RFID monitoring system, method and device, storage medium and electronic equipment

Abstract

The invention provides an RFID monitoring system, method and device, a storage medium and electronic equipment, and belongs to the technical field of radio frequency identification. The RFID monitoring system comprises a server, at least one monitoring device and at least one RFID tag, wherein the monitoring devices are in one-to-one correspondence with the RFID tags; the monitoring device is used for detecting a radio frequency signal around the corresponding RFID tag in real time, analyzing a reader-writer signal to obtain operation information when detecting that the radio frequency signal is the reader-writer signal, and sending the operation information to the server; and the server is used for identifying the operation information to obtain an identification result, and triggering a preset alarm mechanism when the identification result is abnormal. Therefore, unauthorized operations such as illegal reading or tampering of tag information can be prevented, and the reading security of the RFID tag is improved.

Description

Technical Field

[0001] The present invention relates to the field of radio frequency identification technology, and in particular to an RFID monitoring system, an RFID monitoring method, an RFID monitoring device, a machine-readable storage medium and an electronic device. Background Art

[0002] Radio Frequency Identification (RFID) technology is a contactless automatic identification technology that automatically identifies target objects and obtains relevant data through radio frequency signals. RFID technology is widely used in logistics, warehousing, supply chain management and other fields, and realizes automatic management of items through radio frequency signals. However, when these RFID systems are used in high-security places (such as military warehouses, power warehouses, etc.), there is a risk that unauthorized readers may illegally read or tamper with tag information.

[0003] To prevent unauthorized reading, some high-security sites take physical shielding measures, such as placing RFID tags in shielding boxes or using metal foil to encapsulate tags to prevent the entry of radio waves from external readers. However, although physical shielding methods are effective, shielding measures may affect normal reading and writing operations and reduce the flexibility and efficiency of the system.

[0004] Therefore, the existing RFID system cannot effectively prevent the illegal reading or tampering of tag information in some high-security places, and has low security. Summary of the invention

[0005] The purpose of the embodiments of the present invention is to provide an RFID monitoring system, an RFID monitoring method, an RFID monitoring device, a machine-readable storage medium and an electronic device. The RFID monitoring system can detect the surrounding reader / writer signals in real time by setting a monitoring device and immediately trigger a response, thereby effectively responding to unauthorized operations and improving the security of RFID tag reading.

[0006] In order to achieve the above-mentioned object, the first aspect of the present application provides an RFID monitoring system, comprising: a server, at least one monitoring device and at least one RFID tag, wherein the monitoring device corresponds to the RFID tag one by one;

[0007] The monitoring device is used to detect the radio frequency signal around the corresponding RFID tag in real time, and when the radio frequency signal is detected to be a reader / writer signal, the reader / writer signal is analyzed to obtain operation information, and the operation information is sent to the server;

[0008] The server is used to identify the operation information, obtain an identification result, and trigger a preset alarm mechanism when the identification result is abnormal.

[0009] In the embodiment of the present application, the monitoring device includes a radio frequency signal detection module, a protocol analysis module and a communication module;

[0010] The radio frequency signal detection module is used to detect the radio frequency signal around the corresponding RFID tag in real time, and when the radio frequency signal is detected to be a reader / writer signal, the reader / writer signal is sent to the protocol analysis module;

[0011] The protocol parsing module is used to parse the reader / writer signal based on a preset RFID protocol to obtain operation information;

[0012] The communication module is used to send the operation information to the server.

[0013] In an embodiment of the present application, the monitoring device further includes a data recording module, which is used to convert the operation information into operation data in a preset data format, and store the operation data according to a storage strategy of cyclic coverage.

[0014] In the embodiment of the present application, the protocol parsing module includes a signal capturing unit, a frame structure parsing unit and an operation instruction extracting unit;

[0015] The signal capture unit is used to convert the reader / writer signal into a digital signal to obtain a data stream to be parsed;

[0016] The frame structure parsing unit is used to parse the data stream to be parsed into frame structure data based on a preset RFID protocol;

[0017] The operation instruction extraction unit is used to extract operation information from the frame structure data.

[0018] In the embodiment of the present application, the server includes a preprocessing module and a behavior analysis module;

[0019] The preprocessing module is used to preprocess the operation information to obtain data to be analyzed;

[0020] The behavior analysis module is used to identify the data to be analyzed using a preset behavior anomaly identification model to obtain an identification result.

[0021] A second aspect of the present application provides an RFID monitoring method, which is applied to the above-mentioned RFID monitoring system. The RFID monitoring method includes:

[0022] The monitoring device detects the radio frequency signal around the corresponding RFID tag in real time, and when the radio frequency signal is detected to be a reader / writer signal, the reader / writer signal is analyzed to obtain operation information, and the operation information is sent to the server;

[0023] The server identifies the operation information to obtain an identification result, and triggers a preset alarm mechanism when the identification result is abnormal.

[0024] In the embodiment of the present application, the monitoring device detects the radio frequency signal around the corresponding RFID tag in real time, and when the radio frequency signal is detected to be a reader / writer signal, parses the reader / writer signal to obtain operation information, and sends the operation information to the server, including:

[0025] The monitoring device detects the radio frequency signal around the corresponding RFID tag in real time. When the radio frequency signal is detected to be a reader / writer signal, the reader / writer signal is parsed based on a preset RFID protocol to obtain operation information, and the operation information is sent to the server.

[0026] In the embodiment of the present application, the sending the operation information to the server includes:

[0027] Encrypting the operation information to obtain encrypted operation information;

[0028] The encrypted operation information is sent to the server.

