Intelligent express cabinet interaction method

Abstract

The invention provides an intelligent express cabinet interaction method, which comprises the following steps of: after a user terminal inputs combined identification information, constructing a dynamic environment salt value by combining a virtual geographic coordinate generated in real time and a timestamp offset value, generating a first hash value H1 through dual hash operation, and storing the first hash value H1 in a cloud end in a segmented manner; and after receiving the homologous information, the cabinet end touch screen locally generates a second hash value H2 based on the same environmental salt value rule, and cabinet door control without plaintext transmission is realized through hash value matching. An irreversible first hash value H1 is formed by segmenting and recombining a third hash value H3 and a fourth hash value H4, and original data leakage is avoided. According to the method, the same user inputs the differentiated hash value generated each time through a dynamic environment salt value mechanism, so that the privacy exposure risk is eliminated, and the verification efficiency is guaranteed while the security is improved.

Description

Technical Field

[0001] This invention relates to the field of smart locker technology, specifically to smart parcel lockers, and in particular to interactive methods for smart parcel lockers. Background Technology

[0002] Smart parcel lockers are self-service devices deployed in public places. They consist of an independent locker, smart lock, scanning device, touch screen, and network module, allowing users to complete parcel delivery, temporary storage, and other operations independently. Through real-time linkage with a cloud management system using IoT technology, these devices enable users to complete the entire process of parcel storage and return 24 / 7.

[0003] To ensure the security of the parcel delivery process, current mainstream verification methods generally employ biometric authentication technologies such as fingerprint recognition and facial recognition. While these technologies can achieve accurate identity verification and locker door unlocking, they involve the collection and transmission of users' physiological characteristic data. Biometric information is sensitive personal information and must be processed locally according to the "minimum necessity" principle. However, in current systems, most operators, in pursuit of management convenience, still upload biometric template data to cloud platforms, forming massive user biometric databases, which pose security risks such as data leakage and misuse. From the perspective of the minimum necessity principle, considering that in the process of sending parcels using lockers as transit points, senders do not need to provide their own address to the locker, but rather pass it directly to the courier company, the existing locker-operated transit device uses verification codes, biometrics, and other verification methods beyond the necessary scope to obtain senders' personal information.

[0004] Hash operations are a technique that maps input data of arbitrary length to a fixed-length output value through a specific algorithm. This process is one-way output, and it is basically impossible to deduce the original data from the hash value. It is now mostly used in scenarios such as password storage and digital signatures. Summary of the Invention

[0005] The purpose of this invention is to overcome the shortcomings of the prior art and provide a more secure and more cautious interaction method for protecting personal information, thereby reducing the risk of exposing users' personal privacy through the verification information stored in existing smart parcel lockers.

[0006] To achieve the above objectives, the technical solution provided by the present invention is an intelligent express cabinet interaction method, comprising the following steps: user terminal inputting combined identification information; The cloud or server generates a first hash value H1 based on the combined identification information, and stores the first hash value H1 in segments and transmits it to the cabinet. When a user goes to the express locker to store or retrieve an item, the locker's touchscreen receives the user's input of the same source identification information that is uniquely associated with the combined identification information, and performs a local hash operation to generate a second hash value H2 for temporary storage. The counter compares the first hash value H1 with the second hash value H2. When they match, an unlocking signal is triggered.

[0007] In this invention, the user terminal refers to an electronic device used by the user to operate the smart parcel locker interactive service, including but not limited to smartphones, tablets, web browsers, etc., which have corresponding applications or service interfaces installed. The user terminal, as the interaction entry point, is responsible for collecting the verification information input by the user, performing preliminary data processing, and communicating with the cloud. Combined identification information refers to a composite dataset composed of multiple authentication elements provided by the user, assembled according to preset rules. This may include, but is not limited to, the following combination methods: static datasets, such as user-set passwords, mobile phone numbers, and parcel tracking numbers; or dynamic datasets, such as one-time SMS verification codes and image verification codes; and biometric features, such as facial feature vector fragments.

[0008] Extracting fragments of data from the aforementioned dataset, scrambling and reassembling them, and applying this method to fragments from multiple datasets are generally acceptable without violating the technical principles of this invention. It is noteworthy that, for the aforementioned scrambling and reassembling methods, synchronous transmission to the cloud is unnecessary. The cloud only needs to obtain the output of the first hash value H1 and transmit it to the terminal. Preferably, the cloud clears the storage relationship of the first hash value H1 immediately after completing the copying of the first hash value. If storage is required, the cloud can also fragment the first hash value H1 and store it on different nodes. Fragmentation based on fixed length or dynamic rules is acceptable.

