Access control management system

Abstract

The embodiment of this specification discloses a door access management system, including a door access management server, an adapter, multiple vendor servers, and multiple door access devices; the adapter is configured with a device access parameter list, and the device access list stores the access parameters of vendor servers of different brands of door access devices corresponding to different organizations; when the adapter receives a device access request sent by the door access management server, it obtains the access parameters of the relevant vendor servers according to the organization in the device access request and the device access list, and sends the device access request to the vendor server corresponding to the access parameters; the vendor server responds to the device access request, connects the door access device to the system, and feeds back the device configuration information of the door access device related to the organization to the door access management server via the adapter. The embodiment of this specification can perform compatible management of door access management devices of different brands.

Description

Technical Field

[0001] One or more embodiments of the present specification relate to the field of information management technology, and in particular, to a door access management system. Background Art

[0002] With the rapid development of intelligent access control systems, many brands and models of access control devices have appeared on the market. Due to the differences in brands and parameters between devices, users such as parks or enterprises face major challenges when implementing unified access control management, including but not limited to poor compatibility, difficult integration, and complex management. Summary of the invention

[0003] One or more embodiments of this specification describe an access control management system that can perform compatible management of access control management devices of different brands.

[0004] In the first aspect, an embodiment of the present specification provides a door access management system, including an door access management server, an adapter, multiple vendor servers, and multiple door access devices; the adapter is configured with a device access parameter list, and the device access list stores the access parameters of vendor servers of different brands of door access devices corresponding to different organizations; when the adapter receives a device access request sent by the door access management server, it obtains the access parameters of the relevant vendor servers according to the organization in the device access request and compares the device access list, and sends the device access request to the vendor server corresponding to the access parameters; the vendor server responds to the device access request, connects the door access device to the system, and feeds back the device configuration information of the door access device related to the organization to the door access management server via the adapter.

[0005] In some implementations, the access control management server includes:

[0006] An organization creation module is used to build an organization based on entity object information;

[0007] A device access module, used to form a device access request based on the organization;

[0008] The storage module is used to store the device configuration information of the access control device fed back by the manufacturer's server together with the corresponding organization.

[0009] In some implementations, the access control management server further includes:

[0010] The scene configuration module is used to generate a scene group corresponding to each space based on the asset information of multiple spaces of the physical object, and the scene group is configured with device configuration information of the access control device installed in the space.

[0011] In some embodiments, the scenario configuration module includes:

[0012] A scene initialization unit, used to generate a scene group corresponding to each space based on asset information of multiple spaces of the entity object;

[0013] The scene configuration unit is used to configure the device configuration information of the access control device in the same space with the installation location information into the corresponding scene group according to the installation location information in the device configuration information.

[0014] In some implementations, the access control management server further includes:

[0015] The permission configuration module is used to generate a permission group corresponding to the scenario group, wherein the permission group is configured with permission information, user information, and device configuration information synchronized with the scenario group.

[0016] The permission configuration module includes:

[0017] A permission initialization unit, used to generate a permission group corresponding to the scenario group;

[0018] The permission configuration unit is used to configure permission information for the permission group, obtain the device configuration information synchronized by the scene configuration module to the permission configuration module, and configure the device configuration information in the permission group corresponding to the scene group, and also obtain the user information of the entity object allowed to pass in the space corresponding to the scene group, and configure the user information in the permission group.

[0019] In some implementations, the access control management server further includes:

[0020] A user binding module is used to send a user identification request containing user information under a corresponding organization to a corresponding manufacturer server via an adapter;

[0021] When receiving the user identification request, the adapter processes the user information in the user identification request based on the data rules under the corresponding organization in the first data rule table according to the organization in the user identification request, forms a new user identification request containing the processed user information and sends it to the manufacturer server, wherein the first data rule table stores data rules of different brands of access control devices corresponding to different organizations, and each data rule is configured with user parameters required by the manufacturer;

[0022] The manufacturer server responds to the new user identification request and feeds back the generated user identification to the access control management server via the adapter;

[0023] The storage module is also used to store the fed-back user identification and the user information requested by the user identification in correspondence;

[0024] The user binding module is further used to obtain the permission group configuration information related to the user information with the user identifier, and send the permission group configuration information related to the user information along with the user identifier to the manufacturer server via the adapter;

[0025] After receiving the permission group configuration information related to the user information, the adapter processes the permission group configuration information related to the user information based on the data rules of the corresponding organization in the second data rule table according to the organization to which the permission group configuration information belongs and the second data rule table, thereby forming the processed permission group configuration information related to the user information and sending it to the manufacturer server along with the user identifier, wherein the second data rule table stores data rules for access control devices of different brands corresponding to different organizations, and each data rule is configured with the permission parameters required by the manufacturer.

