Internet of Things control access control system based on mobile phone app

Abstract

The invention relates to the technical field of access control, in particular to an internet of things control access control system based on a mobile phone app, which comprises an authority management module used for remotely setting the door opening authority of a user for a mobile phone terminal; the request generation module is used for receiving a door opening instruction input by a user on the mobile phone APP and acquiring fingerprint information and position information of the user; the door opening instruction generation module is used for receiving the door opening instruction, the fingerprint information and the position information sent by the mobile phone terminal, identifying the identity and the position of the user according to the fingerprint information and the position information, and sending the door opening instruction to the intelligent door lock after the identity and the position of the user pass verification; and the unlocking module is used for receiving the door opening instruction and executing unlocking operation. Therefore, the identity of a user can be recognized through the identity recognition module of the mobile phone, remote unlocking is achieved, and hardware investment and use cost are reduced.

Description

Technical Field

[0001] The present invention relates to the technical field of access control, and in particular to an access control system based on a mobile phone app and the Internet of Things. Background Art

[0002] An Internet of Things (IoT)-controlled access control system is an intelligent access control system that leverages IoT technology. It combines traditional access control systems with IoT technology, enabling remote monitoring, intelligent identification, and automated management through sensors, smart devices, cloud computing, and mobile applications. IoT-controlled access control systems are widely used in residential communities, office buildings, campuses, hotels, factories, and other locations, providing secure and convenient access control management solutions.

[0003] Existing access control systems require cameras or fingerprint collection modules to be installed at the access points to identify the user's identity, which requires the deployment of a large number of hardware terminals and increases the cost of use. Summary of the Invention

[0004] The purpose of the present invention is to provide an access control system based on a mobile phone app and the Internet of Things, which aims to identify the user's identity and remotely unlock the door through the identity recognition module of the mobile phone, reducing hardware investment and usage costs.

[0005] To achieve the above-mentioned purpose, the present invention provides an access control system based on the Internet of Things (IoT) of mobile phone apps, comprising a rights management module, a request generation module, a door opening instruction generation module, and an unlocking module;

[0006] The authority management module is used to remotely set the user's door opening authority on the mobile terminal;

[0007] The request generation module is used to receive the door opening command input by the user on the mobile phone APP and obtain the user's fingerprint information and location information;

[0008] The door opening command generation module is used to receive the door opening command, fingerprint information and location information sent by the mobile terminal, identify the user's identity and location based on the fingerprint information and location information, and send the door opening command to the smart door lock when the user's identity and location are verified;

[0009] The unlocking module is used to receive a door opening instruction and perform an unlocking operation.

[0010] Wherein, the rights management module includes a user database, an identity authentication unit and a rights allocation unit;

[0011] The user database is used to store cell user information;

[0012] The identity verification unit is used to verify the user's identity in combination with the user information before the user attempts to obtain the right to open the door;

[0013] The authority allocation unit is used to allocate door opening authority to users.

[0014] Wherein, the authority allocation unit includes an authority setting subunit, an access control information storage subunit, and an authority allocation subunit;

[0015] The permission setting subunit is used to define access rules for different access control points;

[0016] The access control information storage subunit is used to enter detailed information of all access control points in the system, including location and access control type;

[0017] The permission allocation subunit is used to allocate corresponding permissions according to user requests.

[0018] Wherein, the request generation module includes a positioning unit, a fingerprint acquisition unit and a request generation unit;

[0019] The positioning unit is used to obtain the user's location information through the mobile phone's GPS;

[0020] The fingerprint acquisition unit is used to obtain the user's fingerprint information through the fingerprint recognition module of the mobile phone;

[0021] The request generating unit is used to generate a door opening request based on the door opening instruction, location information and fingerprint information.

[0022] Wherein, the unlocking module includes a data verification unit, a fingerprint comparison unit, a position comparison unit and an unlocking unit;

[0023] The data verification unit is used to perform integrity verification on the received data packet and decrypt the fingerprint verification identifier;

[0024] The fingerprint comparison unit is used to compare the decrypted fingerprint verification identifier with the user fingerprint template database stored in the system to confirm whether the user identity matches;

[0025] The location comparison unit is used to compare the received location information with the preset authorized area range to confirm whether the user is in a geographical location that is allowed to access the access control;

[0026] The unlocking unit is used to make a door opening decision when the user's fingerprint information is successfully verified and the current geographical location is within the authorized range; if any verification fails, the door opening request is rejected and an alarm is triggered.

