Anti-submergence method, anti-submergence system and anti-submergence host

Abstract

The embodiment of the invention provides an anti-back-to-back method, an anti-back-to-back system and an anti-back-to-back host. The method comprises the following steps that: in response to passing of an authenticated person through an access control point, an access control slave sends a passing message to an anti-back host; in response to the passing message, the anti-pass-back host correspondingly records a personnel identifier and a passing direction in the passing message; the access control slave sends an anti-pass-back authentication request to the anti-pass-back host in response to the condition that the passing requesting person requests to pass through the access control point to which the passing requesting person belongs; in response to the anti-pass-back authentication request, the anti-pass-back host determines a latest recorded passing direction as a target passing direction in recorded passing directions corresponding to the personnel identifier in the anti-pass-back authentication request; if the target passing direction is the same as the passing direction in the anti-pass-back authentication request, the anti-pass-back host sends a passing refusal instruction to the access control slave; and in response to the pass refusing instruction, the access control slave controls the access control point to refuse to request the passing person to pass. The occurrence of a sneaking behavior can be effectively prevented, and the safety is improved.

Description

Technical Field

[0001] This application relates to the field of security technology, and particularly to an anti-backtracking method, system, and anti-backtracking host. Background Art

[0002] For security reasons, access control points are set at some entrances and exits. Only authenticated personnel can pass through the access control points, thereby preventing unauthenticated personnel from passing. In the related art, the working principle of the access control point is to default to the state of not allowing passage. When a person is authenticated, the access control point enters the state of allowing passage and returns to the state of not allowing passage again after the person passes.

[0003] However, if an authenticated person replaces an unauthenticated person for authentication and allows the unauthenticated person to pass through the access control point after authentication, it will cause the unauthenticated person to successfully pass through the access control point, posing a security risk. In this article, this behavior of passing through the access control point without authentication is called the backtracking behavior.

[0004] How to effectively prevent the occurrence of backtracking behavior to improve security has become an urgent technical problem to be solved. Summary of the Invention

[0005] The purpose of the embodiments of this application is to provide an anti-backtracking method, system, and anti-backtracking host to effectively prevent the occurrence of backtracking behavior and improve security. The specific technical solutions are as follows:

[0006] The embodiments of this application provide an anti-backtracking method. The method is applied to an anti-backtracking system, and the anti-backtracking system includes an anti-backtracking host and access control slave machines set at each access control point. The method includes: in response to an authenticated person passing through the corresponding access control point, the access control slave machine sends a passing message to the anti-backtracking host, where the passing message includes the person identifier of the authenticated person and the passing direction of the authenticated person, and the passing direction is used to indicate whether the person enters or leaves from the access control point; in response to the passing message, the anti-backtracking host correspondingly records the person identifier and passing direction in the passing message; in response to a person requesting to pass through the corresponding access control point, the access control slave machine sends an anti-backtracking authentication request to the anti-backtracking host, where the anti-backtracking authentication request includes the person identifier of the person requesting to pass and the passing direction requested by the person requesting to pass; in response to the anti-backtracking authentication request, the anti-backtracking host determines the latest recorded passing direction in the passing directions corresponding to the person identifier in the anti-backtracking authentication request as the target passing direction; if the target passing direction is the same as the passing direction in the anti-backtracking authentication request, the anti-backtracking host sends a refusal-to-pass instruction to the access control slave machine; in response to the refusal-to-pass instruction, the access control slave machine controls the corresponding access control point to refuse the person requesting to pass to pass.

[0007] An embodiment of the present application further provides an anti-intrusion system. The anti-intrusion system includes an anti-intrusion host and access control slave machines provided at each access control point. The access control slave machine is configured to send a passing message to the anti-intrusion host in response to an authenticated person passing through the access control point to which it belongs. The passing message includes the person identifier of the authenticated person and the passing direction of the authenticated person. The passing direction is used to indicate whether the person enters or leaves the access control point. In response to a person requesting to pass through the access control point to which it belongs, it sends an anti-intrusion authentication request to the anti-intrusion host. The anti-intrusion authentication request includes the person identifier of the person requesting to pass and the passing direction requested by the person requesting to pass. In response to a deny passing instruction, it controls the access control point to which it belongs to deny the person requesting to pass. The anti-intrusion host is configured to record the person identifier and passing direction in the passing message correspondingly in response to the passing message. In response to the anti-intrusion authentication request, in the passing direction recorded corresponding to the person identifier in the anti-intrusion authentication request, determine the most recently recorded passing direction as the target passing direction. If the target passing direction is the same as the passing direction in the anti-intrusion authentication request, it sends a deny passing instruction to the access control slave machine.

[0008] An embodiment of the present application further provides an anti-intrusion host. The anti-intrusion host is applied to an anti-intrusion system. The anti-intrusion system further includes access control slave machines provided at each access control point. The anti-intrusion host includes: a main board; a CPU is provided on the main board, and the CPU is connected to a network interface and a power interface through pins. The power interface is used to supply power to the main board. The network interface is used to implement communication between the anti-intrusion host and the access control slave machine. The anti-intrusion host is configured to record the person identifier and passing direction in the passing message correspondingly in response to the passing message. The passing message includes the person identifier of the authenticated person and the passing direction of the authenticated person. The passing direction is used to indicate whether the person enters or leaves the access control point. The passing message is sent by the access control slave machine to the anti-intrusion host in response to an authenticated person passing through the access control point to which it belongs. In response to the anti-intrusion authentication request, in the passing direction recorded corresponding to the person identifier in the anti-intrusion authentication request, determine the most recently recorded passing direction as the target passing direction. The anti-intrusion authentication request includes the person identifier of the person requesting to pass and the passing direction requested by the person requesting to pass. The anti-intrusion authentication request is sent by the access control slave machine to the anti-intrusion host in response to a person requesting to pass through the access control point to which it belongs. If the target passing direction is the same as the passing direction in the anti-intrusion authentication request, it sends a deny passing instruction to the access control slave machine, so that the access control slave machine controls the access control point to which it belongs to deny the person requesting to pass in response to the deny passing instruction.

[0009] An embodiment of the present application further provides a computer-readable storage medium, in which a computer program is stored, and when the computer program is executed by a processor, the anti-return method described above is implemented.

[0010] An embodiment of the present application further provides a computer program product containing instructions, which, when running on a computer, causes the computer to execute the anti-return method described above.

[0011] Beneficial effects of the embodiment of the present application:

[0012] An anti-return method, system and anti-return host provided by an embodiment of the present application can be used to record the personnel identification and passing direction by the access control slave unit and send them to the anti-return host for recording after the personnel pass. As a result, the anti-return host can effectively record the entry and exit situations of each person at each access control point. When a person requests to pass through an access control point, the anti-return host determines whether the passing direction recorded for this person most recently is the same as the passing direction requested this time. It can be understood that the normal passing record of a person should be entering a region, leaving the region, entering a region, leaving the region... For a person with a behavior of sneaking back, since this person has not passed the identity authentication of some access control slave units, the passing records of these people recorded by the anti-return host are incomplete. Therefore, there may be consecutive entries and / or consecutive exits. Therefore, if the passing direction recorded for this person most recently is the same as the passing direction requested this time, the anti-return host can determine that this person is a person with a sneaking-back behavior, and thus send a rejection instruction to the access control slave unit to reject the passing of this person, effectively preventing the passing of people with sneaking-back behaviors and improving security.

[0013] Of course, when implementing any product or method of the present application, it is not necessarily required to achieve all the above-mentioned advantages at the same time. BRIEF DESCRIPTION OF THE DRAWINGS

[0014] In order to more clearly illustrate the technical solutions in the embodiments of the present application or the prior art, the following will briefly introduce the drawings required for use in the description of the embodiments or the prior art. Obviously, the drawings in the following description are only some embodiments of the present application. For those of ordinary skill in the art, other embodiments can also be obtained based on these drawings.

[0015] Figure 1 It is a schematic diagram of an architecture of the anti-return system provided by the present application;

[0016] Figure 2 It is a schematic diagram of a process of the anti-return method provided by the present application;

[0017] Figure 3a It is a schematic diagram of a key structure of the anti-return host provided by the present application;

[0018] Figure 3b Schematic diagram of a keyboard structure of the anti-submarine return host provided by this application;

[0019] Figure 3c Schematic diagram of a side structure of the anti-submarine return host provided by this application;

[0020] Figure 3d Schematic diagram of a back structure of the anti-submarine return host provided by this application;

[0021] Figure 3e Schematic diagram of a bottom structure of the anti-submarine return host provided by this application;

[0022] Figure 3f Schematic diagram of an installation process of the anti-submarine return host provided by this application;

[0023] Figure 4a Schematic diagram of a setting method of the anti-submarine return host provided by this application;

[0024] Figure 4b Schematic diagram of another setting method of the anti-submarine return host provided by this application;

[0025] Figure 5 Schematic diagram of an anti-submarine return method according to a route provided by this application;

[0026] Figure 6 Schematic diagram of a process for the access control slave to send a registration message provided by this application;

[0027] Figure 7 Schematic diagram of a process for the access control slave to confirm disconnection from the anti-submarine return host provided by this application;

[0028] Figure 8 Schematic diagram of a structure of the anti-submarine return device provided by this application;

[0029] Figure 9a Schematic diagram of a structure of the anti-submarine return host provided by this application;

[0030] Figure 9b Schematic diagram of another structure of the anti-submarine return host provided by this application;

[0031] Figure 10 Schematic diagram of a structure of the access control slave provided by this application. Detailed implementation manner

[0032] The technical solutions in the embodiments of the present application will be clearly and completely described below with reference to the accompanying drawings in the embodiments of the present application. Obviously, the described embodiments are only a part of the embodiments of the present application, rather than all the embodiments. Based on the embodiments in the present application, all other embodiments obtained by those of ordinary skill in the art based on the present application belong to the scope of protection of the present application.

[0033] To more clearly illustrate the anti-submarine return method provided by the present application, two possible application scenarios of the anti-submarine return method provided by the present application will be exemplarily described below. It can be understood that the following examples are only two possible application scenarios of the anti-submarine return method provided by the present application. In other possible embodiments, the anti-submarine return method provided by the present application can also be applied to other possible application scenarios, and the following examples do not impose any restrictions on this.

[0034] Scenario 1:

[0035] To protect its own information security, an enterprise can set up access control points at the entrances and exits of its park and issue corresponding access control cards to employees. The access control points are equipped with card readers and turnstiles. The turnstiles are default in the closed state to prevent personnel from passing through. When the card reader senses the access control card, it sends an instruction to allow passage to the turnstile of the affiliated access control point to control the turnstile to enter the open state, and personnel can pass through the open turnstile.

[0036] Since the enterprise's employees have access control cards while non-employees do not, theoretically only employees can use the access control cards to enter and leave the park, and non-employees cannot enter or leave the park. However, an employee can swipe the card for a non-employee. For example, the employee first swipes the card to enter the park and then hands his access control card to a non-employee outside the park, and the non-employee uses the employee's access control card to enter the park.

[0037] Scenario 2:

[0038] To improve the safety of experiments, a laboratory needs to standardize the operation procedures of experimental personnel. To more effectively manage the operation procedures of experimental personnel, it is necessary to know the entry and exit situations of each experimental personnel in each area of the laboratory. Based on this, access control points can be set at the entrances and exits of each area of the laboratory, and corresponding access control cards can be issued to experimental personnel. Experimental personnel need to swipe the card at the access control point when entering and leaving the area, so the entry and exit situations can be known according to the card swiping records of each experimental personnel.

[0039] However, some experimenters may not swipe their cards as required, resulting in the access records being unable to accurately reflect the entry and exit situations. Consequently, it becomes difficult to effectively manage the operation processes of the experimenters, posing potential safety hazards. For example, when experimenter A swipes their card to enter Area 1, experimenter B follows closely behind experimenter A and enters Area 1 through the access control point together, causing the access record to fail to reflect that experimenter B has ever entered Area 1. Another example is that when experimenter A swipes their card to leave Area 2, experimenter B follows closely behind experimenter A and leaves Area 2 through the access control point together, resulting in the access record being unable to reflect that experimenter B has ever left Area 2. Additionally, when experimenter B swipes their card at the entrance of Area 3 but does not actually enter Area 3, the access record will wrongly reflect that experimenter B has entered Area 3.

