Access control authentication method, device, equipment, medium and product

Abstract

The invention discloses an access control authentication method, device and equipment, a medium and a product. The method is applied to the field of the Internet of Things and comprises the steps that an authenticated user identity data set is obtained, cache queues are generated according to the authenticated user identity data set, and the authenticated user identity data set is collected by a multi-antenna card; obtaining a to-be-authenticated code element data set, and generating an update queue according to the to-be-authenticated code element data set and each cache queue; and determining an access authentication result corresponding to the to-be-authenticated code element data set according to each update queue. By constructing the cache queue, the identity data collected by the multi-antenna card can be effectively sorted and classified, and the efficiency and accuracy of data processing are improved. By adopting the multi-antenna card, the communication rate can be improved, and the updating queue is generated by combining the existing cache queue and the new to-be-authenticated data, so that the dynamic updating and integration of the data are realized. Whether the user has the authority to pass the access control or not can be quickly and accurately judged, and the safety and response speed of the access control system are improved.

Description

Technical Field

[0001] The present invention relates to the technical field of Internet of Things, and in particular to a door access authentication method, device, equipment, medium and product. Background Art

[0002] IoT devices are already widely present in our lives, including in the banking industry, where IC card access control systems are installed in important places such as computer rooms, vaults, savings cabinets, and safes. As an important participant and contributor in promoting global sustainable development and climate change governance, the banking industry shoulders the responsibility of sustainable development. How to effectively reduce resource consumption and achieve green environmental protection is crucial.

[0003] At present, the Internet of Things communication technologies used in IC card access control systems all use active radio frequency units to communicate with IC cards by transmitting specific carrier signals. They have high power consumption, low spectrum utilization, and cannot achieve the reuse of resources. Summary of the invention

[0004] The present invention provides a door access authentication method, device, equipment, medium and product to improve the communication rate and reduce the bit error rate of the door access authentication signal.

[0005] According to one aspect of the present invention, a door access authentication method is provided, the method comprising:

[0006] Acquire an authentication user identity data set, and generate each cache queue according to the authentication user identity data set, wherein the authentication user identity data set is collected by a multi-antenna card;

[0007] Obtain a data set of code elements to be authenticated, and generate an update queue according to the data set of code elements to be authenticated and each cache queue;

[0008] The access control authentication result corresponding to the to-be-authenticated code element data set is determined according to each update queue.

[0009] Optionally, each cache queue is generated according to the authentication user identity data, including: clustering the authentication user identity data to generate each cluster set; using the average value algorithm to calculate the initial cluster center corresponding to each cluster set; creating an initial queue, and storing each initial cluster center in the corresponding initial queue to generate each cache queue.

[0010] Optionally, an update queue is generated based on the code element data set to be authenticated and each cache queue, including: taking each code element data in the code element data set to be authenticated as target data in turn, and determining the code element number corresponding to the target data; judging whether the code element number reaches a preset number threshold, and if so, outputting each cache queue as each update queue; otherwise, determining the target queue corresponding to the target data from each cache queue, and storing the target data in the target queue.

[0011] Optionally, determining a target queue corresponding to the target data from each cache queue includes: calculating a queue cluster center corresponding to each cache queue; determining a Euclidean metric value of the target data and each queue cluster center; when the metric value is less than a preset metric value, taking the cache queue where the queue cluster center is located as the target queue.

[0012] Optionally, storing the target data into the target queue includes: determining whether the target queue is full, if so, deleting the head data of the target queue and storing the target data at the end of the target queue; otherwise, directly storing the target data at the end of the target queue.

[0013] Optionally, the access control authentication result corresponding to the code element data set to be authenticated is determined according to each update queue, including: determining the update cluster center corresponding to each update queue, and generating a decoding value according to each update cluster center; judging whether the decoding value meets the preset authentication conditions, and if so, determining that the access control authentication result is a successful authentication; otherwise, determining that the access control authentication result is a failed authentication.

[0014] According to another aspect of the present invention, there is provided a door access authentication device, the device comprising:

[0015] A cache queue generation module is used to obtain an authentication user identity data set and generate each cache queue according to the authentication user identity data set;

[0016] An update queue generation module is used to obtain a data set of code elements to be authenticated, and to generate an update queue according to the data set of code elements to be authenticated and each cache queue;

[0017] The access control authentication result determination module is used to determine the access control authentication result corresponding to the to-be-authenticated code element data set according to each update queue.

[0018] According to another aspect of the present invention, an electronic device is provided, the electronic device comprising:

[0019] at least one processor;

[0020] and a memory communicatively coupled to the at least one processor;

[0021] The memory stores a computer program that can be executed by the at least one processor, and the computer program is executed by the at least one processor so that the at least one processor can execute a door access authentication method described in any embodiment of the present invention.

[0022] According to another aspect of the present invention, a computer-readable storage medium is provided, wherein the computer-readable storage medium stores computer instructions, and the computer instructions are used to enable a processor to implement a door access authentication method described in any embodiment of the present invention when executed.

