Station access control system and emergency password control method thereof

Abstract

The invention relates to a station access control system and an emergency password control method thereof. The method comprises the following steps: S1, multiple groups of emergency passwords created by a central access control system are received and encrypted and stored in a file database, and the emergency passwords are used for logging in a station access control system for emergency; and S2, when the network connection between the station and the central access control system is abnormal, receiving any group of emergency passwords input by the user through the client. And S3, comparing the input emergency password with the decrypted password in the file database, and if the verification is passed, successfully logging in the station access control system so as to monitor the station through the station access control system. According to the method, the burden of memorizing the password can be reduced, so that password management is more reliable, more convenient and safer.

Description

Technical Field

[0001] The present invention relates to the technical field of station access control, and in particular to a station access control system and an emergency password control method thereof. Background Art

[0002] In the new rail access control system, the management function of the station-level access control system (station access control system) is weakened. The station-level access control system is not used under normal circumstances. Only when the network between the station and the central system (central access control system) is disconnected, the personnel on duty in the station control room will enter the station-level access control system. And once it is used, it means that it is in an emergency situation and the station staff needs to be able to enter quickly.

[0003] The user name and password used to log in to the urban rail station access control system are usually managed in the traditional way that users remember them, that is, people who need to enter the station access control system need to remember their own user names and passwords. However, this adds a memory burden to the users of the station access control system, and since the passwords are not usually used, they are very easy to forget, which leads to the disadvantages of low reliability, inconvenience, and low security of password management. Summary of the invention

[0004] The technical problem to be solved by the present invention is to provide a station access control system and an emergency password control method thereof.

[0005] The technical solution adopted by the present invention to solve the technical problem is: an emergency password control method for a station access control system, the method comprising the following steps:

[0006] S1, receiving multiple sets of emergency passwords created by the central access control system, and encrypting and saving them to a file database, wherein the emergency passwords are used to log in to the station access control system for emergency;

[0007] S2. When the network connection between the station and the central access control system is abnormal, receive any set of emergency passwords entered by the user through the client;

[0008] S3. Compare the entered emergency password with the decrypted password in the file database. If the verification passes, the station access control system is successfully logged in to monitor the station.

[0009] Further, in the emergency password management method of the present invention, the step S2 of receiving any set of emergency passwords input by the user through the client includes:

[0010] Receive any set of emergency passwords obtained from the password box entered by the user through the client; each set of emergency passwords in the password box consists of two parts printed separately by the first printer and the second printer of the central access control system, and are packaged in the same envelope in sequence; or

[0011] Obtain the emergency password from the password USB flash drive inserted by the user through the client; the password USB flash drive stores the emergency password written by the central access control system.

[0012] Furthermore, in the emergency password management method of the present invention, before password verification, after receiving the entered emergency password, it also includes:

[0013] Obtain the connection status between the station and the central access control system, and determine whether the connection status is disconnected; if so, execute step S3.

[0014] Further, in the emergency password management method of the present invention, step S1 includes:

[0015] S11, receiving the emergency password created by the central access control system and encrypted by the corresponding station public key;

[0016] S12. Decrypt the encrypted emergency password using the corresponding station private key, and save the decrypted emergency password to the file database.

[0017] Further, in the emergency password management method of the present invention, step S12 also includes:

[0018] After the decryption is completed, each group of decrypted emergency passwords is hashed to obtain a standard operation value, and the standard operation value is encrypted by the station key and saved in the file database.

[0019] Further, in the emergency password management method of the present invention, step S3 includes:

[0020] S31, performing a hash operation on the entered emergency password to obtain a corresponding check value;

[0021] S32, reading the standard operation value from the file database and decrypting it, and determining whether the check value is consistent with one of the decrypted standard operation values ​​in the file database;

[0022] S33: If yes, the station access control system is successfully logged in to monitor the station through it.

