Fingerprint radio frequency card attendance method, device, storage medium and computer equipment

Abstract

The fingerprint radio frequency card attendance method, device, storage medium and computer equipment provided by the present application, when detecting that the user has brought the fingerprint radio frequency card close to the attendance machine, power is supplied through the RFID antenna so that the attendance machine performs certificate verification on the radio frequency card, so that after the verification is passed, the fingerprint sensor of the radio frequency card collects the user's current fingerprint data, and compares it with the template fingerprint data pre-stored in the radio frequency card to obtain a comparison result, so that the radio frequency card is used as an identity index and cannot be misused after it is lost, and then the card identification of the radio frequency card is obtained, and it and the comparison result are encrypted into an encrypted signal and then transmitted to the attendance machine, so that the user's privacy data does not need to be transmitted to an external device, so that the attendance machine decrypts the encrypted signal into a comparison result and a card identification after receiving it, and then records the user's attendance information according to the card identification when the comparison result is passed, so that unauthorized cards cannot pass the verification, and the information in the card is prevented from being maliciously stolen after the radio frequency card is lost.

Description

Technical Field

[0001] The present application relates to the field of computer technology, and in particular to a fingerprint radio frequency card attendance method, device, storage medium and computer equipment. Background Art

[0002] In today's era of rapid development of information technology, corporate attendance management is gradually moving towards intelligence and security. In order to meet the convenience and accuracy of identity verification and fully protect the privacy of employees' biometric data, passive radio frequency card attendance system came into being and has been widely used in many fields such as enterprises, campuses, medical care, and finance.

[0003] In the enterprise attendance management, passive radio frequency cards, as a new type of identity verification tool, provide employees with a safer and more efficient attendance method. Compared with traditional attendance cards, radio frequency cards have higher anti-counterfeiting performance and can ensure the authenticity and non-tamperability of attendance data. However, since radio frequency cards are not tightly bound to users, once radio frequency cards are lost or stolen, the information in the card may be maliciously read, causing economic losses to the card owner. Summary of the invention

[0004] The purpose of the present application is to solve at least one of the above-mentioned technical defects, especially the technical defect in the prior art that once the radio frequency card is lost or stolen, the information in the card may be maliciously read, thereby causing economic losses to the card owner.

[0005] The present application provides a fingerprint radio frequency card attendance method, the method comprising:

[0006] When it is detected that the user brings the fingerprint radio frequency card close to the attendance machine, the fingerprint radio frequency card is powered by the RFID antenna, so that the attendance machine verifies the certificate of the fingerprint radio frequency card and activates the fingerprint sensor built into the fingerprint radio frequency card after the verification is passed;

[0007] Collecting the current fingerprint data of the user through the fingerprint sensor, and comparing the current fingerprint data with the template fingerprint data pre-stored in the fingerprint radio frequency card to obtain a comparison result;

[0008] Obtaining the card identification of the fingerprint radio frequency card, and encrypting the card identification and the comparison result using an encryption algorithm to generate an encrypted signal, so as to transmit the encrypted signal to the attendance machine;

[0009] The encrypted signal is decrypted in the attendance machine to obtain a comparison result and a card identification, and when the comparison result is passed, the attendance information of the user is recorded according to the card identification.

[0010] Optionally, the verifying the certificate of the fingerprint radio frequency card by the attendance machine includes:

[0011] A session key is generated between the attendance machine and the fingerprint radio frequency card using a key exchange protocol, so that the fingerprint radio frequency card sends the stored digital certificate to the attendance machine based on the session key;

[0012] The digital certificate is whitelist verified by the attendance machine to determine whether the attendance machine authorizes the fingerprint radio frequency card.

[0013] Optionally, the process of the attendance machine authorizing the fingerprint radio frequency card includes:

[0014] Start the authorization mode of the attendance machine and activate the fingerprint radio frequency card through the RFID antenna power supply;

[0015] The fingerprint data of the user is collected by a fingerprint sensor built into the fingerprint radio frequency card and then processed into template fingerprint data, and the template fingerprint data is stored in the chip security module of the fingerprint radio frequency card;

[0016] A key exchange protocol is used to negotiate a key between the attendance machine and the fingerprint radio frequency card, and the card is registered according to the negotiation result to generate a digital certificate;

[0017] The digital certificate is stored in the fingerprint radio frequency card, and the digital certificate and the card identification of the fingerprint radio frequency card are bound, and the binding information is added to the white list of the attendance machine.

[0018] Optionally, the comparing the current fingerprint data with the template fingerprint data pre-stored in the fingerprint radio frequency card to obtain a comparison result includes:

[0019] Determine whether the current fingerprint data is consistent with the template fingerprint data pre-stored in the fingerprint radio frequency card;

[0020] If yes, confirm that the comparison result is passed;

[0021] If not, the comparison result is confirmed as failed.

[0022] Optionally, the adopting an encryption algorithm to encrypt the card identification and the comparison result to generate an encrypted signal includes:

[0023] Generate a target key using a key agreement algorithm, and convert the card identification and the comparison result into standardized data;

[0024] Using the AES-256-GCM algorithm to perform encryption calculation on the target key and the standardized data to obtain encrypted data and an authentication tag, and generating an encrypted signal according to the encrypted data and the authentication tag;

[0025] The authentication tag is used to perform security verification on the encrypted data during the process of decrypting the encrypted signal.