[0023] According to another aspect of the present invention, a computer program product is provided. The computer program product includes a computer program. When the computer program is executed by a processor, the access control authentication method according to any embodiment of the present invention is implemented.

[0024] The technical solution of the embodiment of the present invention can effectively organize and classify the identity data collected by the multi-antenna card by constructing a cache queue, thereby improving the efficiency and accuracy of data processing. The use of multi-antenna cards can increase the communication rate, and by combining the existing cache queue and the new data to be authenticated, an update queue is generated, thereby realizing dynamic update and integration of data. It can quickly and accurately determine whether the user has the authority to pass through the access control, thereby improving the security and response speed of the access control system.

[0025] It should be understood that the contents described in this section are not intended to identify the key or important features of the embodiments of the present invention, nor are they intended to limit the scope of the present invention. Other features of the present invention will become easily understood through the following description. BRIEF DESCRIPTION OF THE DRAWINGS

[0026] In order to more clearly illustrate the technical solutions in the embodiments of the present invention, the following briefly introduces the drawings required for use in the description of the embodiments. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without creative work.

[0027] Figure 1 is a flow chart of a door access authentication method provided according to Embodiment 1 of the present invention;

[0028] Figure 2 This is a schematic diagram of a backscatter communication model for a multi-antenna card environment provided according to Embodiment 1 of the present invention;

[0029] Figure 3 is a flow chart of another access control authentication method provided according to the second embodiment of the present invention;

[0030] Figure 4 is a schematic diagram of the structure of a door access authentication device provided according to Embodiment 3 of the present invention;

[0031] Figure 5 It is a structural schematic diagram of an electronic device for implementing a door access authentication method according to an embodiment of the present invention. DETAILED DESCRIPTION

[0032] In order to enable those skilled in the art to better understand the scheme of the present invention, the technical scheme in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work should fall within the scope of protection of the present invention.

[0033] It should be noted that the terms "first", "second", etc. in the specification and claims of the present invention and the above-mentioned drawings are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence. It should be understood that the data used in this way can be interchanged where appropriate, so that the embodiments of the present invention described herein can be implemented in an order other than those illustrated or described herein. In addition, the terms "including" and "having" and any variations thereof are intended to cover non-exclusive inclusions, for example, a process, method, system, product or device that includes a series of steps or units is not necessarily limited to those steps or units that are clearly listed, but may include other steps or units that are not clearly listed or inherent to these processes, methods, products or devices.

[0034] Embodiment 1

[0035] Figure 1 A flow chart of a door access authentication method is provided for the first embodiment of the present invention. This embodiment is applicable to door access management scenarios. The method can be executed by a door access authentication device. The door access authentication device can be implemented in the form of hardware and / or software. The door access authentication device can be configured in a computer controller. Figure 1 As shown, the method includes:

[0036] S110, obtaining an authentication user identity data set, and generating various cache queues according to the authentication user identity data set, wherein the authentication user identity data set is collected by a multi-antenna card.

[0037] Among them, the authentication user identity data set includes various related data sets that can confirm the identity of the legitimate user, such as fingerprint feature data, facial feature data, identity code and other different dimensions that can identify the uniqueness of the user. It is the basic data source for subsequent identity comparison and verification. The cache queue refers to the data storage structure formed after processing the authentication user identity data, in which different types of identity feature data are classified and stored according to clustering and other methods, which is convenient for subsequent association operations with the data to be authenticated and orderly management and call of data in the authentication process. The multi-antenna card has at least 3 antennas and is a small device with multiple antennas. The multi-antenna card adopts backscatter communication mode and uses the radio frequency signal in the environment as a carrier. When receiving the signal from the radio frequency source, it does not amplify and forward the signal like traditional communication equipment, but modulates the signal by changing the reflection characteristics of its own antenna to reflect the identity authentication information stored in itself. The multi-antenna card can interact with external radio frequency sources and receivers through the antenna, and use one of the antennas to obtain energy from the environmental radio frequency signal to maintain its own operation.

[0038] For example, if the authentication user identity data set is based on a combination of multiple biometric features, a cache queue may be generated based on the fingerprint feature, and the feature data extracted from different angles and different resolutions related to the user's fingerprint will be stored in sequence; for facial features, another cache queue is generated to store data such as facial features, facial contour features, etc. Each cache queue is equivalent to a storage collection for a certain type of identity identification feature, which is convenient for subsequent comparison and analysis operations.

[0039] In a specific implementation, when a user holds a multi-antenna card close to the receiver corresponding to the access control system, the radio frequency signal emitted by the radio frequency source is first transmitted to the card. After the antenna of the card receives the radio frequency signal, it modulates the authentication user identity related information stored in itself onto the reflected signal through the backscatter communication mechanism, and then sends it to the receiver. For example, the card stores basic authentication information such as the user's name, employee number, user authority level, etc., which constitutes an authentication user identity data set. The authentication user identity data set is modulated by the card antenna and transmitted through the channel, and is finally accurately received by the receiver.