[0023] Furthermore, in the emergency password management method of the present invention, the method also includes:

[0024] Deleting the emergency password that has been logged in the file database, or marking the emergency password that has been logged in the file database as invalid; or

[0025] The same emergency password is allowed to be reused within a preset time period, and the emergency password logged in to the file database is automatically deleted when the preset time period is exceeded.

[0026] Furthermore, in the emergency password management method of the present invention, the method also includes:

[0027] The number of valid emergency passwords stored in the file database is reported to the central access control system, so that when it is determined that the number of valid emergency passwords is less than the minimum number of passwords, an emergency password creation prompt is given.

[0028] In addition, the present invention also provides a station access control system, including a client and a background, and the background adopts the emergency password control method of the station access control system as described above.

[0029] In addition, the present invention also provides an urban rail access control system, including a central access control system and a station access control system as described above, wherein the central access control system is communicatively connected to the station access control system; the central access control system is used to monitor and manage the station, and the station access control system performs emergency monitoring and management of the station when the connection between the station and the central access control system is abnormal.

[0030] The implementation of the station access control system and the emergency password control method of the present invention has the following beneficial effects: the emergency password control method of the present invention can reduce the burden of remembering passwords, making password management more reliable, more convenient, and more secure. When emergency login to the station system is required, the method is no longer limited to one person and one code, but the personnel on duty in the station control room can obtain the ability to quickly log in to the station system. BRIEF DESCRIPTION OF THE DRAWINGS

[0031] The present invention will be further described below with reference to the accompanying drawings and embodiments, in which:

[0032] Figure 1 It is a flow chart of an emergency password control method for a station access control system provided by an embodiment of the present invention;

[0033] Figure 2 It is a flow chart of an emergency password control method for a station access control system provided by an embodiment of the present invention;

[0034] Figure 3 It is a flow chart of an emergency password control method for a station access control system provided by an embodiment of the present invention;

[0035] Figure 4 It is an overall flow chart of the emergency password control method in the urban rail access control system provided by an embodiment of the present invention;

[0036] Figure 5It is a flow chart of the central system end of the emergency password control method provided by an embodiment of the present invention;

[0037] Figure 6 It is a flow chart of the station system end of the emergency password control method provided by an embodiment of the present invention. DETAILED DESCRIPTION

[0038] In order to have a clearer understanding of the technical features, purposes and effects of the present invention, the specific implementation methods of the present invention are now described in detail with reference to the accompanying drawings. It should be noted that, unless otherwise clearly specified and limited, the terms "installed", "connected", "connected", "fixed", "set" and the like should be understood in a broad sense, for example, it can be a fixed connection, a detachable connection, or an integral body; it can be a mechanical connection or an electrical connection; it can be directly connected or indirectly connected through an intermediate medium, it can be the internal connection of two elements or the interaction relationship between two elements. When an element is referred to as being "on" or "under" another element, the element can be "directly" or "indirectly" located on the other element, or there may be one or more intermediate elements. The terms "first", "second", "third", etc. are only for the convenience of describing the present technical solution, and cannot be understood as indicating or implying relative importance or implicitly indicating the number of technical features indicated. Therefore, the features defined as "first", "second", "third", etc. can explicitly or implicitly include one or more of the features. For ordinary technicians in this field, the specific meanings of the above terms in the present invention can be understood according to the specific circumstances.

[0039] In the following description, specific details such as specific system structures, technologies, etc. are provided for the purpose of illustration rather than limitation, so as to provide a thorough understanding of the embodiments of the present invention. However, it should be clear to those skilled in the art that the present invention may be implemented in other embodiments without these specific details. In other cases, detailed descriptions of well-known systems, devices, circuits, and methods are omitted to prevent unnecessary details from obstructing the description of the present invention.

[0040] In a preferred embodiment, reference Figure 1 The emergency password control method of the station access control system of this embodiment includes the following steps:

[0041] S1. Receive multiple sets of emergency passwords created by the central access control system, encrypt and save them to the file database. The emergency passwords are used to log in to the station access control system for emergency. It can be understood that the station access control system includes the background, the client, and also includes the equipment management module and the equipment monitoring module, but these modules are not used under normal circumstances. Only when the central system is abnormally connected to the station, the equipment management module and the equipment monitoring module required for emergency can be started by logging into the station-level access control system, thereby realizing emergency monitoring of the station.