[0029] In the embodiment of the present application, the reader / writer signal is parsed based on a preset RFID protocol to obtain operation information, including:

[0030] Convert the reader / writer signal into a digital signal to obtain a data stream to be parsed;

[0031] Based on a preset RFID protocol, the data stream to be parsed is parsed into frame structure data;

[0032] Operation information is extracted from the frame structure data.

[0033] In the embodiment of the present application, the server identifies the operation information to obtain an identification result, including:

[0034] The server pre-processes the operation information to obtain data to be analyzed;

[0035] The server uses a preset abnormal behavior recognition model to recognize the data to be analyzed to obtain a recognition result.

[0036] In the embodiment of the present application, it also includes:

[0037] The monitoring device converts the operation information into operation data in a preset data format, and stores the operation data according to a storage strategy of cyclic coverage.

[0038] In the embodiment of the present application, the server identifies the operation information to obtain an identification result, including:

[0039] The server pre-processes the operation information to obtain data to be analyzed;

[0040] The server uses a preset abnormal behavior recognition model to recognize the data to be analyzed to obtain a recognition result.

[0041] The third aspect of the present application provides an RFID monitoring device, which is applied to the above-mentioned RFID monitoring system, and the RFID monitoring device includes:

[0042] The parsing module enables the monitoring device to detect the radio frequency signal around the corresponding RFID tag in real time, and when the radio frequency signal is detected to be a reader / writer signal, the reader / writer signal is parsed to obtain operation information, and the operation information is sent to the server;

[0043] The identification module enables the server to identify the operation information, obtain an identification result, and trigger a preset alarm mechanism when the identification result is abnormal.

[0044] A fourth aspect of the present application provides an electronic device, the electronic device comprising:

[0045] at least one processor;

[0046] a memory connected to the at least one processor;

[0047] The memory stores instructions that can be executed by the at least one processor, and the at least one processor implements the above-mentioned RFID monitoring method by executing the instructions stored in the memory.

[0048] A fifth aspect of the present application provides a machine-readable storage medium, on which instructions are stored. When the instructions are executed by a processor, the processor is configured to execute the above-mentioned RFID monitoring method.

[0049] Through the above technical solution, by setting up a server and at least one monitoring device and at least one RFID tag, the monitoring device corresponds to the RFID tag one by one; the monitoring device is used to detect the radio frequency signal around the corresponding RFID tag in real time, and when the radio frequency signal is detected as a reader / writer signal, the reader / writer signal is parsed to obtain operation information, and the operation information is sent to the server; the server is used to identify the operation information, obtain the identification result, and trigger the preset alarm mechanism when the identification result is abnormal. The monitoring device can continuously monitor the surrounding radio frequency signals, and immediately trigger a response when the reader / writer operation is detected, parse the reader / writer signal, obtain the operation information, and send the operation information to the server, and then identify the operation information, and trigger the alarm mechanism when the abnormal operation is identified, thereby helping to prevent unauthorized operations, such as illegal reading or tampering of tag information, and improving the security of RFID tag reading. The monitoring device can detect the reader / writer signal around the RFID tag in real time and immediately trigger a response, so that it can effectively deal with unauthorized operations.

[0050] Other features and advantages of the embodiments of the present invention will be described in detail in the subsequent detailed description. BRIEF DESCRIPTION OF THE DRAWINGS

[0051] The accompanying drawings are used to provide a further understanding of the embodiments of the present invention and constitute a part of the specification. Together with the following specific implementations, they are used to explain the embodiments of the present invention, but do not constitute a limitation on the embodiments of the present invention. In the accompanying drawings:

[0052] Figure 1 A schematic diagram of the structure of an RFID monitoring system according to an embodiment of the present application is shown;

[0053] Figure 2 The internal structure of the monitoring device according to the embodiment of the present application is schematically shown;

[0054] Figure 3 A schematic diagram of a flow chart of an RFID monitoring method according to an embodiment of the present application is shown;

[0055] Figure 4 The following schematically shows a system workflow diagram according to an embodiment of the present application;

[0056] Figure 5 The structure diagram of an RFID monitoring device according to an embodiment of the present application is schematically shown;

[0057] Figure 6 The internal structure diagram of a computer device according to an embodiment of the present application is schematically shown.

[0058] Description of Reference Numerals

[0059] 410 - parsing module; 420 - identification module; A01 - processor; A02 - network interface; A03 - internal memory; A04 - display screen; A05 - input device; A06 - non-volatile storage medium; B01 - operating system; B02 - computer program. DETAILED DESCRIPTION

[0060] The specific implementation of the embodiment of the present invention is described in detail below in conjunction with the accompanying drawings. It should be understood that the specific implementation described here is only used to illustrate and explain the embodiment of the present invention, and is not used to limit the embodiment of the present invention.

[0061] Please see Figure 1 , Figure 1 The schematic diagram of the structure of an RFID monitoring system according to an embodiment of the present application is shown schematically. This embodiment provides an RFID monitoring system, including: a server, at least one monitoring device and at least one RFID tag, wherein the monitoring device corresponds to the RFID tag one by one;

[0062] The monitoring device is used to detect the radio frequency signal around the corresponding RFID tag in real time, and when the radio frequency signal is detected to be a reader / writer signal, the reader / writer signal is analyzed to obtain operation information, and the operation information is sent to the server;

[0063] The server is used to identify the operation information, obtain an identification result, and trigger a preset alarm mechanism when the identification result is abnormal.

