Control method and device of access control equipment, equipment and storage medium

Abstract

The invention discloses a control method and device of access control equipment, equipment and a storage medium. The method comprises the following steps: creating and initializing an OPC UA service in an access control system; acquiring access control equipment information of the access control system, and extracting an equipment level association relationship corresponding to the access control system; establishing each equipment node according to the equipment hierarchy association relationship; in response to a connection request initiated by the third-party system to the access control system, establishing connection between the third-party system and the OPC UA service; acquiring update data of the third-party system; and performing state control on each equipment node according to the updated data. According to the invention, the OPC UA service is applied to the access control system, communication between the access control system and the third-party system is realized, the equipment nodes are established according to the equipment hierarchy association relationship, and the third-party system is connected with the OPC UA service, so that connection between the third-party system and the access control system is realized. In this way, the access control equipment can be actually controlled by controlling the equipment nodes through the third-party system, flexibility is enhanced, and the limitation defect is overcome.

Description

Technical Field

[0001] The present application relates to the technical field of access control equipment, and in particular to a control method, device, equipment and storage medium for access control equipment. Background Art

[0002] In today's society, people are paying more and more attention to security issues. Access control systems, as an important means of security control, play a key role in various fields. With the advancement of technology and the improvement of people's demand for security, traditional mechanical locks can no longer meet the complex and ever-changing security management requirements. Nowadays, access control systems are gradually developing towards intelligence, and a variety of advanced access control technologies such as induction card access control, fingerprint recognition access control, and face recognition access control have emerged.

[0003] Access control systems usually centrally manage access control devices through the HTTP protocol. Therefore, when a third-party system (such as a building management system) integrates the access control function, it must be directly connected to the access control device and cannot achieve a unified connection through the access control system. Therefore, the control of the access control device is relatively limited and inflexible, which limits the control efficiency. Summary of the invention

[0004] In view of this, the present application provides a control method, device, equipment and storage medium for access control equipment, which is used to solve the problem that the third-party system in the existing access control equipment control method cannot achieve unified connection through the access control system, so the control of the access control equipment is relatively limited and not flexible, which limits the control efficiency.

[0005] To achieve the above objectives, the proposed solution is as follows:

[0006] In a first aspect, a method for controlling an access control device includes:

[0007] Create and initialize OPC UA services in the access control system;

[0008] Obtaining access control device information of an access control system, and extracting a device hierarchical association relationship corresponding to the access control system from the access control device information;

[0009] Establishing each device node according to the device hierarchical association relationship;

[0010] In response to a connection request initiated by a third-party system to the access control system, establishing a connection between the third-party system and the OPC UA service;

[0011] Obtaining update data of the third-party system;

[0012] The status of each of the device nodes is controlled according to the update data.

[0013] Preferably, the initializing the OPC UA service includes:

[0014] Obtain the IP address of the access control system;

[0015] Binding the IP address to the OPC UA service;

[0016] Obtaining default configuration information of the access control system, and using the default configuration information to set the uniform resource locator of the OPC UA service;

[0017] Setting various preset security policies for the OPC UA service;

[0018] The preset port is used as the default port of the OPC UA service, and a Discovery service is created to complete the initialization of the OPC UA service.

[0019] Preferably, establishing each device node according to the device hierarchical association relationship includes:

[0020] Determine each relationship group from the device hierarchical association relationship; wherein each of the relationship groups includes the system ID and device name of the access control system;

[0021] Establishing a corresponding device node for each of the relationship groups;

[0022] The system ID is used as the node ID of each of the device nodes, and the device name is used as the node name of the corresponding device node.

[0023] Preferably, after establishing each device node according to the device hierarchical association relationship, the method further includes:

[0024] For each of the device nodes, obtaining each feature information of the devices in the relationship group corresponding to the device node;

[0025] Obtain the data format supported by the OPC UA service;

[0026] Convert each of the characteristic information according to the data format;

[0027] Set read and write permissions for each converted feature information to obtain each attribute information;

[0028] The device node is configured using each of the attribute information.

[0029] Preferably, in response to a connection request initiated by a third-party system to the access control system, establishing a connection between the third-party system and the OPC UA service includes:

[0030] In response to a connection request initiated by a third-party system to the access control system, obtaining a service IP address corresponding to the third-party system and an IP address of the access control system;

[0031] Determine whether the service IP address corresponding to the third-party system is consistent with the IP address of the access control system;

[0032] If yes, obtaining the security policy configured in the third-party system and the security policy set in the OPC UA service;

[0033] Determining whether the security policies configured in the third-party system all include the security policies set in the OPC UA service;

[0034] If so, the third-party system is used as an OPC UA client and a connection is established with the OPC UA service.