[0042] S2. When the network connection between the station and the central access control system is abnormal, any set of emergency passwords input by the user through the client is received. Optionally, there are two ways to implement the receiving of any set of emergency passwords input by the user through the client in step S2. The first is: receiving any set of emergency passwords obtained from the password box and entered by the user through the client. Each set of emergency passwords in the password box consists of two parts printed separately by the first printer and the second printer of the central access control system, and are packaged in the same envelope in sequence. The second is: obtaining the emergency password in the password USB flash drive inserted by the user through the client. The password USB flash drive stores the emergency password written by the central access control system.

[0043] It can be understood that the password U disk can store multiple groups of emergency passwords or all emergency passwords created by the central system, and automatically obtain one of the emergency passwords in the U disk when the password U disk is inserted. When the password is one-time, the station access control system can delete or mark (invalidate) the used emergency password in the password U disk after successful verification or login, so that the next time the emergency password in the U disk is obtained, the used / expired password can be directly excluded and the valid emergency password can be obtained. Alternatively, the station access control system can go through the emergency passwords in the password U disk one by one, exclude the used / expired emergency passwords, until the valid emergency password in the U disk is obtained. Of course, it is also possible to use a password U disk to store one emergency password.

[0044] S3. Compare the entered emergency password with the decrypted password in the file database. If the verification passes, the station access control system is successfully logged in to monitor the station.

[0045] The emergency password management method of this embodiment can reduce the burden of remembering passwords, making password management more reliable, more convenient, and more secure. When emergency login to the station system is required, the method is no longer limited to one person and one code, but all personnel on duty in the station control room can obtain the ability to quickly log into the station system.

[0046] In some embodiments, before password verification is performed, after receiving the entered emergency password, it also includes: obtaining the connection status between the station and the central access control system, and determining whether the connection status is disconnected. If so, step S3 is executed. That is to say, in this embodiment, the station access control system receives multiple sets of emergency passwords created by the central access control system, and encrypts and saves them to the file database. When the network connection between the station and the central access control system is abnormal, any set of emergency passwords entered by the user through the client is received. At this time, the connection status between the station and the central access control system is obtained, and when the connection status is judged to be disconnected, the password verification is performed again, that is, the entered emergency password is compared with the decrypted password in the file database. If the verification passes, the station access control system is successfully logged in to monitor the station through it. It can be understood that the abnormal network connection between the station and the central access control system can be manually confirmed, or the network status monitoring module can send the result of the abnormal network connection between the station and the central access control system monitored in real time to the display interface / operation interface to pop up a corresponding prompt message.

[0047] In some embodiments, reference Figure 2 , step S1 includes: S11, receiving the emergency password created by the central access control system and encrypted by the corresponding station public key. S12, decrypting the encrypted emergency password by using the corresponding station private key, and saving the decrypted emergency password to the file database. That is to say, the central system uses the station public key to encrypt the emergency password to obtain a ciphertext, sends the ciphertext to the station system through a message, and the station receives the ciphertext and decrypts it with its own private key. It can be understood that when the station system connects to the central system for the first time, it generates a pair of public and private keys and sends the public key to the central system. The central system uses the station system's public key to encrypt the emergency password to obtain a ciphertext, sends the ciphertext to the station system through a message, and the station system receives the ciphertext and decrypts it with its own private key. The purpose of setting public key encryption and private key decryption in this embodiment is to protect the transmission security of the emergency password, and only the corresponding station can use it.

