Secret-related carrier electronic access control system, management platform and monitoring client

Abstract

The invention discloses a confidential carrier electronic access control system, a management platform and a monitoring client, and the system comprises a server, a management computer, a card sender, a user computer, a snapshot camera and an RFID detection channel, and all the components are connected through a local area network to form a centralized management system. The server is used for storing secret-related carrier information, user permission data and passage records; the management computer is used for executing user management, equipment management and carrier borrowing processes; the card issuing device is used for generating an RFID identity card containing a permission identifier; the RFID detection channel is arranged at the entrance and exit and is used for identifying carrier tags and personnel identity cards; the snapshot camera is used for collecting access images and comparing the access images with data in the server. According to the method, full-process management and control are realized through deep integration of software and hardware, multi-level permission, abnormal early warning and graphical operation are combined, the management efficiency and safety of secret-related carriers are improved, and the problems of extensive management and slow response in the prior art are solved.

Description

Technical Field

[0001] The present invention relates to the field of information security, and in particular to a confidential carrier electronic access control system, a management platform and a monitoring client. Background Art

[0002] At a time when information security is becoming increasingly important, the management and control of confidential carriers is the key to protecting state secrets and commercial secrets. Traditional management of confidential carriers mainly relies on manual methods, which have many disadvantages. On the one hand, manual management is extremely inefficient. The borrowing, returning, entry and exit registration of carriers requires a lot of manpower and time, which makes it difficult to meet the needs of efficient management. On the other hand, manual management is prone to human omissions, such as inaccurate registration information and omission of important links, which lays hidden dangers for the leakage of confidential information.

[0003] With the development of technology, a confidential carrier management system based on RFID has emerged in the existing technology. The system manages entry and exit by setting a card reader to identify the carrier tag. However, this system still has obvious defects.

[0004] First, the recognition accuracy of the RFID system is limited. In some complex environments, recognition errors or even failure to recognize may occur, affecting the accuracy of management. Second, the system's ability to handle abnormal situations is insufficient. When abnormal situations such as illegal entry and exit of carriers occur, it is impossible to detect them in time and take effective countermeasures. Third, the existing system lacks refined authority management and multi-level approval processes. It is difficult to achieve strict control during the borrowing and returning of carriers, and it is easy to abuse or misuse confidential information. In addition, the automation management system in the existing technology often focuses on the software level, the integration of hardware and software is not high, the system integration is poor, and it is difficult to form a unified management platform, which affects the stability and response speed of the system. For this reason, an electronic access control system, management platform and monitoring client for confidential carriers are proposed. Summary of the Invention

[0005] In view of the deficiencies in the prior art, the present invention provides an electronic access control system for confidential carriers, a management platform and a monitoring client to solve the problems raised in the above background technology.

[0006] To achieve the above-mentioned purpose, the present invention provides the following technical solution: an electronic access control system for confidential carriers, comprising: Servers, management computers, card issuers, user computers, snapshot cameras, and RFID detection channels are all connected via a local area network to form a centralized management system. The server is used to store confidential carrier information, user authority data and access records; The management computer is used to perform user management, equipment management and carrier borrowing processes; The card issuer is used to generate an RFID identity card containing an authority identifier; The RFID detection channel is set at the entrance and exit to identify the carrier tag and the personnel identity card; The snapshot camera is used to collect incoming and outgoing images and compare them with data in the server; User management divides confidential personnel into three roles: hospital leaders / administrators, department leaders, and ordinary users, supporting a three-level approval process. Equipment management uses the monitoring point management module to monitor the operating status of cameras and channels in real time. Carrier management enables automatic information entry through the unique tag number generation function. Borrowing management supports both offline administrator operations and online multi-level approval. The server uses RAID disk array technology to ensure data redundancy and backup, and regularly takes data snapshots to address unexpected data loss. When the management computer performs user management, it can integrate the LDAP protocol to achieve centralized synchronization of user information and automatic authority allocation. When the card issuer generates RFID identity cards, it uses a dynamic encryption algorithm to generate a unique key for each card issuance to enhance security. The RFID detection channel uses a multi-antenna layout and signal enhancement module to achieve 360-degree tag recognition without blind spots. The snapshot camera uses a high-definition smart camera with a built-in deep learning algorithm to automatically compare entry and exit images with personnel information in the server. By connecting the server, management computer, card issuer, user computer, snapshot camera and RFID detection channel through the local area network, an efficient and secure centralized management system has been established. The server stores key information to ensure data integrity and traceability; the management computer realizes refined management of users, equipment and borrowing processes, improving work efficiency; the card issuer cooperates with the RFID detection channel to realize permission control and carrier identification automation; the snapshot camera serves as a security line to ensure the compliance of personnel and carrier entry. This system strengthens permission management through three-level role division and approval process. At the same time, the real-time monitoring of equipment status and automatic carrier entry function simplify the operation process and improve management accuracy. The dual-mode design of borrowing management retains the flexibility of traditional offline operations, and uses online approval to improve the transparency and traceability of the process, effectively ensuring the safe management of confidential carriers.