[0035] Preferably, the performing status control on each of the device nodes according to the update data includes:

[0036] Obtaining attribute information of each of the device nodes;

[0037] determining a requesting user of the third-party system;

[0038] Determine whether the requesting user has write permission corresponding to the access control system;

[0039] If yes, for each of the device nodes, matching the attribute information of the device node with the update data, and determining whether the update data matches successfully;

[0040] If the match is successful, the state of the device node is controlled according to the update data.

[0041] Preferably, matching the attribute information of the device node with the update data and determining whether the update data matches successfully comprises:

[0042] Determine each business logic in the attribute information and each update logic in the update data;

[0043] Determine whether there is a corresponding relationship between each of the business logics and each of the update logics;

[0044] If there is a corresponding relationship between at least one business logic and the update logic, it is determined that the update data matches successfully.

[0045] In a second aspect, a control device for access control equipment includes:

[0046] OPC UA service initialization module, used to create and initialize OPC UA services in the access control system;

[0047] A device level association relationship extraction module is used to obtain access control device information of the access control system, and extract a device level association relationship corresponding to the access control system from the access control device information;

[0048] A device node establishment module, used to establish each device node according to the device hierarchical association relationship;

[0049] A connection establishment module, configured to establish a connection between the third-party system and the OPC UA service in response to a connection request initiated by the third-party system to the access control system;

[0050] An update data acquisition module, used to acquire update data of the third-party system;

[0051] A state control module is used to control the state of each of the device nodes according to the update data.

[0052] In a third aspect, a control device for an access control device includes a memory and a processor;

[0053] The memory is used to store programs;

[0054] The processor is used to execute the program to implement each step of the method for controlling the access control device as described in any one of the first aspects.

[0055] In a fourth aspect, a storage medium stores a computer program thereon, and when the computer program is executed by a processor, the steps of the method for controlling an access control device as described in any one of the first aspects are implemented.

[0056] It can be seen from the above technical solution that the present application creates and initializes an OPC UA service in an access control system; obtains access control device information of the access control system, and extracts the device hierarchical association relationship corresponding to the access control system from the access control device information; establishes each device node according to the device hierarchical association relationship; establishes a connection between the third-party system and the OPC UA service in response to a connection request initiated by a third-party system to the access control system; obtains update data of the third-party system; and performs status control on each of the device nodes according to the update data. This application combines the OPC UA service with the access control system, creates and initializes the OPC service in the access control system, thereby realizing the communication between the access control system and the third-party system, and establishes a device node according to the device hierarchy association relationship in the access control device information of the access control system, and establishes a connection between the third-party system and the OPC UA service, thereby realizing the connection between the third-party system and the access control system, which can achieve the effect of actually controlling the access control device by controlling the device node through the third-party system, enhances flexibility, and improves control efficiency. The update data of the third-party system corresponds to the access control device, that is, the status of the device node. Therefore, the status of the device node can be controlled according to the indication of the update data, which solves the defects of the limitations of the prior art.

[0057] In addition, the access control system has powerful and refined equipment control and authority management functions, but in the existing technology, when communicating with a third-party system, there is often inconsistency in the communication protocol level. This problem leads to the connection between the access control system and the third-party system often requiring additional middleware or protocol conversion tools, which is very cumbersome and inefficient. The flexibility and openness of this application make the integration process between the access control system and the third-party system simple and efficient, reduce the integration cost, and make the deployment of modern intelligent buildings more economical and feasible, so as to promote wider applications. BRIEF DESCRIPTION OF THE DRAWINGS

[0058] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on the provided drawings without paying creative work.

[0059] Figure 1 An optional flow chart of a control method for a door access control device provided in an embodiment of the present application;

[0060] Figure 2 A schematic diagram of attribute information of a device node provided in an embodiment of the present application;

[0061] Figure 3A schematic diagram of the structure of a control device for access control equipment provided in an embodiment of the present application;

[0062] Figure 4 A schematic diagram of the structure of a control device for an access control device provided in an embodiment of the present application. DETAILED DESCRIPTION

[0063] The following will be combined with the drawings in the embodiments of the present application to clearly and completely describe the technical solutions in the embodiments of the present application. Obviously, the described embodiments are only part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of this application.

[0064] The present application can be applied to any access control system, and can be specifically used in many general or special computing device environments or configurations, such as personal computers, server computers, tablet devices, multi-processor devices, distributed computing environments including any of the above devices or equipment, etc., so as to realize the control of access control equipment.