[0064] In this embodiment, the monitoring device can be arranged near the RFID tag, and can monitor the operation of the RFID reader on the RFID tag in real time. A monitoring device can be arranged near each RFID tag, such as Figure 1As shown, the system includes multiple monitoring devices (A, B, C, etc.), which correspond to multiple RFID tags (A, B, C, etc.). The server can be a remote server or a local server. The monitoring device and the server can be connected by wire or by wireless communication. The monitoring device detects the radio frequency signals around the RFID tag in real time. When the RFID reader and the RFID tag communicate, the reader will send out radio frequency signals to exchange data with the tag, and the monitoring device will monitor these radio frequency signals in real time. If it is detected that the radio frequency signal is a signal sent by the reader, the reader signal is parsed to obtain operation information, and the operation information is sent to the server. The above operation information includes operation type, timestamp, reader ID, tag ID, etc., wherein the operation type includes read, write, delete, etc. The server is used to receive and analyze the operation information from the monitoring device for security monitoring. After receiving the operation information, the server can analyze the operation information through a preset security analysis algorithm to identify whether it is an abnormal operation. Once an abnormal operation is detected, such as an unauthorized reader attempting to access sensitive tag data, the server will immediately trigger an alarm mechanism. The alarm mechanism can include multi-level notifications (such as SMS, email, system prompts) and automatically lock potentially affected tags to prevent further illegal operations.

[0065] It should be noted that the radio frequency signal may be transmitted to the monitoring device through a high-sensitivity antenna. The received radio frequency signal may contain various noises and interferences, and the monitoring device may pre-process the signal through a filter and an amplifier to enhance the signal quality.

[0066] In the above implementation process, by setting up a server and at least one monitoring device and at least one RFID tag, the monitoring device corresponds to the RFID tag one by one; the monitoring device is used to detect the radio frequency signal around the corresponding RFID tag in real time, and when the radio frequency signal is detected as a reader / writer signal, the reader / writer signal is parsed to obtain operation information, and the operation information is sent to the server; the server is used to identify the operation information, obtain the identification result, and trigger the preset alarm mechanism when the identification result is abnormal. The monitoring device can continuously monitor the surrounding radio frequency signals, and immediately trigger a response when the reader / writer operation is detected, parse the reader / writer signal, obtain the operation information, and send the operation information to the server, and then identify the operation information, and trigger the alarm mechanism when the abnormal operation is identified, thereby helping to prevent unauthorized operations, such as illegal reading or tampering of tag information, and improving the security of RFID tag reading. The monitoring device can detect the surrounding reader / writer signals in real time and immediately trigger a response, so as to effectively deal with unauthorized operations.

[0067] Please see Figure 2 , Figure 2 The internal structure diagram of the monitoring device according to the embodiment of the present application is schematically shown. In some embodiments, the monitoring device includes a radio frequency signal detection module, a protocol analysis module and a communication module;

[0068] The radio frequency signal detection module is used to detect the radio frequency signal around the corresponding RFID tag in real time, and when the radio frequency signal is detected to be a reader / writer signal, the reader / writer signal is sent to the protocol analysis module;

[0069] The protocol parsing module is used to parse the reader / writer signal based on a preset RFID protocol to obtain operation information;

[0070] The communication module is used to send the operation information to the server.

[0071] In this embodiment, the radio frequency signal detection module detects the surrounding radio frequency signals in real time, and when the reader / writer signal is detected, the next operation is triggered; the protocol parsing module parses the detected reader / writer signal based on the preset RFID protocol, and identifies the reader / writer's operation instructions to the tag (such as reading tag information, writing new data, or deleting tag data). Specifically, the module can identify and parse a variety of RFID protocols, including but not limited to ISO 18000-6C (EPC Gen2), ISO 18000-6B, national standards (such as GB / T 29768) and military standards (such as GJB 7377), ISO14443, ISO 15693, EPC Gen2, etc., so as to identify the frame structure and content of various operation instructions. Then the communication module sends the operation information to the server, and the above-mentioned communication module can be a wireless communication module to wirelessly send the operation information to the server.

[0072] By setting up a radio frequency signal detection module, a protocol analysis module and a communication module in the monitoring device, it is possible to implement multiple common protocol analysis and operation identification, so that the monitoring device supports multiple radio frequency identification standards, can be compatible with different types of RFID systems, and has stronger adaptability. It can parse and identify multiple RFID protocols (such as ISO 18000-6C, ISO 18000-6B, national standards, military standards, etc.), providing more fine-grained monitoring and extensive protocol compatibility.

[0073] In order to ensure the security of data during transmission, the communication module can encrypt the operation information and send it to the server. The above encryption can be achieved by using existing encryption technology, which will not be described in detail here. The monitoring device uses the communication module to encrypt the operation information and upload it to the server, thereby ensuring the security of data during transmission, which helps to improve the reliability of RFID monitoring.

[0074] In some embodiments, the protocol parsing module includes a signal capturing unit, a frame structure parsing unit, and an operation instruction extracting unit;

[0075] The signal capture unit is used to convert the reader / writer signal into a digital signal to obtain a data stream to be parsed;

[0076] The frame structure parsing unit is used to parse the data stream to be parsed into frame structure data based on a preset RFID protocol;

[0077] The operation instruction extraction unit is used to extract operation information from the frame structure data.

