Multi-factor authentication intelligent machine room access control management method and system

Abstract

The invention discloses an intelligent machine room access control management method and system based on multi-factor authentication, and relates to the technical field of access control management.The access control authentication data of a plurality of appointment persons in the next appointment period is extracted through an appointment information extraction unit and encrypted to obtain corresponding authentication fusion data; the authentication fusion data of a plurality of reservation persons in the next reservation period is transmitted to the access control management unit in advance, and the access control management unit performs identity authentication on the reservation persons, so that on one hand, the condition that the reservation persons need to perform one-time interaction operation with the cloud database every time the reservation persons apply for entering is avoided; on the other hand, the identity authentication process is placed locally, the situation that the authentication efficiency is reduced due to network delay and the like is avoided, and excessive waste of local computing and storage resources is also reduced.

Description

Technical Field

[0001] The present invention relates to the technical field of access control management, and in particular to a multi-factor authentication access control management method and system for an intelligent computer room. Background Art

[0002] Smart computer rooms have become the core hub for data storage, processing and transmission. In the wave of digitalization, a large amount of key business data and sensitive information are gathered in smart computer rooms. Their security is not only related to the continuity of enterprise operations, but also plays a decisive role in information security. Therefore, in order to effectively prevent illegal personnel from entering the computer room and comprehensively ensure the stable operation of equipment in the computer room and the security of data, the multi-factor authentication access control management system was born. An existing multi-factor authentication intelligent computer room access control management system, when a person tries to enter the computer room, the system will quickly collect the account password, fingerprint, face and other multi-dimensional biometric information of the visitor, and immediately upload this information to the cloud server. After receiving the information, the cloud server will accurately compare the collected information with the massive data pre-stored in the database one by one. Once the comparison result shows that it is completely consistent, the system will determine that the identity of the person is legal and allow him to enter the computer room; on the contrary, if there is any mismatch, the system will decisively prohibit him from entering. However, this authentication process is related to the number of people who have made appointments. When the number of people who have made appointments increases significantly, the frequency of interaction between the system and the cloud will increase exponentially, and the number of operations to find and match personnel information from the database will also increase sharply, which will increase the authentication load pressure of the cloud server during the period; From the perspective of hardware composition, the access control system covers multiple key hardware parts. Among them, the access control controller, as the core component of the entire system, is responsible for connecting card readers, door locks and other devices and accurately executing control instructions. However, the access control controller is currently limited to collecting information and executing simple control instructions. Many computing, storage and other resources contained in it are idle and wasted, and have not been fully and reasonably utilized. This is undoubtedly a great loss of hardware resources and also limits the improvement of the overall performance of the access control system to a certain extent. In order to solve the above problems, the present invention proposes a solution. Summary of the invention

[0003] The purpose of the present invention is to provide a multi-factor authentication intelligent computer room access control management method and system in order to solve the problems raised in the above background technology.

[0004] The present invention provides a multi-factor authentication intelligent computer room access control management method, comprising the following steps: Step 1: After receiving the computer room authentication data of the target computer room of the next reservation period, the reservation information fusion unit encrypts the authorized facial data and the authorized fingerprint data contained in the access control authentication data according to the preset fusion encryption rules for the access control authentication data of each reservation personnel according to the authorized account name and the authorized account password in the access control authentication data to obtain the authentication fusion data of the reservation personnel in the next reservation period; Step 2: After generating the authentication fusion data of all the appointment personnel in the next appointment period, the appointment information fusion unit packages the authentication data of the target computer room in the next appointment period, and transmits the authentication data to the access control authentication unit for temporary storage; Step 3: When the reservation person applies to enter the target computer room in the next reservation cycle, the information collection unit collects the identity authentication data of the reservation person and transmits it to the access control authentication unit; Step 4: After receiving the transmitted identity authentication data of the appointment person, the access control authentication unit extracts the login account name and login account password contained therein, performs binary conversion and splicing operations on the data to restore the fixed-length account data of the appointment person; Step 5: Restore the authorized facial data and authorized fingerprint data of the reservation personnel based on the fixed-length account data combined with the temporarily stored computer room authentication data of the target computer room for the next reservation period, and authenticate the reservation personnel based on the data combined with the facial collection data and fingerprint collection data of the reservation personnel. If the authentication is successful, the access control unit will open the electronic door lock of the target computer room to allow the reservation personnel to enter, and delete the temporarily stored authentication fusion data of the reservation personnel after they enter.