[0027] The specific steps of performing integrity check on the received data packet and decrypting the fingerprint verification identifier include:

[0028] Receive data packets from mobile terminals;

[0029] Check the checksum carried in the data packet and compare it with the recalculated checksum of the data packet content;

[0030] According to the pre-configured security protocol, the corresponding decryption key is obtained from the secure storage to decrypt the fingerprint verification identifier.

[0031] The specific steps of comparing the decrypted fingerprint verification identifier with the user fingerprint template database stored in the system to confirm whether the user identity matches include:

[0032] Perform feature extraction on the decrypted fingerprint verification identifier;

[0033] Apply the minutiae-based fingerprint matching algorithm to compare the decrypted features with the features of each user template in the database and calculate the similarity score between the features;

[0034] The similarity score is used to determine whether the preset matching threshold is reached. If the score exceeds the threshold, the fingerprint information is considered to be matched successfully.

[0035] The specific steps of comparing the received location information with the preset authorized area range to confirm whether the user is in a geographical location where access to the access control is allowed include:

[0036] Setting up geo-fences, which represent areas where users are allowed to access specific gates;

[0037] Obtain the current location coordinates through GPS positioning and verify the integrity of the data and the legitimacy of the source;

[0038] When the integrity and legality are passed, the point-in-polygon judgment algorithm is used to check whether the user's location coordinates are within any preset authorized area; if the user's location is within at least one authorized area, it is determined that the user has the geographic location permission to access the current access control.

[0039] The present invention provides a mobile app-based IoT access control system. Its permissions management module allows administrators to flexibly configure and adjust the access rights of individual mobile terminal users on a remote server. The request generation module is responsible for capturing user operation commands and automatically collecting the user's current fingerprint information and geographic location. The door opening command generation module is a key executor of the system's security logic. Upon receiving a door opening request forwarded by the request generation module, the module immediately initiates a complex verification process. First, it uses advanced algorithms to analyze the received fingerprint information and match it with a user fingerprint template stored in the cloud to confirm the requester's identity. Then, combined with location information, it further determines whether the requester is within the authorized access area. Only after both identity and location pass rigorous verification does the module generate and send a securely encrypted door opening command to the smart door lock device. This series of operations ensures that only authorized users in the correct location can open the door. The unlocking module, serving as the physical execution end of the system, incorporates an intelligent processing unit and a secure communication interface. Upon receiving a legitimate command from the door opening command generation module, the module rapidly responds, parsing the command and executing the unlocking action via wireless communication technologies (such as Bluetooth, Wi-Fi, or NFC). This enables intelligent management of the entire process from permission allocation, user request processing, identity and location verification to the final unlocking operation. There is no need to install a user identification module on the access control system, thus reducing the cost of use. BRIEF DESCRIPTION OF THE DRAWINGS

[0040] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the following briefly introduces the drawings required for use in the embodiments or the description of the prior art. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying any creative work.

[0041] Figure 1 This is a structural diagram of a mobile app-based Internet of Things access control system according to the first embodiment of the present invention.

[0042] Figure 2 It is a structural diagram of the rights management module of the second embodiment of the present invention.

[0043] Figure 3 FIG. 4 is a structural diagram of a rights allocation unit according to a second embodiment of the present invention.

[0044] Figure 4 It is a structural diagram of a request generation module according to the second embodiment of the present invention.

[0045] Figure 5 2 is a structural diagram of an unlocking module according to a second embodiment of the present invention.

[0046] The authority management module 101, the request generation module 102, the door opening instruction generation module 103, the unlocking module 104, the user database 201, the identity authentication unit 202, the authority allocation unit 203, the authority setting subunit 204, the access control information storage subunit 205, the authority allocation subunit 206, the positioning unit 207, the fingerprint acquisition unit 208, the request generation unit 209, the data verification unit 210, the fingerprint comparison unit 211, the position comparison unit 212, and the unlocking unit 213. DETAILED DESCRIPTION

[0047] The following describes embodiments of the present invention in detail, examples of which are shown in the accompanying drawings, wherein the same or similar reference numerals throughout represent the same or similar elements or elements having the same or similar functions. The embodiments described below with reference to the accompanying drawings are exemplary and are intended to be used to explain the present invention, and are not to be construed as limiting the present invention.

