An intelligent cabinet linkage control system for in and out of a case of property involved
By collecting and encrypting the facial and fingerprint data of case handlers, generating rule tuples and using keys for verification, the problem of data tampering during transmission of case handlers is solved, and data security and reliability of identity authentication are achieved during the storage and retrieval of case-related property.
Patent Information
- Application Number
- CN202211134614.X
- Authority / Receiving Office
- CN · China
- Patent Type
- Patents(China)
- Current Assignee / Owner
- Filing Date
- 2022-09-19
- Publication Date
- 2025-12-30
- Estimated Expiration
- 2042-09-19
AI Technical Summary
During the process of storing and retrieving the seized assets, there is a high risk that the facial and fingerprint data of the investigators may be tampered with during transmission, and existing technologies cannot effectively guarantee the security of data transmission.
An identity information collection module is used to collect facial and fingerprint data from case handlers and personnel registered in the center, generating identity information. The authentication and comparison module generates rule tuples, which are then encrypted using an asymmetric algorithm and transmitted to the authentication server. The data is verified using public and private keys to ensure data integrity.
This effectively prevents data from being tampered with during transmission, reduces the probability of theft of involved assets, and ensures the security and accuracy of the identity information of investigators.
Smart Images

Figure CN116471030B_ABST
Abstract
Description
Technical Field
[0001] This invention relates to the field of data security technology, specifically to a smart locker linkage control system for the entry and exit of seized assets. Background Technology
[0002] One existing method for storing and retrieving seized assets involves investigators bringing the assets to a centralized asset management center. The center's designated personnel handle the entry and exit of these assets. These personnel are fixed, and their facial and fingerprint data is recorded in the center's backend system. When these personnel handle the entry and exit of assets, their facial and fingerprint data is compared with the pre-recorded data in the backend system. This process directly transmits data from the front end to the back end, greatly reducing the risk of data tampering during transmission. After retrieving the seized assets, the personnel hand them over to the investigators.
[0003] The same authentication method is used for investigators. However, due to the non-fixed nature of investigators and the temporary allocation of their access to seized assets, the authentication process involves retrieving their facial and fingerprint data from a related authentication server and transmitting the data to the backend of the centralized asset management center for online comparison. This process, which transmits data online over the network, carries a high risk of tampering with the investigators' facial and fingerprint data during transmission. It is impossible to guarantee that the data will not be altered during transmission. To address these issues, this invention proposes a solution. Summary of the Invention
[0004] The purpose of this invention is to provide a smart locker linkage control system for the entry and exit of seized property, in order to solve the problem of data tampering during the authentication process by law enforcement personnel before storing or retrieving seized property.
[0005] The objective of this invention can be achieved through the following technical solutions:
[0006] A smart locker linkage control system for the entry and exit of seized property, characterized in that it includes:
[0007] The identity information collection module collects facial and fingerprint data of case-handling personnel and personnel entering the center's warehouse when depositing or retrieving involved property. The identity information collection module includes a first collection unit.
[0008] The first collection unit collects the facial and fingerprint data of the personnel handling the case who are depositing or retrieving the property involved in the case and generates the identity information of the personnel handling the case related to the property involved in the case;
[0009] The authentication and comparison module is used to authenticate the identity information of case handling personnel and the identity information of personnel stored in the center. The authentication and comparison module includes a first authentication unit and a key unit;
[0010] The authentication and comparison module generates a rule tuple A1 of the current identity chain of case handling personnel for the involved property according to certain rules;
[0011] The authentication and comparison module transmits the generated rule tuple of the current identity chain of case handling personnel for the involved property to the key unit. The key unit stores a pair of public keys and private keys. The key unit uses an asymmetric algorithm to encrypt the rule tuple A1 of the current identity chain of case handling personnel for the involved property with the private key and transmits the encrypted rule tuple to the authentication server;
[0012] The authentication server generates the identity chain of the current case handling personnel for the involved property based on the transmitted rule tuple A1 of the current identity chain of case handling personnel for the involved property and transmits it to the first authentication unit. The first authentication unit performs tampering verification on the identity chain of the current case handling personnel for the involved property according to certain verification rules.