[0065] The embodiment of the present invention provides a control method for access control equipment. The method can be applied to various computer terminals or intelligent terminals. The execution subject can be a processor or server of the computer terminal or intelligent terminal. The method flow chart of the method is as follows: Figure 1 As shown, specifically including:

[0066] S1: Create and initialize the OPC UA service in the access control system.

[0067] OPC UA is an open communication protocol designed specifically for data exchange and information integration in the field of industrial automation. It provides a standardized data model for describing objects, variables, and services in the system, supports a subscription-based communication model, and allows the client to subscribe to changes on the server side. Its security model covers multiple levels such as authentication, authorization, and data encryption to ensure the security of data transmission. However, although OPC UA has been widely used in the Internet of Things (IoT) and industrial scenarios, and is known for its cross-platform interoperability and strong data security, it has not yet been widely deployed in the traditional access control management field. Therefore, when the access control system is integrated with other third-party systems, such as smart building systems, the OPC UA standardized communication interface cannot be used, resulting in a lack of consistent intercommunication methods and large limitations. Therefore, this application creates an OPC UA service in the access control system and initializes it as required, so that the access control system can be combined with the OPC UA service, so that the OPC UA service can be better applied to the access control system.

[0068] The OPC UA protocol has the concepts of server and client. The OPC UA server is the provider of data and services. It is usually connected to field devices, control systems or other data sources, responsible for collecting, storing and managing data, and providing this data to the client in the form of OPC UA standards; the OPC UA client is the user of data and services. It connects to the OPC UA server through the network, requests data and services, and processes and analyzes the acquired data. From a technical point of view, both the OPC UA server and the client can exchange data. The most common way is that the server generates data and the client receives data.

[0069] Creating an OPC UA service in an access control system in this application specifically refers to creating an OPC UA server in the access control system.

[0070] Optionally, this application considers using an access control system architecture based on Spring Boot. Spring Boot is a Java-based WEB service framework that helps developers develop, test and deploy applications more efficiently. It simplifies the development process of Spring applications, allowing developers to build enterprise-level applications more quickly and efficiently. It supports a built-in Tomcat server and can run directly without relying on an external server environment. At the same time, the Eclipse Milo library is considered. The Eclipse Milo library is an open source Java library that provides the ability to develop OPC UA services on the Java platform, which is implemented through the server and the client. The Eclipse Milo library also uses a non-blocking asynchronous communication mode, which is very helpful for processing high-concurrency access control requests. The Eclipse Milo library also uses a modular design, so it allows developers to choose different modules to expand the functions of the OPC UA service according to specific needs. Therefore, this application can use the Eclipse Milo library in a Spring Boot environment and apply it to the access control system, which can better realize the functions of the OPC UA service, so that the access control system can perform standardized data communication and integration with third-party systems.

[0071] In addition, the combination of OPC UA services and the access control system will not affect the original functions of the access control devices in the access control system, maintaining the scalability and flexibility of the access control system, ensuring that new devices and functional modules can still be easily added to the access control system, and the access control system based on the Spring Boot framework can adapt to the ever-changing needs and technological developments for iteration, ensuring long-term value.

[0072] S2: Obtain access control device information of the access control system, and extract a device hierarchical association relationship corresponding to the access control system from the access control device information.

[0073] The access control device information of the access control system may include model and brand, processor performance, storage capacity, communication interface, door, reader and other information, which may include multiple doors and multiple readers, and each reader will have a unique binding relationship with the door, and the door has a unique binding relationship with the access control device (such as a controller, all-in-one machine), etc., so a hierarchical association relationship of device-door-reader can be formed. Therefore, this step obtains the access control device information of the access control system, and the hierarchical association relationship of the device corresponding to the access control system can be extracted from it, that is, the association relationship of device-door-reader.

[0074] Obtaining the device-level association relationship can clarify the relationship network within the access control system, facilitate access control information management and data tracing, and facilitate access control.

[0075] S3: Establishing each device node according to the device hierarchical association relationship.

[0076] From this device-level association, we can know the correspondence between doors, readers, and devices. Therefore, this application can create access control namespace nodes in the OPC UA service, such as creating nodes corresponding to doors (door nodes), nodes corresponding to readers (reader nodes), and nodes corresponding to devices (device nodes).

[0077] A node relationship tree can be created. For example, the gate node is used as the root node of the namespace, and the reader node and device node are used as child nodes. In addition, the gate node, reader node and device node can create their own corresponding child nodes.

[0078] This application takes the establishment of device nodes as the starting point, maps them to access control devices, and controls access control devices by controlling device nodes. This can give full play to the role of OPC UA services and achieve unified management of the access control system.

