Access control safety control method and device based on M1 card, terminal and medium

Abstract

The invention discloses an access control safety control method and device based on an M1 card, a terminal and a medium. The access control safety control method comprises the following steps: firstly, based on card identification information, first card swiping dynamic data and encryption verification information stored in an access control card, carrying out validity verification on core information such as the first card swiping dynamic data through the encryption verification information; and performing consistency verification through the first card swiping dynamic data and second card swiping dynamic data stored at the card swiping terminal side, when the access control card is determined not to be tampered and a copy card is not detected, determining that access control verification succeeds, updating the card swiping dynamic data and encryption verification information at the terminal side, and then writing the card swiping dynamic data and the encryption verification information into the access control card. Therefore, verification can be carried out when the card is swiped next time. According to the technical scheme provided by the invention, not only can personnel be prevented from opening the door lock by bypassing the access control system by tampering the data in the card, but also an anti-copy card protection mechanism for bypassing the access control system by tampering the data in the card is constructed, so that the safety of the access control system is improved.

Description

Technical Field

[0001] The present application relates to the field of access control security technology, and in particular to an access control security method, device, terminal and medium based on an M1 card. Background Art

[0002] The M1 card (Mifare One card), also known as an IC card, is a commonly used inductive chip card. Due to its low price, some application scenarios that do not require very high technical security are still using the M1 card, such as access control cards, attendance cards, etc. However, due to the working principle of the M1 card, its technical security has certain risks and is easy to be copied and stolen.

[0003] In order to solve the problem that M1 cards are easily copied and misused, the existing countermeasure is to add a card swipe count field that can change according to the card swipe action in the access card and the card swiping terminal. Under normal circumstances, the card swipe count field of the access card and the card swiping terminal changes synchronously with the card swiping action. However, when the access card is copied and the copied card is swiped first, the card swipe count field of the original access card and the card swiping terminal is no longer synchronized, so the access card duplication can be discovered in time. However, this method still has the technical problem of poor information security in actual application. Summary of the invention

[0004] The present application provides an access control security method, device, terminal and medium based on an M1 card, which are used to solve the technical problem of poor information security in the existing M1 card access control system.

[0005] In order to solve the above technical problems, the first aspect of the present application provides an access control security control method based on an M1 card, comprising:

[0006] When the access card is detected to be swiped, the card identification information, the first card swiping dynamic data and the encrypted verification information in the access card are read;

[0007] According to the encrypted verification information, the first card swiping dynamic data is subjected to a legality verification to obtain a legality verification result;

[0008] According to the card identification information, matching the second card swiping dynamic data corresponding to the card identification information;

[0009] Obtaining a consistency check result according to a comparison result of the first card swiping dynamic data and the second card swiping dynamic data;

[0010] When both the legitimacy check result and the consistency check result are passed, the access control check is determined to be successful, and the second card swiping dynamic data is updated. Based on the updated second card swiping dynamic data, encrypted verification information is generated according to the encryption algorithm, and then the updated second card swiping dynamic data and the encrypted verification information are written into the access control card.

[0011] Preferably, the first card swiping dynamic data and the second card swiping dynamic data include: a card swiping count value, and the card swiping count value includes: the number of successful card swiping times or a value that changes according to a preset linear operation condition when the card swiping is successful.

[0012] Preferably, the first card swiping dynamic data and the second card swiping dynamic data also include: a verification timestamp and a list identifier, wherein the list identifier is used to indicate the access card status list to which the access card belongs, and the access card status list includes: a normal card list and an abnormal card list.

[0013] Preferably, the abnormal card list includes: a duplicate card list and a tampered card list.

[0014] Preferably, it also includes:

[0015] When the legitimacy check result passes but the consistency check result fails, it is determined that the access control check fails, and the list identifier in the second card swiping dynamic data is updated to update the access control card status list to which the access control card belongs to to the duplicate card list;

[0016] When the result of the legality check fails, it is determined that the access control check fails, and the list identifier in the second card swiping dynamic data is updated to update the access control card status list to which the access control card belongs to a tampered card list.

[0017] Preferably, according to the card identification information, after matching the second card swiping dynamic data corresponding to the card identification information, the method further includes:

[0018] According to the list identifier, when the access card status list to which the access card belongs is a duplicate card list or a tampered card list, it is determined that the access control verification has failed.

