An intelligent box automatic switch lock method, device and storage medium

Abstract

The present application discloses an intelligent safe automatic unlocking and locking method, device and storage medium, which improves the security of safe use, effectively solves many problems existing in the traditional safe unlocking and locking methods, and provides a safer, more reliable and more convenient safe management solution for financial institutions. The method of the present application includes: receiving a safe unlocking request from a user, where the safe unlocking request includes user biometric information; extracting a feature digest of the user biometric information, encrypting the feature digest to obtain encrypted data, and then uploading the encrypted data to a cloud database; obtaining a comparison result between the encrypted data and the authorized user feature information in the cloud database, and after determining that the user's identity is an authorized identity according to the comparison result, adopting an encryption algorithm resistant to quantum computing, and combining the geographical location of the safe, the current timestamp and the safe verification information to generate a target key; and unlocking the target safe according to the encryption key.

Description

Technical Field

[0001] The present application relates to the technical field of intelligent locks, and particularly to an automatic locking and unlocking method, device and storage medium for an intelligent money box. Background Art

[0002] With the continuous development of the financial industry and the increasing progress of security prevention technologies, the money box, as a key device for storing and transporting important items in financial institutions, has received extensive attention for its security. At present, there are many technical defects in the traditional methods of locking and unlocking money boxes.

[0003] Among them, traditional biometric identification technologies, such as fingerprint identification, although provide a means of identity verification to a certain extent, are vulnerable to forgery or replication attacks, and the security is relatively low. At the same time, there are also risks of leakage in the password and key management methods. Once lost or stolen, it will pose a serious threat to the security of the money box.

[0004] In addition, the traditional operation of locking and unlocking money boxes lacks means of real-time recording, and it is impossible to accurately track information such as the unlocking time of the money box, the identity of the operator, and environmental parameters. In the event of a security incident, it is difficult to quickly locate the problem and trace the responsibility, which brings great inconvenience to security management and accident handling, and seriously threatens the security of the money box. Summary of the Invention

[0005] The present application provides an automatic locking and unlocking method, device and storage medium for an intelligent money box to solve the above technical problems.

[0006] In the first aspect of the present application, an automatic locking and unlocking method for an intelligent money box is provided, and the method includes:

[0007] Receiving a money box unlocking request from a user, where the money box unlocking request includes user biometric information;

[0008] Extracting a feature digest of the user biometric information, encrypting the feature digest to obtain encrypted data, and then uploading the encrypted data to a cloud database;

[0009] Obtaining a comparison result between the encrypted data and authorized user feature information in the cloud database, and after determining that the identity of the user is an authorized identity according to the comparison result, adopting an encryption algorithm resistant to quantum computing, and generating a target key in combination with the geographical location of the money box, the current timestamp and money box verification information, where the target key is a one-time valid encryption key;

[0010] Performing an unlocking process on the target money box according to the encrypted key, and uploading the unlocking time, operator identity information and environmental parameter information of the target money box to the blockchain system in real time;

[0011] After receiving the instruction that the user operation is completed, generate a target key according to the number of the cash box and the current timestamp, where the target key is a one-time valid key;

[0012] Lock the cash box according to the target key.

[0013] Optionally, extract the feature summary of the user biometric information, encrypt the feature summary to obtain encrypted data, and then upload the encrypted data to the cloud database, including:

[0014] Convert the user biometric information into a feature summary by using the hash SHA-256 algorithm, and then encrypt the feature summary by using the quantum key distribution QKD algorithm to obtain encrypted data;

[0015] Obtain the unique identification data of the encrypted data;

[0016] Send the unique identification data to the cloud database so that the cloud database determines the data type of the encrypted data according to the unique identification data;

[0017] Obtain the data transmission channel request sent by the cloud database, and construct a target data transmission channel according to the data transmission channel request, where the target data transmission channel is a one-time valid transmission channel;

[0018] Transmit the encrypted data to the cloud database through the target data transmission channel.

[0019] Optionally, obtain the comparison result between the encrypted data and the authorized user feature information in the cloud database, and determine that the user's identity is an authorized identity according to the comparison result, including:

[0020] Decrypt the encrypted data to obtain the feature summary;

[0021] Extract the target summary information from the feature summary, where the target summary information is the unique identification information representing the user;

[0022] Use an artificial intelligence model to compare the target summary information with the authorized user feature information stored in the cloud data, and obtain the comparison result;

[0023] Obtain the core score value of the user according to the comparison result;

[0024] When it is determined that the core score value of the user meets the preset score value, then determine that the user's identity is an authorized identity.

[0025] Optionally, an encryption algorithm resistant to quantum computing is adopted, and a target key is generated by combining the geographical location of the cash box, the current timestamp, and the cash box verification information. The target key is a one-time valid encryption key, including:

[0026] Extract the serial number of the cash box;

[0027] Obtain the cash box number of the cash box according to the serial number;

[0028] Determine the GPS coordinate information of the cash box through the cash box number and generate the current timestamp based on a trusted time source;

[0029] Obtain a quantum random number based on a quantum random generation algorithm;

[0030] Adopt the NTRU algorithm to generate a target key from the quantum random number, the GPS coordinate information of the cash box, the current timestamp, and the serial number of the cash box. The target key is a one-time valid encryption key.

[0031] Optionally, unlocking the target cash box according to the encryption key and uploading the unlocking time, operator identity information, and environmental parameter information of the target cash box to the blockchain system in real time includes:

[0032] Obtain the key unlocking permission instruction of the encryption key;

[0033] Unlock the target cash box according to the key unlocking permission instruction and feedback the unlocking status;

[0034] When it is determined that the unlocking status is successful unlocking, after digitally signing and verifying the unlocking time, operator ID, and environmental parameters of the cash box, upload them to the blockchain system.