[0013] Further, the rules for the authentication and comparison module to generate the rule tuple A1 of the current identity chain of case handling personnel for the involved property are as follows:
[0014] S11: The authentication and comparison module generates the number b of alternating empty blocks between the facial data and fingerprint data in the current identity chain of case handling personnel for the involved property;
[0015] Using the random.randint(d, e) method, a random integer b is randomly generated, where d ≤ b ≤ e; in this embodiment, the value of d is 1 and the value of e is 4, so the value range of b satisfies the condition 1 ≤ b ≤ 4;
[0016] S12: The authentication and comparison module generates the number a of empty blocks occupied in the current identity chain of case handling personnel for the involved property;
[0017] S121: Using the random.randint(d, e) method, a random integer a is randomly generated, where d ≤ a ≤ e; d is the preset parameter lower limit and e is the preset parameter upper limit. In this embodiment, the value of d is 1 and the value of e is 9, so the value range of a satisfies the condition 1 ≤ a ≤ 9;
[0018] S122: Perform rule limitation on the generated a:
[0019] If a < b, then first delete a, and then regenerate a random integer a according to S121 and compare it with b again until a ≥ b;
[0020] S13: The authentication comparison module generates a judgment value c for the priority ranking of the blocks containing facial data and fingerprint data in the current case handler's identity chain;
[0021] The random.randint(d, e) method is used to randomly generate a random integer c, where d ≤ c ≤ e; in this embodiment, the value of d is 1 and the value of e is 2, so the range of c satisfies the condition 1 ≤ c ≤ 2.
[0022] S14: Determine the priority order of the blocks containing facial data and fingerprint data in the current case handler's identity chain based on the randomly generated value of c, according to the following rules:
[0023] If c=1, then the block containing the facial data in the current case handler's identity chain is determined to be first.
[0024] If c=0, then the block containing the fingerprint data in the current case handler's identity chain is determined to be first.
[0025] S15: Create an empty tuple A1, and add the generated a, b, and c into tuple A1 in sequence. This will generate the rule tuple A1(a, b, c) of the identity chain of the personnel handling the current case-related property.
[0026] Furthermore, the authentication server generates the identity chain of the current case-handling personnel based on the rule tuple A1 of the transmitted identity chain of the current case-handling personnel involved in the case as follows:
[0027] S21: The authentication server obtains the facial data and fingerprint data pre-entered by the current case handler from the storage;
[0028] S22: The authentication server uses the public key to decrypt the rule tuple A1 of the identity chain of the case handlers of the involved property, and obtains a, b, c in the rule tuple A1 of the current identity chain of the case handlers of the involved property.
[0029] S23: The authentication server generates the initial block P1 in the identity chain of the personnel handling the current case-related property;
[0030] S24: The authentication server analyzes a, b, and c in the rule tuple A1 of the decrypted identity chain of the personnel handling the current case involving the property. The specific analysis steps are as follows:
[0031] If c=1, then the block containing the facial data in the current case handler's identity chain is determined to be first.
[0032] The formula d = ab is used to calculate the total number d of empty blocks before the facial data and after the fingerprint data in the identity chain of the current case handler, and parity determination is performed to generate different types of identity chains for the current case handler.
[0033] If c = 0, it is determined that the block where the fingerprint data is located in the current case handling personnel identity chain is arranged in the front. The total number d of empty blocks before the facial data and after the fingerprint data in the identity chain of the current case handling personnel is calculated using the formula d = a - b, and its parity is determined to correspondingly generate different types of identity chains for the current case handling personnel. The basic identity information of the case handling personnel includes the name and ID number of the case handling personnel.
[0034] Further, in S23, the specific generation of the initial block P1 is as follows: The authentication server establishes the initial block P1 and generates a timestamp field for the initial block. The authentication server stores the basic identity information of the current case handling personnel in the initial block and generates a hash value PH1 of the initial block by performing the SHA256 algorithm on the stored basic identity information of the current case handling personnel. The authentication server stores the hash value PH1 of the initial block in the initial block P1.
