A hotel offline access control authority management method, hotel offline electronic door lock and hotel offline access control system

Abstract

The present invention discloses a method for managing access control rights in a purely offline environment for hotels, a hotel offline electronic door lock, and a hotel offline access control system. The present invention sets a multi-dimensional version control mechanism for the same permission group in the hotel offline electronic door lock, and its memory contains a main replacement number, a first-class secondary replacement number for main card version control, and a second-class secondary replacement number for secondary card version control. When verifying the key card, the door lock can intelligently and independently select the corresponding secondary replacement number track for version comparison and update based on the role code carried in the card. The present invention realizes "asymmetric invalidation" by establishing a strictly separated version control path, that is, reissuing a secondary card only invalidates the old secondary card without affecting the associated permissions of the main card, fundamentally ensuring the continuity and stability of permissions, while ensuring the security of invalidation due to lost cards, greatly improving user experience and management efficiency.

Description

Technical Field

[0001] The present invention relates to the technical field of hotel offline electronic door locks, and more particularly to an access control authority management method for hotels in a purely offline environment, a hotel offline electronic door lock, and a hotel offline access control system. Background Art

[0002] In modern hotel management, to facilitate family or group travel, it's often necessary to configure access permissions for the main guest room (master room) and its associated friend and family rooms. This allows the master room guest's key card to unlock both their own door and the doors of the friend and family rooms. In offline door lock systems, which require security and cannot rely on a network, a replacement number mechanism (such as a serial number or timestamp) is often used to manage key card validity. Newly issued cards have a higher replacement number, invalidating existing cards with older replacement numbers.

[0003] However, when this conventional replacement mechanism is applied to the aforementioned master room-friends and family room association scenario, serious technical conflicts arise. The existing method usually sets the same replacement number for the master room card and the friends and family room card, and the door lock only recognizes the latest replacement number. As a result, when the friends and family room card is lost and replaced, the new card will use a higher replacement number to update the friends and family room door lock record. After that, the original valid master room card will still have the old replacement number. When trying to open the friends and family room door, the door lock will reject it due to "too low version". Its critical association permissions are accidentally interrupted, causing great inconvenience and trouble to the guests.

[0004] Therefore, how to provide a method and hotel offline electronic door lock that can not only ensure the continuity of associated permissions after the card is replaced, but also reliably invalidate the truly lost card in an offline environment without affecting the permissions of other valid cards has become a technical problem that urgently needs to be solved in this field. Summary of the Invention

[0005] The purpose of the present invention is to provide a hotel offline access control authority management method, a hotel offline electronic door lock and a hotel offline access control system, aiming to solve the technical problem existing in the background technology that the main card authority is accidentally interrupted due to the re-issuance of the associated sub-card.

[0006] A first aspect of the present invention provides a method for managing hotel offline access control rights, comprising the following steps:

[0007] In a memory of a hotel offline electronic door lock serving as an authorization verification terminal, at least three identifiers are stored for the same authorization group, the identifiers comprising: a primary replacement number for identifying the authorization group, a first secondary replacement number for verifying a first type of key card version within the authorization group, and a second secondary replacement number for verifying a second type of key card version within the authorization group;

[0008] When the hotel offline electronic door lock receives an unlocking request from a key card to be verified, it reads the primary replacement number and the secondary replacement number contained in the key card to be verified;

[0009] Determine whether the master / replacement number of the key card to be verified matches the master / replacement number stored in the hotel's offline electronic door lock;

[0010] When matching, select the corresponding secondary replacement number for version verification based on the preset role type of the key card to be verified:

[0011] If the key card to be verified is a first-class key card, then compare its secondary replacement number with the first-class secondary replacement number stored in the hotel's offline electronic door lock. If the secondary replacement number of the key card to be verified is greater than or equal to the first-class secondary replacement number, unlocking is authorized, and only the first-class secondary replacement number of the hotel's offline electronic door lock is updated with the secondary replacement number of the key card to be verified;

[0012] If the key card to be verified is a second-class key card, its secondary replacement number is compared with the second-class secondary replacement number stored in the hotel's offline electronic door lock. When the secondary replacement number of the key card to be verified is greater than or equal to the second-class secondary replacement number, unlocking is authorized, and the secondary replacement number of the key card to be verified is used to update only the second-class secondary replacement number of the hotel's offline electronic door lock.