[0035] Optionally, when receiving an instruction that the user operation is completed, generate a target key according to the cash box number and the current timestamp. The target key is a one-time valid key, including:

[0036] When receiving an instruction that the user operation is completed, determine whether the unlocking record of the cash box exists;

[0037] If so, based on the cash box number, generate the target key through a quantum random number algorithm;

[0038] After uploading the target key to the cloud database, mark the status of the cash box as the to-be-used status and destroy the original key of the cash box.

[0039] Optionally, perform a locking operation on the cash box according to the target key, including:

[0040] After obtaining the target key, determine whether the target key is within the valid period;

[0041] If so, perform a locking process on the money box according to the target key, and upload the locking time and the operator ID to the cloud database for storage.

[0042] The second aspect of the present application provides an intelligent money box automatic unlocking and locking device, including:

[0043] A receiving unit, configured to receive a money box unlocking request from a user, where the money box unlocking request includes user biometric information;

[0044] An extraction unit, configured to extract a feature summary of the user biometric information, encrypt the feature summary to obtain encrypted data, and then upload the encrypted data to the cloud database;

[0045] A first generation unit, configured to obtain a comparison result between the encrypted data and the authorized user feature information in the cloud database. After determining that the identity of the user is an authorized identity according to the comparison result, an encryption algorithm resistant to quantum computing is used, and a target key is generated in combination with the geographical location of the money box, the current timestamp, and the money box verification information. The target key is a one-time valid encryption key;

[0046] An unlocking unit, configured to perform an unlocking process on the target money box according to the encrypted key, and upload the unlocking time of the target money box, the operator identity information, and the environmental parameter information to the blockchain system in real time;

[0047] A second generation unit, configured to generate a target key according to the money box number and the current timestamp after receiving an instruction that the user operation is completed, and then upload the target key to the cloud database. The target key is a one-time valid key;

[0048] A locking unit, configured to perform a locking process on the money box according to the target key

[0049] The third aspect of the present application provides an intelligent money box automatic unlocking and locking device, where the device includes:

[0050] A processor, a storage, an input / output unit, and a bus;

[0051] The processor is connected to the storage, the input / output unit, and the bus;

[0052] The storage stores a program, and the processor calls the program to execute the method of the first aspect and any optional method in the first aspect.

[0053] A fourth aspect of the present application provides a computer-readable storage medium, on which a program is stored, and when the program is executed on a computer, it executes the method of the first aspect and any optional method in the first aspect.

[0054] As can be seen from the above technical solutions, the present application has the following advantages:

[0055] 1. By receiving the cash box unlocking request from the user and extracting the feature summary of the user's biometric information for encryption processing, the security of the biometric information during transmission and storage is ensured. Comparing the encrypted data with the authorized user feature information in the cloud database effectively prevents forgery or replication attacks and improves the accuracy and reliability of identity verification.

[0056] 2. An encryption algorithm resistant to quantum computing is used to generate a one-time valid target key. Even if the key is intercepted, it cannot be used to unlock other cash boxes at other times, greatly reducing the risk of key leakage. By combining the geographical location of the cash box, the current timestamp, and the cash box verification information to generate the target key, the key has a high degree of uniqueness and timeliness, further enhancing the security of key management.

[0057] 3. The unlocking time of the cash box, the operator's identity information, and the environmental parameter information are uploaded to the blockchain system in real time, ensuring the immutability and traceability of the operation information. In the event of a security incident, the problem can be quickly located and the responsibility can be traced, providing strong support for security management and accident handling.

[0058] 4. After receiving the instruction that the user's operation is completed, a one-time valid target key is generated according to the cash box number and the current timestamp for locking the cash box, simplifying the locking process, improving the usability, and the one-time valid key mechanism ensures the security of the locking operation and prevents unauthorized locking behavior.

[0059] 5. Effectively solves many problems existing in the traditional cash box unlocking and locking methods, and provides a more secure, reliable, and convenient cash box management solution for financial institutions. BRIEF DESCRIPTION OF THE DRAWINGS

[0060] In order to more clearly illustrate the technical solutions in the present application, the following will briefly introduce the drawings required for the description of the embodiments. Obviously, the following drawings are only some embodiments of the present application. For those of ordinary skill in the art, other drawings can be obtained based on these drawings without creative efforts.

[0061] Figure 1 It is a schematic flowchart of an embodiment of the intelligent cash box automatic unlocking and locking method of the present application;

[0062] Figure 2 Schematic diagram of another embodiment of the intelligent money box automatic unlocking and locking method of the present application;

[0063] Figure 3 Schematic diagram of another embodiment of the intelligent money box automatic unlocking and locking method of the present application;

[0064] Figure 4 Schematic diagram of another embodiment of the intelligent money box automatic unlocking and locking method of the present application;

[0065] Figure 5 Schematic diagram of another embodiment of the intelligent money box automatic unlocking and locking method of the present application;

[0066] Figure 6 Schematic diagram of another embodiment of the intelligent money box automatic unlocking and locking method of the present application;

[0067] Figure 7 Schematic diagram of another embodiment of the intelligent money box automatic unlocking and locking method of the present application;

[0068] Figure 8 Schematic diagram of an embodiment of the intelligent money box automatic unlocking and locking method device of the present application;

[0069] Figure 9 Schematic diagram of another embodiment of the intelligent money box automatic unlocking and locking method device of the present application. Detailed implementation manners

[0070] The present application provides an intelligent money box automatic unlocking and locking method, device and storage medium, which improve the security of money box use, effectively solve many problems existing in the traditional money box unlocking and locking method, and provide a more secure, reliable and convenient money box management solution for financial institutions.

