High-security online booking room supervision system and method

Abstract

The present invention provides a high-security online booking house supervision system and method, the method comprising: deploying an authoritative platform, deploying a second-level supervision platform Internet terminal, an intranet terminal, a rental management platform, and a third-level supervision platform intranet terminal, and dynamically storing and synchronizing the data of each platform and terminal through the second-level supervision Internet terminal. The information gathered by the second-level supervision platform Internet terminal is reported to the second-level supervision platform intranet terminal according to a preset cycle and method, and the data is summarized on the intranet terminal and the distribution of housing sources, orders, operators, and unlocking information in each area under its jurisdiction is analyzed. The third-level supervision platform intranet terminal receives the data reported by the second-level supervision platform intranet terminal and analyzes the distribution of housing sources, orders, operators, and unlocking information in each area under its jurisdiction. The smart door lock deploys VSAM and PSAM modules, reads the tenant identity data and matches it with the locally stored identification information, and triggers unlocking and reports unlocking data if the match is consistent.

Description

Technical Field

[0001] The present invention relates to the technical field of online booking house supervision systems, and in particular to a high-security online booking house supervision system and method. Background Art

[0002] Online booking is a new form of house rental that relies on the Internet platform for house listing, booking and transaction. For tenants, they can browse house information, make reservations and payments anytime and anywhere through mobile phones or computers, without complicated offline procedures. For landlords, they can make full use of idle house resources, improve the efficiency of house use, and increase income for landlords. Compared with traditional hotel booking, online booking is usually realized through an online platform, which is convenient for landlords to manage houses, receive orders and handle tenants' inquiries and complaints, thereby improving house rental efficiency.

[0003] Online booking, a new form of housing rental, has brought new competition and innovation to the accommodation industry, but it has also brought new problems and risks to the housing rental industry. In particular, the lack of housing management methods, inadequate supervision of the floating population, tenant identity verification loopholes, and the flexible business model and wide distribution of online booking have brought hidden dangers to public security and supervision.

[0004] At present, the online booking supervision system mainly manages the housing sources, tenants and landlords, and rarely considers the overall security of smart door lock terminals, platform data processing and transmission. For the release and management of housing sources, the change of the housing source jurisdiction needs to be submitted to the jurisdiction department for approval. If the housing source does not belong to the jurisdiction, it needs to be submitted to the upper-level jurisdiction for change approval. After approval, it will be distributed from the top level to the grassroots jurisdiction management agencies step by step. The traditional housing source jurisdiction change adopts a centralized review design method, with a long approval process, which affects the overall progress of housing source verification and is difficult to supervise.

[0005] The traditional online booking supervision system uses smart cards, passwords and biometric features (such as fingerprint features and facial features) for user identification. As a kind of password, the password is easy to crack. Others can collect fingerprints on the password keyboard on the door lock keyboard and attack the door opening password through permutations and combinations. The security is relatively low. Biometric identification methods such as face recognition and fingerprint recognition can confirm the identity of the door opener, but due to the reproducibility of biometric features such as fingerprints and facial photos, there is a problem of human biometric leakage when collecting through optical technology. Although IC smart cards are cheap to use, they are easy to be cracked and copied, and cannot uniquely confirm the identity of the door opener. Therefore, in terms of identity authentication, traditional smart cards, passwords and biometric identification have inherent defects.

[0006] To this end, cloud decryption technology and offline decryption technology for identity recognition have been developed in the existing smart lock design. Taking NFC cloud decryption as an example, on the one hand, the use and maintenance costs of the background cloud decryption server are high due to the increase in the number of smart door lock terminals; on the other hand, the full amount of tenant identity data is received by the smart door lock, so there is a risk of tenant identity data leakage. Similarly, smart door locks that support offline identity decryption technology, on the one hand, have high power consumption, resulting in a reduction in the normal working standby time of the smart door lock; on the other hand, the tenant identity data is fully decrypted locally by the smart door lock, so there is a risk of tenant identity data leakage. Summary of the invention

[0007] In view of the defects and shortcomings of the prior art, according to the first aspect of the present invention, a high-security online rental housing supervision method is provided, a multi-level supervision platform based on regional jurisdiction is established, and data synchronization of multi-level supervision is achieved by configuring different data synchronization between the intranet and the Internet. At the same time, it can be further combined with the change of trusted housing jurisdiction based on blockchain, and a decentralized review mechanism is used to improve the efficiency of housing review while ensuring the security of housing jurisdiction change data.

[0008] The high-security online-booked house supervision method according to the first aspect of the purpose of the present invention is also intended to address the difficulties in tenant identity identification and authentication and floating population management in the prior art, and to propose a high-security identity recognition smart door lock and data security interaction mechanism based on tenant identity document information, which has unique and non-replicable high security characteristics and realizes the management of floating population in the online-booked house supervision system.

[0009] According to the first aspect of the purpose of the present invention, the high-security online rental housing supervision method is also intended to propose an identity recognition smart door lock opening data security interaction mechanism and interaction method, including a smart door lock deployed in the online rental housing, and based on the data security interaction mechanism between the smart door lock and the online rental housing rental management platform, and the data security interaction mechanism between the online rental housing rental management platform and the authoritative platform to perform data communication and identity security authentication. The whole process does not involve the transmission of any identity plaintext data on the Internet. The national secret asymmetric encryption algorithm is used in the data interaction between the online rental housing management platform and the authoritative platform to achieve high-security identity information authentication and authorization to prevent the risk of tenant identity information leakage.

