success message (LID, LOCKED) from the communication module of the smart lock;

[0147] 2) Send (LID, LOCKED) to the data management center via the user's mobile phone.

[0148] Or perform the following steps:

[0149] 1) The smart electronic key sends a lock instruction to the smart lock connected to it;

[0150] 2) After the smart lock is successfully locked, a message (LID, LOCKED) is sent to the smart electronic key;

[0151] 3) The smart electronic key forwards (LID, LOCKED) to the data management center via the connected smartphone, where LID is the identity information of the smart lock and LOCKED is a special identifier indicating that the lock is successfully closed.

[0152] (3) Smart lock management system

[0153] The device of the present invention is not a stand-alone device, but an application system comprising a data management center, a smart lock, a smart electronic key, and a staff member's smart phone.

[0154] A smart lock management system includes a smart lock, a smart electronic key, a smart terminal and a data management center, wherein:

[0155] The smart lock is used to communicate with the smart electronic key and send its own identity information LID to the smart electronic key; receive the verification code code, random number R and third encrypted information sent by the smart electronic key, and generate the verification encrypted information t based on the verification code code, random number R and the first key LK corresponding to the smart lock identity information LID ’ , compare and verify the encrypted information t ’ and the smart lock data integrity tag t in the third encrypted information. If the two are the same, the unlocking action is performed;

[0156] The smart electronic key is used to communicate with the smart lock, obtain the identity information LID of the smart lock, encrypt the identity information LID of the smart lock, the identity information KID of the smart electronic key, and the unlocking request to form a first encrypted message, and send the first encrypted message to the smart terminal; it is also used to receive the verification code code and the third encrypted message sent by the smart terminal, decrypt the third encrypted message to obtain a random number R, and send the verification code code, the random number R, and the third encrypted message to the smart lock;

[0157] The smart terminal is configured to receive a first encrypted message sent by the smart electronic key, encrypt the staff member's identity information UID and the first encrypted message to form a second encrypted message, and send the second encrypted message to the data management center; and is further configured to receive a verification code and a third encrypted message sent by the data management center, and send the verification code and the third encrypted message to the smart electronic key;

[0158] The data management center is used to receive the second encrypted information sent by the smart terminal, generate a verification code code and a random number R, and send the verification code code to the smart terminal; based on the verification code code and the random number R, obtain the smart electronic key ciphertext c and the smart lock data integrity tag t, obtain the third encrypted information based on the smart electronic key ciphertext c and the smart lock data integrity tag t, and send the third encrypted information to the smart terminal.

[0159] Furthermore, the data management center encrypts the random number R with the second key KK corresponding to the smart electronic key identity information KID to obtain the smart electronic key ciphertext c; edits the unlocking instruction OPEN, and encrypts the verification code code, the random number R, the unlocking instruction OPEN and the first key LK corresponding to the smart lock identity information LID to obtain the smart lock data integrity tag t.

[0160] Furthermore, the data management center is also used to determine whether the staff member in the received second encrypted information holds the smart electronic key identity information KID based on the database of correspondence between staff members, smart electronic keys and smart locks, and determine whether the smart electronic key identity information KID has the authority to open the smart lock identity information LID.

[0161] Further,

[0162] The smart electronic key is also used to send a lock instruction to the smart lock;

[0163] The smart lock is also used to receive a lock instruction sent by the smart electronic key and perform a lock operation;

[0164] or,

[0165] The smart lock is also used to detect the locked state or unlocked state, and after successful unlocking and locking, the unlocking success information, locking success information, and smart lock identity information LID are sent to the smart electronic key;

[0166] The smart electronic key is also used to receive unlocking success information, locking success information, and smart lock identity information LID sent by the smart lock, and send the smart electronic key identity information KID, unlocking success information, locking success information, and smart lock identity information LID to the smart terminal;

[0167] The smart terminal is also used to receive the smart electronic key identity information KID, unlocking success information, locking success information, and smart lock identity information LID sent by the smart electronic key, and send the staff identity information UID, the smart electronic key identity information KID, unlocking success information, locking success information, and smart lock identity information LID to the data management center;

[0168] The data management center is also used to receive staff identity information UID, smart electronic key identity information KID, unlocking success information, locking success information, and smart lock identity information LID, and save the current time T of the data management center, staff identity information UID, smart electronic key identity information KID, unlocking success information, locking success information, and smart lock identity information LID.