[0071] Please refer to Figure 1 , an embodiment of an intelligent money box automatic unlocking and locking method provided in the first aspect of the present application includes:

[0072] 101. Receive a money box unlocking request from a user, where the money box unlocking request includes user biometric information;

[0073] 102. Extract a feature summary of the user biometric information, encrypt the feature summary to obtain encrypted data, and then upload the encrypted data to a cloud database;

[0074] 103. Obtain a comparison result between the encrypted data and authorized user feature information in the cloud database. After determining that the user's identity is an authorized identity according to the comparison result, use an encryption algorithm resistant to quantum computing, and combine the geographical location of the money box, the current timestamp and the money box verification information to generate a target key, where the target key is a one-time valid encryption key;

[0075] 104. Unlock the target cash box according to the encryption key, and upload the unlocking time, operator identity information, and environmental parameter information of the target cash box to the blockchain system in real time;

[0076] 105. When receiving the instruction that the user operation is completed, generate a target key according to the number of the cash box and the current timestamp, and the target key is a one-time valid key;

[0077] 106. Lock the cash box according to the target key.

[0078] In the embodiment of the present application, first, a cash box unlocking request from the user is received. The cash box unlocking request includes the user's biometric information. Then, the feature summary of the user's biometric information is extracted. After encrypting the feature summary to obtain encrypted data, the encrypted data is uploaded to the cloud database. Further, the comparison result between the encrypted data and the authorized user feature information in the cloud database is obtained. After determining that the user's identity is an authorized identity according to the comparison result, an encryption algorithm resistant to quantum computing is adopted, and a target key is generated in combination with the geographical location of the cash box, the current timestamp, and the cash box verification information. The target key is a one-time valid encryption key. Then, the target cash box is unlocked according to the encryption key, and the unlocking time, operator identity information, and environmental parameter information of the target cash box are uploaded to the blockchain system in real time. When receiving the instruction that the user operation is completed, a target key is generated according to the number of the cash box and the current timestamp, and the target key is a one-time valid key;

[0079] Finally, the cash box is locked according to the target key.

[0080] In step 101, a cash box unlocking request from the user is received, and the cash box unlocking request includes the user's biometric information. Among them, when the user needs to open the cash box, first, a biometric recognition device on the cash box, such as a fingerprint recognizer, a face recognition camera, an iris scanner, etc., is used to submit an unlocking request. Therefore, the unlocking request contains the user's biometric information, and the biometric information is the unique identifier of the user's identity and is used for subsequent identity verification. When the terminal receives the unlocking request, it will preprocess the biometric information to improve the accuracy of subsequent recognition, and then step 102 is executed.

[0081] In step 102, a feature summary of the user biometric information is extracted. After encrypting the feature summary to obtain encrypted data, the encrypted data is uploaded to the cloud database. Here, the terminal extracts the feature summary from the preprocessed biometric information through a process of converting the biometric information into a simplified and unique representation by means of a hashing algorithm. During the extraction of the feature summary, the uniqueness and stability of the feature summary are ensured, that is, the biometric information of the same user should generate the same summary, while the biometric information of different users should generate different summaries.

[0082] It should be noted that, to protect user privacy and data security, the terminal will encrypt the extracted feature summary, and the encrypted data will be uploaded to the cloud database through a secure channel for comparison with the stored authorized user feature information.

[0083] In step 103, the comparison result between the encrypted data and the authorized user feature information in the cloud database is obtained. After determining that the identity of the user is an authorized identity based on the comparison result, an encryption algorithm resistant to quantum computing is adopted, and a target key is generated in combination with the geographical location of the cash box, the current timestamp, and the cash box verification information. The target key is a one-time valid encryption key.

[0084] In the embodiment of the present application, the cloud database receives the encrypted data uploaded by the terminal and decrypts it using the corresponding decryption algorithm to obtain the feature summary. Then, the cloud database will compare the decrypted feature summary with the stored authorized user feature information and determine whether the identity of the user is an authorized identity through a matching algorithm. If the comparison result shows that the identity of the user is authorized, that is, the biometric information of the user matches the record in the cloud database, then the terminal will continue with the next key generation process.

[0085] The terminal generates a key using an encryption algorithm resistant to quantum computing. During key generation, the terminal combines the geographical location of the cash box, the current timestamp, and the cash box verification information, such as the cash box number, status, verification code, etc. as input parameters. Through these input parameters and the encryption algorithm resistant to quantum computing, the terminal generates a target key, which is one-time valid, that is, it can only be used for one unlocking operation. After generating the target key, step 104 is executed.

[0086] In step 104, the target cash box is unlocked according to the encryption key, and the unlocking time, operator identity information, and environmental parameter information of the target cash box are uploaded to the blockchain system in real time.

[0087] In the embodiment of the present application, after the terminal obtains the target key through step 103, it will use the generated target key to unlock the target cash box, and ensure that only users holding the correct key can open the cash box through the key verification mechanism.

[0088] Meanwhile, in order to record this unlocking operation and ensure the immutability of data, the terminal will upload the unlocking time, operator identity information such as user ID, digest or hash value of biometric information, and environmental parameter information such as temperature, humidity, light intensity, sound level, etc. to the blockchain system in real time. After receiving the above information, the blockchain system will package these information into a block and add the block to the blockchain through the consensus mechanism to ensure the transparency, security and immutability of the data. Through the blockchain system, relevant parties can query and audit the historical records of unlocking operations at any time to ensure the legality and compliance of the operations.

[0089] In step 105, when receiving the instruction that the user operation is completed, a target key is generated according to the number of the cash box and the current timestamp, and the target key is a one-time valid key.

[0090] In the embodiment of the present application, when the user completes the operation in the cash box and needs to close the cash box, the user will submit an instruction that the operation is completed through the operation interface on the cash box. After receiving this instruction, the terminal will verify the validity of the instruction, such as through cryptographic signature, verification code, etc., to ensure that the instruction is issued by a legitimate user. After the verification passes, the terminal will generate a new target key according to the number of the cash box and the current timestamp. The generated target key is also one-time valid and can only be used for one locking operation. The one-time validity is achieved by embedding a timestamp, a random number or an operation history in the target key.