[0026] Optionally, when the comparison result is passed, recording the attendance information of the user according to the card identifier includes:

[0027] When the comparison result is passed, the user information corresponding to the card identification is identified in the attendance machine, and the current time is obtained as the attendance time of the user, and the user information and the attendance time are recorded to form the attendance information of the user.

[0028] Optionally, the method further comprises:

[0029] When the attendance machine fails to verify the certificate of the fingerprint radio frequency card, the fingerprint radio frequency card is activated without power supply to perform the user fingerprint collection, verification and comparison operation.

[0030] The present application also provides a fingerprint radio frequency card attendance device, comprising:

[0031] The card activation module is used to power the fingerprint radio frequency card through the RFID antenna when it is detected that the user brings the fingerprint radio frequency card close to the attendance machine, so that the attendance machine verifies the certificate of the fingerprint radio frequency card and activates the fingerprint sensor built into the fingerprint radio frequency card after the verification is passed;

[0032] A fingerprint comparison module, used to collect the current fingerprint data of the user through the fingerprint sensor, and compare the current fingerprint data with the template fingerprint data pre-stored in the fingerprint radio frequency card to obtain a comparison result;

[0033] A data transmission module, used for obtaining the card identification of the fingerprint radio frequency card, and encrypting the card identification and the comparison result by using an encryption algorithm to generate an encrypted signal, so as to transmit the encrypted signal to the attendance machine;

[0034] The attendance recording module is used to decrypt the encrypted signal in the attendance machine to obtain a comparison result and a card identification, and to record the user's attendance information according to the card identification when the comparison result is passed.

[0035] The present application also provides a storage medium, in which computer-readable instructions are stored. When the computer-readable instructions are executed by one or more processors, the one or more processors execute the steps of the fingerprint radio frequency card attendance method as described in any one of the above embodiments.

[0036] The present application also provides a computer device, comprising: one or more processors, and a memory;

[0037] The memory stores computer-readable instructions, and when the computer-readable instructions are executed by the one or more processors, the steps of the fingerprint radio frequency card attendance method as described in any one of the above embodiments are executed.

[0038] It can be seen from the above technical solutions that the embodiments of the present application have the following advantages:

[0039] The fingerprint radio frequency card attendance method, device, storage medium and computer equipment provided by the present application can, when detecting that a user has brought the fingerprint radio frequency card close to the attendance machine, power the fingerprint radio frequency card through the RFID antenna to verify the certificate of the fingerprint radio frequency card, and activate the fingerprint sensor built into the fingerprint radio frequency card when the verification is passed, thereby supporting offline use of the card, and then the user's current fingerprint data can be collected through the fingerprint sensor built into the fingerprint radio frequency card, and the current fingerprint data can be compared with the template fingerprint data pre-stored in the fingerprint radio frequency card to obtain a comparison result. Therefore, the radio frequency card is used as an identity index and cannot be used fraudulently after it is lost, thereby improving security. Then, the card identification of the fingerprint radio frequency card can be obtained, and the card identification and the comparison result can be encrypted by an encryption algorithm to generate an encrypted signal to transmit the encrypted signal to the attendance machine. In this way, the user's privacy data does not need to be transmitted to an external device, further ensuring the privacy and security of the user. Finally, after receiving the encrypted signal, the attendance machine can decrypt the encrypted signal to obtain the comparison result and the card identification, and then record the user's attendance information according to the card identification when the comparison result is passed, thereby achieving legal attendance punching operations while increasing the difficulty of card copying, making it impossible for unauthorized cards to pass verification, and avoiding malicious theft and misuse of card information after the radio frequency card is lost. BRIEF DESCRIPTION OF THE DRAWINGS

[0040] In order to more clearly illustrate the embodiments of the present application or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative labor.

[0041] Figure 1A schematic diagram of a fingerprint radio frequency card attendance method provided in an embodiment of the present application;

[0042] Figure 2 A schematic diagram of the fingerprint radio frequency card authorization process provided by an embodiment of the present application is a fingerprint radio frequency card;

[0043] Figure 3 A schematic diagram of the structure of a fingerprint radio frequency card attendance device provided in an embodiment of the present application;

[0044] Figure 4 A schematic diagram of the internal structure of a computer device provided in an embodiment of the present application. DETAILED DESCRIPTION

[0045] The following will be combined with the drawings in the embodiments of the present application to clearly and completely describe the technical solutions in the embodiments of the present application. Obviously, the described embodiments are only part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of this application.

[0046] In the enterprise attendance management, passive radio frequency cards, as a new type of identity verification tool, provide employees with a safer and more efficient attendance method. Compared with traditional attendance cards, radio frequency cards have higher anti-counterfeiting performance and can ensure the authenticity and non-tamperability of attendance data. However, since radio frequency cards are not tightly bound to users, once radio frequency cards are lost or stolen, the information in the card may be maliciously read, causing economic losses to the card owner.

[0047] In one embodiment, Figure 1 As shown, Figure 1 A schematic diagram of a fingerprint radio frequency card attendance method provided in an embodiment of the present application; the present application provides a fingerprint radio frequency card attendance method, which specifically includes the following:

[0048] S110: When it is detected that the user brings the fingerprint radio frequency card close to the attendance machine, the fingerprint radio frequency card is powered by the RFID antenna, so that the attendance machine verifies the certificate of the fingerprint radio frequency card and activates the fingerprint sensor built into the fingerprint radio frequency card after the verification is passed.