[0169] During use, the staff member's smartphone wirelessly connects to the smart electronic key. The smart electronic key then connects to the smart lock, obtains the smart lock's identity information, and then sends the relevant data to the staff member's smartphone. The staff member's smartphone then sends the relevant data to the data management center. Because the association between the staff member's smartphone and the smart electronic key is authorized and bound by the data management center, the smart electronic key cannot operate independently. The data management center sends an unlocking command based on this information. After receiving the unlocking command, the smart electronic key sends the command to the smart electronic key via the staff member's smartphone, and the smart electronic key sends the data to the smart lock. After receiving the command, the smart lock performs certain calculations to determine whether the command is correct and then unlocks the door.

[0170] Example 2

[0171] This embodiment discloses a method for using a smart lock management system.

[0172] The smart lock system disclosed in the present invention includes a smart lock, a smart electronic key, and a user's smartphone connected to the smart electronic key, and performs the following steps during the unlocking process:

[0173] 1) The staff connects the smart electronic key to the smart lock;

[0174] 2) The smart electronic key inquires about the identity of the smart lock, and the smart lock feeds back its smart lock identity information LID to the smart electronic key;

[0175] 3) The smart electronic key sends the following information to the smartphone: (CMD, LID, KID), where CMD is the unlock request; the smartphone sends the following information to the data management center: (UID, CMD, LID, KID), where UID is the staff member's identity, which can be the staff member's account number at the data management center;

[0176] 4) After receiving the data from step 3), the data management center performs the following steps:

[0177] a) Check whether the user has the smart electronic key identity information KID and the permission to open the smart lock identity information LID based on the staff identity information UID. If the verification fails, an error message will be displayed; otherwise, continue to execute.

[0178] b) Check the staff member's mobile phone number, randomly generate a verification code, and send the verification code to the staff member's mobile phone number;

[0179] c) Generate a random number R and encrypt the random number R using the second key KK corresponding to the smart electronic key identity information KID to obtain the smart electronic key ciphertext c = E(KK, R);

[0180] d) Edit the unlock instruction OPEN and use the first key LK corresponding to the smart lock identity information LID to calculate the smart lock data integrity tag t=MAC(LK, OPEN, code, R), where OPEN is the unlock instruction;

[0181] e) Send the encrypted result (OPEN, c, t) to the staff member’s smartphone;

[0182] 5) After the staff member's smartphone receives the above data (OPEN, c, t), the application software prompts the user to enter a verification code. After entering the verification code, the smartphone sends (OPEN, c, t, code) to the smart electronic key;

[0183] 6) The smart electronic key uses the built-in second key KK to decrypt the smart electronic key ciphertext c to obtain a random number R, and sends (OPEN, code, R, t) to the smart lock;

[0184] 7) After receiving the data from step 6), the smart lock uses the built-in first key LK to calculate t'=MAC(LK, OPEN, code, R) and verify whether the equation t'=t holds. If the verification is successful, the micro motor is activated to unlock the lock.

[0185] 8) After the smart lock is successfully unlocked, it sends data (LID, UNLOCKED) to the smart electronic key to indicate successful unlocking. The smart electronic key sends the data (LID, KID, UNLOCKED) to the staff member's smartphone, which then forwards the data to the data management center.

[0186] 9) After receiving the data in step 8), the data management center records the UID, LID, KID, T, UNLOCKED and other data, where T is the current time of the data management center.

[0187] The locking process of the smart lock system disclosed in the present invention includes the following steps:

[0188] 1) The staff closes the smart lock by external force, so that the latch in the smart lock returns to its original position;

[0189] 2) The smart lock sends data LID, LOCKED to the smart electronic key;

[0190] 3) The smart electronic key sends data (LID, KID, LOCKED) to the smartphone;

[0191] 4) The smartphone sends the data (UID, LID, KID, LOCKED) to the data management center;

[0192] 5) The data management center records the data UID, LID, KID, T, and LOCKED, where T is the current time of the data management center.

[0193] Or the following steps:

[0194] 1) The staff connects the smart electronic key to the smart lock;

[0195] 2) The smart electronic key sends a lock instruction LOCK to the smart lock;

[0196] 3) Closing the smart lock by external force;

[0197] 4) After receiving the lock instruction LOCK in step 2), the mechanical control module in the smart lock starts the micro motor to push the latch back to its original position;

[0198] 5) The smart lock sends data (LID, LOCKED) to the smart electronic key;

[0199] 6) The smart electronic key sends data (LID, KID, LOCKED) to the smartphone;

[0200] 7) The smartphone sends the data (UID, LID, KID, LOCKED) to the data management center;

[0201] 8) The data management center records the data UID, LID, KID, T, and LOCKED, where T is the current time of the data management center.