[0010] The high-security online booking room supervision method proposed according to the first aspect of the present invention includes:

[0011] Step 1: deploy an authoritative platform, which is set up as an identity management and authentication authority to manage the identities of people within its jurisdiction; the jurisdiction of the authoritative platform includes the third-level jurisdiction, the second-level jurisdiction, and the first-level jurisdiction that form a jurisdiction relationship in sequence;

[0012] Step 2: Based on the first-level jurisdiction, deploy smart door locks for each online booking room registered within the first-level jurisdiction, and each smart door lock is independently controlled for unlocking and locking;

[0013] Step 3. Based on the second-level jurisdiction area, deploy the Internet end of the second-level supervision platform and the rental management platform, intermediary platform, rental management platform landlord end, online rental tenant end, and online rental landlord end that interact with the data of the Internet end of the second-level supervision platform, and dynamically store and synchronize the data of the intermediary platform and the rental management platform landlord end, online rental tenant end, and online rental landlord end through the Internet end of the second-level supervision platform;

[0014] Step 4: Based on the second-level jurisdiction area, deploy the second-level supervision platform intranet terminal which is isolated from the second-level supervision platform Internet terminal. The second-level supervision platform intranet terminal is physically isolated from the Internet, and the information gathered by the second-level supervision platform Internet terminal is reported and synchronized to the second-level supervision platform intranet terminal according to the preset period and method. The second-level supervision platform intranet terminal aggregates the house registration information, order information, operator information, and door opening record information for unified storage, and statistically analyzes the distribution of house sources, door opening records, operators, and orders in each jurisdiction based on the jurisdiction dimension;

[0015] Step 5: Based on the third-level jurisdiction area, deploy the intranet of the third-level supervision platform, which is physically isolated from the Internet, and receive the synchronous reporting data from multiple intranets of the second-level supervision platforms within its jurisdiction according to the preset cycle and method, including house source records, order records, operator records, and door lock records, and statistically analyze the distribution of house sources, orders, operators, and unlocking information in each jurisdiction based on the jurisdiction dimension;

[0016] Step 6: After the tenant makes an online booking order on the intermediary platform, the landlord of the rental management platform registers the tenant's check-in information with the rental management platform according to the tenant's order information on the intermediary platform; the rental management platform generates the tenant's identity data identification information based on the registered tenant's check-in information and the encryption rules configured by the authoritative platform, and sends it to the corresponding smart door lock and stores it in the smart door lock;

[0017] Step 7. When the tenant moves in, the smart door lock reads the tenant's identity data and obtains the tenant's short identity information through encryption or decoding. In response to the obtained short identity information matching the tenant's identity data identification information stored locally in the smart door lock, the tenant is allowed to unlock the door and move in. The tenant's unlocking record is collected and uploaded to the rental management platform in real time.

[0018] As an optional implementation method, the data interaction between the authoritative platform and the rental management platform is transmitted based on the national secret asymmetric encryption algorithm, including the following process:

[0019] The authoritative platform generates a public and private key pair;

[0020] The rental management platform generates a public and private key pair for the application platform;

[0021] The rental management platform sends the application platform public key to the authority platform;

[0022] The authoritative platform sends the authoritative platform public key to the rental management platform;

[0023] The rental management platform generates a data encryption shared key, encrypts it with the public key of the authoritative platform, and sends it to the authoritative platform;

[0024] The authoritative platform obtains the shared private key by decrypting it with its own private key;

[0025] The authoritative platform initiates a data reporting request to the rental management platform;

[0026] The rental management platform encrypts a random number generated by itself with its own private key and sends it to the authoritative platform;

[0027] The authoritative platform uses the public key of the application platform to decrypt and obtain a random number, collects business data, and encrypts and packages the data together with the decrypted random number using the shared key, and then sends the data packet to the rental management platform;

[0028] After receiving the data packet, the rental management platform decrypts the data packet using the shared key, extracts the random number and matches it with the previously generated random number. If the match is the same, the business data packet is received.

[0029] As an optional implementation, the method further includes the following steps:

[0030] Step 8: Change of property jurisdiction: Build a trusted property jurisdiction change model based on blockchain to change the jurisdiction, which specifically includes the following processes:

[0031] Constructing the first-level nodes, second-level nodes and miner nodes of the blockchain. The second-level nodes are used to store all the property data registered within the second-level jurisdiction on the blockchain, and are responsible for processing the query requests of the first-level nodes and returning the results; the first-level nodes are used to save the minimum information including the block header information, and are responsible for initiating queries and receiving the query results returned by the second-level nodes; the miner nodes are responsible for generating new blocks by constructing consensus proofs;

[0032] When a first-level jurisdiction area is used to check online booking houses, and it is found that a certain online booking house Hx does not belong to the jurisdiction where it is located, but belongs to a management agency Hp in another jurisdiction, the second-level node responsible for checking online booking houses will query the first-level node to which management agency the online booking house Hx belongs;

[0033] The second-level node joins the verification path from the online house Hx to the brother node in the root path, reconstructs the Merkle tree root Hash value, and compares it with the root Hash value saved in the block header. If the reconstructed Hash value is the same as the root Hash value saved in the block header, it indicates that the first-level node query is a credible query, and the second-level node returns the real house information of the online house Hx. After obtaining the real house information of the online house Hx, the second-level node responsible for the online house verification conducts a house jurisdiction change transaction with the management agency Hp in other jurisdictions to complete the house jurisdiction change.

[0034] In view of the defects of the prior art, according to the second aspect of the present invention, a high-security online booking house supervision system is also proposed, comprising:

[0035] The authoritative platform is set up as an identity management and authentication authority to manage the identities of people within its jurisdiction; the jurisdiction of the authoritative platform includes the third-level jurisdiction, the second-level jurisdiction and the first-level jurisdiction that form a jurisdiction relationship in sequence;

[0036] Based on the first-level jurisdiction, for each smart door lock deployed in the online booking room registered within the first-level jurisdiction, each smart door lock is independently controlled for unlocking and locking;

[0037] Based on the second-level jurisdiction area, the Internet end of the second-level supervision platform deployed, as well as the rental management platform, intermediary platform, rental management platform landlord end, online rental tenant end, and online rental landlord end that interact with the data of the Internet end of the second-level supervision platform, dynamically store and synchronize the data of the intermediary platform and the rental management platform landlord end, online rental tenant end, and online rental landlord end through the Internet end of the second-level supervision platform;

[0038] On the basis of the second-level jurisdiction area, there is also an intranet terminal of the second-level supervision platform that is isolated from the Internet terminal of the second-level supervision platform. The intranet terminal of the second-level supervision platform is physically isolated from the Internet, and the information gathered by the Internet terminal of the second-level supervision platform is reported and synchronized to the intranet terminal of the second-level supervision platform according to a preset period and method. The intranet terminal of the second-level supervision platform aggregates the house registration information, order information, operator information, and door opening record information for unified storage, and statistically analyzes the distribution of houses, door opening records, operators, and orders in the jurisdiction under its jurisdiction based on the dimension of the jurisdiction under its jurisdiction;