[0005] Furthermore, in step 5, the authentication is determined as follows: Execute step S14 according to the fixed-length account data to restore several groups of binary execution arrays, combine the restored several groups of binary execution arrays with the fingerprint encrypted data of the reservation personnel in the next reservation period to reversely execute S145 to restore several groups of first arrays, splice the restored several groups of first arrays according to the restored sequence to obtain the authorized fingerprint data of the reservation personnel, and in the process of restoring the authorized fingerprint data, execute step S14 to restore the Boolean face set of the reservation personnel, and restore the authorized face data of the reservation personnel according to the Boolean face set combined with the face encrypted data of the reservation personnel; The restored authorized facial data and authorized fingerprint data of the appointment person are respectively calculated for similarity with the facial collection data and fingerprint collection data of the appointment person. If the similarity is greater than or equal to the corresponding preset similarity, the authentication is determined to be successful. Otherwise, the authentication is determined to be unsuccessful, and the information collection unit re-collects the identity authentication data of the appointment person.

[0006] Multi-factor authentication intelligent computer room access control management system, including: The reservation information extraction unit is used to extract the computer room authentication data of the target computer room in the next reservation period from the cloud database according to the reservation information of the target computer room in the next reservation period, and the computer room authentication data includes the access control authentication data of several reservation personnel; The reservation information fusion unit is used to extract the authorized account name, authorized account password, authorized facial data and authorized fingerprint data contained in the access control authentication data for each reservation personnel after receiving the computer room authentication data of the target computer room of the next reservation period, and encrypt the authorized facial data and authorized fingerprint data according to the preset fusion encryption rules according to the authorized account name and the authorized account password to obtain the authentication fusion data of the reservation personnel in the next reservation period, wherein the authentication fusion data includes the fingerprint encryption data and the facial encryption data; An information collection unit, used to collect the identity authentication data of the reservation personnel when the reservation personnel applies to enter the target computer room in the next reservation cycle; The access control authentication unit is used to extract the login account name and login account password contained therein after receiving the transmitted identity authentication data of the appointment person, and perform binary conversion and splicing operations to restore the fixed-length account data of the appointment person; The access control authentication unit is also used to restore the authorized facial data and authorized fingerprint data of the reservation personnel based on the fixed-length account data combined with the temporarily stored computer room authentication data of the target computer room of the next reservation period, and to judge and authenticate the reservation personnel based on the data combined with the facial collection data and fingerprint collection data of the reservation personnel. If the authentication is passed, the access control unit will open the electronic door lock of the target computer room to allow the reservation personnel to enter, and delete the temporarily stored authentication fusion data of the reservation personnel after the reservation personnel enters.