[0013] Optionally, the step of selecting a corresponding secondary replacement number for version verification according to the preset role type of the key card to be verified includes: reading a role code stored in the key card to be verified, and determining whether it is a first-class key card or a second-class key card according to the role code.

[0014] Optionally, the primary replacement number, the first-category secondary replacement number, and the second-category secondary replacement number are all timestamps generated based on time.

[0015] Optionally, the first-category sub-replacement number and the second-category sub-replacement number are both increasing sequence numbers.

[0016] Optionally, when the hotel offline electronic door lock detects that the primary replacement number of the key card to be verified is greater than the primary replacement number stored in itself, before comparing the secondary replacement numbers to authorize unlocking, the first-category secondary replacement number and the second-category secondary replacement number stored in the hotel offline electronic door lock are reset to a preset initial value.

[0017] Optionally, the method further includes a check-out step: when a check-out instruction is received, the first-category secondary replacement number and the second-category secondary replacement number stored in the hotel's offline electronic door lock are updated to a preset capping value that is greater than the maximum value that the secondary replacement number may reach in normal use.

[0018] Optionally, the first type of key card is a master room card that has unlocking authority for multiple door locks within the authority group, and the second type of key card is a friend's room card that has unlocking authority for only a single door lock.

[0019] Optionally, the method also includes a door lock initialization security verification step: when the master replacement number of the key card to be verified is newer than the master replacement number stored in the electronic door lock, before executing subsequent steps, first read the signature data stored in the key card, which is generated by the card issuing system using a private key; and use the public key pre-stored in the electronic door lock to verify the signature data. Only after the verification is passed, the key card is recognized as a legal card and subsequent replacement number updates and version verifications are performed.

[0020] A second aspect of the present invention provides a hotel offline electronic door lock, comprising a processor and a memory, wherein the memory stores:

[0021] The primary replacement number used to identify a permission group;

[0022] The first-class minor replacement number used to verify the first-class key card version within the authorization group;

[0023] and a second-class minor replacement number for verifying a second-class key card version within the authorization group;

[0024] The processor is configured to execute any method according to the first aspect of the present invention.

[0025] Optionally, the memory comprises a non-volatile storage unit for storing the major replacement number, the first category minor replacement number and the second category minor replacement number.

[0026] Optionally, the memory also pre-stores a card-issuing public key for verifying the legitimacy of the key card; the processor is further configured to first perform a signature verification step when executing door lock initialization, which uses the card-issuing public key to verify the signature data attached to the key card to be verified, and only performs subsequent replacement number updates and version verifications after the signature verification is passed.

[0027] A third aspect of the present invention provides a hotel offline access control system, comprising the hotel offline electronic door lock of the second aspect of the present invention, and a first type of key card and a second type of key card associated with an authority group of the hotel offline electronic door lock;

[0028] Among them, the first type of key card and the second type of key card both store:

[0029] The same master replacement number as that stored in the hotel's offline electronic door lock;

[0030] A minor replacement number for version verification; and

[0031] A character code used to distinguish card types.

[0032] The technical content disclosed in the present invention has the following beneficial effects:

[0033] This invention achieves significant benefits by establishing independent version control tracks for cards associated with different roles on the door lock. This solution fundamentally implements an "asymmetric invalidation" mechanism. Renewing a sub-card (a friend or family room card) only invalidates the old sub-card, without affecting any access rights granted to the main card (the main room card) for the door lock. This perfectly ensures the continuity and stability of associated permissions, significantly improving the guest experience. Furthermore, this mechanism can reliably invalidate any lost card, ensuring system security. The entire process is completed in a purely offline environment, resulting in a simple door lock structure and highly reliable system operation.

[0034] Further features and advantages of the present invention will become apparent from the following detailed description of exemplary embodiments of the present invention with reference to the accompanying drawings. BRIEF DESCRIPTION OF THE DRAWINGS

[0035] The accompanying drawings, which are incorporated in and constitute a part of this specification, illustrate embodiments of the invention and, together with the description, serve to explain the principles of the invention.

[0036] Figure 1 This is a structural block diagram of the access control system of the present invention. DETAILED DESCRIPTION

[0037] Various exemplary embodiments of the present invention will now be described in detail with reference to the accompanying drawings. It should be noted that unless otherwise specifically stated, the relative arrangement of components and steps, numerical expressions and numerical values set forth in these embodiments do not limit the scope of the present invention.