[0040] S120, obtaining a set of code element data to be authenticated, and generating an update queue according to the set of code element data to be authenticated and each cache queue.

[0041] Among them, the unauthenticated code element data set refers to the data set that needs to be verified when the access control verification is currently being performed. It may be data obtained by swiping a card, scanning an ID card, collecting biometrics again, etc. After conversion and other processing, it exists in the form of code element data for comparison and analysis with existing authentication user-related data. The update queue refers to a new data queue formed by combining the unauthenticated code element data set with the previously generated cache queues, which incorporates the unauthenticated data information and is used to further determine the final access control authentication result. It is an important intermediate data form between the cache queue and the final authentication result determination.

[0042] Optionally, an update queue is generated based on the code element data set to be authenticated and each cache queue, including: taking each code element data in the code element data set to be authenticated as target data in turn, and determining the code element number corresponding to the target data; judging whether the code element number reaches a preset number threshold, and if so, outputting each cache queue as each update queue; otherwise, determining the target queue corresponding to the target data from each cache queue, and storing the target data in the target queue.

[0043] Among them, the data set of code elements to be authenticated is often composed of multiple discrete code element data, and the code element data comes from the user verification information collected by the current access control device, such as a string of encrypted digital code elements obtained by swiping a card, code elements after the coded information obtained by scanning a document is disassembled according to certain rules, etc. In order to process them in an orderly manner and perform subsequent associated operations with the cache queue, the controller will extract the code element data one by one as the target data, and at the same time determine the code element number for them, so as to know which code element data is currently being processed. For example, they are assigned natural number numbers starting from 1 in order of their order in the data set, so that each code element data can have a unique number corresponding to it, which is convenient for the subsequent process to operate accurately according to the number.

[0044] Specifically, when the code element data is processed in sequence and its number reaches the preset number threshold, it indicates that the entire code element data set to be authenticated has undergone relevant preliminary judgment and other operations. At this time, each cache queue can be directly output as each update queue, because after the code element data is stored in the corresponding cache queue and other operations are completed, the cache queue has been integrated with the information to be authenticated. At this time, they are directly output as update queues, and the next step of determining the final access control authentication result based on the update queue can be entered. If the code element number has not reached the preset number threshold, it indicates that there is still code element data in the code element data set to be authenticated that has not been processed. Since different code element data often corresponds to different types of user identity features, it is necessary to find the target queue corresponding to the current target data from each cache queue. Then store the target data in the target queue, so that the target queue continuously integrates new code element data to be authenticated and continuously updates its content. Subsequently, the access control authentication result is comprehensively determined based on the continuously updated cache queue.

[0045] Optionally, determining a target queue corresponding to the target data from each cache queue includes: calculating a queue cluster center corresponding to each cache queue; determining a Euclidean metric value of the target data and each queue cluster center; when the metric value is less than a preset metric value, taking the cache queue where the queue cluster center is located as the target queue.

[0046] Among them, calculating the queue cluster center is to comprehensively process the existing data in the cache queue to obtain a more representative description of the center position. For example, using the average value algorithm, the data of each feature dimension in the cache queue is summed up and then divided by the total amount of data to obtain the average value of each dimension, which constitutes the queue cluster center corresponding to the cache queue. Among them, the Euclidean metric value is also the Euclidean distance, which is used to measure the distance between two points in a multidimensional space. In this embodiment, the target data can be regarded as a point in a multidimensional space, and its various dimensions are different attribute values ​​contained in the symbol data; and each queue cluster center can also be regarded as a point in a multidimensional space. By calculating the mathematical formula of the Euclidean distance, the square root operation of the sum of the squares of the differences between the target data and the queue cluster centers corresponding to each cache queue in each dimension is performed, and the distance value between them is obtained, that is, the Euclidean metric value. Through the Euclidean metric value, the similarity between the target data and the features represented by each cache queue can be intuitively reflected. The closer the distance means the higher the similarity.

[0047] Specifically, the preset metric value is a distance judgment standard that is set in advance. When the calculated Euclidean metric value between the target data and the queue cluster center of a cache queue is less than the preset metric value, it means that the target data is very close to the user identity characteristics represented by the cache queue and is within a reasonable similarity range. Therefore, the controller can identify the cache queue where the queue cluster center is located as the target queue. In addition, it can be determined that the target data is most likely data related to the identity characteristics corresponding to the cache queue. Subsequently, the target data can be stored in the target queue, and the queue content can be further updated, thereby continuously improving the data foundation for the final accurate judgment of the access control authentication result.

[0048] Optionally, storing the target data into the target queue includes: determining whether the target queue is full, if so, deleting the head data of the target queue and storing the target data at the end of the target queue; otherwise, directly storing the target data at the end of the target queue.

[0049] It is known that the target queue, as a container for storing data, has limited storage space. In order to make reasonable use of system resources and ensure data processing efficiency, the upper limit of the amount of data that can be accommodated is often pre-set. By counting the number of data currently stored in the target queue and then comparing it with the preset maximum storage capacity, it can be determined whether the target queue is full. For example, the target queue is set to store a maximum of 100 data elements. When statistics show that 100 data have been stored in it, the target queue is determined to be full; if the number of stored data is less than 100, the target queue is determined to be not full.