[0091] In step 106, the cash box is locked according to the target key.

[0092] In the embodiment of the present application, after the terminal obtains the target key for locking, it will use the generated target key to lock the cash box, and ensure that only users holding the correct key can close the cash box through the key verification mechanism. After the cash box is successfully locked, the terminal will record the locking time, operator identity information and other relevant information for subsequent query and audit. Then, the terminal will also upload the information of the locking operation to the blockchain system in real time to form a complete operation chain with the information of the unlocking operation to ensure the security and traceability of the use of the cash box.

[0093] Therefore, the intelligent trunk automatic locking and unlocking method of the present application combines biometric recognition, encryption technology, cloud database and blockchain system to achieve the safe and automatic locking and unlocking function of the trunk, and ensures the immutability and traceability of operation records. At the same time, by adopting an encryption algorithm resistant to quantum computing and a one-time valid key generation mechanism, the security and reliability of the trunk locking and unlocking are further improved.

[0094] Please refer to Figure 2 , according to some embodiments of the present invention, after extracting the feature summary of the user biometric information in step 102 and encrypting the feature summary to obtain encrypted data, uploading the encrypted data to the cloud database may specifically include, but is not limited to, the following:

[0095] 201. After converting the user biometric information into a feature summary by using the hash SHA-256 algorithm, encrypt the feature summary by using the quantum key distribution (QKD) algorithm to obtain encrypted data;

[0096] 202. Obtain the unique identification data of the encrypted data;

[0097] 203. Send the unique identification data to the cloud database so that the cloud database determines the data type of the encrypted data according to the unique identification data;

[0098] 204. Obtain the data transmission channel request sent by the cloud database and construct a target data transmission channel according to the data transmission channel request, where the target data transmission channel is a one-time valid transmission channel;

[0099] 205. Transmit the encrypted data to the cloud database through the target data transmission channel.

[0100] In the embodiment of the present application, when extracting the feature summary of the user biometric information, the terminal will use the hash SHA-256 algorithm to process the user biometric information. SHA-256 is a secure hash algorithm that can convert data of any length into a 256-bit fixed-length feature summary. This feature summary is the unique representation of the user biometric information and has irreversibility, that is, it is impossible to restore the user biometric information from the feature summary. Then, the terminal will use the quantum key distribution (QKD) algorithm to encrypt the feature summary. QKD is a key distribution method based on the principles of quantum mechanics, which can ensure the absolute security of the key during transmission. Through the QKD algorithm, the terminal will generate a quantum key and use this quantum key to encrypt the feature summary to obtain encrypted data. The encrypted data is the confidential representation of the feature summary, and only the receiving party holding the corresponding quantum key can decrypt it to obtain the original feature summary.

[0101] After obtaining the encrypted data, the terminal generates a unique identification data for this encrypted data. This unique identification data can be the hash value, serial number of the encrypted data, or other information that can uniquely identify this encrypted data. There is no specific limitation here. The role of the unique identification data is to facilitate the subsequent search and matching of the corresponding encrypted data in the cloud database.

[0102] The terminal sends the generated unique identification data to the cloud database. After receiving the unique identification data, the cloud database determines the data type of the encrypted data according to this identification data. Among them, a mapping table of data type and unique identification data is maintained in the cloud database. By searching this mapping table, the cloud database can determine what type of data the encrypted data belongs to.

[0103] After determining the data type of the encrypted data, the cloud database sends a data transmission channel request to the terminal. This request contains information required to construct the target data transmission channel, such as transmission protocol, port number, encryption method, etc. After receiving the data transmission channel request, the terminal constructs the target data transmission channel according to the information in the request.

[0104] This target data transmission channel is single - use effective, that is, it can only be used for one data transmission operation. The single - use effectiveness can be achieved by embedding a timestamp, random number in the transmission channel or setting the usage period of the transmission channel, etc. Constructing a single - use effective transmission channel can ensure the security and privacy of data transmission. Finally, the terminal transmits the encrypted data to the cloud database through the constructed target data transmission channel. During the transmission process, corresponding encryption methods and protocols are used to ensure the confidentiality and integrity of the data.

[0105] Therefore, in the embodiments of the present application, by combining the hash SHA - 256 algorithm, the quantum key distribution QKD algorithm, and a single - use effective data transmission channel, the secure transmission and storage of user biometric information are realized. By extracting the feature digest through the hash algorithm, the risk of leakage of the original biometric information is reduced. By encrypting the feature digest through the QKD algorithm, the absolute security of the encrypted data during the transmission process is ensured. By constructing a single - use effective data transmission channel, the security and privacy of data transmission are further improved.

[0106] Please refer to Figure 3 , according to some embodiments of the present invention, obtaining the comparison result between the encrypted data and the authorized user feature information in the cloud database, and specifically determining that the identity of the user is an authorized identity according to the comparison result may include, but is not limited to, the following:

[0107] 301. Decrypt the encrypted data to obtain the feature digest;

[0108] 302. Extract the target abstract information from the feature abstract, where the target abstract information is the unique identification information representing the user;

[0109] 303. Use an artificial intelligence model to compare the target abstract information with the authorized user feature information stored in the cloud data and obtain the comparison result;

[0110] 304. Obtain the core score value of the user according to the comparison result;

[0111] 305. When it is determined that the core score value of the user meets the preset score value, then determine the identity of the user as the authorized identity.

[0112] In the embodiment of the present application, after receiving the encrypted data, the terminal will use the quantum key distributed by the QKD algorithm before to decrypt the encrypted data to obtain a feature abstract. The feature abstract is a simplified and unique representation of the user's biometric information and is used for subsequent identity verification and comparison.

