Intelligent self-service method with identity recognition function and terminal

Abstract

The invention relates to the technical field of self-service, in particular to an intelligent self-service method with an identity recognition function and a terminal. Comprising an update isolation module and a pluggable function module. The updating isolation module is connected with the pluggable function module; the pluggable function module is used for being connected with external equipment and sending a connection success signal to the updating isolation module after the connection is successful; and after receiving the connection success signal, the updating isolation module is used for detecting connection permission of the external equipment and identifying identity information of plugging personnel, and receiving and downloading a to-be-updated task through a preset API interface after determining that updating is allowed. After it is confirmed that the external equipment passes verification and the identity information of the plugging personnel passes identification, the updating isolation module receives and downloads the to-be-updated task through the preset API interface as the core of the updating process, and the transmission safety of the to-be-updated task and the correctness of the to-be-updated task are ensured.

Description

Technical Field

[0001] The present application relates to the field of self-service technology, and in particular to an intelligent self-service method and terminal with identity recognition function. Background Art

[0002] With the comprehensive advancement of informatization in all areas of social services, smart self-service terminals, as an important carrier for bridging users and system platforms, have been widely used in multiple public service scenarios such as government services, financial management, medical registration, transportation, and education informatization.

[0003] However, as the functions of smart self-service terminals become increasingly complex and the operating environment becomes increasingly diverse, some self-service terminals with higher security requirements can usually only be updated offline in order to avoid online intrusion interfaces. Therefore, how smart self-service terminals can avoid potential risks in the update process while ensuring update efficiency and update content security has become the key to technological development. Summary of the invention

[0004] The present application provides an intelligent self-service method and terminal with identity recognition function to solve the above problems.

[0005] In a first aspect, the present application provides an intelligent self-service terminal with an identity recognition function, the terminal comprising an update isolation module and a pluggable function module; The update isolation module is connected to the pluggable functional module; The pluggable functional module is used to connect to an external device, and after the connection is successful, sends a connection success signal to the update isolation module; After receiving the connection success signal, the update isolation module is used to detect the connection permission of the external device and identify the identity information of the plug-in and unplug personnel. After determining that the update is allowed, the update isolation module receives and downloads the task to be updated through a preset API interface.

[0006] Through this solution, the connection between the update isolation module and the pluggable functional module ensures that the interaction between the external device and the internal device of the terminal can be carried out through a controlled interface, thereby reducing the risk of direct access to the core device. The pluggable functional module connects to external devices, such as a USB flash drive, so that the intelligent self-service terminal can receive tasks to be updated from the outside. The connection of the external device is the starting point of the update process, providing a physical basis for task transmission and identity information verification. The connection success signal sent by the pluggable functional module is an important feedback mechanism, informing the update isolation module to prepare to receive tasks to be updated and perform identity information verification. The connection permission of the external device is detected to ensure that only authorized devices can be updated, and the legitimacy of the external device is verified by checking the digital certificate and hardware feature code of the external device. The update isolation module also identifies the identity information of the plug-in personnel as part of the multiple identity information authentication process, ensuring that only authorized plug-in personnel can perform update operations, thereby improving the security of the update process. After confirming that the external device has been verified and the identity information of the plug-in and unplugger has been identified, the update isolation module receives and downloads the tasks to be updated through the preset API interface, which is the core of the update process, ensuring the transmission security and correctness of the tasks to be updated.

[0007] Optionally, the update isolation module includes a plurality of virtual isolation boxes, each of which has a built-in independent sandbox environment, and is used to isolate and update the task to be updated after receiving the task to be updated.

[0008] Through this solution, by creating several virtual isolation boxes, the update isolation module provides an independent execution space for each task to be updated. It ensures that even if there is a problem with the task to be updated, it will not affect other parts of the smart self-service terminal, thereby protecting the stability of the smart self-service terminal and the security of user data. An independent sandbox environment is configured inside each virtual isolation box to limit the permissions and resource access of the task to be updated. The independent sandbox environment prevents potential threats to the smart self-service terminal from the task to be updated, such as the execution of malicious code or data leakage. The task to be updated is received through the preset API interface to ensure the security and consistency of the transmission of the task to be updated, and prevent the task to be updated from being tampered with or leaked during the transmission process. The task to be updated is assigned to the corresponding virtual isolation box and independent sandbox environment for isolated update to prevent errors or malicious behaviors during the update process from affecting the original functions of the terminal, and to ensure the stable operation of the smart self-service terminal.

[0009] Optionally, when detecting the connection permission of the external device, the update isolation module is used to: Read the digital certificate and hardware feature code of the external device; The digital certificate and the hardware characteristic code are analyzed to determine whether the external device is a trusted device.

[0010] Through this solution, the update isolation module reads the digital certificate on the external device to ensure the authenticity and reliability of the external device's identity information. Reading the digital certificate helps the update isolation module verify whether the external device is known and trusted. The update isolation module reads the hardware feature code of the external device, such as the serial number, MAC address, etc. By reading the information of the hardware feature code, the update isolation module further confirms the identity information of the external device and ensures that the external device has not been tampered with. The update isolation module analyzes the read digital certificate and hardware feature code to help verify the external device, and by comparing the digital certificate and hardware feature code with the pre-stored authorized device information, it determines whether the external device is authorized to perform the update operation. Through the analysis results, the update isolation module determines whether the external device is a trusted device, which helps to ensure the security of the update process and prevent potential threats to the smart self-service terminal from untrusted devices.

[0011] Optionally, after the update of the task to be updated is completed, the process to be detected is obtained and enters the isolation detection stage. The independent sandbox environment is used to monitor the running data of the process to be detected in real time, determine the running fluency, and when the running fluency is higher than a preset fluency threshold, release the process to be detected so that the process to be detected and other existing processes enter the same running environment.

[0012] Through this solution, the task to be updated is updated in an independent sandbox environment, ensuring that the update process will not affect the original function of the intelligent self-service terminal, allowing new tasks to be updated to proceed without interference, thereby avoiding potential conflicts and errors. The update isolation module extracts the updated process to be detected from the independent sandbox environment to ensure the integrity of the task to be updated. The process to be detected enters the isolation detection phase to prevent the process to be detected from affecting the stable operation of the intelligent self-service terminal. The beginning of the isolation detection phase marks the preparation for the task to be updated to transition from the independent sandbox environment to the actual operation environment. The independent sandbox environment monitors the operation data of the process to be detected in real time, including resource usage, error logs, performance indicators, etc., which helps to evaluate the operation status and performance of the process to be detected and ensure that the updated process to be detected can meet the expected performance standards. The running fluency ensures that the updated process to be detected provides a good user experience. Comparing the preset fluency threshold helps to ensure that the updated process to be detected reaches the expected performance level. If the running fluency of the process to be detected is higher than the preset fluency threshold, it is determined that the updated process to be detected starts to provide services to the user without negatively affecting the stability of the intelligent self-service terminal.