[0048] First embodiment

[0049] See also Figure 1 The present invention provides an access control system based on a mobile phone app and an Internet of Things, comprising a permission management module 101, a request generation module 102, a door opening instruction generation module 103 and an unlocking module 104; the permission management module 101 is used to remotely set the user's door opening permission for the mobile phone terminal; the request generation module 102 is used to receive the door opening instruction input by the user on the mobile phone APP, and obtain the user's fingerprint information and location information; the door opening instruction generation module 103 is used to receive the door opening instruction, fingerprint information and location information sent by the mobile phone terminal, identify the user's identity and location according to the fingerprint information and location information, and send the door opening instruction to the smart door lock when the user's identity and location are verified; the unlocking module 104 is used to receive the door opening instruction and perform the unlocking operation.

[0050] In this embodiment, the permissions management module 101 allows administrators to flexibly configure and adjust the access rights of individual mobile terminal users on a remote server. This functionality extends beyond basic access permissions and can be refined to include access control for specific times and areas. It can even update permissions in real time based on internal organizational changes, significantly improving management efficiency and flexibility. The request generation module 102 is responsible for capturing user operation instructions while automatically collecting the user's current fingerprint information and geographic location. This design ensures that each request is tied to the user's unique biometric authentication and precise location coordinates, providing dual security for subsequent permission verification. The door opening instruction generation module 103 is a key executor of the system's security logic. Upon receiving the door opening request forwarded by the request generation module 102, this module immediately initiates a complex verification process. First, it uses advanced algorithms to analyze the received fingerprint information and match it with the user's fingerprint template stored in the cloud to confirm the requester's identity. Subsequently, combined with the location information, it further determines whether the requester is within the authorized access area. Only when the identity and location are strictly verified, the module will generate and send a secure and encrypted door opening instruction to the smart door lock device. This series of operations ensures that only legitimate users can open the door at the correct location. The unlocking module 104 serves as the physical execution end of the system, with a built-in intelligent processing unit and a secure communication interface. Once a legitimate instruction issued by the door opening instruction generation module 103 is received, the module responds quickly, parses the instruction and executes the unlocking action through wireless communication technology (such as Bluetooth, Wi-Fi or NFC), and records the time of the unlocking event, user information and other logs for subsequent auditing and security tracking. This realizes the full intelligent management of the entire process from authority allocation, user request processing, identity and location verification to the final unlocking operation, without the need to install a user identification module on the access control system, thereby reducing the cost of use.

[0051] Second embodiment

[0052] See also Figures 2 to 5 On the basis of the first embodiment, the authority management module 101 includes a user database 201, an identity authentication unit 202 and a authority allocation unit 203; the user database 201 is used to store cell user information; the identity authentication unit 202 is used to verify the user identity in combination with the user information before the user attempts to obtain the door opening authority; the authority allocation unit 203 is used to allocate the door opening authority to the user.

[0053] The user database 201 is used to store and maintain detailed information on all registered users within the community. This information includes not only basic personal information (such as name and contact information), but also includes the user's residential unit number, vehicle information, and any relevant additional notes, ensuring comprehensive knowledge of the user's identity. The database utilizes advanced encryption technology to safeguard user privacy and supports efficient data retrieval and updates, providing solid data support for subsequent verification and permission allocation processes. The identity verification unit 202 is the security guard within the permissions management module 101. Before a user attempts any permission-requiring operation via the mobile app, this unit immediately activates and, through real-time interaction with the user database 201, rigorously compares and verifies the submitted user information. This verification process is not limited to basic identity matching but may also include multi-factor authentication mechanisms, such as SMS verification codes, facial recognition, or device-specific security keys, to ensure the authenticity of the cardholder and the security of the current session. This multi-layered authentication mechanism effectively blocks unauthorized access, building a solid defense wall for the system. The permissions allocation unit 203 is responsible for implementing sophisticated access control policies based on the verified user identity. This unit dynamically assigns or adjusts user access permissions based on pre-set rules, user roles (such as resident, visitor, property management staff, etc.), and specific time period requirements. For example, permanent residents can be granted free access at all times, while temporary visitors may only have access to designated gates during designated hours. This flexible access management model not only ensures the security of the community but also balances convenience, allowing the access control system to adapt to diverse management needs.