[0078] In this embodiment, after the signal capture unit receives the reader / writer signal transmitted by the radio frequency signal detection module, it first converts the analog signal into a digital signal. The above conversion can be achieved by a high-precision analog-to-digital converter ADC to ensure the integrity of the signal details. The frame structure parsing unit parses the digital signal data stream to be parsed into a specific frame structure. The parser will extract important fields such as the start bit, data bit, and check bit from the data stream to be parsed according to the frame definition in different RFID protocols (such as ISO 18000-6C). In the frame structure, the specific location and encoding format of the operation instructions (such as read, write, and delete) are known. The operation instruction extraction unit will locate and extract these operation instructions based on the instruction encoding specification of the protocol. For different protocols, the system has a built-in corresponding parsing rule library, which can automatically adapt the parsing to obtain the operation information.

[0079] By converting the reader / writer signal into a digital signal, the data stream to be parsed is parsed into frame structure data, so as to extract the operation information quickly and accurately.

[0080] In some embodiments, the monitoring device further includes a data recording module, which is used to convert the operation information into operation data in a preset data format and store the operation data according to a storage strategy of cyclic coverage.

[0081] In this embodiment, the parsed operation information (operation type, timestamp, reader ID, tag ID, etc.) is first structured into a specific data format, such as JSON or binary format, to reduce storage space usage and improve data retrieval efficiency. NAND flash memory can be built in for data storage. To address the problem of limited storage space, the system adopts a cyclic overwrite storage strategy. Specifically, when the memory reaches the set capacity threshold, the new data will overwrite the earliest data entry. This strategy can be implemented through dual-interval cache management, one part is used to store current records, and the other part is used to store data that has not been uploaded, thereby ensuring data integrity.

[0082] Specifically, the data recording module records the parsed operation information, including the operation type (read, write, delete), timestamp, reader ID, tag ID, etc. This information is stored in the built-in memory of the monitoring device. Due to the limited space of the built-in memory, a circular overwriting storage strategy is adopted. When the memory is full, the new record will overwrite the earliest record to ensure that the latest operation information is always saved. The circular overwriting storage strategy is implemented as follows: suppose the capacity of the built-in memory is N records. Whenever new operation information is recorded, the system checks the index position of the current record. If the index position is equal to N (that is, the memory is full), the index position is reset to 0 and the old record is overwritten from the beginning. Otherwise, the record will be written to the current index position, and then the index position will be incremented.

[0083] By building a data recording module into the monitoring device, the information of each operation can be recorded in detail, including the operation type, timestamp, reader ID, tag ID, etc., and a circular overwrite storage strategy is adopted to cope with the problem of limited storage space and ensure reliable data storage.

[0084] In some embodiments, the server includes a pre-processing module and a behavior analysis module;

[0085] The preprocessing module is used to preprocess the operation information to obtain data to be analyzed;

[0086] The behavior analysis module is used to identify the data to be analyzed using a preset behavior anomaly identification model to obtain an identification result.

[0087] In this embodiment, the preprocessing stage performed by the preprocessing module includes data format conversion, redundant information elimination, and timestamp calibration. When the monitoring device encrypts the operation information and sends it to the server, the server first parses the received data packet, extracts the operation information after decryption, and then performs preprocessing. The server can use an abnormality recognition model based on machine learning to analyze the operation information. The abnormality recognition model learns the behavior patterns of normal operations through a training model, and detects abnormal operations that deviate from these patterns in the data to be analyzed.

[0088] The training process of the anomaly recognition model includes: first, collecting the operation data of the system when it is operating normally from the monitoring device. Assume that we collect the following parameters from the RFID system:

[0089] Temperature: [21.1, 21.5, 22.0, 21.8, ...];

[0090] Read frequency: [5.1,5.3,5.0,4.9,...];

[0091] Voltage: [3.3,3.3,3.4,3.3,...];

[0092] Then, perform data format conversion to convert the raw data into a format that can be used by the model. For example, combine the data points of each minute into an input sequence, normalize the data, and scale each eigenvalue to between [0,1] to improve the training effect of the model. Use the TensorFlow / Keras library in Python to build a simple LSTM model. Input the normal operation data that has been preprocessed previously into the model for training. In actual monitoring, input new data into the trained model and let the model make predictions. The model outputs a value between [0,1], indicating the probability that the current time series belongs to a normal state. Assume that an output value less than 0.5 indicates an abnormality, and greater than or equal to 0.5 indicates normality. As time goes by, the model can be continuously updated and optimized with new normal operation data to improve its ability to identify abnormal situations.

[0093] The server pre-processes the operation information by setting up a pre-processing module and a behavior analysis module, and then uses a preset behavior anomaly recognition model to identify abnormal operations, so that the uploaded data can be quickly and accurately analyzed for security and abnormal operations can be identified.

[0094] Please see Figure 3 , Figure 3 The flowchart of an RFID monitoring method according to an embodiment of the present application is schematically shown. This embodiment provides an RFID monitoring method, which is applied to the above-mentioned RFID monitoring system, and the RFID monitoring method includes:

[0095] Step 210: The monitoring device detects the radio frequency signal around the corresponding RFID tag in real time, and when the radio frequency signal is detected to be a reader / writer signal, the reader / writer signal is parsed to obtain operation information, and the operation information is sent to the server;

[0096] In this embodiment, the monitoring device detects the radio frequency signals around the RFID tag in real time. When the RFID reader and the RFID tag communicate, the reader will send out radio frequency signals to exchange data with the tag, and the monitoring device will monitor these radio frequency signals in real time. If the radio frequency signal is detected to be a signal sent by the reader, the reader signal is parsed to obtain operation information, and the operation information is sent to the server. The above operation information includes operation type, timestamp, reader ID, tag ID, etc., where the operation type includes read, write, delete, etc.