[0013] Optionally, the intelligent self-service terminal further includes a data retrieval module connected to the update isolation module; After the process to be detected enters the isolation detection phase, the update isolation module is used to analyze the operation logic of the process to be detected, determine the data required for the operation and the operation cycle, and send a data retrieval signal to the data retrieval module according to the data required for the operation and the operation cycle; After receiving the data retrieval signal, the data retrieval module analyzes the data retrieval signal, determines the data sending frequency according to the operation cycle, and sends the data required for the operation to the update isolation module according to the data sending frequency.

[0014] Through this solution, the update isolation module analyzes the operation logic of the process to be detected, which helps to ensure that the process to be detected can run normally after the update and will not fail due to data problems. Based on the analysis of the operation logic, the update isolation module determines which data the process to be detected needs during operation, ensuring that the process to be detected has sufficient data support during operation to complete the expected function. The update isolation module analyzes the operation cycle of the process to be detected, which helps to plan the frequency and timing of data retrieval and ensure that the data is extracted at the right time. The data retrieval signal contains the request information and retrieval schedule of the data retrieval to ensure the timeliness and accuracy of the data retrieval. Parsing the data retrieval signal ensures that the data retrieval module correctly identifies and executes the data retrieval task. Determining the data sending frequency involves arranging the data sending time point according to the operation cycle of the process to be detected to ensure that the data can be sent at the right time point. According to the determined data sending frequency, the data retrieval module extracts the data required for operation from the database and sends the data to the update isolation module through a secure data transmission channel to ensure the security of data transmission and prevent the data from being intercepted or tampered with during transmission.

[0015] Optionally, the update isolation module also includes a data transmission channel, which has an encryption protocol built into it and is connected to the data retrieval module for receiving the data required for the operation, encrypting the data according to the encryption protocol, and then transmitting the encrypted data required for the operation to the independent sandbox environment of the update isolation module.

[0016] Through this solution, an encryption protocol is configured to ensure the security of the data transmission channel. The encryption protocol provides end-to-end encryption during the data transmission process required for operation, preventing the data required for operation from being intercepted or tampered with during the transmission process, thereby protecting the security and integrity of the data required for operation. The data retrieval module encrypts the data required for operation before sending it, increasing the security of the data required for operation and preventing unauthorized third parties from accessing or modifying the data during the transmission process. The encrypted data required for operation is packaged into data packets to ensure the orderly transmission and easy management of the data required for operation. Each data packet contains encrypted data and necessary metadata, such as data packet sequence number, data length, etc., which helps the receiver to correctly unpack and process the data. Data packets are sent through the data transmission channel configured with the encryption protocol to ensure the security of the data packets during transmission, ensure the reliable transmission of the data packets, and ensure the integrity of the data packets even in unstable network conditions. The update isolation module receives data packets through the data transmission channel configured with the encryption protocol. The receiving process includes integrity checking and verification of the received data packets to ensure that the data packets have not been tampered with during transmission and protect the integrity and security of the data packets. The decryption process ensures that the data packets can be used and processed correctly after reaching the terminal. The independent sandbox environment ensures the isolation of data required for operation, preventing leakage of data required for operation or potential impact on other parts of the terminal.

[0017] Optionally, when identifying the identity information of the plugging and unplugging personnel, the update isolation module is used to receive NFC verification information, analyze the NFC verification information, determine whether the work badge has internal update permission, and if so, obtain face recognition information and fingerprint authentication information; analyze the face recognition information and the fingerprint authentication information to determine whether the update is allowed; If the internal update permission does not exist, a device ejection signal is sent to the pluggable function module to disconnect the external device.

[0018] Through this solution, the update isolation module receives NFC verification information through NFC technology, which helps to authenticate the identity of the plugging and unplugging personnel and ensure that the plugging and unplugging personnel hold a valid authentication tool. The update isolation module analyzes the received NFC verification information to determine whether the work badge has internal update permission, which helps to verify whether the plugging and unplugging personnel have the right to perform update operations and prevent unauthorized update attempts. If the analysis result shows that the work badge has internal update permission, the update isolation module will allow the update operation to continue, ensuring that only authorized plugging and unplugging personnel can start the update process. The face recognition information of the plugging and unplugging personnel is obtained through the integrated face recognition device, providing an additional layer of authentication and increasing security. At the same time, the fingerprint authentication information of the plugging and unplugging personnel is obtained through the fingerprint scanner to further confirm the identity of the plugging and unplugging personnel. The update isolation module analyzes the face recognition information and fingerprint authentication information, which helps to verify the identity of the plugging and unplugging personnel and ensure the legitimacy of the update operation. The update isolation module will send a device pop-up signal to the pluggable function module, which helps to prevent unauthorized device connection. After receiving the device pop-up signal, the pluggable function module disconnects from the external device to prevent unauthorized update operations, ensure the security of the smart self-service terminal, and prevent the risk of unauthorized device access and data leakage.

[0019] Optionally, the terminal also includes a key verification module, which is connected to the pluggable functional module and is used to sense the connection status of the pluggable functional module in real time, obtain and verify the key string, and when it is determined that the key string verification is incorrect, if the connection status is that the external device exists, the physical port is triggered to perform power-off protection.

[0020] Through this solution, the update isolation module monitors the connection status of the pluggable functional module in real time and responds to the insertion or removal of external devices in a timely manner, which helps to grasp the security status of external devices in real time and prevent unauthorized external devices from connecting. Obtaining the secret key string helps to verify the legitimacy of the external device. Verify the received secret key string to ensure the authenticity, validity and legitimacy of the secret key string. The verification process helps prevent counterfeit or tampered external devices from performing update operations. Check the connection status to ensure that the external device is connected when taking security measures. Power-off protection measures help prevent unauthorized external device access and potential security threats.

