Attendance checking system and method considering compatibility and safety of terminal equipment manufacturer
By designing an attendance system, encrypting data with terminal devices is used to upload data to the Internet of Things platform, and data processing is performed through event filters and message queues, the problems of poor compatibility, low data security and poor management in traditional attendance systems are solved, and the secure processing and effective management of attendance data are realized.
Patent Information
- Application Number
- CN202411715551.6
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2024-11-27
- Publication Date
- 2025-04-29
AI Technical Summary
The compatibility of terminal equipment of different brands and models in traditional attendance systems is poor, resulting in the need to develop interactive interfaces separately, increasing development workload and reducing interface reuse rate; at the same time, the privacy data security of personnel on terminal equipment is poor, which is easy to cause data leakage and tampering; traditional terminal equipment lacks effective management, and managers can easily configure and modify, resulting in the authenticity of attendance results that cannot be guaranteed.
Design an attendance system, collect user information through terminal devices, encrypt it, and upload it to the Internet of Things platform. It uses event filters and message queues to filter and classify data, and the background server reads and classifies messages, so as to realize the secure processing and effective management of attendance data.
It effectively avoids illegal modification of terminal device configuration, ensures the authenticity of user privacy data and attendance results, and improves data processing efficiency and resource utilization.
Smart Images
Figure CN119902908A_ABST
Abstract
Description
Technical Field
[0001] The present invention belongs to the technical field of attendance systems, and in particular relates to an attendance system and method that takes into account the compatibility and security of terminal equipment manufacturers. Background Art
[0002] The statements in this section merely provide background information related to the present invention and do not necessarily constitute prior art.
[0003] As the scale of the company's business continues to expand, some large enterprises have set up head offices, provincial companies, municipal companies, district and county companies, and township companies. Due to the continuous expansion of the scope of use of the attendance system and the continuous growth of the system's own data volume, the data interaction efficiency between the attendance system and terminal devices is getting lower and lower. For terminal devices of different brands and models, a separate set of interactive interfaces and attendance service software must be developed separately to distribute and upload data, which greatly increases the workload of attendance service software development in the attendance system and reduces the interface reuse rate.
[0004] Secondly, as a key business of enterprise management, attendance data has high security requirements, and the personnel privacy data on existing terminal devices (such as identity information and face template information) is difficult to effectively protect, which can easily lead to security issues such as data leakage and data tampering. At the same time, traditional terminal devices lack effective management, and managers can easily modify the configuration of terminal devices, resulting in the authenticity of attendance results cannot be guaranteed. Summary of the invention
[0005] The present invention provides an attendance system and method taking into account the compatibility and security of terminal equipment manufacturers, so as to solve the problems that the compatibility of terminal equipment of different manufacturers in the traditional solution is poor, the terminal equipment of different manufacturers needs to develop a set of independent interactive interfaces and attendance service software separately to distribute and upload data, which greatly increases the workload of attendance service software development in the attendance system and reduces the interface reuse rate; and the user privacy data security of the existing terminal equipment is poor; and the traditional terminal equipment lacks effective management, and the management personnel can easily modify the configuration of the terminal equipment, resulting in the problem that the authenticity of the attendance results cannot be guaranteed.
[0006] According to a first aspect of an embodiment of the present invention, there is provided an attendance system that takes into account the compatibility and security of terminal equipment manufacturers, including:
[0007] The terminal device is used to collect user information on the terminal side, encrypt the collected user information and upload it to the Internet of Things platform according to a preset unified standard interface; and switch the device between security mode and normal mode in response to instructions issued by the background server;
[0008] The IoT platform is used to receive user information and terminal device status information uploaded by a number of terminal devices, and upload the user information and terminal device status information to a pre-built message queue in the form of event messages after filtering through an event filter;
[0009] The backend server is used to read messages from the message queue and classify the read messages; different categories of messages are assigned to corresponding services based on the classification results; among them, for messages classified as attendance messages, the attendance service extracts the user information in the message and matches it with the pre-built attendance personnel information database, and implements user attendance based on the matching results.
[0010] Furthermore, the security mode is used to perform permission control on the terminal device, wherein the permission control includes disabling the device USB port, time modification, personnel addition and template modification functions, and closing the administrator's access to the management terminal; the normal mode is the device mode after the permission control is released.
[0011] Furthermore, the initial state of the terminal device is set to the safe mode. When and only when the user administrator on the terminal side initiates a mode switching request and the superior administrator approves it, the mode switching instruction is issued by the background server to realize the switching of the terminal device mode to the normal mode; at the same time, the normal mode is set with a time limit, and it automatically switches to the safe mode when the preset time limit is reached.
[0012] Furthermore, the event filter specifically performs the following processing procedures: for the received terminal device event message, the validity of the event message is determined through a pre-built invalid and junk event message database; based on the validity of the event message, invalid and junk events are filtered out.