[0026] In some implementations, the user binding module includes:

[0027] A request unit, used to generate a user identification request based on user information under a corresponding organization;

[0028] The query unit, after receiving the user identification request fed back by the manufacturer server, queries the permission group related to the user information with the user identification in the organization, and if there is, triggers the sending unit; if not, triggers the permission configuration module to generate a new permission group, configures the permission information, user information and device configuration information synchronized with the scene group for the permission group, and returns to the query unit after the permission group configuration is successful;

[0029] The sending unit is used to send the permission group configuration information related to the user information along with the user identification to the manufacturer server via the adapter.

[0030] In some embodiments, the vendor server includes:

[0031] The device configuration module generates organization information and organization identification based on the device access request; obtains the device information and authentication information of the access control device installed in the physical object; generates device configuration information based on the organization identification, device information, and authentication information and feeds it back to the access control management server through the adapter;

[0032] The saving module stores the device configuration information and the organization information in correspondence.

[0033] In some embodiments, the device configuration module also generates a user ID corresponding to the organization sent by the user ID request based on the user ID request sent by the access control management server; the storage module also stores the permission group configuration information related to the user information sent by the access control management server in correspondence with the user ID and organization information.

[0034] The beneficial effects brought by the technical solutions provided by some embodiments of this specification include at least:

[0035] The system of the embodiment of the present specification utilizes an adapter to realize the connection between the access control management server and the manufacturer servers of multiple brands so as to manage access control devices of different brands; the adapter can perform parameter conversion on the information sent by the access control management server according to the parameter requirements of the manufacturer server so as to solve the incompatibility problem of data interaction management of multiple brands of devices; further, the system of the embodiment of the present specification can realize the binding management of organizations, scenarios, permissions, equipment and personnel, especially when there are multiple companies / institutions in a management park, or multiple companies / institutions in a building, or multiple departments in a university, and each company / institution adopts a different brand of access control devices, the inherent parameter characteristics of the manufacturer server can be utilized to bind the different brands of access control management servers adopted by different companies / institutions in the system to achieve accurate management. BRIEF DESCRIPTION OF THE DRAWINGS

[0036] In order to more clearly illustrate the technical solutions in the embodiments of this specification, the drawings required for use in the embodiments will be briefly introduced below. Obviously, the drawings described below are only some embodiments of this specification. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0037] Figure 1 A system framework diagram of a door access management system provided in an embodiment of this specification;

[0038] Figure 2 A schematic diagram of data flow for binding device configuration information of access control devices in an access control management system provided in an embodiment of this specification to an access control management server;

[0039] Figure 3 A schematic diagram of data flow for configuring scene groups and permission groups in a door access management system provided in an embodiment of this specification;

[0040] Figure 4 A schematic diagram of data flow for binding user information between a door access management server and a door access device in a door access management system provided in an embodiment of this specification. DETAILED DESCRIPTION

[0041] The technical solutions in the embodiments of this specification will be described clearly and completely below in conjunction with the drawings in the embodiments of this specification.

[0042] The terms "first", "second", "third", etc. in the description and claims of this specification and the above-mentioned drawings are used to distinguish different objects, rather than to describe a specific order. In addition, the terms "including" and "having" and any variations thereof are intended to cover non-exclusive inclusions. For example, a process, method, system, product or device that includes a series of steps or units is not limited to the listed steps or units, but optionally includes steps or units that are not listed, or optionally includes other steps or units inherent to these processes, methods, products or devices.