[0040] To prevent these sneak-back behaviors as much as possible, the present application provides an anti-sneak-back method, which is applied to an anti-sneak-back system. Before explaining the steps of the method, the architecture of the anti-sneak-back system will be briefly described below. Refer to Figure 1 , Figure 1 shown in the following is a schematic diagram of an architecture of the anti-sneak-back system provided by the present application, including:

[0041] An anti-sneak-back host 110 and access control slave devices 120 provided at each access control point.

[0042] The number of anti-sneak-back hosts 110 can be one or multiple. For the sake of convenience in description hereinafter, only the case where the number of anti-sneak-back hosts 110 is one will be described. The principle for the case of multiple anti-sneak-back hosts 110 is the same, so it will not be elaborated here. Users can configure the anti-sneak-back system through a Web platform for customized anti-sneak-back.

[0043] One access control slave device 120 can be provided at each access control point, or multiple access control slave devices 120 can be provided simultaneously. The access control slave device 120 should have the ability of identity authentication to verify whether the person requesting to pass through the access control point has the permission to pass through the access control point. Exemplarily, the access control slave device 120 can be externally connected with a card reader, which is used to read the identification of the access card of the person requesting to pass through the access control point and send the read identification to the access control slave device 120. The access control slave device 120 determines whether the identification is a legally registered and legitimate identification. If so, it is determined that the person has the permission to pass through the access control point; if not, it is determined that the person does not have the permission to pass through the access control point.

[0044] If the access control slave device 120 confirms that the person has passed the identity authentication (i.e., has the permission to pass through the access control point) after the identity authentication, the access control slave device 120 will not directly control the affiliated access control point to allow the person to pass through. Instead, it needs to further wait for the anti-sneak-back host 110 to conduct anti-sneak-back authentication. The process of anti-sneak-back authentication will be described in detail hereinafter and will not be elaborated here.

[0045] Moreover, it can be understood that the slave access control device 120 in this document can also perform identity authentication through other methods than access control cards, including but not limited to identifying the fingerprints, pupils, voiceprints, and facial images of personnel. Moreover, it should be noted that the slave access control device 120 will only obtain the fingerprints, pupils, voiceprints, and facial images of personnel when the personnel are aware of and permit it, and the purpose of the slave access control device 120 obtaining the fingerprints, pupils, voiceprints, and facial images is for the purpose of improving security.

[0046] Next, the anti-backflow method provided by this application will be described in conjunction with the anti-backflow host 110 and the slave access control device 120. Refer to Figure 2 , Figure 2 As shown in, it is a schematic flowchart of an anti-backflow method provided by this application, including:

[0047] S201. In response to an authenticated person passing through the corresponding access control point, the slave access control device sends a passing message to the anti-backflow host.

[0048] Among them, the passing message includes the person identifier of the authenticated person and the passing direction of the authenticated person. The passing direction is used to indicate whether the person enters or leaves from the access control point.

[0049] The authenticated person in this document refers to a person who has passed the anti-backflow authentication of the anti-backflow host and the identity authentication of the slave access control device.

[0050] S202. In response to the passing message, the anti-backflow host correspondingly records the person identifier and the passing direction in the passing message.

[0051] S203. In response to a person requesting to pass through the corresponding access control point, the slave access control device sends an anti-backflow authentication request to the anti-backflow host.

[0052] Among them, the anti-backflow authentication request includes the person identifier of the person requesting to pass and the passing direction requested by the person requesting to pass.

[0053] S204. In response to the anti-backflow authentication request, the anti-backflow host determines the most recently recorded passing direction in the passing directions corresponding to the person identifier in the anti-backflow authentication request as the target passing direction.

[0054] S205. If the target passing direction is the same as the passing direction in the anti-backflow authentication request, the anti-backflow host sends a refusal to pass instruction to the slave access control device.

[0055] S206. In response to the refusal to pass instruction, the slave access control device controls the corresponding access control point to refuse the person requesting to pass to pass.

[0056] The anti-return method provided by this application, on the one hand, after a person passes through, the slave access control device sends the person identification and the passing direction to the anti-return host for recording. As a result, the anti-return host can effectively record the entry and exit situations of each person at each access control point. And when a person requests to pass through an access control point, the anti-return host determines whether the passing direction recorded for this person most recently is the same as the passing direction requested this time. It can be understood that the normal passing record of a person should be entering a region, leaving the region, entering a region, leaving the region... For a person with a behavior of sneaking back, since this person has not passed the identity authentication of some slave access control devices, the passing records of these people recorded at the anti-return host are incomplete. Therefore, there may be consecutive entries and / or consecutive exits. Therefore, if the passing direction recorded for this person most recently is the same as the passing direction requested this time, the anti-return host can determine that this person is a person with a behavior of sneaking back, and thus send a refusal-to-pass instruction to the slave access control device to refuse this person to pass, effectively preventing the person with the behavior of sneaking back from passing and improving the security.

[0057] On the other hand, for the anti-return method provided by this application, the slave access control device conducts identity authentication and controls the access control point to allow / deny passage, and the slave access control device sends relevant information about the person passing through (i.e., person identification, passing direction) to the anti-return host, so that the anti-return host independent of the slave access control device can conduct anti-return authentication without the slave access control device conducting anti-return authentication, effectively reducing the performance requirements for the slave access control device and saving the equipment cost of the slave access control device.

[0058] It can be understood that, as described above, in the process of conducting anti-return authentication, it is necessary to record relevant person identifications and passing directions, search for the target passing direction among the recorded passing directions, and determine whether the target passing direction is the same as the passing direction in the anti-return authentication request. All these processes will occupy a certain amount of system resources, and the performance of the slave access control device is often low. If the slave access control device conducts anti-return authentication, it is necessary to improve the hardware of the slave access control device to improve its performance. At the same time, the number of slave access control devices is often large. Therefore, the equipment cost required to improve the slave access control device is often much greater than the equipment cost of adding an anti-return host.

[0059] The following will elaborate on S201 - S206 in detail:

[0060] In S201, theoretically, the process for a person to pass through the access control point to which the slave access control device belongs is as follows: The person first initiates identity authentication and anti-return authentication through the slave access control device. The slave access control device conducts identity authentication, and the anti-return host conducts anti-return authentication. After the authentication is passed, the slave access control device controls the access control point to which it belongs to allow this person to pass.

[0061] Therefore, whenever a person passes through the access control point to which the slave access control machine belongs, the slave access control machine can determine the most recently authenticated person as the authenticated person, and send the person identifier and the passing direction of this person to the anti-intrusion host for recording. In a possible embodiment, the slave access control machine can determine that a person has passed through the affiliated access control point when the anti-intrusion host sends an instruction to allow passage. In another possible embodiment, the affiliated access control point can also send a person passing message to the slave access control machine when it detects that a person has passed through, and the slave access control machine determines that the authenticated person has passed through the affiliated access control point when it receives the person passing message.

[0062] The person identifier is any data that can uniquely identify a person, including but not limited to the person's work number, the access card identifier corresponding to the person, etc. It can be understood that the person identifier can be input by the person to the slave access control machine, or can be recognized by the slave access control machine.

[0063] Exemplarily, taking the person identifier as the work number as an example, the slave access control machine can store the corresponding relationship between attributes such as access card identifier, fingerprint, iris, etc. and the access card identifier. The person inputs their fingerprint to the slave access control machine through a fingerprint scanner, and the slave access control machine determines the work number corresponding to the input fingerprint according to the corresponding relationship as the person identifier of this person. Taking the person identifier as the access card identifier as an example, the person inputs the access card identifier to the slave access control machine through a card reader, and the slave access control machine takes the received access card identifier as the person identifier of this person.

[0064] How the slave access control machine determines the passing direction of a person will be described in detail below and will not be elaborated here.

[0065] In S202, the form in which the anti-intrusion host records the person identifier and the passing direction can be different according to different application scenarios. Exemplarily, the anti-intrusion host can maintain a passing direction sequence for each person identifier respectively. Whenever it receives a passing message, it records the passing direction in the passing message at the end of the passing direction sequence corresponding to the person identifier in the passing message. For example, the anti-intrusion host maintains a passing direction sequence {enter, leave, enter} for the person identifier A, and the anti-intrusion host receives a passing message, and this passing message includes the person identifier A and the passing direction "leave", then the anti-intrusion host adds "leave" to the end of the passing direction sequence corresponding to the person identifier A. At this time, the passing direction sequence corresponding to the person identifier A becomes {enter, leave, enter, leave}.

[0066] In other possible embodiments, the anti-intrusion host can also record the person identifier and the passing direction in the form of a table, a linked list, etc., and this document does not make any restrictions on this.

[0067] In S203, the person requesting access is a person who initiates authentication to the access control slave to request to pass the access point. Similar to the method of obtaining the person identification of the authenticated person mentioned above, the access control slave can use the same acquisition method to obtain the person identification of the person requesting access.

[0068] In S204, it can be considered that the latest recorded passage direction is the passage direction of the person represented by the person identification when he last passed through the access control point. For example, if the latest recorded passage direction is leaving, it means that the person represented by the person identification left the area through the access control point when he last passed through the access control point.

[0069] In S205 and S206, since the target passage direction can be regarded as the passage direction of the person represented by the personnel identification when he passed the access control point most recently, and the passage direction in the anti-passback authentication request is the passage direction requested by the person represented by the personnel identification this time, and a person should normally pass through the access control point in the order of enter, leave, enter, leave..., the passage direction requested this time should be different from the passage direction when passing through the access control point most recently.

[0070] On the contrary, if the passage direction of this request is the same as the passage direction when passing through the access control point most recently, it can be considered that the passage direction recorded in the anti-passback host is inaccurate. The anti-passback host will record the passage direction in the pass message sent by each access control slave. Therefore, if the passage direction recorded in the anti-passback host is inaccurate, it can be considered that the person represented by the personnel identification passed through the access control point without initiating authentication, that is, there was a sneak back behavior, so the person should be denied passage at this time.

[0071] And understandably, Figure 2 The figure is only a possible flow chart of the anti-passback method provided by the present application. In other possible embodiments, S201 - S202 and S203 - S206 may also be executed alternately.

[0072] In order to more clearly illustrate how the anti-passback method provided by the present application effectively prevents the passback behavior, the following is still an exemplary description using the above-mentioned park situation as an example:

[0073] It is assumed that an access control point is set at the entrance and exit of the park, and an access control slave is set at the access control point, and the access control slave is connected to a card reader.

[0074] Normal employees use their access cards to clock in at the card reader when they go to work. The card reader collects the access card ID of the access card and sends it to the access control slave. The access control slave authenticates the access card ID to determine whether the employee has the authority to enter the park, and determines the employee's work number based on the correspondence between the access card ID and the work number.

[0075] The slave access control device sends an anti-return authentication request to the anti-return host. The anti-return authentication request carries the employee number of this employee and the access direction "enter". At this time, the anti-return host does not record the access direction. Therefore, in response to the anti-return authentication request, the anti-return host sends an access permission instruction to the slave access control device. In response to the access permission instruction, the slave access control device controls the access point to allow this employee to enter, and sends a passing message to the anti-return host. The passing message carries the employee number of this employee and the access direction "enter", and the anti-return host correspondingly records the employee number of this employee and the access direction "enter".

[0076] When a normal employee gets off work, they use their access card to punch the card at the card reader. The card reader collects the access card identifier of the access card and sends it to the slave access control device. The slave access control device authenticates the identity of the access card identifier, determines that this employee has the permission to leave the park, and determines the employee number of this employee according to the corresponding relationship between the access card identifier and the employee number.

[0077] The slave access control device sends an anti-return authentication request to the anti-return host. The anti-return authentication request carries the employee number of this employee and the access direction "leave". The anti-return host searches for the latest recorded access direction in the access directions recorded corresponding to this employee number. As described above, at this time, the latest recorded access direction found by the anti-return host should be "enter", which is different from the access direction "leave" carried in the anti-return authentication request. Therefore, the anti-return host sends an access permission instruction to the slave access control device, as Figure 2 shown. If the access directions are different, the anti-return host sends an access permission instruction to the slave access control device. In response to the access permission instruction, the slave access control device controls the access point to allow this employee to leave, and sends a passing message to the anti-return host. The passing message carries the employee number of this employee and the access direction "leave", and the anti-return host correspondingly records the employee number of this employee and the access direction "leave".