[0049] In this step, when the user uses a wireless fingerprint RFID card to approach the attendance machine for attendance, the computer device can detect the fingerprint RFID card through the card reading area of ​​the attendance machine, and then electromagnetically inductively power the fingerprint RFID card through the RFID antenna, so that the fingerprint RFID card can be verified for certificate, and the fingerprint RFID card can be activated when the verification is passed, thereby supporting offline use of the card.

[0050] Among them, the fingerprint radio frequency card of this application stores a digital certificate, which is used for the attendance machine to authenticate the fingerprint radio frequency card. The digital certificate here refers to a tool for ensuring information security and identity authentication. It ensures the security of communication, the integrity of data and the legitimacy of identity by verifying the identity of the holder, encrypting communication, signing data, etc. It is usually issued by a trusted certificate authority (CA) and is mainly used to verify identity and provide public key information. It follows some standards, such as X.509, to ensure the identity of both parties in communication and ensure the security of communication.

[0051] It is understandable that the attendance machine has a built-in RFID antenna, so that the attendance machine can automatically detect the fingerprint RFID card using the principle of electromagnetic induction and establish wireless communication with the fingerprint RFID card. In this process, the attendance machine powers the fingerprint RFID card through radio electromagnetic waves without relying on external batteries or power supplies, so that the fingerprint RFID card can be powered by the electromagnetic induction of the attendance machine and can be used for a long time without batteries.

[0052] Furthermore, when the attendance machine detects and supplies power to the fingerprint RFID card, the computer device can immediately read the digital certificate contained in the fingerprint RFID card. The attendance machine ensures the identity and authorization status of the fingerprint RFID card by verifying the validity, legitimacy and signature information of the digital certificate. The verification process usually relies on the X.509 digital certificate standard to ensure that the fingerprint RFID card is authorized and has not been tampered with. If the certificate verification is successful, the attendance machine activates the internal circuit of the fingerprint RFID card and starts other application functions of the fingerprint RFID card, such as activating the fingerprint sensor built into the card.

[0053] S120: Collect the current fingerprint data of the user through the fingerprint sensor, and compare the current fingerprint data with the template fingerprint data pre-stored in the fingerprint radio frequency card to obtain a comparison result.

[0054] In this step, after the fingerprint radio frequency card is activated through step S110, the computer device can collect the user's current fingerprint data through the fingerprint sensor built into the fingerprint radio frequency card, and compare the current fingerprint data with the template fingerprint data pre-stored in the fingerprint radio frequency card to obtain a comparison result. Therefore, the fingerprint radio frequency card is used as an identity index and cannot be used impersonally after it is lost, thereby improving security.

[0055] It should be noted that the fingerprint radio frequency card also stores the user's template fingerprint data during card registration. The template fingerprint data is entered through the user's fingerprint and stored in a secure storage area of ​​the card, such as a security chip or HSM area, after encryption.

[0056] Specifically, when a user clocks in for fingerprint attendance through the fingerprint sensor built into the fingerprint radio frequency card, the fingerprint sensor can first scan the user's fingerprint, and then transmit the collected fingerprint data to the fingerprint radio frequency card. At this time, the computer device can use the biometric matching algorithm in the fingerprint radio frequency card to compare the user's current fingerprint data with the template fingerprint data, such as fingerprint feature point matching algorithm, detail point matching, etc., and judge whether the current fingerprint data matches the stored template fingerprint data by comparing the unique features of the fingerprint, such as ridges, detail points, and grain direction, and then obtain the comparison result.

[0057] It is understandable that the user's fingerprint comparison process is completed in the fingerprint radio frequency card, rather than relying on an external server. Therefore, even if the card is lost, unauthorized users cannot forge their identities by obtaining the card. The lost fingerprint radio frequency card cannot be re-bound to a new template fingerprint data, and the template fingerprint data of the cardholder's fingerprint data cannot be re-stored, thus effectively avoiding the security risk of card theft.

[0058] S130: Obtain the card identification of the fingerprint radio frequency card, and use an encryption algorithm to encrypt the card identification and the comparison result to generate an encrypted signal, so as to transmit the encrypted signal to the attendance machine.

[0059] In this step, after obtaining the comparison result of the user's current fingerprint data through step S120, the computer device can obtain the card identification of the fingerprint radio frequency card, and then use the encryption algorithm to encrypt the card identification and the comparison data to generate an encrypted signal, so that the encrypted signal can be transmitted to the attendance machine. In this way, the user's privacy data does not need to be transmitted to an external device, further ensuring the user's privacy security.

[0060] Among them, the card identification refers to the unique identification identifier of the fingerprint radio frequency card, usually the card UID (Unique Identifier), which is used to distinguish different cards. It is pre-written and permanently bound by the card manufacturer during the production process, and is usually stored in the memory area of ​​the card as one of the basic information for user identity authentication.

[0061] Specifically, in order to further protect the user's privacy and data security, the computer device can use the card's identification information and the comparison result as input data, and then use an encryption algorithm, such as the symmetric encryption algorithm AES, the asymmetric encryption algorithm RSA or the AES-256-GCM algorithm, to encrypt these input data and generate a set of encrypted signals. Therefore, the encrypted signal is encrypted, and even if it is intercepted or stolen during transmission, the attacker cannot decipher the content, thereby improving the security of data transmission.

[0062] It should be noted that the encrypted signal is generated only by the comparison result and the card identification. In other words, the user's fingerprint data is always retained in the fingerprint radio frequency card. Therefore, through the transmission of encrypted signals, this application can realize user attendance and clocking in while avoiding the fingerprint data being directly transmitted to external devices, resulting in user privacy leakage.