[0039] Based on the third-level jurisdiction area, a third-level regulatory platform intranet terminal is deployed, which is physically isolated from the Internet, and receives synchronous reporting data from multiple second-level regulatory platform intranet terminals within its jurisdiction according to the preset cycle and method, including house source records, order records, operator records, door lock records, and statistically analyzes the distribution of house sources, orders, operators, and unlocking information in its jurisdiction in the dimension of its jurisdiction;

[0040] The landlord of the rental management platform registers the tenant's check-in information with the rental management platform according to the tenant's order information of the intermediary platform;

[0041] The rental management platform generates tenant identity data identification information based on the registered tenant check-in information and the encryption rules configured by the authoritative platform, and sends it to the corresponding smart door lock and stores it in the smart door lock;

[0042] When a tenant moves in, the smart door lock reads the tenant's identity data and obtains the tenant's short identity information based on PSAM identification or VSAM identification. In response to a match between the obtained short identity information and the tenant's identity data identification information stored locally in the smart door lock, the smart door lock allows the tenant to unlock the door and move in, and collects the tenant's unlocking records and uploads them to the rental management platform in real time.

[0043] As an optional implementation, in the method, the data interaction between the authoritative platform and the rental management platform is transmitted based on the national secret asymmetric encryption algorithm, including the following process:

[0044] The authoritative platform generates a public and private key pair;

[0045] The rental management platform generates a public and private key pair for the application platform;

[0046] The rental management platform sends the application platform public key to the authority platform;

[0047] The authoritative platform sends the authoritative platform public key to the rental management platform;

[0048] The rental management platform generates a data encryption shared key, encrypts it with the public key of the authoritative platform, and sends it to the authoritative platform;

[0049] The authoritative platform obtains the shared private key by decrypting it with its own private key;

[0050] The authoritative platform initiates a data reporting request to the rental management platform;

[0051] The rental management platform encrypts a random number generated by itself with its own private key and sends it to the authoritative platform;

[0052] The authoritative platform uses the public key of the application platform to decrypt and obtain a random number, collects business data, and encrypts and packages the data together with the decrypted random number using the shared key, and then sends the data packet to the rental management platform;

[0053] After receiving the data packet, the rental management platform decrypts the data packet using the shared key, extracts the random number and matches it with the previously generated random number. If the match is the same, the business data packet is received. BRIEF DESCRIPTION OF THE DRAWINGS

[0054] Figure 1 Schematic diagram of the system architecture of high-security online booking house supervision according to an embodiment of the present invention.

[0055] Figure 2 It is a schematic diagram of data interaction between the intranet terminal of the third-level supervision platform and the intranet terminal of the second-level supervision platform and the Internet terminal of the second-level supervision platform according to a specific embodiment of the present invention.

[0056] Figure 3 It is a schematic diagram of data interaction between an authoritative platform and the Internet end of a second-level regulatory platform according to a specific embodiment of the present invention.

[0057] Figure 4 It is a schematic diagram of data interaction between the Internet end of the second-level supervision platform and the smart door locks deployed within the first-level jurisdiction area according to a specific embodiment of the present invention.

[0058] Figure 5 is a schematic diagram of a smart door lock according to a specific embodiment of the present invention.

[0059] Figure 6 It is a schematic diagram of a data security interaction mechanism of an online booking room smart door lock based on VSAM according to a specific embodiment of the present invention.

[0060] Figure 7 It is a schematic diagram of the data security interaction mechanism of the online booking room smart door lock based on PSAM according to a specific embodiment of the present invention.

[0061] Figure 8 It is a schematic diagram of secure interactive transmission of data between an authoritative platform and a rental management platform according to a specific embodiment of the present invention.

[0062] Fig. 9 It is a schematic diagram of a trusted housing jurisdiction change model based on blockchain according to a specific embodiment of the present invention. DETAILED DESCRIPTION

[0063] In order to better understand the technical content of the present invention, specific embodiments are given and described as follows in conjunction with the accompanying drawings.

[0064] Various aspects of the present invention are described in this disclosure with reference to the accompanying drawings, in which many illustrative embodiments are shown. The embodiments of the present disclosure are not necessarily intended to include all aspects of the present invention. It should be understood that the various concepts and embodiments introduced above, as well as those described in more detail below, can be implemented in any of many ways, because the concepts and embodiments disclosed by the present invention are not limited to any implementation. In addition, some aspects disclosed by the present invention can be used alone or in any appropriate combination with other aspects disclosed by the present invention.

[0065] {Example 1}

[0066] Combination Figures 1 to 9 As shown, according to an embodiment of the present invention, a high-security online booking room supervision method is proposed, comprising:

[0067] Step 1: Deploy an authoritative platform, which is set up as an identity management and authentication authority to manage the identities of people within its jurisdiction; the jurisdiction of the authoritative platform includes the third-level jurisdiction (i.e., large region), the second-level jurisdiction (i.e., sub-district) and the first-level jurisdiction (i.e., sub-district) that form a jurisdiction relationship in sequence;

[0068] Step 2: Based on the first-level jurisdiction, deploy smart door locks for each online booking room registered within the first-level jurisdiction, and each smart door lock is independently controlled for unlocking and locking;

[0069] Step 3. Based on the second-level jurisdiction area, deploy the Internet end of the second-level supervision platform and the rental management platform, intermediary platform, rental management platform landlord end, online rental tenant end, and online rental landlord end that interact with the data of the Internet end of the second-level supervision platform, and dynamically store and synchronize the data of the intermediary platform and the rental management platform landlord end, online rental tenant end, and online rental landlord end through the Internet end of the second-level supervision platform;

[0070] Step 4: Based on the second-level jurisdiction area, deploy the second-level supervision platform intranet terminal which is isolated from the second-level supervision platform Internet terminal. The second-level supervision platform intranet terminal is physically isolated from the Internet, and the information gathered by the second-level supervision platform Internet terminal is reported and synchronized to the second-level supervision platform intranet terminal according to the preset period and method. The second-level supervision platform intranet terminal aggregates the house registration information, order information, operator information, and door opening record information for unified storage, and statistically analyzes the distribution of house sources, door opening records, operators, and orders in each jurisdiction based on the jurisdiction dimension;

