Vehicle access method, device and equipment based on entrance guard limitation and storage medium

Abstract

The invention discloses a vehicle access method, device and equipment based on access control limitation and a storage medium, and the method comprises the steps: obtaining a get-on and get-off point of a user from a request instruction in response to the request instruction for reserving vehicle access initiated by the user; judging whether the get-on and get-off point is located in the established electronic fence or not, and if yes, judging whether the reserved vehicle meets the in-out standard of the electronic fence or not; if the reserved vehicle meets the access standard of the electronic fence, generating a disposable token based on the reserved vehicle and the user; the one-time token is sent to an access control of the electronic fence, so that the access control verifies the reserved vehicle according to the one-time token when the reserved vehicle reaches the position of the access control, and whether verification succeeds or not is determined; if the verification succeeds, opening the access control, so that the reserved vehicle enters and exits the electronic fence through the access control. The method can save time and manpower, improves the passing efficiency, and improves the travel experience of a user.

Description

Technical Field

[0001] The present application relates to the field of vehicle entry and exit technology, and in particular to a vehicle entry and exit method, device, equipment and storage medium based on access control restrictions. Background Art

[0002] At present, many residential areas, commercial parks, enterprises and institutions have generally set vehicle access restrictions for safety management considerations, prohibiting external vehicles (especially online ride-hailing cars, taxis, etc.) from entering internal areas. Therefore, under normal circumstances, these places only allow registered private cars, internal official cars and other vehicles to enter, while external vehicles such as online ride-hailing cars cannot enter. If the pick-up or drop-off point agreed upon by the user when booking a vehicle is within these places, then the reserved vehicle can only be parked outside these places, such as the entrance to the community, the entrance and exit of the park, etc., and the user will then walk to the pre-set pick-up or drop-off point, which seriously affects the user's travel experience.

[0003] The existing solution is for the security personnel at the venue to manually verify the user's identity and the information of the reserved vehicle and temporarily allow entry, but this method is time-consuming and labor-intensive, affecting traffic efficiency. Summary of the invention

[0004] In view of this, the present application provides a vehicle entry and exit method, device, equipment and storage medium based on access control restrictions, which is used to solve the problem that the existing solution is that the security personnel at the venue manually verify the user's identity and the information of the reserved vehicle and temporarily release entry, but this method is time-consuming and labor-intensive, affecting the traffic efficiency.

[0005] To achieve the above objectives, the proposed solution is as follows:

[0006] In a first aspect, a vehicle access method based on access control restrictions includes:

[0007] In response to a request instruction initiated by a user to reserve a vehicle entry and exit, obtaining the user's boarding and alighting points from the request instruction;

[0008] Determine whether the boarding and alighting point is located within the established electronic fence, and if so, determine whether the reserved vehicle meets the entry and exit standards of the electronic fence;

[0009] If the reserved vehicle meets the entry and exit criteria of the electronic fence, a one-time token is generated based on the reserved vehicle and the user;

[0010] Sending the one-time token to the access control of the electronic fence, so that the access control can verify the reserved vehicle according to the one-time token when the reserved vehicle arrives at the location of the access control, and determine whether the verification is successful;

[0011] If the verification is successful, the access control is opened to allow the reserved vehicle to enter and exit the electronic fence through the access control.

[0012] Preferably, the determining whether the reserved vehicle meets the entry and exit criteria of the electronic fence includes:

[0013] Determine whether there is an authorized vehicle entry and exit whitelist corresponding to the electronic fence;

[0014] If so, determining whether the user is a user in the authorized vehicle entry and exit whitelist;

[0015] If the user is a user in the authorized vehicle entry and exit whitelist, determining that the reserved vehicle meets the entry and exit criteria of the electronic fence;

[0016] If there is no authorized vehicle entry and exit whitelist corresponding to the electronic fence, obtaining the property system to which the user belongs;

[0017] Determine whether there is a signed access permission agreement between the property system and the vehicle platform to which the reserved vehicle belongs;

[0018] If there is a signed access permission agreement between the property system and the reserved vehicle, it is determined that the reserved vehicle meets the access standards of the electronic fence.

[0019] Preferably, generating a one-time token based on the reserved vehicle and the user comprises:

[0020] Obtain the user's identity information, vehicle information of the reserved vehicle, boarding and alighting points, and the time range within which the reserved vehicle is expected to arrive at the access control location;

[0021] Generate a random number using a random number generator;

[0022] The identity information, vehicle information of the reserved vehicle, the boarding and alighting points, and the time range in which the reserved vehicle is expected to arrive at the access control location are combined with the random number to generate a one-time token.

[0023] Preferably, the identity information, vehicle information of the reserved vehicle, the boarding and alighting points, the time range of the estimated arrival of the reserved vehicle at the access control location and the random number are combined to generate a one-time token, including:

[0024] Extracting the user name and mobile phone number of the user from the identity information, and extracting the license plate number of the reserved vehicle from the vehicle information;

[0025] Convert the user's mobile phone number into a first hash value, and convert the user name into binary data;

[0026] Performing a merging operation on the first Hash value and the binary data to obtain a first string;

[0027] intercepting the last four digits of the license plate number, and converting the last four digits of the license plate number into a second hash value;

[0028] Converting the pick-up and drop-off points into a third hash value;

[0029] Convert the time range of the scheduled vehicle's expected arrival at the access control location into a timestamp interval, and add random jitter to the timestamp interval to obtain a second character string;

[0030] Adding the first character string, the second Hash value, the third Hash value and the second character string to the random number to obtain first data;

[0031] A one-time token is generated from the first data.