[0054] Among them, the authority allocation unit 203 includes a authority setting subunit 204, an access control information storage subunit 205, and an authority allocation subunit 206; the authority setting subunit 204 is used to define access rules for different access control points; the access control information storage subunit 205 is used to enter detailed information of all access control points in the system, and the detailed information includes location and access control type; the authority allocation subunit 206 is used to allocate corresponding permissions according to user requests.

[0055] The Permission Setting Subunit 204 is the policy engine for the Permission Assignment Unit 203, empowering system administrators to define complex and diverse access control rules. This subunit allows administrators to flexibly set access rules for different access points based on actual security needs. These rules can be as detailed as access rights within specific time windows (for example, open during weekday business hours and closed on holidays), exclusive permissions for specific groups of people (such as allowing only maintenance personnel to access equipment rooms), and even automatically adjusting permission levels based on historical analysis of user behavior. Furthermore, it supports the setting of temporary permissions, such as assigning one-time or date-limited access rights to short-term visitors, ensuring the flexibility and adaptability of access control policies. The Access Control Information Storage Subunit 205 serves as the data hub, responsible for maintaining detailed archives of all access points in the entire system. It not only records the specific location information of each access point, ensuring a precise mapping between physical and digital permissions, but also details the type and model of the access control device (such as password locks, fingerprint recognition, facial recognition, RFID, etc.), as well as any special configurations or restrictions. The centralized storage and management of this information provides reliable basic data support for permission allocation and subsequent maintenance and upgrades. The permission allocation subunit 206 is the key executor of the permission policy. It intelligently allocates or adjusts user access permissions based on the user's specific request and the rules defined in the system. This subunit automatically identifies the access point requested by the user, then queries the user's authorization record and the access rules of the access point, logically determines whether the user has access rights, and instantly grants or denies permissions.

[0056] Among them, the request generation module 102 includes a positioning unit 207, a fingerprint acquisition unit 208 and a request generation unit 209; the positioning unit 207 is used to obtain the user's location information through the GPS of the mobile phone; the fingerprint acquisition unit 208 is used to obtain the user's fingerprint information through the fingerprint recognition module of the mobile phone; the request generation unit 209 is used to generate a door opening request based on the door opening instruction, location information and fingerprint information.

[0057] The positioning unit 207 utilizes the built-in Global Positioning System (GPS) receiver in modern smartphones to quickly and accurately capture the user's current geographic coordinates. Real-time location information is crucial for access control systems, helping them determine whether the user is within authorized geographic range, thereby enhancing security and preventing remote malicious operations. The fingerprint acquisition unit 208 leverages the increasingly prevalent biometric technology in smartphones, particularly fingerprint recognition modules. With a simple touch of the fingerprint sensor on their phone, the unit quickly reads and verifies the user's unique fingerprint. Compared to traditional password or pattern unlocking, fingerprint recognition not only improves authentication speed and convenience, but more importantly, significantly enhances security, as each person's fingerprint is a unique and difficult-to-copy biometric key. This technology ensures that only legitimately authenticated users can initiate access control operation requests. The request generation unit 209, serving as the integration center for the information from these two units, is responsible for integrating the user's explicit intention to open the door, verified location information, and reliable biometric authentication into a highly secure door opening request. After receiving the user's door-opening command, this unit first verifies the command's legitimacy. It then combines the precise location data provided by the positioning unit 207 with the user's identity confirmed by the fingerprint acquisition unit 208, encapsulating this sensitive information through an encryption algorithm. Ultimately, it forms a composite door-opening request containing the door-opening command, geographic coordinates, and an encrypted user identity. This process ensures privacy protection and anti-interference capabilities during information transmission, enabling the access control system to make release decisions based on highly reliable data.