[0038] The following description of at least one exemplary embodiment is merely illustrative in nature and is in no way intended to limit the invention, its application, or uses.

[0039] Technologies, methods, and equipment known to ordinary technicians in the relevant art may not be discussed in detail, but where appropriate, they should be considered part of the specification.

[0040] In all examples shown and discussed herein, any specific values should be interpreted as merely exemplary and not limiting. Therefore, other examples of the exemplary embodiments may have different values.

[0041] It should be noted that like reference numerals and letters refer to like items in the following figures, and therefore, once an item is defined in one figure, it need not be further discussed in subsequent figures.

[0042] The overall concept of this invention is to provide a hotel offline access control system that manages bound key cards of varying authorization levels. The core innovation lies in the internal data structure and verification logic of the hotel offline electronic door lock. Instead of recording a single, global version number, the hotel offline electronic door lock maintains multiple independent version number tracks associated with card roles for the same "authority group." This allows the card for one role within the authorization group to be updated without affecting the valid cards for other roles.

[0043] First embodiment: timestamp-based replacement number solution

[0044] See also Figure 1 In this embodiment, the hotel offline access control system 10 includes a hotel offline electronic door lock 100, as well as a first-type key card 200 and a second-type key card 300 that interact with the door lock. In this embodiment, the first-type key card 200 is a "master room card," which grants access to multiple associated room doors (e.g., the main room and a friend's room). The second-type key card 300 is a "friend's room card," which grants access only to the door of the guest's own room.

[0045] The hotel's offline electronic door lock 100 includes a processor 101 and a memory 102. The memory includes a non-volatile storage unit, such as flash memory, for storing replacement codes to ensure data is not lost after a power outage. The memory stores three key replacement codes for each permission group. In this embodiment, the three key replacement codes are timestamps, where:

[0046] Primary Alternative Number A: A unique ID used to identify this permission group.

[0047] The first-class minor replacement number B_master is specifically used to record and verify the latest version of the associated first-class key card 200 .

[0048] The second-class sub-substitution number B_sub is specifically used to record and verify the latest version of the second-class key card 300 corresponding to the door lock.

[0049] Both the first type key card 200 and the second type key card 300 store key information, including:

[0050] A master replacement number that is the same as the master replacement number A in the door lock.

[0051] A minor alternative number representing its own version.

[0052] A role code used to identify the card type. In one embodiment, the role code can be a specific data bit or byte, for example, the code "01" represents a first-type key card and the code "02" represents a second-type key card. The door lock processor reads the role code to distinguish and execute different authentication logic.

[0053] The following describes the workflow of the present invention in detail through a series of typical scenarios, combining narrative and data evolution.

[0054] Scenario 1: Guest's first check-in and door lock initialization

[0055] This scenario describes how the system can efficiently and reliably configure permissions and complete the progressive, role-based initialization of the door lock for a new associated check-in request.

[0056] Door lock initial state: A newly installed or checked-out hotel offline electronic door lock 100 has its memory recorded as the default initial value: (master: 0, B_master: 0, B_sub: 0).

[0057] Front desk card issuance: To ensure the simplicity and robustness of the logic, the card issuing machine follows a key rule: all associated cards issued for the first time to the same permission group are mandatory to be assigned the same initial secondary replacement number.

[0058] Generate a current timestamp as the permission group ID for this check-in, for example, A_new=10000.

[0059] Generate an initial version number, for example, B_initial=50.

[0060] Generate a master room card (first type key card 200 instance): write information {master: 10000, secondary: 50, role: "01"}.

[0061] Generate a friend's room card (second-type key card 300 instance): write information {primary: 10000, secondary: 50, role: "02"}.

[0062] Door lock initialization process:

[0063] Situation 1: The main room card is used to swipe the door lock of the relatives and friends' room first

[0064] Operation: The guest uses the main room card (10000, 50, "01") to swipe the friend's room door lock 100 for the first time.

[0065] Processing flow: The door lock detects that the card's master replacement number (10000) is greater than the lock's internal master replacement number (0), triggering initialization. The door lock updates its own master replacement number with 10000. Based on the card role "01", the processor only updates the primary replacement number B_master with the card's secondary replacement number 50. The secondary replacement number B_sub remains at 0.

[0066] Data status change: The record in the lock changes from (0, 0, 0) to (master: 10000, B_master: 50, B_sub: 0).