[0050] Specifically, when the target queue is full, in order to continue to store new target data, the data in the queue needs to be adjusted. The method of deleting the head data is adopted because the data structure corresponding to the queue follows the first-in-first-out principle. The data at the head of the queue is stored first, and its timeliness may be slightly weaker at the current stage, so it is removed first to make room. Then the target data is stored at the end of the target queue, which ensures the orderliness and continuous update of the queue structure, so that when the target queue is used to compare with other data in the future, it can always be based on the latest data that complies with the queue storage rules, so as to maintain the consistency and effectiveness of data processing in the entire access control authentication process. If it is determined that the target queue is not full, there is no need to delete the head data, and the target data can be directly stored at the end of the target queue. By arranging the new data after the existing data in sequence, it can not only ensure the orderly storage of data, but also continuously enrich the data content in the target queue, so as to facilitate the subsequent comprehensive judgment of the access control authentication results based on the continuously updated target queue, and gradually promote the entire access control authentication process.

[0051] S130. Determine the access control authentication result corresponding to the to-be-authenticated code element data set according to each update queue.

[0052] Among them, the access control authentication result refers to the final judgment conclusion obtained after the entire access control authentication process, including "authentication success" and "authentication failure". "Authentication success" means that passage is allowed, and "authentication failure" means that passage is not allowed.

[0053] Specifically, each update queue contains key information after the fusion of the original feature data of the authenticated user and the current code element data to be authenticated. Through the set judgment rules, such as similarity threshold judgment, if the data in the update queue is analyzed and calculated, the similarity between the code element to be authenticated and the feature data of the legitimate user in the cache queue exceeds the pre-set ratio threshold, such as the fingerprint feature matching degree reaches more than 90%, etc., it can be determined that the authentication is passed, and the corresponding access control authentication result is to allow passage; on the contrary, if the matching degree of each feature is lower than the corresponding threshold, it is determined that the authentication fails, the access control remains closed, and passage is not allowed, so as to accurately determine whether the access control corresponding to the code element data set to be authenticated should be released or blocked.

[0054] Optionally, the access control authentication result corresponding to the code element data set to be authenticated is determined according to each update queue, including: determining the update cluster center corresponding to each update queue, and generating a decoding value according to each update cluster center; judging whether the decoding value meets the preset authentication conditions, and if so, determining that the access control authentication result is a successful authentication; otherwise, determining that the access control authentication result is a failed authentication.

[0055] Among them, the update queue is formed after the metadata of the code to be authenticated is integrated into the cache queue. The principle of determining the update cluster center is similar to the previous calculation of the queue cluster center of the cache queue. The method of finding the average value of the data is also used to obtain the typical data point that can represent the overall characteristics of the update queue, that is, the update cluster center. The update cluster center comprehensively reflects the centralized trend of the user identity characteristics represented by the original cache queue and the newly added metadata of the code to be authenticated, providing basic data for the subsequent generation of decoding values.

[0056] Specifically, each update cluster center contains multi-dimensional data information, and generating a decoding value is to integrate and convert the multi-dimensional information according to specific algorithm rules. For example, the data of different dimensions of the update cluster center may be weighted and summed according to a pre-set weight, or the data may be converted into a value in a specific range as a decoding value through a specific function mapping relationship. The decoding value is equivalent to the result obtained after refining the complex data carried by the update queue, and its purpose is to be able to compare and judge with the preset authentication conditions more intuitively. The preset authentication conditions are the standards determined at the beginning of the construction of the access control authentication system based on the analysis of the characteristics of the legal user identity data, a large amount of test data, and security requirements. When the decoding value generated by the previous steps is compared with the preset authentication conditions, if the decoding value falls within the reasonable range specified by the preset authentication conditions, such as the numerical value of the decoding value, the numerical interval, or the satisfaction of a specific logical relationship, it indicates that the user identity represented by the current authentication code element data set is sufficiently matched with the legal user identity, so the access control authentication result is determined to be successful, that is, the user is allowed to pass the access control. If the decoded value does not meet the preset authentication conditions, it means that the user identity corresponding to the code element data set to be authenticated does not meet the characteristic requirements of a legitimate user. At this time, the access control authentication result is determined to be an authentication failure, and the access control will remain closed, preventing the user from passing.

[0057] Specific application scenarios: Figure 2 A schematic diagram of a multi-antenna card environment backscatter communication model provided in the first embodiment of the present invention includes a radio frequency source in an environment (such as a wireless network base station, a TV tower, etc.), a card (Tag) with three antennas, and a receiver (reader). The card has three antennas, antenna 1 and antenna 2 are used to communicate with the receiver. Since multiple antennas communicate simultaneously, their energy consumption is high, so a single antenna is required to collect energy from the environment, so that antenna 3 is responsible for obtaining energy from the environment. The channel response between the radio frequency signal source and the multi-antenna card antenna 1 is l1, the channel response between the radio frequency signal source and the multi-antenna card antenna 2 is l2, the channel response between the radio frequency signal source and the receiver is h, the channel response between the multi-antenna card antenna 1 and the receiver is g1, the channel response between the multi-antenna card antenna 2 and the receiver is g2, the power reflection coefficient of the multi-antenna card antenna 1 is α1, and the power reflection coefficient of the multi-antenna card antenna 2 is α2.