[0035] Further, the verification rules for the first authentication unit to perform tampering verification on the identity chain of the current case-related property case handling personnel are as follows:
[0036] S31: The first authentication unit obtains the number I1 of hash values of all blocks in the identity chain of the current case handling personnel and compares I1 with a:
[0037] S311: If I1 > a + 3, the first authentication unit determines that the identity chain data of the current case handling personnel has been added. The first authentication unit generates an alarm instruction and transmits it to the alarm module;
[0038] S312: If I1 < a + 3, the first authentication unit generates a loss instruction and sends it to the identity information collection module. The identity information collection module re-collects the facial and fingerprint data of the current case-related property case handling personnel;
[0039] S32: The first authentication unit obtains the hash values PHa+3 stored in all blocks of the identity chain of the current case handling personnel and performs an association determination on them:
[0040] S321: The first authentication unit obtains the hash value PH1 of the initial block P1 in the identity chain of the current case handling personnel;
[0041] The first authentication unit performs a hash value operation on the data stored in the initial block P1 in the identity chain of the current case handling personnel to obtain the hash verification value PJ1 of the initial block P1 in the identity chain of the current case handling personnel;
[0042] Compare PH1 and PJ1. If PH1 = PJ1, the first authentication unit determines that the initial block P1 in the identity chain of the current case handling personnel has not been tampered with;
[0043] S322: The first authentication unit performs tampering determination on each block sequentially according to the steps in S321;
[0044] The first authentication unit determines the identity information of the current case handler based on the current case handler's identity chain, and the steps are as follows:
[0045] S41: The first authentication unit segments the identity chain of the current case handler according to a, b, and c to obtain the facial and fingerprint data stored in the identity chain of the current case handler;
[0046] S42: The first authentication unit will match the facial and fingerprint data obtained from the current investigator's identity chain with the investigator's identity information regarding the involved property collected by the first collection unit.
[0047] If the match is successful, the first authentication unit generates a first authentication pass instruction and transmits it to the identity information collection module.
[0048] If the match fails, the first authentication unit generates an alarm command and transmits it to the alarm module.
[0049] Furthermore, the identity chain of the current case handler in S24 is as follows:
[0050] This type of identity chain satisfies the conditions: c = 1, d is odd and d ≥ 2. The specific structure of this type of identity chain is: initial block.
[0051] The beneficial effects of this invention are:
[0052] (1) The present invention constructs a rule tuple for each case handler of the involved property through the authentication comparison module and encrypts the rule tuple with a public key and a private key. By utilizing the immutability of the tuple, the rule tuple is prevented from being tampered with or leaked.
[0053] (2) The present invention generates an identity chain for each case handler based on a rule tuple exclusive to each case handler, through an authentication server, ensuring that the face and fingerprint data of the case handler are not tampered with during transmission. Furthermore, by verifying the numerical and quantitative data hash values stored in the identity chain, the probability of the case handler's property being stolen is greatly reduced. Attached Figure Description
[0054] The invention will now be further described with reference to the accompanying drawings.
[0055] Figure 1 This is a system block diagram of the present invention. Detailed Implementation
[0056] The technical solutions of the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of the present invention, and not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of the present invention.
[0057] like Figure 1 As shown, a smart locker linkage control system for the entry and exit of seized property includes an identity information collection module, an authentication comparison module, an authentication server, an alarm module, and a storage module.
[0058] The identity information collection module is used to collect information on case-handling personnel and central warehouse personnel who handle the deposit and retrieval of involved property. The identity information collection module includes a first collection unit and a second collection unit.
[0059] The first collection unit collects the facial and fingerprint data of the personnel handling the case who are depositing or retrieving the property involved in the case and generates the identity information of the personnel handling the case involving the property. The first collection unit then transmits the identity information of the personnel handling the case involving the property to the authentication and comparison module.
[0060] The second acquisition unit collects facial and fingerprint data of the personnel who access the central warehouse for the case-related property and generates the identity information of the personnel who access the central warehouse for the case-related property. The second acquisition unit then transmits the identity information of the personnel who access the central warehouse for the case-related property to the authentication and comparison module.