[0007] Compared with the prior art, it has the following beneficial effects: (1) The present invention uses a reservation information extraction unit to extract access control authentication data of several appointment personnel in the next reservation period from the cloud database in advance according to the reservation information of the target computer room, and obtains corresponding authentication fusion data by encrypting the data, and transmits the authentication fusion data of several appointment personnel in the next reservation period to the access control management unit in advance, and the access control management unit performs identity authentication on the appointment personnel. In this way, on the one hand, it avoids the situation that each appointment personnel has to interact with the cloud database once when applying for entry, reduces the frequency of interaction with the cloud database, and reduces the authentication load pressure of the cloud database. On the other hand, the identity authentication process is placed locally, which not only avoids the occurrence of reduced efficiency of the authentication process caused by network delays, but also reduces the excessive waste of local computing and storage resources. (2) The present invention uses the authorized account name and the authorized account password to fuse and encrypt the authorized facial data and the authorized fingerprint data, and locally decrypts the authorized facial data and the authorized fingerprint data using the login account and login password entered by the reservation personnel. This method reduces the amount of authentication fusion data used for access control authentication on the one hand, and reduces the risk of transmission of the authorized account and the authorized password on the other hand; (3) In the process of encrypting the authorized facial data and the authorized fingerprint data, the present invention uses the percentage of 0 and 1 in the fixed-length account data obtained by converting the authorized fingerprint data based on the login account and the login password as a screening criterion to screen and determine the binary execution array and the Boolean execution array used for the encryption operation, so that the first array and the second array obtained by converting the authorized facial data and the authorized fingerprint data have corresponding arrays for encryption operation. In this way, the encryption arrays of the first array and the second array with the same content in the encryption operation have dynamic variability. Based on the fact that the positions of the first array and the second array may be the same or different, the anti-cracking ability of the authentication fusion data is enhanced, the security of the authentication fusion data transmission is further guaranteed, and the security of the data in the access control authentication process is guaranteed; (4) After the authentication is passed, the present invention deletes the authentication fusion data of the corresponding appointment personnel stored locally, which effectively ensures the recycling of local storage resources and improves the application of local storage resources. BRIEF DESCRIPTION OF THE DRAWINGS

[0008] Figure 1 is a flow chart of the method of the present invention; Figure 2 It is a system block diagram of the present invention. DETAILED DESCRIPTION