[0078] It can be seen that employees can enter and leave the park normally. For those who have the behavior of sneaking back, for example, an employee uses their own access card to enter the park when going to work, and then lends their access card to a non-employee. At this time, the non-employee uses the employee's access card to punch the card at the card reader. The card reader collects the access card identifier of the access card and sends it to the slave access control device. The slave access control device authenticates the identity of the access card identifier, determines that this employee has the permission to enter the park, and determines the employee number of this employee according to the corresponding relationship between the access card identifier and the employee number.

[0079] The slave access control device sends an anti-return authentication request to the anti-return host. The anti-return authentication request carries the employee number of the employee and the access direction "enter". The anti-return host searches for the latest recorded access direction in the access directions recorded corresponding to the employee number. As described above, at this time, the latest recorded access direction found by the anti-return host should be "enter", which is the same as the access direction "enter" carried in the anti-return authentication request. Therefore, the anti-return host sends a deny access instruction to the slave access control device. In response to the deny access instruction, the slave access control device controls the access point to deny the non-employee from entering the park, thus effectively preventing the behavior of sneaking back.

[0080] Next, how the slave access control device obtains the access direction will be described. In one possible embodiment, the access point is a one-way access point. In this embodiment, the slave access control device can determine the direction allowed by the affiliated access point as the access direction of the person. Exemplarily, if an access point only allows people to enter and does not allow people to leave, the slave access control device set at this access point can determine that the access directions of the authenticated person and the person requesting access are both "enter".

[0081] In another possible embodiment, the access point is a two-way access point, that is, it allows people to leave from this access point and also allows people to enter from this access point. In this embodiment, collectors are provided at the exits and entrances of each access point. The collectors are connected to the slave access control device of the access point, and the collectors provided at the exits and the collectors provided at the entrances are configured with different collector identifiers.

[0082] The collector is used to collect the identity authentication information of the person requesting access and send a person passage request including the identity authentication information and the collector identifier to the slave access control device, so that the slave access control device authenticates the person according to the identity authentication information and determines the access direction of the person according to the collector identifier. The identity authentication information includes, but is not limited to, the aforementioned access card identifier, iris, fingerprint and other information.

[0083] Different collectors provided at the exits can be configured with different collector identifiers or the same collector identifier. Similarly, different collectors provided at the entrances can be configured with different collector identifiers or the same collector identifier. However, for any collector provided at the exit, its collector identifier needs to be different from all the collectors provided at the entrances.

[0084] Exemplarily, in one possible embodiment, the collector identifiers of all the collectors provided at the exits can be configured as odd numbers, while the collector identifiers of all the collectors provided at the entrances can be configured as even numbers. In another possible embodiment, the collector identifiers of all the collectors provided at the exits can also be configured as natural numbers with the tens digit being 1, and the collector identifiers of all the collectors provided at the entrances can be configured as natural numbers with the tens digit being 2.

[0085] In this embodiment, since the collector identifiers of the collectors arranged at the exit and the entrance are different, the slave access control device can determine whether the person requesting passage requests to pass through the access control point from the exit or the entrance according to the collector identifier. It can be understood that if the person requesting passage requests to pass through the access control point from the exit, the passage direction of the person requesting passage is "leave", and if the person requesting passage requests to pass through the access control point from the entrance, the passage direction of the person requesting passage is "enter".

[0086] Moreover, since the person to be authenticated is a person requesting passage before passing the authentication, the slave access control device can determine the identifier and passage direction of the person to be authenticated according to the identifier and passage direction of the person requesting passage obtained. Exemplarily, in response to the person to be authenticated passing through the corresponding access control point, the slave access control device sends an anti-passback authentication request including the newly determined identifier and passage direction to the anti-passback host.

[0087] The anti-passback method provided by the present application has been described above on how to implement anti-passback. On this basis, in order to enable users to better customize anti-passback according to actual needs, the present application also provides an anti-passback method according to a plan, an anti-passback method based on a region, and an anti-passback method based on a route, which will be described separately below:

[0088] Regarding the anti-passback method according to a plan:

[0089] It can be understood that in some application scenarios, users may need to perform anti-passback during certain periods, while not need to perform anti-passback during other periods. Exemplarily, perhaps the user only needs to perform anti-passback from 9:00 am to 5:00 pm on weekdays, and does not need to perform anti-passback during other periods. Perhaps the user needs to perform anti-passback from 12:00 noon to 2:00 pm on weekdays, and needs to perform anti-passback throughout the holidays.

[0090] Based on this, in a possible embodiment, the foregoing passing message further includes the time when the passing message is generated. In this embodiment, in response to the passing message, if the time in the passing message meets the target anti-passback condition, the anti-passback host correspondingly records the identifier and passage direction in the passing message; if the time in the passing message does not meet the target anti-passback condition, the anti-passback host refuses to correspondingly record the identifier and passage direction in the passing message.

[0091] The time meeting the target anti-backtracking condition means that the time belongs to the time range indicated by the target anti-backtracking condition. Exemplarily, if the time included in the message is 10:00 am on January 1st, and the time range indicated by the target anti-backtracking condition is from 9:00 am to 5:00 pm on weekdays, then since January 1st is during the New Year's Day holiday, it does not meet the target anti-backtracking condition. However, if the time included in the message is 10:00 am on November 1st, and November 1st is a Monday and not during any holidays, then the time meets the target anti-backtracking condition.

[0092] Moreover, in this embodiment, the anti-backtracking host will only perform anti-backtracking authentication within the time range indicated by the target anti-backtracking condition, and outside the time range indicated by the target anti-backtracking condition, the anti-backtracking host will not perform anti-backtracking authentication. When the anti-backtracking host does not perform anti-backtracking authentication, the access control slave will still send an anti-backtracking authentication request to the anti-backtracking host. In response to these anti-backtracking authentication requests, the anti-backtracking host will directly send an instruction to allow passage to the access control slave, so that the access control slave can control the access point to which it belongs to allow the requested passing personnel to pass.

[0093] By selecting this embodiment, on the one hand, since the anti-backtracking host only records the passing messages generated within the time range indicated by the target anti-backtracking condition and only performs anti-backtracking authentication within the time range indicated by the target anti-backtracking condition, anti-backtracking can be achieved within the time range indicated by the target anti-backtracking condition. At the same time, the anti-backtracking host will directly feedback an instruction to allow passage to the access control slave outside the time range indicated by the target anti-backtracking condition, so that the requested passing personnel only need to pass the identity authentication to pass through the access point, thus realizing no anti-backtracking outside the time range indicated by the target anti-backtracking condition, enabling users to achieve planned anti-backtracking by reasonably setting the target anti-backtracking condition.

[0094] On the other hand, as can be seen from the foregoing description, whether anti-backtracking is performed or not, the execution logic of each access control slave is the same (both will send an anti-backtracking authentication request to the anti-backtracking host), that is, there is no need to configure the access control slave due to the target anti-backtracking condition, and only the target anti-backtracking condition needs to be configured at the anti-backtracking host. Since the number of access control slaves is often much larger than that of the anti-backtracking host, the efficiency of configuring the anti-backtracking host is much higher than that of configuring the access control slave. Therefore, using the anti-backtracking method provided by this application can effectively improve the configuration efficiency of the target anti-backtracking condition.

[0095] The user can remotely access the anti-backtracking host through a terminal (such as a mobile phone, computer, tablet, etc.) to configure the target anti-backtracking condition for the anti-backtracking host. However, according to actual needs, the anti-backtracking condition may change. If the target anti-backtracking condition is changed by remotely accessing the anti-backtracking host through the terminal every time, it will bring inconvenience to the user's operation.

[0096] Based on this, in a possible embodiment, as Figure 3a shown, the anti-submarine return host includes a keyboard composed of multiple physical buttons, and multiple candidate anti-submarine return conditions are pre-configured. Each candidate anti-submarine return condition corresponds to a physical button sequence, and different candidate anti-submarine return conditions correspond to different physical button sequences.

[0097] Exemplarily, taking the physical buttons including physical buttons "0" - "9" as an example, the physical button sequence {0} (i.e., only pressing the physical button "0") may correspond to the first anti-submarine return condition, the physical button sequence {1} (i.e., only pressing the physical button "1") corresponds to the second anti-submarine return condition, the physical button sequence {2} corresponds to the third anti-submarine return condition, and so on. It can also be that the physical button sequence {0, 1} (i.e., pressing the physical button "0" first and then the physical button "1") corresponds to the first anti-submarine return condition, the physical button sequence {1, 3} (i.e., pressing the physical button "1" first and then the physical button "3") corresponds to the second anti-submarine return condition, and the physical button sequence {0, 1, 2} corresponds to the third anti-submarine return condition. No limitation is made on the correspondence between the physical button sequence and the anti-submarine return condition in this article. The structural diagram of the keyboard in the anti-submarine return host can be as Figure 3b shown, and the physical buttons on the keyboard include numeric keys 0 - 9, an enter key, and a doorbell key.

[0098] In this embodiment, in response to the pressing operation on each physical button, the anti-submarine return host determines the candidate anti-submarine return condition corresponding to the physical button sequence pressed by the pressing operation as the target anti-submarine return condition.

[0099] By selecting this embodiment, the user can directly change the target anti-submarine return condition through the physical buttons set on the anti-submarine return host without using the terminal to remotely access the anti-submarine return host every time, so that the user can more conveniently switch the target anti-submarine return condition according to actual needs to control the anti-submarine return host to conduct anti-submarine return according to the user's needs in a planned manner.

[0100] Exemplarily, the user can pre-set a candidate anti-submarine return condition applicable to holidays (hereinafter referred to as anti-submarine return condition A) and a candidate anti-submarine return condition applicable to non-holidays (hereinafter referred to as anti-submarine return condition B), and through configuration, make anti-submarine return condition A correspond to the physical button sequence {0}, and make anti-submarine return condition B correspond to the physical button sequence {1}.

[0101] Then during holidays, the user can control the anti-submarine return host to switch the target anti-submarine return condition to anti-submarine return condition A by pressing the physical button "0", and during non-holidays, the user can control the anti-submarine return host to switch the target anti-submarine return condition to anti-submarine return condition B by pressing the physical button "1".

[0102] Moreover, to prevent unauthorized personnel from switching the target anti-submarine return condition through the physical button, in a possible embodiment, an authorization authentication component can also be set on the anti-submarine return host. Before pressing the physical button, the user needs to input authorization authentication information through the authorization authentication component. The authorization authentication information can be the user's access card, iris, fingerprint, etc.

[0103] In response to the authorization authentication information, the anti-submarine return host authenticates the authorization authentication information to determine whether the user has the permission to switch the target anti-submarine return condition. If so, the authentication result is passed; if not, the authentication result is not passed. The anti-submarine return host only switches the target anti-submarine return condition in response to the pressing operation when the authentication result is passed. However, when the authentication result is not passed, even if the user presses the physical button, the anti-submarine return host still will not switch the target anti-submarine return condition.

[0104] For example, still taking the Figure 3a shown example as an example, the bottom of the anti-submarine return host includes a card-swipe area and a fingerprint recognition area, and these two areas are two different authorization authentication components. Moreover, considering that the card-swipe area has a higher tolerance to dust, while the fingerprint recognition area has a lower tolerance to dust, the card-swipe area is set on the outside of the movable panel, and the fingerprint recognition area is set on the inside of the panel. The fingerprint recognition area can only be used by opening the panel. When the panel is closed, the card-swipe area is exposed on the outside of the anti-submarine return host. At this time, the user can normally use the card-swipe area but cannot use the fingerprint recognition area. When the panel is opened, the fingerprint recognition area is exposed on the outside of the anti-submarine return host. Only then can the user normally use the fingerprint recognition area. By this method, the fingerprint recognition area will not be exposed on the outside of the anti-submarine return host when not in use, effectively reducing the possibility of the fingerprint recognition area being contaminated with dust, and thus reducing the possibility that the fingerprint recognition area cannot accurately recognize fingerprints due to dust contamination.