[0202] While the smart lock and smart electronic key of the present invention offer numerous advantages, the unlocking process requires no further user interaction beyond connecting the smart electronic key to the physical interface of the smart lock and entering a verification code. The entire unlocking process is completed through interaction between the smart electronic key and the operator's smartphone, and between the smartphone and the data management center. Depending on network quality, the unlocking process may take one or two seconds, or even longer, but this does not affect general business applications.

[0203] The following is an example of the steps described in this embodiment:

[0204] (I) Implementation based on national Hash function standard SM3 and national cryptographic algorithm standard SM4

[0205] In the specific implementation process, any cryptographic algorithm can be used to encrypt and decrypt data. Generally, commercial encryption algorithms are secure and reliable. In our example, considering the management and supervision of the state on related security products, the national Hash function standard SM3 and the national cryptographic algorithm standard SM4 can be used.

[0206] SM3 is a national cryptographic standard that specifies a Hash function based on 32-bit word operations, with an output of 256 bits, i.e. 32 bytes; SM4 is a national cryptographic algorithm standard, which is a block cipher with a block length of 128 bits. The original data block is a 128-bit long plaintext group, and the encrypted ciphertext group is 128 bits long. Given a key k and data data, the SM4 encryption algorithm gets the ciphertext data c = SM4Enc(k, data), and the corresponding decryption algorithm is data = SM4Dec(k, c).

[0207] (II) Specific examples

[0208] Suppose the identity information of a smart lock is LID = 0001001a (hexadecimal representation), the identity of a smart electronic key is KID = 00020013, and the mobile phone number of the staff using the smart electronic key is 12345678900.

[0209] In the data management center, the data (Zhang San, 12345678900, KID = 00020013, LID = 0001001a), (Zhang San, 12345678900, KID = 00020013, LID = 0001001b) etc. are recorded, indicating that Zhang San is the staff who holds the identity of the smart electronic key KID = 00020013, and has the right to open the smart locks 0001001a and 0001001b. The data management center implements various national standard encryption algorithms and Hash function algorithms.

[0210] When Zhang San uses the smart electronic key to open the smart lock 0001001a, the smart electronic key 00020013 is connected (such as physically connected) with the smart lock identity information LID=0001001a. The smart electronic key inquires the identity information of the smart lock, the smart lock feeds back the data 0001001a, the smart electronic key sends the data (OPEN, LID=0001001a, KID=00020013) to the mobile phone of Zhang San, the mobile phone of Zhang San sends (OPEN, LID=0001001a, KID=00020013) to the data management center through the account of the mobile phone, the data management center receives the data (OPEN, LID=0001001a, KID=00020013) and knows that the data comes from the account of UID, so records (UID, T, OPEN, LID=0001001a, KID=00020013), wherein T is the system clock.

[0211] The data management center then performs the following operations:

[0212] a) According to the smart electronic key identity information UID, check whether the user holds the smart electronic key identity information KID=00020013 and whether the user has the right to open the smart lock identity information LID=0001001a. If the verification fails, an error is prompted as needed; otherwise, the following operations are continued to be performed.

[0213] b) Check the mobile phone number of the current staff, randomly generate a verification code code=1234, and send the verification code to the mobile phone number of the staff;

[0214] c) Generate a random number R=01234567, encrypt the random number R using the second key KK corresponding to the smart electronic key identity information KID to obtain the smart electronic key ciphertext c=SM4Enc(KK, 01234567);

[0215] d) Calculate the smart lock data integrity protection tag t=SM3(LK, OPEN=01, code=1234, R=01234567) using the first key LK corresponding to the smart lock identity information LID, wherein OPEN=01 represents the opening instruction;

[0216] e) Send the encryption result (OPEN=01, t, c) to the smart phone of the staff;

[0217] After receiving the above data (01, t, c), the staff member's smartphone enters the verification code code=1234 sent from the data management center; after the user enters the verification code code=1234, the smartphone sends (OPEN=01, t, c, code=1234) to the smart electronic key;

[0218] The smart electronic key uses the built-in second key KK to decrypt the smart electronic key ciphertext c to obtain R=SM4Dec(KK,c)=01234567, and sends (OPEN=01, code=1234, R=01234567, t) to the smart lock;

[0219] After receiving the above data, the smart lock uses the built-in first key LK to calculate

[0220] t'=SM3(LK, OPEN=01, code=1234, R=01234567)

[0221] Verify whether t'=t. If the verification is successful, start the micro motor to unlock.