[0061] The authentication comparison module is used to authenticate the identity information of case handlers and the identity information of personnel in the central database. The authentication comparison module includes a first authentication unit, a second authentication unit, a key unit, and a central database of personnel information. After receiving the identity information of the case handlers of the currently involved property transmitted by the identity information collection module, the authentication comparison module generates a rule tuple A1 of the identity chain of the case handlers of the currently involved property according to certain rules. The specific rules are as follows:
[0062] S11: Generate the number of empty blocks b between facial data and fingerprint data in the identity chain of the personnel handling the current case-related property;
[0063] The random.randint(d, e) method is used to randomly generate a random integer b, where d ≤ b ≤ e; in this embodiment, the value of d is 1 and the value of e is 4, so the range of b satisfies the condition 1 ≤ b ≤ 4.
[0064] S12: Generate the number 'a' of empty blocks in the current chain of identities of the personnel handling the case involving the seized assets;
[0065] S121: Use the method random.randint(d, e) to randomly generate a random integer a, where d ≤ a ≤ e; d is the lower limit of the preset parameter, and e is the upper limit of the preset parameter. In this embodiment, the value of d is 1 and the value of e is 9, so the value range of a satisfies the condition 1 ≤ a ≤ 9;
[0066] S122: Impose rules on the generated a:
[0067] If a < b, first delete a, then regenerate a random integer a according to S121 and compare it with b again until a ≥ b;
[0068] S13: Generate a judgment value c for the priority arrangement of the blocks where the facial data and fingerprint data are located in the current case handling personnel identity chain;
[0069] Use the method random.randint(d, e) to randomly generate a random integer c, where d ≤ c ≤ e; in this embodiment, the value of d is 1 and the value of e is 2, so the value range of c satisfies the condition 1 ≤ c ≤ 2;
[0070] S14: Determine the priority arrangement of the blocks where the facial data and fingerprint data are located in the current case handling personnel identity chain according to the randomly generated value of c. The determination rules are as follows:
[0071] If c = 1, it is determined that the block where the facial data is located in the current case handling personnel identity chain is arranged in the front;
[0072] If c = 0, it is determined that the block where the fingerprint data is located in the current case handling personnel identity chain is arranged in the front;
[0073] S15: Create an empty tuple A1, and sequentially add the generated a, b, and c to the tuple A1, then generate the rule tuple A1(a, b, c) of the current case-related property handling personnel identity chain. The tuple has the property of being immutable, and through this property, the risk of the elements in the tuple being tampered with is effectively avoided;
[0074] The authentication and comparison module transmits the generated rule tuple A1 of the current case-related property handling personnel identity chain to the key unit;
[0075] The key unit is used to store a pair of public keys and private keys. The key unit receives the rule tuple A1 of the current case-related property handling personnel identity chain transmitted by the authentication and comparison module and uses the private key to encrypt the rule tuple A1 of the current case-related property handling personnel identity chain using an asymmetric algorithm. The key unit transmits the encrypted rule tuple A1 of the current case-related property handling personnel identity chain to the authentication server;
[0076] The authentication server is used to generate the corresponding identity chain of the case handler based on the rule tuple of the transmitted case handler identity chain.
[0077] The authentication server stores a pair of public and private keys. It should be noted that the public and private keys stored in the authentication server are the same as those stored in the key unit.
[0078] The authentication server stores facial and fingerprint data pre-entered by all case handlers;
[0079] After receiving the encrypted rule tuple A1 of the identity chain of the investigators involved in the case of the involved property transmitted by the key unit, the authentication server decrypts it using the public key to obtain the decrypted rule tuple A1 of the identity chain of the investigators involved in the case of the involved property. The authentication server then generates the identity chain of the investigators involved in the case of the involved property according to certain steps based on the decrypted rule tuple A1 of the identity chain of the investigators involved in the case of the involved property. The specific steps are as follows:
[0080] S21: The authentication server obtains the facial data and fingerprint data pre-entered by the current case handler from the storage;
[0081] S22: The authentication server obtains a, b, and c from the rule tuple A1 of the decrypted identity chain of the current case-handling personnel involved in the case;
[0082] S23: The authentication server generates the initial block P1 in the identity chain of the personnel handling the current case-related property.
[0083] The authentication server establishes an initial block P1 and generates a timestamp field for the initial block. The authentication server stores the basic identity information of the current case handler in the initial block and performs the SHA256 algorithm on the stored basic identity information of the current case handler to generate the hash value PH1 of the initial block. The authentication server stores the hash value PH1 of the initial block in the initial block P1.