[0105] It can be understood that Figure 3a the shown is only a possible structural schematic diagram of the anti-submarine return host provided by this application. In the Figure 3a shown example, the anti-submarine return host is a rectangular box with a width of 57.7 mm and a length of 177 mm, and includes a physical keyboard, a card-swipe area, and a fingerprint recognition area. In this example, the side structure diagram of the anti-submarine return host can be as shown in Figure 3c The side thickness of the anti-submarine return host is 27.5 mm, and the back of the anti-submarine return host can also include a mounting backplane to facilitate mounting the anti-submarine return host on the wall or on the side of the turnstile. The thickness above the backplane is 1 mm, and the thickness below the backplane is 7.1 mm. The back structure diagram of the anti-submarine return host can be as shown in Figure 3dAs shown, the back of the anti-submarine return host is a rectangular design with a width of 57.7 mm and a length of 177 mm. There is an interface window on the back of the anti-submarine return host, which includes an alarm interface, an external cable, and a debugging interface (i.e., a debugging serial port). Among them, the alarm interface can be used to externally connect an alarm to achieve alarm; the external cable includes the power cable of the anti-submarine return host, that is, it contains power; the debugging interface is only for debugging, that is, it is used to debug the anti-submarine return host to facilitate maintaining the normal operation of the anti-submarine return host. And, there is also an anti-tamper button on the back of the anti-submarine return host to prevent the anti-submarine return host from being violently removed. The bottom structure diagram of the anti-submarine return host can be as Figure 3e shown. From the bottom of the anti-submarine return host, the fingerprint reader of the fingerprint recognition module embedded in the anti-submarine return host can be seen, which is used to read fingerprints. And the bottom of the anti-submarine return host also includes a screw hole to facilitate fixing the anti-submarine return host to the wall or the side of the turnstile.

[0106] In other possible embodiments, the anti-submarine return host provided in this application can also be of other sizes and other shapes (for example, it can be a disc shape with a diameter of 150 mm, or a regular hexagonal box shape with a side length of 100 mm, or an irregular shape). And the anti-submarine return host may not include a keyboard, and may also include a touch screen with a virtual keyboard displayed. The virtual keyboard has the same function as the aforementioned physical buttons, which will not be elaborated here. And the anti-submarine return host can only include one of the card swiping area and the fingerprint recognition area, and can also include other permission authentication components, such as a voiceprint acquisition component, an iris recognition component, etc.

[0107] The installation process of the anti-submarine return host can be as Figure 3f shown. Refer to Figure 3f , the installation method of the anti-submarine return host is wall-mounted. When installing the anti-submarine return host, first fix the back panel of the anti-submarine return host at the position where it needs to be installed. The anti-submarine return host will be fixed on the back panel through the screws on the north of the anti-submarine return host, and the anti-submarine return host will be reinforced through the screws at the bottom of the anti-submarine return host, thus completing the installation of the anti-submarine return host. And in order for users to conveniently switch the anti-submarine return conditions through the physical buttons on the anti-submarine return host, the anti-submarine return host should be installed in a place convenient for users to touch. And, the anti-submarine return host needs to form an anti-submarine return system with the access control slave machine and the turnstile controlled by the access control slave machine. Therefore, the anti-submarine return host needs to be installed as close to the access control slave machine as possible, and the anti-submarine return slave machine can be installed on the turnstile as an external controller. Exemplarily, in one possible embodiment, the anti-submarine return host can be as Figure 4a shown, set on the front of the turnstile. Among them, the front of the turnstile refers to the surface parallel to the passing direction of the user through the turnstile on the upper side of the turnstile. The anti-submarine return host can also be as Figure 4bAs shown, it is set on the side of the turnstile. Here, the side of the turnstile refers to the surface perpendicular to the passing direction of users through the turnstile. In other possible embodiments, the anti-backtracking host may not be set on the turnstile. For example, the anti-backtracking host may be set in a central control room, a guard room, or other locations.

[0108] For the anti-backtracking method by area:

[0109] It can be understood that in some application scenarios, users only hope that no backtracking behavior occurs in specific areas. Exemplarily, access control points are set at the entrances and exits of the park, and access control points are also set at the entrances and exits of each office building in the park. Considering that even if non-employees enter the park, it will not affect the enterprise, users may only hope to perform anti-backtracking on the interior of the office building and not perform anti-backtracking on the areas in the park other than the office building.

[0110] Based on this, in a possible embodiment, the user can select one or more areas. For each area selected by the user, an access control slave machine combination will be generated, and the access control slave machine combination includes the access control slave machines located in that area. How the user selects the area will be described below and will not be elaborated here.

[0111] In this embodiment, the anti-backtracking host not only correspondingly records the personnel identification and passing direction in the passing message, but also correspondingly records the access control slave machine that sends the passing message. And when the anti-backtracking host determines the latest recorded passing direction, it will determine the access control slave machines belonging to the same access control slave machine combination as the access control slave machine that sends the anti-backtracking authentication request as the target access control slave machines, and determine the latest recorded passing direction corresponding to the target access control slave machines as the target passing direction.

[0112] Exemplarily, assume that the anti-backtracking host sequentially receives passing message 1 sent by access control slave machine 1, passing message 2 sent by access control slave machine 2, and passing message 3 sent by access control slave machine 1. And passing message 1 includes personnel identification A and passing direction "enter", passing message 2 includes personnel identification A and passing direction "leave", and passing message 3 includes personnel identification B and passing direction "leave".

[0113] At this time, the anti-backtracking host should record the following three records:

[0114] Record 1: Access control slave machine 1 - Personnel identification A - Enter;

[0115] Record 2: Access control slave machine 2 - Personnel identification A - Leave;

[0116] Record 3: Access control slave machine 1 - Personnel identification B - Leave;

[0117] And assume that the anti-submarine return host receives the anti-submarine return authentication request sent by the access control slave 3. The anti-submarine return authentication request includes the personnel identification A and the access direction "enter". Moreover, the access control slave 3 and the access control slave 2 do not belong to the same access control slave combination, while the access control slave 3 and the access control slave 1 belong to the same access control slave combination.

[0118] Since the access direction "leave" in record 3 corresponds to the personnel identification B, rather than the personnel identification A in the anti-submarine return authentication request, the access direction in record 3 is obviously not the target access direction.

[0119] Also, since the access control slave 3 and the access control slave 1 belong to the same access control slave combination, while the access control slave 3 and the access control slave 2 do not belong to the same access control slave combination, the anti-submarine return host determines that the target access control slave includes the access control slave 1 but does not include the access control slave 2. Therefore, although record 2 is recorded later than record 1, record 2 is not a record for the target access control slave. Thus, the access direction in record 2 is obviously not the target access direction either.

[0120] Record 1 is not only a record for the personnel identification A but also a record for the target access control slave. Therefore, the access direction in record 1 is the target access direction. Accordingly, in response to the anti-submarine return authentication request sent by the access control slave 3, the anti-submarine return host determines that the target access direction is "enter". Since the target access direction is the same as the access direction in the anti-submarine return authentication request, the anti-submarine return authentication cannot be passed, and the anti-submarine return host will send a reject access instruction to the access control slave 3.

[0121] It can be understood that the access control slave 1 and the access control slave 3 belong to the same access control slave combination, which indicates that the access control slave 1 and the access control slave 3 are located in the same area (hereinafter referred to as the target area). From record 1, it can be seen that the personnel represented by the personnel identification A entered the target area. And from the anti-submarine return authentication request of the access control slave 3, it can be known that this personnel requests to enter the target area again. During the period from the generation of record 1 to the generation of the anti-submarine return authentication request, there is no record of this personnel leaving the target area. Therefore, it can be considered that there is a behavior of sneaking back at this time. For example, after entering the target area, this personnel lent his access card to other personnel so that the other personnel could enter the target area using the access card. Therefore, at this time, the personnel should be refused to pass through the access point to which the access control slave 3 belongs.

[0122] It can be seen that for this embodiment, only by setting the access control slaves in a specific area in the same access control slave combination can anti-submarine return for the specific area be achieved, and anti-submarine return is not performed for other areas outside the specific area. Taking the aforementioned examples of the park and the office building, the user can respectively set the access control slaves at the access points of each office building in different access control slave sequences to achieve anti-submarine return for the office building area.

[0123] Exemplarily, assume that there are a total of 3 office buildings in the park, denoted as Office Building A, B, and C respectively. Office Building A has three entrances and exits, denoted as Entrance / Exit A1, A2, and A3 respectively. Office Building B has two entrances and exits, denoted as Entrance / Exit B1 and B2 respectively. Office Building C has four entrances and exits, denoted as Entrance / Exit C1, C2, C3, and C4 respectively. Then the user can set the access control slave machines installed at Entrance / Exit A1, A2, and A3 as an access control slave machine combination, set the access control slave machines installed at Entrance / Exit B1 and B2 as an access control slave machine combination, and set the access control slave machines installed at Entrance / Exit C1, C2, C3, and C4 as an access control slave machine combination. Then when someone sneaks back inside Office Buildings A, B, and C, as described above, the anti-sneak-back host will send a deny access instruction to the access control slave machine to prevent the sneak-back behavior. When someone sneaks back in an area outside Office Buildings A, B, and C, since the access control slave machines installed in the area outside Office Buildings A, B, and C do not belong to any access control slave machine combination, the anti-sneak-back host will not be able to determine the target access control slave machine and thus will not be able to determine the target access direction. At this time, the target access direction obviously cannot be the same as the access direction in the anti-sneak-back authentication request. Therefore, the anti-sneak-back host will send an allow access instruction to the access control slave machine, that is, the access control slave machine will not prevent the sneak-back behavior occurring in the area outside Office Buildings A, B, and C.

[0124] Moreover, as can be seen from the examples of the foregoing Records 1-3, although Record 2 is later than Record 1 and also corresponds to the personnel identifier A, the access direction in Record 1 is the target access direction to be determined. Therefore, it is difficult to accurately determine the target access direction only based on the sequence of records and the corresponding personnel identifiers. Based on this, in a possible embodiment, the anti-sneak-back host can separately record the access records generated by the access control slave machines in different areas to facilitate finding the target access direction according to the records.

[0125] Exemplarily, still taking the foregoing Records 1-3 as an example, and assuming that Access Control Slave Machine 1 and Access Control Slave Machine 3 belong to Area A, and Access Control Slave Machine 2 belongs to Area B, then the anti-sneak-back host records the foregoing Record 1 and Record 3 corresponding to Area A, and records the foregoing Record 2 corresponding to Area B.

[0126] Since Access Control Slave Machine 3 belongs to Area A, when the anti-sneak-back host receives the anti-sneak-back authentication request sent by Access Control Slave Machine 3, it will search for the target access direction in Record 1 and Record 3 recorded corresponding to Area A. Also, since Record 3 corresponds to the personnel identifier B which is different from the personnel identifier A in the anti-sneak-back authentication request, while Record 1 corresponds to the personnel identifier A which is the same as the personnel identifier A in the anti-sneak-back authentication request, the anti-sneak-back host can determine that the access direction in Record 1 is the target access direction.

[0127] By selecting this embodiment and recording passing messages according to the areas to which the slave access control devices belong, the number of records to be processed when searching for the passing direction of the target can be effectively reduced. Taking the foregoing example as an example, when searching for the passing direction of the target, record 2 does not need to be processed, and only records 1 and 3 need to be processed.

[0128] For the anti-backtracking method according to the route:

[0129] It can be understood that in some application scenarios, users hope that personnel will travel along a specific route. For example, for the safety of tourists in scenic spots, it is hoped that tourists will visit each scenic spot in an orderly manner in turn, so as to avoid potential safety hazards caused by overcrowding of tourists at some scenic spots.

[0130] Based on this, in a possible embodiment, the user can set one or more routes. For each route selected by the user, an access control slave device sequence will be generated. The access control slave device sequence includes the access control slave devices located on the route, and the order of each access control in the access control slave device sequence is the same as the order on the route. Exemplarily, a route set by the user passes through access control point A, access control point B, and access control point C in sequence. Then, for this route, an access control slave device sequence {access control slave device A, access control slave device B, access control slave device C} will be generated, where access control slave device A is the access control slave device set at access control point A, access control slave device B is the access control slave device set at access control point B, and access control slave device C is the access control slave device set at access control point C. Exemplarily, the schematic diagram of the anti-backtracking route can be as Figure 5 shown. The person requesting passage can only be authenticated in sequence according to the set anti-backtracking route and pass unidirectionally. They can enter the area between access control slave device A and access control slave device B through access control slave device A, and cannot enter the area between access control slave device A and access control slave device B through access control slave device B.