[0222] While the workflow between devices doesn't reveal it, smart locks, smart electronic keys, and users are all flexibly matched. The data management center maintains information about all smart locks and smart electronic keys, particularly key information. Smart locks and smart electronic keys can be manufactured independently. If industry users trust the device manufacturer's built-in keys to be secure and reliable, rekeying is not a necessary process. There are many established technologies for rekeying, and this invention does not restrict the use of any key rekeying technology.

[0223] The opening and closing data of smart locks are transmitted to the data management center. Therefore, the data management center has a precise understanding of the opening and closing status of smart locks, including when and who used which smart electronic key to open or close the smart lock. This also records the working hours of the staff after unlocking the lock. If the work process needs to be monitored, other auxiliary measures such as video surveillance are needed.

[0224] In this invention, a single smart electronic key can be used to open any smart lock, and the same smart lock can be opened with multiple smart electronic keys. There's no correlation between the smart lock and the smart electronic key; unlocking depends on authorization from the data management center. This eliminates the need for staff to carry a set of keys, regardless of how many locks they're authorized to open. The number of smart keys can be determined based on the number of staff involved, while the number of smart locks can be determined based on industry application requirements.

[0225] It should also be noted that the physical connection between the smart lock and the smart electronic key in this invention is sufficient for many practical application scenarios and is not the technical key of this invention. In some special applications, the communication connection between the smart lock and the smart electronic key can be achieved through other short-range wireless communication methods. In this case, it is only necessary to replace the physical communication interface with a short-range wireless communication interface. The use of a wireless communication interface may require more information security protection. This security protection can be achieved using traditional secure communication technologies and is not the content of this invention.

[0226] The staff's smartphone in the present invention can also be other mobile devices with mobile network communication capabilities, such as an iPad or some special device. This substitution of different names with similar functions is obvious. For the convenience of description, the present invention assumes that the mobile communication device used by the staff is a smartphone. This limitation in the name does not constitute a technical limitation of the present invention. The staff in the present invention is also based on the enterprise application model. In other application scenarios, different titles may be used.

[0227] Those skilled in the art will appreciate that the modules or steps of the present invention described above can be implemented using a general-purpose computer device. Alternatively, they can be implemented using program code executable by a computing device, which can then be stored in a storage device and executed by the computing device. Alternatively, they can be fabricated into separate integrated circuit modules, or multiple modules or steps can be fabricated into a single integrated circuit module for implementation. The present invention is not limited to any specific combination of hardware and software.

[0228] Although the above describes the specific embodiments of the present invention in conjunction with the accompanying drawings, it is not intended to limit the scope of protection of the present invention. Those skilled in the art should understand that various modifications or variations that can be made by those skilled in the art on the basis of the technical solution of the present invention without any creative work are still within the scope of protection of the present invention.

Claims

1. A smart lock management system, characterized in that: It includes smart locks, smart electronic keys, smart terminals and data management centers, including: The smart lock is used to communicate with the smart electronic key and send its own identity information LID to the smart electronic key; receive the verification code code, random number R and third encrypted information sent by the smart electronic key, and generate the verification encrypted information t based on the verification code code, random number R and the first key LK corresponding to the smart lock identity information LID ’ , compare and verify the encrypted information t ’ and the smart lock data integrity tag t in the third encrypted information. If the two are the same, the unlocking action is performed; The smart electronic key is used to communicate with the smart lock, obtain the identity information LID of the smart lock, encrypt the identity information LID of the smart lock, the identity information KID of the smart electronic key, and the unlocking request to form a first encrypted message, and send the first encrypted message to the smart terminal; it is also used to receive the verification code code and the third encrypted message sent by the smart terminal, decrypt the third encrypted message to obtain a random number R, and send the verification code code, the random number R, and the third encrypted message to the smart lock; The smart terminal is configured to receive a first encrypted message sent by the smart electronic key, encrypt the staff member's identity information UID and the first encrypted message to form a second encrypted message, and send the second encrypted message to the data management center; and is further configured to receive a verification code and a third encrypted message sent by the data management center, and send the verification code and the third encrypted message to the smart electronic key; The data management center is configured to receive the second encrypted information sent by the smart terminal, generate a verification code code and a random number R, and send the verification code code to the smart terminal; obtain the smart electronic key ciphertext c and the smart lock data integrity tag t based on the verification code code and the random number R; obtain the third encrypted information based on the smart electronic key ciphertext c and the smart lock data integrity tag t, and send the third encrypted information to the smart terminal; The data management center is also used to determine whether the staff member in the received second encrypted information holds the smart electronic key identity information KID based on a database of correspondences between staff members, smart electronic keys and smart locks, and to determine whether the smart electronic key identity information KID has the authority to open the smart lock identity information LID.