[0058] Among them, the unlocking module 104 includes a data verification unit 210, a fingerprint comparison unit 211, a position comparison unit 212 and an unlocking unit 213; the data verification unit 210 is used to perform integrity verification on the received data packet and decrypt the fingerprint verification identifier; the fingerprint comparison unit 211 is used to compare the decrypted fingerprint verification identifier with the user fingerprint template database stored in the system to confirm whether the user identity matches; the position comparison unit 212 is used to compare the received location information with the preset authorized area range to confirm whether the user is in a geographical location where access to the access control is allowed; the unlocking unit 213 is used to make a door opening decision when the user's fingerprint information verification is successful and the current geographical location is within the authorized range; if any verification fails, the door opening request is rejected and an alarm is triggered.

[0059] The data verification unit 210 first performs a rigorous integrity check on the received data packet to ensure that the information has not been tampered with or damaged during transmission. This step is crucial for maintaining system security and effectively eliminates security risks caused by data transmission errors. After completing the verification, the unit also uses advanced encryption algorithms to decrypt the fingerprint verification identifier in the data packet in preparation for subsequent identity verification. This process not only protects the privacy of user data, but also ensures its authenticity and availability.

[0060] Fingerprint comparison unit 211 receives the decrypted fingerprint verification identifier from data verification unit 210 and performs a detailed comparison against a database of user fingerprint templates pre-entered and strictly maintained within the system. This comparison process relies on a biometric recognition algorithm to quickly and accurately determine whether the current requester's fingerprint information matches a user registered in the database. Through this biometric verification method, the system can efficiently confirm the user's true identity, significantly improving the security level of access control.

[0061] The location comparison unit 212 is responsible for analyzing the location information received from the user and carefully comparing it with the system's preset authorized access zones. This design ensures that even if a user's fingerprint verification passes, they are only deemed authorized to open the door if they are within the designated security zone. This geolocation verification mechanism effectively limits unauthorized remote access attempts and further strengthens the system's defense perimeter. The unlocking unit 213, as the decision-maker for the entire module, integrates the verification results of the previous units to make the final decision on whether to open the door. Only when the user's fingerprint information is fully matched after comparison and their location information is confirmed to be within the authorized access range will the unlocking unit 213 issue a command to activate the physical unlocking mechanism, allowing the door to be opened. Conversely, if any verification step fails, the unlocking unit 213 will immediately deny the door opening request and immediately trigger the alarm system, sending an exception notification to the administrator so that appropriate security measures can be taken. This design ensures both system responsiveness and the ability to quickly respond to any potential threats.

[0062] Among them, the specific steps of performing integrity verification on the received data packet and decrypting the fingerprint verification identifier include: receiving a data packet from a mobile phone terminal; checking the checksum carried in the data packet and comparing it with the checksum of the recalculated data packet content; and obtaining the corresponding decryption key from the secure storage according to a pre-configured security protocol to decrypt the fingerprint verification identifier.

[0063] The unlocking module 104 receives a data packet sent by a mobile terminal over a secure communication link, such as an encrypted SSL / TLS connection. This data packet typically encapsulates key elements such as the door opening request, an encrypted fingerprint verification identifier, user identity information, and location data. All content is encrypted before transmission to prevent interception or tampering during transmission. The module then extracts a pre-calculated checksum value from the header or a specified location of the received data packet. A checksum is a fixed-length value obtained by applying a specific algorithm (such as CRC, MD5, or SHA-256) to all or part of the data packet to verify data integrity. The module then recalculates the checksum of the received data packet (excluding the original checksum field) using the same algorithm. Finally, the newly calculated checksum is compared with the checksum contained in the data packet. If the two are identical, the data has not been modified during transmission and the checksum has passed. Otherwise, the data may have been corrupted and the checksum has failed, at which point the module terminates the subsequent processing.

[0064] The process of decrypting the fingerprint verification identifier is as follows:

[0065] Once the data packet passes the integrity check, the module will securely retrieve the decryption key from the secure storage area (such as the hardware security module HSM, key management system KMS) according to the system's pre-configured security protocols and policies. This step ensures the confidentiality and access control of the key. The module then uses the obtained decryption key to decrypt the encrypted fingerprint verification identifier in the data packet. The choice of decryption algorithm (such as AES, RSA) depends on the method used for the initial encryption to ensure that the data can be correctly and securely restored to plaintext. The decrypted fingerprint verification identifier is ready and will be used to accurately match the user fingerprint template stored in the system to confirm the user's identity.