[0067] Follow-up: The guest then uses the friend's room card (10000, 50, "02") to swipe the lock. Because 50>0, the verification is passed, and the second-class sub-alternative number B_sub is updated to 50. The final record becomes (master: 10000, B_master: 50, B_sub: 50).

[0068] Situation 2: The friend's room card is swiped first to lock the friend's room door

[0069] Operation: The guest uses the friend and family room card (10000, 50, "02") to swipe the friend and family room door lock 100 for the first time.

[0070] Processing flow: The door lock also triggers initialization. Based on the role "02", the processor only updates the second-class sub-substitution number B_sub with the card sub-substitution number 50. The first-class sub-substitution number B_master remains 0.

[0071] Data status change: The record in the lock changes from (0, 0, 0) to (master: 10000, B_master: 0, B_sub: 50).

[0072] Subsequent: The guest then swipes the lock with the master room card (10000, 50, "01"), which is authenticated because 50>0, and the first-class sub-alternative number B_master is updated to 50. The final record also becomes (master: 10000, B_master: 50, B_sub: 50).

[0073] Results: This progressive logic, which is strictly initialized according to roles, ensures that the system can reach a unique, correct and stable working state regardless of the card swiping order, demonstrating the robustness of the solution.

[0074] Scenario 2: Permission Verification in Daily Use

[0075] After initialization is completed, the records in the lock are stable as (master: 10000, B_master: 50, B_sub: 50).

[0076] The main room card opens the main room door: the main room card is swiped against the main room door lock, and the door lock verifies it as the "this room card", identifies the role "01", and compares it with its own "first-class secondary replacement number". If 50≥50, the verification is passed.

[0077] Master room card unlocks the Friends and Family room door: The master room card is swiped against the Friends and Family room door lock. The lock recognizes the role "01" and compares the secondary replacement number 50 with the "first-class secondary replacement number" (B_master, value 50) stored in the lock. If 50 ≥ 50, the verification is successful.

[0078] Friend's room card unlocks the door: The friend's room card is swiped against the friend's room door lock. The lock recognizes the role "02" and compares the secondary substitution number 50 with the "secondary substitution number" (B_sub, value 50) stored in the lock. If 50 ≥ 50, the verification is successful.

[0079] A friend or relative attempts to open the main door using their room card: During verification, the main door lock's processor checks whether the card (or its role code "02") has been granted permission to open the door. Since this permission was not granted when the card was issued, the lock is denied.

[0080] Scenario 3: Key Card Loss and Replacement

[0081] This scenario fully demonstrates the "asymmetric invalidation" mechanism of the present invention.

[0082] Re-issuance of lost room cards for relatives and friends (second type key cards):

[0083] Current status: The friend and family door lock 100 is recorded as (master: 10000, B_master: 50, B_sub: 50).

[0084] Reissue operation: The front desk will make a new room card for relatives and friends, with the information of {primary: 10000, secondary: 90, role: "02"}.

[0085] Card swiping and status change: When a new card (10000, 90, "02") is swiped to the friend's room door lock, the door lock recognizes the card's role as "02" and finds that its version number 90 is higher than the B_sub (50) recorded in the lock. The door lock authorizes the door to be opened and only updates the second-class replacement number.

[0086] Data change: The record in the lock changes from (10000, 50, 50) to (10000, 50, 90).

[0087] Result: The lost old Friends and Family room card (times: 50) was invalidated. The verification track B_master of the master room card (times: 50) was not affected, and its permission to open the Friends and Family room door was perfectly retained.

[0088] Re-issuance of lost main room card (first type key card):

[0089] Current status: The door lock record of the friends and relatives room is (master: 10000, B_master: 50, B_sub: 90).

[0090] Reissue operation: The front desk will make a new master room card with the information of {master: 10000, secondary: 80, role: "01"}.

[0091] Card swiping and status change: When the new master room card is swiped to the friend's room door lock, the lock recognizes its role as "01" and finds that its version number 80 is higher than the B_master (50) recorded in the lock. After verification, the first-class replacement number is updated to 80.

[0092] Data changes: The door lock record of relatives and friends becomes (10000, 80, 90).

[0093] Result: The lost old master room card (50 times) was invalidated. The verification track B_sub for the valid friend and family room card (90 times) was not affected, and the permissions were not disturbed.