[0032] Preferably, the step of verifying the reserved vehicle according to the one-time token and determining whether the verification is successful comprises:

[0033] Obtaining the generation time of the one-time token, and determining whether the time interval between the generation time and the current time is less than a preset time interval threshold;

[0034] If so, determining whether the one-time token is intact;

[0035] If complete, extract the estimated time range of the reserved vehicle's arrival at the access control location, the user's identity information, and the license plate number of the reserved vehicle from the one-time token;

[0036] Obtaining the license plate number of the vehicle requesting to enter or exit the access control location;

[0037] The time range is extended according to the preset buffer time to obtain a new time range, and it is determined whether the current time is within the new time range, whether there is a corresponding relationship between the user and the electronic fence, and whether the license plate number of the vehicle requesting entry and exit is the same as the license plate number of the reserved vehicle;

[0038] If the current time is within the new time range, there is a corresponding relationship between the user and the electronic fence, and the license plate number of the vehicle requesting entry and exit is the same as the license plate number of the reserved vehicle, then determine whether there is a strong security verification requirement for the access control;

[0039] If so, a strong security authentication is performed on the reserved vehicle. If the strong security authentication passes, the authentication is determined to be successful; if not, the authentication is determined to be successful.

[0040] Preferably, the strong security authentication of the reserved vehicle includes:

[0041] Select a strong security authentication method;

[0042] If the strong security authentication method is SMS authentication, a one-time verification code is sent to the mobile phone number corresponding to the reserved vehicle and the access control system at the same time, so that the driver of the reserved vehicle can input the one-time verification code into the interactive interface of the access control system, and the access control system can compare the received one-time verification code with the input one-time verification code;

[0043] If the comparison is successful, it is determined that the strong security authentication has passed;

[0044] If the strong security authentication method is video authentication, a video call is established between the driver of the reserved vehicle and the vehicle platform to which the reserved vehicle belongs, so that the staff of the vehicle platform can authenticate the identity of the driver;

[0045] If the identity authentication passes, it is determined that the strong security authentication passes.

[0046] Preferably, after responding to the request instruction for reserving vehicle entry and exit initiated by the user, the method further includes:

[0047] Authenticating the user and the reserved vehicle;

[0048] If the authenticity authentication is passed, an encrypted communication channel is established between the access control and the vehicle platform to which the reserved vehicle belongs;

[0049] The encrypted communication channel is provided with a preset data format, communication rules, encryption method and authentication mechanism so that the access control and the reserved vehicle can interact with each other through the set encrypted communication channel.

[0050] In a second aspect, a vehicle access device based on access control restrictions includes:

[0051] A module, for responding to a request instruction initiated by a user to reserve a vehicle entry and exit, and obtaining the user's boarding and alighting points from the request instruction;

[0052] A module for determining whether the pick-up and drop-off point is located within the established electronic fence, and if so, determining whether the reserved vehicle meets the entry and exit standards of the electronic fence;

[0053] A module, for generating a one-time token based on the reserved vehicle and the user if the reserved vehicle meets the entry and exit criteria of the electronic fence;

[0054] A module, used to send the one-time token to the access control of the electronic fence, so that the access control can verify the reserved vehicle according to the one-time token when the reserved vehicle arrives at the location of the access control, and determine whether the verification is successful;

[0055] The module is used to open the access control if the verification is successful, so that the reserved vehicle can enter and exit the electronic fence through the access control.

[0056] In a third aspect, a vehicle access device based on access control restrictions includes a memory and a processor;

[0057] The memory is used to store programs;

[0058] The processor is used to execute the program to implement the various steps of the vehicle access control-based method as described in any one of the first aspects.

[0059] In a fourth aspect, a storage medium stores a computer program thereon, and when the computer program is executed by a processor, the steps of the vehicle access control-based method as described in any one of the first aspects are implemented.

[0060] It can be seen from the above technical solution that the present application obtains the user's boarding and alighting points from the request instruction for the entry and exit of a reserved vehicle initiated by the user; determines whether the boarding and alighting points are located within the established electronic fence, and if so, determines whether the reserved vehicle meets the entry and exit standards of the electronic fence; if the reserved vehicle meets the entry and exit standards of the electronic fence, generates a one-time token based on the reserved vehicle and the user; sends the one-time token to the access control of the electronic fence, so that the access control can verify the reserved vehicle according to the one-time token when the reserved vehicle arrives at the location of the access control, and determine whether the verification is successful; if the verification is successful, the access control is opened to allow the reserved vehicle to enter and exit the electronic fence through the access control. This application directly responds to the request instruction initiated by the user to reserve a vehicle to enter and exit, and then determines whether the user's pick-up point or alighting point is located within the restricted established electronic fence. If so, in order to ensure safety, a one-time token is generated. The one-time token can be used by the access control of the electronic fence to verify the reserved vehicle. If the verification is successful, passage is allowed. This application only opens access rights to trusted reserved vehicles to avoid danger, thereby effectively avoiding danger and ensuring the safety of people and property in the designated area corresponding to the electronic fence. At the same time, it saves time and manpower, reduces the manual management of temporary vehicles by security personnel, reduces the workload, and improves traffic efficiency. Users can get on and off the vehicle directly at the reserved pick-up and drop-off points without having to walk to the pick-up and drop-off points, thereby improving the user's travel experience. BRIEF DESCRIPTION OF THE DRAWINGS

[0061] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on the provided drawings without paying creative work.