[0021] Optionally, the terminal further includes an update identification module connected to the update isolation module; The update isolation module is used to send the task to be updated to the update identification module after detecting the connection permission of the external device and determining that there is a connection permission; After receiving the task to be updated, the update identification module parses the task to be updated and determines the encrypted watermark and digital signature of the task to be updated; Retrieving verification information of other existing processes; verifying the encrypted watermark and the digital signature according to the verification information; If both the encrypted watermark and the digital signature match the verification information, and the encrypted watermark and the digital signature correspond to only one of the existing processes, a verification pass signal is sent to the update isolation module.

[0022] Through this solution, the update isolation module sends the task to be updated to the update identification module to ensure the transmission of the task to be updated. The parsing process of the task to be updated helps to extract the encrypted watermark and digital signature in the task to be updated. The encrypted watermark and digital signature help to verify the integrity and source of the task to be updated. The update identification module retrieves the verification information of the remaining existing processes from the database, which helps to verify the legitimacy of the task to be updated and ensure the security of the update operation. According to the retrieved verification information, the verification process of the encrypted watermark and digital signature of the update identification module helps to confirm the integrity and source of the task to be updated and prevent the spread of malware. Determine whether the encrypted watermark and digital signature match the verification information and only correspond to one of the existing processes to ensure that the source of the task to be updated is credible. The verification pass signal indicates that the task to be updated has passed the identity authentication and integrity check, and the update operation continues.

[0023] In a second aspect, the present application provides an intelligent self-service method with an identity recognition function, the method comprising: Detect connection permission of external devices; Identify the identity information of the person who plugs and unplugs the device; After confirming that the update is allowed, the tasks to be updated are received and downloaded via the preset API interface.

[0024] Optionally, the method includes: after receiving the task to be updated, isolating and updating the task to be updated.

[0025] Optionally, the detecting the connection permission of the external device includes: Read the digital certificate and hardware feature code of the external device; The digital certificate and the hardware characteristic code are analyzed to determine whether the external device is a trusted device.

[0026] Optionally, the method includes: monitoring the running data of the process to be detected in real time, determining the running fluency, and when the running fluency is higher than a preset fluency threshold, releasing the process to be detected so that the process to be detected and other existing processes enter the same running environment.

[0027] Optionally, the method includes: analyzing the operation logic of the process to be detected to determine the data required for the operation and the operation cycle; and determining the data sending frequency based on the operation cycle.

[0028] Optionally, the method includes: receiving data required for the operation and encrypting the data according to an encryption protocol.

[0029] Optionally, the method includes: receiving NFC verification information, analyzing the NFC verification information, determining whether the work badge has internal update permission, and if so, obtaining face recognition information and fingerprint authentication information; analyzing the face recognition information and the fingerprint authentication information to determine whether the update is allowed; If the internal update permission does not exist, a device ejection signal is sent to the pluggable function module to disconnect the external device.

[0030] Optionally, the method includes: obtaining and verifying a key string, and when it is determined that the key string verification is incorrect, if the connection status is that the external device exists, triggering the physical port to perform power-off protection.

[0031] Optionally, the method includes: detecting the connection permission of the external device, and after determining that the connection permission exists, parsing the task to be updated, and determining the encrypted watermark and digital signature of the task to be updated; Retrieving verification information of other existing processes; verifying the encrypted watermark and the digital signature according to the verification information; If both the encrypted watermark and the digital signature match the verification information, and the encrypted watermark and the digital signature correspond to only one of the existing processes, a verification pass signal is sent. BRIEF DESCRIPTION OF THE DRAWINGS

[0032] In order to more clearly illustrate the embodiments of the present application or the technical solutions in the prior art, a brief introduction will be given below to the drawings required for use in the embodiments or the description of the prior art. Obviously, the drawings described below are some embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying any creative labor.

[0033] Figure 1 A schematic diagram of an application scenario provided for an embodiment of the present application; Figure 2 A schematic diagram of the structure of an intelligent self-service terminal with identity recognition function provided in one embodiment of the present application; Figure 3 A schematic diagram of the structure of another intelligent self-service terminal with identity recognition function provided in one embodiment of the present application; Figure 4 A flowchart of an intelligent self-service method with identity recognition function provided in one embodiment of the present application. DETAILED DESCRIPTION

[0034] In order to make the purpose, technical scheme and advantages of the embodiments of the present application clearer, the technical scheme in the embodiments of the present application will be clearly and completely described below in conjunction with the drawings in the embodiments of the present application. Obviously, the described embodiments are part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of this application.

[0035] In addition, the term "and / or" in this article is only a description of the association relationship of associated objects, indicating that there can be three relationships. For example, A and / or B can represent: A exists alone, A and B exist at the same time, and B exists alone. In addition, the character " / " in this article, unless otherwise specified, generally means that the associated objects before and after are in an "or" relationship.

[0036] The embodiments of the present application are further described in detail below in conjunction with the drawings in the specification.

[0037] As the functions of smart self-service terminals become increasingly complex and the operating environment becomes increasingly diverse, some self-service terminals with higher security requirements are usually only updated offline in order to avoid leaving online intrusion interfaces. Therefore, how smart self-service terminals can avoid potential risks in the update process while ensuring update efficiency and update content security has become the key to technological development.

[0038] Based on this, the present application provides an intelligent self-service method and terminal with identity recognition function, an update isolation module, a pluggable function module; the update isolation module is connected to the pluggable function module; the pluggable function module is used to connect an external device, and after the connection is successful, it sends a connection success signal to the update isolation module; after receiving the connection success signal, the update isolation module is used to detect the connection permission of the external device and identify the identity information of the plug-in personnel, and after determining that the update is allowed, receive and download the task to be updated with a preset API interface. Through this solution, the connection between the update isolation module and the pluggable function module ensures that the interaction between the external device and the internal device of the terminal can be carried out through a controlled interface, thereby reducing the risk of direct access to the core device. The pluggable function module is connected to an external device, such as a USB flash drive, so that the intelligent self-service terminal can receive tasks to be updated from the outside. The connection of the external device is the starting point of the update process, providing a physical basis for task transmission and identity information verification. The connection success signal sent by the pluggable function module 202 is an important feedback mechanism, informing the update isolation module to prepare to receive tasks to be updated and perform identity information verification. Check the connection permission of the external device to ensure that only authorized devices can be updated, and verify the legitimacy of the external device by checking the digital certificate and hardware feature code of the external device. The update isolation module also identifies the identity information of the plug-in and unplug personnel as part of the multiple identity information authentication process, ensuring that only authorized plug-in and unplug personnel can perform update operations, thereby improving the security of the update process. After confirming that the external device has been verified and the identity information of the plug-in and unplug personnel has been identified, the update isolation module receives and downloads the tasks to be updated through the preset API interface, which is the core of the update process, ensuring the transmission security and correctness of the tasks to be updated.