[0094] Scenario 4: Other Management Operations

[0095] Adding a companion card: To add a companion card for a friend's room, the card issuing machine simply copies all the information from the currently valid friend's room card, writing the original card's {Primary: 10000, Secondary: 90, Role: "02"} information onto a new card. Since the replacement number is the same, it can be used simultaneously with the original card. Adding a companion card can be done at check-in or anytime after check-in.

[0096] Guest Checkout and Door Lock Reinitialization: After a guest checks out, to ensure safety, a staff member (such as a cleaning staff member) must perform the checkout operation on the physical door lock using a special work card (checkout card) with "initialization" or "checkout" privileges. This card instructs the door lock to update its internal primary replacement number to a new, current timestamp (e.g., Z=20000). This current timestamp is the time recorded on the physical door lock, not the staff member's checkout card, and clears both secondary replacement number tracks to zero.

[0097] Data changes: The record in the lock changes from (10000, 80, 90) to (master: 20000, B_master: 0, B_sub: 0).

[0098] Result: All cards based on the old owner's replacement number 10000 are invalidated, and the door lock is restored to its original safe and clean state, ready to serve the next new guest.

[0099] Second embodiment: Alternative number scheme based on sequence number

[0100] To accommodate electronic door lock hardware with limited storage space and high power consumption, the present invention also provides a preferred implementation. In this embodiment, the secondary replacement number uses a smaller memory-efficient sequence number (e.g., an integer starting at 1) rather than a timestamp. Furthermore, the lock status management and reinitialization logic after a guest's check-out are optimized.

[0101] The main differences between this embodiment and the first embodiment are:

[0102] Properties of the secondary replacement numbers: The first-class secondary replacement number B_master and the second-class secondary replacement number B_sub are both simple serial numbers.

[0103] Secondary Alternative Number Reset Logic: Each time a new guest checks in, the door lock automatically resets both secondary alternative number tracks. This reset occurs when the door lock detects that the primary alternative number A_new of the key card being verified is greater than the old primary alternative number A_old stored in the lock. This marks the beginning of a new check-in cycle.

[0104] The following describes the workflow in conjunction with specific scenarios.

[0105] Scenario 1: New guest checks in (based on sequence number)

[0106] The previous state of the door lock: The previous guest has checked out, and the record in the lock may be (master: 10000, B_master: 999, B_sub: 999) (see the "Check-out" scenario below for the cause of this state).

[0107] Card issuance at the front desk: Check-in for new guests.

[0108] The card issuing system generates a new primary replacement number greater than 10000, for example, A_new=10001 (the primary replacement number can still be generated based on a timestamp or other incremental algorithm).

[0109] Assign an initial sequence number to the newly issued master room card and friends and family room card, for example, starting from 1.

[0110] New master room card (first type): write information {master: 10001, secondary: 1, role: "01"}.

[0111] New friends and family room card (second category): write information {primary: 10001, secondary: 1, role: "02"}.

[0112] Card swiping and initialization:

[0113] The guest uses the new main room card (10001, 1, "01") to swipe the lock for the first time.

[0114] The door lock processor detects that the card master replacement number (10001) is greater than the lock master replacement number (10000) and recognizes that this is a new check-in request.

[0115] The processor performs "customer exchange initialization": the master replacement number in the lock is updated to 10001.

[0116] The first-class sub-substitution number B_master and the second-class sub-substitution number B_sub are automatically cleared or reset to initial values (eg, 0).

[0117] Then, the normal verification logic is executed: because the card replacement number (1) is greater than the B_master (0) in the lock, the verification is passed, the lock is authorized, and B_master is updated with 1.

[0118] Data status change: The record in the lock changes from (10000, 999, 999) to (Master: 10001, B_master: 1, B_sub: 0). If a friend or relative swipes their room card, the record will eventually change to (Master: 10001, B_master: 1, B_sub: 1).

[0119] Scenario 2: Lost room card of relatives or friends and reissue (based on sequence number)

[0120] Current status: The record in the lock is (master: 10001, B_master: 1, B_sub: 1).

[0121] Reissue operation: The front desk will make a new room card for relatives and friends, with the serial number increasing. The information is {primary: 10001, secondary: 2, role: "02"}.

[0122] Card swiping and status change: When a new card (10001, 2, "02") is swiped, the door lock recognizes the role "02". Since the card's first-class substituent number B_sub(2) is greater than the lock's B_sub(1), the door is authorized to open and only the second-class substituent number on the lock side is updated.