[0084] S24: The authentication server analyzes a, b, and c in the rule tuple A1 of the decrypted identity chain of the personnel handling the current case involving the property. The specific analysis steps are as follows:
[0085] If c=1, then the block containing the facial data in the current case handler's identity chain is determined to be first.
[0086] The total number of empty blocks d before the facial data and after the fingerprint data in the identity chain of the current case handler is calculated using the formula d = ab, and then parity is determined for them. The determination steps are as follows:
[0087] S241: If d is odd and d≥2, the specific structure of the current case handler's identity chain A is as follows:
[0088]
[0089] The generation principles of each block are as follows:
[0090] S2411: The authentication server establishes an empty block. Taking an empty block P2 as an example, the authentication server establishes an empty block P2 and generates a timestamp field for the empty block P2. The authentication server stores the generation time of the timestamp field of the empty block P2 as information, and uses the SHA256 algorithm to perform a hash operation on the hash value P1 of the initial block P1 and the generation time of the timestamp field of the empty block P2 to generate a hash value PH2 of the empty block P2. The authentication server stores the hash value PH1 of the initial block and the hash value PH2 of the empty block P2 together in the empty block P2. Through this storage method, the initial block P1 and the empty block P2 are linked together.
[0091] S2412: The authentication server establishes the facial block P of the current case handler's facial data. And generate facial blocks The authentication server stores the facial data of the current investigator in the facial block, using the timestamp field. The system also stores facial data of current case handlers and empty blocks. hash value Facial blocks are generated using the SHA256 algorithm. +2 hash value The authentication server will have empty blocks. hash value Stored in facial blocks
[0092] The empty block The empty block is the block preceding the facial data block in the current investigator's identity chain. hash value The hash value of the block preceding the facial data block in the current case handlers' identity chain;
[0093] S2413: The authentication server establishes fingerprint block P of the current case handler's fingerprint data. And generate fingerprint blocks The authentication server stores the fingerprint data of the current investigator in the fingerprint block, using the timestamp field. The system also stores fingerprint data of current case handlers and empty blocks. hash value Generate fingerprint blocks using the SHA256 algorithm hash value The authentication server will have empty blocks. hash value Stored in fingerprint block
[0094] The empty block The empty block is the block preceding the fingerprint block in the current investigator's identity chain. hash value The hash value of the block preceding the fingerprint block in the current investigator's identity chain;
[0095] S2414: Generate a number of empty blocks according to steps S241 to S243 and store the corresponding information in them;
[0096] S242: If d is even, then the identity chain of the current investigators is as follows:
[0097]
[0098] Generate each block in the identity chain A of the current case handler according to steps S2411 to S2414;
[0099] If c=0, it is determined that the block containing the fingerprint data in the current case handler's identity chain is arranged first, and the current case handler's identity chain is generated according to S241 to S242; in this embodiment, the basic identity information of the case handler includes the case handler's name and ID card number.
[0100] The authentication server transmits the identity chain of the current case handler to the authentication comparison unit, and the authentication comparison unit transmits the received identity chain of the current case handler to the first authentication unit. The first authentication unit verifies the identity chain of the current case handler according to certain verification rules to prevent tampering.
[0101] The specific verification rules are as follows:
[0102] S31: The first authentication unit obtains the number of hash values I1 of all blocks in the identity chain of the current case handler, and compares I1 with a:
[0103] S311: If I1>a+3, the first authentication unit determines that the identity chain data of the current case handler has been added, and the first authentication unit generates an alarm command and transmits it to the alarm module.