[0079] S4: In response to a connection request initiated by a third-party system to the access control system, a connection is established between the third-party system and the OPC UA service.

[0080] The third-party system in this application refers to an integrated management platform that can monitor and control the access control system. In practical applications, using this integrated management platform to monitor and control the access control system can improve the operating efficiency, safety and comfort of the building where the access control system is located. Commonly used integrated management platforms such as Building Management System (BMS), also known as Building Automation System (BAS), have become an important part of modern intelligent buildings. Currently, BMS widely supports and adopts open communication protocols.

[0081] Nowadays, B / S-structured WEB service applications have become mainstream, and existing access control systems usually centrally manage access control devices through HTTP / HTTPS / MQTT protocols. Therefore, BMS can only integrate access control devices through this common network protocol, but different access control devices often have poor compatibility, so it is quite limited; in addition, many old access control systems do not support direct connection and management through these common network protocols, which limits their application in modern building management systems. Therefore, this application takes this issue into consideration and creates an OPC UA service in the access control system to enable third-party systems to establish connections with OPC UA services.

[0082] S5: Obtain update data of the third-party system.

[0083] The purpose of obtaining update data is to control the access control device. The update data of the third-party system refers to the update instructions that the user wants to use the third-party system to control the status of the access control device, such as changing the switch state of a door corresponding to a device to "off", or setting the door corresponding to a device to a normally open state, etc. This embodiment does not impose any restrictions on this.

[0084] The update data may include multiple update instructions, which may be respectively directed to one or more devices in the access control system.

[0085] S6: Performing status control on each of the device nodes according to the update data.

[0086] The update data may contain update instructions for status control of one or more device nodes. In this process, a comparison process can be performed first. For a device node, if the update data contains an update instruction corresponding to the device node, the status of the device node is controlled or adjusted according to the update instruction, thereby realizing unified management of access control equipment.

[0087] It can be seen from the above technical scheme that the present application combines the OPC UA service with the access control system, creates and initializes the OPC service in the access control system, thereby realizing the communication between the access control system and the third-party system, and establishes a device node according to the device hierarchy association relationship in the access control device information of the access control system, and establishes a connection between the third-party system and the OPC UA service, thereby realizing the connection between the third-party system and the access control system, which can achieve the effect of actually controlling the access control device by controlling the device node through the third-party system, enhances flexibility and issuance, and improves control efficiency, wherein the update data of the third-party system corresponds to the access control device, that is, the status of the device node, so the status of the device node can be controlled according to the indication of the update data, thereby solving the defects of the limitations of the prior art.

[0088] In addition, the access control system has powerful and refined equipment control and authority management functions, but in the existing technology, when communicating with a third-party system, there is often inconsistency in the communication protocol level. This problem leads to the connection between the access control system and the third-party system often requiring additional middleware or protocol conversion tools, which is very cumbersome and inefficient. The flexibility and openness of this application make the integration process between the access control system and the third-party system simple and efficient, reduce the integration cost, and make the deployment of modern intelligent buildings more economical and feasible, so as to promote wider applications.

[0089] In the method provided in the embodiment of the present invention, the process of initializing the OPC UA service is specifically described as follows:

[0090] Obtain the IP address of the access control system;

[0091] Binding the IP address to the OPC UA service;

[0092] Obtaining default configuration information of the access control system, and using the default configuration information to set the uniform resource locator of the OPC UA service;

[0093] Setting various preset security policies for the OPC UA service;

[0094] The preset port is used as the default port of the OPC UA service, and a Discovery service is created to complete the initialization of the OPC UA service.

[0095] Specifically, the IP address of the access control system may refer to the IP address of the access control system server. Binding the IP address to the OPC UA service is to make the IP address the service address bound to the OPC UA service, so that the access control system corresponds to the OPC UA service.

[0096] On the one hand, the default configuration information of the access control system can be the basic configuration information of the access control system itself, such as controller parameters, card reader parameters, electric lock parameters, etc. at the hardware configuration layer, and user management information, access control rules, event records, etc. at the software configuration layer, and use this information to set the globally unique URI of the OPC UA service. Since the URI of the OPC UA service may need to be adjusted according to the requirements or configuration of the third-party system when the access control system is integrated with a third-party system, using the default configuration information of the access control system to set the URI can efficiently and easily adjust the URI, which can improve security and accessibility, and can also facilitate the management of the URI; on the other hand, the default configuration information of the access control system can also be the configuration information set or input by the user for the access control system, such as the user presetting a name, using this name as the URI, and supporting the user to adjust it at will, which is convenient for user management, and the URI is unique in the OPC UA client.