[0019] Preferably, the encrypted verification information is a MAC encryption sequence generated based on a symmetric encryption algorithm and a multi-level distributed key.

[0020] At the same time, the second aspect of the present application provides an access control security control device based on an M1 card, comprising:

[0021] A card swiping information reading unit, used to read the card identification information, the first card swiping dynamic data and the encrypted verification information in the access card when detecting that the access card is swiped;

[0022] A legitimacy verification unit, used to perform a legitimacy verification on the first card swiping dynamic data according to the encrypted verification information to obtain a legitimacy verification result;

[0023] A card swiping information matching unit, used for matching the second card swiping dynamic data corresponding to the card identification information according to the card identification information;

[0024] A consistency checking unit, used for obtaining a consistency checking result according to a comparison result of the first card swiping dynamic data and the second card swiping dynamic data;

[0025] The access control verification unit is used to determine that the access control verification is successful when both the legality verification result and the consistency verification result are passed, and to update the second card swiping dynamic data, generate encrypted verification information based on the updated second card swiping dynamic data according to the encryption algorithm, and then write the updated second card swiping dynamic data and the encrypted verification information into the access control card.

[0026] The third aspect of the present application provides an access control security control terminal based on an M1 card, comprising: a memory and a processor;

[0027] The memory is used to store program codes, and the program codes correspond to an M1 card-based access control security control method as provided in the first aspect of the present application;

[0028] The processor is configured to execute the program code.

[0029] The fourth aspect of the present application provides a computer-readable storage medium, which stores a program code corresponding to an M1 card-based access control security control method as provided in the first aspect of the present application, and the program code is used to be executed by a processor to implement an M1 card-based access control security control method as provided in the first aspect of the present application.

[0030] It can be seen from the above technical solutions that this application has the following advantages:

[0031] The scheme of the present application is first based on the card identification information, the first card swiping dynamic data and the encrypted verification information stored in the access control card, wherein the first card swiping dynamic data and the encrypted verification information are the verification information written into the access control card by the card swiping terminal after the verification when the access control card was swiped last time, and the first card swiping dynamic data and other core information are verified for legitimacy through the encrypted verification information to determine whether the card swiping dynamic data in the access control card has been tampered with, and the first card swiping dynamic data and the second card swiping dynamic data stored on the card swiping terminal side are verified for consistency to determine whether there is a duplicate card in the access control card, and when it is determined that the access control card has not been tampered with and no duplicate card is detected, the access control verification is determined to be successful, and the card swiping dynamic data and the encrypted verification information on the terminal side are updated, and then written into the access control card for verification when the card is swiped next time. The technical scheme provided by the present application uses an encrypted verification method to ensure the legitimacy of the core data in the card under the premise of being able to detect duplicate cards, and can prevent people from tampering with the data in the card to bypass the anti-copy card protection mechanism of the access control system, thereby improving security. BRIEF DESCRIPTION OF THE DRAWINGS

[0032] In order to more clearly illustrate the embodiments of the present application or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative labor.

[0033] Figure 1 A basic flow chart of an embodiment of an access control security method based on an M1 card provided in this application.

[0034] Figure 2 A detailed flow chart of an access control security control method based on an M1 card provided in this application.

[0035] Figure 3 This is a schematic diagram of the structure of an M1 card-based access control security control device embodiment provided in this application.

[0036] Figure 4 This is a schematic diagram of the structure of an M1 card-based access control security control terminal embodiment provided in this application. DETAILED DESCRIPTION

[0037] Regarding the security issues of the existing M1 access control card anti-copying measures, research has found that the card swipe count field of the existing measures exists in plain text, and the key point of the protection measure is to check whether the card swipe count fields in the access control card and the card swiping terminal are synchronized. Due to the data reading and writing mechanism of the M1 card, the holder can easily query the data in the copied card. Therefore, personnel only need to swipe the card multiple times to find out the card swipe count field that will change with the card swiping action from the data changes in the card, and even deduce the mathematical law of the change of verification information, so as to modify the card swipe count field in the card, thereby cracking the existing M1 card access control system's anti-copying measures.