[0013] Furthermore, the event filter adopts an event-driven architecture.
[0014] Furthermore, the message queue adopts a distributed message queue. At the same time, the event messages uploaded by the terminal device are prioritized according to the event type, and the messages are assigned to message queues of different priorities based on the priority setting; wherein the event types include attendance message category, unlocking message category, heartbeat message category and status message category, and the priority of each event type decreases in order.
[0015] Furthermore, the read messages are classified by using a naive Bayes classifier. For the attendance service, messages of the attendance message category are screened out by the naive Bayes classifier, and user attendance is realized by extracting and matching user information in the attendance message.
[0016] Furthermore, the collected user information is encrypted and uploaded to the Internet of Things platform according to a preset unified standard interface. For terminal devices from different manufacturers, the terminal devices encapsulate the user information to be uploaded into a message that complies with the unified standard interface format.
[0017] Furthermore, the user information is encrypted using a national encryption algorithm.
[0018] According to a second aspect of an embodiment of the present invention, there is provided an attendance method that takes into account the compatibility and security of terminal equipment manufacturers. The method is based on the above-mentioned attendance system that takes into account the compatibility and security of terminal equipment manufacturers. The method comprises:
[0019] In response to the triggering of user attendance events, user information is collected through the terminal device, and the collected user information is encrypted and uploaded to the Internet of Things platform according to the preset unified standard interface;
[0020] The IoT platform receives user information and terminal device status information uploaded by several terminal devices, and uploads them to a pre-built message queue in the form of event messages after filtering through event filters;
[0021] Messages are read from the message queue through the server and classified. Messages of different categories are assigned to corresponding services based on the classification results. Among them, for messages classified as attendance messages, the attendance service extracts the user information in the message and matches it with the pre-built attendance personnel information database, and implements user attendance based on the matching results.
[0022] One or more of the above technical solutions have the following beneficial effects:
[0023] The present invention provides an attendance system and method that takes into account the compatibility and security of terminal equipment manufacturers. The scheme can effectively avoid users from illegally modifying the terminal equipment configuration by setting a security mode. At the same time, combined with the encryption of attendance data, it can effectively ensure the authenticity of user privacy data and attendance results.
[0024] The solution described in the present invention provides a data filtering mechanism to filter out invalid or junk messages from the data receiving source, reduce channel occupancy, and improve resource utilization.
[0025] The scheme described in the present invention provides a priority mechanism, which intelligently classifies the event messages reported by the equipment, gives priority to the attendance messages, and puts the unlocking messages, heartbeat messages, status messages, etc. into low priority to reduce the interference with important messages and ensure the timely processing of employee punch-in data.
[0026] The solution of the present invention greatly improves the processing efficiency of the data reported by the equipment by screening, classifying and intelligently filtering the event messages reported by the attendance equipment.
[0027] Advantages of additional aspects of the present invention will be given in part in the following description, and in part will become obvious from the following description, or will be learned through practice of the present invention. BRIEF DESCRIPTION OF THE DRAWINGS
[0028] The accompanying drawings in the specification, which constitute a part of the present invention, are used to provide a further understanding of the present invention. The exemplary embodiments of the present invention and their descriptions are used to explain the present invention and do not constitute improper limitations on the present invention.
[0029] Figure 1 A schematic diagram of the structure of an attendance system considering the compatibility and security of terminal equipment manufacturers described in an embodiment of the present invention;
[0030] Figure 2 This is a flow chart of an attendance method that takes into account the compatibility and security of terminal equipment manufacturers in an embodiment of the present invention. DETAILED DESCRIPTION
[0031] It should be noted that the following detailed descriptions are exemplary and are intended to provide further explanation of the present invention. Unless otherwise specified, all technical and scientific terms used herein have the same meanings as those commonly understood by those skilled in the art to which the present invention belongs.
[0032] It should be noted that the terms used herein are for describing specific embodiments only and are not intended to be limiting of exemplary embodiments according to the present invention.
[0033] In the absence of conflict, the embodiments of the present invention and the features of the embodiments may be combined with each other.
[0034] In one or more embodiments, Figure 1 As shown, this embodiment provides an attendance system that takes into account the compatibility and security of terminal equipment manufacturers, specifically including:
[0035] The terminal device is used to collect user information on the terminal side, encrypt the collected user information and upload it to the Internet of Things platform according to a preset unified standard interface; and switch the device between security mode and normal mode in response to instructions issued by the background server;
[0036] In a specific implementation, the collected user information is encrypted and uploaded to the Internet of Things platform according to a preset unified standard interface. For terminal devices from different manufacturers, the terminal devices encapsulate the user information to be uploaded into a message that complies with the unified standard interface format. The user information is encrypted using a national encryption algorithm.