[0097] In some embodiments, the monitoring device detects the radio frequency signal around the corresponding RFID tag in real time, and when the radio frequency signal is detected to be a reader / writer signal, the reader / writer signal is parsed to obtain operation information, and the operation information is sent to the server, including: the monitoring device detects the radio frequency signal around the corresponding RFID tag in real time, and when the radio frequency signal is detected to be a reader / writer signal, the reader / writer signal is parsed based on a preset RFID protocol to obtain operation information, and the operation information is sent to the server.

[0098] In this embodiment, the surrounding radio frequency signals are detected in real time, and when the reader / writer signal is detected, the next operation is triggered; the detected reader / writer signal is parsed based on the preset RFID protocol to identify the reader / writer's operation instructions to the tag (such as reading tag information, writing new data or deleting tag data). Specifically, the module can identify and parse a variety of RFID protocols, including but not limited to ISO 18000-6C (EPC Gen2), ISO 18000-6B, national standards (such as GB / T 29768) and military standards (such as GJB 7377), ISO14443, ISO 15693, EPC Gen2, etc., so that the frame structure and content of various operation instructions can be identified. Then the operation information is sent to the server, and the above-mentioned communication module can be a wireless communication module to wirelessly send the operation information to the server.

[0099] The monitoring device can realize multiple common protocol parsing and operation identification, so that the monitoring device supports multiple radio frequency identification standards, can be compatible with different types of RFID systems, and has stronger adaptability. It can parse and identify multiple RFID protocols (such as ISO18000-6C, ISO 18000-6B, national standards, military standards, etc.), providing more fine-grained monitoring and extensive protocol compatibility.

[0100] In some embodiments, sending the operation information to the server includes:

[0101] First, encrypt the operation information to obtain encrypted operation information;

[0102] Then, the encrypted operation information is sent to the server.

[0103] In this embodiment, in order to ensure the security of data during transmission, the communication module can encrypt the operation information and send it to the server. The above encryption can be achieved by using existing encryption technology, which will not be described in detail here. The monitoring device uses the communication module to encrypt the operation information and upload it to the server, thereby ensuring the security of data during transmission, which helps to improve the reliability of RFID monitoring.

[0104] In some embodiments, the parsing of the reader / writer signal based on a preset RFID protocol to obtain operation information includes:

[0105] The first step is to convert the reader / writer signal into a digital signal to obtain a data stream to be parsed;

[0106] In this embodiment, after receiving the reader / writer signal transmitted by the radio frequency signal detection module, the analog signal is first converted into a digital signal. The above conversion can be achieved by a high-precision analog-to-digital converter ADC to ensure the detail integrity of the signal.

[0107] The second step is to parse the data stream to be parsed into frame structure data based on a preset RFID protocol;

[0108] In this embodiment, the digital signal data stream to be parsed is parsed into a specific frame structure. The parser extracts important fields such as the start bit, data bit, check bit, etc. from the data stream to be parsed according to the frame definition in different RFID protocols (such as ISO 18000-6C).

[0109] The third step is to extract the operation information from the frame structure data.

[0110] In this embodiment, in the frame structure, the specific location and encoding format of the operation instructions (such as read, write, and delete) are known. The operation instruction extraction unit will locate and extract these operation instructions based on the instruction encoding specifications of the protocol. For different protocols, the system has a built-in corresponding parsing rule library that can automatically adapt the parsing to obtain the operation information.

[0111] Step 220: The server identifies the operation information and obtains an RFID monitoring result.

[0112] In this embodiment, the server is used to receive and analyze the operation information from the monitoring device for security monitoring. After receiving the operation information, the server can analyze the operation information through a preset security analysis algorithm to identify whether it is an abnormal operation. Once an abnormal operation is detected, such as an unauthorized reader / writer attempting to access sensitive tag data, the server will immediately trigger an alarm mechanism. The alarm mechanism can include multi-level notifications (such as SMS, email, system prompts), and automatically lock tags that may be affected, thereby preventing further illegal operations.

[0113] In some embodiments, the server identifies the operation information to obtain an identification result, including:

[0114] First, the server pre-processes the operation information to obtain data to be analyzed;

[0115] Then, the server uses a preset abnormal behavior recognition model to recognize the data to be analyzed to obtain a recognition result.

[0116] In this embodiment, the above-mentioned preprocessing stage includes data format conversion, redundant information elimination and timestamp calibration, etc. When the monitoring device encrypts the operation information and sends it to the server, the server first parses the received data packet, extracts the operation information after decryption, and then performs preprocessing. The server can use an abnormal recognition model based on machine learning to analyze the operation information. The abnormal recognition model learns the behavior patterns of normal operations through a training model, and detects abnormal operations that deviate from these patterns in the data to be analyzed. In this way, the uploaded data can be quickly and accurately analyzed for security and abnormal operations can be identified.

[0117] In the above implementation process, the monitoring device detects the radio frequency signal around the corresponding RFID tag in real time. When the radio frequency signal is detected to be a reader / writer signal, the reader / writer signal is parsed to obtain operation information, and the operation information is sent to the server; the server identifies the operation information to obtain an identification result, and triggers a preset alarm mechanism when the identification result is abnormal. The monitoring device can continuously monitor the surrounding radio frequency signals, and immediately trigger a response when the reader / writer operation is detected, parse the reader / writer signal, obtain operation information, and send the operation information to the server, and then identify the operation information. When an abnormal operation is identified, an alarm mechanism is triggered, which helps prevent unauthorized operations, such as illegal reading or tampering of tag information, and improves the security of RFID tag reading. The monitoring device can detect the surrounding reader / writer signals in real time and immediately trigger a response, so that it can effectively deal with unauthorized operations.