[0063] S140: Obtain the card identification of the fingerprint radio frequency card, and use an encryption algorithm to encrypt the card identification and the comparison result to generate an encrypted signal, so as to transmit the encrypted signal to the attendance machine.

[0064] In this step, after the encrypted signal is generated through step S130, the computer device can encrypt and decrypt the encrypted signal on the attendance machine to obtain a comparison result, and then record the user's attendance information according to the card identification when the comparison result is passed, thereby achieving legal attendance punching operations while increasing the difficulty of card copying, making it impossible for unauthorized cards to pass the verification, and preventing the information in the card from being maliciously stolen and misused after the radio frequency card is lost.

[0065] Specifically, after the encrypted signal is securely transmitted to the attendance machine, the attendance machine can decrypt the encrypted signal using the same key used for encryption, and then extract the card identification and comparison result. When the comparison result is passed, the attendance information of the user is recorded according to the card identification, and the user's attendance punch-in can be completed. This process ensures that the user's fingerprint data does not need to be transmitted to an external device or server during the entire verification process, and all sensitive information is retained in the card, ensuring the privacy and security of the user.

[0066] Of course, when the comparison result is failure, the attendance machine may not record the user's attendance information and regard it as attendance failure.

[0067] In the above embodiment, when it is detected that the user brings the fingerprint radio frequency card close to the attendance machine, the attendance machine can power the fingerprint radio frequency card through the RFID antenna, so that the certificate can be verified, and the fingerprint sensor of the fingerprint radio frequency card can be activated when the verification is passed, so that the card can be supported for offline use. Then, the user's current fingerprint data can be collected through the fingerprint sensor built into the fingerprint radio frequency card, and the current fingerprint data can be compared with the template fingerprint data pre-stored in the fingerprint radio frequency card to obtain a comparison result. Therefore, the radio frequency card can be used as an identity index and cannot be used fraudulently after it is lost, thereby improving security. Then the card of the fingerprint radio frequency card can be obtained. The card identification and the comparison result are encrypted by an encryption algorithm to generate an encrypted signal to transmit the encrypted signal to the attendance machine. In this way, the user's private data does not need to be transmitted to an external device, further ensuring the privacy of the user. Finally, after receiving the encrypted signal, the attendance machine can decrypt the encrypted signal to obtain the comparison result and card identification, and then record the user's attendance information according to the card identification when the comparison result is passed, thereby achieving legal attendance punching operations while increasing the difficulty of card copying, making it impossible for unauthorized cards to pass the verification, and avoiding malicious theft and misuse of card information after the RFID card is lost.

[0068] In one embodiment, the process of verifying the fingerprint radio frequency card certificate by the attendance machine in step S110 may include:

[0069] S111: Generate a session key between the attendance machine and the fingerprint radio frequency card by using a key exchange protocol, so that the fingerprint radio frequency card sends the stored digital certificate to the attendance machine based on the session key.

[0070] S112: Perform whitelist verification on the digital certificate through the attendance machine to determine whether the attendance machine authorizes the fingerprint radio frequency card.

[0071] In this embodiment, when the fingerprint radio frequency card is verified by certificate, the computer device can use the key exchange protocol to generate a session key between the attendance machine and the fingerprint radio frequency card, so that the fingerprint radio frequency card sends the stored digital certificate to the attendance machine based on the session key, and then the digital certificate is whitelisted through the attendance machine to determine whether the attendance machine authorizes the fingerprint radio frequency card.

[0072] Among them, the key exchange protocol of this application refers to an EGDH protocol (Elliptic Curve Diffie-Hellman), which is a Diffie-Hellman key exchange protocol based on elliptic curves. Through elliptic curve mathematical operations, it allows both parties to securely exchange keys and generate a shared session key, which will be used to encrypt data in the communication. In the communication between the fingerprint radio frequency card and the attendance machine, the EGDH protocol can provide an efficient and secure key exchange mechanism, thereby ensuring the confidentiality and integrity of data transmission and protecting user privacy.

[0073] It is understandable that the EGDH protocol allows the attendance machine and the fingerprint radio frequency card to exchange keys securely over an insecure channel and eventually generate a shared session key, which is a symmetric key. Both parties use the same key to encrypt and decrypt subsequent communications to ensure the confidentiality and security of data transmission. Once the session key is generated and both parties confirm that the communication is secure, the fingerprint radio frequency card will use the session key to encrypt the digital certificate stored in the card and send the encrypted certificate to the attendance machine. When the attendance machine receives the encrypted certificate, it will decrypt the certificate using the previously stored key and further check the digital certificate through whitelist verification, including verifying whether the digital certificate of the fingerprint radio frequency card is in the whitelist list pre-authorized by the attendance machine to prevent identity theft or illegal intrusion.

[0074] In one embodiment, Figure 2 As shown, Figure 2 A schematic diagram of the fingerprint radio frequency card authorization process provided by an embodiment of the present application is a fingerprint radio frequency card; Figure 2 In step S112, the process of the attendance machine authorizing the fingerprint radio frequency card may include:

[0075] S1121: Start the authorization mode of the attendance machine and activate the fingerprint radio frequency card through the RFID antenna power supply.

[0076] S1122: The fingerprint data of the user is collected by the fingerprint sensor built into the fingerprint radio frequency card and then processed into template fingerprint data, and the template fingerprint data is stored in the chip security module of the fingerprint radio frequency card.

[0077] S1123: A key exchange protocol is used to negotiate a key between the attendance machine and the fingerprint radio frequency card, and the card is registered according to the negotiation result to generate a digital certificate.