[0113] Since the feature abstract contains information in multiple aspects, the terminal needs to extract the target abstract information therein, that is, the unique identification information representing the user. The target abstract information is a part of the feature abstract, such as the feature points of fingerprints, the key features of the face, the texture information of the iris, etc., which are not specifically limited here. These information are unique representations of the user's biometric features and can be used to distinguish different users. It should be noted that the process of extracting the target abstract information ensures the accuracy and integrity of the information for subsequent comparison with the authorized user feature information in the cloud data.

[0114] After extracting the target abstract information, the terminal uses an artificial intelligence model to compare the extracted target abstract information with the authorized user feature information stored in the cloud data.

[0115] Specifically, first, preprocess the target abstract information and the authorized user feature information stored in the cloud. The preprocessing includes data cleaning, formatting, normalization, etc. to ensure the consistency and comparability of the data. For biometric information, feature extraction and encoding are required to convert it into a numerical or vector form that can be processed by the artificial intelligence model.

[0116] Since the biometric information comparison requirement is relatively complex, a deep learning model is used for comparison because the deep learning model can automatically learn the deep features of the data and improve the accuracy of the comparison. After determining the deep learning model, the preprocessed target abstract information and authorized user feature information are used as input data and fed to the deep learning model respectively. The deep learning model will process these two groups of data simultaneously to calculate the similarity or matching degree between them.

[0117] Inside the deep learning model, through calculations and transformations, the input data is mapped to a high-dimensional feature space. In this feature space, the similarity or distance between the target summary information and the feature information of each authorized user is calculated using cosine similarity or Euclidean distance. Based on the calculation results of the similarity or distance, the deep learning model makes a decision to determine whether the target summary information matches the feature information of a certain authorized user, and outputs a comparison result accordingly. That is, based on the comparison result, it can be determined whether the target summary information is consistent with the feature information in the cloud data.

[0118] Among them, the comparison result is a similarity score (a value between 0 and 100). The terminal needs to obtain the core score value of the user based on the comparison result. The core score value is the score after the transformation of this similarity score itself. The core score value is used to represent the matching degree between the user identity and the authorized user features, and is an important basis for subsequent judgment of whether the user identity is legal.

[0119] Specifically, the terminal sets a preset score value as the threshold for judging whether the user identity is legal. When the core score value of the user is equal to or exceeds the preset score value, the terminal determines that the user identity highly matches the authorized user features, and thus determines the user identity as an authorized identity.

[0120] After determining the user identity as an authorized identity, the terminal will perform subsequent unlocking operations or other related operations. If the core score value of the user is lower than the preset score value, the terminal will directly refuse to execute the relevant operations and prompt that the user identity verification fails or other verification methods are required.

[0121] Therefore, in the embodiments of the present application, through steps such as decrypting encrypted data, extracting target summary information, comparing feature information, obtaining the core score value, and judging the user identity, the terminal can accurately and efficiently verify the legitimacy of the user identity, providing security guarantee for subsequent operations.

[0122] Please refer to Figure 4 , according to some embodiments of the present invention, in step 103, an encryption algorithm resistant to quantum computing is adopted, and a target key is generated in combination with the geographical location of the cash box, the current timestamp, and the cash box verification information. The target key is a one-time valid encryption key, which may specifically include, but is not limited to, the following:

[0123] 401. Extract the serial number of the cash box;

[0124] 402. Obtain the cash box number of the cash box according to the serial number;

[0125] 403. Determine the GPS coordinate information of the cash box through the cash box number and generate the current timestamp based on a trusted time source;

[0126] 404. Obtain quantum random numbers based on quantum random generation algorithms;

[0127] 405. Use the NTRU algorithm to generate a target key from the quantum random numbers, the GPS coordinate information of the cash box, the current timestamp, and the serial number of the cash box. The target key is a one-time valid encryption key.

[0128] In the embodiments of the present application, it should be noted that each cash box is assigned a unique serial number during production or factory. This serial number is stored in the electronic device inside the cash box. When unlocking or locking the cash box is required, the terminal will extract the serial number of the cash box through an RFID reader, etc. The serial number, as the unique identifier of the cash box, is the basis for subsequent obtaining of the cash box number, determination of GPS coordinate information, and generation of the target key.

[0129] After the terminal extracts the serial number of the cash box, it will match it with the records in the cloud database or local database. The database stores the corresponding relationship between the serial numbers of all cash boxes and the cash box numbers. The cash box number is an identifier that is easier to identify or manage, such as "XX-YYYY-ZZZZ", where "XX" may represent the area code, "YYYY" represents the year, and "ZZZZ" represents the serial number. By searching in the database through the serial number, the terminal can obtain the corresponding cash box number.

[0130] After the terminal obtains the cash box number, it will further obtain the GPS coordinate information of the cash box. Among them, the GPS coordinate information is obtained by the terminal in real time for the cash box, indicating the accurate position of the cash box in the geographical space. At the same time, the terminal will also generate the current timestamp based on the GPS time signal to ensure the timeliness of the operation.

[0131] Among them, the terminal further obtains quantum random numbers through a quantum random number generator (QRNG). Quantum random numbers have unpredictability and non-replicability, and are the best choice for generating one-time valid encryption keys, which can ensure the randomness and security of the generated keys, making each generated key unique.

[0132] After that, use the NTRU algorithm to generate a target key from the quantum random numbers, the GPS coordinate information of the cash box, the current timestamp, and the serial number of the cash box. The target key is a one-time valid encryption key. Among them, the NTRU algorithm is a polynomial-based public key encryption algorithm, which has fast encryption and decryption speeds and good security. Further, the terminal will use the quantum random numbers, the GPS coordinate information of the cash box, the current timestamp, and the serial number of the cash box as input parameters and perform encryption processing through the NTRU algorithm.

[0133] During the encryption process, these input parameters are transformed into polynomial form and subjected to a series of mathematical operations, ultimately generating a target key. This target key is single-use only, that is, it can only be used for one unlocking operation. The single-use effectiveness is achieved by incorporating time-sensitive and random factors such as timestamps, quantum random numbers, and serial numbers into the key.