[0037] In a specific implementation, the security mode is used to perform permission control on the terminal device, wherein the permission control includes disabling the device USB port, time modification, personnel addition and template modification functions, and closing the administrator's access to the management terminal; the normal mode is the device mode after the permission control is released.
[0038] In a specific implementation, the initial state of the terminal device is set to the safe mode. When and only when the user administrator on the terminal side initiates a mode switching request and the superior administrator approves it, the mode switching instruction is issued through the background server to realize the switching of the terminal device mode to the normal mode. At the same time, the normal mode is set with a time limit, and it automatically switches to the safe mode when the preset time limit is reached.
[0039] Specifically, after the device is connected, the system automatically issues a command to change the device to safe mode. In safe mode, the device USB port, time modification, personnel addition, template modification and other functions will be disabled, high-risk ports will be blocked, and the administrator's access to the management end will be closed to ensure the security of device data and the accuracy of attendance data.
[0040] It should be noted here that the reason for the above-mentioned setting is due to the special scenario in which the solution described in this embodiment is located, namely, the attendance insecurity problem existing in a large-scale company with multiple subsidiaries. Generally speaking, the terminal device used for attendance can perform various operations on the terminal device through the settings of the administrator, including the modification of attendance-related configurations. This makes it difficult for the superior company to effectively supervise the attendance of the subordinate subsidiaries. Through the above-mentioned strategy, it is possible to effectively supervise the modifications made to the terminal devices by the subsidiaries, thereby preventing the relevant personnel of the subsidiaries from falsifying the actual attendance situation by modifying the configuration of the terminal devices.
[0041] The IoT platform is used to receive user information and terminal device status information uploaded by a number of terminal devices, and upload the user information and terminal device status information to a pre-built message queue in the form of event messages after filtering through an event filter;
[0042] Specifically, the terminal device reports the data to the IoT platform. The platform distributes the data to the corresponding services based on the load balancing algorithm, uses EDA (event-driven architecture) to build event filters, filters out invalid or spam messages at the initial entrance of the system, establishes event stream partitions, and processes events in partitions.
[0043] The scheme described in this embodiment adopts MQS (Message Queue Service) queue transmission, builds a distributed message queue system, establishes a message priority mechanism, and assigns different priorities to different types of messages in the message queue. When some message processing fails, it can be automatically retried by setting a retry mechanism, or put into a delay queue to prevent affecting normal message processing.
[0044] In a specific implementation, the event filter specifically performs the following processing procedures: for the received terminal device event message, the validity of the event message is determined through a pre-built invalid and junk event message database; based on the validity of the event message, invalid and junk events are filtered out.
[0045] In a specific implementation, the message queue adopts a distributed message queue. At the same time, the event messages uploaded by the terminal device are prioritized according to the event type, and the messages are assigned to message queues of different priorities based on the priority setting; wherein, the event types include attendance message category, unlocking message category, heartbeat message category and status message category, and the priority of each event type decreases in order.
[0046] The backend server is used to read messages from the message queue and classify the read messages; different categories of messages are assigned to corresponding services based on the classification results; among them, for messages classified as attendance messages, the attendance service extracts the user information in the message and matches it with the pre-built attendance personnel information database, and implements user attendance based on the matching results.
[0047] In a specific implementation, the read messages are classified by using a naive Bayes classifier. For the attendance service, messages of the attendance message category are screened out by the naive Bayes classifier, and user attendance is realized by extracting and matching user information in the attendance message.
[0048] Specifically, the attendance system service receives messages reported by the corresponding devices from MQS in real time according to the priority mechanism, and uses the Naive Bayes Classifier (Naive Bayes Classifier) combined with the historical data training model to intelligently classify and filter messages of various events of the attendance machine.
[0049] Furthermore, real-time stream processing tools are used for classified and filtered data. According to the priority algorithm analysis, the data stream is obtained and divided into smaller batches. The information of face scanning event messages that meet the attendance rules is extracted and associated with the attendance personnel information.
[0050] Furthermore, the data in the attendance event is stored, for example, the captured photos in the attendance event (for example, face scanning event) are uploaded to the OSS server, and the processed clock-in message and photo path are stored in the corresponding database table.
[0051] In one or more embodiments, corresponding to the above-mentioned attendance system based on the above-mentioned consideration of terminal device manufacturer compatibility and security, such as Figure 2As shown, this embodiment provides an attendance method that takes into account the compatibility and security of terminal equipment manufacturers, and the method includes:
[0052] In response to the triggering of user attendance events, user information is collected through the terminal device, and the collected user information is encrypted and uploaded to the Internet of Things platform according to the preset unified standard interface;
[0053] The IoT platform receives user information and terminal device status information uploaded by several terminal devices, and uploads them to a pre-built message queue in the form of event messages after filtering through event filters;
[0054] Messages are read from the message queue through the server and classified. Messages of different categories are assigned to corresponding services based on the classification results. Among them, for messages classified as attendance messages, the attendance service extracts the user information in the message and matches it with the pre-built attendance personnel information database, and implements user attendance based on the matching results.