[0131] In this embodiment, the anti-backtracking host not only corresponds to record the personnel identifier and passing direction in the passing message, but also corresponds to record the access control slave device that sends the passing message. And when the anti-backtracking host determines the latest recorded passing direction, it will determine the access control slave device that is one position before the access control slave device that sends the anti-backtracking authentication request in the access control slave device sequence as the target access control slave device, and determine the passing direction corresponding to the latest record of the target access control slave device as the target passing direction.

[0132] Suppose the anti-backtracking host receives passing message 4 sent by access control slave device 1, passing message 5 sent by access control slave device 2, and passing message 6 sent by access control slave device 3 in sequence, and passing message 4 includes personnel identifier A and passing direction "enter", passing message 5 includes personnel identifier A and passing direction "leave", and passing message 6 includes personnel identifier A and passing direction "leave".

[0133] At this time, the anti-backtracking host should record the following three records:

[0134] Record 4: Door access slave 1 - Personnel identification A - Enter;

[0135] Record 5: Door access slave 2 - Personnel identification A - Leave;

[0136] Record 6: Door access slave 3 - Personnel identification A - Leave;

[0137] And assume that the anti-submarine return host receives an anti-submarine return authentication request sent by door access slave 4. The anti-submarine return authentication request includes personnel identification A and the passage direction "Leave", and door access slave 4, door access slave 1, and door access slave 2 belong to the same door access slave sequence, and this door access slave sequence is {door access slave 1, door access slave 2, door access slave 4}.

[0138] Then the door access slave located immediately before door access slave 4 in this door access slave sequence is door access slave 2. Therefore, the anti-submarine return host will determine that door access slave 2 is the target door access slave. According to Records 4 - 6, the latest passage direction corresponding to personnel identification A and the target door access slave record is the passage direction "Leave" in Record 5. Therefore, the anti-submarine return host will determine the target passage direction as "Leave". Since the target passage direction is the same as the passage direction in the anti-submarine return authentication request, the anti-submarine return authentication cannot be passed, and the anti-submarine return host will send a deny passage instruction to door access slave 3.

[0139] It can be understood that the user sets the door access slave sequence {door access slave 1, door access slave 2, door access slave 4}, indicating that the user hopes that personnel will pass through the door access points to which door access slave 1, door access slave 2, and door access slave 4 belong in sequence. From Record 4, it can be seen that the personnel represented by personnel identification A enter the area between door access slave 1 and door access slave 2 (hereinafter referred to as the first area) from the door access point to which door access slave 1 belongs. From Record 5, it can be seen that this personnel leaves the first area from the door access point to which door access slave 2 belongs. Theoretically, at this time, this personnel should be in the area between door access slave 2 and door access slave 4 (hereinafter referred to as the second area).

[0140] And from the anti-submarine return authentication request, it can be seen that this personnel requests to leave from door access slave 4, that is, requests to enter the second area. And there is no record of this personnel leaving the second area during the period from the generation of Record 5 to the generation of the anti-submarine return authentication request. Therefore, it can be considered that there is a behavior of sneaking back at this time. For example, after entering the second area, this personnel leaves the second area by bypassing door access slave 4 and turns back to door access slave 4, hoping to turn back to the second area. Therefore, at this time, the personnel should be refused to pass through the door access point to which door access slave 4 belongs to prevent this personnel from turning back.

[0141] It can be seen that by selecting this embodiment, only by setting each door access slave in a specific route as the same door access slave sequence in turn, anti-submarine return for a specific route can be achieved, and anti-submarine return is not performed on other areas outside the specific route.

[0142] Also, as can be seen from the examples of the foregoing records 4-6, although record 6 is later than record 5 and also corresponds to the personnel identifier A, the direction of passage in record 5 is the target direction of passage to be determined. Therefore, it is difficult to accurately determine the target direction of passage only based on the chronological order of the records and the corresponding personnel identifiers. Based on this, in a possible embodiment, the anti-backtracking host can separately record the passage records generated by the access control slave machines on different routes, so as to facilitate finding the target direction of passage according to the records.

[0143] Exemplarily, still taking the foregoing records 4-6 as an example, and assuming that access control slave machine 1, access control slave machine 2, and access control slave machine 4 belong to route A, and access control slave machine 2 belongs to route B (route B may also include other access control slave machines other than access control slave machines 1-4), then the anti-backtracking host records the foregoing records 4 and 5 corresponding to route A, and records the foregoing record 6 corresponding to route B.

[0144] Since access control slave machine 4 belongs to route A, when the anti-backtracking host receives the anti-backtracking authentication request sent by access control slave machine 4, it will search for the target direction of passage in records 4 and 5 recorded corresponding to route A. Since record 5 corresponds to the personnel identifier A and is later than record 4, the anti-backtracking host can determine that the direction of passage in record 5 is the target direction of passage.

[0145] Selecting this embodiment can effectively reduce the number of records to be processed when finding the target direction of passage. Taking the foregoing example as an example, when finding the target direction of passage, it is not necessary to process record 6, but only records 4 and 5 need to be processed.

[0146] It can be understood that although the anti-backtracking method by region and the anti-backtracking method by route are separately described above, the anti-backtracking method provided in this application also supports anti-backtracking by region and by route simultaneously. Exemplarily, the user can select one or more regions and simultaneously set one or more routes. For each region selected by the user, an access control slave machine combination will be generated, and the access control slave machine combination includes the access control slave machines located in the region. For each route selected by the user, an access control slave machine sequence will be generated, and the access control slave machine sequence includes the access control slave machines located on the route, and the order of each access control in the access control slave machine sequence is the same as its order on the route.

[0147] In response to the anti-tailgating authentication request sent by the access control slave, if the access control slave belongs to the access control slave combination but not to the access control slave sequence, the anti-tailgating host performs anti-tailgating authentication according to the relevant instructions of the aforementioned anti-tailgating method by area. If the access control slave belongs to the access control slave sequence but not to the access control slave combination, the anti-tailgating host performs anti-tailgating authentication according to the relevant instructions of the aforementioned anti-tailgating method by route. If the access control slave belongs to neither the access control slave combination nor the access control slave sequence, the anti-tailgating host will send an instruction to allow passage to the access control slave whether according to the relevant instructions of the aforementioned anti-tailgating method by area or according to the relevant instructions of the aforementioned anti-tailgating method by route.

[0148] For the case where the access control slave belongs to both the access control slave combination and the access control slave sequence, the anti-tailgating host will perform anti-tailgating authentication according to the relevant instructions of the aforementioned anti-tailgating method by area and the anti-tailgating method by route respectively. Only when the anti-tailgating authentication is passed in both ways, the anti-tailgating host will send an instruction to allow passage to the access control slave. Otherwise, if at least one way fails the authentication, the anti-tailgating host will send an instruction to deny passage to the access control slave.

[0149] The following will describe how users configure the access control slave sequence and the access control slave combination:

[0150] In a possible embodiment, the user can pre-burn the access control slave sequence and the access control slave combination into the anti-tailgating host. In another possible embodiment, considering that the access control slaves in the anti-tailgating system may change, the anti-tailgating host can maintain a device list for recording each access control slave in the anti-tailgating system.

[0151] When the user needs to configure the access control slave sequence and the access control slave combination, the user remotely accesses the anti-tailgating host through the terminal. The anti-tailgating host displays the device list, and the user configures the access control slave sequence and the access control slave combination according to the device list displayed by the anti-tailgating host.

[0152] As described above, the access control slaves in the anti-tailgating system may change. For example, some access control slaves are removed, or some new access control slaves are added. Therefore, the anti-tailgating host needs to update the device list it maintains to make the access control slaves recorded in the device list as accurate as possible.

[0153] In a possible embodiment, the anti-tailgating host can periodically send broadcast messages. In response to the broadcast messages, the access control slaves send response messages to the anti-tailgating host. For each received response message, if the access control slave that sent the response message is not in the device list, the access control slave that sent the response message is added to the device list. At the same time, if the anti-tailgating host does not receive the response message sent by the access control slave in the device list, the access control slave is deleted from the device list.

[0154] Exemplarily, assume that the device list is {access control slave A, access control slave B, access control slave C}, and the anti-intrusion host receives response messages sent by access control slave A, access control slave B, and access control slave D. Then, the anti-intrusion host adds access control slave D to the device list and deletes access control slave C from the device list.

[0155] However, this solution requires the anti-intrusion host to actively send broadcast messages. Since the number of access control slaves is large, it will cause a large bandwidth pressure on the anti-intrusion host. Based on this, in another possible embodiment, the address of the anti-intrusion host can be pre-configured on each access control slave, that is, the user sets the IP of the anti-intrusion host on the access control slave, and, as Figure 6 shown, at every first preset time interval, each access control slave sends a registration message to the anti-intrusion host according to the configured address.

[0156] In response to the registration message, if the access control slave that sends the registration message is not recorded in the device list, the anti-intrusion host records the access control slave that sends the registration message in the device list. If the access control slave that sends the registration message is recorded in the device list, the anti-intrusion host updates the record of the access control slave that sends the registration message in the device list. And, the anti-intrusion host deletes the access control slave whose record has not been updated for more than a second preset time from the device list, where the second preset time is not less than the first preset time.

[0157] Exemplarily, still assume that the device list is initially empty, and assume that the first preset time is 15 min and the second preset time is 20 min. Then, if at t = 0 min, the anti-intrusion host receives registration messages sent by access control slave A, access control slave B, and access control slave C respectively. Since access control slave A, access control slave B, and access control slave C are not recorded in the device list, the anti-intrusion host records access control slave A, access control slave B, and access control slave C in the device list. At this time, the device list is {access control slave A, access control slave B, access control slave C}, and the update times of access control slave A - C are all t = 0 min. At t = 15 min, since access control slave C goes offline and a new access control slave D goes online at the same time, the anti-intrusion host receives registration messages sent by access control slave A, access control slave B, and access control slave D. Since access control slave D is not recorded in the device list, while access control slave A and access control slave B are already recorded in the device list, access control slave D is recorded in the device list, and the records of access control slave A and access control slave B are updated. At this time, the device list is {access control slave A, access control slave B, access control slave C, access control slave D}, and the update times of access control slave A, B, and D are all t = 15 min, and the update time of access control slave C is t = 0 min.

[0158] At t = 20 min, since the update time of slave access control device C is t = 0 min, the record of slave access control device C has not been updated for 20 min at this time. Therefore, slave access control device C is deleted from the device list. At this time, the device list is {slave access control device A, slave access control device B, slave access control device D}, and the update times of slave access control devices A, B, and D are all t = 15 min.

[0159] Selecting this embodiment can, on the one hand, enable the anti-submarine return host to update the device list in a timely manner. On the other hand, since the device list is updated by the slave access control device sending a registration message to the anti-submarine return host, the anti-submarine return host does not need to send messages to each slave access control device separately, effectively reducing the bandwidth pressure on the anti-submarine return host.

[0160] During the operation of the anti-submarine return host, the anti-submarine return host may be disconnected from the slave access control device due to various reasons such as network interruption and insufficient power, that is, the anti-submarine return host is offline. In the case of the anti-submarine return host being offline, the slave access control device cannot receive the response of the anti-submarine return host to the anti-submarine return authentication request. And since the slave access control device completely controls the opening or non-opening of the gate set at the access control point according to the allow-pass instruction or deny-pass instruction sent by the anti-submarine return host in response to the anti-submarine return authentication request, thereby controlling whether the requesting person can pass at the access control point. Therefore, in the case of the anti-submarine return host being offline, the slave access control device cannot receive the allow-pass instruction or deny-pass instruction of the anti-submarine return host. If the slave access control device does not receive the instruction, it will prompt timeout and not open the door, resulting in the situation that the slave access control device never opens the door during the peak period when the anti-submarine return host is offline, causing abnormal passage.