[0118] In some embodiments, the method further includes: the monitoring device converting the operation information into operation data in a preset data format, and storing the operation data according to a cyclic overwriting storage strategy.

[0119] In this embodiment, the parsed operation information (operation type, timestamp, reader ID, tag ID, etc.) is first structured into a specific data format, such as JSON or binary format, to reduce storage space usage and improve data retrieval efficiency. NAND flash memory can be built in for data storage. To address the problem of limited storage space, the system adopts a cyclic overwrite storage strategy. Specifically, when the memory reaches the set capacity threshold, the new data will overwrite the earliest data entry. This strategy can be implemented through dual-interval cache management, one part is used to store current records, and the other part is used to store data that has not been uploaded, thereby ensuring data integrity.

[0120] Specifically, the monitoring device records the parsed operation information, including the operation type (read, write, delete), timestamp, reader ID, tag ID, etc. This information is stored in the built-in memory of the monitoring device. Due to the limited space of the built-in memory, a circular overwriting storage strategy is adopted. When the memory is full, the new record will overwrite the earliest record to ensure that the latest operation information is always saved. The circular overwriting storage strategy is implemented as follows: suppose the capacity of the built-in memory is N records. Whenever new operation information is recorded, the system checks the index position of the current record. If the index position is equal to N (that is, the memory is full), the index position is reset to 0 and the old record is overwritten from the beginning. Otherwise, the record will be written to the current index position, and then the index position will be incremented.

[0121] By converting the operation information into operation data in a preset data format and storing the operation data according to a circular overwriting storage strategy, the information of each operation can be recorded in detail, including the operation type, timestamp, reader ID, tag ID, etc., and a circular overwriting storage strategy is adopted to cope with the problem of limited storage space and ensure reliable data storage.

[0122] The following is a specific example to illustrate the solution. Figure 4 , Figure 4 The following schematically shows the system workflow diagram according to an embodiment of the present application. The specific workflow includes:

[0123] (1) When the monitoring device detects the RFID reader signal, the next step is triggered.

[0124] (2) The protocol analysis module analyzes the reader information and identifies the reader's operation instructions to the tag (such as reading tag information, writing new data, or deleting tag data).

[0125] (3) The data recording module records the parsed operation information, including the operation type (read, write, delete), timestamp, reader ID, tag ID, etc.

[0126] (4) Data upload: The wireless communication module uploads the data to the remote server.

[0127] (5) After receiving the data, the remote server performs security analysis and alarm on the operation information through security analysis algorithm.

[0128] Please see Figure 5 , Figure 5 The schematic diagram of the structure of an RFID monitoring device according to an embodiment of the present application is shown schematically. This embodiment provides an RFID monitoring device, which is applied to the above-mentioned RFID monitoring system, and the RFID monitoring device includes a parsing module 410 and an identification module 420, wherein:

[0129] The parsing module 410 enables the monitoring device to detect the radio frequency signal around the corresponding RFID tag in real time, and when the radio frequency signal is detected to be a reader / writer signal, the reader / writer signal is parsed to obtain operation information, and the operation information is sent to the server;

[0130] The identification module 420 enables the server to identify the operation information, obtain an identification result, and trigger a preset alarm mechanism when the identification result is abnormal.

[0131] The RFID monitoring device includes a processor and a memory. The above-mentioned analysis module 410 and identification module 420 are stored in the memory as program units, and the processor executes the above-mentioned program units stored in the memory to realize corresponding functions.

[0132] The processor includes a kernel, which retrieves the corresponding program unit from the memory. One or more kernels can be set, and unauthorized operations can be prevented by adjusting kernel parameters, thereby improving the security of RFID tag reading.

[0133] The memory may include non-permanent memory in a computer-readable medium, random access memory (RAM) and / or non-volatile memory, such as read-only memory (ROM) or flash RAM, and the memory includes at least one memory chip.

[0134] The embodiment of the present invention provides a machine-readable storage medium, on which a program is stored. When the program is executed by a processor, the RFID monitoring method is implemented.

[0135] An embodiment of the present invention provides a processor, which is used to run a program, wherein the RFID monitoring method is executed when the program is run.

[0136] In one embodiment, a computer device is provided. The computer device may be a terminal, and its internal structure diagram may be as follows: Figure 6As shown. The computer device includes a processor A01, a network interface A02, a display screen A04, an input device A05 and a memory (not shown in the figure) connected through a system bus. Among them, the processor A01 of the computer device is used to provide computing and control capabilities. The memory of the computer device includes an internal memory A03 and a non-volatile storage medium A06. The non-volatile storage medium A06 stores an operating system B01 and a computer program B02. The internal memory A03 provides an environment for the operation of the operating system B01 and the computer program B02 in the non-volatile storage medium A06. The network interface A02 of the computer device is used to communicate with an external terminal through a network connection. When the computer program is executed by the processor A01, an RFID monitoring method is implemented. The display screen A04 of the computer device can be a liquid crystal display or an electronic ink display, and the input device A05 of the computer device can be a touch layer covered on the display screen, or a button, trackball or touchpad set on the computer device housing, or an external keyboard, touchpad or mouse, etc.

[0137] Those skilled in the art will understand that Figure 6 The structure shown in the figure is only a block diagram of a part of the structure related to the solution of the present application, and does not constitute a limitation on the computer device to which the solution of the present application is applied. The specific computer device may include more or fewer components than those shown in the figure, or combine certain components, or have a different arrangement of components.