[0055] Those skilled in the art will appreciate that the units, i.e., algorithm steps, of the various examples described in the present embodiment can be implemented in electronic hardware or in a combination of computer software and electronic hardware. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Professional and technical personnel can use different methods to implement the described functions for each specific application, but such implementation should not be considered to be beyond the scope of the present invention.
[0056] The above description is only a preferred embodiment of the present invention and is not intended to limit the present invention. For those skilled in the art, the present invention may have various modifications and variations. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present invention shall be included in the protection scope of the present invention.
Claims
1. An attendance system that takes into account the compatibility and security of terminal equipment manufacturers, characterized in that: include: Terminal equipment, which is used to collect user information on the terminal side, encrypt the collected user information and upload it to the Internet of Things platform according to a preset unified standard interface; And, switching the device between the safety mode and the normal mode in response to the instruction issued by the background server; The IoT platform is used to receive user information and terminal device status information uploaded by a number of terminal devices, and upload the user information and terminal device status information to a pre-built message queue in the form of event messages after filtering through an event filter; The backend server is used to read messages from the message queue and classify the read messages; different categories of messages are assigned to corresponding services based on the classification results; among them, for messages classified as attendance messages, the attendance service extracts the user information in the message and matches it with the pre-built attendance personnel information database, and implements user attendance based on the matching results.
2. An attendance system considering terminal device vendor compatibility and security as claimed in claim 1, characterized in that: The security mode is used to perform permission control on the terminal device, wherein the permission control includes disabling the device USB port, time modification, personnel addition and template modification functions, and closing the administrator's access to the management terminal; the normal mode is the device mode after the permission control is released.
3. The attendance system considering terminal equipment vendor compatibility and security as claimed in claim 1, characterized in that: The initial state of the terminal device is set to the safe mode. When and only when the terminal side user administrator initiates a mode switching request and the superior administrator approves it, the mode switching instruction is issued by the background server to realize the terminal device mode switching to the normal mode; at the same time, the normal mode is set with a time limit, and it automatically switches to the safe mode when the preset time limit is reached.
4. The attendance system considering terminal equipment vendor compatibility and security as claimed in claim 1, characterized in that: The event filter specifically performs the following processing: for the received terminal device event message, the validity of the event message is determined through a pre-built invalid and junk event message database; based on the validity of the event message, invalid and junk events are filtered out.
5. An attendance system considering terminal equipment vendor compatibility and security as claimed in claim 4, characterized in that: The event filter adopts an event-driven architecture.
6. The attendance system considering terminal equipment vendor compatibility and security as claimed in claim 1, characterized in that: The message queue adopts a distributed message queue. At the same time, the event messages uploaded by the terminal device are prioritized according to the event type, and the messages are allocated to message queues of different priorities based on the priority setting; wherein the event types include attendance message category, unlocking message category, heartbeat message category and status message category, and the priority of each event type decreases in order.
7. The attendance system considering terminal equipment vendor compatibility and security as claimed in claim 1, characterized in that: The classification of the read messages specifically adopts a naive Bayes classifier; wherein, for the attendance service, the messages of the attendance message category are screened out by the naive Bayes classifier, and the user's attendance is realized by extracting the judgment and matching of the user information in the attendance message.
8. The attendance system considering terminal equipment vendor compatibility and security as claimed in claim 1, characterized in that: The collected user information is encrypted and uploaded to the Internet of Things platform according to a preset unified standard interface. For terminal devices from different manufacturers, the terminal devices encapsulate the user information to be uploaded into a message that complies with the unified standard interface format.
9. The attendance system considering terminal equipment vendor compatibility and security as claimed in claim 1, characterized in that: The user information is encrypted using a national encryption algorithm.
10. An attendance method considering terminal equipment vendor compatibility and security, characterized in that: The method is based on an attendance system considering terminal device vendor compatibility and security as described in any one of claims 1 to 9, and comprises: In response to the triggering of user attendance events, user information is collected through the terminal device, and the collected user information is encrypted and uploaded to the Internet of Things platform according to the preset unified standard interface; The IoT platform receives user information and terminal device status information uploaded by several terminal devices, and uploads them to a pre-built message queue in the form of event messages after filtering through event filters; Messages are read from the message queue through the server and classified. Messages of different categories are assigned to corresponding services based on the classification results. Among them, for messages classified as attendance messages, the attendance service extracts the user information in the message and matches it with the pre-built attendance personnel information database, and implements user attendance based on the matching results.