[0062] Figure 1 An optional flow chart of a vehicle access control method based on access control restrictions provided in an embodiment of the present application;

[0063] Figure 2 A schematic diagram of the structure of a vehicle access control device based on access control restrictions provided in an embodiment of the present application;

[0064] Figure 3 A schematic diagram of the structure of a vehicle access device based on access control restrictions provided in an embodiment of the present application. DETAILED DESCRIPTION

[0065] The following will be combined with the drawings in the embodiments of the present application to clearly and completely describe the technical solutions in the embodiments of the present application. Obviously, the described embodiments are only part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of this application.

[0066] The present invention can be used in many general or special computing device environments or configurations, such as personal computers, server computers, handheld or portable devices, tablet devices, multi-processor devices, distributed computing environments including any of the above devices or devices, etc.

[0067] The embodiment of the present invention provides a vehicle access method based on access control restrictions. The method can be applied to various computer terminals or smart terminals. The execution subject can be a processor or server of the computer terminal or smart terminal. The method flow chart of the method is as follows: Figure 1 As shown, specifically including:

[0068] S1: In response to a request instruction for reserving vehicle entry and exit initiated by a user, the user's boarding and alighting points are obtained from the request instruction.

[0069] The reserved vehicle can be a travel vehicle reserved by a user through the Internet, such as a taxi, express car, ride-sharing car, etc. reserved through an online car-hailing platform, or it can be a travel vehicle reserved by a corporate user through a corporate taxi system.

[0070] In one scenario, if a user books a vehicle on an online ride-hailing platform, a travel order will be generated. This travel order will contain order information, such as the user's boarding and alighting points, that is, the pick-up point or the drop-off point, that is, the pick-up point or the drop-off point.

[0071] Then, the order information can be obtained from the request instruction, and the pick-up and drop-off points can be extracted from the order information. The pick-up and drop-off points need to have clear geographic information, such as GPS coordinates, surface names or addresses.

[0072] S2: Determine whether the boarding and alighting point is located within the established electronic fence. If so, determine whether the reserved vehicle meets the entry and exit standards of the electronic fence.

[0073] Since the boarding and alighting points may be located in an internal area where external vehicles are prohibited from entering and cannot enter and exit at will, after determining the boarding and alighting points, it is first necessary to determine whether the boarding and alighting points are located within an established electronic fence. This established electronic fence is the boundary range corresponding to the internal area, such as a community boundary line or a park boundary line, etc. If the boarding and alighting points are located within the established electronic fence, then it is determined whether the reserved vehicle meets the entry and exit standards of the electronic fence.

[0074] The entry and exit standards of the electronic fence can be set according to the requirements set for the corresponding internal area to determine whether the reserved vehicle meets the requirements, such as verifying whether the reserved vehicle is legal, safe, etc.

[0075] S3: If the reserved vehicle meets the entry and exit criteria of the electronic fence, a one-time token is generated based on the reserved vehicle and the user.

[0076] If the reserved vehicle meets the entry and exit standards of the electronic fence, it is preliminarily determined that the reserved vehicle is safe. Then a one-time token can be generated based on the reserved vehicle and the user. The one-time token can be used as a credential of trust between the reserved vehicle, the user and the designated area corresponding to the electronic fence, ensuring that only authorized reserved vehicles and people inside the vehicle can enter the designated area.

[0077] This application uses the reserved vehicle and user to generate a one-time token, which is unique and time-effective, and can also prevent others from intercepting and using it for other vehicle reservation orders, which is highly secure. At the same time, the one-time token can also be traced back to the specific order and user, which is convenient for auditing and security monitoring.

[0078] S4: Send the one-time token to the access control of the electronic fence, so that the access control can verify the reserved vehicle according to the one-time token when the reserved vehicle arrives at the location of the access control, and determine whether the verification is successful.

[0079] A one-time token can be generated by the vehicle platform to which the reserved vehicle belongs after the order is confirmed and sent to the access control of the electronic fence. This access control may refer to the access control system corresponding to the entrance and exit gates of a designated area, such as the access control system of the east gate of a certain community or the access control system of the 3rd gate of a certain park. This embodiment does not impose any restrictions on this.

[0080] After receiving the one-time token, the access control system can prepare for verification. When a vehicle arrives at the location of the access control system, if the vehicle is an external vehicle, it will first determine whether it has received the corresponding one-time token. If so, it is determined that the vehicle is a reserved vehicle that needs to be verified. Therefore, the reserved vehicle is verified based on the one-time token it received, and it is determined whether the verification is successful.

[0081] S5: If the verification is successful, the access control is opened to allow the reserved vehicle to enter and exit the electronic fence through the access control.

[0082] If the verification is successful, it is determined that the reserved vehicle is safe, so the access control can be opened to allow the reserved vehicle to enter the designated area corresponding to the electronic fence through the access control. In this way, the entire process from the user initiating the entry and exit of the reserved vehicle to the authorized entry of the reserved vehicle is automated, which greatly improves efficiency compared to the manual verification process and enhances the user's travel experience.

[0083] After booking the vehicle's passage, you can record relevant information, such as entry time, exit time, vehicle information, and user information, for subsequent query and tracing.