[0134] The generated target key is used for subsequent safe deposit box unlocking operations, ensuring that only users holding the target key can operate on the safe deposit box. At the same time, since the key is single-use only, even if the key is leaked or intercepted, it cannot be used for other operations, thereby enhancing the security of the safe deposit box.

[0135] Please refer to Figure 5 , according to some embodiments of the present invention, in step 104, unlocking the target safe deposit box according to the encryption key and uploading the unlocking time, operator identity information, and environmental parameter information of the target safe deposit box to the blockchain system in real time may specifically include, but are not limited to, the following:

[0136] 501. Obtain the key unlocking permission instruction of the encryption key;

[0137] 502. Unlock the target safe deposit box according to the key unlocking permission instruction and feedback the unlocking status;

[0138] 503. When it is determined that the unlocking status is successful unlocking, after digitally signing and verifying the unlocking time, operator ID, and environmental parameters of the safe deposit box, upload them to the blockchain system.

[0139] In the embodiments of the present application, to obtain the key unlocking permission instruction of the encryption key, specifically, when a user needs to unlock a target safe deposit box, the terminal generates a key unlocking permission instruction according to the encryption key. This instruction contains the user's identity verification information, operation request, and relevant authorization information.

[0140] This permission instruction can be transmitted to the safe deposit box through a secure communication channel. After receiving the key unlocking permission instruction, the terminal will conduct strict verification on it, including verifying the format, integrity, source of the instruction, and whether the included authorization information is legal. If the permission instruction passes the verification, the terminal will continue to perform the subsequent unlocking operation. If the verification fails, the terminal will reject the execution of the instruction and trigger a security alarm or record an abnormal event.

[0141] The terminal will unlock the target safe deposit box according to the verified key unlocking permission instruction and use the previously generated encryption key. During the unlocking process, an unlocking signal will be sent to the electronic lock control system of the safe deposit box to drive the lock mechanism to open the box door. After performing the unlocking operation, the terminal will monitor the unlocking status in real time, which can be achieved through the door lock status sensor inside the safe deposit box.

[0142] If the money box is successfully opened, the terminal will generate a status feedback of successful unlocking and display this feedback to the user through the user interface. If the unlocking fails, the terminal will generate a corresponding error message and trigger a troubleshooting or repair process.

[0143] After receiving the status feedback of successful unlocking, the terminal will further confirm the unlocking status, which can be completed by querying the internal status sensor of the money box again or waiting for the user to confirm successful unlocking. After that, the terminal will collect and record the unlocking time, the operator's ID (and environmental parameters). These information will be organized into a structured data format. To ensure the integrity and immutability of the data, the terminal will perform a digital signature verification on the collected unlocking information. If the digital signature verification passes, it means the information has not been tampered with during transmission and can be uploaded to the blockchain system.

[0144] Finally, the unlocking information after digital signature verification will be uploaded to the blockchain system. The blockchain system will record this information in the form of blocks and ensure the transparency, security, and immutability of the data through the consensus mechanism. Through the blockchain system, relevant parties can query and audit the historical records of unlocking operations at any time, providing strong support for the security management and responsibility tracing of the money box.

[0145] Please refer to Figure 6 According to some embodiments of the present invention, in step 105, after receiving the instruction that the user operation is completed, a target key is generated according to the number of the money box and the current timestamp. The target key is a one-time valid key and specifically may include, but is not limited to, the following:

[0146] 601. After receiving the instruction that the user operation is completed, determine whether the unlocking record of the money box exists;

[0147] 602. If so, generate the target key based on the number of the money box through the quantum random number algorithm;

[0148] 603. After uploading the target key to the cloud database, mark the status of the money box as the pending use status and destroy the original key of the money box.

[0149] In the embodiment of the present application, when the user completes the operation in the money box and is ready to close the money box, the user submits an instruction of operation completion to the terminal through the operation interface on the money box, the remote control device, or the mobile device application. After receiving this instruction, the terminal will first perform a validity verification of the instruction to ensure that the instruction is issued by a legitimate user and is associated with the current money box operation.

[0150] Next, the terminal will query the unlocking record of the cash box to confirm whether the cash box has been successfully opened. If the unlocking record exists, it indicates that the cash box has been opened, and now the user is completing the operation and preparing to close the cash box. Then the terminal will continue with the next step of target key generation and status update process. If the unlocking record does not exist, the terminal will trigger an alarm or notify the management personnel because this means there is an unauthorized attempt to close the cash box or the status of the cash box is abnormal.

[0151] After confirming the existence of the unlocking record of the cash box, the terminal will generate a target key based on the number of the cash box. The number of the cash box is unique and is used to identify a specific cash box. The terminal will use this number as one of the input parameters for the key generation process. To enhance the security and unpredictability of the key, the terminal adopts a quantum random number algorithm to generate the target key. The quantum random number algorithm uses the principles of quantum mechanics to generate truly random numbers. These random numbers have extremely high randomness and unpredictability, making the generated target key almost impossible to be cracked. By combining the cash box number and the quantum random number algorithm, the terminal will generate a unique and secure target key for subsequent locking operations.

[0152] After generating the target key, the terminal will upload this key to the cloud database for storage. The cloud database will adopt access control and encrypted storage measures to ensure the security of the key. After uploading the key, the terminal will update the status information of the cash box. Specifically, the terminal will mark the status of the cash box as "ready for use", indicating that the cash box has been closed and is ready for the next user to use.

[0153] At the same time, to further enhance security, the terminal will destroy the original key of the cash box. The original key was generated during the unlocking process to ensure that only authorized users can open the cash box. Now, since the user has completed the operation and the cash box has been closed, the original key is no longer needed. Therefore, the terminal will destroy it. Although it is a one-time valid key, by destroying it, the potential risk of key leakage can be further prevented.