[0058] Among them, the multi-antenna card environment backscatter communication model constructs a communication link between the RF source, the card with three antennas, and the receiver, which can realize the transmission and interaction of signals. In the access control authentication method of this embodiment, it is necessary to obtain information such as the authentication user identity data set and the code element data set to be authenticated, which can be transmitted with the help of the communication between the card and the receiver in the communication model. For example, the card can send the relevant authentication information to the receiver through antenna 1 and antenna 2, so that the subsequent access control authentication process can be carried out based on the received data.

[0059] It should be noted that the multi-antenna card environment backscatter communication model adopts a backscatter communication method. After the card antenna receives the signal from the RF source, it does not directly amplify the signal and perform conventional processing such as amplification, but modulates the reflected signal by changing its own load and loads the information onto the reflected signal. In addition, the card uses a single antenna (antenna 3) to collect energy from the environment to deal with the problem of high energy consumption of multiple antennas communicating simultaneously. For access control authentication, if the card is a device that carries authentication-related information and needs to frequently participate in the authentication process, a stable energy supply is essential. Maintaining the operation of the card through a reasonable energy harvesting mechanism can ensure that it can continue to send the data required for authentication normally when access control authentication is required, avoiding the inability to participate in authentication due to energy problems such as power exhaustion, thereby indirectly ensuring that the access control authentication function can continue to operate effectively.

[0060] Specifically, in the access control management scenario, a card with three antennas can be issued to users as an access card. The radio frequency source can be a wireless base station or other equipment deployed in the corresponding area. When the user approaches the access control card reader, that is, the receiver, the card communicates with the receiver through antenna 1 and antenna 2 to transmit relevant information including user identity authentication, and uses antenna 3 to collect environmental energy to maintain work. With the help of this communication model, accurate information transmission is guaranteed, thereby achieving fast and accurate access control authority verification and deciding whether to allow people to enter the corresponding area.

[0061] The technical solution of the embodiment of the present invention can effectively organize and classify the identity data collected by the multi-antenna card by constructing a cache queue, thereby improving the efficiency and accuracy of data processing. The use of multi-antenna cards can increase the communication rate, and by combining the existing cache queue and the new data to be authenticated, an update queue is generated, thereby realizing dynamic update and integration of data. It can quickly and accurately determine whether the user has the authority to pass through the access control, thereby improving the security and response speed of the access control system.

[0062] Embodiment 2

[0063] Figure 3This is a flow chart of a door access authentication method provided in the second embodiment of the present invention. This embodiment adds a specific process of generating each cache queue according to the authenticated user identity data on the basis of the above-mentioned first embodiment. Among them, the specific contents of steps S250-S260 are roughly the same as steps S120-S130 in the first embodiment, so they will not be repeated in this embodiment. Figure 3 As shown, the method includes:

[0064] S210: Acquire an authentication user identity data set, wherein the authentication user identity data set is collected by a multi-antenna card.

[0065] S220: Cluster the authenticated user identity data to generate cluster sets.

[0066] Among them, clustering is to divide the authentication user identity data into different sets, that is, cluster sets, based on the similarity or correlation between the data. For example, if the authentication user identity data contains data of multiple biometric dimensions, when clustering, the degree of similarity will be determined by calculating the Euclidean distance between different feature data. Among them, data points that are relatively similar in feature performance will be classified into the same category to form a cluster set. For example, for data such as the distance between the eyes and the length of the nose in the facial feature dimension, the records corresponding to these data with similar numerical ranges will be clustered together, and the overall authentication user identity data can be divided into multiple distinctive cluster sets, and the data within each cluster set has a high degree of similarity.

[0067] S230, using the average value algorithm to calculate the initial cluster center corresponding to each cluster set.

[0068] It can be known that the average value algorithm is used to find a central data point that can represent the characteristics of each cluster set. Specifically, for the many data points contained in the cluster set. For example, a cluster set contains multiple data records about the detailed characteristics of fingerprint patterns. The controller can sum the values ​​of the corresponding dimensions of the data points and then divide them by the number of data points to get the average value of each dimension, which is the initial cluster center. For example, a cluster set contains 10 data records about facial contour features. The value of the cheek width dimension in each record is added and divided by 10 to get the average value of the cheek width. The same operation is performed for other dimensions such as forehead height. The final set of average values ​​is the initial cluster center corresponding to the cluster set.

[0069] S240: Create an initial queue, and store each initial cluster center in a corresponding initial queue to generate each cache queue.