[0039] Figure 1 A schematic diagram of an application scenario provided by this application. In a self-service scenario, the method provided by this application is applied.

[0040] Specifically, the method provided in the present application is applied to any intelligent self-service terminal with an identity recognition function. The service terminal includes an update isolation module and a pluggable function module. The update isolation module is connected to the pluggable function module. The pluggable function module is connected to an external device, such as a USB flash drive, so that the intelligent self-service receives tasks to be updated from external external devices. The connection of the external device is the starting point of the update process, providing a physical basis for task transmission and identity information verification. The update isolation module receives tasks to be updated and performs identity information verification. The connection permission of the external device is detected to ensure that only authorized devices can be updated, and the legitimacy of the external device is verified by checking the digital certificate and hardware feature code of the external device. The update isolation module simultaneously identifies the identity information of the plug-in personnel as part of the multiple identity information authentication process, ensuring that only authorized plug-in personnel can perform the update operation, thereby improving the security of the update process. After confirming that the external device verification has passed and the identity information identification of the plug-in personnel has passed, the update isolation module receives and downloads the tasks to be updated through the preset API interface, which is the core of the update process, ensuring the transmission security of the tasks to be updated and the correctness of the tasks to be updated. The specific implementation method can refer to the following embodiments.

[0041] Figure 2 This is a structural diagram of an intelligent self-service terminal with an identity recognition function provided in an embodiment of the present application. The intelligent self-service terminal with an identity recognition function 200 of this embodiment includes: an update isolation module 201, a pluggable function module 202; The update isolation module 201 is connected to the pluggable function module 202; The pluggable function module 202 is used to connect to an external device and send a connection success signal to the update isolation module 201 after the connection is successful; After receiving the connection success signal, the update isolation module 201 is used to detect the connection permission of the external device and identify the identity information of the plug-in and unplug personnel. After determining that the update is allowed, it receives and downloads the task to be updated through the preset API interface.

[0042] The external device can be a USB flash drive, a mobile hard disk, an SD card or other external device connected to the intelligent self-service terminal.

[0043] The connection success signal may be a notification signal sent by the pluggable functional module after detecting that the external device is successfully connected.

[0044] The connection permission may be a process in which the smart self-service terminal verifies and authorizes the identity information of the external device.

[0045] The plugging and unplugging personnel may be the personnel who are responsible for plugging and unplugging external devices into and out of the smart self-service terminal during the update process.

[0046] The identity information may be data such as work number, ID card information, fingerprint, face recognition information, etc. used to verify the identity of the plugging and unplugging personnel.

[0047] The preset API interface may be a software interface pre-configured on the intelligent self-service terminal for communicating and exchanging data with an external device, which is pre-stored in the server and called when in use.

[0048] The task to be updated may be software, application programs or other data files that need to be installed on the smart self-service terminal.

[0049] Specifically, the update isolation module 201 is connected to the pluggable function module 202 to form an update channel. The plugging and unplugging personnel insert the external device into the pluggable function module 202. Once the external device is successfully connected to the pluggable function module 202, the pluggable function module 202 will send a connection success signal to the update isolation module 201, indicating that it is ready to receive the task to be updated. After receiving the connection success signal, the update isolation module 201 starts the detection mechanism to verify the connection permission of the external device. At the same time, the update isolation module 201 identifies the identity information of the plugging and unplugging personnel. After confirming that the external device verification has passed and the identity information of the plugging and unplugging personnel has passed, the update isolation module 201 will allow the update process to continue. Once the update is allowed, the update isolation module 201 will communicate with the external device through the preset API interface to receive and download the task to be updated.

[0050] Through this solution, the connection between the update isolation module 201 and the pluggable function module 202 ensures that the interaction between the external device and the internal device of the terminal can be carried out through a controlled interface, thereby reducing the risk of direct access to the core device. The pluggable function module 202 connects to an external device, such as a USB flash drive, so that the intelligent self-service terminal can receive tasks to be updated from the outside. The connection of the external device is the starting point of the update process, providing a physical basis for task transmission and identity information verification. The connection success signal sent by the pluggable function module 202 is an important feedback mechanism, informing the update isolation module 201 to prepare to receive tasks to be updated and perform identity information verification. The connection permission of the external device is detected to ensure that only authorized devices can be updated, and the legitimacy of the external device is verified by checking the digital certificate and hardware feature code of the external device. The update isolation module 201 simultaneously identifies the identity information of the plug-in and unplug personnel as part of the multiple identity information authentication process, ensuring that only authorized plug-in and unplug personnel can perform update operations, thereby improving the security of the update process. After confirming that the external device has been verified and the identity information of the plug-in and unplugger has been identified, the update isolation module 201 receives and downloads the tasks to be updated through the preset API interface, which is the core of the update process, ensuring the transmission security and correctness of the tasks to be updated.

[0051] In some embodiments, the update isolation module 201 includes a plurality of virtual isolation boxes, each of which has a built-in independent sandbox environment for isolating and updating the task to be updated after receiving the task to be updated.

[0052] The virtual isolation box may be an independent execution space for isolating and executing tasks to be updated.

[0053] An independent sandbox environment can be a secure execution environment inside a virtual isolation box with strict permission control and resource access restrictions.

[0054] Specifically, the update isolation module 201 first creates several virtual isolation boxes. Inside each virtual isolation box, the update isolation module 201 configures an independent sandbox environment. The update isolation module 201 receives tasks to be updated through a preset API interface. The tasks to be updated are assigned to the corresponding virtual isolation boxes and independent sandbox environments for isolation and update.