[0104] The alarm module is used to alarm and alert the staff of the warning center. After receiving the alarm instruction transmitted by the first authentication unit, the alarm module reminds the center staff in the form of information display and screen flashing;
[0105] S312: If I1 < a + 3, the first authentication unit generates a loss instruction and sends it to the identity information collection module, and the identity information collection module re-collects the facial and fingerprint data of the current case handling personnel of the involved property;
[0106] S32: The first authentication unit obtains the hash values PHa+3 stored in all blocks in the current case handling personnel's identity chain and performs an association determination on them:
[0107] S321: The first authentication unit obtains the hash value PH1 of the initial block P1 in the current case handling personnel's identity chain;
[0108] After the first authentication unit obtains the data stored in the initial block P1 in the current case handling personnel's identity chain, it performs a hash value operation on it to obtain the hash check value PJ1 of the initial block P1 in the current case handling personnel's identity chain;
[0109] Compare PH1 and PJ1. If PH1 = PJ1, the first authentication unit determines that the initial block P1 in the current case handling personnel's identity chain has not been tampered with;
[0110] ]S322: The first authentication unit calculates the hash values of all blocks in sequence according to the steps of S321 and finally obtains the hash value PJa+3 of Pa+3;
[0111] The first authentication unit obtains the hash value PHa+3 stored in Pa+3 and compares its PHa+3 with PJa+3:
[0112] If PHa+3 = PJa+3, the first authentication unit determines that the current case handling personnel's identity chain has not been tampered with;
[0113] If PHa+3 ≠ PJa+3, the first authentication unit determines that the current case handling personnel's identity chain has been tampered with. The first authentication unit generates an alarm instruction and transmits it to the alarm module;
[0114] The first authentication unit determines the identity information of the current case handling personnel based on the identity chain of the current case handling personnel. The steps are as follows:
[0115] S41: The first authentication unit cuts the identity chain of the current case handling personnel according to a, b, and c to obtain the facial and fingerprint data stored in the identity chain of the current case handling personnel;
[0116] S42: The first authentication unit will match the facial and fingerprint data obtained from the current investigator's identity chain with the investigator's identity information regarding the involved property collected by the first collection unit.
[0117] If the match is successful, the first authentication unit generates a first authentication pass instruction and transmits it to the identity information collection module.
[0118] If the match fails, the first authentication unit generates an alarm command and transmits it to the alarm module.
[0119] After receiving the first authentication pass instruction transmitted by the first authentication unit, the identity information collection module generates a central warehouse entry personnel information acquisition instruction and transmits it to the second collection unit. The second collection unit collects the identity information of the central warehouse entry personnel who are currently handling the entry and exit of the involved property. After obtaining the identity information of the central warehouse entry personnel who are currently handling the entry and exit of the involved property, the second collection unit transmits it to the second authentication unit. After receiving the identity information of the central warehouse entry personnel who are currently handling the entry and exit of the involved property transmitted by the second collection unit, the second authentication unit matches it with the data in the central warehouse entry personnel database.
[0120] If the match is successful, the second authentication unit generates an authentication success command and transmits it to the storage module;
[0121] The storage module includes several storage repositories, each containing several intelligent storage cabinets. After receiving the authentication success instruction generated by the second authentication unit, the storage module performs coordinated management of the involved property based on the retrieval and storage instructions input by the central warehousing personnel.
[0122] If the personnel at the central warehouse input a retrieval command, the storage module, based on the storage information of the currently involved property, will open the smart storage cabinet containing the currently involved property and generate smart storage cabinet information for the currently involved property. The personnel at the central warehouse can then retrieve the involved property based on the smart storage cabinet information for the currently involved property, thus improving efficiency.
[0123] If the personnel at the central warehouse input a storage command, the storage module will classify the current involved assets based on the information of the involved assets and intelligently generate storage information. The storage module will then open the intelligent storage cabinet of the corresponding storage warehouse based on the storage information, so as to facilitate the storage of the involved assets by the personnel at the central warehouse.
[0124] In the description of this specification, the references to terms such as "an embodiment," "example," "specific example," etc., indicate that a specific feature, structure, material, or characteristic described in connection with that embodiment or example is included in at least one embodiment or example of the present invention. In this specification, the illustrative expressions of the above terms do not necessarily refer to the same embodiment or example. Furthermore, the specific features, structures, materials, or characteristics described may be combined in any suitable manner in one or more embodiments or examples.
[0125] The above description is merely an example and illustration of the present invention. Those skilled in the art can make various modifications or additions to the specific embodiments described, or use similar methods to replace them, as long as they do not deviate from the invention or exceed the scope defined in the claims, all of which should fall within the protection scope of the present invention.