[0007] Preferably, the RFID detection channel integrates a signal enhancement module to improve tag recognition accuracy through a multi-antenna array, and triggers the channel gate to automatically close when an unauthorized tag is detected; The signal enhancement module has multiple built-in independent antenna arrays, which use time-division multiplexing technology to activate each antenna in turn. By dynamically adjusting the transmission power and receiving sensitivity, it forms a three-dimensional coverage field in the carrier's passage area. When the system detects an unauthorized tag, it immediately sends a locking command to the gate controller, synchronously triggers the sound and light alarm device, and records the violation event in the server log, forming a complete event traceability chain. Through multi-antenna array technology, the system can significantly improve the accuracy of tag recognition, effectively reduce misreading and missed reading, and ensure the security and accuracy of the passage of confidential carriers. When an unauthorized tag is detected, the automatic closing mechanism of the channel gate can quickly block the illegal passage path, forming a physical barrier, and effectively preventing confidential carriers from being illegally taken out. At the same time, the design also has an alarm linkage function, which synchronously triggers the sound and light alarm device to promptly remind security personnel to deal with abnormal situations. In addition, the system will record violations in the server log, providing a reliable basis for subsequent audits and traceability. The comprehensive application of these functions not only improves the intelligent level of confidential carrier management, but also greatly enhances the security and reliability of the system, and provides a strong guarantee for the security protection of confidential units.

[0008] Preferably, the snapshot camera is equipped with an intelligent recognition algorithm, which can automatically identify the consistency between the appearance characteristics of the carrier and the label information, and send an early warning signal to the management platform when an abnormality is found; The algorithm first uses image preprocessing technology to sharpen the captured image. It then uses a deep learning model (such as a convolutional neural network (CNN)) to extract the vehicle's appearance features and compares them with the label information pre-stored on the server (including vehicle model, color, size, and other features). If the comparison results are inconsistent, an early warning mechanism is triggered, sending a warning signal containing the abnormal image and the comparison results to the management platform. It significantly improves the security and intelligence level of the electronic access control system for confidential carriers. By automatically identifying the consistency between the carrier's appearance characteristics and the label information, the system can detect and warn of abnormal entry and exit in real time, effectively preventing the occurrence of illegal carrying or impersonation of carriers. This function not only reduces the burden of manual monitoring, but also greatly improves the accuracy and timeliness of monitoring. At the same time, the application of intelligent recognition algorithms enables the system to adapt to more diverse carrier types and complex environments, enhancing the flexibility and adaptability of the system.

[0009] The management platform for electronic access control of confidential carriers includes: User authority management module, used to generate a three-level role authority system, supporting departmental hierarchical management and user authority allocation; The device status monitoring module obtains the operating data of the camera and RFID channel hardware in real time, and displays the device connection status and abnormal alarms; The carrier circulation management module automatically enters carrier information through the tag number generation function and configures access rights for monitoring points; The borrowing process processing module supports offline registration and online three-level approval process, and records the entire borrowing and returning process operation log; The management platform communicates with the server in a two-way manner, receives data from front-end devices and issues control instructions; The role-based access control (RBAC) model is adopted. By defining three levels of roles: hospital leaders / administrators, department leaders, and ordinary users, and assigning corresponding permission sets to each role, the main administrator can create sub-administrator accounts on the management platform and specify the functional module permissions that can be operated by them, thus achieving refined permission management; The management platform integrates four core modules: user authority management, equipment status monitoring, carrier circulation management, and borrowing process processing, which significantly improves the security and efficiency of confidential carrier management. The user authority management module realizes hierarchical management of permissions and detailed control of department levels by building a three-level role authority system, ensuring that users at different levels can only access resources within their authority scope, effectively preventing information leakage. The equipment status monitoring module monitors the operating status of cameras and RFID channel hardware in real time, and immediately issues an alarm if an abnormality is found, ensuring the stable operation of the system. The carrier circulation management module simplifies the carrier management process and improves work efficiency by automatically entering carrier information and configuring access permissions. The borrowing process processing module supports an online and offline approval method, and records the entire process operation log of borrowing and returning in detail, providing strong support for auditing and tracing.