[0009] The reconstruction rules for combined identification information are implemented as follows: Data bit interleaving: The last four digits of the mobile phone number and the first six digits of the express delivery tracking number are alternately arranged to form a 32-bit character sequence; Timestamp interpolation: The last bit of the current minute value is inserted between every two characters of the user's password; Feature vector segmentation: The biometric feature vector is reversed every 8 bits to form a reconstructed data block. A preferred implementation is: When a mobile phone number is included, the last four ASCII characters of the number are XORed with the first six characters of the express delivery tracking number to generate a 16-byte intermediate value.

[0010] The first hash value H1 refers to the fixed-length ciphertext generated after hashing the dataset mentioned above. Hash functions such as SHA-256 and MD5 are acceptable. The locker itself can be a smart parcel locker integrating a human-machine interface and a processor. It receives combined identification information input by the user and calls a local encryption chip to perform hash calculations, temporarily storing the result (the second hash value H2) in an isolated memory area. These smart parcel lockers are typically equipped with a physical locking circuit, often connected to an electromagnetic lock.

[0011] Same-source identification information refers to verification data input through the counter's touchscreen that is from the same batch and of the same type as the combined identification information input on the terminal side. It is uniquely associated with the combined identification information input by the user terminal, specifically meaning completely identical data. This identical data can be verified by using QR codes, identification codes, or other verification information that matches the counter. The difference from existing technologies is that the counter does not directly receive the original terminal data; it only indirectly verifies consistency through hash values. User information is not stored; it is only processed.

[0012] As a preferred embodiment, the original information of the first hash value H1 includes combined identification information and an environmental salt value. The environmental salt value refers to an encryption enhancement factor generated by processing geographic location information and time data using a specific algorithm. It serves as an additional input parameter for the hash operation, ensuring that the same user input generates a unique hash value under different spatiotemporal conditions. Compared to the traditional fixed environmental salt value in existing technologies, the environmental salt value of this patent possesses real-time dynamics and spatial correlation.

[0013] In any of the above technical features, the user terminal inputs a composite dataset composed of multiple verification elements. By combining static data (password, phone number) and dynamic data (SMS verification code, timestamp), verification cannot be passed by a single element. The risk of direct exposure of the original data is eliminated through methods such as scrambling, recombining, and truncating fragments. Only hash values, not the original plaintext, are stored in the cloud. This reduces the systemic risk caused by the leakage of a single piece of information, meets the "minimum necessary" principle in relevant laws, and avoids excessive collection of feature data.

[0014] As a preferred embodiment, the environmental salinity value includes real-time acquisition of the cabinet's geographical coordinates and overlaying it with the current timestamp. The geographical coordinates can be obtained from the actual latitude and longitude of the cabinet via a GPS / BeiDou module, and the current timestamp can be obtained from an atomic clock or an NTP server to synchronize with the precise time.

[0015] As a preferred implementation, the combined identification information generates a third hash value H3, the environmental salt value generates a fourth hash value H4, and the first hash value H1 can be obtained by combining the third hash value H3 and the fourth hash value H4 in a specific arrangement; or the third hash value H3 and the fourth hash value H4 can be written into a new string, and this string can be used as the original information to generate the first hash value H1.

[0016] The environmental salt value is generated by combining the real-time geographic coordinates of the terminal with the current timestamp offset, serving as an additional input parameter for the hash operation. The same user input generates different hash values ​​at different times / locations. The timestamp is superimposed with an encrypted offset sequence, effectively preventing attackers from guessing the salt value through patterns. This eliminates the hash collision risk caused by traditional fixed salt values ​​and, to some extent, avoids the possibility of retrieving user privacy information from historical data.

[0017] As an explanation, the third hash value H3 and the fourth hash value H4 are each fragmented to obtain partial segments. For example, the first half of the length of the third hash value H3 and the second half of the length of the fourth hash value H4 can be selected as the first hash value H1, or the first 1 / 4 of the length of the third hash value and the last 3 / 4 of the length of the fourth hash value H4 can be selected. Alternating insertion of odd-numbered bits of the third hash value H3 and even-numbered bits of the fourth hash value H4 is also acceptable.