[0070] Specifically, creating an initial queue is equivalent to opening up independent storage containers, which can prepare for the orderly storage of key data in the subsequent authentication process. After the initial cluster centers of each cluster set are calculated through the previous steps, each initial cluster center can be placed in the corresponding initial queue to form each cache queue. For example, the initial cluster centers of 4 different cluster sets are obtained through clustering and calculation, and 4 initial queues are created respectively. Then, these 4 initial cluster centers are stored in their corresponding initial queues in turn. These 4 initial queues also constitute the corresponding cache queues. When performing subsequent operations such as comparison with the code element data set to be authenticated, the initial cluster center data can be extracted from these cache queues for processing.

[0071] S250, obtaining a set of code element data to be authenticated, and generating an update queue according to the set of code element data to be authenticated and each cache queue.

[0072] Optionally, an update queue is generated based on the code element data set to be authenticated and each cache queue, including: taking each code element data in the code element data set to be authenticated as target data in turn, and determining the code element number corresponding to the target data; judging whether the code element number reaches a preset number threshold, and if so, outputting each cache queue as each update queue; otherwise, determining the target queue corresponding to the target data from each cache queue, and storing the target data in the target queue.

[0073] Optionally, determining a target queue corresponding to the target data from each cache queue includes: calculating a queue cluster center corresponding to each cache queue; determining a Euclidean metric value of the target data and each queue cluster center; when the metric value is less than a preset metric value, taking the cache queue where the queue cluster center is located as the target queue.

[0074] Optionally, storing the target data into the target queue includes: determining whether the target queue is full, if so, deleting the head data of the target queue and storing the target data at the end of the target queue; otherwise, directly storing the target data at the end of the target queue.

[0075] S260. Determine the access control authentication result corresponding to the to-be-authenticated code element data set according to each update queue.

[0076] Optionally, the access control authentication result corresponding to the code element data set to be authenticated is determined according to each update queue, including: determining the update cluster center corresponding to each update queue, and generating a decoding value according to each update cluster center; judging whether the decoding value meets the preset authentication conditions, and if so, determining that the access control authentication result is a successful authentication; otherwise, determining that the access control authentication result is a failed authentication.

[0077] The technical solution of the embodiment of the present invention can effectively classify and organize complex authentication user identity data by clustering the authentication user identity data, thereby reducing data confusion and redundancy. By building a cache queue, an orderly storage structure is provided for the authentication user identity data, which is convenient for rapid retrieval and access, helps to improve the speed and efficiency of data processing, and reduces waiting time.

[0078] Embodiment 3

[0079] Figure 4 This is a schematic diagram of the structure of a door access authentication device provided in Embodiment 3 of the present invention. Figure 4 As shown, the device includes: a cache queue generation module 310, which is used to obtain an authentication user identity data set and generate each cache queue according to the authentication user identity data set, wherein the authentication user identity data set is collected by a multi-antenna card;

[0080] An update queue generation module 320 is used to obtain a set of code element data to be authenticated, and to generate an update queue according to the set of code element data to be authenticated and each cache queue;

[0081] The access control authentication result determination module 330 is used to determine the access control authentication result corresponding to the to-be-authenticated code element data set according to each update queue.

[0082] Optionally, the cache queue generation module 310 is specifically used to: cluster the authentication user identity data to generate each cluster set; use the average value algorithm to calculate the initial cluster center corresponding to each cluster set; create an initial queue, and store each initial cluster center in the corresponding initial queue to generate each cache queue.

[0083] Optionally, the update queue generation module 320 is specifically used to: take each code element in the code element set to be authenticated as the target data in turn, and determine the code element number corresponding to the target data; judge whether the code element number reaches a preset number threshold, and if so, output each cache queue as each update queue; otherwise, determine the target queue corresponding to the target data from each cache queue, and store the target data into the target queue.

[0084] Optionally, the update queue generation module 320 specifically includes: a target queue determination unit, which is used to: calculate the queue cluster center corresponding to each cache queue; determine the Euclidean metric value of the target data and each queue cluster center; when the metric value is less than a preset metric value, use the cache queue where the queue cluster center is located as the target queue.

[0085] Optionally, the update queue generation module 320 specifically includes: a target data storage unit, used to: determine whether the target queue is full, if so, delete the head data of the target queue and store the target data at the end of the target queue; otherwise, directly store the target data at the end of the target queue.

[0086] Optionally, the access control authentication result determination module 330 is specifically used to: determine the update cluster center corresponding to each update queue, and generate a decoding value based on each update cluster center; determine whether the decoding value meets the preset authentication conditions, and if so, determine that the access control authentication result is a successful authentication; otherwise, determine that the access control authentication result is a failed authentication.

[0087] The technical solution of the embodiment of the present invention can effectively organize and classify the identity data collected by the multi-antenna card by constructing a cache queue, thereby improving the efficiency and accuracy of data processing. The use of multi-antenna cards can increase the communication rate, and by combining the existing cache queue and the new data to be authenticated, an update queue is generated, thereby realizing dynamic update and integration of data. It can quickly and accurately determine whether the user has the authority to pass through the access control, thereby improving the security and response speed of the access control system.