[0010] Preferably, the user authority management module supports the hierarchical authority of the main administrator and the sub-administrator. The main administrator can create sub-administrator accounts and assign functional module operation permissions; In the user rights management module, the main administrator enters the sub-administrator account information (such as username and password) through the management platform interface, selects the assignable function modules (such as user management and device monitoring), and sets the corresponding operation permissions (such as view, edit, delete, etc.). After the system verifies the validity of the information, it is saved to the server database, completing the creation of the sub-administrator account and the allocation of permissions. By having the main administrator create sub-administrator accounts and assign specific functional module operation permissions, refined permission management is achieved and permission abuse is avoided. This design not only makes system management more orderly, but also enhances the security of the system, because each sub-administrator can only access and operate the authorized part, reducing the risk of information leakage. At the same time, permission classification also simplifies the management process. The main administrator does not need to handle all matters personally, but can assign some management tasks to sub-administrators, thereby improving overall work efficiency. In addition, this design is also convenient for auditing and tracing, because all permission assignments and operation records will be recorded by the system, providing strong support for security management.

[0011] Preferably, the carrier circulation management module has a built-in label encryption algorithm to dynamically encrypt the carrier label number to prevent illegal tampering of the label information; The carrier circulation management module uses the AES (Advanced Encryption Standard) algorithm to encrypt the carrier label number. A randomly generated key and initialization vector are used each time for encryption to ensure that the encryption result is different each time, achieving dynamic encryption effect and effectively preventing the label information from being illegally tampered with. The carrier circulation management module has a built-in label encryption algorithm to dynamically encrypt the carrier label number. This design brings significant benefits. The dynamic encryption mechanism ensures the real-time and security of the label information. Even if the label is intercepted during transmission or storage, the attacker cannot obtain valid information because each encryption uses a different key and initialization vector. This encryption method not only enhances the security of confidential carriers in the circulation link, prevents illegal tampering of label information, but also improves the overall security of the system.

[0012] The monitoring client of the electronic access control system for confidential carriers, and the communication connection between the monitoring client and the management platform, include: Real-time monitoring interface, showing the passage records of each entrance and exit carrier, including tag number, carrier name, user and passage time; The abnormal alarm module receives early warning information sent by the management platform, prompts illegal entry and exit events through sound and light, and displays the alarm type and monitoring point location; Historical data query module, supports searching passage records and alarm logs by tag number, time range, and alarm type; The monitoring client uses a graphical user interface to achieve quick operations by dragging and dropping icons; The real-time monitoring interface receives and analyzes traffic record data in real time through a data interface with the management platform, presenting it in lists or charts. The abnormal alarm module integrates sound and light alarm devices, receives early warning information through the API interface, and automatically triggers alarms. The historical data query module builds an index database, supports multi-condition combination queries, and integrates data export functions, using encryption algorithms to protect exported files. The monitoring client of the electronic access control system for confidential carriers is exquisitely designed, which brings significant advantages to the security management of confidential environments. Its real-time monitoring interface intuitively displays the traffic status of carriers at each entrance and exit, including detailed tag number, carrier name, user and traffic time, so that managers can quickly grasp the dynamics of the scene and detect abnormalities in time. The abnormal alarm module immediately prompts illegal entry and exit events through sound and light, clarifies the alarm type and monitoring point location, effectively shortens the emergency response time, and improves security prevention capabilities. The historical data query module provides powerful data retrieval and analysis functions, supports multi-dimensional retrieval by tag number, time range, alarm type, etc., and provides strong support for post-event tracing and security audits. In addition, the graphical user interface and icon drag and drop quick operation design greatly simplify the user operation process, improve work efficiency, and make the monitoring client more user-friendly and easy to use.

[0013] Preferably, the real-time monitoring interface synchronously displays the images captured by the snapshot camera, and automatically marks the corresponding image and highlights it when abnormal traffic is detected; In the real-time monitoring interface, an image display control is integrated through a graphical interface development tool (such as Qt or Java Swing). This control is connected to the image output interface of the snapshot camera to receive and display the image data stream collected by the camera in real time. When the management platform detects an abnormal traffic event, the abnormal event information is sent to the monitoring interface through a message queue or event trigger mechanism. After receiving the abnormal signal, the monitoring interface uses an image processing algorithm (such as OpenCV) to automatically draw a marker box on the image and change the color to highlight the abnormal area. At the same time, the timestamp and image frame information of the abnormal event are recorded to facilitate subsequent tracing and auditing. The real-time monitoring interface synchronously displays images captured by the snapshot camera, and automatically marks and highlights the corresponding image when abnormal passage is detected. This function greatly improves the security and response speed of the electronic access control system for confidential carriers. By intuitively displaying abnormal images, security personnel can quickly identify and deal with potential security threats, effectively preventing the illegal carrying or loss of confidential carriers. In addition, this function also enhances the traceability of the system, providing important visual evidence for subsequent audits and investigations.