[0018] The specific implementation method of hash value combination includes: taking the first 128 bits of the third hash value H3 and the last 128 bits of the fourth hash value H4 and performing a bitwise XOR operation to generate a 256-bit intermediate value; grouping the intermediate value into groups of 8 bits and arranging them in reverse order to generate the final first hash value H1; the combination process is implemented through a dedicated logic circuit in the cabinet-side security chip, and the circuit structure includes: an input register group, a bit rearrangement matrix, an XOR operator, and an output buffer.

[0019] The combined identification information generates a third hash value H3, the environmental salt value generates a fourth hash value H4, and the first hash value H1 is generated by recombining fragments of the third hash value H3 and the fourth hash value H4, or by recombining and then hashing. These fragments are then stored on different nodes in the cloud. Theoretically, it would require simultaneously hacking multiple cloud nodes and cracking the recombining rules to potentially restore the original data.

[0020] As an explanation, the third hash value H3 and the fourth hash value H4 are output separately to prevent some users from not modifying or replacing the third hash value H3 when it is used as the first hash value H1 for a long time, thus avoiding the problem of it being captured by web crawlers during long-term service.

[0021] The third hash value, H3, is retained and can be stored on the courier company's server, bound to the user's order tracking number. Especially when H3 and H1 are transmitted together via the cloud to the locker, H3 is only read by the courier from a separate storage device at the locker. This storage device is activated by a separate ID card to identify the association between the contents of the user's package and the tracking number. If necessary, when the same user uses the same combination of identification information, the courier company's server generates a corresponding H3 number to correspond to different tracking numbers.

[0022] In a preferred embodiment, the geographic coordinates and current timestamp are selected and obtained by the user terminal. Multiple locker terminals simultaneously selected by the user synchronously obtain the same geographic coordinates and current timestamp. These identical geographic coordinates and current timestamp can be generated by the user terminal, such as the user's shipping address and the timestamp of the order placement. The user can freely select, or by default select, multiple locker terminals to specifically receive the geographic coordinates and timestamp, i.e., the locker terminal where the user will ship the package.

[0023] In any of the aforementioned technical features, after receiving the same-source identification information, the cabinet-side touchscreen generates a second hash value H2 based on a pre-stored environmental salt value, and compares and verifies it with the fragmented reconstructed result of the first hash value H1 in the cloud. The cabinet only transmits the hash value comparison result and does not involve the original data transmission. Furthermore, when multiple cabinets are involved, the verification result can be broadcast through a protocol, allowing multiple cabinets to share unlocking information. After use, the cabinet does not retain user privacy, and the second hash value H2 can be automatically cleared after verification.

[0024] As a preferred embodiment, the geographic coordinates are virtual geographic coordinates of multiple counter terminals selected by the user simultaneously.

[0025] As a preferred implementation, the current timestamp is a virtual current timestamp of multiple counter terminals selected by the user at the same time.

[0026] As a preferred embodiment, the virtual geographic coordinates are the latitude and longitude of a random location on a geographic unit covering multiple counters.

[0027] As a preferred embodiment, the virtual current timestamp is obtained by offsetting a certain time unit selected by the user.

[0028] Virtual geographic coordinates refer to a specific point within a certain geographic range selected by the user. For example, a geographic unit within a 2-kilometer radius centered on the user's latitude and longitude at the time of order placement. This geographic unit can also be based on community planning, administrative divisions, or a selected range of latitude and longitude. Within this range, the locker is considered as a candidate for the user's package delivery. A specific set of virtual coordinates is generated for this user, rather than the user's current actual coordinates. The virtual current timestamp can be the actual timestamp of the user's terminal, or a timestamp within a time period such as ±1 hour, rather than the actual time the user placed the order.

[0029] For example, when a user selects N counters, the system uses the latitude and longitude of the center point of the target counter group as a reference, generates an offset according to a Gaussian distribution, with a certain radius. Each counter shares the same reference latitude and longitude and the offset algorithm seed value. The timestamp offset value is calculated by taking the hourly timestamp of the user's operation, superimposing a preset pseudo-random number sequence value, and controlling the offset range within a certain range. The pseudo-random number seed is generated by the encrypted chip hardware ID shared by the counter cluster.

[0030] When a user selects multiple terminals, the system generates virtual geographic coordinates and virtual timestamps covering the target cluster, with multiple terminals sharing the same virtual environment parameters. Using virtual coordinates instead of real GPS coordinates avoids exposing the user's actual location. This achieves "geographic anonymization" and meets location privacy protection requirements.