[0043] There are multiple institutions or companies in various industrial parks and public buildings. To achieve access control management, the park or building is often equipped with an access control management system, and each institution or company in the park or building is equipped with another access control management system. This makes it impossible for the park / public building to perform unified access control management for each institution or company within it. In particular, when each institution or company uses access control equipment of different brands, data compatibility issues caused by differences in equipment brands make it more difficult for the park / public building to perform unified access control management for each institution or company. If multiple adapters are configured to adapt to access control equipment of different brands, the equipment and wiring costs of the park / public building will increase.

[0044] Based on this, the embodiments of this specification propose an access control management system, which can achieve compatible management of an access control management server and access control devices of different brands based on one adapter.

[0045] like Figure 1 , Figure 1 The system framework diagram of a door access management system provided in an embodiment of this specification is shown. The system in the embodiment of this specification includes a door access management server, an adapter, multiple vendor servers, and multiple door access devices. Each vendor server corresponds to a management server for a brand of door access devices, and can manage and control several door access devices under the brand. The door access management server communicates and interacts with the vendor server via the adapter to achieve control and configuration of the door access devices. In the figure, N and m are determined according to the actual configuration quantity.

[0046] The access control management server is a server that implements access control management for each institution / company within the park / public building management end.

[0047] Access control equipment is generally a specific terminal hardware device installed at a physical object, such as an access control gate, an access control machine installed at a door, etc. Access control equipment can be installed in various spaces where physical objects are located, which can be a certain floor space, a certain room, or a certain location area. Taking a park as an example, access control equipment can be purchased and installed by the park for overall access control management of the entire park, and can also be purchased and installed by various institutions / companies for independent access control management of various institutions / companies.

[0048] In order to realize the communication interaction between the access control device and the access control management server, the access control device needs to be connected to the system and the relevant information of the terminal's access control device needs to be bound and configured in the access control management server.

[0049] The access control management server is used by multiple entity objects (which can be a park, an organization / company in the park), and different entity objects can each initiate a device access request and send it to the manufacturer server through the adapter. Before the adapter sends the device access request to the manufacturer server, it is necessary to obtain the entity object that initiated the device access request, determine the access parameters of the manufacturer server of the corresponding brand according to the brand of the access control device actually used by the entity object, and then send the device access request to the corresponding manufacturer server, so that the initiator can correctly access the access control device installed in the space where the initiator is located, and can realize subsequent data management. After receiving the device access request, the manufacturer server can obtain the device configuration information of the access control device related to the entity object stored therein after determining the entity object that initiated the device access request. The manufacturer server responds to the request and feeds back the relevant device configuration information to the access control management server through the adapter. The access control management server binds the device configuration information with the entity object that initiated the request and stores it.

[0050] Specifically, the access control management server includes an organization creation module, a device access module, and a storage module.

[0051] The organization creation module constructs an organization based on entity object information. Organization is used to abstractly represent entity objects. The entity object information can be basic information of entity objects such as parks, buildings, campuses, companies / institutions, etc., including but not limited to name, location, and asset information of space. After the organization is constructed, each organization has its own organization name and related organization configuration information, and the organization configuration information includes entity object information.

[0052] The device access module is used to form a device access request based on the organization. The device access request includes the organization name, access request instruction, etc.

[0053] The storage module is used to store the device configuration information of the access control device fed back by the manufacturer server together with the corresponding organization, that is, to realize the information binding of each organization in the access control management server with its related access control device.

[0054] The device access parameter list is pre-configured in the adapter. After obtaining the relevant brand information, manufacturer server information, and access parameters of the access control device installed by the physical object, the brand information, manufacturer server information, access parameters, and organization are stored in the device access parameter list. When the adapter receives a device access request, it obtains the information of the request initiator, such as the organization name, and can obtain the manufacturer server information and access parameters of the corresponding organization from the table. The access parameters include interface parameters, docking parameters, etc. Afterwards, the adapter sends the device access request initiated by the corresponding organization to the matching manufacturer server.

[0055] The manufacturer server includes a device configuration module and a storage module.

[0056] The device configuration module generates organization information and organization identification based on the device access request; the organization identification is an identification formed by the manufacturer server based on an internal algorithm, which can randomly generate a string of numbers, or combine conversion rules to convert the organization information into a regular representation. The device configuration module can also generate corresponding organization information in the manufacturer server based on the organization name in the device access request and the request to send related parameters.