[0038] The embodiments of the present application provide an M1 card-based access control security method, device, terminal and medium, which are used to solve the technical problem of poor information security in the existing M1 card access control system.

[0039] In order to make the purpose, features, and advantages of the invention of this application more obvious and easy to understand, the technical solutions in the embodiments of this application will be clearly and completely described below in conjunction with the drawings in the embodiments of this application. Obviously, the embodiments described below are only part of the embodiments of this application, not all of them. Based on the embodiments in this application, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of this application.

[0040] First, a detailed description of an M1 card-based access control method embodiment provided by the present application is as follows:

[0041] See also Figure 1 , this embodiment provides an access control security control method based on M1 card, including:

[0042] Step 101: when it is detected that the access card is swiped, the card identification information, the first card swiping dynamic data and the encrypted verification information in the access card are read;

[0043] Among them, the card identification information may include but is not limited to: card number, user ID, etc. The dynamic data of the card swiping refers to the data information triggered by the user's card swiping behavior and updated in real time according to the card swiping result. The encrypted verification information is the encrypted information generated by encrypting the dynamic data of the card swiping through a preset encryption algorithm. A data combination consisting of the dynamic data of the card swiping and the card identification information can also be used for encryption processing.

[0044] Step 102: Perform a validity check on the first card swiping dynamic data according to the encrypted verification information to obtain a validity check result;

[0045] It should be noted that the encrypted verification information read in step 101 is used to verify the legitimacy of the first card swiping dynamic data. The specific implementation method can be: using the plaintext data read in step 101, encrypted information for verification is generated through a preset encryption algorithm, and the generated encrypted verification information is compared with the read encrypted verification information. If the two are consistent, it means that the card swiping dynamic data in the access control card is written by the card swiping terminal through the card swiping behavior and has not been modified manually.

[0046] Step 103: Match the second card swiping dynamic data corresponding to the card identification information according to the card identification information;

[0047] Step 104: Obtain consistency test results based on the comparison results of the first card swiping dynamic data and the second card swiping dynamic data;

[0048] It should be noted that steps 103 and 104 of this embodiment are used to detect whether the access control card is at risk of being copied. The specific implementation method is: first, according to the card identification information read in step 101, the second card swiping dynamic data corresponding to the card identification information is matched from the card swiping terminal or the back-end server, and the first card swiping dynamic data is compared with the second card swiping dynamic data to obtain the consistency check result.

[0049] Under normal circumstances, the first card swipe dynamic data and the second card swipe dynamic data will be consistent. When the original access control card is copied and any card is swiped, the first card swipe dynamic data stored in the remaining cards and the second card swipe dynamic data stored on the terminal side will no longer be synchronized, resulting in a consistency check failure, and then reminding the user corresponding to the card number that his access control card has been copied. For example, suppose the original access control card is A0, and there are n copy cards A1~An. If one of the copy cards A1 is swiped first, the card swipe dynamic data of the card swiping terminal and the card swipe dynamic data of the copy card A1 will be updated synchronously, and the original access control card A0 and the remaining copy cards A2~An will be invalid due to the asynchronous card swipe dynamic data; if the original access control card A0 is swiped first, the card swipe dynamic data of the card swiping terminal and the card swipe dynamic data of the access control card A0 will be updated synchronously, and the remaining copy cards A1~An will be invalid due to the asynchronous card swipe dynamic data. The above two situations can remind the holder of the original access control card that his access control card has been copied, so that the user can take remedial measures in time.

[0050] Step 105. When both the legitimacy check result and the consistency check result are passed, the access control check is determined to be successful, and the second card swiping dynamic data is updated. Based on the updated second card swiping dynamic data, encrypted verification information is generated according to the encryption algorithm, and then the updated second card swiping dynamic data and the encrypted verification information are written into the access control card.

[0051] It should be noted that when it is determined that the access control card has not been tampered with and no duplicate card is detected, the access control verification is considered successful, and the card swiping dynamic data on the terminal side can be updated and the encrypted verification information can be regenerated based on the information of this card swiping behavior. The new slider dynamic data and encrypted verification information are then written into the access control card for reading and verification the next time the card is swiped.