[0084] It can be seen from the above technical solution that the present application obtains the user's boarding and alighting points from the request instruction for the entry and exit of a reserved vehicle initiated by the user; determines whether the boarding and alighting points are located within the established electronic fence, and if so, determines whether the reserved vehicle meets the entry and exit standards of the electronic fence; if the reserved vehicle meets the entry and exit standards of the electronic fence, generates a one-time token based on the reserved vehicle and the user; sends the one-time token to the access control of the electronic fence, so that the access control can verify the reserved vehicle according to the one-time token when the reserved vehicle arrives at the location of the access control, and determine whether the verification is successful; if the verification is successful, the access control is opened to allow the reserved vehicle to enter and exit the electronic fence through the access control. This application directly responds to the request instruction initiated by the user to reserve a vehicle to enter and exit, and then determines whether the user's pick-up point or alighting point is located within the restricted established electronic fence. If so, in order to ensure safety, a one-time token is generated. The one-time token can be used by the access control of the electronic fence to verify the reserved vehicle. If the verification is successful, passage is allowed. This application only opens access rights to trusted reserved vehicles to avoid danger, thereby effectively avoiding danger and ensuring the safety of people and property in the designated area corresponding to the electronic fence. At the same time, it saves time and manpower, reduces the manual management of temporary vehicles by security personnel, reduces the workload, and improves traffic efficiency. Users can get on and off the vehicle directly at the reserved pick-up and drop-off points without having to walk to the pick-up and drop-off points, thereby improving the user's travel experience.

[0085] In the method provided in the embodiment of the present invention, the process of determining whether the reserved vehicle meets the entry and exit standards of the electronic fence is specifically described as follows:

[0086] Determine whether there is an authorized vehicle entry and exit whitelist corresponding to the electronic fence;

[0087] If so, determining whether the user is a user in the authorized vehicle entry and exit whitelist;

[0088] If the user is a user in the authorized vehicle entry and exit whitelist, determining that the reserved vehicle meets the entry and exit criteria of the electronic fence;

[0089] If there is no authorized vehicle entry and exit whitelist corresponding to the electronic fence, obtaining the property system to which the user belongs;

[0090] Determine whether there is a signed access permission agreement between the property system and the vehicle platform to which the reserved vehicle belongs;

[0091] If there is a signed access permission agreement between the property system and the reserved vehicle, it is determined that the reserved vehicle meets the access standards of the electronic fence.

[0092] Specifically, the electronic fence may have a corresponding authorized vehicle entry and exit whitelist, that is, if the user is a user in the authorized vehicle entry and exit whitelist, then the vehicle booked by the user can meet the entry and exit standards of the electronic fence. Therefore, this step first determines whether there is an authorized vehicle entry and exit whitelist, which can improve the overall efficiency. This situation can be adapted to some large enterprises, whose offices are located in their own independent parks. In order to facilitate employee travel, these enterprises will set up authorized vehicle entry and exit whitelists, so that the vehicles booked by the formal employees of the enterprise meet the entry and exit standards of the corresponding electronic fence of their park. This first use of the whitelist mechanism to quickly verify the vehicles booked by the authorized user reduces subsequent complex judgments.

[0093] If there is no whitelist of authorized vehicles to enter and exit, then the verification is done from the perspective of the vehicle to determine the property system to which the user (electronic fence) belongs and the vehicle platform to which the reserved vehicle belongs. If the two have signed an access permission agreement, then the two parties are partners who can trust each other. Therefore, when the user in the property system reserves a vehicle in the vehicle platform, the reserved vehicle will meet the access standards of the electronic fence. This can reduce manual judgment and disputes. This situation can be applied to multiple enterprises or units in a park, and one or more enterprises / units have signed access permission agreements with the vehicle platform through the park property; it can also be applied to communities, that is, community properties have signed access permission agreements with the vehicle platform.

[0094] The following is a detailed description of the process of generating a one-time token based on the reserved vehicle and the user in the present application.

[0095] Obtain the user's identity information, vehicle information of the reserved vehicle, boarding and alighting points, and the time range within which the reserved vehicle is expected to arrive at the access control location;

[0096] Generate a random number using a random number generator;

[0097] The identity information, vehicle information of the reserved vehicle, the boarding and alighting points, and the time range in which the reserved vehicle is expected to arrive at the access control location are combined with the random number to generate a one-time token.

[0098] Specifically, identity information may include user ID, user's unit building number, user's mobile phone number, etc. Vehicle information may include license plate number, reserved vehicle brand and model, reserved vehicle color, driver's name, driver's mobile phone number, etc. As for the time range in which the reserved vehicle is expected to arrive at the access control location, due to the influence of vehicle speed, road conditions, etc., the time point in which the reserved vehicle arrives at the access control location may fluctuate. Therefore, this application sets a time range. For example, in one example, the time range in which the reserved vehicle is expected to arrive at the access control location is 14:00~14:10.

[0099] In addition to the above information, this application also uses a cryptographically secure random number generator (CSPRNG) to generate a high-strength random number to ensure the unpredictability of the token, and then combines the identity information, vehicle information of the reserved vehicle, boarding and alighting points, and the time range when the reserved vehicle is expected to arrive at the access control location with the random number to generate a one-time token.