[0057] The device configuration module also obtains device information and authentication information of the access control device installed in the physical object. The device information may include device number, installation location information, device name, etc. The authentication information may include an authentication key, which is generated by the manufacturer's server or configured in the access control device before leaving the factory.

[0058] When the access control device is put into use, it is necessary to use the manufacturer's server to configure the access control device information, that is, the access control device uploads its device information and authentication information to the manufacturer's server, and stores it in the manufacturer's server in correspondence with the organization that puts it into use. Once the manufacturer's server receives a device access request, it can obtain the device information and authentication information of the relevant access control device from the storage module. In addition, when the manufacturer's server does not store specific device information and authentication information, it only stores which access control devices are installed in the corresponding organization. After receiving the device access request, the device information and authentication information in the corresponding access control device can be read.

[0059] The device configuration module also generates device configuration information based on the organization identification, device information, and authentication information and feeds it back to the access control management server through the adapter. After receiving the device configuration information, the access control management server receives the feedback information of the device access request, and can store the device configuration information under the organization that initiated the device access request, and complete the binding storage of the organization and the access control device on the access control management server.

[0060] The storage module of the manufacturer's server stores the device configuration information generated by the device configuration module in correspondence with the organization information, and completes the binding storage of the organization and the access control device on the manufacturer's server side.

[0061] by Figure 2 For example, the access control management server is a campus access control management server, which is equipped with a smart campus access control management platform. The manufacturer server is a management server for access control equipment, which is equipped with a manufacturer management platform. The user creates a campus on the smart campus access control management platform, and then the manager of each entity object asynchronously creates an organization on the platform through the API, and then initiates a device access request to the adapter. The adapter obtains the access parameters based on the device access request and the device access parameter list, and then sends the device access request to the corresponding manufacturer server. The manufacturer server responds to the device access request and feeds back the device configuration information to the access control management server through the adapter. Since there are multiple spaces in the entity object, the access control equipment is placed in different spaces for regional management. To this end, the access control management server also includes a scene configuration module, which is used to generate a scene group corresponding to each space based on the asset information of multiple spaces of the entity object, and the scene group is configured with the device configuration information of the access control equipment installed in the space.

[0062] Specifically, the scene configuration module includes a scene initialization unit and a scene configuration unit.

[0063] The scene initialization unit is used to generate a scene group corresponding to each space based on the asset information of multiple spaces of the entity object. The asset information of the space refers to the asset information of the building, floor, and room, which is pre-annotated with the location information of each space according to the location of the space in the entity object (which can be coordinates or location numbers). For example, Company A is distributed on the 2nd and 3rd floors of a building, and each floor has rooms with different functions. If access control devices are distributed on each floor to manage the entry and exit of each floor, and access control devices are distributed in rooms with different functions to manage the entry and exit of the rooms, different scene groups can be constructed according to different spaces. In this way, there can be multiple scene groups under one organization, and the scene groups of the organization are associated with the organization.

[0064] The scene configuration unit is used to configure the device configuration information of the access control devices in the same space with the installation location information in the corresponding scene group according to the installation location information in the device configuration information. The device configuration information can obtain all device configuration information related to the organization from the storage module, and configure the device configuration information of the access control devices in different spaces in the scene group of the corresponding space based on the installation location information therein, and finally configure the device configuration information of the access control devices in the same space in the same scene group.

[0065] The installation location information may be the coordinate location information of the space where the access control device is located, or the location number of the space where the access control device is located. The setting format of the installation location information obtained by the manufacturer server from the access control device may be the same as the setting format of the location information of the space in the access control management server, that is, both are configured with coordinate parameters or location numbers. If they are different, an algorithm for determining whether the installation location information is consistent with the space location information may need to be configured in the access control server.

[0066] Furthermore, different permissions need to be configured for different scenarios. For example, the access control devices at the entrance of each floor need to be configured with access permissions for all employees. The access control devices at the entrances of rooms with different functions on each floor need to be configured with access permissions for some employees who use that function.

[0067] To this end, the access control management server further includes a permission configuration module for generating a permission group corresponding to the scene group, wherein the permission group is configured with permission information, user information, and device information synchronized with the scene group.

[0068] Specifically, the permission configuration module includes a permission initialization unit and a permission configuration unit.