[0123] Data change: The record in the lock changes from (10001, 1, 1) to (10001, 1, 2).

[0124] Result: The second-class replacement number for the lost friend's room card with a value of "1" is invalidated. The verification track B_master for the first-class replacement number for the master room card with a value of "1" is unaffected, and permissions are retained. Because the number of card replacements and lost cards within a stay is limited, the sequence number will not accumulate too high.

[0125] Scenario 3: Guest check-out and door lock reinitialization

[0126] This method is designed to immediately and reliably invalidate all guest cards without changing the primary or secondary number.

[0127] Current status: Assume that the guest has reissued the card multiple times during his stay, and the record in the lock is (master: 10001, B_master: 5, B_sub: 8).

[0128] Check-out: A staff member (such as a cleaning staff member) swipes the lock with a special "check-out" card. This card instructs the door lock to overwrite the values in the two secondary replacement number tracks with a preset capped value (e.g., 999) that is much larger than the normal usage range.

[0129] Card swiping and status change:

[0130] After the check-out card is swiped, the door lock executes the command.

[0131] Data changes: The record in the lock changes from (10001, 5, 8) to (master: 10001, B_master: 999, B_sub: 999).

[0132] Result: At this point, any previously valid guest card (e.g., a primary card with serial number 5 and a friend and family card with serial number 8) will be rejected because its version number is significantly lower than the 999 recorded in the lock. This method cleverly utilizes the version comparison mechanism to place the lock in a secure intermediate state of "checked out but not yet checked in," effectively preventing re-entry by the checked-out guest. This state persists until the next guest initializes the lock with a new card with a higher primary or replacement number.

[0133] This embodiment uses sequence numbers and optimized check-out / initialization logic to not only reduce the requirements for door lock hardware resources, but also forms a safe and efficient closed-loop management process through the two actions of "automatic clearing of guest changes" and "writing the cap value upon check-out."

[0134] Furthermore, in another preferred embodiment, the primary replacement number itself may be a sequential number or a numerical string generated by a specific rule, and does not need to be associated with a timestamp, as long as it can be guaranteed to increase with each new check-in.

[0135] Furthermore, in some embodiments, to further enhance system security, particularly to prevent fraudulent access by unauthorized cards during door lock initialization, the present invention may also include a "card issuance signature" mechanism based on asymmetric encryption. This mechanism, as a preferred enhancement to the aforementioned implementation, exists independently and does not affect the integrity of the aforementioned solution.

[0136] The hotel's back-end card issuance system holds a globally unique private key. All hotel offline electronic door locks 100 are pre-loaded with a public key that pairs with the private key when they leave the factory.

[0137] In the initial card issuance step of scenario 1, while the card issuing machine writes information such as {primary replacement number, secondary replacement number, role code} to the key card, it will perform an additional step: digitally sign this core information (or its hash value) with the issuing private key to generate a string of signature data, and write the signature data into the card.

[0138] During the door lock initialization process in scenario 1, after the door lock processor detects that the card master replacement number is greater than the initial value recorded in its internal record, it will first perform a mandatory signature verification step:

[0139] It will use its internally stored public key to verify whether the "signature data" attached to the card is valid for the core information on the card.

[0140] Only when the signature verification is successful and it is confirmed that the card is issued by an officially authorized channel will the door lock continue to perform subsequent initialization operations. If the signature verification fails, the door lock will directly reject the card.

[0141] This "signature-verification" mechanism establishes a solid root of trust for the entire offline access control system. It completely eliminates any attack path for malicious initialization of an "unowned" door lock using a forged card, ensuring that only legitimate guests can be the "first opener" of a room's permissions, thereby improving system security.

[0142] In summary, this invention establishes a complete, closed-loop, and reliable asymmetric permission management and invalidation mechanism by innovatively setting a primary replacement number for identifying permission groups, as well as first and second category secondary replacement numbers for recording different role key card versions, within the hotel's offline electronic door lock. Combined with the role codes stored within the key cards, this mechanism combines these roles to create a comprehensive, closed-loop, and reliable asymmetric permission management and invalidation mechanism. The detailed description of each of the above scenarios specifically illustrates how this invention accurately invalidates a specific lost card while ensuring the continuity of associated permissions, thereby simultaneously addressing the industry challenges of both security and convenience.