2. The smart lock management system according to claim 1, characterized in that: The data management center encrypts the random number R with the second key KK corresponding to the smart electronic key identity information KID to obtain the smart electronic key ciphertext c; edits the unlocking instruction OPEN, and encrypts the verification code code, the random number R, the unlocking instruction OPEN and the first key LK corresponding to the smart lock identity information LID to obtain the smart lock data integrity tag t.

3. The smart lock management system according to claim 1, characterized in that: The smart electronic key is also used to send a lock instruction to the smart lock; The smart lock is further configured to receive a lock instruction sent by a smart electronic key and execute a lock operation; or The smart lock is also used to detect the locked state or unlocked state, and after successful unlocking and locking, the unlocking success information, locking success information, and smart lock identity information LID are sent to the smart electronic key; The smart electronic key is also used to receive unlocking success information, locking success information, and smart lock identity information LID sent by the smart lock, and send the smart electronic key identity information KID, unlocking success information, locking success information, and smart lock identity information LID to the smart terminal; The smart terminal is also used to receive the smart electronic key identity information KID, unlocking success information, locking success information, and smart lock identity information LID sent by the smart electronic key, and send the staff identity information UID, the smart electronic key identity information KID, unlocking success information, locking success information, and smart lock identity information LID to the data management center; The data management center is also used to receive staff identity information UID, smart electronic key identity information KID, unlocking success information, locking success information, and smart lock identity information LID, and save the current time T of the data management center, staff identity information UID, smart electronic key identity information KID, unlocking success information, locking success information, and smart lock identity information LID.

4. The smart lock management system according to claim 1, characterized in that: The smart lock includes: The storage module is used to store key data, including the smart lock identity information LID, the first data encryption key LK shared between the lock and the data management center, and the unlocking and locking record data; a communication module, which is used to communicate with the smart electronic key connected to the smart lock, receive the unlocking instruction, locking instruction, verification code code, random number R and third encrypted information sent by the smart electronic key, and send the unlocking instruction, locking instruction, verification code code, random number R and third encrypted information to the computing module; The calculation module is used to receive the unlocking instruction, verification code code, random number R and third encrypted information sent by the communication module, obtain the data encryption first key LK in the storage module and execute the data integrity protection algorithm MAC, and generate the verification encryption information t based on the verification code code, random number R and first key LK. ’ , compare and verify the encrypted information t ’ and the smart lock data integrity tag t in the third encrypted information, if the two are the same, then send an unlocking instruction to the mechanical control module; also used to receive a locking instruction sent by the communication module and send the locking instruction to the mechanical control module; The mechanical control module is used to receive the unlocking instruction and the locking instruction sent by the calculation module, and perform the unlocking operation and the locking operation based on the unlocking instruction and the locking instruction.

5. The smart lock management system according to claim 4, characterized in that: The calculation module is further configured to obtain unlocking success information and locking success information from the mechanical control module, and send the unlocking success information and locking success information to the communication module; The communication module is also used to receive the unlocking success information and locking success information sent by the calculation module, and send the unlocking success information, locking success information and smart lock identity information LID to the smart electronic key.

6. The smart lock management system according to claim 1, characterized in that: The smart electronic key includes: A storage module, which is used to store key data, including the smart electronic key identity information KID and the key's built-in second key KK; The smart terminal communication module is configured to receive the first encrypted information sent by the calculation module and send it to the smart terminal, receive the verification code and the third encrypted information sent by the smart terminal, and send the verification code and the third encrypted information to the calculation module; The computing module is used to implement data decryption, receive the verification code code and the third encrypted information sent by the smart terminal communication module, decrypt the third encrypted information to obtain a random number R, and send the unlocking instruction, locking instruction, verification code code, random number R and the third encrypted information to the lock communication module; it is also used for data encryption, receives the identity information LID of the smart lock sent by the lock communication module, obtains the identity information KID of the smart electronic key from the storage module, encrypts the identity information LID of the smart lock, the identity information KID of the smart electronic key and the unlocking request to form a first encrypted message, and sends the first encrypted message to the smart terminal communication module; receives the unlocking success message, locking success message and the identity information LID of the smart lock sent by the lock communication module, and sends them to the smart terminal communication module; The lock communication module is used to obtain the unlocking instruction, locking instruction, verification code code, random number R and third encrypted information sent by the calculation module, and send the unlocking instruction, locking instruction, verification code code, random number R and third encrypted information to the smart lock; receive the unlocking success information, locking success information and smart lock identity information LID sent by the smart lock and send them to the calculation module; or, The smart electronic key also includes: A power supply module, which is used to supply power to the smart electronic key; A power output module, which is used to provide power supply for the smart lock; The signal display module is used to indicate the current processing results through different photoelectric signals.