[0009] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0010] See also Figure 1 , Figure 2 ,This application provides a multi-factor authentication intelligent computer room access control management method and system, including an access control cloud service platform and a local access control terminal; The access control cloud service platform is used to manage the access control authentication of the target computer room in the cloud, and the access control cloud service platform includes a cloud database, a reservation information extraction unit and a reservation information fusion unit; A cloud database is used to store the authorized identity information of all authorized personnel who are allowed to enter the target computer room. The authorized identity information includes the name of the authorized personnel, the ID number of the authorized personnel, and the access control authentication data. The access control authentication data includes the authorized account name, the authorized account password, the authorized facial data, and the authorized fingerprint data; The reservation information extraction unit is used to periodically extract the corresponding access control authentication data from the cloud database according to the reservation information of the target computer room, wherein the reservation information includes the names, ID numbers and reservation entry times of several reservation personnel; In this application, the administrator provides several preset reservation times for allowing entry into the target computer room, which are selected by the reservation personnel; At each interval of a reservation cycle, when the reservation information extraction unit receives the reservation information of the target computer room of the next reservation cycle, it obtains the names and ID numbers of the several reservation personnel contained in the reservation information, and extracts the access control authentication data of the several authorized personnel consistent with the names and ID numbers from the cloud database according to the obtained names and ID numbers of the several reservation personnel as the access control authentication data corresponding to the several reservation personnel, and generates the computer room authentication data of the target computer room of the next reservation cycle based on the data, and the computer room authentication data includes the access control authentication data of the several reservation personnel; It should be noted here that during the extraction process, only when the name and ID number of an authorized person are consistent with the name and ID number of any of the scheduled persons, the access control authentication data of the authorized person can be extracted as the access control authentication data of the scheduled person; The reservation information extraction unit transmits the computer room authentication data of the target computer room of the next reservation period to the reservation information fusion unit; After receiving the transmitted computer room authentication data of the target computer room of the next reservation period, the reservation information fusion unit extracts the authorized account name, authorized account password, authorized facial data and authorized fingerprint data contained in the access control authentication data of each reservation personnel, and encrypts the authorized facial data and authorized fingerprint data according to the preset fusion encryption rules based on the authorized account name and the authorized account password to obtain the authentication fusion data of the reservation personnel in the next reservation period; The fusion encryption rules are as follows: S11: Perform binary conversion on the authorized account name and the authorized account password to obtain corresponding account number data and password data, and concatenate the account number data and password data to obtain fixed-length account data of the reservation personnel in the next reservation period; S12: performing binary conversion on the authorized fingerprint data to obtain the variable-length fingerprint data of the appointment person in the next appointment period; Performing binary conversion on the authorized facial data to obtain variable-length facial data of the appointment person in the next appointment cycle, and creating an empty Boolean facial set for the appointment person; S13: All characters constituting the fixed-length account data are grouped from left to right, with each P1 character being a fixed-length array. A plurality of fixed-length arrays can be obtained from the fixed-length account data. It should be noted that when the number of remaining characters is less than P1, no processing is performed, that is, all remaining characters are not grouped as a fixed-length array, and P1 is a preset standard grouping quantity. According to the position of each fixed-length array in the fixed-length account data, all groups of fixed-length arrays are marked as A1, A2, ..., Aa from left to right, where a≥1; S14: Encrypt the variable-length fingerprint data according to the preset first encryption rule to obtain the fingerprint encrypted data of the appointment person in the next appointment period, and select a number of fixed-length arrays to fill in the Boolean face set during the execution of the first encryption rule. The first encryption rule is as follows: S141: traverse the fixed-length account data to count the number of characters that are 0 and 1. If the number of characters that are 0 is less than the number of characters that are 1, select 0 as the fusion determination character of the variable-length fingerprint data, otherwise select 1 as the fusion determination character of the variable-length fingerprint data; S142: from left to right, each P1 character of all characters constituting the variable-length fingerprint data is taken as a group of first arrays, and a plurality of groups of first arrays can be obtained from the variable-length fingerprint data; it should be noted here that when the number of remaining characters is less than P1, all remaining characters are taken as a group of fingerprint retention arrays for temporary storage; According to the position of each group of first arrays in the variable-length fingerprint data, all the groups of first arrays are marked as B1, B2, ..., Bb, b ≥ 1 from left to right; S143: Select a group of fixed-length arrays from the fixed-length arrays A1, A2, ..., Aa as the binary execution array of the first array B1 according to a preset screening rule. The screening rule is as follows: SS21: extract all fixed-length arrays whose marking subscripts are less than or equal to P2 from fixed-length arrays A1, A2, ..., Aa according to P2, where P2 is a preset standard screening scalar, and the value of P2 in this application is 3; SS22: Create an encrypted screening set of the first array B1, and fill the extracted groups of fixed-length arrays into the encrypted screening set; SS23: Traverse all elements in the encrypted filter set, obtain the total number C1 of characters that are consistent with the fusion determination character, compare C1 / C and 1 / 2, C is the total number of characters contained in all elements in the encrypted filter set: If C1 / C>1 / 2, a set of fixed-length arrays with the largest marked subscript in the encrypted screening set is used as the binary execution array of the first array B1; Otherwise, firstly, a group of fixed-length arrays with the largest mark subscript is removed from the encrypted filter set, and then the removed fixed-length arrays are filled into the Boolean face set, and a fixed-length array with a mark subscript greater than 1 of the removed fixed-length array is simultaneously filled into the encrypted filter set, and all elements in the encrypted filter set are traversed again to obtain the total number C1 of characters consistent with the fusion determination character, and C1 / C and 1 / 2 are compared again until C1 / C>1 / 2, and the group of fixed-length arrays with the largest mark subscript in the encrypted