[0055] Through this solution, by creating several virtual isolation boxes, the update isolation module 201 provides an independent execution space for each task to be updated. It ensures that even if there is a problem with the task to be updated, it will not affect other parts of the intelligent self-service terminal, thereby protecting the stability of the intelligent self-service terminal and the security of user data. An independent sandbox environment is configured inside each virtual isolation box to limit the permissions and resource access of the task to be updated. The independent sandbox environment prevents potential threats to the intelligent self-service terminal from the task to be updated, such as the execution of malicious code or data leakage. The task to be updated is received through a preset API interface to ensure the security and consistency of the transmission of the task to be updated, and to prevent the task to be updated from being tampered with or leaked during the transmission process. The task to be updated is assigned to the corresponding virtual isolation box and independent sandbox environment for isolated update to prevent errors or malicious behaviors during the update process from affecting the original functions of the terminal, thereby ensuring the stable operation of the intelligent self-service terminal.

[0056] In some embodiments, the update isolation module 201 detects the connection permission of the external device, including: reading the digital certificate and hardware feature code of the external device; analyzing the digital certificate and the hardware feature code to determine whether the external device is a trusted device.

[0057] A digital certificate can be an electronic document used to verify a digital identity.

[0058] The hardware signature may be a unique identifier embedded in the hardware device.

[0059] A trusted device may be a device that has passed identity information verification and authorization and is allowed to connect and operate.

[0060] Specifically, the update isolation module 201 reads the digital certificate and the hardware feature code through the external device. It analyzes whether the signature of the digital certificate is correct, whether the digital certificate is within the validity period, whether the hardware feature code matches the feature code in the pre-stored authorized device list, and whether the hardware feature code is consistent with the secure boot characteristics of the external device. Based on the analysis results, the update isolation module 201 determines whether the external device is a trusted device.

[0061] Through this solution, the update isolation module 201 reads the digital certificate on the external device to ensure the authenticity and reliability of the external device identity information. Reading the digital certificate helps the update isolation module 201 to verify whether the external device is known and trusted. The update isolation module 201 reads the hardware feature code of the external device, such as the serial number, MAC address, etc. By reading the information of the hardware feature code, the update isolation module 201 further confirms the identity information of the external device and ensures that the external device has not been tampered with. The update isolation module 201 analyzes the read digital certificate and hardware feature code, which helps to verify the external device, and by comparing the digital certificate and hardware feature code with the pre-stored authorized device information, it determines whether the external device is authorized to perform the update operation. Through the analysis results, the update isolation module 201 determines whether the external device is a trusted device, which helps to ensure the security of the update process and prevent potential threats to the smart self-service terminal from untrusted devices.

[0062] In some embodiments, after the update of the task to be updated is completed, the process to be detected is obtained and enters the isolation detection stage. The independent sandbox environment is used to monitor the running data of the process to be detected in real time, determine the running smoothness, and when the running smoothness is higher than the preset smoothness threshold, release the process to be detected so that the process to be detected and the other existing processes enter the same running environment.

[0063] The process to be detected may be a process that is prepared to be tested and verified in the update isolation module 201 .

[0064] The isolated testing phase can be a phase in which the process to be tested is tested in an independent, controlled environment.

[0065] The operation data may be all data such as resource usage, error logs, performance indicators, etc. generated during the execution of the process to be detected.

[0066] Running smoothness can be an indicator to measure the performance of the process to be tested.

[0067] The preset smoothness threshold may be a preset performance standard for evaluating whether the process to be detected reaches an expected performance level, which is pre-stored in the server and called when used.

[0068] The remaining existing processes may be other applications and software components running on the smart self-service terminal.

[0069] The operating environment can be a platform on which all software components such as operating equipment, hardware resources, and network connections on the intelligent self-service terminal run.

[0070] Specifically, the task to be updated is updated in an independent sandbox environment, and the update isolation module 201 extracts the updated process to be detected from the independent sandbox environment. The process to be detected enters the isolation detection stage. The independent sandbox environment monitors the resource usage, error logs, performance indicators and other operating data of the process to be detected in real time. By analyzing the operating data monitored in real time, the update isolation module 201 evaluates the running fluency of the process to be detected. The fluency threshold is preset according to the performance requirements and user experience standards of the intelligent self-service terminal. The update isolation module 201 compares the running fluency of the process to be detected with the preset fluency threshold. If the running fluency of the process to be detected is higher than the preset fluency threshold, the update isolation module 201 will release the process to be detected, so that the process to be detected and other existing processes of the intelligent self-service terminal enter the same operating environment.

[0071] Through this solution, the task to be updated is updated in an independent sandbox environment, ensuring that the update process will not affect the original function of the intelligent self-service terminal, allowing new tasks to be updated to be carried out without interference, thereby avoiding potential conflicts and errors. The update isolation module 201 extracts the updated process to be detected from the independent sandbox environment to ensure the integrity of the task to be updated. The process to be detected enters the isolation detection phase to prevent the process to be detected from affecting the stable operation of the intelligent self-service terminal. The beginning of the isolation detection phase marks the preparation for the task to be updated to transition from the independent sandbox environment to the actual operating environment. The independent sandbox environment monitors the operating data of the process to be detected in real time, including resource usage, error logs, performance indicators, etc., which helps to evaluate the operating status and performance of the process to be detected and ensure that the updated process to be detected can meet the expected performance standards. The running fluency ensures that the updated process to be detected provides a good user experience. Comparing the preset fluency threshold helps to ensure that the updated process to be detected reaches the expected performance level. If the running fluency of the process to be detected is higher than the preset fluency threshold, it is determined that the updated process to be detected starts to provide services to the user without negatively affecting the stability of the intelligent self-service terminal.

[0072] In addition to the above modules, it also includes Figure 3 The following modules are shown: In some embodiments, the intelligent self-service terminal 200 with identity recognition function also includes a data retrieval module 203, which is connected to the update isolation module 201; after the process to be detected enters the isolation detection stage, the update isolation module 201 is used to analyze the operation logic of the process to be detected, determine the data required for the operation and the operation cycle, and send a data retrieval signal to the data retrieval module 203 according to the data required for the operation and the operation cycle; after receiving the data retrieval signal, the data retrieval module 203 parses the data retrieval signal, determines the data sending frequency according to the operation cycle, and sends the data required for the operation to the update isolation module 201 according to the data sending frequency.

[0073] The operation logic may be the operation flow and rules of the process to be detected during execution.

[0074] The data required for operation may be data that needs to be accessed and processed during the execution of the process to be detected.

[0075] The operation cycle may be a fixed time interval or a trigger condition for the process to be detected to perform an operation.

[0076] The data retrieval signal may be a request sent by the operation required data and the operation cycle, instructing the data retrieval module 203 to obtain data from the data source database.