[0078] S1124: storing the digital certificate in the fingerprint radio frequency card, binding the digital certificate and the card identification of the fingerprint radio frequency card, and adding the binding information to the white list of the attendance machine.

[0079] In this embodiment, when the card is authorized to be whitelisted, the computer device can first start the authorization mode of the attendance machine and activate the fingerprint radio frequency card through the RFID antenna power supply, and then the user's fingerprint data can be collected through the fingerprint sensor built into the fingerprint radio frequency card and processed into template fingerprint data, and the template fingerprint data can be stored in the chip security module of the fingerprint radio frequency card. Then, a key exchange protocol can be used to negotiate keys between the attendance machine and the fingerprint radio frequency card, and the card can be registered according to the negotiation results to generate a digital certificate. Finally, the computer device can store the digital certificate in the fingerprint radio frequency card, and bind the digital certificate and the card identification of the fingerprint radio frequency card, and add the binding information to the whitelist of the attendance machine.

[0080] It is understandable that the computer device can start the authorization mode of the attendance machine by logging in with an administrator account or swiping an administrator card, and then use the RFID chip in the attendance machine to electromagnetically induct and power the fingerprint radio frequency card to be authorized, ensuring that it can operate without a battery. After the fingerprint radio frequency card is activated and enters the state of waiting for authorization, the user's identity is registered and authenticated.

[0081] Specifically, the attendance machine collects the user's fingerprint data through the fingerprint sensor built into the fingerprint radio frequency card. The fingerprint sensor will collect the fingerprint image of the user's finger and convert it into a set of digital feature data that can be compared. These feature data include the ridges, lines, bifurcation points and detail points of the fingerprint, etc., representing the unique identity information of each user. After certain preprocessing, they will be processed into template fingerprint data and stored in the chip security module inside the fingerprint radio frequency card. It is usually stored in the encrypted area of ​​the module to ensure its security. The template fingerprint data will not be directly leaked in subsequent use, thereby ensuring the security protection of user privacy.

[0082] Furthermore, after the template fingerprint data is stored, the attendance machine and the fingerprint radio frequency card will negotiate keys through a key exchange protocol, such as the elliptic curve Diffie-Hellman protocol. During the key exchange process, both parties use public key encryption technology and private key decryption technology to securely negotiate a session key on an insecure channel. Based on the negotiated session key, the attendance machine and the fingerprint radio frequency card will further proceed with the card registration process, and the digital certificate of the fingerprint radio frequency card will be encrypted and issued by the certificate authority (CA). The digital certificate contains the identity information of the fingerprint radio frequency card, the public key of the holder, the signature of the certificate issuer, etc., which is used to prove the legitimacy and credibility of the fingerprint radio frequency card.

[0083] After the digital certificate is generated, the computer device can store the certificate in the fingerprint radio frequency card, so that the identity authentication information of the fingerprint radio frequency card is securely stored in the card, and can be used to verify the legitimacy of the card in the subsequent attendance process. In order to ensure the consistency of the digital certificate of the fingerprint radio frequency card and its identity information, the computer device can also bind the card identification of the fingerprint radio frequency card with the digital certificate, and then add the binding information to the white list of the attendance machine. In this way, when a user holds a fingerprint radio frequency card close to the attendance machine, the attendance machine will verify whether the card is legally authorized by comparing the information in the white list, thereby improving the security of the system.

[0084] In one embodiment, the process of comparing the current fingerprint data with the template fingerprint data pre-stored in the fingerprint radio frequency card to obtain the comparison result in step S120 may include:

[0085] S121: Determine whether the current fingerprint data is consistent with the template fingerprint data pre-stored in the fingerprint radio frequency card.

[0086] S122: If yes, confirm that the comparison result is passed.

[0087] S123: If not, confirm that the comparison result is not passed.

[0088] In this step, when the computer device compares the current fingerprint data, it can determine whether the current fingerprint data is consistent with the template fingerprint data pre-stored in the fingerprint radio frequency card; if they are consistent, the computer device can confirm that the comparison result is passed; if they are inconsistent, the computer device can confirm that the comparison result is failed.

[0089] Specifically, the computer device may use a fingerprint comparison algorithm to calculate the similarity between the current fingerprint data and the template fingerprint data, and then determine whether the comparison result is passed based on the calculation result. In detail, the fingerprint comparison algorithm here may measure the similarity between the two based on some preset matching standards, such as the details of the fingerprint, the matching degree of the ridges, the overlap of the lines, etc. If the consistency of the current fingerprint data and the template fingerprint data meets the predetermined standard, the computer device may confirm that the comparison result is passed; if the consistency of the current fingerprint data and the template fingerprint data is lower than the predetermined standard, the computer device may confirm that the comparison result is not passed.

[0090] In one embodiment, the process of encrypting the card identification and the comparison result using an encryption algorithm to generate an encrypted signal in step S130 may include:

[0091] S131: Generate a target key using a key agreement algorithm, and convert the card identification and comparison result into standardized data.

[0092] S132: Use the AES-256-GCM algorithm to perform encryption calculation on the target key and the standardized data to obtain encrypted data and an authentication tag, and generate an encrypted signal based on the encrypted data and the authentication tag.

[0093] In this embodiment, after generating the comparison result, the computer device can use a key negotiation algorithm to generate a target key, and convert the card identification and the comparison result into standardized data, and then use the AES-256-GCM algorithm to perform encryption calculations on the target key and the standardized data to obtain encrypted data and an authentication tag, and generate an encrypted signal based on the encrypted data and the authentication tag; here the authentication tag is used to perform security verification on the encrypted data during the process of decrypting the encrypted signal.