filter set at this time is re-calibrated as the binary execution array of the first array B1; S144: according to S143, the binary execution arrays of the first arrays B2, B3, ..., Bb are sequentially screened. During the screening process, the mark subscript of the first fixed-length array filled into the encrypted screening set of the first array B2 is Z1+1, where Z1 is the mark subscript of the binary execution array of the first array B2 before being recalibrated as a fixed-length array, and the mark subscript of the first fixed-length array filled into the encrypted screening set of the second arrays B3, B4, ..., Bb is deduced by analogy; It should be noted here that if there is no corresponding fixed-length array according to the marked subscript when filling a fixed-length array into the encrypted screening set of a certain first array, the fixed-length arrays A1, A2, ..., Aa are selected cyclically in the order of the fixed-length arrays A1, A2, ..., Aa, and the fixed-length array A1 is reselected to be filled into the encrypted screening set; S145: performing an XOR operation on the first array B1 and its binary execution array to obtain an encrypted array of the first array B1, and similarly obtaining encrypted arrays of the first arrays B2, B3, ..., Bb in sequence; S146: splicing the encrypted arrays of the first arrays B1, B2, ..., Bb in the order of the first arrays B1, B2, ..., Bb to obtain the fingerprint encrypted data of the appointment person in the next appointment period. It should be noted that if there is a fingerprint reserved array, the fingerprint reserved array is spliced ​​to the rightmost end of the fingerprint encrypted data; S15: after step S14 is completed, the Boolean face set of the appointment personnel is obtained, and all fixed-length arrays in the Boolean face set are marked as D1, D2, ..., Dd in the order of filling in, where d≥1; S16: Encrypt the authorized facial data according to the Boolean facial set according to a preset second encryption rule to obtain facial encrypted data of the appointment person in the next appointment period, and the second encryption rule is as follows: S161: from left to right, all characters constituting the authorized facial data are grouped as a second array for every P1 characters, and a plurality of second arrays can be obtained from the authorized facial data; it should be noted that when the number of remaining characters is less than P1, all remaining characters are temporarily stored as a group of facial reserve arrays; S162: According to the position of each group of the second array in the authorized facial data, all groups of second arrays are marked from left to right as E1, E2, ..., Ee, e ≥ 1; S163: According to the marking subscript, an XOR operation is performed on the fixed-length array with the same marking subscript and the second array to obtain a Boolean execution array corresponding to the second array. For example, if the marking subscripts of the second array E1 and the fixed-length array D1 are both 1, the second array E1 and the fixed-length array D1 are XORed to obtain a Boolean execution array of the second array E1; It should be noted here that if e≥d, the subscripts of the fixed-length arrays that perform the XOR operation with the second arrays Ed+1, Ed+2, ..., Ed are 1, 2, ..., d respectively, and similarly, the second arrays Ed+1, Ed+2, ..., Ee are deduced in the same way; S164: splicing the Boolean execution arrays of the second arrays E1, E2, ..., Ee in the order to obtain the facial encryption data of the appointment person in the next appointment period. It should be noted that if there is a facial retention array, the facial retention array is spliced ​​to the rightmost end of the facial encryption data; S17: Generate authentication fusion data of the reservation person in the next reservation period by using the fingerprint encryption data and facial encryption data of the reservation person in the next reservation period; The reservation information fusion unit generates authentication fusion data of all reservation personnel in the next reservation period, packages the authentication data of the target computer room in the next reservation period, and transmits the authentication data of the computer room to the local access control terminal; The local access control terminal is used to locally manage the access authentication of the target computer room, and the local access control terminal includes an access management unit, an information collection unit and an access control unit; After receiving the transmitted computer room authentication data of the target computer room of the next reservation period, the local access control terminal transmits the data to the access control management unit for temporary storage; When the reservation person applies to enter the target computer room in the next reservation cycle, the information collection unit collects the identity authentication data of the reservation person and transmits it to the access control management unit. The identity authentication data includes the login account name, login account password, facial collection data and fingerprint collection data; After receiving the transmitted identity authentication data of the appointment person, the access control management unit extracts the login account name and login account password contained therein, and performs binary conversion and splicing operations on the login account name and login account password to obtain the fixed-length account data of the appointment person; Execute step S14 according to the fixed-length account data to restore several groups of binary execution arrays, combine the restored several groups of binary execution arrays with the fingerprint encrypted data of the reservation personnel in the next reservation period to reversely execute S145 to restore several groups of first arrays, splice the restored several groups of first arrays according to the restored sequence to obtain the authorized fingerprint data of the reservation personnel, and in the process of restoring the authorized fingerprint data, execute step S14 to restore the Boolean face set of the reservation personnel, and restore the authorized face data of the reservation personnel according to the Boolean face set combined with the face encrypted data of the reservation personnel; The restored authorized facial data and authorized fingerprint data of the appointment person are respectively calculated for similarity with the facial collection data and fingerprint collection data of the appointment person. If the similarity is greater than or equal to the corresponding preset similarity, it is determined that the authentication is successful, and an authentication success instruction is generated for the appointment person. The authentication success instruction is transmitted to the access control unit, and the access control unit opens the electronic door lock of the target computer room to allow the appointment person to enter. After the appointment person enters, the authentication fusion data of the appointment person temporarily stored in the access control management unit is deleted. Otherwise, it is determined that the authentication is unsuccessful, and the information collection unit re-collects the identity authentication data of the appointment person. In this application, if the number of collections exceeds 3 times, an alarm instruction is generated, and the alarm instruction and the identity authentication data collected for multiple times are transmitted to the electronic devices of the management personnel, and the electronic devices include but are not limited to mobile phones, computers, etc.; In this application, when the next reservation cycle ends, if there are still authentication fusion data of several reservation personnel in the access control management unit, all of them will be completely deleted; Some of the data in the above formulas are dimensionless and numerically calculated. Meanwhile, the contents not described in detail in this specification belong to the prior art known to those skilled in the art.