[0069] The permission initialization unit is used to generate a permission group corresponding to the scenario group. One scenario group corresponds to one permission, and then a permission group is configured and associated with the corresponding scenario group.

[0070] The permission configuration unit is used to configure permission information for the permission group, for example, the permission information allowed to pass through the physical space where the scene group corresponding to the permission group is located can be configured, which can be the entry and exit permission information for all employees, or the entry and exit permission information for some employees, or the entry and exit permission information for a certain management level personnel in a certain time period, etc.

[0071] The permission configuration unit also obtains the device configuration information synchronized to the permission configuration module by the scene configuration module, and configures the device configuration information in the permission group corresponding to the scene group.

[0072] The permission configuration unit also obtains user information that the entity object is allowed to pass through in the space corresponding to the scene group, and configures the user information in the permission group. The user information includes employee ID, face information, fingerprint information, iris information, password information, etc. If there is access control for vehicles entering and exiting, the user information also includes the license plate number.

[0073] After using the above-mentioned permission configuration module to implement the binding setting of personnel and access permissions on the access control management server, it is also necessary to bind personnel, space, and equipment on the manufacturer's server so that the access control device can implement access control management on the terminal to ensure that personnel with corresponding permissions enter the allowed space and that unauthorized personnel cannot enter the space.

[0074] After the above permission configuration module and scene configuration module are configured in the access control management server, the configuration information of the scene group and permission group can also be synchronized to the adapter. The adapter stores it in the relevant organization.

[0075] The access control management server also includes a user binding module, which is used to send a user identification request containing user information under a corresponding organization to a corresponding manufacturer server via an adapter.

[0076] When receiving a user identification request, the adapter compares the organization in the user identification request with the first data rule table, processes the user information in the user identification request based on the data rules under the corresponding organization in the first data rule table, forms a new user identification request containing the processed user information, and sends it to the manufacturer server. The first data rule table stores data rules for different brands of access control devices corresponding to different organizations, and each data rule is configured with user parameters required by the manufacturer.

[0077] The manufacturer server responds to the new user identification request and feeds back the generated user identification to the access control management server via the adapter.

[0078] The storage module is also used to store the fed-back user identification and the user information requested by the user identification in correspondence.

[0079] The user binding module is also used to obtain the permission group configuration information related to the user information with the user identifier, and send the permission group configuration information related to the user information along with the user identifier to the manufacturer server via the adapter.

[0080] After receiving the permission group configuration information related to the user information, the adapter processes the permission group configuration information related to the user information based on the data rules of the corresponding organization in the second data rule table according to the organization to which the permission group configuration information belongs and the second data rule table, thereby forming the processed permission group configuration information related to the user information and sending it to the manufacturer server along with the user identifier, wherein the second data rule table stores data rules for access control devices of different brands corresponding to different organizations, and each data rule is configured with the permission parameters required by the manufacturer.

[0081] Specifically, the user binding module includes a request unit, a query unit, and a sending unit.

[0082] The request unit is used to generate a user identification request based on the user information of the corresponding organization. Specifically, the user identification request includes the organization name, user information, and a user identification request instruction.

[0083] After receiving the user identification request, the adapter obtains the organization name and searches the first data rule table pre-configured therein. The first data rule table configures the data rules of different brand vendor servers. After finding the relevant data rules, the adapter processes the user information according to the vendor's requirements, such as data format processing, data field interception processing, etc. The adapter sends a new user identification request containing the processed user information to the vendor server.

[0084] The device configuration module of the manufacturer server also generates a user ID corresponding to the organization sent by the user ID request based on the user ID request sent by the access control management server. The user ID is generated based on the internal algorithm of the manufacturer server, such as randomly generating a string of characters as the user ID, or configuring field conversion rules based on user information to convert user information into a regular user ID.

[0085] Correspondingly, the storage module of the manufacturer server also stores the user information, user identification, and organization information sent by the access control management server. This process completes the binding storage of user information and organization information on the manufacturer server side.

[0086] Afterwards, the manufacturer server feeds back the generated user identification to the access control management server via the adapter.

[0087] After receiving the user identification request fed back by the manufacturer server, the query unit queries the permission group related to the user information with the user identification in the organization. If there is one, the sending unit is triggered; if not, the permission configuration module is triggered to generate a new permission group, and the permission group is configured with permission information, user information and device configuration information synchronized with the scene group. After the permission group is successfully configured, it returns to the query unit.