[0094] It is understandable that the key agreement algorithm refers to an algorithm that allows two or more communicating parties to securely negotiate a shared key over an insecure communication channel. Here, the two communicating parties calculate a shared key through public exchange of information, and the key will not be intercepted or tampered by the middleman, thereby ensuring the security of data transmission. The AES-256-GCM algorithm combines the AES (Advanced Encryption Standard) algorithm and the GCM (Galois / Counter Mode) mode, and is often used to ensure the confidentiality and integrity of data transmission and prevent data tampering. In addition, it also provides an additional authentication tag to verify the integrity of the data during decryption; the authentication tag is usually generated during the encryption process to ensure that the data has not been modified during transmission.

[0095] In addition, by standardizing data, the present application can convert card identifications and comparison results in different formats into a standardized form that is easy to encrypt and transmit. The format of this standardized data ensures that no matter what the specific content of the data is, it can be encrypted and transmitted in the same format, thereby improving the compatibility and flexibility of the data encryption process.

[0096] In one embodiment, the process of recording the user's attendance information according to the card identification when the comparison result is passed in step S140 may include:

[0097] S141: When the comparison result is passed, the user information corresponding to the card identification is identified in the attendance machine, and the current time is obtained as the user's attendance time, and the user information and attendance time are recorded to form the user's attendance information.

[0098] In this embodiment, when the comparison result is passed, the computer device can identify the corresponding user according to the identification information in the fingerprint radio frequency card, and retrieve the user information of the user from the database of the attendance machine; at the same time, obtain the current time as the attendance time of the user; finally, the computer device can record the user information and attendance time of the user to form attendance information.

[0099] Specifically, through the unique identifier associated with the card ID, the computer device can obtain the user's name, department, position and other user information, providing the necessary person correspondence basis for attendance management. Next, the computer device will automatically obtain the current system time, which is usually the exact time synchronized with the built-in clock of the attendance machine or the enterprise time server. This time point will be recorded as the user's attendance time, and then the attendance machine can combine the user information and attendance time to generate a complete attendance record, and store it in the database or synchronize it to the background management system.

[0100] In one embodiment, the method may further include:

[0101] S150: When the attendance machine fails to verify the certificate of the fingerprint radio frequency card, the fingerprint radio frequency card is activated without power supply to perform the user fingerprint collection, verification and comparison operation.

[0102] In this embodiment, when the attendance machine fails to verify the certificate of the fingerprint radio frequency card, the computer device will immediately recognize that the fingerprint radio frequency card is unauthorized or has potential risks, and will not continue to collect and verify the user's fingerprint. At this time, the computer device will not power it through the attendance machine, nor will it start the fingerprint collection process, thereby preventing unauthorized cards from being misused and ensuring the security of the attendance machine.

[0103] The fingerprint radio frequency card attendance device provided in the embodiment of the present application is described below. The fingerprint radio frequency card attendance device described below and the fingerprint radio frequency card attendance method described above can be referred to each other.

[0104] In one embodiment, Figure 3 As shown, Figure 3 A schematic diagram of the structure of a fingerprint radio frequency card attendance device provided in an embodiment of the present application; the present application also provides a fingerprint radio frequency card attendance device, including a card activation module 210, a fingerprint comparison module 220, a data transmission module 230 and an attendance recording module 240, specifically including the following:

[0105] The card activation module 210 is used to power the fingerprint RFID card through the RFID antenna when it is detected that the user brings the fingerprint RFID card close to the attendance machine, so that the attendance machine verifies the certificate of the fingerprint RFID card and activates the fingerprint sensor built into the fingerprint RFID card after the verification is passed.

[0106] The fingerprint comparison module 220 is used to collect the current fingerprint data of the user through the fingerprint sensor, and compare the current fingerprint data with the template fingerprint data pre-stored in the fingerprint radio frequency card to obtain a comparison result.

[0107] The data transmission module 230 is used to obtain the card identification of the fingerprint radio frequency card, and encrypt the card identification and the comparison result using an encryption algorithm to generate an encrypted signal to transmit the encrypted signal to the attendance machine.

[0108] The attendance recording module 240 is used to decrypt the encrypted signal in the attendance machine to obtain the comparison result and the card identification, and record the user's attendance information according to the card identification when the comparison result is passed.

[0109] In the above embodiment, when it is detected that the user brings the fingerprint radio frequency card close to the attendance machine, the attendance machine powers the fingerprint radio frequency card through the RFID antenna to verify its certificate, and activates the fingerprint sensor of the fingerprint radio frequency card when the verification is passed, so as to support offline use of the card. Then, the user's current fingerprint data can be collected through the fingerprint sensor built into the fingerprint radio frequency card, and the current fingerprint data is compared with the template fingerprint data pre-stored in the fingerprint radio frequency card to obtain a comparison result. Therefore, the radio frequency card is used as an identity index and cannot be used fraudulently after it is lost, thereby improving security. Then the card label of the fingerprint radio frequency card can be obtained. The card identification and the comparison result are encrypted by an encryption algorithm to generate an encrypted signal to transmit the encrypted signal to the attendance machine. In this way, the user's private data does not need to be transmitted to an external device, which further ensures the privacy of the user. Finally, after receiving the encrypted signal, the attendance machine can decrypt the encrypted signal to obtain the comparison result and the card identification, and then record the user's attendance information according to the card identification when the comparison result is passed, so that legal attendance punching operations can be achieved while increasing the difficulty of card copying, making it impossible for unauthorized cards to pass the verification, thus avoiding malicious theft and misuse of the card information after the RFID card is lost.