[0048] Based on the above embodiments, reference Figure 3, step S12 also includes: S121, decrypting the encrypted emergency password by the corresponding station private key. S122, after decryption, hashing each group of decrypted emergency passwords to obtain a standard operation value, and encrypting the standard operation value with the station key and saving it to the file database. It can be understood that after the emergency password is printed in the center, the hash operation value can be used and encrypted in the library. That is, the hash operation value can also be encrypted and stored with the station key in the station library. The login process is: the user enters the account and plain text password, and the client performs a hash operation on the plain text password to obtain a check value, which is sent to the background for verification. The background reads the password ciphertext from the library, decrypts it and compares it with the check value. In a specific embodiment, the emergency password login process can be: the operator enters the login account and plain text password, the client performs a hash operation on the plain text password to obtain the password hash value, and then performs a hash operation on the password hash value + account + timestamp again to obtain the login password check value. The login account, login password check value, and timestamp are sent to the background for verification. The backend reads the password ciphertext from the database according to the login account, decrypts the password ciphertext to obtain the password hash value, and then performs a hash operation on the password hash value + account + timestamp to obtain the password verification comparison value. The backend compares the password verification comparison value with the login password verification value passed in by the frontend. This embodiment can further ensure transmission security and prevent replay attacks through two hash operations.

[0049] Based on the above embodiments, reference Figure 3 , step S3 includes: S31, hashing the entered emergency password to obtain the corresponding check value. S32, reading the standard operation value from the file database and decrypting it, and judging whether the check value is consistent with one of the decrypted standard operation values ​​in the file database. S33, if so, successfully logging into the station access control system to monitor the station through it.

[0050] In some embodiments, the emergency password management method of this embodiment also includes a password validity setting step. Specifically, the emergency password that has been logged in the file database can be deleted. Alternatively, the emergency password that has been logged in the file database can be marked as invalid. Alternatively, the same emergency password is allowed to be reused within a preset time period, and the emergency password that has been logged in the file database is automatically deleted when the preset time period is exceeded. In other words, the validity setting of the emergency password in this embodiment can be set to allow reuse within a few minutes, or it can also be set to a single use. For example, a one-time password can delete the password after the login is successful. When the same password is used to try to log in for the second time, the system cannot find the password in the file database, and it is judged that the password used is an incorrect password.

[0051] For example, after the emergency password is used for the first time to log in to the station access control system, the client (browser) will establish a heartbeat mechanism with the background, and communicate at least once every 10 seconds. When the background receives the heartbeat of the client, it confirms that the client has been in use. If the operator logs out or closes the browser, the background will not receive the heartbeat. If it exceeds 30 seconds, the background will determine that the client has logged out and record the time to the database. If you log in with the last password within a preset time (for example, within 5 minutes), that is, reuse it within the specified time, you are allowed to log in. If it reaches 5 minutes, the system will delete the password. Since the rail station-level system requires duty, if you exit unexpectedly, you must re-enter the system as soon as possible, so it is reasonable to re-enter the system within 5 minutes. If an extremely special fault occurs (for example: switch network equipment failure, etc.), you fail to re-enter within 5 minutes. After the special fault is repaired, you can open a new password envelope to obtain a new emergency password for login.

[0052] In some embodiments, the emergency password management method of this embodiment also includes: reporting the number of valid emergency passwords stored in the file database to the central access control system, so that when it is determined that the number of valid emergency passwords is less than the minimum number of passwords, an emergency password creation prompt is issued. It can be understood that the central system (central access control system) can be set to automatically create 5 emergency passwords by default, and support modification. The maximum number of emergency passwords can also be configured, such as 6, 4, 7, 10, etc. When creating station information, automatically creating emergency passwords can increase convenience. As long as the maximum number is not exceeded, the system administrator can manually create more emergency passwords. Moreover, when the station system (station access control system) is connected to the central system, the number of remaining unused (valid) emergency passwords will be reported to the central system. When the central system finds that the remaining emergency password is less than the minimum number of passwords (such as 4), a prompt message is issued to remind the central administrator to create it in time. It should be noted that the station information includes the station code, station name, and access parameters required for the station system to access the central system.