[0066] The specific steps of comparing the decrypted fingerprint verification identifier with the user fingerprint template database stored in the system to confirm whether the user identity matches include: extracting features from the decrypted fingerprint verification identifier; applying a minutiae-based fingerprint matching algorithm to compare the decrypted features with the features of each user template in the database and calculating the similarity score between the features; and judging whether a preset matching threshold is reached based on the similarity score. If the score exceeds the threshold, it is considered that the fingerprint information matches successfully.

[0067] After receiving and successfully decrypting the fingerprint verification identifier, the system first performs an in-depth feature extraction process. This process involves using image processing and biometric technology to extract unique feature points from the decrypted fingerprint image, such as the bifurcation points, termination points, and ring structures of the ridges. These feature points are called minutiae. The set of extracted feature points forms a feature vector, which is the basis for subsequent matching. Then, using a minutiae-based fingerprint matching algorithm, the system accurately compares the minutiae features extracted from the decrypted features with multiple fingerprint templates of the corresponding users stored in the system database. Each user template also contains a set of carefully selected minutiae feature points. The algorithm evaluates the similarity between the decrypted features and the templates in the database through complex geometric and pattern matching techniques, such as distance measurement, direction field matching, and topological relationship analysis between feature points.

[0068] After a detailed comparison of the features, the system algorithmically calculates a similarity score reflecting the degree of match. This score quantifies the degree of match between the two fingerprint feature sets, typically ranging from 0 (complete mismatch) to 1 (perfect match). The system then compares this similarity score to a pre-set matching threshold. This threshold is determined by balancing security policies with false positive and false negative rates, ensuring it's neither too permissive to create security risks nor too restrictive to impact the user experience.

[0069] If the calculated similarity score exceeds the preset matching threshold, the system determines that the fingerprint verification is a successful match, indicating that the requester's identity has been recognized by the system and the subsequent door opening process can continue. Conversely, if the score does not reach the threshold, the system determines that the authentication has failed, rejects the door opening request, and may trigger an alarm or record the abnormal access attempt for security review and further processing.

[0070] Among them, the specific steps of comparing the received location information with the preset authorized area range to confirm whether the user is in the geographical location allowed to access the access control include: setting a geographical fence, which represents the area where the user is allowed to access the specific access control; obtaining the current location coordinates through GPS positioning, and verifying the integrity of the data and the legitimacy of the source; when the integrity and legitimacy are passed, using the point-in-polygon judgment algorithm to check whether the user's location coordinates are located within any preset authorized area; if the user's location is within at least one authorized area, it is determined that the user has the geographical location authority to access the current access control.

[0071] Specifically, a series of geofences (geofences) are set up in the system backend based on the security policies and management regulations of the access control point. These virtual fences define the precise geographic areas within which users are allowed to access specific access points. These can be circular, rectangular, or polygonal in shape, encompassing the effective access range around the access control facility. The coordinates of each fence are precisely calibrated by longitude and latitude and visualized on a map for easy management and adjustment. When a user initiates a door access request, the GPS module on their mobile phone automatically obtains the latitude and longitude coordinates of their current location. Upon receiving this location data, the system's primary task is to rigorously verify the integrity and source of the data to eliminate any possible falsification or interference. This includes, but is not limited to, checking the packet format and timestamp, and verifying the data's authenticity using digital signatures or security certificates to ensure that the data has not been tampered with and originates from a trusted device. Once the location data is verified, the system uses a "point-in-polygon" algorithm (such as ray intersection or angle sum) to accurately determine whether the user's current location coordinates are within any of the pre-set geofences. This algorithm mathematically determines the relationship between the user's location point and the fence boundary, determining whether the point is effectively enclosed by the fence, and thus confirming whether the user is within the authorized geographic area. If the user's location verification indicates they are within at least one authorized zone, the system will determine that the user has geographic permission to access the access control area, triggering the subsequent door opening command processing. Conversely, if the user's location is not within any authorized range, the system will deny the door opening request and provide immediate feedback to the user, informing them that their current location is not within the permitted access zone. In some cases, the system may also record such access attempts as part of the security log for further analysis and auditing.

[0072] The above disclosure is only a preferred embodiment of the present invention, and certainly cannot be used to limit the scope of the rights of the present invention. Ordinary technicians in this field can understand that all or part of the processes of the above embodiment and equivalent changes made in accordance with the claims of the present invention are still within the scope of the invention.