[0110] In one embodiment, the card activation module 210 may include:

[0111] The certificate sending submodule is used to generate a session key between the attendance machine and the fingerprint radio frequency card using a key exchange protocol, so that the fingerprint radio frequency card sends the stored digital certificate to the attendance machine based on the session key.

[0112] The whitelist verification submodule is used to perform whitelist verification on the digital certificate through the attendance machine to determine whether the attendance machine authorizes the fingerprint radio frequency card.

[0113] In one embodiment, the whitelist verification submodule may include:

[0114] The card activation unit is used to start the authorization mode of the attendance machine and activate the fingerprint radio frequency card through the RFID antenna power supply.

[0115] The template generation unit is used to collect the user's fingerprint data through the fingerprint sensor built into the fingerprint radio frequency card, process it into template fingerprint data, and store the template fingerprint data in the chip security module of the fingerprint radio frequency card.

[0116] The card registration unit is used to conduct key negotiation between the attendance machine and the fingerprint radio frequency card using a key exchange protocol, and to register the card and generate a digital certificate based on the negotiation result.

[0117] The whitelist adding unit is used to store the digital certificate in the fingerprint radio frequency card, bind the digital certificate and the card identification of the fingerprint radio frequency card, and add the binding information to the whitelist of the attendance machine.

[0118] In one embodiment, the fingerprint comparison module 220 may include:

[0119] The fingerprint judgment submodule is used to judge whether the current fingerprint data is consistent with the template fingerprint data pre-stored in the fingerprint radio frequency card.

[0120] The first confirmation submodule is used to confirm that the comparison result is passed when the current fingerprint data is consistent with the template fingerprint data pre-stored in the fingerprint radio frequency card.

[0121] The second confirmation submodule is used to confirm that the current fingerprint data is inconsistent with the template fingerprint data pre-stored in the fingerprint radio frequency card, and the comparison result is not passed.

[0122] In one embodiment, the data transmission module 230 may include:

[0123] The data standardization submodule is used to generate a target key using a key agreement algorithm, and to convert the card identification and comparison results into standardized data.

[0124] The data encryption submodule is used to perform encryption calculation on the target key and the standardized data using the AES-256-GCM algorithm to obtain the encrypted data and the authentication tag, and to generate an encryption signal based on the encrypted data and the authentication tag.

[0125] Among them, the authentication tag is used to perform security verification on the encrypted data during the process of decrypting the encrypted signal.

[0126] In one embodiment, the attendance record module 240 may include:

[0127] The information generation submodule is used to identify the user information corresponding to the card identifier in the attendance machine when the comparison result is passed, obtain the current time as the user's attendance time, record the user information and attendance time, and form the user's attendance information.

[0128] In one embodiment, the apparatus may further include:

[0129] The card deactivation module is used to activate the fingerprint RFID card without power supply to perform user fingerprint collection, verification and comparison operations when the attendance machine fails to verify the fingerprint RFID card's certificate.

[0130] In one embodiment, the present application further provides a storage medium storing computer-readable instructions. When the computer-readable instructions are executed by one or more processors, the one or more processors execute the steps of the fingerprint radio frequency card attendance method as described in any of the above embodiments.

[0131] In one embodiment, the present application further provides a computer device having computer-readable instructions stored therein. When the computer-readable instructions are executed by one or more processors, the one or more processors execute the steps of the fingerprint radio frequency card attendance method as described in any one of the above embodiments.

[0132] Indicatively, Figure 4 As shown, Figure 4 This is a schematic diagram of the internal structure of a computer device provided in an embodiment of the present application. The computer device 300 may be provided as a server. Figure 4 The computer device 300 includes a processing component 302, which further includes one or more processors, and a memory resource represented by a memory 301 for storing instructions executable by the processing component 302, such as an application. The application stored in the memory 301 may include one or more modules each corresponding to a set of instructions. In addition, the processing component 302 is configured to execute instructions to execute the fingerprint radio frequency card attendance method of any of the above embodiments.

[0133] The computer device 300 may further include a power supply component 303 configured to perform power management of the computer device 300, a wired or wireless network interface 304 configured to connect the computer device 300 to a network, and an input / output (I / O) interface 305. The computer device 300 may operate based on an operating system stored in the memory 301, such as Windows Server TM, Mac OS X TM, Unix TM, Linux TM, Free BSD TM, or the like.

[0134] Those skilled in the art will understand that Figure 4The structure shown in the figure is only a block diagram of a part of the structure related to the solution of the present application, and does not constitute a limitation on the computer device to which the solution of the present application is applied. The specific computer device may include more or fewer components than those shown in the figure, or combine certain components, or have a different arrangement of components.

[0135] Finally, it should be noted that, in this article, relational terms such as first and second, etc. are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the terms "include", "comprise" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or device. In the absence of further restrictions, the elements defined by the sentence "comprise a ..." do not exclude the presence of other identical elements in the process, method, article or device including the elements.

[0136] The various embodiments in this specification are described in a progressive manner, and each embodiment focuses on the differences from other embodiments. The various embodiments can be combined as needed, and the same or similar parts can refer to each other.