[0053] In another preferred embodiment, the station access control system of this embodiment includes a client and a background, and the background adopts the emergency password control method of the station access control system of the above embodiment.

[0054] This embodiment can reduce the burden of remembering passwords, making password management more reliable, more convenient, and more secure. When emergency login to the station system is required, the method is no longer limited to one person and one code, but all personnel on duty in the station control room can obtain the ability to quickly log into the station system.

[0055] In another preferred embodiment, the urban rail access control system of this embodiment includes a central access control system and a station access control system as in the above embodiment, and the central access control system is communicatively connected to the station access control system. The central access control system is used to monitor and manage the station, and the station access control system performs emergency monitoring and management of the station when the connection between the station and the central access control system is abnormal. Optionally, the central access control system includes a first printer and a second printer, which are respectively used to print the first half and the second half of each set of emergency passwords, and are packaged in envelopes in sequence. This embodiment can further reduce the risk of password leakage.

[0056] For the station access control system used in emergency situations of the urban rail access control system, the traditional emergency login password management method is mainly: the system administrator creates users and enters user passwords, notifies relevant users to log in and modify their personal passwords in time, and then the user remembers his or her own password. It cannot be forgotten. If forgotten, the administrator needs to reset the password or reset the password yourself through the password retrieval function provided by the system. Users reset their own passwords generally by verifying that the operator is the user himself or herself through mobile phone text messages or emails. However, this management and control method is feasible in general information systems, but if it is used in rail station access control systems, there are at least three disadvantages:

[0057] (1) Users need to remember their passwords, but the rail station access control system is for emergency use. If the network is normal, users use the central system. Only when the network fails do they need to use the station system. Therefore, remembering passwords is a burden.

[0058] (2) The new station access control system tends to be streamlined. To avoid complicating the station system (station access control system), a large number of user accounts and passwords are stored in the station system, which results in an increase in synchronized data, a complex station system, and increased difficulty in maintaining the station system.

[0059] (3) The new station access control system does not have a complete server installed. Instead, it uses an industrial computer as the operation center of the station access control. Storing a large number of login passwords inside the station system may cause data insecurity and even affect the security of the central system.

[0060] like Figure 4As shown, it is an overall flow chart of the emergency password management and control method in the urban rail access control system provided by this embodiment. The central-level user (responsible for managing all stations) creates all station information. When each station information is created, the system will automatically create multiple emergency login passwords for each station according to the set parameters. The default setting may be 5 passwords. The password is 12 characters long and contains uppercase and lowercase English letters and numbers. It should be noted that the emergency password is automatically generated randomly by the central system and has 12 characters, which makes it difficult to guess. The password is encrypted and stored in the library, and the password is not displayed on the interface. Operators at all levels cannot see the emergency password from the system. This embodiment can make the emergency password have high security and confidentiality.

[0061] The central system provides a printing function and is equipped with a dedicated printing room. The printing room is equipped with a camera and two printers A and B. Among them, printer A is responsible for printing the first half of the password, and printer B is responsible for printing the second half of the password. The total length of the password is 12 characters, that is, the two printers print 6 characters each. This embodiment can ensure that the staff has no conditions to peek at the password. The system sets 5 passwords, that is, printer A will print 5 password papers, and printer B will also print 5 password papers. Personnel A folds each password paper of printer A separately, and personnel B folds each password paper of printer B separately. The password papers are handed over to the workbench of personnel C in order, and personnel C puts each two password papers into an envelope in order and seals the envelope. A special person delivers the password envelope to the corresponding station. The stationmaster puts all the password envelopes into the station password box. The key to the password box is held by the on-duty personnel in the train control room, and the key will be handed over at the handover meeting. While printing the password, the central system will automatically send the station emergency password to the station system, and the station system will encrypt and save it to the station's file database. As an option, the central system can print password paper or use a USB flash drive (password USB flash drive). The central system writes the emergency password into the USB flash drive. When the station system needs emergency login, insert the USB flash drive into the station client, and the system automatically verifies the consistency between the USB flash drive password and the emergency password stored in the station. The center and the station can transmit emergency password data by interface call or by symmetric encryption algorithm.