[0097] In addition, it is necessary to select a security policy based on the characteristics of the OPC UA service, so that the OPC UA service can play a better service role, such as supporting anonymous policies, supporting username and password login policies, security certificate policies, etc.; it is also necessary to specify the default port of the OPC UA service, so that the OPC UA service can be assumed to be running on the default port when the specific system configuration is changed or not known in advance. This can save connection time and reduce the possibility of configuration errors. Firewall rules and port filtering policies can be set for the default port to ensure that only authorized traffic can access the OPC UA service to improve security. For example, 4840 can be used as the preset port, and then a Discovery service can be created on the OPC UA service. Creating a Discovery service on the OPC UA service can realize the functions of device discovery, address resolution, service registration and publishing. It can be tightly integrated with the OPC UA service, and the Discovery service and the OPC UA service can also follow the same standards and specifications to maintain consistency.

[0098] Therefore, the OPC UA service is initialized through the above process of binding the IP address, setting the uniform resource locator, setting the default port and creating the Discovery service, so that the OPC UA service can better serve the access control system, and the access control system can be seamlessly connected with various third-party systems of integrated management platform type, which greatly improves the interoperability and compatibility of the access control system. This integration can make the information transmission between different systems faster and more accurate, which is helpful to realize the intelligent management of the building where the access control equipment is located.

[0099] The following is a detailed description of the process of establishing each device node according to the device hierarchical association relationship in the present application.

[0100] Determine each relationship group from the device hierarchical association relationship; wherein each of the relationship groups includes the system ID and device name of the access control system;

[0101] Establishing a corresponding device node for each of the relationship groups;

[0102] The system ID is used as the node ID of each of the device nodes, and the device name is used as the node name of the corresponding device node.

[0103] Specifically, the device hierarchy relationship includes one or more relationship groups, such as device a-door 1-reader 1, device a-door 1-reader 2, device b-door 2-reader 1, etc. Each relationship group is marked with a label based on the system ID of the access control system. For example, the labels of the above three relationship groups are all "Access Control System A", where the device names are the above-mentioned "a" and "b", and a corresponding device node is established for each relationship group. Optionally, an access control device may correspond to one or more relationship groups, so an access control device may correspond to one or more device nodes; in addition, the basic information of the device node needs to be set. In order to make the device node correspond to the access control system, the system ID is used as the node ID of each device node, and the device name of the access control device is used as the node name of the device node. This can facilitate subsequent search for device nodes and modification and update of device nodes.

[0104] Furthermore, after the device node is created and configured, you can also perform the following operations:

[0105] For each of the device nodes, obtaining each feature information of the devices in the relationship group corresponding to the device node;

[0106] Obtain the data format supported by the OPC UA service;

[0107] Convert each of the characteristic information according to the data format;

[0108] Set read and write permissions for each converted feature information to obtain each attribute information;

[0109] The device node is configured using each of the attribute information.

[0110] Specifically, in order to achieve better real-time data synchronization and two-way communication capabilities between the access control system and the third-party system, the attribute information of the device node is planned and configured. This application obtains each feature information of the device (access control device) corresponding to the device node, and uses the feature information as the attribute information of the device node. It is necessary to convert each feature information according to the data format supported by the OPC UA service so that the OPC UA service can better play its role, and set read and write permissions after the conversion to obtain the attribute information, and configure the attribute information in the device node. The device node obtained in this way is a complete and fully operational node. The real-time data synchronization and two-way communication capabilities ensure that the access control system and the third-party system can respond to various events (such as access control switches, security alarms, etc.) in the shortest time. The read and write permissions are set because it is necessary to set certain mechanisms for the doors or readers corresponding to some access control devices to ensure safety, convenience, etc. For example, the feature information includes the power-on status of the door, the switch status of the door, the switch speed of the door, the alarm status of the door, the online status of the door, the online status of the reader, the trigger status of the reader, etc. Figure 2 As shown, in one example, the read and write permissions for the characteristic information of the door's power-on status are "modification not allowed", and the read and write permissions for the characteristic information of the door's switch status are "modification allowed". The specific modification permissions include "open", "closed", "normally open", "normally closed", "normally open for a certain period of time", "normally closed for a certain period of time", etc.

[0111] The following embodiment describes in detail the process of establishing a connection between the third-party system and the OPC UA service in response to a connection request initiated by the third-party system to the access control system in the present application.