Claims

1. A mobile app-based Internet of Things access control system, characterized in that: It includes a permission management module, a request generation module, a door opening instruction generation module and a lock opening module; The permission management module is used to remotely set the user's door opening permission on the mobile terminal; The request generation module is used to receive the door opening command input by the user on the mobile phone APP and obtain the user's fingerprint information and location information; The door opening command generation module is used to receive the door opening command, fingerprint information and location information sent by the mobile phone terminal, identify the identity and location of the user according to the fingerprint information and location information, and send the door opening command to the smart door lock when the identity and location of the user are verified; The unlocking module is used to receive a door opening instruction and perform an unlocking operation.

2. The mobile app-based Internet of Things access control system as claimed in claim 1, characterized in that: The authority management module includes a user database, an identity authentication unit and an authority allocation unit; The user database is used to store cell user information; The identity verification unit is used to verify the identity of the user in combination with the user information before the user attempts to obtain the right to open the door; The authority allocation unit is used to allocate door opening authority to users.

3. A mobile app-based Internet of Things access control system as described in claim 2, characterized in that: The authority allocation unit includes an authority setting subunit, a door access information storage subunit, and an authority allocation subunit; The permission setting subunit is used to define access rules for different access control points; The access control information storage subunit is used to enter detailed information of all access control points in the system, the detailed information including location and access control type; The permission allocation subunit is used to allocate corresponding permissions according to user requests.

4. The mobile app-based Internet of Things access control system as claimed in claim 3, characterized in that: The request generation module includes a positioning unit, a fingerprint acquisition unit and a request generation unit; The positioning unit is used to obtain the user's location information through the GPS of the mobile phone; The fingerprint acquisition unit is used to acquire the user's fingerprint information through the fingerprint recognition module of the mobile phone; The request generating unit is used to generate a door opening request based on the door opening instruction, location information and fingerprint information.

5. The mobile app-based Internet of Things access control system as described in claim 4 is characterized in that: The unlocking module includes a data verification unit, a fingerprint comparison unit, a position comparison unit and an unlocking unit; The data verification unit is used to perform integrity verification on the received data packet and decrypt the fingerprint verification identifier; The fingerprint comparison unit is used to compare the decrypted fingerprint verification identifier with the user fingerprint template database stored in the system to confirm whether the user identity matches; The location comparison unit is used to compare the received location information with the preset authorization area range to confirm whether the user is in a geographical location that is allowed to access the access control; The unlocking unit is used to make a door opening decision when the user's fingerprint information is successfully verified and the current geographical location is within the authorized range; if any verification fails, the door opening request is rejected and an alarm is triggered.

6. A mobile app-based Internet of Things access control system as claimed in claim 5, characterized in that: The specific steps of performing integrity check on the received data packet and decrypting the fingerprint verification identifier include: Receive data packets from mobile terminals; Check the checksum carried in the data packet and compare it with the recalculated checksum of the data packet content; According to the pre-configured security protocol, the corresponding decryption key is obtained from the secure storage to decrypt the fingerprint verification identifier.

7. The mobile app-based Internet of Things access control system as claimed in claim 6, characterized in that: The specific steps of comparing the decrypted fingerprint verification identifier with the user fingerprint template database stored in the system to confirm whether the user identity matches include: Perform feature extraction on the decrypted fingerprint verification identifier; Apply the minutiae-based fingerprint matching algorithm to compare the decrypted features with the features of each user template in the database and calculate the similarity score between the features; The similarity score is used to determine whether the preset matching threshold is reached. If the score exceeds the threshold, the fingerprint information is considered to be matched successfully.

8. The mobile app-based Internet of Things access control system as claimed in claim 7, characterized in that: The specific steps of comparing the received location information with the preset authorization area range to confirm whether the user is in a geographical location that is allowed to access the access control include: Setting a geo-fence, which represents an area where users are allowed to access a specific door; Obtain the current location coordinates through GPS positioning and verify the integrity of the data and the legitimacy of the source; When the integrity and legality are passed, the point-in-polygon judgment algorithm is used to check whether the user's location coordinates are located within any preset authorized area; if the user's location is within at least one authorized area, it is determined that the user has the geographic location permission to access the current access control.

Images