[0011] The above embodiments are only used to illustrate the technical method of the present invention rather than to limit it. Although the present invention has been described in detail with reference to the preferred embodiments, those skilled in the art should understand that the technical method of the present invention may be modified or replaced by equivalents without departing from the spirit and scope of the technical method of the present invention.

Claims

1. A multi-factor authentication intelligent computer room access control management method, characterized in that: The following steps are involved: Step 1: After receiving the computer room authentication data of the target computer room of the next reservation period, the reservation information fusion unit encrypts the authorized facial data and the authorized fingerprint data contained in the access control authentication data according to the preset fusion encryption rules for the access control authentication data of each reservation personnel according to the authorized account name and the authorized account password in the access control authentication data to obtain the authentication fusion data of the reservation personnel in the next reservation period; Step 2: After generating the authentication fusion data of all the appointment personnel in the next appointment period, the appointment information fusion unit packages the authentication data of the target computer room in the next appointment period, and transmits the authentication data to the access control authentication unit for temporary storage; Step 3: When the reservation person applies to enter the target computer room in the next reservation cycle, the information collection unit collects the identity authentication data of the reservation person and transmits it to the access control authentication unit; Step 4: After receiving the transmitted identity authentication data of the appointment person, the access control authentication unit extracts the login account name and login account password contained therein, performs binary conversion and splicing operations on the data to restore the fixed-length account data of the appointment person; Step 5: Restore the authorized facial data and authorized fingerprint data of the reservation personnel based on the fixed-length account data combined with the temporarily stored computer room authentication data of the target computer room for the next reservation period, and authenticate the reservation personnel based on the data combined with the facial collection data and fingerprint collection data of the reservation personnel. If the authentication is successful, the access control unit will open the electronic door lock of the target computer room to allow the reservation personnel to enter, and delete the temporarily stored authentication fusion data of the reservation personnel after they enter.