[0014] Preferably, the abnormal alarm module supports hierarchical push of alarm information, automatically matches the push object according to the alarm type, and directly pushes illegal entry and exit events to the security person in charge account; The system has a built-in mapping rule library between alarm types and push targets. When receiving an early warning message, the system automatically analyzes the alarm type and accurately sends the alarm information to the corresponding push target account through a preset communication protocol (such as SMS, email or APP push) based on the mapping relationship in the rule library. For example, an illegal entry or exit event will directly trigger an SMS message to the security person in charge's mobile phone. By automatically matching push objects according to alarm types, the system can ensure that alarm information of different levels is conveyed to the corresponding responsible persons in a timely and accurate manner, thereby improving the efficiency and pertinence of emergency response. Secondly, illegal entry and exit events are directly pushed to the security manager's account. This design enables key security events to quickly attract the attention of the security team and effectively prevent the expansion of security vulnerabilities. In addition, this function also enhances the intelligence level of the system. By automating the processing of alarm information, it reduces the burden of manual monitoring and improves the effectiveness of overall security management. In summary, the hierarchical push function not only improves the security and reliability of the system, but also promotes the intelligence and efficiency of security management.

[0015] Preferably, the historical data query module provides a data export function, exports the search results as an encrypted document, and automatically records the export operation to the system log; The historical data query module uses the AES encryption algorithm to encrypt the search results and generate encrypted documents in PDF or Excel format. During the export process, key information such as operation time, operator, and exported data range is recorded in the system log to ensure data traceability. By exporting the search results as encrypted documents, the security of sensitive data is effectively guaranteed and the risk of data leakage is prevented. The encryption process ensures that even if the document is illegally obtained during transmission or storage, its content cannot be easily interpreted. Secondly, the export operation is automatically recorded in the system log, which realizes the traceability of the operation and facilitates subsequent audits and problem troubleshooting. The system log records key information such as operation time, operator and exported data range, providing strong support for system management. In addition, this function also improves work efficiency. Users can flexibly export data as needed for further analysis or report production without manual copying and pasting, saving a lot of time and energy.

[0016] In summary, compared with the prior art, the present invention provides a confidential electronic access control system, management platform, and monitoring client, which have the following beneficial effects: This invention combines a highly integrated hardware system with a software management platform to achieve precise control of the entire process of confidential carriers, significantly improving management efficiency and security. The system builds a centralized management system based on a local area network, integrating hardware equipment such as servers, card issuers, and RFID detection channels, and cooperates with the management platform to realize automatic entry of carrier information, dynamic allocation of permissions, and real-time status monitoring. Compared with traditional manual management, the hardware equipment automatically collects entry and exit data, and cooperates with the three-level approval process and tag number unique identification mechanism of the software module to effectively avoid human omissions and misregistration of information. At the same time, the linkage comparison function of the RFID detection channel and the snapshot camera can accurately identify the carrier label and the identity of the person, solving the problem of insufficient recognition accuracy in complex environments, and ensuring the legality and traceability of the entry and exit of confidential carriers. Through multi-level authority management and real-time abnormal warning mechanism, a refined security protection system is established to reduce the risk of confidential information leakage. The user authority management module supports three-level role allocation for hospital leaders, department leaders and ordinary users. Combined with the real-time collection of hardware operation data by the equipment status monitoring module, it can dynamically adjust the access rights of monitoring points and trigger abnormal alarms. When illegal entry and exit incidents occur, the abnormal alarm module uses sound and light prompts and displays the location of the monitoring point to ensure that management personnel respond immediately. Compared with the existing RFID system, the ability to handle abnormal situations is significantly improved. In addition, the dual-mode approval mechanism (offline registration + online three-level approval) and full-process log recording of the borrowing process processing module further strengthen the strict control of the borrowing and return links of the carrier; Through the graphical monitoring client and deep historical data retrieval function, the user experience is optimized, the system response speed is improved, and the integration of the management platform is enhanced. The graphical interface of the monitoring client supports icon dragging operations, and displays the carrier passage records (tag number, name, user, etc.) in real time, simplifying the management personnel's operation process. The historical data query module provides multi-dimensional retrieval capabilities based on tag number, time range and alarm type, which facilitates the rapid tracing of the flow trajectory of confidential carriers. At the same time, the design of two-way communication between the management platform and the server realizes real-time uploading of hardware equipment data and issuance of control instructions, solves the problem of low integration between hardware and software in the existing system, forms a unified and efficient management system, and significantly improves system stability and response efficiency. BRIEF DESCRIPTION OF THE DRAWINGS

[0017] Figure 1 This is a schematic diagram of the electronic access control system for confidential carriers of the invention.