[0062] If the network between the station and the center fails, the station's duty personnel cannot use the central system to monitor the station's access control. At this time, for emergency response, the duty personnel must use the station's local emergency monitoring system (that is, the station access control system). Emergency password login verification is required first. The duty personnel opens the password box, takes out any password envelope, and enters the emergency password according to the password paper. Then, they can pass the station system login verification and start emergency monitoring. It can be understood that the duty personnel are high-security positions and are not allowed to leave their posts without authorization. If they leave, someone must take over. Therefore, once the emergency login is entered, there is no need to log out until the network returns to normal. The default setting of the emergency password is single use, and it also supports setting it to allow repeated use within a few minutes. It can ensure that the password will not be leaked.

[0063] Optionally, the station access control system will determine the connection status between the station and the central system. If the station and central network are normal, the emergency monitoring interface is prohibited from opening, thereby effectively protecting the safe use of the station system.

[0064] like Figure 5 The figure shows the flowchart of the central system side of the emergency password management method. The central system administrator user is responsible for creating other users, including central-level users and station-level users. When the network is normal, both central-level users and station-level users use the central system. After the central-level user logs in, he can manage station information, manage station emergency passwords and other functions. When the central-level user prints the password, the system automatically sends the password to the station system. After the station-level user logs in, he can use functions such as device management and access control monitoring.

[0065] like Figure 6 The figure shows the flow chart of the station system side of the emergency password control method. Manually, the station can receive the password envelope, which is saved in the station's password box and can only be opened by the on-duty personnel (with keys) in the station's train control room. When the station system connects to the center for the first time, it will generate a pair of public and private keys and send its public key to the center. The central system uses the station's public key to encrypt the emergency password to obtain the ciphertext, and sends the ciphertext to the station system through a message. The station receives the ciphertext and decrypts it with its own private key. If the station is disconnected from the central network, the station's on-duty user opens the password envelope, enters the emergency password, and can use the emergency monitoring function and equipment management function provided by the local system.

[0066] The present invention has the following advantages: (1) Safer: The station emergency login password is separated from the daily user password of the central system. The station-level login can only be used at the station, not at the center. Although there are many stations and they are scattered, the security of the entire system can still be guaranteed through such a design. Even if the station password is accidentally leaked, the center will not have any password security risks. (2) More convenient: When the user of the station access control system needs emergency login (when the station and the central network are disconnected by the station control room staff on duty), they can find the emergency login password very quickly and enter the station emergency monitoring interface. The emergency login password does not need to be memorized in advance. The password is communicated and memorized personally. (3) More reliable: The emergency password is printed on password paper, which is not afraid of electronic interference and radiation, and will not be damaged during long-term storage. When using it, it is entered as a reference, and there is no problem of memory error, so it is more reliable. Since the emergency password is kept in a key password box at the station, it is used and supervised by the train control staff on duty on a daily basis. The station train control staff has a strict duty system, and the management system ensures that the password will not be easily used or leaked. (4) By preparing multiple sets of emergency passwords, each emergency password is only used once at the station. This ensures that the password is not illegally reused. (5) When a station uses the emergency password to log in, the station system will record the log. If there is an abnormal situation, the station system log will be compared with the station staff duty schedule, so that the user of the emergency password can be quickly locked out.

[0067] The computer-readable storage medium of the present invention can be any computer-readable storage medium that can store program codes, such as a USB flash drive, a mobile hard disk, a read-only memory (ROM), a magnetic disk, or an optical disk.

[0068] Professionals may further appreciate that the units and algorithm steps of each example described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, computer software, or a combination of the two. In order to clearly illustrate the interchangeability of hardware and software, the composition and steps of each example have been generally described in the above description according to function. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Professionals and technicians may use different methods to implement the described functions for each specific application, but such implementation should not be considered to be beyond the scope of the present invention.