[0138] In one embodiment, the RFID monitoring device provided by the present application can be implemented in the form of a computer program. The computer program can be Figure 6 The computer device shown in the figure is run on the computer device. The memory of the computer device can store various program modules that constitute the RFID monitoring device, such as: Figure 5 The parsing module 410 and the identification module 420 are shown. The computer program composed of various program modules enables the processor to execute the steps of the calling method of the file system of each embodiment of the present application described in this specification.

[0139] Figure 6 The computer device shown can be Figure 5 The parsing module 410 in the RFID monitoring device shown executes step 210 , and the identifying module 420 executes step 220 .

[0140] The embodiment of the present application provides a device, which includes a processor, a memory, and a program stored in the memory and executable on the processor, and is applied to the above-mentioned RFID monitoring system. When the processor executes the program, the following steps are implemented:

[0141] The monitoring device detects the radio frequency signal around the corresponding RFID tag in real time, and when the radio frequency signal is detected to be a reader / writer signal, the reader / writer signal is analyzed to obtain operation information, and the operation information is sent to the server;

[0142] The server identifies the operation information to obtain an identification result, and triggers a preset alarm mechanism when the identification result is abnormal.

[0143] In one embodiment, the monitoring device detects the radio frequency signal around the corresponding RFID tag in real time, and when the radio frequency signal is detected to be a reader / writer signal, parses the reader / writer signal to obtain operation information, and sends the operation information to the server, including:

[0144] The monitoring device detects the radio frequency signal around the corresponding RFID tag in real time. When the radio frequency signal is detected to be a reader / writer signal, the reader / writer signal is parsed based on a preset RFID protocol to obtain operation information, and the operation information is sent to the server.

[0145] In one embodiment, sending the operation information to the server includes:

[0146] Encrypting the operation information to obtain encrypted operation information;

[0147] The encrypted operation information is sent to the server.

[0148] In one embodiment, the parsing of the reader / writer signal based on a preset RFID protocol to obtain operation information includes:

[0149] Convert the reader / writer signal into a digital signal to obtain a data stream to be parsed;

[0150] Based on a preset RFID protocol, the data stream to be parsed is parsed into frame structure data;

[0151] Operation information is extracted from the frame structure data.

[0152] In one embodiment, the server identifies the operation information to obtain an identification result, including:

[0153] The server pre-processes the operation information to obtain data to be analyzed;

[0154] The server uses a preset abnormal behavior recognition model to recognize the data to be analyzed to obtain a recognition result.

[0155] In one embodiment, it further includes:

[0156] The monitoring device converts the operation information into operation data in a preset data format, and stores the operation data according to a storage strategy of cyclic coverage.

[0157] In one embodiment, the server identifies the operation information to obtain an identification result, including:

[0158] The server pre-processes the operation information to obtain data to be analyzed;

[0159] The server uses a preset abnormal behavior recognition model to recognize the data to be analyzed to obtain a recognition result.

[0160] Those skilled in the art will appreciate that the embodiments of the present application may be provided as methods, systems, or computer program products. Therefore, the present application may adopt the form of a complete hardware embodiment, a complete software embodiment, or an embodiment in combination with software and hardware. Moreover, the present application may adopt the form of a computer program product implemented in one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) that include computer-usable program code.

[0161] The present application is described with reference to the flowcharts and / or block diagrams of the methods, devices (systems), and computer program products according to the embodiments of the present application. It should be understood that each process and / or box in the flowchart and / or block diagram, as well as the combination of the processes and / or boxes in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing device to generate a machine, so that the instructions executed by the processor of the computer or other programmable data processing device generate instructions for implementing the processes in the flowchart and / or block diagram. Figure 1 A process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0162] These computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing device to operate in a specific manner, so that the instructions stored in the computer-readable memory produce an article of manufacture comprising an instruction device, which implements the process Figure 1 A process or multiple processes and / or boxes Figure 1 A function specified in one or more boxes.

[0163] These computer program instructions can also be loaded onto a computer or other programmable data processing device so that a series of operating steps are executed on the computer or other programmable device to produce a computer-implemented process, thereby providing instructions for implementing the process. Figure 1 A process or multiple processes and / or boxes Figure 1 The steps for the functions specified in one or more boxes.

[0164] In a typical configuration, a computing device includes one or more processors (CPU), input / output interfaces, network interfaces, and memory.

[0165] The memory may include non-permanent memory in a computer-readable medium, random access memory (RAM) and / or non-volatile memory in the form of read-only memory (ROM) or flash RAM. The memory is an example of a computer-readable medium.

[0166] Computer readable media include permanent and non-permanent, removable and non-removable media that can be implemented by any method or technology to store information. Information can be computer readable instructions, data structures, program modules or other data. Examples of computer storage media include, but are not limited to, phase change memory (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), other types of random access memory (RAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), flash memory or other memory technology, compact disk read-only memory (CD-ROM), digital versatile disk (DVD) or other optical storage, magnetic cassettes, magnetic tape disk storage or other magnetic storage devices or any other non-transmission media that can be used to store information that can be accessed by a computing device. As defined herein, computer readable media does not include temporary computer readable media (transitory media), such as modulated data signals and carrier waves.

[0167] It should also be noted that the terms "include", "comprises" or any other variations thereof are intended to cover non-exclusive inclusion, so that a process, method, commodity or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, commodity or device. In the absence of more restrictions, the elements defined by the sentence "comprises a ..." do not exclude the existence of other identical elements in the process, method, commodity or device including the elements.