[0018] Figure 2 It is a schematic diagram of the management platform of the electronic access control for confidential carriers of the invention.

[0019] Figure 3 It is a schematic diagram of the monitoring client of the electronic access control system for confidential carriers of the invention. DETAILED DESCRIPTION

[0020] The present invention provides a technical solution, a confidential carrier electronic access control system, please refer to Figure 1 ,include: Servers, management computers, card issuers, user computers, snapshot cameras, and RFID detection channels are all connected via a local area network to form a centralized management system. The server is used to store confidential carrier information, user authority data and access records; The management computer is used to perform user management, equipment management and media borrowing processes; The card issuer is used to generate an RFID identity card containing an authorization identifier; RFID detection channels are set up at the entrances and exits to identify carrier tags and personnel identity cards; The snapshot camera is used to collect entry and exit images and compare them with data in the server; User management divides confidential personnel into three roles: hospital leaders / administrators, department leaders, and ordinary users, supporting a three-level approval process. Equipment management uses the monitoring point management module to monitor the operating status of cameras and channels in real time. Carrier management enables automatic information entry through the unique tag number generation function. Borrowing management supports both offline administrator operations and online multi-level approval. The server uses RAID disk array technology to ensure data redundancy and backup, and regularly takes data snapshots to address unexpected data loss. When the management computer performs user management, it can integrate the LDAP protocol to achieve centralized synchronization of user information and automatic authority allocation. When the card issuer generates RFID identity cards, it uses a dynamic encryption algorithm to generate a unique key for each card issuance to enhance security. The RFID detection channel uses a multi-antenna layout and signal enhancement module to achieve 360-degree tag recognition without blind spots. The snapshot camera uses a high-definition smart camera with a built-in deep learning algorithm to automatically compare entry and exit images with personnel information in the server. By connecting the server, management computer, card issuer, user computer, snapshot camera and RFID detection channel through the local area network, an efficient and secure centralized management system has been established. The server stores key information to ensure data integrity and traceability; the management computer realizes refined management of users, equipment and borrowing processes, improving work efficiency; the card issuer cooperates with the RFID detection channel to realize permission control and carrier identification automation; the snapshot camera serves as a security line to ensure the compliance of personnel and carrier entry. This system strengthens permission management through three-level role division and approval process. At the same time, the real-time monitoring of equipment status and automatic carrier entry function simplify the operation process and improve management accuracy. The dual-mode design of borrowing management retains the flexibility of traditional offline operations, and uses online approval to improve the transparency and traceability of the process, effectively ensuring the safe management of confidential carriers.

[0021] See also Figure 1 ,The RFID detection channel integrates a signal enhancement module, which improves the tag recognition accuracy through a multi-antenna array and triggers the channel gate to automatically close when an unauthorized tag is detected; The signal enhancement module has multiple built-in independent antenna arrays, which use time-division multiplexing technology to activate each antenna in turn. By dynamically adjusting the transmission power and receiving sensitivity, it forms a three-dimensional coverage field in the carrier's passage area. When the system detects an unauthorized tag, it immediately sends a locking command to the gate controller, synchronously triggers the sound and light alarm device, and records the violation event in the server log, forming a complete event traceability chain. Through multi-antenna array technology, the system can significantly improve the accuracy of tag recognition, effectively reduce misreading and missed reading, and ensure the security and accuracy of the passage of confidential carriers. When an unauthorized tag is detected, the automatic closing mechanism of the channel gate can quickly block the illegal passage path, forming a physical barrier, and effectively preventing confidential carriers from being illegally taken out. At the same time, the design also has an alarm linkage function, which synchronously triggers the sound and light alarm device to promptly remind security personnel to deal with abnormal situations. In addition, the system will record violations in the server log, providing a reliable basis for subsequent audits and traceability. The comprehensive application of these functions not only improves the intelligent level of confidential carrier management, but also greatly enhances the security and reliability of the system, and provides a strong guarantee for the security protection of confidential units.