[0071] Step 5: Based on the third-level jurisdiction area, deploy the intranet of the third-level supervision platform, which is physically isolated from the Internet, and receive the synchronous reporting data from multiple intranets of the second-level supervision platforms within its jurisdiction according to the preset cycle and method, including house source records, order records, operator records, and door lock records, and statistically analyze the distribution of house sources, orders, operators, and unlocking information in each jurisdiction based on the jurisdiction dimension;

[0072] Step 6: After the tenant makes an online booking order on the intermediary platform, the landlord of the rental management platform registers the tenant's check-in information with the rental management platform according to the tenant's order information on the intermediary platform; the rental management platform generates the tenant's identity data identification information based on the registered tenant's check-in information and the encryption rules configured by the authoritative platform, and sends it to the corresponding smart door lock and stores it in the smart door lock;

[0073] Step 7. When the tenant moves in, the smart door lock reads the tenant's identity data and obtains the tenant's short identity information through encryption or decoding. In response to the obtained short identity information matching the tenant's identity data identification information stored locally in the smart door lock, the tenant is allowed to unlock the door and move in. The tenant's unlocking record is collected and uploaded to the rental management platform in real time.

[0074] Therefore, the method of the above embodiment of the present invention establishes a multi-level supervision platform based on regional jurisdiction as the standard, and realizes data synchronization of multi-level supervision by configuring different data synchronization between the intranet and the Internet. At the same time, based on the smart door lock opening data security interaction mechanism and interaction method, it includes a smart door lock deployed in the online booking house configuration, and based on the data security interaction mechanism between the smart door lock and the online booking house rental management platform, and the data security interaction mechanism between the online booking house rental management platform and the authoritative platform, data communication and identity security authentication are performed. The whole process does not involve the transmission of any identity plaintext data on the Internet, thereby realizing high-security identity information authentication and authorization, and preventing the risk of leakage of tenant identity information.

[0075] Combination Figure 1-Figure 4 As shown, in the embodiment of the present invention, within the first-level jurisdiction area, for its sub-areas 1, 2, 3, ..., n, each registered online booking room in the sub-area is equipped with a smart door lock, such as Figure 5 The figure shows an exemplary structure of a smart door lock.

[0076] On the basis of the second-level jurisdiction, the configured Internet end of the second-level supervision platform is used to carry out unified dynamic management and synchronization of online-booked houses in multiple sub-areas within the second-level jurisdiction, including aggregation of unlocking and check-in registration information from the rental management platform, online-booked house tenant-side scan code registration and check-in information, online-booked house landlord-side housing registration information, order information from the intermediary platform, and tenant check-in information submitted by the landlord side of the rental management platform.

[0077] In an optional embodiment, if Figure 3 As shown, the online rental client side, the online rental landlord side, and the rental management platform landlord side can be designed and implemented in the form of mini-programs for easy and quick calling.

[0078] Combination Figure 1 , Figure 2 As shown, on the basis of the second-level jurisdiction area, a second-level regulatory platform intranet terminal is also deployed which is isolated from the second-level regulatory platform Internet terminal, and the second-level regulatory platform intranet terminal is physically isolated from the Internet.

[0079] The information gathered by the Internet end of the second-level regulatory platform is reported and synchronized to the intranet end of the second-level regulatory platform according to the preset cycle and method. The housing registration information, order information, operator information, and door opening record information are summarized and stored in a unified manner on the intranet end of the second-level regulatory platform. The distribution of housing sources, door opening records, operators, and orders in each jurisdiction is statistically analyzed based on the sub-district dimension of the second-level jurisdiction area to grasp the development trend of online-booked housing within the second-level jurisdiction in real time.

[0080] Furthermore, the intranet of the second-level supervision platform can also identify whether it is an abnormal housing source and abnormal personnel based on the analysis of the above-mentioned housing data, order data, and door opening data. For example, it can identify abnormal housing sources based on the design of specific rules (such as whether there is a double rental of the same house, tenants with abnormal door opening behavior, etc.), and can be designed according to actual rule matching.

[0081] In an optional embodiment, the intranet of the second-level regulatory platform supports connection with the second-level third-party platform.

[0082] In an optional embodiment, in combination with Figure 1 , Figure 2 , Figure 3 As shown, the intranet terminal of the third-level regulatory platform deployed on the basis of the third-level jurisdiction is physically isolated from the Internet, and is configured to receive synchronous reporting data from the intranet terminal of the second-level regulatory platform corresponding to multiple partitions within its jurisdiction according to a preset period and method, including housing records, order records, operator records, and door lock records. It also conducts statistical analysis on the distribution of housing sources, orders, operators, and unlocking information in each partition based on the partition dimension of the second-level jurisdiction, thereby grasping the development trend of the online booking industry in the third-level jurisdiction in real time.

[0083] Furthermore, based on the analysis of the housing data, order data, and door opening data within the above-mentioned third-level jurisdiction areas, it is also possible to identify whether the housing sources and personnel are abnormal.

[0084] Similarly, the intranet of the third-level online rental housing supervision platform supports connection with the third-level third-party platform.

[0085] In an optional embodiment, as shown in the accompanying drawings, the functional modules of the intranet of the third-level supervision platform are the same as those of the intranet of the second-level supervision platform, including: a housing registration management module, an order management module, an operator management module, a door lock management module, a statistical analysis module, an abnormal housing management module, an abnormal personnel management module and a third-party docking module.

[0086] Combination Figure 5 , which exemplarily shows the structure of the smart door lock, including a microcontroller unit MCU, a power module, a network connection module, a password module, a VSAM module, a PSAM module, a storage module, a Bluetooth module, a door lock driver module, and a door opening status detection module. Figure 5 In the example, the network connection module is described by taking a WiFi module as an example.

[0087] The microcontroller unit MCU, as the main control module of the smart door lock, is used for the process control of the smart door lock unlocking, locking and data interaction services.

[0088] The power module, especially the DC power module, is used to provide the power supply required for the normal operation of the MCU and other modules of the smart door lock, as well as the protection against overvoltage, overcurrent and low voltage.

[0089] The WiFi module is used to connect the smart door lock to the network, establish a communication connection with the online rental management system, and report tenant door opening data, door lock undervoltage, anti-pry, and coercion password alarm data.