[0088] The sending unit is used to send the permission group configuration information related to the user information along with the user identification to the manufacturer server via the adapter. For example, a configuration sending instruction can be formed to send the permission group configuration information to the manufacturer server, and the manufacturer server will eventually send the permission group configuration information to the access control device installed on the terminal. The access control device can identify the user's face or other biometric information or password information at the terminal to determine whether the user has the right to pass, and then open the gate or unlock the door to allow the user to enter, or do not open the gate or unlock the door to deny the user entry.

[0089] The above process needs to query and determine whether the corresponding scene group of the permission group has been configured on the access control management server before sending the permission group configuration information. If not, it is necessary to trigger the permission configuration module to configure the permission group for the scene group. This process of judging and configuring new permission groups can make timely adjustments to the system permissions and scene configurations that have not been updated in time due to personnel changes during the management process, so as to achieve effective data management.

[0090] The permission group configuration information refers to the information configured in the permission group, including permission information, user information, and device configuration information.

[0091] The adapter is pre-configured with a second data rule table. After receiving the permission configuration information related to the user information, it is necessary to perform data processing on the permission configuration information in accordance with the second data rule table. Specifically, the data rules under the corresponding organization name can be queried from the second data rule table according to the organization that sends the permission configuration information, such as the organization name, to determine the data rules required by the manufacturer server adopted by the organization. According to the data rules, the permission configuration information is processed by data format conversion, data field interception, etc. After processing, the permission group configuration information related to the processed user information is sent to the manufacturer server together with the user ID. The manufacturer server can store the permission group configuration information and the corresponding user ID according to the user ID. At this point, the binding storage of the organization, user permissions, and devices in the scene is completed.

[0092] Once the permissions change due to personnel changes, new permission group configuration information needs to be re-issued to the manufacturer's server and finally sent to the terminal's access control device for overwriting and updating.

[0093] by Figure 3 , Figure 4 For example, Figure 3 The figure shows the binding setting of the access control management server on its end side for the access rights of devices and personnel in a certain space. Figure 4 It shows the interaction between the access control management server and the manufacturer server, and the binding setting of the equipment and personnel access rights in a certain space is realized on the manufacturer server. In this way, the terminal access control device can perform access control identification management and send the terminal's access control management related information to the manufacturer server and the access control management server.

[0094] In some specific usage scenarios, such as conference room usage scenarios, the users will change according to the different permissions of the meeting content. At this time, it is necessary to configure permission groups under different requirements for the scene group corresponding to the space where the conference room is located. After the configuration using the permission configuration module is completed, the permission group configuration information is sent to the manufacturer's server via the adapter. The adapter needs to use the second data rule table to process the permission group configuration information, and then form new permission group configuration information and send it to the manufacturer's server. After determining the access control device under the organization to which the issued permission group configuration information belongs, the manufacturer's server also sends the permission group configuration information to the access control device. In this way, each use of the conference room is based on the newly issued permission group configuration information to check the entry and exit permissions of personnel, so as to avoid the leakage of meeting content due to the entry of unauthorized personnel in the conference room.

[0095] Before sending the configuration, you also need to use the query unit of the user binding module to query. If the same permission group configuration information is configured in the historical record, it will be sent directly. If not, you need to trigger the permission group configuration module configuration before sending it.

[0096] The embodiments described above are merely preferred embodiments of this specification and are not intended to limit the scope of this specification. Without departing from the design spirit of this specification, various modifications and improvements made to the technical solutions of this specification by ordinary technicians in this field should fall within the scope of protection determined by the claims of this specification.