[0161] Based on this, in a possible embodiment, if the slave access control device confirms that it is disconnected from the anti-submarine return host, it controls the access control point to which it belongs to allow the requesting person to pass.

[0162] Specifically, the method for the slave access control device to confirm that it is disconnected from the anti-submarine return host can be as Figure 7 shown. After the slave access control device sends an anti-submarine return authentication request to the anti-submarine return host, if the slave access control device does not receive the instruction sent by the anti-submarine return host in response to the anti-submarine return authentication request within the preset time, the slave access control device records the number of timeouts once, and records the number of timeouts as num. Initially, the value of num is 0. See Figure 7, initially, num in the timeout count record is 0. If a person requesting passage requests to pass through the corresponding access control point, the slave access control device authenticates the identity of the person requesting passage, that is, initiates authentication to determine whether the person requesting passage has the permission to pass through the corresponding access control point. When the slave access control device successfully authenticates the identity of the person requesting passage, the slave access control device determines whether the timeout count num is greater than 3. If the timeout count is greater than 3, it is considered that the slave access control device is disconnected from the anti-passback host, and the slave access control device can enter the single-device mode and control whether the turnstile set at the access control point opens according to the authentication result of the person requesting passage. Since the slave access control device has successfully authenticated the identity of the person requesting passage as described above, the slave access control device will control the turnstile set at the access control point to open for the person requesting passage to pass through.

[0163] If the timeout count is not greater than 3, the slave access control device sends an anti-passback authentication request to the anti-passback host and determines whether it receives the instruction sent by the anti-passback host in response to the anti-passback authentication request, that is, determines whether the anti-passback host returns a result. If the slave access control device receives the instruction sent by the anti-passback host in response to the anti-passback authentication request, the slave access control device enters the anti-passback mode and executes the instruction sent by the received anti-passback host, that is, executes the result. If the slave access control device does not receive the instruction sent by the anti-passback host in response to the anti-passback authentication request, the timeout count is incremented by 1, that is, the timeout count record num++. Then the slave access control device initiates authentication again. If the slave access control device fails to receive the instruction sent by the anti-passback host in response to the anti-passback authentication request three times in a row, the timeout count num is 3. At this time, the slave access control device can enter the single-device mode and control whether the turnstile set at the access control point opens according to the authentication result of the person requesting passage.

[0164] In this embodiment, if the slave access control device is in the single-device mode, after successfully authenticating the identity of the person requesting passage next time, it will still send an anti-passback authentication request to the anti-passback host. When the slave access control device fails to receive the instruction sent by the anti-passback host in response to the anti-passback authentication request three times in a row, the slave access control device will control whether the turnstile set at the access control point opens according to the authentication result of the person requesting passage. And so on until the slave access control device receives the instruction sent by the anti-passback host in response to the anti-passback authentication request.

[0165] Selecting this embodiment allows the slave access control device to control whether the turnstile set at the access control point opens according to the authentication result of the person requesting passage when the slave access control device determines that it is disconnected from the anti-passback host, thereby controlling whether the corresponding access control point allows the person requesting passage to pass through, and avoiding the situation where the slave access control device keeps the door closed during peak hours due to the anti-passback host being offline, resulting in abnormal passage.

[0166] Moreover, in a possible embodiment, a prompt message can be displayed on the screen of the slave access control device to facilitate troubleshooting by users or administrators. The prompt message displayed on the slave access control device is sent from the anti-passback host to the slave access control device, and users can customize the prompt messages displayed on the slave access control device under different circumstances. Exemplarily, after the anti-passback host receives an anti-passback authentication request and performs anti-passback authentication, if it sends an instruction to allow passage to the slave access control device, it indicates that the anti-passback authentication is successful. At this time, the slave access control device executes the instruction to allow passage, that is, controls the turnstile set at the access control point to open the door, and displays the prompt message of "verification success" on the screen. If the anti-passback host sends an instruction to deny passage to the slave access control device, it indicates that the anti-passback authentication fails. At this time, the slave access control device controls the turnstile set at the access control point not to open the door, and displays the prompt message of "Antipassback failure" on the screen. If the slave access control device does not receive a response from the anti-passback host to the anti-passback authentication request within a preset time, a prompt message of "antipassback timeout" can be displayed on the screen of the slave access control device, and the slave access control device controls the turnstile set at the access control point not to open the door.

[0167] Corresponding to the foregoing anti-passback method, an embodiment of the present application further provides an anti-passback device. The device is applied to an anti-passback system, and the anti-passback system includes an anti-passback host and slave access control devices provided at each access control point, as Figure 8 shown, the device includes:

[0168] A message sending module 801, configured to, in response to an authenticated person passing through the corresponding access control point, the slave access control device send a passing message to the anti-passback host, where the passing message includes the person identifier of the authenticated person and the passing direction of the authenticated person, and the passing direction is used to indicate whether the person enters or leaves from the access control point;

[0169] A passing message recording module 802, configured to, in response to the passing message, the anti-passback host correspondingly record the person identifier and the passing direction in the passing message;

[0170] An authentication request sending module 803, configured to, in response to a person requesting to pass through the corresponding access control point, the slave access control device send an anti-passback authentication request to the anti-passback host, where the anti-passback authentication request includes the person identifier of the person requesting to pass and the passing direction requested by the person requesting to pass;

[0171] A target passing direction determining module 804, configured to, in response to the anti-passback authentication request, the anti-passback host determine the latest recorded passing direction in the passing directions correspondingly recorded with the person identifier in the anti-passback authentication request as the target passing direction;

[0172] The access denial instruction sending module 805 is configured to, if the target access direction is the same as the access direction in the anti-tailgating authentication request, the anti-tailgating host sends an access denial instruction to the access control slave;

[0173] The access denial module 806 is configured to, in response to the access denial instruction, the access control slave controls the access point to which it belongs to deny access to the person requesting access.

[0174] In a possible embodiment, the anti-tailgating system further includes collectors disposed at the exits and entrances of each access point, each collector is connected to the access control slave disposed at the access point to which it belongs, and the collectors disposed at the exits and the collectors disposed at the entrances are configured with different collector identifiers; the apparatus further includes: an identity authentication information collection module, configured to the collector collects the identity authentication information of the person requesting access and sends a person passing request to the connected access control slave, where the person passing request includes the identity authentication information and the collector identifier of the collector; the authentication request sending module, in response to the person requesting access to pass through the access point to which it belongs, the access control slave sends an anti-tailgating authentication request to the anti-tailgating host, including: in response to the person passing request, the access control slave determines the person identifier of the person requesting access according to the identity authentication information in the person passing request, and determines the access direction according to the collector identifier in the person passing request; the access control slave sends an anti-tailgating authentication request including the determined person identifier and access direction to the anti-tailgating host; the passing message sending module, in response to the authenticated person passing through the access point to which it belongs, the access control slave sends a passing message to the anti-tailgating host, including: in response to the authenticated person passing through the access point to which it belongs, the access control slave sends an anti-tailgating authentication request including the newly determined person identifier and access direction to the anti-tailgating host.

[0175] In a possible embodiment, the passing message further includes the time when the passing message is generated; the passing message recording module, in response to the passing message, the anti-return host correspondingly records the personnel identification and passing direction in the passing message, including: in response to the passing message, if the time in the passing message meets the target anti-return condition, the anti-return host correspondingly records the personnel identification and passing direction in the passing message; the target passing direction determining module, in response to the anti-return authentication request, the anti-return host determines the latest recorded passing direction as the target passing direction among the passing directions correspondingly recorded with the personnel identification in the anti-return authentication request, including: in response to the anti-return authentication request, if the time when the anti-return authentication request is received meets the target anti-return condition, the anti-return host determines the latest recorded passing direction as the target passing direction among the passing directions correspondingly recorded with the personnel identification in the anti-return authentication request; the device further includes: a first allow passing instruction sending module, configured to if the time when the anti-return authentication request is received meets the target anti-return condition, the anti-return host sends an allow passing instruction to the access control slave; a first allow passing module, configured to in response to the allow passing instruction, the access control slave controls the access control point to which it belongs to allow the personnel requesting to pass to pass.

[0176] In a possible embodiment, the anti-return host includes a plurality of physical buttons, and a plurality of candidate anti-return conditions are pre-configured, each candidate anti-return condition corresponds to a physical button sequence, and different candidate anti-return conditions correspond to different physical button sequences; the device further includes: a target anti-return condition determining module, configured to in response to the pressing operation on each of the physical buttons, the anti-return host determines the candidate anti-return condition corresponding to the physical button sequence pressed by the pressing operation as the target anti-return condition.

[0177] In a possible embodiment, the anti-return host further includes an authority authentication component; the device further includes: an authentication result obtaining module, configured to in response to the authority authentication information input through the authority authentication component, the anti-return host authenticates the authority information to obtain an authentication result; a refusal to execute module, configured to in response to the pressing operation on each of the physical buttons, if the authentication result is non-passed authentication, the anti-return host refuses to execute the step of determining the candidate anti-return condition corresponding to the physical button sequence pressed by the pressing operation as the target anti-return condition; the target anti-return condition determining module, in response to the pressing operation on each of the physical buttons, the anti-return host determines the candidate anti-return condition corresponding to the physical button sequence pressed by the pressing operation as the target anti-return condition, including: in response to the pressing operation on each of the physical buttons, if the authentication result is passed authentication, the anti-return host determines the candidate anti-return condition corresponding to the physical button sequence pressed by the pressing operation as the target anti-return condition.

[0178] In a possible embodiment, the anti-intrusion host maintains a device list for recording each access control slave in the anti-intrusion system. The device further includes: a device list display module for the anti-intrusion host to display the device list; a receiving module for the anti-intrusion host to receive an access control slave combination or an access control slave sequence input for the device list; the passing message recording module, where the anti-intrusion host correspondingly records the personnel identifier and passing direction in the passing message, including: the anti-intrusion host correspondingly records the personnel identifier, passing direction, and the access control slave that sends the passing message in the passing message; the target passing direction determination module, where the anti-intrusion host determines the latest recorded passing direction as the target passing direction, including: the anti-intrusion host determines the access control slave that belongs to the same access control slave combination as the access control slave that sends the anti-intrusion authentication request as the target access control slave; or, the anti-intrusion host determines the access control slave that is one position above the access control slave that sends the anti-intrusion authentication request in the access control slave sequence as the target access control slave; the anti-intrusion host determines the passing direction corresponding to the latest record of the target access control slave as the target passing direction.

[0179] In a possible embodiment, each access control slave is pre-configured with the address of the anti-intrusion host. The device further includes: a registration message sending module for each access control slave to send a registration message to the anti-intrusion host according to the configured address at intervals of a first preset duration; an access control slave recording module for, in response to the registration message, if the access control slave that sends the registration message is not recorded in the device list, the anti-intrusion host records the access control slave that sends the registration message in the device list; a record update module for, if the access control slave that sends the registration message is recorded in the device list, the anti-intrusion host updates the record of the access control slave that sends the registration message in the device list; an access control slave deletion module for the anti-intrusion host to delete the access control slave whose record has not been updated for more than a second preset duration from the device list, where the second preset duration is not less than the first preset duration.

[0180] In a possible embodiment, the device further includes: a second allow-pass instruction sending module for the anti-intrusion host to send an allow-pass instruction to the target access control slave if the target passing direction is different from the passing direction in the anti-intrusion authentication request; a second allow-pass module for, in response to the allow-pass instruction, the access control slave controls the access point to which it belongs to allow the person requesting passage to pass.

[0181] In a possible embodiment, the device further includes: a third allow-pass module for the access control slave to control the access point to which it belongs to allow the person requesting passage to pass if it confirms that it is disconnected from the anti-intrusion host.