[0052] It should be noted that although this embodiment provides an implementation method of first executing the legality verification phase and then executing the consistency verification phase, in some embodiments, the order of the legality verification phase and the consistency verification phase can be swapped, or they can be executed synchronously using parallel computing.

[0053] The above is a detailed description of a basic embodiment of an access control security method based on an M1 card provided by the present application. The following is a further detailed description of an embodiment of an access control security method based on an M1 card provided by the present application.

[0054] Furthermore, the first card swiping dynamic data and the second card swiping dynamic data include: a card swiping count value, and the card swiping count value includes: the number of successful card swiping times or a value that changes according to a preset linear operation condition when the card swiping is successful.

[0055] For example, assuming that the number of successful card swipes is x, and y is the card swipe count value, the preset linear operation condition of this embodiment is preferably a first-order linear equation, that is, y=kx+b, wherein k and b are constants with customizable values, or self-increment or self-decrement operations, such as y++ or y--, the initial value of y can be equal to the current number of successful card swipes or a custom value. Whenever the card swipe verification is successful, the value of y will change according to the preset formula.

[0056] Furthermore, the first card swiping dynamic data and the second card swiping dynamic data also include: a verification timestamp and a list identifier, wherein the list identifier is used to indicate the access card status list to which the access card belongs, and the access card status list includes: a normal card list and an abnormal card list, wherein the normal card list is the white list, and the abnormal card list includes: a gray list for recording copied access control cards, i.e., a copied card list, and a black list for recording tampered access control cards, i.e., a tampered card list.

[0057] It should be noted that, based on the above-mentioned card swiping count value as the card swiping dynamic data, in some embodiments, a verification timestamp and a name list identifier may be further added as the card swiping dynamic data to increase the difficulty of cracking the encrypted information.

[0058] Furthermore, it also includes:

[0059] When the legitimacy check result passes but the consistency check result fails, it is determined that the access control check fails, and the list identifier in the second card swiping dynamic data is updated to update the access card status list to which the access card belongs to to the copy card list;

[0060] When the result of the legality check fails, it is determined that the access control check fails, and the list identifier in the second card swiping dynamic data is updated to update the access control card status list to which the access control card belongs to the tampered card list.

[0061] It should be noted that the card swiping terminal can upload the classification results of the list of verified access control cards to the server regularly or in real time, so as to share them with other card swiping terminals through the server.

[0062] Furthermore, according to the card identification information, after matching the second card swiping dynamic data corresponding to the card identification information, the method further includes:

[0063] According to the list identifier, when the access card status list to which the access card belongs is a duplicate card list or a tampered card list, it is determined that the access control verification has failed.

[0064] Furthermore, the encrypted verification information is a MAC encryption sequence generated based on a symmetric encryption algorithm and a multi-level distributed key.

[0065] It should be noted that the symmetric key distribution application includes: root key, first-level distributed sub-key, second-level distributed sub-key, and ... n-level distributed sub-key.

[0066] Root key: root-level key, key data is generated by the project. Level 1 distributed key: the root key performs encryption operation on the level 1 distributed factor to obtain the level 1 distributed key; Level 2 distributed key: the level 1 distributed key performs encryption operation on the level 2 distributed factor to obtain the level 2 distributed key; ...; Level n distributed key: the level n-1 distributed key performs encryption operation on the level n distributed factor to obtain the level n distributed key.

[0067] The card key of this embodiment preferably adopts a secondary dispersion mechanism, that is, the secondary dispersion key is defined as the card-level key, and the security protection of the card core data is achieved through one card and one key. Then, by designing the definition of the [MAC] data source ([Card swiping count value] 4 bytes + [Card number] 4 bytes + [List ID] 1 byte + [Card swiping verification time] 7 bytes), the card core data is included in the source data of the [MAC] operation, so that the card core data cannot be forged.

[0068] The above is a detailed description of an embodiment of an access control security control method based on an M1 card provided by the present application. The following is a detailed description of an embodiment of an access control security control device based on an M1 card provided by the present application.