[0077] The data transmission frequency may be the time interval at which data is transmitted from the database to the target location.

[0078] Specifically, the update isolation module 201 analyzes the operation logic of the process to be detected, and determines the configuration files, user data, database records and other data required for the operation of the process to be detected during execution. The update isolation module 201 analyzes the operation cycle of the process to be detected, that is, the time interval or trigger condition for the process to be detected. According to the determined operation required data and operation cycle, a data retrieval signal is sent to the data retrieval module 203. After receiving the data retrieval signal, the data retrieval signal is parsed to extract the data type, data volume, retrieval schedule and other detailed information of the data retrieval signal. According to the operation cycle, the requirements of the process to be detected for the type, quantity and update frequency of data in each operation cycle are analyzed. Based on the operation cycle and data requirements, the data sending frequency is determined. According to the determined data sending frequency, the data retrieval module 203 extracts the data required for operation from the database and sends the data to the update isolation module 201 through a secure data transmission channel.

[0079] Through this solution, the update isolation module 201 analyzes the operation logic of the process to be detected, which helps to ensure that the process to be detected can run normally after the update and will not fail due to data problems. Based on the operation logic analysis, the update isolation module 201 determines which data the process to be detected needs during operation, ensuring that the process to be detected has sufficient data support during operation to complete the expected function. The update isolation module 201 analyzes the operation cycle of the process to be detected, which helps to plan the frequency and timing of data retrieval and ensure that the data is extracted at the right time. The data retrieval signal contains the request information and retrieval schedule of the data retrieval to ensure the timeliness and accuracy of the data retrieval. Parsing the data retrieval signal ensures that the data retrieval module 203 correctly identifies and executes the data retrieval task. Determining the data sending frequency involves arranging the data sending time point according to the operation cycle of the process to be detected to ensure that the data can be sent at the right time point. According to the determined data sending frequency, the data retrieval module 203 extracts the required data for operation from the database, and sends the data to the update isolation module 201 through a secure data transmission channel to ensure the security of data transmission and prevent the data from being intercepted or tampered with during transmission.

[0080] In some embodiments, the update isolation module 201 also includes a data transmission channel, which has an encryption protocol built into the data retrieval module 203 and is used to receive data required for operation, and after encrypting the data according to the encryption protocol, transmit the encrypted data required for operation to the independent sandbox environment of the update isolation module 201.

[0081] A data transmission channel may be a physical or virtual channel for transmitting data.

[0082] An encryption protocol can be a set of rules and standards used to ensure data security during data transmission.

[0083] Specifically, the data transmission channel configures TLS (Transport Layer Security) or SSL (Secure Sockets Layer) encryption protocol. Before sending the data required for operation, the data retrieval module 203 uses the encryption protocol to encrypt the data required for operation. The encrypted data required for operation is packaged into a data packet. The data retrieval module 203 sends the data packet to the update isolation module 201 through the data transmission channel configured with the encryption protocol. The update isolation module 201 receives the data packet through the data transmission channel configured with the encryption protocol. The update isolation module 201 decrypts the received data packet and restores the original data. The decrypted data is stored in the independent sandbox environment of the update isolation module 201.

[0084] Through this solution, the encryption protocol is configured to ensure the security of the data transmission channel. The encryption protocol provides end-to-end encryption during the data transmission process required for operation, preventing the data required for operation from being intercepted or tampered with during the transmission process, thereby protecting the security and integrity of the data required for operation. The data retrieval module 203 encrypts the data before sending the data required for operation, increasing the security of the data required for operation and preventing unauthorized third parties from accessing or modifying the data during the transmission process. The encrypted data required for operation is packaged into data packets to ensure the orderly transmission and easy management of the data required for operation. Each data packet contains encrypted data and necessary metadata, such as data packet sequence number, data length, etc., which helps the recipient to correctly unpack and process the data. Data packets are sent through the data transmission channel configured with the encryption protocol to ensure the security of the data packets during transmission, ensure the reliable transmission of the data packets, and ensure the integrity of the data packets even in the case of unstable network. The update isolation module 201 receives data packets through the data transmission channel configured with the encryption protocol. The receiving process includes integrity checking and verification of the received data packets to ensure that the data packets have not been tampered with during the transmission process and protect the integrity and security of the data packets. The decryption process ensures that the data packets can be used and processed correctly after arriving at the terminal. The independent sandbox environment ensures the isolation of data required for operation, preventing leakage of data required for operation or potential impact on other parts of the terminal.

[0085] In some embodiments, when identifying the identity information of the plugging and unplugging personnel, the update isolation module 201 is used to receive NFC verification information, analyze the NFC verification information, and determine whether the work badge has internal update permission. If so, obtain the face recognition information and fingerprint authentication information; analyze the face recognition information and fingerprint authentication information to determine whether the update is allowed; if there is no internal update permission, send a device pop-up signal to the pluggable function module 202 to disconnect the external device.

[0086] The NFC authentication information may be identity authentication information transmitted via NFC (Near Field Communication) technology.

[0087] The internal update permission may be the permission to authorize the plug-in personnel to perform updates.

[0088] Facial recognition information can be facial feature data such as facial contour, eyes, nose, mouth, etc. collected by facial recognition equipment.

[0089] Fingerprint authentication information may be fingerprint feature data such as ridges, valleys, end points, bifurcation points, etc. of the fingerprint collected through fingerprint recognition technology.

[0090] The device eject signal may be a signal sent to an external device, indicating that the external device is disconnected.

[0091] Specifically, the update isolation module 201 receives NFC verification information through NFC (near field communication) technology. The update isolation module 201 parses the received NFC verification information. The update isolation module 201 verifies the validity of the NFC verification information. After parsing and verifying the NFC verification information, the update isolation module 201 searches for internal update permission in the work badge. The face recognition information of the plugging and unplugging personnel is obtained through the integrated face recognition device. Facial features are extracted from the face recognition information and converted into face templates. The extracted face template is compared with the face template of the stored authorized user. The fingerprint authentication information of the plugging and unplugging personnel is obtained through a fingerprint scanner. The fingerprint features are extracted from the collected fingerprint authentication information and converted into fingerprint templates. The extracted fingerprint template is compared with the fingerprint template of the stored authorized user. The update isolation module 201 comprehensively compares the face recognition information and the fingerprint authentication information to determine whether the update is allowed. If the face recognition information and the fingerprint authentication information are not verified, the update isolation module 201 will send a device pop-up signal to the pluggable function module 202. After receiving the device ejection signal, the pluggable function module 202 disconnects from the external device.