[0088] An access control authentication device provided in an embodiment of the present invention can execute an access control authentication method provided in any embodiment of the present invention, and has functional modules and beneficial effects corresponding to the execution method.

[0089] Embodiment 4

[0090] Figure 5 A schematic diagram of the structure of an electronic device 10 that can be used to implement an embodiment of the present invention is shown. The electronic device is intended to represent various forms of digital computers, such as laptop computers, desktop computers, workstations, personal digital assistants, servers, blade servers, mainframe computers, and other suitable computers. The electronic device can also represent various forms of mobile devices, such as personal digital assistants, cellular phones, smart phones, wearable devices (such as helmets, glasses, watches, etc.) and other similar computing devices. The components shown herein, their connections and relationships, and their functions are merely examples and are not intended to limit the implementation of the present invention described and / or required herein.

[0091] like Figure 5 As shown, the electronic device 10 includes at least one processor 11, and a memory connected to the at least one processor 11, such as a read-only memory (ROM) 12, a random access memory (RAM) 13, etc., wherein the memory stores a computer program that can be executed by at least one processor, and the processor 11 can perform various appropriate actions and processes according to the computer program stored in the read-only memory (ROM) 12 or the computer program loaded from the storage unit 18 to the random access memory (RAM) 13. In the RAM 13, various programs and data required for the operation of the electronic device 10 can also be stored. The processor 11, the ROM 12, and the RAM 13 are connected to each other through a bus 14. An input / output (I / O) interface 15 is also connected to the bus 14.

[0092] A number of components in the electronic device 10 are connected to the I / O interface 15, including: an input unit 16, such as a keyboard, a mouse, etc.; an output unit 17, such as various types of displays, speakers, etc.; a storage unit 18, such as a disk, an optical disk, etc.; and a communication unit 19, such as a network card, a modem, a wireless communication transceiver, etc. The communication unit 19 allows the electronic device 10 to exchange information / data with other devices through a computer network such as the Internet and / or various telecommunication networks.

[0093] The processor 11 may be a variety of general and / or special processing components with processing and computing capabilities. Some examples of the processor 11 include, but are not limited to, a central processing unit (CPU), a graphics processing unit (GPU), various special artificial intelligence (AI) computing chips, various processors running machine learning model algorithms, a digital signal processor (DSP), and any appropriate processor, controller, microcontroller, etc. The processor 11 executes the various methods and processes described above, such as a door access authentication method.

[0094] In some embodiments, a door access authentication method may be implemented as a computer program, which is tangibly contained in a computer-readable storage medium, such as a storage unit 18. In some embodiments, part or all of the computer program may be loaded and / or installed on the electronic device 10 via the ROM 12 and / or the communication unit 19. When the computer program is loaded into the RAM 13 and executed by the processor 11, one or more steps of the door access authentication method described above may be performed. Alternatively, in other embodiments, the processor 11 may be configured to execute a door access authentication method in any other appropriate manner (e.g., by means of firmware).

[0095] Various implementations of the systems and techniques described above herein can be implemented in digital electronic circuit systems, integrated circuit systems, field programmable gate arrays (FPGAs), application specific integrated circuits (ASICs), application specific standard products (ASSPs), systems on chips (SOCs), load programmable logic devices (CPLDs), computer hardware, firmware, software, and / or combinations thereof. These various implementations can include: being implemented in one or more computer programs that can be executed and / or interpreted on a programmable system including at least one programmable processor, which can be a special purpose or general purpose programmable processor that can receive data and instructions from a storage system, at least one input device, and at least one output device, and transmit data and instructions to the storage system, the at least one input device, and the at least one output device.

[0096] Computer programs for implementing the methods of the present invention may be written in any combination of one or more programming languages. These computer programs may be provided to a processor of a general-purpose computer, a special-purpose computer, or other programmable data processing device, so that when the computer program is executed by the processor, the functions / operations specified in the flow chart and / or block diagram are implemented. The computer program may be executed entirely on the machine, partially on the machine, partially on the machine and partially on a remote machine as a stand-alone software package, or entirely on a remote machine or server.

[0097] In the context of the present invention, a computer-readable storage medium may be a tangible medium that may contain or store a computer program for use by or in combination with an instruction execution system, device or equipment. A computer-readable storage medium may include, but is not limited to, electronic, magnetic, optical, electromagnetic, infrared, or semiconductor systems, devices or equipment, or any suitable combination of the foregoing. Alternatively, a computer-readable storage medium may be a machine-readable signal medium. A more specific example of a machine-readable storage medium may include an electrical connection based on one or more lines, a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the foregoing.

[0098] To provide interaction with a user, the systems and techniques described herein may be implemented on an electronic device having: a display device (e.g., a CRT (cathode ray tube) or LCD (liquid crystal display) monitor) for displaying information to the user; and a keyboard and a pointing device (e.g., a mouse or trackball) through which the user can provide input to the electronic device. Other types of devices may also be used to provide interaction with the user; for example, the feedback provided to the user may be any form of sensory feedback (e.g., visual feedback, auditory feedback, or tactile feedback); and input from the user may be received in any form (including acoustic input, voice input, or tactile input).