[0112] In response to a connection request initiated by a third-party system to the access control system, obtaining a service IP address corresponding to the third-party system and an IP address of the access control system;

[0113] Determine whether the service IP address corresponding to the third-party system is consistent with the IP address of the access control system;

[0114] If yes, obtaining the security policy configured in the third-party system and the security policy set in the OPC UA service;

[0115] Determining whether the security policies configured in the third-party system all include the security policies set in the OPC UA service;

[0116] If so, the third-party system is used as an OPC UA client and a connection is established with the OPC UA service.

[0117] Specifically, when a third-party system wants to control or adjust the status of the access control device of the access control system, for example, a user initiates status control through a third-party system, that is, the third-party system initiates a connection request to the access control system. In order to ensure security, double verification is first performed, one for the IP address and the other for the security policy. When the service IP address corresponding to the third-party system is consistent with the IP address of the access control system, a second verification is performed to determine whether the security policy configured in the third-party system fully includes the security policy set in the OPC UA service. Only if all are included can security be guaranteed and the third-party system is allowed to establish a connection with the OPC UA service as an OPC UA client, that is, to achieve the connection between the third-party system and the access control system.

[0118] The following embodiments specifically explain the process of controlling the status of each device node according to the update data in the present application.

[0119] Obtaining attribute information of each of the device nodes;

[0120] determining a requesting user of the third-party system;

[0121] Determine whether the requesting user has write permission corresponding to the access control system;

[0122] If yes, for each of the device nodes, matching the attribute information of the device node with the update data, and determining whether the update data matches successfully;

[0123] If the match is successful, the state of the device node is controlled according to the update data.

[0124] Specifically, in addition to setting up the comparison test of IP addresses and security policies in the above process, the present application also implements the function of reverse monitoring information modification through OPC UA services. By detecting the requesting user, it is determined whether the requesting user has the write permission corresponding to the access control system. For example, if the user information or user name of the requesting user is recorded or filed in the access control system, then the attribute information and the updated data are matched. If the match is successful, state control is performed. If the match fails, state control cannot be performed, which makes the safety factor higher. The specific control rules can be adjustment, modification, change, etc.

[0125] In addition, in the process of obtaining the attribute information of the device node, from the perspective of the data link, it is obtained through the OPCUA client, and because the device node itself also has the concept of hierarchy, the attribute information of the device node may exist in itself, or in its corresponding child node (attribute node); if it exists in the corresponding child node, then first determine the root node (such as the object node), then determine the child node (device node), and finally determine the child node (attribute node) of the device node to obtain the attribute information from the attribute node.

[0126] Furthermore, for each of the device nodes, matching the attribute information of the device node with the update data and determining whether the update data is matched successfully may include:

[0127] Determine each business logic in the attribute information and each update logic in the update data;

[0128] Determine whether there is a corresponding relationship between each of the business logics and each of the update logics;

[0129] If there is a corresponding relationship between at least one business logic and the update logic, it is determined that the update data matches successfully.

[0130] Specifically, the business logic is the power-on status of the door, the switch status of the door, and the read-write permissions, etc. shown in the above example. The update logic in the update data can be: set the switch status of door 1 to "open", and set the power-on status of door 2 to "power off". Taking the update logic of setting the power-on status of door 2 to "power off" as an example, the update logic corresponds to the device corresponding to door 2, and its device node can also be clear, but the business logic related to power on of door 2 is: power-on status of the door, read-write permissions: modification is not allowed. Therefore, there is no corresponding relationship between the update logic and the business logic, and then the match fails, and then continue to judge other business logics of the device node, as well as other device nodes, so as to realize the status control or adjustment of the device node, that is, the access control device.

[0131] Furthermore, it is also possible to monitor the increase or decrease or status changes and information updates of access control devices in real time, and notify the module where the OPC UA service is located. The corresponding device node can be found through the device hierarchy relationship to achieve node changes or attribute information modifications and updates of device nodes.

[0132] and Figure 1 Corresponding to the method described above, the embodiment of the present invention further provides a control device for access control equipment, which is used to Figure 1 In the specific implementation of the method, the control device of the access control device provided in the embodiment of the present invention can be in a computer terminal or various mobile devices, combined with Figure 3, introduce the control device of the access control equipment, such as Figure 3 As shown, the device may include:

[0133] The OPC UA service initialization module 10 is used to create and initialize the OPC UA service in the access control system;

[0134] The device level association relationship extraction module 20 is used to obtain the access control device information of the access control system, and extract the device level association relationship corresponding to the access control system from the access control device information;

[0135] A device node establishment module 30, used to establish each device node according to the device hierarchical association relationship;

[0136] A connection establishing module 40, configured to establish a connection between the third-party system and the OPC UA service in response to a connection request initiated by the third-party system to the access control system;

[0137] An update data acquisition module 50, used to acquire update data of the third-party system;

[0138] The state control module 60 is used to control the state of each of the device nodes according to the update data.