[0090] The password module is used for the door opening management of online room booking practitioners and operators, and reports the password door opening information of practitioners and operators (such as individuals and enterprises) through the WiFi data channel.

[0091] VSAM module: The VSAM module adopts an ID card reading module designed with a domestic MCU and has a built-in short identification code algorithm for reading identity documents and generating short identification codes.

[0092] PSAM module: The PSAM module is a security module designed with a domestic MCU for decrypting super SIM identity information, with built-in SM1 / 2 / 3 / 4 national encryption algorithms.

[0093] Storage module: used to store door opening passwords of employees, individuals, and business operators, short identification codes of tenants' ID cards, and door opening records.

[0094] Bluetooth module: It is used as a channel for the tenant to interact with the smart door lock through the mobile phone terminal that uses the two elements of the ID card + the portrait method to verify the identity and open the door.

[0095] The door lock driver module, as the MCU controls the door lock driver module, drives the door lock motor to open the door lock.

[0096] Door opening status detection is used to determine whether the smart door lock of the online booking room is opened from the inside or the outside.

[0097] Combination Figure 5 As well as the smart door lock design of the above embodiments, in the embodiments of the present invention, the tenant identity can be obtained based on the VSAM or PSAM method, and matched with the tenant identity data identification information sent to the smart door lock by the rental management platform and stored locally. If the match is consistent, it means that the tenant currently checking in is a combination of reservation and booking, the door is allowed to be opened, and the action of the door lock drive module is controlled to open the door lock to open the door.

[0098] As an optional embodiment, combining Figure 6 As shown, the rental management platform generates the tenant identity data short identification information based on the registered tenant check-in information and the encryption rules configured by the authoritative platform, and sends it to the corresponding smart door lock and stores it in the smart door lock, including:

[0099] The authoritative VSAM platform configured by the authoritative platform issues VSAM short identification code encryption rules to the rental management platform;

[0100] After the rental management platform successfully receives the VSAM short identification code encryption rule sent by the authoritative platform, it sends a response message to the authoritative platform;

[0101] The operator calls the VSAM short identification code encryption rules issued by the authoritative platform on the rental management platform, encrypts the tenant's ID number to form a short identification code, and uses the short identification code to configure the tenant's door opening authorization. That is, the smart door lock receives the short identification code sent by the rental management platform and saves the short identification code locally in the storage module of the smart door lock.

[0102] Therefore, further, in step 7, the smart door lock obtains the short identity identification code corresponding to the tenant's ID card data by reading the tenant's ID card data and encrypting it through the built-in encryption algorithm of the VSAM module of the smart door lock. In response to the obtained identity short identification code corresponding to the ID card data matching the tenant's identity data short identification code stored locally in the smart door lock, the door is allowed to unlock and check in.

[0103] In other embodiments, in combination Figure 7 As shown, in step 6, the rental management platform generates tenant identity data identification information based on the registered tenant check-in information and the encryption rules configured by the authoritative platform, and sends it to the corresponding smart door lock and stores it in the smart door lock, including:

[0104] The authoritative PSAM platform configured by the authoritative platform issues PSAM encryption rules to the rental management platform;

[0105] After the rental management platform successfully receives the PSAM encryption rules sent by the authoritative platform, it sends a response message to the authoritative platform;

[0106] The operator calls the PSAM encryption rules issued by the authoritative platform on the rental management platform, encrypts the tenant's identity data, and sends it to the smart door lock for local storage.

[0107] Therefore, in the online room booking process, when the tenant makes an online room booking order on the intermediary platform, the rental management platform requests the authoritative platform to write the unlocking data into the tenant's mobile phone super SIM card based on the registered tenant's check-in information;

[0108] After receiving the SIM card data writing request sent by the rental management platform, the authoritative SIM card platform configured by the authoritative platform writes the unlocking data to the super SIM card on the tenant's mobile phone and returns the processing result of writing the unlocking data to the super SIM card to the rental management platform.

[0109] Furthermore, in step 7, when the tenant moves in, the smart door lock uses NFC to obtain the unlocking data in the super SIM card on the tenant's mobile phone. After decrypting the unlocking data through the PSAM module, the decrypted identity data is compared with the identity data stored locally in the smart door lock. If they match, the smart door lock is triggered to unlock, and the unlocking information is reported to the rental management system.

[0110] Combination Figure 8 As shown, in an embodiment of the present invention, the data interaction between the authoritative platform and the rental management platform is transmitted based on the national secret asymmetric encryption algorithm, including the following process:

[0111] The authoritative platform generates a public and private key pair;

[0112] The rental management platform generates a public and private key pair for the application platform;

[0113] The rental management platform sends the application platform public key to the authority platform;

[0114] The authoritative platform sends the authoritative platform public key to the rental management platform;

[0115] The rental management platform generates a data encryption shared key, encrypts it with the public key of the authoritative platform, and sends it to the authoritative platform;

[0116] The authoritative platform obtains the shared private key by decrypting it with its own private key;

[0117] The authoritative platform initiates a data reporting request to the rental management platform;

[0118] The rental management platform encrypts a random number generated by itself with its own private key and sends it to the authoritative platform;

[0119] The authoritative platform uses the public key of the application platform to decrypt and obtain a random number, collects business data, and encrypts and packages the data together with the decrypted random number using the shared key, and then sends the data packet to the rental management platform;

[0120] After receiving the data packet, the rental management platform decrypts the data packet using the shared key, extracts the random number and matches it with the previously generated random number. If the match is the same, the business data packet is received.

[0121] Therefore, during the secure interaction of smart door lock opening data, the entire process does not involve the transmission of any plaintext identity data on the Internet, and the data interaction between the online rental management platform and the authoritative platform adopts the national secret asymmetric encryption algorithm to achieve high-security identity information authentication and prevent the risk of leakage of tenant identity information.