[0143] It should be understood that the above description is merely a preferred embodiment of the present invention and is not intended to limit the scope of protection of the present invention. Those skilled in the art will appreciate that, without departing from the core concept of the present invention, various modifications and improvements may be made, such as expanding the two types of roles to include more roles or adjusting the specific encoding method of the replacement numbers. These equivalent replacements and improvements should all be included within the scope of protection of the present invention.

Claims

1. A hotel offline access control authority management method, characterized in that: The following steps are involved: In a memory of a hotel offline electronic door lock serving as an authorization verification terminal, at least three identifiers are stored for the same authorization group, the identifiers comprising: a primary replacement number for identifying the authorization group, a first-type secondary replacement number for verifying a first-type key card version within the authorization group, and a second-type secondary replacement number for verifying a second-type key card version within the authorization group; When the hotel offline electronic door lock receives an unlocking request from a key card to be verified, the primary replacement number and the secondary replacement number contained in the key card to be verified are read; Determining whether the master / replacement number of the key card to be verified matches the master / replacement number stored in the hotel's offline electronic door lock; When matching, select the corresponding secondary replacement number for version verification based on the preset role type of the key card to be verified: If the key card to be verified is a first-class key card, then compare its secondary replacement number with the first-class secondary replacement number stored in the hotel offline electronic door lock. If the secondary replacement number of the key card to be verified is greater than or equal to the first-class secondary replacement number, unlocking is authorized, and only the first-class secondary replacement number of the hotel offline electronic door lock is updated with the secondary replacement number of the key card to be verified; If the key card to be verified is a second-category key card, its secondary replacement number is compared with the second-category secondary replacement number stored in the hotel offline electronic door lock. When the secondary replacement number of the key card to be verified is greater than or equal to the second-category secondary replacement number, unlocking is authorized, and the secondary replacement number of the key card to be verified is used to update only the second-category secondary replacement number of the hotel offline electronic door lock.

2. The method according to claim 1, characterized in that The step of selecting a corresponding secondary replacement number for version verification according to the preset role type of the key card to be verified includes: reading a role code stored in the key card to be verified, and determining whether it is a first-class key card or a second-class key card according to the role code.

3. The method according to claim 1, characterized in that The primary replacement number, the first-category secondary replacement number, and the second-category secondary replacement number are all timestamps generated based on time.

4. The method according to claim 1, wherein The first-category sub-replacement number and the second-category sub-replacement number are both increasing sequence numbers.

5. The method according to claim 4, characterized in that When the hotel offline electronic door lock detects that the primary replacement number of the key card to be verified is greater than the primary replacement number stored in the hotel offline electronic door lock, the first category secondary replacement number and the second category secondary replacement number stored in the hotel offline electronic door lock are reset to a preset initial value before comparing the secondary replacement numbers to authorize unlocking.

6. The method according to claim 1 or 4, characterized in that The method further includes a check-out step: when a check-out instruction is received, updating the first-category secondary replacement number and the second-category secondary replacement number stored in the hotel offline electronic door lock to a preset capping value that is greater than the maximum value that the secondary replacement number may reach in normal use.

7. The method according to claim 1, characterized in that The first type of key card is a master room card that has unlocking authority for multiple door locks within the authority group, and the second type of key card is a friend's room card that has unlocking authority for only a single door lock.

8. The method according to claim 1, characterized in that The method further includes a door lock initialization security verification step: when the master replacement number of the key card to be verified is newer than the master replacement number stored in the electronic door lock, before executing subsequent steps, first read the signature data stored in the key card and generated by the card issuing system using a private key; and use the public key pre-stored in the electronic door lock to verify the signature data. Only after the verification is passed, is the key card considered to be a legitimate card and subsequent replacement number update and version verification are executed.

9. A hotel offline electronic door lock, comprising a processor and a memory, characterized in that: The memory stores: The primary replacement number used to identify a permission group; A first-class minor replacement number for verifying a first-class key card version within the authorization group; and a second type of minor replacement number for verifying a second type of key card version within the authorization group; The processor is configured to perform the method according to any one of claims 1 to 8.

10. A hotel offline access control system, characterized in that: comprising the hotel offline electronic door lock as claimed in claim 9, and a first type of key card and a second type of key card associated with an authority group of the hotel offline electronic door lock; Wherein, the first type key card and the second type key card both store: The same master replacement number as the master replacement number stored in the hotel's offline electronic door lock; A minor replacement number for version verification; and A character code used to distinguish card types.

Images