[0168] The above are only embodiments of the present application and are not intended to limit the present application. For those skilled in the art, the present application may have various changes and variations. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present application should be included within the scope of the claims of the present application.

Claims

1. An RFID monitoring system, characterized in that: include: A server, at least one monitoring device and at least one RFID tag, wherein the monitoring device corresponds to the RFID tag one by one; The monitoring device is used to detect the radio frequency signal around the corresponding RFID tag in real time, and when the radio frequency signal is detected to be a reader / writer signal, the reader / writer signal is analyzed to obtain operation information, and the operation information is sent to the server; The server is used to identify the operation information, obtain an identification result, and trigger a preset alarm mechanism when the identification result is abnormal.

2. The RFID monitoring system according to claim 1, characterized in that: The monitoring device includes a radio frequency signal detection module, a protocol analysis module and a communication module; The radio frequency signal detection module is used to detect the radio frequency signal around the corresponding RFID tag in real time, and when the radio frequency signal is detected to be a reader / writer signal, the reader / writer signal is sent to the protocol analysis module; The protocol parsing module is used to parse the reader / writer signal based on a preset RFID protocol to obtain operation information; The communication module is used to send the operation information to the server.

3. The RFID monitoring system according to claim 2, characterized in that: The monitoring device further comprises a data recording module, wherein the data recording module is used to convert the operation information into operation data in a preset data format, and store the operation data according to a storage strategy of cyclic coverage.

4. The RFID monitoring system according to claim 2, characterized in that: The protocol analysis module includes a signal capture unit, a frame structure analysis unit and an operation instruction extraction unit; The signal capture unit is used to convert the reader / writer signal into a digital signal to obtain a data stream to be parsed; The frame structure parsing unit is used to parse the data stream to be parsed into frame structure data based on a preset RFID protocol; The operation instruction extraction unit is used to extract operation information from the frame structure data.

5. The RFID monitoring system according to claim 1, characterized in that: The server includes a preprocessing module and a behavior analysis module; The preprocessing module is used to preprocess the operation information to obtain data to be analyzed; The behavior analysis module is used to identify the data to be analyzed using a preset behavior anomaly identification model to obtain an identification result.

6. An RFID monitoring method, characterized in that: The RFID monitoring system applied to any one of claims 1 to 5, wherein the RFID monitoring method comprises: The monitoring device detects the radio frequency signal around the corresponding RFID tag in real time, and when the radio frequency signal is detected to be a reader / writer signal, the reader / writer signal is analyzed to obtain operation information, and the operation information is sent to the server; The server identifies the operation information to obtain an identification result, and triggers a preset alarm mechanism when the identification result is abnormal.

7. The RFID monitoring method according to claim 6, characterized in that: The monitoring device detects the radio frequency signal around the corresponding RFID tag in real time, and when the radio frequency signal is detected to be a reader / writer signal, parses the reader / writer signal to obtain operation information, and sends the operation information to the server, including: The monitoring device detects the radio frequency signal around the corresponding RFID tag in real time. When the radio frequency signal is detected to be a reader / writer signal, the reader / writer signal is parsed based on a preset RFID protocol to obtain operation information, and the operation information is sent to the server.

8. The RFID monitoring method according to claim 6, characterized in that: The sending the operation information to the server includes: Encrypting the operation information to obtain encrypted operation information; The encrypted operation information is sent to the server.

9. The RFID monitoring method according to claim 7, characterized in that: The reader / writer signal is parsed based on a preset RFID protocol to obtain operation information, including: Convert the reader / writer signal into a digital signal to obtain a data stream to be parsed; Based on a preset RFID protocol, the data stream to be parsed is parsed into frame structure data; Operation information is extracted from the frame structure data.

10. The RFID monitoring method according to claim 6, characterized in that: The server identifies the operation information to obtain an identification result, including: The server pre-processes the operation information to obtain data to be analyzed; The server uses a preset abnormal behavior recognition model to recognize the data to be analyzed to obtain a recognition result.

11. The RFID monitoring method according to claim 6, characterized in that: Also includes: The monitoring device converts the operation information into operation data in a preset data format, and stores the operation data according to a storage strategy of cyclic coverage.

12. The RFID monitoring method according to claim 6, characterized in that: The server identifies the operation information to obtain an identification result, including: The server pre-processes the operation information to obtain data to be analyzed; The server uses a preset abnormal behavior recognition model to recognize the data to be analyzed to obtain a recognition result.

13. An RFID monitoring device, characterized in that: The RFID monitoring system applied to any one of claims 1 to 5, wherein the RFID monitoring device comprises: The parsing module enables the monitoring device to detect the radio frequency signal around the corresponding RFID tag in real time, and when the radio frequency signal is detected to be a reader / writer signal, the reader / writer signal is parsed to obtain operation information, and the operation information is sent to the server; The identification module enables the server to identify the operation information, obtain an identification result, and trigger a preset alarm mechanism when the identification result is abnormal.

14. An electronic device, characterized in that: The electronic device includes: at least one processor; a memory connected to the at least one processor; The memory stores instructions that can be executed by the at least one processor, and the at least one processor implements the RFID monitoring method according to any one of claims 6 to 12 by executing the instructions stored in the memory.

15. A machine-readable storage medium having instructions stored thereon, characterized in that: When the instruction is executed by a processor, the processor is configured to perform the RFID monitoring method according to any one of claims 6 to 12.

Images