[0022] See also Figure 1 ,The snapshot camera is equipped with an intelligent recognition algorithm, which can automatically identify the consistency between the carrier's appearance characteristics and the label information, and send an early warning signal to the management platform when an anomaly is found; The algorithm first uses image preprocessing technology to sharpen the captured image. It then uses a deep learning model (such as a convolutional neural network (CNN)) to extract the vehicle's appearance features and compares them with the label information pre-stored on the server (including vehicle model, color, size, and other features). If the comparison results are inconsistent, an early warning mechanism is triggered, sending a warning signal containing the abnormal image and the comparison results to the management platform. It significantly improves the security and intelligence level of the electronic access control system for confidential carriers. By automatically identifying the consistency between the carrier's appearance characteristics and the label information, the system can detect and warn of abnormal entry and exit in real time, effectively preventing the occurrence of illegal carrying or impersonation of carriers. This function not only reduces the burden of manual monitoring, but also greatly improves the accuracy and timeliness of monitoring. At the same time, the application of intelligent recognition algorithms enables the system to adapt to more diverse carrier types and complex environments, enhancing the flexibility and adaptability of the system.

[0023] For the management platform of electronic access control for confidential carriers, please refer to Figure 1 and Figure 2 ,include: User authority management module, used to generate a three-level role authority system, supporting departmental hierarchical management and user authority allocation; The device status monitoring module obtains the operating data of the camera and RFID channel hardware in real time, and displays the device connection status and abnormal alarms; The carrier circulation management module automatically enters carrier information through the tag number generation function and configures access rights for monitoring points; The borrowing process processing module supports offline registration and online three-level approval process, and records the entire borrowing and returning process operation log; The management platform communicates with the server in two directions, receiving data from front-end devices and issuing control instructions; The role-based access control (RBAC) model is adopted. By defining three levels of roles: hospital leaders / administrators, department leaders, and ordinary users, and assigning corresponding permission sets to each role, the main administrator can create sub-administrator accounts on the management platform and specify the functional module permissions that can be operated by them, thus achieving refined permission management; The management platform integrates four core modules: user authority management, equipment status monitoring, carrier circulation management, and borrowing process processing, which significantly improves the security and efficiency of confidential carrier management. The user authority management module realizes hierarchical management of permissions and detailed control of department levels by building a three-level role authority system, ensuring that users at different levels can only access resources within their authority scope, effectively preventing information leakage. The equipment status monitoring module monitors the operating status of cameras and RFID channel hardware in real time, and immediately issues an alarm if an abnormality is found, ensuring the stable operation of the system. The carrier circulation management module simplifies the carrier management process and improves work efficiency by automatically entering carrier information and configuring access permissions. The borrowing process processing module supports an online and offline approval method, and records the entire process operation log of borrowing and returning in detail, providing strong support for auditing and tracing.

[0024] See also Figure 1 and Figure 2 The user authority management module supports the hierarchical authority of the main administrator and the sub-administrator. The main administrator can create sub-administrator accounts and assign functional module operation permissions; In the user rights management module, the main administrator enters the sub-administrator account information (such as username and password) through the management platform interface, selects the assignable function modules (such as user management and device monitoring), and sets the corresponding operation permissions (such as view, edit, delete, etc.). After the system verifies the validity of the information, it is saved to the server database, completing the creation of the sub-administrator account and the allocation of permissions. By having the main administrator create sub-administrator accounts and assign specific functional module operation permissions, refined permission management is achieved and permission abuse is avoided. This design not only makes system management more orderly, but also enhances the security of the system, because each sub-administrator can only access and operate the authorized part, reducing the risk of information leakage. At the same time, permission classification also simplifies the management process. The main administrator does not need to handle all matters personally, but can assign some management tasks to sub-administrators, thereby improving overall work efficiency. In addition, this design is also convenient for auditing and tracing, because all permission assignments and operation records will be recorded by the system, providing strong support for security management.

[0025] See also Figure 1 and Figure 2,The carrier circulation management module has a built-in label encryption algorithm, which dynamically encrypts the carrier label number to prevent illegal tampering of label information; The carrier circulation management module uses the AES (Advanced Encryption Standard) algorithm to encrypt the carrier label number. A randomly generated key and initialization vector are used each time for encryption to ensure that the encryption result is different each time, achieving dynamic encryption effect and effectively preventing the label information from being illegally tampered with. The carrier circulation management module has a built-in label encryption algorithm to dynamically encrypt the carrier label number. This design brings significant benefits. The dynamic encryption mechanism ensures the real-time and security of the label information. Even if the label is intercepted during transmission or storage, the attacker cannot obtain valid information because each encryption uses a different key and initialization vector. This encryption method not only enhances the security of confidential carriers in the circulation link, prevents illegal tampering of label information, but also improves the overall security of the system.