[0154] Therefore, in the embodiment of the present application, the key management and status update process after the user completes the operation of the cash box is realized. By judging the existence of the unlocking record, generating a new target key, uploading the key to the cloud database, updating the status of the cash box, and destroying the original key, the terminal ensures the security and traceability of the use of the cash box, and at the same time prevents the potential risk of key leakage.

[0155] Please refer to Figure 7 , according to some embodiments of the present invention, the locking process of the cash box according to the target key in step 106 may specifically include, but is not limited to, the following:

[0156] 701. After obtaining the target key, determine whether the target key is within the valid period;

[0157] 702. If so, perform the lock-up process on the cash box according to the target key, and upload the lock-up time and the operator ID to the cloud database for storage.

[0158] In the embodiment of the present application, after the terminal successfully generates or retrieves the target key, the next step is to verify the validity of this key because in some cases, the target key has a specific validity period, and after this period, the target key will no longer be accepted as a valid authentication means.

[0159] Therefore, the terminal will check the validity period information attached to the target key. If the target key is within the valid period, the terminal will continue with the lock-up process. If the target key has expired or is invalid, the terminal will reject the lock-up operation and notify the operator or the manager. Through this operation, it can effectively prevent the use of expired or invalid keys for insecure operations, thus protecting the safety of the cash box.

[0160] After the terminal uses the key to perform the lock-up process on the cash box, the terminal will record the relevant information of the lock-up operation, including the lock-up time and the operator ID who performs the lock-up operation. These information are key audit and tracking data, which can be used for subsequent security reviews or problem investigations.

[0161] Finally, the terminal will upload this information to the cloud database for storage. The cloud database provides reliable data storage and access services, which can ensure the integrity and traceability of this information. By saving the lock-up time and the operator ID, the terminal can provide a complete operation history record for subsequent query.

[0162] Therefore, the embodiment of the present application ensures the security and traceability of the cash box lock-up process by judging the validity of the key, performing the lock-up operation and recording the relevant information, providing a strong guarantee for the use of the cash box.

[0163] Please refer to Figure 8 , the second aspect of the present application provides an intelligent cash box automatic locking and unlocking device, including:

[0164] A receiving unit 801, configured to receive a cash box unlocking request from a user, where the cash box unlocking request includes user biometric information;

[0165] An extraction unit 802, configured to extract a feature summary of the user biometric information, encrypt the feature summary to obtain encrypted data, and then upload the encrypted data to the cloud database;

[0166] The first generation unit 803 is configured to obtain the comparison result between the encrypted data and the authorized user feature information in the cloud database. After determining that the identity of the user is an authorized identity according to the comparison result, an encryption algorithm resistant to quantum computing is adopted, and a target key is generated in combination with the geographical location of the cash box, the current timestamp, and the cash box verification information. The target key is a one-time valid encryption key;

[0167] The unlocking unit 804 is configured to perform an unlocking process on the target cash box according to the encryption key, and upload the unlocking time, the operator's identity information, and the environmental parameter information of the target cash box to the blockchain system in real time;

[0168] The second generation unit 805 is configured to, when receiving an instruction that the user operation is completed, generate a target key according to the number of the cash box and the current timestamp, and then upload it to the cloud database. The target key is a one-time valid key;

[0169] The locking unit 806 is configured to perform a locking process on the cash box according to the target key

[0170] Please refer to Figure 9 This application also provides an intelligent cash box automatic opening and closing device, including:

[0171] A processor 901, a memory 902, an input / output unit 903, and a bus 904;

[0172] The processor 901 is connected to the memory 902, the input / output unit 903, and the bus 904;

[0173] The memory 902 stores a program, and the processor 901 calls the program to execute any of the above methods.

[0174] This application also relates to a computer-readable storage medium, on which a program is stored. When the program runs on a computer, the computer is caused to execute any of the above methods.

[0175] Those skilled in the art can clearly understand that for the convenience and simplicity of description, the specific working processes of the above-described system, device, and unit can refer to the corresponding processes in the foregoing method embodiments, and will not be elaborated herein.

[0176] This application also relates to a computer-readable storage medium, on which a program is stored. When the program runs on a computer, the computer is caused to execute the method described in the first aspect and any item in the first aspect.

[0177] Those skilled in the art can clearly understand that for the convenience and brevity of description, the specific working processes of the systems, devices, and units described above can refer to the corresponding processes in the foregoing method embodiments and will not be elaborated herein.

[0178] In several embodiments provided in the present application, it should be understood that the disclosed systems, devices, and methods can be implemented in other ways. For example, the device embodiments described above are merely illustrative. For example, the division of units is only a logical function division, and there can be other division methods in actual implementation. For example, multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the displayed or discussed couplings or direct couplings or communication connections between each other can be through some interfaces, and the indirect couplings or communication connections of devices or units can be in electrical, mechanical, or other forms.

[0179] The units described as separate components may or may not be physically separated, and the components displayed as units may or may not be physical units, that is, they can be located in one place or distributed to multiple network units. Some or all of the units can be selected according to actual needs to achieve the purpose of the solution of this embodiment.

[0180] In addition, each functional unit in various embodiments of the present application can be integrated into one processing unit, or each unit can exist physically alone, or two or more units can be integrated into one unit. The above-mentioned integrated units can be implemented in the form of hardware or in the form of software functional units.

[0181] If the integrated unit is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on such an understanding, the technical solution of the present application, in essence, or the part that contributes to the prior art, or all or part of this technical solution, can be embodied in the form of a software product. This computer software product is stored in a storage medium and includes several instructions for causing a computer device (which can be a personal computer, a server, or a network device, etc.) to execute all or part of the steps of the methods in various embodiments of the present application. The foregoing storage medium includes: various media such as USB flash drives, mobile hard disks, read-only memories (ROMs), random access memories (RAMs), magnetic disks, or optical discs that can store program codes.