[0100] The steps of combining the identity information, the vehicle information of the reserved vehicle, the boarding and alighting points, the time range of the estimated arrival of the reserved vehicle at the access control location with the random number to generate a one-time token are specifically described as follows:

[0101] Extracting the user name and mobile phone number of the user from the identity information, and extracting the license plate number of the reserved vehicle from the vehicle information;

[0102] Convert the user's mobile phone number into a first hash value, and convert the user name into binary data;

[0103] Performing a merging operation on the first Hash value and the binary data to obtain a first string;

[0104] intercepting the last four digits of the license plate number, and converting the last four digits of the license plate number into a second hash value;

[0105] Converting the pick-up and drop-off points into a third hash value;

[0106] Convert the time range of the scheduled vehicle's expected arrival at the access control location into a timestamp interval, and add random jitter to the timestamp interval to obtain a second character string;

[0107] Adding the first character string, the second Hash value, the third Hash value and the second character string to the random number to obtain first data;

[0108] A one-time token is generated from the first data.

[0109] Specifically, in order to ensure the security of the one-time token, the user's username, mobile phone number and license plate number are extracted for backup, and a layered hash process is performed on the username, mobile phone number, license plate number, boarding and alighting points, and the time range when the reserved vehicle is expected to arrive at the access control location. Introducing the time range can enhance the timeliness of the one-time token, that is, it will become invalid immediately after one use, preventing subsequent reuse and ensuring one-time use.

[0110] Among them, the user's mobile phone number is hashed, and the user name is converted into binary data, and then merged to obtain the first string, which can enhance security; for the license plate number, only the last four digits are intercepted to avoid exposing the complete license plate number; the boarding and alighting points are hashed to obtain the third hash value; and for the timestamp interval, a random jitter is added to prevent others from attacking by time speculation, further enhancing the security of the one-time token. Finally, the above data is added to the random number to obtain the first data, which can be encoded (such as Base64 encoding) to generate a one-time token. The above hash operation process can select the SHA-256 algorithm (Secure HashAlgorithm 256-bit), so that a fixed-length hash value can be obtained.

[0111] Compared with the traditional token generation method, the one-time token generation process of the present application not only involves simple random numbers or numbers, but also combines identity information, vehicle information of the reserved vehicle, boarding and alighting points, and the time range when the reserved vehicle is expected to arrive at the access control location. This can significantly enhance the security and uniqueness of the one-time token and ensure the internal security of the designated area corresponding to the electronic fence.

[0112] The following embodiment explains in detail the steps of verifying the reserved vehicle according to the one-time token and determining whether the verification is successful in the present application.

[0113] Obtaining the generation time of the one-time token, and determining whether the time interval between the generation time and the current time is less than a preset time interval threshold;

[0114] If so, determining whether the one-time token is intact;

[0115] If complete, extract the estimated time range of the reserved vehicle's arrival at the access control location, the user's identity information, and the license plate number of the reserved vehicle from the one-time token;

[0116] Obtaining the license plate number of the vehicle requesting to enter or exit the access control location;

[0117] The time range is extended according to the preset buffer time to obtain a new time range, and it is determined whether the current time is within the new time range, whether there is a corresponding relationship between the user and the electronic fence, and whether the license plate number of the vehicle requesting entry and exit is the same as the license plate number of the reserved vehicle;

[0118] If the current time is within the new time range, there is a corresponding relationship between the user and the electronic fence, and the license plate number of the vehicle requesting entry and exit is the same as the license plate number of the reserved vehicle, then determine whether there is a strong security verification requirement for the access control;

[0119] If so, a strong security authentication is performed on the reserved vehicle. If the strong security authentication passes, the authentication is determined to be successful; if not, the authentication is determined to be successful.

[0120] Specifically, during the verification process, first determine whether the time interval between the generation time of the one-time token and the current time is less than the preset time interval threshold. The time interval threshold can be set to 10 minutes, 20 minutes, etc., so as to ensure the timeliness of the one-time token, and determine whether the one-time token is complete to ensure the continuity of the subsequent verification process based on the one-time token. Considering traffic jams and other situations, a buffer time can be set for the reserved vehicle, such as expanding the time by five minutes before and after. If the reserved vehicle can reach the access control location within the expanded time range, it is determined that there is no problem with the time. At the same time, it is also necessary to determine whether the license plate number corresponds and whether there is a corresponding relationship between the user and the electronic fence to improve security.

[0121] Because some designated areas have higher security requirements, after the above verification is passed, it is also necessary to determine whether there is a strong security verification requirement for the access control. If so, strong security authentication is performed. If not, the verification is determined to be successful.

[0122] It can also determine whether the height and weight of the reserved vehicle meet the requirements for entering the electronic fence.

[0123] The process of performing strong security authentication on the reserved vehicle may include the following steps:

[0124] Select a strong security authentication method;

[0125] If the strong security authentication method is SMS authentication, a one-time verification code (OTP, One-Time Password) is sent to the mobile phone number corresponding to the reserved vehicle and the access control system at the same time, so that the driver of the reserved vehicle can input the one-time verification code into the interactive interface of the access control system, and the access control system can compare the received one-time verification code with the input one-time verification code;

[0126] If the comparison is successful, it is determined that the strong security authentication has passed;

[0127] If the strong security authentication method is video authentication, a video call is established between the driver of the reserved vehicle and the vehicle platform to which the reserved vehicle belongs, so that the staff of the vehicle platform can authenticate the identity of the driver;

[0128] If the identity authentication passes, it is determined that the strong security authentication passes.