[0126] The foregoing has provided a detailed description of one embodiment of the present invention, but this description is merely a preferred embodiment and should not be construed as limiting the scope of the invention. All equivalent variations and modifications made within the scope of the claims of this invention should still fall within the patent coverage of this invention.
Claims
1. An intelligent cabinet linkage control system for the storage and retrieval of assets, characterized in that, Including: The identity information collection module collects the facial data and fingerprint data of the case-handling personnel and the central warehousing personnel who conduct the access and storage of case-related property. The identity information collection module includes a first collection unit; The first collection unit collects the facial data and fingerprint data of the case-handling personnel who conduct the access and storage of case-related property and generates the identity information of the case-handling personnel of the case-related property; The authentication and comparison module is used to authenticate the identity information of the case-handling personnel and the identity information of the central warehousing personnel. The authentication and comparison module includes a first authentication unit and a key unit; The authentication and comparison module generates a rule tuple A1 of the current case-related property case-handling personnel identity chain according to certain rules; The authentication and comparison module transmits the generated rule tuple of the current case-related property case-handling personnel identity chain to the key unit. The key unit stores a pair of public keys and private keys. The key unit uses an asymmetric algorithm to encrypt the rule tuple A1 of the current case-related property case-handling personnel identity chain with the private key and transmits the encrypted rule tuple to the authentication server; The authentication server generates the identity chain of the current case-related property case-handling personnel based on the transmitted rule tuple A1 of the current case-related property case-handling personnel identity chain and transmits it to the first authentication unit. The first authentication unit performs tampering verification on the identity chain of the current case-related property case-handling personnel according to certain verification rules; The rules for the authentication and comparison module to generate the rule tuple A1 of the current case-related property case-handling personnel identity chain are as follows: S11: The authentication and comparison module generates the number b of alternating empty blocks between the facial data and fingerprint data in the current case-related property case-handling personnel identity chain; Using the random.randint(d, e) method, a random integer b is randomly generated, where d ≤ b ≤ e; the value of d is 1, and the value of e is 4, so the value range of b satisfies the condition 1 ≤ b ≤ 4; S12: The authentication and comparison module generates the number a of empty blocks occupied in the current case-related property case-handling personnel identity chain; S121: Using the random.randint(d, e) method, a random integer a is randomly generated, where d ≤ a ≤ e; d is the preset parameter lower limit, and e is the preset parameter upper limit. The value of d is 1, and the value of e is 9, so the value range of a satisfies the condition 1 ≤ a ≤ 9; S122: Perform rule limitation on the generated a: If a < b, then first delete a, and then regenerate a random integer a according to S121 and compare it with b again until a ≥ b; S13: The authentication and comparison module generates a judgment value c for the priority arrangement of the blocks where the facial data and fingerprint data are located in the current case-handling personnel identity chain; Using the random.randint(d, e) method, a random integer c is randomly generated, where d ≤ c ≤ e; the value of d is 1, and the value of e is 2, so the value range of c satisfies the condition 1 ≤ c ≤ 2; S14: Determine the priority arrangement of the blocks where the facial data and fingerprint data are located in the current case-handling personnel identity chain according to the randomly generated value of c. The determination rules are as follows: If c = 1, it is determined that the block where the facial data is located in the current case-handling personnel identity chain is arranged in the front; If c=0, it is determined that the fingerprint data in the current case-handling personnel identity chain is arranged in the front; S15: An empty tuple A1 is created, and the generated a, b and c are sequentially added to the tuple A1, thereby generating the rule tuple A1(a, b, c) of the current case-handling personnel identity chain of the current case-related property.