[0026] The monitoring client of the electronic access control system for confidential carriers, the communication connection between the monitoring client and the management platform, please refer to Figure 1 、 Figure 2 and Figure 3 ,include: Real-time monitoring interface, showing the passage records of each entrance and exit carrier, including tag number, carrier name, user and passage time; The abnormal alarm module receives early warning information sent by the management platform, prompts illegal entry and exit events through sound and light, and displays the alarm type and monitoring point location; Historical data query module, supports searching passage records and alarm logs by tag number, time range, and alarm type; The monitoring client uses a graphical user interface, which allows quick operation by dragging and dropping icons; The real-time monitoring interface receives and analyzes traffic record data in real time through a data interface with the management platform, presenting it in lists or charts. The abnormal alarm module integrates sound and light alarm devices, receives early warning information through the API interface, and automatically triggers alarms. The historical data query module builds an index database, supports multi-condition combination queries, and integrates data export functions, using encryption algorithms to protect exported files. The monitoring client of the electronic access control system for confidential carriers is exquisitely designed, which brings significant advantages to the security management of confidential environments. Its real-time monitoring interface intuitively displays the traffic status of carriers at each entrance and exit, including detailed tag number, carrier name, user and traffic time, so that managers can quickly grasp the dynamics of the scene and detect abnormalities in time. The abnormal alarm module immediately prompts illegal entry and exit events through sound and light, clarifies the alarm type and monitoring point location, effectively shortens the emergency response time, and improves security prevention capabilities. The historical data query module provides powerful data retrieval and analysis functions, supports multi-dimensional retrieval by tag number, time range, alarm type, etc., and provides strong support for post-event tracing and security audits. In addition, the graphical user interface and icon drag and drop quick operation design greatly simplify the user operation process, improve work efficiency, and make the monitoring client more user-friendly and easy to use.

[0027] See also Figure 1 、 Figure 2 and Figure 3 , the real-time monitoring interface synchronously displays the images captured by the capture camera, and automatically marks the corresponding image and highlights it when abnormal traffic is detected; In the real-time monitoring interface, an image display control is integrated through a graphical interface development tool (such as Qt or Java Swing). This control is connected to the image output interface of the snapshot camera to receive and display the image data stream collected by the camera in real time. When the management platform detects an abnormal traffic event, the abnormal event information is sent to the monitoring interface through a message queue or event trigger mechanism. After receiving the abnormal signal, the monitoring interface uses an image processing algorithm (such as OpenCV) to automatically draw a marker box on the image and change the color to highlight the abnormal area. At the same time, the timestamp and image frame information of the abnormal event are recorded to facilitate subsequent tracing and auditing. The real-time monitoring interface synchronously displays images captured by the snapshot camera, and automatically marks and highlights the corresponding image when abnormal passage is detected. This function greatly improves the security and response speed of the electronic access control system for confidential carriers. By intuitively displaying abnormal images, security personnel can quickly identify and deal with potential security threats, effectively preventing the illegal carrying or loss of confidential carriers. In addition, this function also enhances the traceability of the system, providing important visual evidence for subsequent audits and investigations.

[0028] See also Figure 1 、 Figure 2 and Figure 3 The abnormal alarm module supports hierarchical push of alarm information, automatically matches the push object according to the alarm type, and pushes illegal entry and exit events directly to the security person in charge account; The system has a built-in mapping rule library between alarm types and push targets. When receiving an early warning message, the system automatically analyzes the alarm type and accurately sends the alarm information to the corresponding push target account through a preset communication protocol (such as SMS, email or APP push) based on the mapping relationship in the rule library. For example, an illegal entry or exit event will directly trigger an SMS message to the security person in charge's mobile phone. By automatically matching push objects according to alarm types, the system can ensure that alarm information of different levels is conveyed to the corresponding responsible persons in a timely and accurate manner, thereby improving the efficiency and pertinence of emergency response. Secondly, illegal entry and exit events are directly pushed to the security manager's account. This design enables key security events to quickly attract the attention of the security team and effectively prevent the expansion of security vulnerabilities. In addition, this function also enhances the intelligence level of the system. By automating the processing of alarm information, it reduces the burden of manual monitoring and improves the effectiveness of overall security management. In summary, the hierarchical push function not only improves the security and reliability of the system, but also promotes the intelligence and efficiency of security management.

[0029] See also Figure 1 、 Figure 2 and Figure 3 ,The historical data query module provides data export function, ,which exports the search results as encrypted documents, and the export ,operation is automatically recorded in the system log; The historical data query module uses the AES encryption algorithm to encrypt the search results and generate encrypted documents in PDF or Excel format. During the export process, key information such as operation time, operator, and exported data range is recorded in the system log to ensure data traceability. By exporting the search results as encrypted documents, the security of sensitive data is effectively guaranteed and the risk of data leakage is prevented. The encryption process ensures that even if the document is illegally obtained during transmission or storage, its content cannot be easily interpreted. Secondly, the export operation is automatically recorded in the system log, which realizes the traceability of the operation and facilitates subsequent audits and problem troubleshooting. The system log records key information such as operation time, operator and exported data range, providing strong support for system management. In addition, this function also improves work efficiency. Users can flexibly export data as needed for further analysis or report production without manual copying and pasting, saving a lot of time and energy.