[0069] The steps of the method or algorithm described in conjunction with the embodiments disclosed herein may be implemented directly using hardware, a software module executed by a processor, or a combination of the two. The software module may be placed in a random access memory (RAM), a memory, a read-only memory (ROM), an electrically programmable ROM, an electrically erasable programmable ROM, a register, a hard disk, a removable disk, a CD-ROM, or any other form of storage medium known in the art.

[0070] It can be understood that the above embodiments only express the preferred implementation modes of the present invention, and the descriptions thereof are relatively specific and detailed, but they cannot be understood as limiting the patent scope of the present invention. It should be pointed out that, for ordinary technicians in this field, the above technical features can be freely combined without departing from the concept of the present invention, and several deformations and improvements can be made, which all belong to the protection scope of the present invention. Therefore, all equivalent changes and modifications made to the scope of the claims of the present invention should belong to the coverage of the claims of the present invention.

Claims

1. An emergency password control method for a station access control system, characterized in that: The method comprises the following steps: S1, receiving multiple sets of emergency passwords created by the central access control system, and encrypting and saving them to a file database, wherein the emergency passwords are used to log in to the station access control system for emergency; S2. When the network connection between the station and the central access control system is abnormal, receive any set of emergency passwords entered by the user through the client; S3. Compare the entered emergency password with the decrypted password in the file database. If the verification passes, the station access control system is successfully logged in to monitor the station.

2. The emergency password management method according to claim 1, characterized in that: In step S2, any set of emergency passwords input by the user through the client are received, including: Receive any set of emergency passwords obtained from the password box entered by the user through the client; each set of emergency passwords in the password box consists of two parts printed separately by the first printer and the second printer of the central access control system, and are packaged in the same envelope in sequence; or Obtain the emergency password from the password USB flash drive inserted by the user through the client; the password USB flash drive stores the emergency password written by the central access control system.

3. The emergency password management method according to claim 1, characterized in that: Before password verification, after receiving the entered emergency password, it also includes: Obtain the connection status between the station and the central access control system, and determine whether the connection status is disconnected; if so, execute step S3.

4. The emergency password management method according to any one of claims 1 to 3, characterized in that: Step S1 includes: S11, receiving the emergency password created by the central access control system and encrypted by the corresponding station public key; S12. Decrypt the encrypted emergency password using the corresponding station private key, and save the decrypted emergency password to the file database.

5. The emergency password management method according to claim 4, characterized in that: Step S12 also includes: After decryption is completed, each group of decrypted emergency passwords is hashed to obtain a standard operation value, and the standard operation value is encrypted with the station key and saved in the file database.

6. The emergency password management method according to claim 5, characterized in that: Step S3 includes: S31, performing a hash operation on the entered emergency password to obtain a corresponding check value; S32, reading the standard operation value from the file database and decrypting it, and determining whether the check value is consistent with one of the decrypted standard operation values ​​in the file database; S33: If yes, the station access control system is successfully logged in to monitor the station through it.

7. The emergency password management method according to claim 1, characterized in that: The method further includes: Deleting the emergency password that has been logged in the file database, or marking the emergency password that has been logged in the file database as invalid; or The same emergency password is allowed to be reused within a preset time period, and the emergency password logged in to the file database is automatically deleted when the preset time period is exceeded.

8. The emergency password management method according to claim 7, characterized in that: The method further includes: The number of valid emergency passwords stored in the file database is reported to the central access control system, so that when it is determined that the number of valid emergency passwords is less than the minimum number of passwords, an emergency password creation prompt is given.

9. A station access control system, characterized in that: It includes a client and a background, and the background adopts the emergency password control method of the station access control system as described in any one of claims 1 to 8.

10. An urban rail access control system, characterized in that: It comprises a central access control system and a station access control system as claimed in claim 9, wherein the central access control system is communicatively connected with the station access control system; the central access control system is used to monitor and manage the station, and the station access control system performs emergency monitoring and management of the station when the connection between the station and the central access control system is abnormal.

Images