[0122] {Example 2}

[0123] Based on the high-security online booking house supervision method of the above-mentioned embodiment, this embodiment further includes a housing source jurisdiction change process, and the jurisdiction change is performed by building a trusted housing source jurisdiction change model based on blockchain. Fig. 9 The example shown includes the following steps:

[0124] Constructing the first-level nodes, second-level nodes and miner nodes of the blockchain. The second-level nodes are used to store all the property data registered within the second-level jurisdiction on the blockchain, and are responsible for processing the query requests of the first-level nodes and returning the results; the first-level nodes are used to save the minimum information including the block header information, and are responsible for initiating queries and receiving the query results returned by the second-level nodes; the miner nodes are responsible for generating new blocks by constructing consensus proofs;

[0125] When a first-level jurisdiction area is used to check online booking houses, and it is found that a certain online booking house Hx does not belong to the jurisdiction where it is located, but belongs to a management agency Hp in another jurisdiction, the second-level node responsible for checking online booking houses will query the first-level node to which management agency the online booking house Hx belongs;

[0126] The second-level node joins the verification path from the online house Hx to the brother node in the root path, reconstructs the Merkle tree root Hash value, and compares it with the root Hash value saved in the block header. If the reconstructed Hash value is the same as the root Hash value saved in the block header, it indicates that the first-level node query is a credible query, and the second-level node returns the real house information of the online house Hx. After obtaining the real house information of the online house Hx, the second-level node responsible for the online house verification conducts a house jurisdiction change transaction with the management agency Hp in other jurisdictions to complete the house jurisdiction change.

[0127] For example, Fig. 9 Taking the process shown as an example, since the first-level nodes and second-level nodes in the blockchain network do not trust each other, the first-level node may be distrusted by the second-level node when querying the property information. Therefore, it is very important to verify the credibility of the first-level node. This example introduces the blockchain Merkle tree algorithm to verify the credibility of the first-level node.

[0128] Specifically, when the sub-area is checking the online rental house, it is confirmed that the online rental house HA belongs to the jurisdiction of another jurisdiction H6. Therefore, the sub-area 2 node needs to query the second-level node to which jurisdiction the online rental house HA belongs. The second-level node joins the verification path from the online rental house HA to the brother node in the root path, reconstructs the Merkle tree root HashH789ABCBC through H78 and HBCBC, and compares it with the root hash value saved in the block header. If the reconstructed hash value is the same as the root hash value saved in the block header, it indicates that the query of the sub-area 2 node is a credible query. The second-level node returns the real house source information of the online rental house HA. After the sub-area 2 node obtains the house source information, it conducts a house source jurisdiction change transaction with the jurisdiction 6 of the sub-area 1 node to complete the house source jurisdiction change.

[0129] {Example 3}

[0130] In combination with the embodiment of the high-security online booking house supervision method of the above embodiment, a high-security online booking house supervision system according to an embodiment of the present invention includes:

[0131] The authoritative platform is set up as an identity management and authentication authority to manage the identities of people within its jurisdiction; the jurisdiction of the authoritative platform includes the third-level jurisdiction (i.e., large region), the second-level jurisdiction (i.e., sub-region) and the first-level jurisdiction (i.e., sub-region) that form a jurisdiction relationship in sequence;

[0132] Based on the first-level jurisdiction, for each smart door lock deployed in the online booking room registered within the first-level jurisdiction, each smart door lock is independently controlled for unlocking and locking;

[0133] Based on the second-level jurisdiction area, the Internet end of the second-level supervision platform deployed, as well as the rental management platform, intermediary platform, rental management platform landlord end, online rental tenant end, and online rental landlord end that interact with the data of the Internet end of the second-level supervision platform, dynamically store and synchronize the data of the intermediary platform and the rental management platform landlord end, online rental tenant end, and online rental landlord end through the Internet end of the second-level supervision platform;

[0134] On the basis of the second-level jurisdiction area, there is also an intranet terminal of the second-level supervision platform that is isolated from the Internet terminal of the second-level supervision platform. The intranet terminal of the second-level supervision platform is physically isolated from the Internet, and the information gathered by the Internet terminal of the second-level supervision platform is reported and synchronized to the intranet terminal of the second-level supervision platform according to a preset period and method. The intranet terminal of the second-level supervision platform aggregates the house registration information, order information, operator information, and door opening record information for unified storage, and statistically analyzes the distribution of houses, door opening records, operators, and orders in the jurisdiction under its jurisdiction based on the dimension of the jurisdiction under its jurisdiction;

[0135] Based on the third-level jurisdiction area, a third-level regulatory platform intranet terminal is deployed, which is physically isolated from the Internet, and receives synchronous reporting data from multiple second-level regulatory platform intranet terminals within its jurisdiction according to the preset cycle and method, including house source records, order records, operator records, door lock records, and statistically analyzes the distribution of house sources, orders, operators, and unlocking information in its jurisdiction in the dimension of its jurisdiction;

[0136] The landlord of the rental management platform registers the tenant's check-in information with the rental management platform according to the tenant's order information of the intermediary platform;

[0137] The rental management platform generates tenant identity data identification information based on the registered tenant check-in information and the encryption rules configured by the authoritative platform, and sends it to the corresponding smart door lock and stores it in the smart door lock;

[0138] When a tenant moves in, the smart door lock reads the tenant's identity data and obtains the tenant's short identity information based on PSAM identification or VSAM identification. In response to a match between the obtained short identity information and the tenant's identity data identification information stored locally in the smart door lock, the smart door lock allows the tenant to unlock the door and move in, and collects the tenant's unlocking records and uploads them to the rental management platform in real time.

[0139] As an optional embodiment, data processing and interaction between the authoritative platform, the Internet terminal of the second-level supervision platform, the intranet terminal of the second-level supervision platform, the rental management platform, and the intranet terminal of the third-level supervision platform can be implemented in accordance with the corresponding methods and procedures in the above-mentioned high-security online housing supervision method.

[0140] In a particularly preferred embodiment, the data interaction between the authoritative platform and the rental management platform is transmitted based on the national secret asymmetric encryption algorithm, including the following process:

[0141] The authoritative platform generates a public and private key pair;

[0142] The rental management platform generates a public and private key pair for the application platform;

[0143] The rental management platform sends the application platform public key to the authority platform;

[0144] The authoritative platform sends the authoritative platform public key to the rental management platform;

[0145] The rental management platform generates a data encryption shared key, encrypts it with the public key of the authoritative platform, and sends it to the authoritative platform;

[0146] The authoritative platform obtains the shared private key by decrypting it with its own private key;

[0147] The authoritative platform initiates a data reporting request to the rental management platform;

[0148] The rental management platform encrypts a random number generated by itself with its own private key and sends it to the authoritative platform;

[0149] The authoritative platform uses the public key of the application platform to decrypt and obtain a random number, collects business data, and encrypts and packages the data together with the decrypted random number using the shared key, and then sends the data packet to the rental management platform;

[0150] After receiving the data packet, the rental management platform decrypts the data packet using the shared key, extracts the random number and matches it with the previously generated random number. If the match is the same, the business data packet is received.