[0129] Specifically, it includes two strong security authentication methods: SMS authentication and video authentication, which allow users or the property system corresponding to the access control system or the electronic fence to choose, thereby improving flexibility.

[0130] Furthermore, after responding to the request instruction for reserving vehicle entry and exit initiated by the user, the method may further include:

[0131] Authenticating the user and the reserved vehicle;

[0132] If the authenticity authentication is passed, an encrypted communication channel is established between the access control and the vehicle platform to which the reserved vehicle belongs;

[0133] The encrypted communication channel is provided with a preset data format, communication rules, encryption method and authentication mechanism so that the access control and the reserved vehicle can interact with each other through the set encrypted communication channel.

[0134] Specifically, authenticity authentication refers to whether the user really exists, such as whether the user exists in the electronic fence, and whether the reserved vehicle really exists, such as whether the license plate number of the reserved vehicle really exists. Digital certificates issued by authoritative organizations can be used for two-way authentication of the server and the client to ensure that the identities of both communicating parties are credible. When the user sends a request instruction, a digital signature can also be performed, and the access control system can verify the signature to confirm the integrity and legality of the request.

[0135] If the authenticity authentication is passed, the SSL / TLS (Secure Sockets Layer / Transport LayerSecurity) protocol can be used to establish an encrypted communication channel between the user and the reserved vehicle to prevent data from being eavesdropped or tampered with. The pre-developed and tested data format, communication rules, encryption method and authentication mechanism are set, the encryption and authentication methods are standardized, and the security of data during transmission is guaranteed. At the same time, the respective request and response processes are clarified to ensure the timely and accurate transmission of data and information. It can also overcome the defect of the existing method that data interoperability is not achieved, thereby realizing an automatic authorization mechanism.

[0136] In addition, the access control system can also provide callable API interface addresses, parameter descriptions, etc., so that only requests from specified IP addresses or domain names are allowed to access the interface.

[0137] Furthermore, the one-time token can also be sent and transmitted through the encrypted communication channel. After the reserved vehicle passes or fails the verification, feedback can be provided through the encrypted communication channel, such as feedback to the vehicle platform and access control. If any abnormal situation is found, it can be notified in time and corresponding measures can be taken.

[0138] and Figure 1Corresponding to the method described above, the embodiment of the present invention also provides a vehicle access device based on access control restrictions, which is used to Figure 1 In the specific implementation of the method, the vehicle access device based on access control restriction provided by the embodiment of the present invention can be used in a computer terminal or various mobile devices, combined with Figure 2 , introduces the vehicle access device based on access control restrictions, such as Figure 2 As shown, the device may include:

[0139] The boarding and alighting point acquisition module 10 is used to respond to a request instruction initiated by a user to reserve a vehicle entry and exit, and to acquire the boarding and alighting point of the user from the request instruction;

[0140] An entry and exit standard judgment module 20 is used to judge whether the boarding and alighting point is located within the established electronic fence, and if so, to judge whether the reserved vehicle meets the entry and exit standards of the electronic fence;

[0141] A one-time token generation module 30, for generating a one-time token based on the reserved vehicle and the user if the reserved vehicle meets the entry and exit criteria of the electronic fence;

[0142] A verification module 40 is used to send the one-time token to the access control of the electronic fence, so that the access control can verify the reserved vehicle according to the one-time token when the reserved vehicle arrives at the location of the access control, and determine whether the verification is successful;

[0143] The access control opening module 50 is used to open the access control if the verification is successful, so as to allow the reserved vehicle to enter and exit the electronic fence through the access control.

[0144] It can be seen from the above technical solution that the present application obtains the user's boarding and alighting points from the request instruction for the entry and exit of a reserved vehicle initiated by the user; determines whether the boarding and alighting points are located within the established electronic fence, and if so, determines whether the reserved vehicle meets the entry and exit standards of the electronic fence; if the reserved vehicle meets the entry and exit standards of the electronic fence, generates a one-time token based on the reserved vehicle and the user; sends the one-time token to the access control of the electronic fence, so that the access control can verify the reserved vehicle according to the one-time token when the reserved vehicle arrives at the location of the access control, and determine whether the verification is successful; if the verification is successful, the access control is opened to allow the reserved vehicle to enter and exit the electronic fence through the access control. This application directly responds to the request instruction initiated by the user to reserve a vehicle to enter and exit, and then determines whether the user's pick-up point or alighting point is located within the restricted established electronic fence. If so, in order to ensure safety, a one-time token is generated. The one-time token can be used by the access control of the electronic fence to verify the reserved vehicle. If the verification is successful, passage is allowed. This application only opens access rights to trusted reserved vehicles to avoid danger, thereby effectively avoiding danger and ensuring the safety of people and property in the designated area corresponding to the electronic fence. At the same time, it saves time and manpower, reduces the manual management of temporary vehicles by security personnel, reduces the workload, and improves traffic efficiency. Users can get on and off the vehicle directly at the reserved pick-up and drop-off points without having to walk to the pick-up and drop-off points, thereby improving the user's travel experience.

[0145] Furthermore, the embodiment of the present application provides a vehicle access device based on access control restrictions. Figure 3 The hardware structure diagram of the vehicle access device based on access control restriction is shown. Figure 3 The hardware structure of the vehicle access device based on access control restrictions may include: at least one processor 01, at least one communication interface 02, at least one memory 03 and at least one communication bus 04.