[0092] Through this solution, the update isolation module 201 receives NFC verification information through NFC technology, which helps to authenticate the identity of the plugging and unplugging personnel and ensure that the plugging and unplugging personnel hold a valid identity authentication tool. The update isolation module 201 analyzes the received NFC verification information to determine whether the work badge has an internal update permission, which helps to verify whether the plugging and unplugging personnel have the right to perform the update operation and prevent unauthorized update attempts. If the analysis result shows that the work badge has an internal update permission, the update isolation module 201 will allow the update operation to continue, ensuring that only authorized plugging and unplugging personnel can start the update process. The face recognition information of the plugging and unplugging personnel is obtained through the integrated face recognition device, providing an additional layer of identity authentication and increasing security. At the same time, the fingerprint authentication information of the plugging and unplugging personnel is obtained through the fingerprint scanner to further confirm the identity of the plugging and unplugging personnel. The update isolation module 201 analyzes the face recognition information and fingerprint authentication information, which helps to verify the identity of the plugging and unplugging personnel and ensure the legitimacy of the update operation. The update isolation module 201 will send a device pop-up signal to the pluggable function module 202, which helps to prevent unauthorized devices from connecting. After receiving the device pop-up signal, the pluggable function module 202 disconnects from the external device to prevent unauthorized update operations, ensure the security of the intelligent self-service terminal, and prevent the risk of unauthorized device access and data leakage.

[0093] In some embodiments, the smart self-service terminal 200 with identity recognition function also includes a key verification module 204, which is connected to the pluggable function module 202, and is used to sense the connection status of the pluggable function module 202 in real time, obtain and verify the key string, and when it is determined that the key string verification is incorrect, if the connection status is that there is an external device, the physical port is triggered to perform power-off protection.

[0094] The connection state may be the state of the physical connection between devices, which may be expressed as "connected" or "disconnected".

[0095] A key string can be a string of characters or numbers used for authentication and encrypted communications.

[0096] A physical port can be a physical interface on a device, used to connect to an external device.

[0097] Specifically, the update isolation module 201 continuously monitors the connection status of the pluggable functional module 202 through a hardware interface or a software interface. When an external device connection is detected, the update isolation module 201 obtains a key string from the external device. The received key string is compared and verified with the pre-stored key string. If the key string verification is incorrect, confirm whether there is currently an external device connection. If so, the update isolation module 201 sends a power-off signal to the physical port to trigger the power-off protection mechanism.

[0098] Through this solution, the update isolation module 201 monitors the connection status of the pluggable functional module 202 in real time, and responds to the insertion or removal of external devices in a timely manner, which helps to grasp the security status of external devices in real time and prevent unauthorized external devices from connecting. Obtaining the secret key string helps to verify the legitimacy of the external device. Verify the received secret key string to ensure the authenticity, validity and legitimacy of the secret key string. The verification process helps prevent counterfeit or tampered external devices from performing update operations. Check the connection status to ensure that the external device is connected when taking security measures. Power-off protection measures help prevent unauthorized external device access and potential security threats.

[0099] In some embodiments, the intelligent self-service terminal 200 with identity recognition function also includes an update identification module 205, which is connected to the update isolation module 201; the update isolation module 201 detects the connection permission of the external device and determines that the connection permission exists, and then sends the task to be updated to the update identification module 205; after receiving the task to be updated, the update identification module 205 parses the task to be updated and determines the encrypted watermark and digital signature of the task to be updated; retrieves the verification information of the remaining existing processes; verifies the encrypted watermark and digital signature according to the verification information; if the encrypted watermark and digital signature both match the verification information, and the encrypted watermark and digital signature only correspond to one of the existing processes, then sends a verification pass signal to the update isolation module 201.

[0100] An encrypted watermark can be a digital mark used for identity authentication.

[0101] A digital signature may be a technique used to verify the integrity of data.

[0102] The verification information may be information used to verify the identity and integrity of the task to be updated.

[0103] The existing process may be an application, service, or other software component that is already running on the smart self-service terminal.

[0104] The verification pass signal may be a signal sent to the update isolation module, indicating that the task to be updated has passed the identity authentication and integrity check.

[0105] Specifically, the update isolation module 201 sends the task to be updated to the update identification module 205. After receiving the task to be updated, the update identification module 205 parses the task to be updated. After parsing the task to be updated, the update identification module 205 determines the encrypted watermark and digital signature in the task to be updated. The verification information of the remaining existing processes is retrieved from the database or. According to the retrieved verification information, the encrypted watermark in the task to be updated is compared with the encrypted watermark in the verification information. The digital signature in the task to be updated is decrypted using the public key in the verification information. After completing the verification of the encrypted watermark and the digital signature, it is confirmed that the encrypted watermark and the digital signature both match the verification information. The update identification module 205 further confirms that the encrypted watermark and the digital signature only correspond to one of the existing processes. If the encrypted watermark and the digital signature both match the verification information and only correspond to one existing process, the update identification module 205 generates a verification pass signal. The generated verification pass signal is sent to the update isolation module 201.

[0106] Through this solution, the update isolation module 201 sends the task to be updated to the update identification module 205 to ensure the transmission of the task to be updated. The parsing process of the task to be updated helps to extract the encrypted watermark and digital signature in the task to be updated. The encrypted watermark and digital signature help to verify the integrity and source of the task to be updated. The update identification module 205 retrieves the verification information of the remaining existing processes from the database, which helps to verify the legality of the task to be updated and ensure the security of the update operation. The update identification module 205, based on the retrieved verification information, the verification process of the encrypted watermark and digital signature helps to confirm the integrity and source of the task to be updated and prevent the spread of malicious software. Determine whether the encrypted watermark and digital signature match the verification information and only correspond to one of the existing processes to ensure that the source of the task to be updated is credible. The verification pass signal indicates that the task to be updated has passed the identity authentication and integrity check, and the update operation continues.

[0107] Figure 4 This is a flow chart of an intelligent self-service method with identity recognition function provided by an embodiment of the present application. The method of this embodiment can be applied to the server in the above scenario. Figure 4 As shown, the method includes: S301, detecting connection permission of an external device; S302, identifying the identity information of the plugging and unplugging personnel; S303: After determining that the update is allowed, receiving and downloading the task to be updated through a preset API interface.