Claims

1. A method for automatically opening and closing a smart box, characterized in that: The method comprises: receiving a cash box unlocking request from a user, wherein the cash box unlocking request includes biometric information of the user; Extracting a feature summary of the user's biometric information, encrypting the feature summary to obtain encrypted data, and uploading the encrypted data to a cloud database; Obtain the comparison result between the encrypted data and the authorized user feature information in the cloud database. After determining that the user's identity is an authorized identity based on the comparison result, use an encryption algorithm that resists quantum computing and combine the geographic location of the cash box, the current timestamp, and the cash box verification information to generate a target key. The target key is a one-time encryption key. Unlock the target cash box according to the encryption key, and upload the unlocking time, operator identity information and environmental parameter information of the target cash box to the blockchain system in real time; After receiving the instruction of the user's operation completion, a target key is generated according to the number of the cash box and the current timestamp, and the target key is a single-time valid key; The cash box is locked according to the target key.

2. The method for automatically opening and closing a smart cash box according to claim 1, characterized in that: Extracting a feature summary of the user's biometric information, encrypting the feature summary to obtain encrypted data, and uploading the encrypted data to a cloud database, including: After converting the user biometric information into a feature summary using a hash SHA-256 algorithm, the feature summary is encrypted using a quantum key distribution QKD algorithm to obtain encrypted data; Obtaining unique identification data of the encrypted data; Sending the unique identification data to the cloud database, so that the cloud database determines the data type of the encrypted data according to the unique identification data; Obtaining a data transmission channel request sent by the cloud database, and constructing a target data transmission channel according to the data transmission channel request, wherein the target data transmission channel is a single valid transmission channel; The encrypted data is transmitted to the cloud database through the target data transmission channel.

3. The method for automatically opening and closing a smart cash box according to claim 2, characterized in that: Obtaining a comparison result between the encrypted data and the authorized user feature information in the cloud database, and determining that the user's identity is an authorized identity according to the comparison result, including: decrypting the encrypted data to obtain the feature summary; Extracting target summary information from the feature summary, where the target summary information is unique identification information representing the user; Using an artificial intelligence model, the target summary information is compared with the authorized user feature information stored in the cloud data, and a comparison result is obtained; Obtaining a core rating value of the user according to the comparison result; When it is determined that the core score value of the user meets the preset score value, the identity of the user is determined to be an authorized identity.

4. The method for automatically opening and closing a smart cash box according to claim 1, characterized in that: A quantum computing-resistant encryption algorithm is used, and a target key is generated by combining the cash box's geographic location, current timestamp, and cash box verification information. The target key is a one-time encryption key, including: Extract the serial number of the cash box; Obtaining the cash box number of the cash box according to the serial number; Determine the GPS coordinate information of the cash box through the cash box number and generate a current timestamp based on a trusted time source; Obtain quantum random numbers based on quantum random generation algorithm; The NTRU algorithm is used to generate a target key from the quantum random number, the GPS coordinate information of the cash box, the current timestamp and the serial number of the cash box. The target key is a one-time encryption key.

5. The method for automatically opening and locking a smart cash box according to claim 1, characterized in that: Unlocking the target cash box according to the encryption key, and uploading the unlocking time, operator identity information and environmental parameter information of the target cash box to the blockchain system in real time includes: Obtaining a key unlocking authority instruction for the encryption key; Unlock the target cash box according to the key unlocking authority instruction and feedback the unlocking status; When it is determined that the unlocking status is successfully unlocked, the unlocking time, operator ID, and environmental parameters of the cash box are digitally signed and verified and then uploaded to the blockchain system.

6. The method for automatically opening and closing a smart cash box according to claim 1, characterized in that: After receiving the instruction of the user's operation completion, a target key is generated according to the number of the cash box and the current timestamp. The target key is a single-use key, including: After receiving the instruction of the user's operation completion, determining whether there is an unlocking record of the cash box; If yes, then based on the serial number of the cash box, the target key is generated by a quantum random number algorithm; After uploading the target key to the cloud database, the state of the cash box is marked as a waiting-for-use state, and the original key of the cash box is destroyed.

7. The method for automatically opening and locking a smart cash box according to claim 1, characterized in that: The cash box is locked according to the target key, including: After obtaining the target key, determining whether the target key is within the validity period; If yes, the cash box is locked according to the target key, and the locking time and operator ID are uploaded to the cloud database for storage.

8. An intelligent automatic opening and locking device for a box, characterized in that: include: A receiving unit, configured to receive a cash box unlocking request from a user, wherein the cash box unlocking request includes user biometric information; An extraction unit, used for extracting a feature summary of the user's biometric information, encrypting the feature summary to obtain encrypted data, and uploading the encrypted data to a cloud database; A first generating unit is used to obtain a comparison result between the encrypted data and the authorized user feature information in the cloud database, and after determining that the identity of the user is an authorized identity according to the comparison result, an encryption algorithm resistant to quantum computing is used, and a target key is generated in combination with the geographic location of the cash box, the current timestamp and the cash box verification information, wherein the target key is a one-time encryption key; An unlocking unit, used to unlock the target cash box according to the encryption key, and upload the unlocking time, operator identity information and environmental parameter information of the target cash box to the blockchain system in real time; The second generating unit is used to generate a target key according to the number of the cash box and the current timestamp after receiving the instruction of the user's operation completion, and then upload it to the cloud database, wherein the target key is a single-time valid key; A locking unit is used to lock the cash box according to the target key.

9. An intelligent automatic switch device for a box, characterized in that: The device comprises: processor, memory, input-output unit, and bus; The processor is connected to the storage, the input and output unit, and the bus; The storage stores a program, and the processor calls the program to execute the method according to any one of claims 1 to 7.

10. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores a program, and when the program is executed on a computer, the method according to any one of claims 1 to 7 is performed.

Images