[0146] In the embodiment of the present application, the number of the processor 01 , the communication interface 02 , the memory 03 , and the communication bus 04 is at least one, and the processor 01 , the communication interface 02 , and the memory 03 communicate with each other through the communication bus 04 .

[0147] The processor 01 may be a central processing unit (CPU), or an application specific integrated circuit (ASIC), or one or more integrated circuits configured to implement the embodiments of the present invention.

[0148] The memory 03 may include a high-speed RAM memory, and may also include a non-volatile memory (non-volatile memory), etc., such as at least one disk memory.

[0149] The memory stores a program, and the processor can call the program stored in the memory, and the program is used to execute the following vehicle access method based on access control restrictions, including:

[0150] In response to a request instruction initiated by a user to reserve a vehicle entry and exit, obtaining the user's boarding and alighting points from the request instruction;

[0151] Determine whether the boarding and alighting point is located within the established electronic fence, and if so, determine whether the reserved vehicle meets the entry and exit standards of the electronic fence;

[0152] If the reserved vehicle meets the entry and exit criteria of the electronic fence, a one-time token is generated based on the reserved vehicle and the user;

[0153] Sending the one-time token to the access control of the electronic fence, so that the access control can verify the reserved vehicle according to the one-time token when the reserved vehicle arrives at the location of the access control, and determine whether the verification is successful;

[0154] If the verification is successful, the access control is opened to allow the reserved vehicle to enter and exit the electronic fence through the access control.

[0155] Optionally, the detailed functions and extended functions of the program may refer to the description of the vehicle access method based on access control restrictions in the method embodiment.

[0156] The embodiment of the present application further provides a storage medium, which may store a program suitable for execution by a processor, and when the program is executed, controls the device where the storage medium is located to execute the following vehicle entry and exit method based on access control restrictions, including:

[0157] In response to a request instruction initiated by a user to reserve a vehicle entry and exit, obtaining the user's boarding and alighting points from the request instruction;

[0158] Determine whether the boarding and alighting point is located within the established electronic fence, and if so, determine whether the reserved vehicle meets the entry and exit standards of the electronic fence;

[0159] If the reserved vehicle meets the entry and exit criteria of the electronic fence, a one-time token is generated based on the reserved vehicle and the user;

[0160] Sending the one-time token to the access control of the electronic fence, so that the access control can verify the reserved vehicle according to the one-time token when the reserved vehicle arrives at the location of the access control, and determine whether the verification is successful;

[0161] If the verification is successful, the access control is opened to allow the reserved vehicle to enter and exit the electronic fence through the access control.

[0162] Specifically, the storage medium may be a computer-readable storage medium, and the computer-readable storage medium may be an electronic memory such as a flash memory, an EEPROM (Electrically Erasable Programmable Read-Only Memory), an EPROM, a hard disk or a ROM.

[0163] Optionally, the detailed functions and extended functions of the program may refer to the description of the vehicle access method based on access control restrictions in the method embodiment.

[0164] In addition, the functional modules in the various embodiments of the present disclosure can be integrated together to form an independent part, or each module can exist separately, or two or more modules can be integrated to form an independent part. If the function is implemented in the form of a software functional module and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present disclosure is essentially or the part that contributes to the prior art or the part of the technical solution can be embodied in the form of a software product, which is stored in a storage medium and includes a number of instructions for a computer device (which can be a personal computer, a live broadcast device, or a network device, etc.) to perform all or part of the steps of the methods of the various embodiments of the present disclosure.

[0165] Finally, it should be noted that, in this article, relational terms such as first and second, etc. are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the terms "include", "comprise" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or device. In the absence of further restrictions, the elements defined by the sentence "comprise a ..." do not exclude the presence of other identical elements in the process, method, article or device including the elements.

[0166] The various embodiments in this specification are described in a progressive manner, and each embodiment focuses on the differences from other embodiments. The same or similar parts between the various embodiments can be referenced to each other.

[0167] The above description of the disclosed embodiments enables those skilled in the art to implement or use the present application. Various modifications to these embodiments will be apparent to those skilled in the art, and the general principles defined herein may be implemented in other embodiments without departing from the spirit or scope of the present application. Therefore, the present application will not be limited to the embodiments shown herein, but will conform to the widest scope consistent with the principles and novel features disclosed herein.

Claims

1. A vehicle access method based on access control, characterized in that: include: In response to a request instruction initiated by a user to reserve a vehicle entry and exit, obtaining the user's boarding and alighting points from the request instruction; Determine whether the boarding and alighting point is located within the established electronic fence, and if so, determine whether the reserved vehicle meets the entry and exit standards of the electronic fence; If the reserved vehicle meets the entry and exit criteria of the electronic fence, a one-time token is generated based on the reserved vehicle and the user; Sending the one-time token to the access control of the electronic fence, so that the access control can verify the reserved vehicle according to the one-time token when the reserved vehicle arrives at the location of the access control, and determine whether the verification is successful; If the verification is successful, the access control is opened to allow the reserved vehicle to enter and exit the electronic fence through the access control.

2. The method according to claim 1, characterized in that: The determining whether the reserved vehicle meets the entry and exit criteria of the electronic fence includes: Determine whether there is an authorized vehicle entry and exit whitelist corresponding to the electronic fence; If so, determining whether the user is a user in the authorized vehicle entry and exit whitelist; If the user is a user in the authorized vehicle entry and exit whitelist, determining that the reserved vehicle meets the entry and exit criteria of the electronic fence; If there is no authorized vehicle entry and exit whitelist corresponding to the electronic fence, obtaining the property system to which the user belongs; Determine whether there is a signed access permission agreement between the property system and the vehicle platform to which the reserved vehicle belongs; If there is a signed access permission agreement between the property system and the reserved vehicle, it is determined that the reserved vehicle meets the access standards of the electronic fence.