[0099] The systems and techniques described herein may be implemented in a computing system that includes backend components (e.g., as a data server), or a computing system that includes middleware components (e.g., an application server), or a computing system that includes frontend components (e.g., a user computer with a graphical user interface or a web browser through which a user can interact with implementations of the systems and techniques described herein), or a computing system that includes any combination of such backend components, middleware components, or frontend components. The components of the system may be interconnected by any form or medium of digital data communication (e.g., a communication network). Examples of communication networks include: a local area network (LAN), a wide area network (WAN), a blockchain network, and the Internet.

[0100] A computing system may include a client and a server. The client and the server are generally remote from each other and usually interact through a communication network. The client and server relationship is generated by computer programs running on the corresponding computers and having a client-server relationship with each other. The server may be a cloud server, also known as a cloud computing server or cloud host, which is a host product in the cloud computing service system to solve the defects of difficult management and weak business scalability in traditional physical hosts and VPS services.

[0101] It should be understood that the various forms of processes shown above can be used to reorder, add or delete steps. For example, the steps described in the present invention can be executed in parallel, sequentially or in different orders, as long as the desired results of the technical solution of the present invention can be achieved, and this document does not limit this.

[0102] The above specific implementations do not constitute a limitation on the protection scope of the present invention. It should be understood by those skilled in the art that various modifications, combinations, sub-combinations and substitutions can be made according to design requirements and other factors. Any modification, equivalent substitution and improvement made within the spirit and principle of the present invention should be included in the protection scope of the present invention.

Claims

1. A door access authentication method, characterized in that: include: Acquire an authentication user identity data set, and generate each cache queue according to the authentication user identity data set, wherein the authentication user identity data set is collected by a multi-antenna card; Acquire a data set of code elements to be authenticated, and generate an update queue according to the data set of code elements to be authenticated and each of the cache queues; The access control authentication result corresponding to the to-be-authenticated code element data set is determined according to each of the update queues.

2. The method according to claim 1, characterized in that The generating each cache queue according to the authentication user identity data comprises: Clustering the authentication user identity data to generate cluster sets; Use the average value algorithm to calculate the initial cluster center corresponding to each cluster set; An initial queue is created, and each initial cluster center is stored in a corresponding initial queue to generate each cache queue.

3. The method according to claim 1, characterized in that The step of generating an update queue according to the to-be-authenticated code element data set and each of the cache queues comprises: Sequentially taking each symbol data in the symbol data set to be authenticated as target data, and determining the symbol number corresponding to the target data; Determine whether the code element number reaches a preset code element threshold, and if so, output each cache queue as each update queue; Otherwise, a target queue corresponding to the target data is determined from each cache queue, and the target data is stored in the target queue.

4. The method according to claim 3, characterized in that The step of determining a target queue corresponding to the target data from each cache queue includes: Calculate the queue cluster center corresponding to each cache queue; Determining the Euclidean metric value of the target data and each of the queue cluster centers; When the metric value is less than a preset metric value, the cache queue where the queue cluster center is located is used as the target queue.

5. The method according to claim 3, characterized in that: The storing the target data into the target queue comprises: Determine whether the target queue is full, if so, delete the head data of the target queue and store the target data at the end of the target queue; Otherwise, the target data is directly stored at the end of the target queue.

6. The method according to claim 1, characterized in that The step of determining the access control authentication result corresponding to the to-be-authenticated code element data set according to each of the update queues includes: Determine an update cluster center corresponding to each of the update queues, and generate a decoding value according to each of the update cluster centers; Determine whether the decoded value meets the preset authentication condition, and if so, determine that the access control authentication result is successful; Otherwise, the access control authentication result is determined to be authentication failure.

7. A door access authentication device, characterized in that: include: A cache queue generation module, used to obtain an authentication user identity data set, and generate each cache queue according to the authentication user identity data set, wherein the authentication user identity data set is collected by a multi-antenna card; An update queue generation module, used for obtaining a set of code element data to be authenticated, and generating an update queue according to the set of code element data to be authenticated and each of the cache queues; The access control authentication result determination module is used to determine the access control authentication result corresponding to the to-be-authenticated code element data set according to each of the update queues.

8. An electronic device, characterized in that: The electronic device comprises: at least one processor; and a memory communicatively coupled to the at least one processor; The memory stores a computer program that can be executed by the at least one processor, and the computer program is executed by the at least one processor so that the at least one processor can execute the method according to any one of claims 1 to 6.

9. A computer storage medium, characterized in that The computer storage medium stores computer instructions, and the computer instructions are used to enable a processor to implement the method according to any one of claims 1 to 6 when executed.

10. A computer program product, characterized in that The computer program product comprises a computer program which, when executed by a processor, implements the method according to any one of claims 1 to 6.

Images