Claims

1. A door access management system, characterized in that: It includes an access control management server, an adapter, multiple vendor servers, and multiple access control devices; the adapter is configured with a device access parameter list, and the device access parameter list stores access parameters of vendor servers of different brands of access control devices corresponding to different organizations; when the adapter receives a device access request sent by the access control management server, it obtains access parameters of the relevant vendor servers according to the organization in the device access request and the device access parameter list, and sends the device access request to the vendor server corresponding to the access parameters; the vendor server responds to the device access request, connects the access control device to the system, and feeds back the device configuration information of the access control device related to the organization to the access control management server via the adapter; The access control management server comprises: An organization creation module is used to build an organization based on entity object information; A device access module, used to form a device access request based on the organization; A storage module, used to store the device configuration information of the access control device fed back by the manufacturer's server together with the corresponding organization; The manufacturer server includes: The device configuration module generates organization information and organization identification based on the device access request; obtains the device information and authentication information of the access control device installed in the physical object; generates device configuration information based on the organization identification, device information, and authentication information and feeds it back to the access control management server through the adapter; The saving module stores the device configuration information and the organization information in correspondence.

2. The system according to claim 1, characterized in that The access control management server also includes: The scene configuration module is used to generate a scene group corresponding to each space based on the asset information of multiple spaces of the physical object, and the scene group is configured with device configuration information of the access control device installed in the space.

3. The system according to claim 2, characterized in that The scene configuration module includes: A scene initialization unit, used to generate a scene group corresponding to each space based on asset information of multiple spaces of the entity object; The scene configuration unit is used to configure the device configuration information of the access control device in the same space with the installation location information into the corresponding scene group according to the installation location information in the device configuration information.

4. The system according to claim 2, characterized in that The access control management server also includes: The permission configuration module is used to generate a permission group corresponding to the scenario group, wherein the permission group is configured with permission information, user information, and device configuration information synchronized with the scenario group.

5. The system according to claim 4, characterized in that The permission configuration module includes: A permission initialization unit, used to generate a permission group corresponding to the scenario group; The permission configuration unit is used to configure permission information for the permission group, obtain the device configuration information synchronized by the scene configuration module to the permission configuration module, and configure the device configuration information in the permission group corresponding to the scene group, and also obtain the user information of the entity object allowed to pass in the space corresponding to the scene group, and configure the user information in the permission group.

6. The system according to claim 4, characterized in that The access control management server also includes: A user binding module is used to send a user identification request containing user information under a corresponding organization to a corresponding manufacturer server via an adapter; When receiving the user identification request, the adapter processes the user information in the user identification request based on the data rules under the corresponding organization in the first data rule table according to the organization in the user identification request, forms a new user identification request containing the processed user information and sends it to the manufacturer server, wherein the first data rule table stores data rules of different brands of access control devices corresponding to different organizations, and each data rule is configured with user parameters required by the manufacturer; The manufacturer server responds to the new user identification request and feeds back the generated user identification to the access control management server via the adapter; The storage module is also used to store the fed-back user identification and the user information requested by the user identification in correspondence; The user binding module is further used to obtain the permission group configuration information related to the user information with the user identifier, and send the permission group configuration information related to the user information along with the user identifier to the manufacturer server through the adapter; the permission group configuration information refers to the information configured in the permission group, including permission information, user information, and device configuration information; After receiving the permission group configuration information related to the user information, the adapter processes the permission group configuration information related to the user information based on the data rules of the corresponding organization in the second data rule table according to the organization to which the permission group configuration information belongs and the second data rule table, thereby forming the processed permission group configuration information related to the user information and sending it to the manufacturer server along with the user identifier, wherein the second data rule table stores data rules for access control devices of different brands corresponding to different organizations, and each data rule is configured with the permission parameters required by the manufacturer.

7. The system according to claim 6, characterized in that The user binding module includes: A request unit, used to generate a user identification request based on user information under a corresponding organization; The query unit, after receiving the user identifier fed back by the manufacturer server, queries the permission group related to the user information with the user identifier in the organization, and if there is one, triggers the sending unit; if not, triggers the permission configuration module to generate a new permission group, configures the permission information, user information and device configuration information synchronized with the scene group for the permission group, and returns to the query unit after the permission group configuration is successful; The sending unit is used to send the permission group configuration information related to the user information along with the user identification to the manufacturer server via the adapter.

8. The system according to claim 6, characterized in that The device configuration module also generates a user ID corresponding to the organization sent by the user ID request based on the user ID request sent by the access control management server; the storage module also stores the permission group configuration information related to the user information sent by the access control management server in correspondence with the user ID and organization information; the permission group configuration information refers to the information configured within the permission group, including permission information, user information, and device configuration information.

Images