[0137] The above description of the disclosed embodiments enables those skilled in the art to implement or use the present application. Various modifications to these embodiments will be apparent to those skilled in the art, and the general principles defined herein may be implemented in other embodiments without departing from the spirit or scope of the present application. Therefore, the present application will not be limited to the embodiments shown herein, but will conform to the widest scope consistent with the principles and novel features disclosed herein.

Claims

1. A fingerprint radio frequency card attendance method, characterized in that: The method comprises: When it is detected that the user brings the fingerprint radio frequency card close to the attendance machine, the fingerprint radio frequency card is powered by the RFID antenna, so that the attendance machine verifies the certificate of the fingerprint radio frequency card and activates the fingerprint sensor built into the fingerprint radio frequency card after the verification is passed; Collecting the current fingerprint data of the user through the fingerprint sensor, and comparing the current fingerprint data with the template fingerprint data pre-stored in the fingerprint radio frequency card to obtain a comparison result; Obtaining the card identification of the fingerprint radio frequency card, and encrypting the card identification and the comparison result using an encryption algorithm to generate an encrypted signal, so as to transmit the encrypted signal to the attendance machine; The encrypted signal is decrypted in the attendance machine to obtain a comparison result and a card identification, and when the comparison result is passed, the attendance information of the user is recorded according to the card identification.

2. The fingerprint radio frequency card attendance method according to claim 1, characterized in that: The method of verifying the certificate of the fingerprint radio frequency card by the attendance machine includes: A session key is generated between the attendance machine and the fingerprint radio frequency card using a key exchange protocol, so that the fingerprint radio frequency card sends the stored digital certificate to the attendance machine based on the session key; The digital certificate is whitelist verified by the attendance machine to determine whether the attendance machine authorizes the fingerprint radio frequency card.

3. The fingerprint radio frequency card attendance method according to claim 2 is characterized in that: The process of the attendance machine authorizing the fingerprint radio frequency card includes: Starting the authorization mode of the attendance machine and activating the fingerprint radio frequency card through the power supply of the RFID antenna; The fingerprint data of the user is collected by a fingerprint sensor built into the fingerprint radio frequency card and then processed into template fingerprint data, and the template fingerprint data is stored in the chip security module of the fingerprint radio frequency card; A key exchange protocol is used to negotiate a key between the attendance machine and the fingerprint radio frequency card, and the card is registered according to the negotiation result to generate a digital certificate; The digital certificate is stored in the fingerprint radio frequency card, and the digital certificate and the card identification of the fingerprint radio frequency card are bound, and the binding information is added to the white list of the attendance machine.

4. The fingerprint radio frequency card attendance method according to claim 1, characterized in that: The current fingerprint data is compared with the template fingerprint data pre-stored in the fingerprint radio frequency card to obtain a comparison result, including: Determine whether the current fingerprint data is consistent with the template fingerprint data pre-stored in the fingerprint radio frequency card; If yes, confirm that the comparison result is passed; If not, the comparison result is confirmed as failed.

5. The fingerprint radio frequency card attendance method according to claim 1, characterized in that: The step of using an encryption algorithm to encrypt the card identification and the comparison result to generate an encrypted signal includes: Generate a target key using a key agreement algorithm, and convert the card identification and the comparison result into standardized data; Using the AES-256-GCM algorithm to perform encryption calculation on the target key and the standardized data to obtain encrypted data and an authentication tag, and generating an encrypted signal according to the encrypted data and the authentication tag; The authentication tag is used to perform security verification on the encrypted data during the process of decrypting the encrypted signal.

6. The fingerprint radio frequency card attendance method according to claim 1, characterized in that: When the comparison result is passed, recording the attendance information of the user according to the card identifier includes: When the comparison result is passed, the user information corresponding to the card identification is identified in the attendance machine, and the current time is obtained as the attendance time of the user, and the user information and the attendance time are recorded to form the attendance information of the user.

7. The fingerprint radio frequency card attendance method according to claim 1, characterized in that: The method also includes: When the attendance machine fails to verify the certificate of the fingerprint radio frequency card, the fingerprint collection module of the fingerprint radio frequency card is not activated to perform the user fingerprint collection verification and comparison operation.

8. A fingerprint radio frequency card attendance device, characterized in that: include: The card activation module is used to power the fingerprint radio frequency card through the RFID antenna when it is detected that the user brings the fingerprint radio frequency card close to the attendance machine, so that the attendance machine can power the fingerprint radio frequency card, perform certificate verification, and activate the fingerprint collection module built into the fingerprint radio frequency card after the verification is passed; A fingerprint comparison module, used to collect the current fingerprint data of the user through the fingerprint sensor, and compare the current fingerprint data with the template fingerprint data pre-stored in the fingerprint radio frequency card to obtain a comparison result; A data transmission module, used for obtaining the card identification of the fingerprint radio frequency card, and encrypting the card identification and the comparison result by using an encryption algorithm to generate an encrypted signal, so as to transmit the encrypted signal to the attendance machine; The attendance recording module is used to decrypt the encrypted signal in the attendance machine to obtain a comparison result and a card identification, and to record the user's attendance information according to the card identification when the comparison result is passed.

9. A storage medium, characterized in that: The storage medium stores computer-readable instructions, and when the computer-readable instructions are executed by one or more processors, the one or more processors execute the steps of the fingerprint radio frequency card attendance method as claimed in any one of claims 1 to 7.

10. A computer device, characterized in that: include: one or more processors, and memory; The memory stores computer-readable instructions, and when the computer-readable instructions are executed by the one or more processors, the steps of the fingerprint radio frequency card attendance method as claimed in any one of claims 1 to 7 are executed.

Images