2. The multi-factor authentication intelligent computer room access control management method according to claim 1 is characterized in that: Before completing step 1, you need to complete the following steps: After receiving the reservation information of the target computer room for the next reservation period, the reservation information extraction unit extracts and generates the computer room authentication data of the target computer room for the next reservation period from the cloud database, and transmits the computer room authentication data to the reservation information fusion unit, wherein the computer room authentication data includes the access control authentication data of several reservation personnel, the reservation information includes the names and ID numbers of several reservation personnel, and the access control authentication data includes the authorized account name, authorized account password, authorized facial data and authorized fingerprint data.

3. The multi-factor authentication intelligent computer room access control management method according to claim 1 is characterized in that: In step 1, the fusion encryption rules for obtaining the authentication fusion data of the appointment personnel in the next appointment cycle are as follows: S11: Perform binary conversion on the authorized account name and the authorized account password to obtain corresponding account number data and password data, and concatenate the account number data and password data to obtain fixed-length account data of the reservation personnel in the next reservation period; S12: performing binary conversion on the authorized fingerprint data and the authorized facial data in sequence to obtain the variable-length fingerprint data and variable-length facial data of the appointment person in the next appointment cycle, and creating an empty Boolean facial set for the appointment person; S13: from left to right, all characters constituting the fixed-length account data are grouped as a fixed-length array for every P1 characters, and a plurality of fixed-length arrays can be obtained from the fixed-length account data, where P1 is a preset standard grouping quantity; and all fixed-length arrays are marked as A1, A2, ..., Aa from left to right in sequence according to the position of each fixed-length array in the fixed-length account data, where a≥1; S14: Encrypt the variable-length fingerprint data according to a preset first encryption rule to obtain the fingerprint encryption data of the appointment person in the next appointment period and select a number of fixed-length arrays to fill into the Boolean face set during the execution of the first encryption rule; S15: after step S14 is completed, the Boolean face set of the appointment personnel is obtained, and all fixed-length arrays in the Boolean face set are marked as D1, D2, ..., Dd in the order of filling in, where d≥1; S16: Encrypt the authorized facial data according to the Boolean facial set according to a preset second encryption rule to obtain the facial encryption data of the appointment person in the next appointment period, and generate the authentication fusion data of the appointment person in the next appointment period according to the fingerprint encryption data and facial encryption data of the appointment person in the next appointment period.

4. The multi-factor authentication intelligent computer room access control management method according to claim 3 is characterized in that: S14, encrypting the first encryption rule of the fingerprint encrypted data of the appointment person in the next appointment period is as follows: S141: traverse the fixed-length account data to count the number of characters that are 0 and 1. If the number of characters that are 0 is less than the number of characters that are 1, select 0 as the fusion determination character of the variable-length fingerprint data, otherwise select 1 as the fusion determination character of the variable-length fingerprint data; S142: from left to right, each P1 character of all characters constituting the variable-length fingerprint data is taken as a group of first arrays to obtain a plurality of groups of first arrays; from left to right, all groups of first arrays are marked as B1, B2, ..., Bb in sequence according to the position of each group of first arrays in the variable-length fingerprint data, where b≥1; S143: Select a group of fixed-length arrays from the fixed-length arrays A1, A2, ..., Aa as the binary execution array of the first array B1 according to a preset screening rule. The screening rule is as follows: SS21: Extract all fixed-length arrays whose marking subscripts are less than or equal to P2 from fixed-length arrays A1, A2, ..., Aa according to P2, where P2 is a preset standard screening scalar; SS22: Create an encrypted screening set of the first array B1, and fill the extracted groups of fixed-length arrays into the encrypted screening set; SS23: Traverse all elements in the encrypted filter set, obtain the total number C1 of characters that are consistent with the fusion determination character, compare C1 / C and 1 / 2, where C is the total number of characters contained in all elements in the encrypted filter set: if C1 / C>1 / 2, use a set of fixed-length arrays with the largest mark subscript in the encrypted filter set as the binary execution array of the first array B1; S144: sequentially filter and obtain binary execution arrays of the first arrays B2, B3, ..., Bb according to S143; S145: performing an XOR operation on the first array B1 and its binary execution array to obtain an encrypted array of the first array B1, and similarly obtaining encrypted arrays of the first arrays B2, B3, ..., Bb in sequence; S146: Concatenate the encrypted arrays of the first arrays B1, B2, ..., Bb in the order of the first arrays B1, B2, ..., Bb to obtain the fingerprint encryption data of the appointment person in the next appointment period.