2. The intelligent cabinet linkage control system for the storage and withdrawal of the property concerned according to claim 1, characterized in that, The authentication server generates the identity chain of the current case-handling personnel of the current case-related property according to the transmitted rule tuple A1 of the current case-handling personnel identity chain of the current case-related property, and the steps are as follows: S21: The authentication server acquires the face data and fingerprint data of the current case-handling personnel pre-entered in the storage; S22: The authentication server decrypts the rule tuple A1 of the case-handling personnel identity chain of the current case-related property by using the public key, and acquires a, b and c in the decrypted rule tuple A1 of the current case-handling personnel identity chain of the current case-related property; S23: The authentication server generates an initial block P1 in the current case-handling personnel identity chain; S24: The authentication server analyzes a, b and c in the decrypted rule tuple A1 of the current case-handling personnel identity chain of the current case-related property, and the specific analysis steps are as follows: If c=1, it is determined that the face data in the current case-handling personnel identity chain is arranged in the front; The total number d of the empty blocks before the face data and after the fingerprint data in the identity chain of the current case-handling personnel is calculated by using the formula d=a-b, and the parity of d is determined to correspondingly generate different types of identity chains of the current case-handling personnel. If c=0, it is determined that the fingerprint data in the current case-handling personnel identity chain is arranged in the front, the total number d of the empty blocks before the face data and after the fingerprint data in the identity chain of the current case-handling personnel is calculated by using the formula d=a-b, and the parity of d is determined to correspondingly generate different types of identity chains of the current case-handling personnel, and the basic identity information of the case-handling personnel includes the name and ID number of the case-handling personnel.
3. The intelligent cabinet linkage control system for the storage and withdrawal of the property concerned according to claim 2, characterized in that, In S23, the initial block P1 is specifically generated as follows: the authentication server establishes the initial block P1 and generates the time stamp field of the initial block, stores the basic identity information of the current case-handling personnel into the initial block, and generates the hash value PH1 of the initial block by performing SHA256 algorithm on the stored basic identity information of the current case-handling personnel, and stores the hash value PH1 of the initial block in the initial block P1.
4. The intelligent cabinet linkage control system for the storage and withdrawal of the property concerned according to claim 1, characterized in that, The verification rule of the first authentication unit for tamper checking of the identity chain of the current case-handling personnel of the current case-related property is as follows: S31: The first authentication unit acquires the number I1 of hash values of all blocks in the identity chain of the current case-handling personnel, and compares I1 with a: S311: If I1>a+3, the first authentication unit determines that the identity chain data of the current case-handling personnel is tampered; S312: If I1<a+3, the first authentication unit generates a loss instruction and sends it to the identity information collection module, and the identity information collection module re-collects the face and fingerprint data of the case-handling personnel of the current case-related property; S32: The first authentication unit acquires the hash values PHa+3 stored in all blocks in the identity chain of the current case-handling personnel and performs correlation determination thereon: S321: The first authentication unit acquires the hash value PH1 of the initial block P1 in the current case-handling personnel identity chain; The first authentication unit acquires the data stored in the initial block P1 in the current case-handling personnel identity chain and performs hash value operation to acquire the hash check value PJ1 of the initial block P1 in the current case-handling personnel identity chain; PH1 and PJ1 are compared, and if PH1=PJ1, the first authentication unit determines that the initial block P1 in the current case-handling personnel identity chain has not been tampered with; S322: The first authentication unit performs tampering determination on each block in turn according to the step of S321; The first authentication unit determines the identity information of the current case-handling personnel according to the identity chain of the current case-handling personnel, and the steps are as follows: S41: The first authentication unit cuts the current case-handling personnel identity chain according to a, b, and c to acquire the face and fingerprint data stored in the current case-handling personnel identity chain; S42: The first authentication unit performs data matching on the face and fingerprint data acquired from the current case-handling personnel identity chain and the case-handling personnel identity information of the case property collected by the first collection unit: if the matching is successful, the first authentication unit generates a first authentication pass instruction and transmits it to the identity information collection module; If the matching is unsuccessful, the first authentication unit generates an alarm instruction and transmits it to the alarm module.
5. The intelligent cabinet linkage control system for the storage and withdrawal of the property concerned according to claim 2, characterized in that, The S24 current case-handling personnel identity chain of one type is as follows: The identity chain of this type satisfies the condition: c = 1, d is an odd number and d ≥ 2, and the specific construction of the identity chain satisfying this condition type is: initial block P1 - null block P2 -... - null block P +1 - face block P +2 -... - null block P +2 + b - fingerprint block P +3 + b -... - Pa+3.
Citation Information
Patent Citations
Physical evidence information preservation traceability monitoring system and monitoring method
CN110473131A
Identity verification method and device, computer equipment and storage medium
CN112422587A