[0139] It can be seen from the above technical scheme that the present application combines the OPC UA service with the access control system, creates and initializes the OPC service in the access control system, thereby realizing the communication between the access control system and the third-party system, and establishes a device node according to the device hierarchy association relationship in the access control device information of the access control system, and establishes a connection between the third-party system and the OPC UA service, thereby realizing the connection between the third-party system and the access control system, which can achieve the effect of actually controlling the access control device by controlling the device node through the third-party system, enhances flexibility and issuance, and improves control efficiency, wherein the update data of the third-party system corresponds to the access control device, that is, the status of the device node, so the status of the device node can be controlled according to the indication of the update data, thereby solving the defects of the limitations of the prior art.

[0140] In addition, the access control system has powerful and refined equipment control and authority management functions, but in the existing technology, when communicating with a third-party system, there is often inconsistency in the communication protocol level. This problem leads to the connection between the access control system and the third-party system often requiring additional middleware or protocol conversion tools, which is very cumbersome and inefficient. The flexibility and openness of this application make the integration process between the access control system and the third-party system simple and efficient, reduce the integration cost, and make the deployment of modern intelligent buildings more economical and feasible, so as to promote wider applications.

[0141] Furthermore, the embodiment of the present application provides a control device for an access control device. Optionally, Figure 4 The hardware structure diagram of the control device of the access control device is shown in FIG. Figure 4 The hardware structure of the control device of the access control device may include: at least one processor 01, at least one communication interface 02, at least one memory 03 and at least one communication bus 04.

[0142] In the embodiment of the present application, the number of the processor 01 , the communication interface 02 , the memory 03 , and the communication bus 04 is at least one, and the processor 01 , the communication interface 02 , and the memory 03 communicate with each other through the communication bus 04 .

[0143] The processor 01 may be a central processing unit (CPU), or an application specific integrated circuit (ASIC), or one or more integrated circuits configured to implement the embodiments of the present invention.

[0144] The memory 03 may include a high-speed RAM memory, and may also include a non-volatile memory (non-volatile memory), etc., such as at least one disk memory.

[0145] The memory stores a program, and the processor can call the program stored in the memory, and the program is used to execute the following access control device control method, including:

[0146] Create and initialize OPC UA services in the access control system;

[0147] Obtaining access control device information of an access control system, and extracting a device hierarchical association relationship corresponding to the access control system from the access control device information;

[0148] Establishing each device node according to the device hierarchical association relationship;

[0149] In response to a connection request initiated by a third-party system to the access control system, establishing a connection between the third-party system and the OPC UA service;

[0150] Obtaining update data of the third-party system;

[0151] The status of each of the device nodes is controlled according to the update data.

[0152] Optionally, the detailed functions and extended functions of the program may refer to the description of the control method of the access control device in the method embodiment.

[0153] The embodiment of the present application further provides a storage medium, which may store a program suitable for execution by a processor, and when the program is executed, controls the device where the storage medium is located to execute the following control method for access control equipment, including:

[0154] Create and initialize OPC UA services in the access control system;

[0155] Obtaining access control device information of an access control system, and extracting a device hierarchical association relationship corresponding to the access control system from the access control device information;

[0156] Establishing each device node according to the device hierarchical association relationship;

[0157] In response to a connection request initiated by a third-party system to the access control system, establishing a connection between the third-party system and the OPC UA service;

[0158] Obtaining update data of the third-party system;

[0159] The status of each of the device nodes is controlled according to the update data.

[0160] Specifically, the storage medium may be a computer-readable storage medium, and the computer-readable storage medium may be an electronic memory such as a flash memory, an EEPROM (Electrically Erasable Programmable Read-Only Memory), an EPROM, a hard disk or a ROM.

[0161] Optionally, the detailed functions and extended functions of the program may refer to the description of the control method of the access control device in the method embodiment.

[0162] In addition, the functional modules in the various embodiments of the present disclosure can be integrated together to form an independent part, or each module can exist separately, or two or more modules can be integrated to form an independent part. If the function is implemented in the form of a software functional module and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present disclosure is essentially or the part that contributes to the prior art or the part of the technical solution can be embodied in the form of a software product, which is stored in a storage medium and includes a number of instructions for a computer device (which can be a personal computer, a live broadcast device, or a network device, etc.) to perform all or part of the steps of the methods of the various embodiments of the present disclosure.

[0163] Finally, it should be noted that, in this article, relational terms such as first and second, etc. are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the terms "include", "comprise" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or device. In the absence of further restrictions, the elements defined by the sentence "comprise a ..." do not exclude the presence of other identical elements in the process, method, article or device including the elements.