7. A method for using a smart lock management system, characterized by: The invention comprises an unlocking method, wherein the unlocking method comprises the following steps: The smart electronic key obtains the smart lock identity information LID, encrypts the smart lock identity information LID, the smart electronic key identity information KID and the unlocking request to form a first encrypted message, and sends the first encrypted message to the smart terminal; The smart terminal receives the first encrypted information sent by the smart electronic key, encrypts the staff identity information UID and the first encrypted information to form a second encrypted information, and sends the second encrypted information to the data management center; The data management center receives the second encrypted information sent by the smart terminal, generates a verification code code and a random number R, and sends the verification code code to the smart terminal; based on the verification code code and the random number R, obtains the smart electronic key ciphertext c and the smart lock data integrity tag t; based on the smart electronic key ciphertext c and the smart lock data integrity tag t, obtains the third encrypted information, and sends the third encrypted information to the smart terminal; The smart terminal receives the verification code and the third encrypted information sent by the data management center, and sends the verification code and the third encrypted information to the smart electronic key; The smart electronic key receives the verification code code and the third encrypted information sent by the smart terminal, decrypts the third encrypted information to obtain a random number R, and sends the verification code code, the random number R and the third encrypted information to the smart lock; The smart lock receives the verification code code, random number R and third encrypted information sent by the smart electronic key, and generates the verification encrypted information t based on the verification code code, random number R and the first key LK corresponding to the smart lock identity information LID. ’ , compare and verify the encrypted information t ’ and the smart lock data integrity tag t in the third encrypted information. If the two are the same, the unlocking action is performed; The data management center is also used to determine whether the staff member in the received second encrypted information holds the smart electronic key identity information KID based on a database of correspondences between staff members, smart electronic keys and smart locks, and to determine whether the smart electronic key identity information KID has the authority to open the smart lock identity information LID.

8. The method for using the smart lock management system according to claim 7, characterized in that: The following steps are also included: After the smart lock is unlocked successfully, it sends the unlocking success information and smart lock identity information LID to the smart electronic key; The smart electronic key receives the unlocking success information and the smart lock identity information LID sent by the smart lock, and sends the smart electronic key identity information KID, the unlocking success information and the smart lock identity information LID to the smart terminal; The smart terminal receives the smart electronic key identity information KID, unlocking success information, and smart lock identity information LID sent by the smart electronic key, and sends the staff identity information UID, the smart electronic key identity information KID, unlocking success information, and smart lock identity information LID to the data management center; The data management center receives the staff identity information UID, the smart electronic key identity information KID, the unlocking success information, and the smart lock identity information LID, and saves the current time T of the data management center, the staff identity information UID, the smart electronic key identity information KID, the unlocking success information, and the smart lock identity information LID.

9. The method for using the smart lock management system according to claim 8, characterized in that: The invention also includes a locking method, wherein the locking method comprises the following steps: The smart electronic key sends a lock command to the smart lock; The smart lock receives the lock command sent by the smart electronic key and performs the lock operation; After the lock is closed, the smart lock detects the lock status and sends the lock success information and smart lock identity information LID to the smart electronic key; The smart electronic key receives the lock success information and the smart lock identity information LID sent by the smart lock, and sends the smart electronic key identity information KID, the lock success information and the smart lock identity information LID to the smart terminal; The smart terminal receives the smart electronic key identity information KID, lock success information, and smart lock identity information LID sent by the smart electronic key, and sends the staff identity information UID, smart electronic key identity information KID, unlock success information, lock success information, and smart lock identity information LID to the data management center; The data management center receives the staff identity information UID, the smart electronic key identity information KID, the lock success information, and the smart lock identity information LID, and saves the data management center's current time T, the staff identity information UID, the smart electronic key identity information KID, the lock success information, and the smart lock identity information LID; or, The staff closes the smart lock with external force, returning the latch inside the smart lock to its original position; The smart lock detects the lock status and sends the lock success information and smart lock identity information LID to the smart electronic key.

Images