[0182] The embodiment of the present application further provides an anti-intrusion and anti-return system. The anti-intrusion and anti-return system includes an anti-intrusion and anti-return host and access control slave devices arranged at each access control point. The access control slave device is configured to send a passing message to the anti-intrusion and anti-return host in response to an authenticated person passing through the access control point to which it belongs. The passing message includes the person identifier of the authenticated person and the passing direction of the authenticated person, where the passing direction is used to indicate whether the person enters or leaves from the access control point. In response to a person requesting to pass through the access control point to which it belongs, it sends an anti-intrusion and anti-return authentication request to the anti-intrusion and anti-return host, where the anti-intrusion and anti-return authentication request includes the person identifier of the person requesting to pass and the passing direction requested by the person requesting to pass. In response to a rejection instruction, it controls the access control point to which it belongs to reject the person requesting to pass. The anti-intrusion and anti-return host is configured to, in response to the passing message, correspondingly record the person identifier and the passing direction in the passing message. In response to the anti-intrusion and anti-return authentication request, determine the most recently recorded passing direction as the target passing direction among the passing directions recorded corresponding to the person identifier in the anti-intrusion and anti-return authentication request. If the target passing direction is the same as the passing direction in the anti-intrusion and anti-return authentication request, it sends a rejection instruction to the access control slave device.

[0183] In a possible embodiment, the anti-intrusion and anti-return system further includes collectors arranged at the exits and entrances of each access control point. Each collector is connected to the access control slave device arranged at the access control point to which it belongs. The collectors arranged at the exits and the collectors arranged at the entrances are configured with different collector identifiers. The collector is configured to collect the identity authentication information of the person requesting to pass and send a person passing request to the connected access control slave device. The person passing request includes the identity authentication information and the collector identifier of the collector. The access control slave device is specifically configured to, in response to the person passing request, determine the person identifier of the person requesting to pass according to the identity authentication information in the person passing request, and determine the passing direction according to the collector identifier in the person passing request. It sends an anti-intrusion and anti-return authentication request including the determined person identifier and passing direction to the anti-intrusion and anti-return host. In response to an authenticated person passing through the access control point to which it belongs, it sends an anti-intrusion and anti-return authentication request including the most recently determined person identifier and passing direction to the anti-intrusion and anti-return host.

[0184] The embodiment of the present application further provides an anti-submarine return host, which is applied to an anti-submarine return system. The anti-submarine return system further includes access control slave machines arranged at each access control point. The anti-submarine return host includes: a main board; a CPU is arranged on the main board, and the CPU is connected to a network interface and a power interface through pins; the power interface is used to supply power to the main board; the network interface is used to realize communication between the anti-submarine return host and the access control slave machines; the anti-submarine return host is used to respond to a passing message, and correspondingly record the personnel identification and passing direction in the passing message; wherein, the passing message includes the personnel identification of the authenticated person and the passing direction of the authenticated person, and the passing direction is used to indicate that the person enters or leaves from the access control point; the passing message is sent by the access control slave machine to the anti-submarine return host in response to the authenticated person passing through the affiliated access control point; in response to an anti-submarine return authentication request, in the passing direction corresponding to the personnel identification in the anti-submarine return authentication request, determine the latest recorded passing direction as the target passing direction; wherein, the anti-submarine return authentication request includes the personnel identification of the person requesting passage and the passing direction requested by the person requesting passage; the anti-submarine return authentication request is sent by the access control slave machine to the anti-submarine return host in response to the person requesting passage requesting to pass through the affiliated access control point; if the target passing direction is the same as the passing direction in the anti-submarine return authentication request, send a rejection instruction to the access control slave machine, so that the access control slave machine responds to the rejection instruction and controls the affiliated access control point to reject the person requesting passage from passing through.

[0185] Exemplarily, as Figure 9a shown, the main board of the anti-submarine return host extends multiple modules outward in a way that the CPU is the center and is connected to the interfaces through pins, and each module is responsible for different functions. Refer to Figure 9a , the CPU externally connects a network transformer and a network cable interface through ETH TX / RX pins, and can perform network communication; a dedicated power management module is provided in the anti-submarine return host, that is, power management, which can be connected to the power interface to supply power to the main board. Multiple physical buttons of the anti-submarine return host and the corresponding LEDs are connected to the CPU through a connector and 11 IO interfaces (i.e., IO*11). The CPU can also externally connect a card swiping module and an RFID radio frequency antenna (i.e., RFID antenna) through PWM5, SPI1, and I2C3 pins to realize the card swiping function. The CPU can also externally connect a fingerprint module through SPI2 pins to realize the fingerprint recognition function. The RTC (RealTimeClock real-time clock) module can be powered by a button battery to ensure the timing accuracy of the anti-submarine return host. An anti-disassembly interface (i.e., IO*1) is connected to an anti-disassembly switch. The function of the anti-disassembly switch is that when the anti-submarine return host is installed on the turnstile, the anti-disassembly switch is in a pressed state, and when it is removed, the anti-disassembly switch becomes a non-pressed state and will trigger an alarm. The buzzer is connected to the PWM10 pin to display the current state of the anti-submarine return host and various alarm messages.

[0186] In other possible embodiments, the structure of the anti-submarine return host may also be as Figure 9b shown. Refer to Figure 9b . Based on the example shown in Figure 9a , the anti-submarine return host may further include a WIFI module connected to the CPU through SDI01 and UART3 pins, a WIFI antenna, a Bluetooth module, and a Bluetooth antenna. Through the network interface, the WIFI module, and the Bluetooth module, three communication methods of wired, wireless, and Bluetooth are realized. The anti-submarine return host may also implement the functions of external sound playback and sound collection through an audio amplifier, a microphone Speaker for signal backhaul, and an omnidirectional MIC (microphone). Among them, the audio amplifier is connected through the LINE_L pin of the CPU, the signal for backhaul is connected to the MIC_R pin, and the omnidirectional MIC is connected to the MIC_L pin. The CPU may externally connect an SD card module through the SDI02 pin to be responsible for storing the data in the anti-submarine return host. The data may include the personnel identification and passage direction in the message, as well as the device list of each access control slave in the anti-submarine return system, etc. The anti-submarine return host may also include an RS485 interface connected to the CPU through the UART2 pin and a Wiegand interface (i.e., Wiegand output) connected to the CPU through 3 IO ports (i.e., IO*3) to support two external output protocols of RS485 and Wiegand output, so that the anti-submarine return host can receive data from other embedded devices in a wired manner. The anti-submarine return host may also include a DEBUG debugging module connected to the CPU through the UART1 pin for debugging the anti-submarine return host. And, two alarm input interfaces are reserved in the anti-submarine return host, namely Alarmin*2 connected to two IO interfaces IO*2, and an alarm output interface, namely Alarm out*1 connected to one IO interface IO*1, which can externally connect any IO output / input device to improve the scalability of the anti-submarine return host.

[0187] The embodiment of the present application also provides an access control slave, as Figure 10 shown, including:

[0188] A memory 1001 for storing a computer program;

[0189] A processor 1002, when executing the program stored on the memory 1001, implements the following steps:

[0190] The access control slave is set at each access control point and is applied to the anti-passback system. The anti-passback system further includes an anti-passback host. In response to an authenticated person passing through the corresponding access control point, the access control slave sends a passing message to the anti-passback host, so that the anti-passback host, in response to the passing message, correspondingly records the person identifier and the passing direction in the passing message; wherein, the passing message includes the person identifier of the authenticated person and the passing direction of the authenticated person, and the passing direction is used to indicate whether the person enters or leaves from the access control point; in response to a person requesting to pass through the corresponding access control point, the access control slave sends an anti-passback authentication request to the anti-passback host, so that the anti-passback host, in response to the anti-passback authentication request, determines the latest recorded passing direction in the passing directions corresponding to the person identifier in the anti-passback authentication request as the target passing direction, and if the target passing direction is the same as the passing direction in the anti-passback authentication request, sends a rejection instruction to the access control slave; wherein, the anti-passback authentication request includes the person identifier of the person requesting to pass and the passing direction requested by the person requesting to pass; in response to the rejection instruction, the access control slave controls the corresponding access control point to reject the person requesting to pass.

[0191] And the above electronic device may further include a communication bus and / or a communication interface. The processor 1002, the communication interface, and the memory 1001 complete mutual communication through the communication bus.

[0192] The communication bus mentioned in the above electronic device may be a Peripheral Component Interconnect (PCI) bus or an Extended Industry Standard Architecture (EISA) bus, etc. This communication bus can be divided into an address bus, a data bus, a control bus, etc. For the sake of convenience of representation, only a thick line is used in the figure, but it does not mean that there is only one bus or one type of bus.

[0193] The communication interface is used for the communication between the above electronic device and other devices.

[0194] The memory may include a Random Access Memory (RAM), or may also include a Non-Volatile Memory (NVM), such as at least one disk memory. Optionally, the memory may also be at least one storage device located far from the aforementioned processor.

[0195] The above-mentioned processor may be a general-purpose processor, including a Central Processing Unit (CPU), a Network Processor (NP), etc.; it may also be a Digital Signal Processor (DSP), an Application Specific Integrated Circuit (ASIC), a Field-Programmable Gate Array (FPGA), or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components.

[0196] In another embodiment provided by the present application, there is also provided a computer-readable storage medium, in which a computer program is stored, and when the computer program is executed by a processor, the steps of any of the above anti-submarine return methods are implemented.

[0197] In another embodiment provided by the present application, there is also provided a computer program product containing instructions, which when running on a computer, causes the computer to execute any of the anti-submarine return methods in the above embodiments.

[0198] In the above embodiments, it can be implemented in whole or in part by software, hardware, firmware, or any combination thereof. When implemented using software, it can be implemented in whole or in part in the form of a computer program product. The computer program product includes one or more computer instructions. When the computer program instructions are loaded and executed on a computer, the processes or functions described in the embodiments of the present application are generated in whole or in part. The computer may be a general-purpose computer, a dedicated computer, a computer network, or other programmable devices. The computer instructions may be stored in a computer-readable storage medium, or transmitted from one computer-readable storage medium to another computer-readable storage medium. For example, the computer instructions may be transmitted from one website, computer, server, or data center to another website, computer, server, or data center by wire (such as coaxial cable, optical fiber, Digital Subscriber Line (DSL)) or wirelessly (such as infrared, wireless, microwave, etc.). The computer-readable storage medium may be any available medium that can be accessed by a computer, or a data storage device such as a server, data center, etc. that includes one or more integrated available media. The available media may be magnetic media (such as floppy disks, hard disks, magnetic tapes), optical media (such as DVDs), or Solid State Disks (SSDs), etc.

[0199] It should be noted that in this text, relational terms such as first and second are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any actual relationship or order between these entities or operations. Moreover, the terms "comprising", "including" or any other variant thereof are intended to cover non-exclusive inclusion, such that a process, method, article or device comprising a series of elements includes not only those elements but also other elements not expressly listed, or elements inherent to such process, method, article or device. Without further limitation, an element defined by the statement "comprising an..." does not exclude the presence of additional identical elements in the process, method, article or device comprising said element.

[0200] Each embodiment in this specification is described in a related manner. For the same or similar parts among the embodiments, reference can be made to each other. Each embodiment focuses on the differences from other embodiments. In particular, for embodiments of a device, a system, an anti-submarine return host, an access control slave, a computer-readable storage medium, and a computer program product, since they are basically similar to the method embodiments, the description is relatively simple, and reference can be made to the corresponding parts of the method embodiments for the relevant content.

[0201] The above are only the preferred embodiments of the present application and are not intended to limit the protection scope of the present application. Any modifications, equivalent replacements, improvements, etc. made within the spirit and principle of the present application are included within the protection scope of the present application.