[0164] The various embodiments in this specification are described in a progressive manner, and each embodiment focuses on the differences from other embodiments. The same or similar parts between the various embodiments can be referenced to each other.

[0165] The above description of the disclosed embodiments enables those skilled in the art to implement or use the present application. Various modifications to these embodiments will be apparent to those skilled in the art, and the general principles defined herein may be implemented in other embodiments without departing from the spirit or scope of the present application. Therefore, the present application will not be limited to the embodiments shown herein, but will conform to the widest scope consistent with the principles and novel features disclosed herein.

Claims

1. A control method for access control equipment, characterized in that: include: Create and initialize OPC UA services in the access control system; Obtaining access control device information of an access control system, and extracting a device hierarchical association relationship corresponding to the access control system from the access control device information; Establishing each device node according to the device hierarchical association relationship; In response to a connection request initiated by a third-party system to the access control system, establishing a connection between the third-party system and the OPC UA service; Obtaining update data of the third-party system; The status of each of the device nodes is controlled according to the update data.

2. The method according to claim 1, characterized in that The initialization of the OPC UA service includes: Obtain the IP address of the access control system; Binding the IP address to the OPC UA service; Obtaining default configuration information of the access control system, and using the default configuration information to set the uniform resource locator of the OPC UA service; Setting various preset security policies for the OPC UA service; The preset port is used as the default port of the OPC UA service, and a Discovery service is created to complete the initialization of the OPC UA service.

3. The method according to claim 1, characterized in that The establishing of each device node according to the device hierarchical association relationship includes: Determine each relationship group from the device hierarchical association relationship; wherein each of the relationship groups includes the system ID and device name of the access control system; Establishing a corresponding device node for each of the relationship groups; The system ID is used as the node ID of each of the device nodes, and the device name is used as the node name of the corresponding device node.

4. The method according to claim 1, characterized in that: After establishing each device node according to the device hierarchical association relationship, the method further includes: For each of the device nodes, obtaining each feature information of the devices in the relationship group corresponding to the device node; Obtain the data format supported by the OPC UA service; Convert each of the characteristic information according to the data format; Set read and write permissions for each converted feature information to obtain each attribute information; The device node is configured using each of the attribute information.

5. The method according to claim 1, characterized in that The step of establishing a connection between the third-party system and the OPC UA service in response to a connection request initiated by the third-party system to the access control system includes: In response to a connection request initiated by a third-party system to the access control system, obtaining a service IP address corresponding to the third-party system and an IP address of the access control system; Determine whether the service IP address corresponding to the third-party system is consistent with the IP address of the access control system; If yes, obtaining the security policy configured in the third-party system and the security policy set in the OPC UA service; Determining whether the security policies configured in the third-party system all include the security policies set in the OPC UA service; If so, the third-party system is used as an OPC UA client and a connection is established with the OPC UA service.

6. The method according to any one of claims 1 to 5, characterized in that The controlling the status of each of the device nodes according to the update data includes: Obtaining attribute information of each of the device nodes; determining a requesting user of the third-party system; Determine whether the requesting user has write permission corresponding to the access control system; If yes, for each of the device nodes, matching the attribute information of the device node with the update data, and determining whether the update data is matched successfully; If the match is successful, the state of the device node is controlled according to the updated data.

7. The method according to claim 6, characterized in that The matching of the attribute information of the device node with the update data and determining whether the update data matches successfully includes: Determine each business logic in the attribute information and each update logic in the update data; Determine whether there is a corresponding relationship between each of the business logics and each of the update logics; If there is a corresponding relationship between at least one business logic and the update logic, it is determined that the update data matches successfully.

8. A control device for access control equipment, characterized in that: include: OPC UA service initialization module, used to create and initialize OPC UA services in the access control system; A device level association relationship extraction module is used to obtain access control device information of the access control system and extract a device level association relationship corresponding to the access control system from the access control device information; A device node establishment module, used to establish each device node according to the device hierarchical association relationship; A connection establishment module, configured to establish a connection between the third-party system and the OPC UA service in response to a connection request initiated by the third-party system to the access control system; An update data acquisition module, used to acquire update data of the third-party system; A state control module is used to control the state of each of the device nodes according to the update data.

9. A control device for access control equipment, characterized in that: including memory and processor; The memory is used to store programs; The processor is used to execute the program to implement each step of the control method of the access control device as described in any one of claims 1 to 7.

10. A storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, each step of the method for controlling a door access control device as described in any one of claims 1 to 7 is implemented.

Images