[0151] Although the present invention has been disclosed as above with preferred embodiments, it is not intended to limit the present invention. A person with ordinary knowledge in the technical field to which the present invention belongs may make various changes and modifications without departing from the spirit and scope of the present invention. Therefore, the protection scope of the present invention shall be determined by the definition of the claims.

Claims

1. A highly secure online booking room supervision method, characterized in that: include: Step 1: deploy an authoritative platform, which is set up as an identity management and authentication authority to manage the identities of people within its jurisdiction; the jurisdiction of the authoritative platform includes the third-level jurisdiction, the second-level jurisdiction, and the first-level jurisdiction that form a jurisdiction relationship in sequence; Step 2: Based on the first-level jurisdiction, deploy smart door locks for each online booking room registered within the first-level jurisdiction, and each smart door lock is independently controlled for unlocking and locking; Step 3. Based on the second-level jurisdiction area, deploy the Internet end of the second-level supervision platform and the rental management platform, intermediary platform, rental management platform landlord end, online rental tenant end, and online rental landlord end that interact with the data of the Internet end of the second-level supervision platform, and dynamically store and synchronize the data of the intermediary platform and the rental management platform landlord end, online rental tenant end, and online rental landlord end through the Internet end of the second-level supervision platform; Step 4: Based on the second-level jurisdiction area, deploy the second-level supervision platform intranet terminal which is isolated from the second-level supervision platform Internet terminal. The second-level supervision platform intranet terminal is physically isolated from the Internet, and the information gathered by the second-level supervision platform Internet terminal is reported and synchronized to the second-level supervision platform intranet terminal according to the preset period and method. The second-level supervision platform intranet terminal aggregates the house registration information, order information, operator information, and door opening record information for unified storage, and statistically analyzes the distribution of house sources, door opening records, operators, and orders in each jurisdiction based on the jurisdiction dimension; Step 5: Based on the third-level jurisdiction area, deploy the intranet of the third-level supervision platform, which is physically isolated from the Internet, and receive the synchronous reporting data from multiple intranets of the second-level supervision platforms within its jurisdiction according to the preset cycle and method, including house source records, order records, operator records, and door lock records, and statistically analyze the distribution of house sources, orders, operators, and unlocking information in each jurisdiction based on the jurisdiction dimension; Step 6: After the tenant places an online booking order on the intermediary platform, the landlord of the rental management platform registers the tenant's check-in information with the rental management platform based on the tenant's order information on the intermediary platform; The rental management platform generates tenant identity data identification information based on the registered tenant check-in information and the encryption rules configured by the authoritative platform, and sends it to the corresponding smart door lock and stores it in the smart door lock; Step 7. When the tenant moves in, the smart door lock reads the tenant's identity data and obtains the tenant's short identity information through encryption or decoding. In response to the obtained short identity information matching the tenant's identity data identification information stored locally in the smart door lock, the tenant is allowed to unlock the door and move in. The tenant's unlocking record is collected and uploaded to the rental management platform in real time.

2. The high-security online booking room supervision method according to claim 1 is characterized in that: In step 6, the rental management platform generates the tenant identity data short identification information based on the registered tenant check-in information and the encryption rules configured by the authoritative platform, and sends it to the corresponding smart door lock and stores it in the smart door lock, including: The authoritative VSAM platform configured by the authoritative platform issues VSAM short identification code encryption rules to the rental management platform; After the rental management platform successfully receives the VSAM short identification code encryption rule sent by the authoritative platform, it sends a response message to the authoritative platform; The operator calls the VSAM short identification code encryption rules issued by the authoritative platform on the rental management platform, encrypts the tenant's ID number to form a short identification code, and uses the short identification code to configure the tenant's door opening authorization. That is, the smart door lock receives the short identification code sent by the rental management platform and saves the short identification code locally in the storage module of the smart door lock.

3. The high-security online booking room supervision method according to claim 2 is characterized in that: In step 7, the smart door lock obtains the short identity identification code corresponding to the tenant's ID card data by reading the tenant's ID card data and encrypting it through the built-in encryption algorithm of the VSAM module of the smart door lock. In response to the obtained short identity identification code corresponding to the ID card data matching the short identity identification code of the tenant's identity data stored locally in the smart door lock, the door is allowed to be unlocked and checked in.

4. The high-security online booking room supervision method according to claim 1 is characterized in that: The data interaction between the authoritative platform and the rental management platform is transmitted based on the national secret asymmetric encryption algorithm, including the following process: The authoritative platform generates a public and private key pair; The rental management platform generates a public and private key pair for the application platform; The rental management platform sends the application platform public key to the authority platform; The authoritative platform sends the authoritative platform public key to the rental management platform; The rental management platform generates a data encryption shared key, encrypts it with the public key of the authoritative platform, and sends it to the authoritative platform; The authoritative platform obtains the shared private key by decrypting it with its own private key; The authoritative platform initiates a data reporting request to the rental management platform; The rental management platform encrypts a random number generated by itself with its own private key and sends it to the authoritative platform; The authoritative platform uses the public key of the application platform to decrypt and obtain a random number, collects business data, and encrypts and packages the data together with the decrypted random number using the shared key, and then sends the data packet to the rental management platform; After receiving the data packet, the rental management platform decrypts the data packet using the shared key, extracts the random number and matches it with the previously generated random number. If the match is the same, the business data packet is received.

5. The high-security online booking room supervision method according to claim 1 is characterized in that: In step 6, the rental management platform generates tenant identity data identification information based on the registered tenant check-in information and the encryption rules configured by the authoritative platform, and sends it to the corresponding smart door lock and stores it in the smart door lock, including: The authoritative PSAM platform configured by the authoritative platform issues PSAM encryption rules to the rental management platform; After the rental management platform successfully receives the PSAM encryption rules sent by the authoritative platform, it sends a response message to the authoritative platform; The operator calls the PSAM encryption rules issued by the authoritative platform on the rental management platform, encrypts the tenant's identity data, and sends it to the smart door lock for local storage.