Claims

1. An anti-submarine method, characterized in that, The method is applied to an anti-intrusion return system, which includes an anti-intrusion return host and access control slave devices set at each access control point. The method includes: In response to an authenticated person passing through the corresponding access control point, the access control slave device sends a passing message to the anti-intrusion return host. The passing message includes the person identifier of the authenticated person and the passing direction of the authenticated person, where the passing direction is used to indicate whether the person enters or leaves from the access control point; In response to the passing message, the anti-intrusion return host correspondingly records the person identifier and the passing direction in the passing message; In response to a person requesting to pass through the corresponding access control point, the access control slave device sends an anti-intrusion return authentication request to the anti-intrusion return host. The anti-intrusion return authentication request includes the person identifier of the person requesting to pass and the passing direction requested by the person requesting to pass; In response to the anti-intrusion return authentication request, the anti-intrusion return host determines the most recently recorded passing direction in the passing directions recorded corresponding to the person identifier in the anti-intrusion return authentication request as the target passing direction; If the target passing direction is the same as the passing direction in the anti-intrusion return authentication request, the anti-intrusion return host sends a rejection instruction to the access control slave device; In response to the rejection instruction, the access control slave device controls the corresponding access control point to reject the person requesting to pass; 2. The method according to claim 1, characterized in that, The anti-intrusion return system further includes collectors set at the exits and entrances of each access control point. Each collector is connected to the access control slave device set at the corresponding access control point. The collectors set at the exits and the collectors set at the entrances are configured with different collector identifiers; The method further includes: The collector collects the identity authentication information of the person requesting to pass and sends a person passing request to the connected access control slave device. The person passing request includes the identity authentication information and the collector identifier of the collector; The step that in response to a person requesting to pass through the corresponding access control point, the access control slave device sends an anti-intrusion return authentication request to the anti-intrusion return host includes: In response to the person passing request, the access control slave device determines the person identifier of the person requesting to pass according to the identity authentication information in the person passing request, and determines the passing direction according to the collector identifier in the person passing request; The access control slave device sends an anti-intrusion return authentication request including the determined person identifier and passing direction to the anti-intrusion return host; The step that in response to an authenticated person passing through the corresponding access control point, the access control slave device sends a passing message to the anti-intrusion return host includes: In response to an authenticated person passing through the corresponding access control point, the access control slave device sends an anti-intrusion return authentication request including the most recently determined person identifier and passing direction to the anti-intrusion return host; 3. The method according to claim 1, characterized in that, The passing message further includes the time when the passing message is generated; The step that in response to the passing message, the anti-intrusion return host correspondingly records the person identifier and the passing direction in the passing message includes: In response to the passing message, if the time in the passing message meets the target anti-intrusion return condition, the anti-intrusion return host correspondingly records the person identifier and the passing direction in the passing message; The step that in response to the anti-intrusion return authentication request, the anti-intrusion return host determines the most recently recorded passing direction in the passing directions recorded corresponding to the person identifier in the anti-intrusion return authentication request as the target passing direction includes: In response to an anti-submarine return authentication request, if the time when the anti-submarine return authentication request is received meets the target anti-submarine return condition, the anti-submarine return host determines the latest recorded passage direction in the passage directions corresponding to the personnel identification in the anti-submarine return authentication request as the target passage direction; The method further includes: If the time when the anti-submarine return authentication request is received meets the target anti-submarine return condition, the anti-submarine return host sends an instruction to allow passage to the access control slave; In response to the instruction to allow passage, the access control slave controls the access control point to which it belongs to allow the personnel requesting passage to pass.

4. The method according to claim 3, characterized in that, The anti-submarine return host includes a plurality of physical buttons, and a plurality of candidate anti-submarine return conditions are pre-configured. Each candidate anti-submarine return condition corresponds to a physical button sequence, and different candidate anti-submarine return conditions correspond to different physical button sequences; The method further includes: In response to a pressing operation on each of the physical buttons, the anti-submarine return host determines the candidate anti-submarine return condition corresponding to the physical button sequence pressed by the pressing operation as the target anti-submarine return condition.

5. The method according to claim 4, characterized in that, The anti-submarine return host further includes an authority authentication component; The method further includes: In response to the authority authentication information input through the authority authentication component, the anti-submarine return host authenticates the authority information to obtain an authentication result; In response to a pressing operation on each of the physical buttons, if the authentication result is not passed, the anti-submarine return host refuses to execute the step of determining the candidate anti-submarine return condition corresponding to the physical button sequence pressed by the pressing operation as the target anti-submarine return condition; The step of, in response to a pressing operation on each of the physical buttons, the anti-submarine return host determines the candidate anti-submarine return condition corresponding to the physical button sequence pressed by the pressing operation as the target anti-submarine return condition includes: In response to a pressing operation on each of the physical buttons, if the authentication result is passed, the anti-submarine return host determines the candidate anti-submarine return condition corresponding to the physical button sequence pressed by the pressing operation as the target anti-submarine return condition.

6. The method according to claim 1, characterized in that, The anti-submarine return host maintains a device list, and the device list is used to record each access control slave in the anti-submarine return system; The method further includes: The anti-submarine return host displays the device list; The anti-submarine return host receives an access control slave combination or an access control slave sequence input for the device list; The anti-submarine return host correspondingly records the personnel identification and passage direction in the passing message, including: The anti-submarine return host correspondingly records the personnel identification, passage direction, and the access control slave that sends the passing message in the passing message; The step of the anti-submarine return host determines the latest recorded passage direction as the target passage direction includes: The anti-submarine return host determines the access control slave that belongs to the same access control slave combination as the access control slave that sends the anti-submarine return authentication request as the target access control slave; or, the anti-submarine return host determines the access control slave that is one position before the access control slave that sends the anti-submarine return authentication request in the access control slave sequence as the target access control slave; The anti-submarine return host determines the passage direction corresponding to the latest record of the target access control slave as the target passage direction.

7. The method according to claim 6, wherein Each access control slave is pre-configured with the address of the anti-submarine return host; The method further includes: At every first preset time interval, each access control slave device sends a registration message to the anti-tailgating host according to the configured address; In response to the registration message, if the access control slave device that sent the registration message is not recorded in the device list, the anti-tailgating host records the access control slave device that sent the registration message in the device list; If the access control slave device that sent the registration message is recorded in the device list, the anti-tailgating host updates the record of the access control slave device that sent the registration message in the device list; The anti-tailgating host deletes from the device list the access control slave devices whose records have not been updated for more than a second preset time interval, where the second preset time interval is not less than the first preset time interval.

8. The method according to claim 1, wherein The method further includes: If the target passing direction is different from the passing direction in the anti-tailgating authentication request, the anti-tailgating host sends an allow-pass instruction to the target access control slave device; In response to the allow-pass instruction, the access control slave device controls the access control point to which it belongs to allow the person requesting passage to pass.

9. The method according to claim 1, wherein The method further includes: If the access control slave device confirms that it is disconnected from the anti-tailgating host, it controls the access control point to which it belongs to allow the person requesting passage to pass.

10. An anti-submarine echo system, characterized in that The anti-tailgating system includes an anti-tailgating host and access control slave devices provided at each access control point; The access control slave device is configured to, in response to an authenticated person passing through the access control point to which it belongs, send a passing message to the anti-tailgating host, where the passing message includes the person identifier of the authenticated person and the passing direction of the authenticated person, and the passing direction is used to indicate whether the person enters or leaves the access control point; in response to a person requesting passage to request to pass through the access control point to which it belongs, send an anti-tailgating authentication request to the anti-tailgating host, where the anti-tailgating authentication request includes the person identifier of the person requesting passage and the passing direction requested by the person requesting passage; in response to a deny-pass instruction, control the access control point to which it belongs to deny the person requesting passage from passing; The anti-tailgating host is configured to, in response to the passing message, correspondingly record the person identifier and the passing direction in the passing message; in response to the anti-tailgating authentication request, determine the most recently recorded passing direction among the passing directions recorded corresponding to the person identifier in the anti-tailgating authentication request as the target passing direction; if the target passing direction is the same as the passing direction in the anti-tailgating authentication request, send a deny-pass instruction to the access control slave device.

11. The system according to claim 10, wherein The anti-tailgating system further includes collectors provided at the exits and entrances of each access control point. Each collector is connected to the access control slave device provided at the access control point to which it belongs, and the collectors provided at the exits and the collectors provided at the entrances are configured with different collector identifiers; The collector is configured to collect the identity authentication information of the person requesting passage and send a person-pass request to the connected access control slave device, where the person-pass request includes the identity authentication information and the collector identifier of the collector. The access control slave device is specifically configured to respond to a personnel passage request, determine the personnel identifier of the requesting passing personnel according to the identity authentication information in the personnel passage request, and determine the passage direction according to the collector identifier in the personnel passage request; send an anti-passback authentication request including the determined personnel identifier and passage direction to the anti-passback host; and respond to the passage of an authenticated personnel through the corresponding access control point, and send an anti-passback authentication request including the newly determined personnel identifier and passage direction to the anti-passback host.

12. An anti-submarine echo mainframe, characterized in that The anti-passback host is applied to an anti-passback system, and the anti-passback system further includes access control slave devices arranged at each access control point; The anti-passback host includes: a main board; a CPU is arranged on the main board, and the CPU is connected to a network interface and a power interface through pins; the power interface is used to supply power to the main board; the network interface is used to realize the communication between the anti-passback host and the access control slave device; The anti-passback host is configured to respond to a passage message and correspondingly record the personnel identifier and passage direction in the passage message; wherein, the passage message includes the personnel identifier of the authenticated personnel and the passage direction of the authenticated personnel, and the passage direction is used to indicate that the personnel enters or leaves from the access control point; the passage message is sent by the access control slave device in response to the passage of an authenticated personnel through the corresponding access control point to the anti-passback host; in response to an anti-passback authentication request, determine the most recently recorded passage direction in the passage directions corresponding to the personnel identifier in the anti-passback authentication request as the target passage direction; wherein, the anti-passback authentication request includes the personnel identifier of the requesting passing personnel and the passage direction requested by the requesting passing personnel; the anti-passback authentication request is sent by the access control slave device in response to a requesting passing personnel's request to pass through the corresponding access control point to the anti-passback host; if the target passage direction is the same as the passage direction in the anti-passback authentication request, send a refusal to pass instruction to the access control slave device, so that the access control slave device responds to the refusal to pass instruction and controls the corresponding access control point to refuse the requesting passing personnel to pass.

13. The anti-submarine echo mainframe according to claim 12, wherein The anti-passback host further includes: a plurality of physical buttons, and a plurality of candidate anti-passback conditions are pre-configured for the plurality of physical buttons, each candidate anti-passback condition corresponds to a physical button sequence, and different candidate anti-passback conditions correspond to different physical button sequences; The anti-passback host is further configured to respond to a pressing operation on each of the physical buttons, and determine the candidate anti-passback condition corresponding to the physical button sequence pressed by the pressing operation as the target anti-passback condition.

14. The anti-submarine echo mainframe according to claim 13, wherein The anti-passback host further includes a permission authentication component, and the permission authentication component includes: a card swiping module and / or a fingerprint module; The anti-submarine return host is further configured to authenticate the permission information in response to the permission authentication information input through the permission authentication component, and obtain an authentication result; in response to a pressing operation on each of the physical buttons, if the authentication result is a failed authentication, the anti-submarine return host refuses to execute the step of determining the candidate anti-submarine return condition corresponding to the physical button sequence pressed by the pressing operation as the target anti-submarine return condition; the step of determining, in response to a pressing operation on each of the physical buttons, the candidate anti-submarine return condition corresponding to the physical button sequence pressed by the pressing operation as the target anti-submarine return condition includes: in response to a pressing operation on each of the physical buttons, if the authentication result is a successful authentication, the anti-submarine return host determines the candidate anti-submarine return condition corresponding to the physical button sequence pressed by the pressing operation as the target anti-submarine return condition.

15. The anti-submarine return main engine according to claim 12, characterized in that, The anti-submarine return host further includes a tamper switch and a buzzer; The tamper switch is configured to send an alarm message when the anti-submarine return host is being disassembled; The buzzer is configured to display the device status and alarm message of the anti-submarine return host.

16. The anti-submarine return main engine according to claim 12, characterized in that, The anti-submarine return host further includes a button battery, and / or an SD card, and / or a debugging module; The button battery is configured to supply power to the RTC module of the CPU to ensure accurate timing of the anti-submarine return host; The SD card is configured to record the personnel identification and passing direction in the passing message, and save the device list of each access control slave in the anti-submarine return system; The debugging module is configured to debug the anti-submarine return host.

17. The anti-submarine return main engine according to claim 12, characterized in that, The anti-submarine return host further includes a WIFI module, and / or a Bluetooth module, and / or an audio amplifier, and / or a microphone, and / or a microphone; The WIFI module is configured to implement communication between the anti-submarine return host and the access control slave; The Bluetooth module is configured to implement communication between the anti-submarine return host and the access control slave; The audio amplifier is configured to implement the external sound function of the anti-submarine return host; The microphone is configured to implement the sound collection function of the anti-submarine return host; The microphone is configured to implement the sound collection function of the anti-submarine return host.

Images