[0069] See also Figure 3, the embodiment of the present application provides an access control security control device based on an M1 card, comprising:

[0070] The card swiping information reading unit 201 is used to read the card identification information, the first card swiping dynamic data and the encrypted verification information in the access card when the access card is detected to be swiped;

[0071] The legitimacy verification unit 202 is used to perform a legitimacy verification on the first card swiping dynamic data according to the encrypted verification information to obtain a legitimacy verification result;

[0072] The card swiping information matching unit 203 is used to match the second card swiping dynamic data corresponding to the card identification information according to the card identification information;

[0073] A consistency check unit 204, used to obtain a consistency check result according to a comparison result of the first card swiping dynamic data and the second card swiping dynamic data;

[0074] The access control verification unit 205 is used to determine that the access control verification is successful when both the legality verification result and the consistency verification result are passed, and to update the second card swiping dynamic data. Based on the updated second card swiping dynamic data, encrypted verification information is generated according to the encryption algorithm, and then the updated second card swiping dynamic data and encrypted verification information are written into the access control card.

[0075] In addition, the present application also provides a detailed description of an M1 card-based access control security control terminal and a computer-readable storage medium embodiment.

[0076] like Figure 4 As shown, an M1 card-based access control security control terminal provided in an embodiment of the present application mainly includes a card swiping terminal, and the main components of the terminal include: a memory 33 and a processor 31, and the memory 33 and the processor 31 can be connected via a communication bus 34;

[0077] The memory is used to store program codes, and the program codes correspond to an M1 card-based access control security control method as provided in the first aspect of the present application;

[0078] The processor is used to execute program code.

[0079] A computer-readable storage medium provided in this embodiment corresponds to the memory 33 in the previous embodiment. The computer-readable storage medium stores program codes corresponding to an M1 card-based access control security control method provided in the above embodiment. The program codes are used to be executed by a processor to implement an M1 card-based access control security control method provided in the above embodiment.

[0080] Those skilled in the art can clearly understand that, for the convenience and brevity of description, the specific working processes of the terminals, devices and units described above can refer to the corresponding processes in the aforementioned method embodiments and will not be repeated here.

[0081] In the several embodiments provided in the present application, it should be understood that the disclosed terminals, devices and methods can be implemented in other ways. For example, the device embodiments described above are only schematic. For example, the division of the units is only a logical function division. There may be other division methods in actual implementation, such as multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be an indirect coupling or communication connection through some interfaces, devices or units, which can be electrical, mechanical or other forms.

[0082] The terms "first", "second", "third", "fourth", etc. (if any) in the specification of the present application and the above-mentioned drawings are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence. It should be understood that the data used in this way can be interchanged where appropriate, so that the embodiments of the present application described herein can, for example, be implemented in an order other than those illustrated or described herein. In addition, the terms "including" and "having" and any of their variations are intended to cover non-exclusive inclusions, for example, a process, method, system, product or device that includes a series of steps or units is not necessarily limited to those steps or units that are clearly listed, but may include other steps or units that are not clearly listed or inherent to these processes, methods, products or devices.

[0083] It should be understood that in the present application, "at least one (item)" means one or more, and "plurality" means two or more. "And / or" is used to describe the association relationship of associated objects, indicating that three relationships may exist. For example, "A and / or B" can mean: only A exists, only B exists, and A and B exist at the same time, where A and B can be singular or plural. The character " / " generally indicates that the objects associated before and after are in an "or" relationship. "At least one of the following" or similar expressions refers to any combination of these items, including any combination of single or plural items. For example, at least one of a, b or c can mean: a, b, c, "a and b", "a and c", "b and c", or "a and b and c", where a, b, c can be single or multiple.

[0084] The units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed on multiple network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the solution of this embodiment.

[0085] In addition, each functional unit in each embodiment of the present invention may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit. The above-mentioned integrated unit may be implemented in the form of hardware or in the form of software functional units.

[0086] If the integrated unit is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present invention, in essence, or the part that contributes to the prior art, or all or part of the technical solution can be embodied in the form of a software product. The computer software product is stored in a storage medium, including several instructions for a computer device (which can be a personal computer, a server, or a network device, etc.) to perform all or part of the steps of the method described in each embodiment of the present invention. The aforementioned storage medium includes: U disk, mobile hard disk, read-only memory (ROM, Read-Only Memory), random access memory (RAM, Random Access Memory), disk or optical disk, etc. Various media that can store program codes.