5. The multi-factor authentication intelligent computer room access control management method according to claim 4 is characterized in that: In step 5, the authentication is determined as follows: Execute step S14 according to the fixed-length account data to restore several groups of binary execution arrays, combine the restored several groups of binary execution arrays with the fingerprint encrypted data of the reservation personnel in the next reservation period to reversely execute S145 to restore several groups of first arrays, splice the restored several groups of first arrays according to the restored sequence to obtain the authorized fingerprint data of the reservation personnel, and in the process of restoring the authorized fingerprint data, execute step S14 to restore the Boolean face set of the reservation personnel, and restore the authorized face data of the reservation personnel according to the Boolean face set combined with the face encrypted data of the reservation personnel; The restored authorized facial data and authorized fingerprint data of the appointment person are respectively calculated for similarity with the facial collection data and fingerprint collection data of the appointment person. If the similarity is greater than or equal to the corresponding preset similarity, the authentication is determined to be successful. Otherwise, the authentication is determined to be unsuccessful, and the information collection unit re-collects the identity authentication data of the appointment person.

6. The multi-factor authentication intelligent computer room access control management method according to claim 4 is characterized in that: In SS23, if C1 / C≤1 / 2, first remove a group of fixed-length arrays with the largest mark subscript from the encrypted filter set, then fill the removed fixed-length arrays into the Boolean face set, and simultaneously fill the fixed-length arrays with a mark subscript that is 1 larger than the removed fixed-length array into the encrypted filter set, and traverse all elements in the encrypted filter set again to obtain the total number C1 of characters consistent with the fusion judgment character, and compare C1 / C and 1 / 2 again until C1 / C>1 / 2, and recalibrate the group of fixed-length arrays with the largest mark subscript in the encrypted filter set as the binary execution array of the first array B1.

7. The intelligent computer room access control management system with multi-factor authentication is characterized by: include: The reservation information extraction unit is used to extract the computer room authentication data of the target computer room in the next reservation period from the cloud database according to the reservation information of the target computer room in the next reservation period, and the computer room authentication data includes the access control authentication data of several reservation personnel; The reservation information fusion unit is used to extract the authorized account name, authorized account password, authorized facial data and authorized fingerprint data contained in the access control authentication data for each reservation personnel after receiving the computer room authentication data of the target computer room of the next reservation period, and encrypt the authorized facial data and authorized fingerprint data according to the preset fusion encryption rules according to the authorized account name and the authorized account password to obtain the authentication fusion data of the reservation personnel in the next reservation period, wherein the authentication fusion data includes the fingerprint encryption data and the facial encryption data; An information collection unit, used to collect the identity authentication data of the reservation personnel when the reservation personnel applies to enter the target computer room in the next reservation cycle; The access control authentication unit is used to extract the login account name and login account password contained therein after receiving the transmitted identity authentication data of the appointment person, and perform binary conversion and splicing operations to restore the fixed-length account data of the appointment person; The access control authentication unit is also used to restore the authorized facial data and authorized fingerprint data of the reservation personnel based on the fixed-length account data combined with the temporarily stored computer room authentication data of the target computer room of the next reservation period, and to judge and authenticate the reservation personnel based on the data combined with the facial collection data and fingerprint collection data of the reservation personnel. If the authentication is passed, the access control unit will open the electronic door lock of the target computer room to allow the reservation personnel to enter, and delete the temporarily stored authentication fusion data of the reservation personnel after the reservation personnel enters.

Images