3. The method according to claim 1, characterized in that: The generating a one-time token based on the reserved vehicle and the user comprises: Obtain the user's identity information, vehicle information of the reserved vehicle, boarding and alighting points, and the time range within which the reserved vehicle is expected to arrive at the access control location; Generate a random number using a random number generator; The identity information, vehicle information of the reserved vehicle, the boarding and alighting points, and the time range in which the reserved vehicle is expected to arrive at the access control location are combined with the random number to generate a one-time token.

4. The method according to claim 3, characterized in that The step of combining the identity information, vehicle information of the reserved vehicle, the boarding and alighting points, the time range of the reserved vehicle expected to arrive at the access control location with the random number to generate a one-time token includes: Extracting the user name and mobile phone number of the user from the identity information, and extracting the license plate number of the reserved vehicle from the vehicle information; Convert the user's mobile phone number into a first hash value, and convert the user name into binary data; Performing a merging operation on the first Hash value and the binary data to obtain a first string; intercepting the last four digits of the license plate number, and converting the last four digits of the license plate number into a second hash value; Converting the pick-up and drop-off points into a third hash value; Convert the time range of the scheduled vehicle's expected arrival at the access control location into a timestamp interval, and add random jitter to the timestamp interval to obtain a second character string; Adding the first character string, the second Hash value, the third Hash value and the second character string to the random number to obtain first data; A one-time token is generated from the first data.

5. The method according to claim 1, characterized in that The step of verifying the reserved vehicle according to the one-time token and determining whether the verification is successful includes: Obtaining the generation time of the one-time token, and determining whether the time interval between the generation time and the current time is less than a preset time interval threshold; If so, determining whether the one-time token is intact; If complete, extract the estimated time range of the reserved vehicle's arrival at the access control location, the user's identity information, and the license plate number of the reserved vehicle from the one-time token; Obtaining the license plate number of the vehicle requesting to enter or exit the access control location; The time range is extended according to the preset buffer time to obtain a new time range, and it is determined whether the current time is within the new time range, whether there is a corresponding relationship between the user and the electronic fence, and whether the license plate number of the vehicle requesting entry and exit is the same as the license plate number of the reserved vehicle; If the current time is within the new time range, there is a corresponding relationship between the user and the electronic fence, and the license plate number of the vehicle requesting entry and exit is the same as the license plate number of the reserved vehicle, then determine whether there is a strong security verification requirement for the access control; If so, a strong security authentication is performed on the reserved vehicle. If the strong security authentication passes, the authentication is determined to be successful; if not, the authentication is determined to be successful.

6. The method according to claim 5, characterized in that The strong security authentication of the reserved vehicle includes: Select a strong security authentication method; If the strong security authentication method is SMS authentication, a one-time verification code is sent to the mobile phone number corresponding to the reserved vehicle and the access control system at the same time, so that the driver of the reserved vehicle can input the one-time verification code into the interactive interface of the access control system, and the access control system can compare the received one-time verification code with the input one-time verification code; If the comparison is successful, it is determined that the strong security authentication has passed; If the strong security authentication method is video authentication, a video call is established between the driver of the reserved vehicle and the vehicle platform to which the reserved vehicle belongs, so that the staff of the vehicle platform can authenticate the identity of the driver; If the identity authentication passes, it is determined that the strong security authentication passes.

7. The method according to any one of claims 1 to 6, characterized in that: After responding to the request instruction for reserving vehicle entry and exit initiated by the user, the method further includes: Authenticating the user and the reserved vehicle; If the authenticity authentication is passed, an encrypted communication channel is established between the access control and the vehicle platform to which the reserved vehicle belongs; The encrypted communication channel is provided with a preset data format, communication rules, encryption method and authentication mechanism so that the access control and the reserved vehicle can interact with each other through the set encrypted communication channel.

8. A vehicle access device based on access control restrictions, characterized in that: include: A boarding and alighting point acquisition module, for responding to a request instruction initiated by a user to reserve a vehicle entry and exit, and acquiring the boarding and alighting point of the user from the request instruction; An entry and exit standard judgment module is used to judge whether the boarding and alighting point is located within the established electronic fence, and if so, to judge whether the reserved vehicle meets the entry and exit standards of the electronic fence; A one-time token generation module, configured to generate a one-time token based on the reserved vehicle and the user if the reserved vehicle meets the entry and exit criteria of the electronic fence; A verification module, used to send the one-time token to the access control of the electronic fence, so that the access control can verify the reserved vehicle according to the one-time token when the reserved vehicle arrives at the location of the access control, and determine whether the verification is successful; The access control opening module is used to open the access control if the verification is successful, so that the reserved vehicle can enter and exit the electronic fence through the access control.

9. A vehicle access device based on access control restrictions, characterized in that: including memory and processor; The memory is used to store programs; The processor is used to execute the program to implement the various steps of the vehicle access method based on access control restrictions as described in any one of claims 1-7.

10. A storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, each step of the vehicle access method based on access control restrictions as described in any one of claims 1 to 7 is implemented.

Images