[0087] As described above, the above embodiments are only used to illustrate the technical solutions of the present application, rather than to limit them. Although the present application has been described in detail with reference to the aforementioned embodiments, those skilled in the art should understand that they can still modify the technical solutions described in the aforementioned embodiments, or make equivalent replacements for some of the technical features therein. However, these modifications or replacements do not deviate the essence of the corresponding technical solutions from the spirit and scope of the technical solutions of the embodiments of the present application.

Claims

1. A door access security control method based on M1 card, characterized in that: include: When the access card is detected to be swiped, the card identification information, the first card swiping dynamic data and the encrypted verification information in the access card are read; According to the encrypted verification information, the first card swiping dynamic data is subjected to a legality verification to obtain a legality verification result; According to the card identification information, matching the second card swiping dynamic data corresponding to the card identification information; Obtaining a consistency check result according to a comparison result of the first card swiping dynamic data and the second card swiping dynamic data; When both the legitimacy check result and the consistency check result are passed, the access control check is determined to be successful, and the second card swiping dynamic data is updated. Based on the updated second card swiping dynamic data, encrypted verification information is generated according to the encryption algorithm, and then the updated second card swiping dynamic data and the encrypted verification information are written into the access control card.

2. According to claim 1, a method for access control security based on M1 card is characterized in that: The first card swiping dynamic data and the second card swiping dynamic data include: a card swiping count value, and the card swiping count value includes: the number of successful card swiping times or a value that changes according to a preset linear operation condition when the card swiping is successful.

3. According to claim 2, a method for access control security based on M1 card is characterized in that: The first card swiping dynamic data and the second card swiping dynamic data also include: a verification timestamp and a list identifier, wherein the list identifier is used to indicate the access card status list to which the access card belongs, and the access card status list includes: a normal card list and an abnormal card list.

4. The access control method based on M1 card according to claim 3 is characterized in that: The abnormal card list includes: a duplicate card list and a tampered card list.

5. The access control method based on M1 card according to claim 4 is characterized in that: Also includes: When the legitimacy check result passes but the consistency check result fails, it is determined that the access control check fails, and the list identifier in the second card swiping dynamic data is updated to update the access control card status list to which the access control card belongs to to the copy card list; When the result of the legality check fails, it is determined that the access control check fails, and the list identifier in the second card swiping dynamic data is updated to update the access control card status list to which the access control card belongs to a tampered card list.

6. The access control method based on M1 card according to claim 3 is characterized in that: According to the card identification information, after matching the second card swiping dynamic data corresponding to the card identification information, the method further includes: According to the list identifier, when the access card status list to which the access card belongs is a duplicate card list or a tampered card list, it is determined that the access control verification has failed.

7. The access control method based on M1 card according to claim 1 is characterized in that: The encrypted verification information is a MAC encryption sequence generated based on a symmetric encryption algorithm and a multi-level distributed key.

8. An access control security control device based on M1 card, characterized in that: include: A card swiping information reading unit, used to read the card identification information, the first card swiping dynamic data and the encrypted verification information in the access card when detecting that the access card is swiped; A legitimacy verification unit, used to perform a legitimacy verification on the first card swiping dynamic data according to the encrypted verification information to obtain a legitimacy verification result; A card swiping information matching unit, used for matching the second card swiping dynamic data corresponding to the card identification information according to the card identification information; A consistency checking unit, used for obtaining a consistency checking result according to a comparison result of the first card swiping dynamic data and the second card swiping dynamic data; The access control verification unit is used to determine that the access control verification is successful when both the legality verification result and the consistency verification result are passed, and to update the second card swiping dynamic data, generate encrypted verification information based on the updated second card swiping dynamic data according to the encryption algorithm, and then write the updated second card swiping dynamic data and the encrypted verification information into the access control card.

9. An access control security control terminal based on M1 card, characterized in that: include: Memory and processor; The memory is used to store program codes, and the program codes correspond to an access control security control method based on an M1 card as claimed in any one of claims 1 to 7; The processor is configured to execute the program code.

10. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores a program code corresponding to an M1 card-based access control security method as described in any one of claims 1 to 7, and the program code is used to be executed by a processor to implement an M1 card-based access control security method as described in any one of claims 1 to 7.

Images