[0030] It should be noted that, in this document, relational terms such as first and second, etc., are used only to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any actual relationship or order between these entities or operations. Moreover, the terms "comprises," "comprising," or any other variations thereof are intended to cover non-exclusive inclusion, such that a process, method, article, or apparatus that includes a list of elements includes not only those elements but also other elements not explicitly listed, or elements inherent to such process, method, article, or apparatus.

[0031] While embodiments of the present invention have been shown and described, it will be appreciated by those skilled in the art that various changes, modifications, substitutions, and variations may be made to these embodiments without departing from the principles and spirit of the invention, and that the scope of the invention is defined by the appended claims and their equivalents.

Claims

1. Electronic access control system for confidential carriers, characterized by: include: Servers, management computers, card issuers, user computers, snapshot cameras, and RFID detection channels are all connected via a local area network to form a centralized management system. The server is used to store confidential carrier information, user authority data and access records; The management computer is used to perform user management, equipment management and carrier borrowing processes; The card issuer is used to generate an RFID identity card containing an authority identifier; The RFID detection channel is set at the entrance and exit to identify the carrier tag and the personnel identity card; The snapshot camera is used to collect incoming and outgoing images and compare them with data in the server; Among them, user management divides confidential personnel into three levels of roles: hospital leaders / administrators, department leaders and ordinary users, and supports a three-level approval process. Equipment management monitors the operating status of cameras and channels in real time through the monitoring point management module. Carrier management realizes automatic information entry through the unique tag number generation function. Borrowing management supports both offline administrator operations and online multi-level approval modes.

2. The electronic access control system for confidential carriers according to claim 1 is characterized by: The RFID detection channel integrates a signal enhancement module, which improves the tag recognition accuracy through a multi-antenna array and triggers the channel gate to automatically close when an unauthorized tag is detected.

3. The electronic access control system for confidential carriers according to claim 1, characterized in that: The snapshot camera is configured with an intelligent recognition algorithm to automatically identify the consistency between the appearance characteristics of the carrier and the label information, and sends an early warning signal to the management platform when an abnormality is found.

4. The management platform of electronic access control for confidential carriers is characterized by: include: User authority management module, used to generate a three-level role authority system, supporting departmental hierarchical management and user authority allocation; The device status monitoring module obtains the operating data of the camera and RFID channel hardware in real time, and displays the device connection status and abnormal alarms; The carrier circulation management module automatically enters carrier information through the tag number generation function and configures access rights for monitoring points; The borrowing process processing module supports offline registration and online three-level approval process, and records the entire borrowing and returning process operation log; The management platform communicates with the server in a two-way manner, receives data from the front-end devices and issues control instructions.

5. The management platform for electronic access control of confidential carriers according to claim 4 is characterized by: The user authority management module supports the authority grading of the main administrator and the sub-administrator. The main administrator creates the sub-administrator account and allocates the function module operation authority.

6. The management platform for electronic access control of confidential carriers according to claim 4 is characterized by: The carrier circulation management module has a built-in label encryption algorithm to dynamically encrypt the carrier label number to prevent illegal tampering of the label information.

7. The monitoring client of electronic access control for confidential carriers is characterized by: Monitor the communication connection between the client and the management platform, including: Real-time monitoring interface, showing the passage records of each entrance and exit carrier, including tag number, carrier name, user and passage time; The abnormal alarm module receives early warning information sent by the management platform, prompts illegal entry and exit events through sound and light, and displays the alarm type and monitoring point location; Historical data query module, supports searching passage records and alarm logs by tag number, time range, and alarm type; The monitoring client adopts a graphical user interface, and quick operations are achieved by dragging and dropping icons.

8. The monitoring client for electronic access control of confidential carriers according to claim 7 is characterized by: The real-time monitoring interface synchronously displays the images captured by the snapshot camera, and automatically marks the corresponding image and highlights it when abnormal passage is detected.

9. The monitoring client for electronic access control of confidential carriers according to claim 7, characterized in that: The abnormal alarm module supports hierarchical push of alarm information, automatically matches the push object according to the alarm type, and pushes illegal entry and exit events directly to the security manager's account.

10. The monitoring client for electronic access control of confidential carriers according to claim 7, characterized in that: The historical data query module provides a data export function, exports the search results as an encrypted document, and the export operation is automatically recorded in the system log.

Images