[0108] Optionally, the method includes: after receiving the task to be updated, isolating and updating the task to be updated.

[0109] Optionally, the detecting the connection permission of the external device includes: when the update isolation module detects the connection permission of the external device, it is used to: Read the digital certificate and hardware feature code of the external device; The digital certificate and the hardware characteristic code are analyzed to determine whether the external device is a trusted device.

[0110] Optionally, the method includes: monitoring the running data of the process to be detected in real time, determining the running fluency, and when the running fluency is higher than a preset fluency threshold, releasing the process to be detected so that the process to be detected and other existing processes enter the same running environment.

[0111] Optionally, the method includes: analyzing the operation logic of the process to be detected, determining the data required for the operation and the operation cycle, and sending a data retrieval signal to the data retrieval module according to the data required for the operation and the operation cycle; After receiving the data retrieval signal, the data retrieval module analyzes the data retrieval signal, determines the data sending frequency according to the operation cycle, and sends the data required for the operation to the update isolation module according to the data sending frequency.

[0112] Optionally, the method includes: receiving the data required for the operation, encrypting the data according to the encryption protocol, and transmitting the encrypted data required for the operation to the independent sandbox environment of the update isolation module.

[0113] Optionally, the method includes: receiving NFC verification information, analyzing the NFC verification information, determining whether the work badge has internal update permission, and if so, obtaining face recognition information and fingerprint authentication information; analyzing the face recognition information and the fingerprint authentication information to determine whether the update is allowed; If the internal update permission does not exist, a device ejection signal is sent to the pluggable function module to disconnect the external device.

[0114] Optionally, the method includes: sensing the connection status of the pluggable functional module in real time, obtaining and verifying a key string, and when it is determined that the key string verification is incorrect, if the connection status is that the external device exists, triggering the physical port to perform power-off protection.

[0115] Optionally, the method includes: detecting a connection permission of the external device, and after determining that a connection permission exists, sending the task to be updated to the update identification module; After receiving the task to be updated, the update identification module parses the task to be updated and determines the encrypted watermark and digital signature of the task to be updated; Retrieving verification information of other existing processes; verifying the encrypted watermark and the digital signature according to the verification information; If both the encrypted watermark and the digital signature match the verification information, and the encrypted watermark and the digital signature correspond to only one of the existing processes, a verification pass signal is sent to the update isolation module.

[0116] The method of this embodiment can be used to execute the method of any of the above embodiments. The implementation principle and technical effects are similar and will not be described in detail here.

Claims

1. An intelligent self-service terminal with identity recognition function, characterized in that: Including updating isolation modules and pluggable functional modules; The update isolation module is connected to the pluggable functional module; The pluggable functional module is used to connect to an external device, and after the connection is successful, sends a connection success signal to the update isolation module; After receiving the connection success signal, the update isolation module is used to detect the connection permission of the external device and identify the identity information of the plug-in and unplug personnel. After determining that the update is allowed, the update isolation module receives and downloads the task to be updated through a preset API interface.

2. The terminal according to claim 1, characterized in that The update isolation module includes a plurality of virtual isolation boxes, each of which has a built-in independent sandbox environment, and is used to isolate and update the task to be updated after receiving the task to be updated.

3. The terminal according to claim 1, characterized in that: When detecting the connection permission of the external device, the update isolation module is used to: Read the digital certificate and hardware feature code of the external device; The digital certificate and the hardware characteristic code are analyzed to determine whether the external device is a trusted device.

4. The terminal according to claim 2, characterized in that: After the update of the task to be updated is completed, the process to be detected is obtained and enters the isolation detection stage. The independent sandbox environment is used to monitor the running data of the process to be detected in real time, determine the running fluency, and when the running fluency is higher than the preset fluency threshold, release the process to be detected so that the process to be detected and the other existing processes enter the same running environment.

5. The terminal according to claim 4, characterized in that: The intelligent self-service terminal also includes a data retrieval module connected to the update isolation module; After the process to be detected enters the isolation detection phase, the update isolation module is used to analyze the operation logic of the process to be detected, determine the data required for the operation and the operation cycle, and send a data retrieval signal to the data retrieval module according to the data required for the operation and the operation cycle; After receiving the data retrieval signal, the data retrieval module analyzes the data retrieval signal, determines the data sending frequency according to the operation cycle, and sends the data required for the operation to the update isolation module according to the data sending frequency.

6. The terminal according to claim 5, characterized in that: The update isolation module also includes a data transmission channel, which has an encryption protocol built in the data transmission channel and is connected to the data retrieval module for receiving the data required for the operation, encrypting the data according to the encryption protocol, and then transmitting the encrypted data required for the operation to the independent sandbox environment of the update isolation module.

7. The terminal according to claim 1, characterized in that: When identifying the identity information of the plugging and unplugging personnel, the update isolation module is used to receive NFC verification information, analyze the NFC verification information, determine whether the work badge has internal update permission, and if so, obtain face recognition information and fingerprint authentication information; analyze the face recognition information and the fingerprint authentication information to determine whether the update is allowed; If the internal update permission does not exist, a device ejection signal is sent to the pluggable function module to disconnect the external device.

8. The terminal according to claim 5, characterized in that: The terminal also includes a key verification module, which is connected to the pluggable functional module and is used to sense the connection status of the pluggable functional module in real time, obtain and verify the key string, and when it is determined that the key string verification is incorrect, if the connection status is that the external device exists, the physical port is triggered to perform power-off protection.

9. The terminal according to claim 5, characterized in that: The terminal also includes an update identification module connected to the update isolation module; The update isolation module is used to send the task to be updated to the update identification module after detecting the connection permission of the external device and determining that there is a connection permission; After receiving the task to be updated, the update identification module parses the task to be updated and determines the encrypted watermark and digital signature of the task to be updated; Retrieving verification information of other existing processes; verifying the encrypted watermark and the digital signature according to the verification information; If both the encrypted watermark and the digital signature match the verification information, and the encrypted watermark and the digital signature correspond to only one of the existing processes, a verification pass signal is sent to the update isolation module.

10. An intelligent self-service method with identity recognition function, characterized in that: Applicable to a terminal according to any one of claims 1 to 9, comprising: Detect connection permission of external devices; Identify the identity information of the person who plugs and unplugs the device; After confirming that the update is allowed, the tasks to be updated are received and downloaded via the preset API interface.

Images