6. The high-security online booking room supervision method according to claim 5 is characterized in that: When the tenant makes an online booking order on the intermediary platform, the rental management platform requests the authoritative platform to write the unlocking data into the tenant's mobile phone super SIM card based on the registered tenant's check-in information; After receiving the SIM card data writing request sent by the rental management platform, the authoritative SIM card platform configured by the authoritative platform writes the unlocking data to the super SIM card on the tenant's mobile phone and returns the processing result of writing the unlocking data to the super SIM card to the rental management platform.

7. The high-security online booking house supervision method according to claim 6 is characterized in that: In step 7, when the tenant moves in, the smart door lock uses NFC to obtain the unlocking data in the super SIM card on the tenant's mobile phone. After decrypting the unlocking data through the PSAM module, the decrypted identity data is compared with the identity data stored locally in the smart door lock. If they match, the smart door lock is triggered to unlock and the unlocking information is reported to the rental management system.

8. The high-security online booking house supervision method according to any one of claims 1 to 7, characterized in that: The method further comprises the following steps: Step 8: Change of property jurisdiction: Build a trusted property jurisdiction change model based on blockchain to change the jurisdiction, which specifically includes the following processes: Constructing the first-level nodes, second-level nodes and miner nodes of the blockchain. The second-level nodes are used to store all the property data registered within the second-level jurisdiction on the blockchain, and are responsible for processing the query requests of the first-level nodes and returning the results; the first-level nodes are used to save the minimum information including the block header information, and are responsible for initiating queries and receiving the query results returned by the second-level nodes; the miner nodes are responsible for generating new blocks by constructing consensus proofs; When a first-level jurisdiction area is used to check online booking houses, and it is found that a certain online booking house Hx does not belong to the jurisdiction where it is located, but belongs to a management agency Hp in another jurisdiction, the second-level node responsible for checking online booking houses will query the first-level node to which management agency the online booking house Hx belongs; The second-level node joins the verification path from the online house Hx to the brother node in the root path, reconstructs the Merkle tree root Hash value, and compares it with the root Hash value saved in the block header. If the reconstructed Hash value is the same as the root Hash value saved in the block header, it indicates that the first-level node query is a credible query, and the second-level node returns the real house information of the online house Hx. After obtaining the real house information of the online house Hx, the second-level node responsible for the online house verification conducts a house jurisdiction change transaction with the management agency Hp in other jurisdictions to complete the house jurisdiction change.

9. A highly secure online booking house supervision system, characterized in that: include: The authoritative platform is set up as an identity management and authentication authority to manage the identities of people within its jurisdiction; the jurisdiction of the authoritative platform includes the third-level jurisdiction, the second-level jurisdiction and the first-level jurisdiction that form a jurisdiction relationship in sequence; Based on the first-level jurisdiction, for each smart door lock deployed in the online booking room registered within the first-level jurisdiction, each smart door lock is independently controlled for unlocking and locking; Based on the second-level jurisdiction area, the Internet end of the second-level supervision platform deployed, as well as the rental management platform, intermediary platform, rental management platform landlord end, online rental tenant end, and online rental landlord end that interact with the data of the Internet end of the second-level supervision platform, dynamically store and synchronize the data of the intermediary platform and the rental management platform landlord end, online rental tenant end, and online rental landlord end through the Internet end of the second-level supervision platform; On the basis of the second-level jurisdiction area, there is also an intranet terminal of the second-level supervision platform that is isolated from the Internet terminal of the second-level supervision platform. The intranet terminal of the second-level supervision platform is physically isolated from the Internet, and the information gathered by the Internet terminal of the second-level supervision platform is reported and synchronized to the intranet terminal of the second-level supervision platform according to a preset period and method. The intranet terminal of the second-level supervision platform aggregates the house registration information, order information, operator information, and door opening record information for unified storage, and statistically analyzes the distribution of houses, door opening records, operators, and orders in the jurisdiction under its jurisdiction based on the dimension of the jurisdiction under its jurisdiction; Based on the third-level jurisdiction area, a third-level regulatory platform intranet terminal is deployed, which is physically isolated from the Internet, and receives synchronous reporting data from multiple second-level regulatory platform intranet terminals within its jurisdiction according to the preset cycle and method, including house source records, order records, operator records, door lock records, and statistically analyzes the distribution of house sources, orders, operators, and unlocking information in its jurisdiction in the dimension of its jurisdiction; The landlord of the rental management platform registers the tenant's check-in information with the rental management platform according to the tenant's order information of the intermediary platform; The rental management platform generates tenant identity data identification information based on the registered tenant check-in information and the encryption rules configured by the authoritative platform, and sends it to the corresponding smart door lock and stores it in the smart door lock; When a tenant moves in, the smart door lock reads the tenant's identity data and obtains the tenant's short identity information based on PSAM identification or VSAM identification. In response to a match between the obtained short identity information and the tenant's identity data identification information stored locally in the smart door lock, the smart door lock allows the tenant to unlock the door and move in, and collects the tenant's unlocking records and uploads them to the rental management platform in real time.

10. The high-security online booking house supervision system according to claim 9 is characterized in that: The data interaction between the authoritative platform and the rental management platform is transmitted based on the national secret asymmetric encryption algorithm, including the following process: The authoritative platform generates a public and private key pair; The rental management platform generates a public and private key pair for the application platform; The rental management platform sends the application platform public key to the authority platform; The authoritative platform sends the authoritative platform public key to the rental management platform; The rental management platform generates a data encryption shared key, encrypts it with the public key of the authoritative platform, and sends it to the authoritative platform; The authoritative platform obtains the shared private key by decrypting it with its own private key; The authoritative platform initiates a data reporting request to the rental management platform; The rental management platform encrypts a random number generated by itself with its own private key and sends it to the authoritative platform; The authoritative platform uses the public key of the application platform to decrypt and obtain a random number, collects business data, and encrypts and packages the data together with the decrypted random number using the shared key, and then sends the data packet to the rental management platform; After receiving the data packet, the rental management platform decrypts the data packet using the shared key, extracts the random number and matches it with the previously generated random number. If the match is the same, the business data packet is received.

Images