[0031] As a further explanation, for express delivery lockers based on any at least one of the above technical features, considering that the recipient has a necessary obligation to provide the express delivery company with their identity information, geographical location, and related contact information, the existing technology can be used to implement a one-time verification code for unlocking the package.

[0032] The present invention further relates to a parcel locker employing the interactive method of the intelligent parcel locker described in any one or more of the above-mentioned technical features.

[0033] The advantages and beneficial effects of this invention are as follows: A first hash value H1 is generated by combining identification information with environmental salt value. The dynamic environmental salt value ensures that the same user input generates a different first hash value H1 each time. The timestamp offset, as dynamic data, also provides users with a distinguishing point for the original information of the hash operation. Even if the user inputs the same combined identification information each time, a different first hash value H1 can be output. Neither the original information nor the environmental salt value exists in plaintext form. The information that the user inputs in real time at the counter is processed and stored as a second hash value. The user's information content is no longer stored, which greatly improves the security of user privacy information. Attached Figure Description

[0034] Figure 1This is a flowchart of the interaction method shown in this invention. Detailed Implementation

[0035] The specific embodiments of the present invention will be further described below with reference to the accompanying drawings and examples. The following examples are only used to more clearly illustrate the technical solutions of the present invention and should not be construed as limiting the scope of protection of the present invention.

[0036] Example 1 An interactive method for parcel lockers requires users to place an order online before sending a parcel, confirming the parcel information, including but not limited to the delivery address and recipient's name, and then uploading this information to the courier / logistics company.

[0037] Then, in the interaction method of the present invention, the user terminal inputs the last 4 digits of the mobile phone number and the first 6 digits of the express tracking number as combined identification information; the user terminal obtains the GPS coordinates of a locker where the user is preparing to send the package and the current timestamp of the order time.

[0038] The system (user terminal or cloud server) converts geographic coordinates into degrees, minutes, and seconds format using a GPS module, ignores unit characters, and concatenates them with a timestamp to generate an environmental salt value. It then performs a SHA-256 operation on the combined identification information to generate a third hash value H3, and performs an MD5 operation on the environmental salt value to generate a fourth hash value H4. The first 128 bits of the third hash value H3 are XORed with the last 128 bits of the fourth hash value H4 to generate a first hash value H1. The cloud divides the first hash value H1 into two segments: the first 64 bits are stored in the first node, the last 64 bits in the second node, and the current timestamp is stored in the third node. The cloud then transmits the first hash value H1 fragments from the first and second nodes to the terminal in sequence. The terminal stores the full text of the first hash value H1 and the timestamp transmitted from the third node on a locally deployed storage device.

[0039] After arriving at their selected parcel locker, the user enters the same mobile phone number and parcel tracking number on the touchscreen. The locker locally accesses the geographic coordinates stored in its GPS module, synchronously traversing each temporarily stored timestamp to generate a consistent environmental salt value. This hash operation is repeated to generate a second hash value H2, which is then compared to the first hash value H1. A match triggers the electromagnetic lock to open. Throughout this process, the locker only stores the first hash value H1 and the current timestamp; its processing only requires generating the second hash value H2, and it does not store the user's personal privacy information.

[0040] Example 2 An interactive method for express delivery lockers is proposed. After completing a product return application on an e-commerce platform, the user needs to simultaneously select one of three smart express delivery lockers (locker X / Y / Z) in adjacent communities as a backup return location. The system automatically marks these three lockers as a collaborative service cluster and executes a virtual coordinate synchronization mechanism.

[0041] Users input combined identification information via the app, such as the last 8 digits of the return order number and the middle 4 digits of the phone number. The system performs the following operations: obtaining the geometric center point of the cabinet's actual X / Y / Z coordinates; generating virtual geographic coordinates using the Mason slew algorithm with pseudo-random offsets; taking the hourly time when the user submits the return order and overlaying it with an encrypted offset sequence pre-stored in the security chip to generate a virtual current timestamp; superimposing the virtual geographic coordinates and the virtual timestamp to form a virtual environment salt value; the system then uses a hash algorithm to generate a first hash value H1 from the combined identification information and the virtual environment salt value, and divides the first hash value H1 into 4 parts, storing them on four nodes respectively; and finally, transmitting the virtual current timestamp and virtual geographic coordinates to the cabinet's X / Y / Z coordinates.

[0042] When a user goes to cabinet Y, they enter the last 8 digits of the return order number and the middle 4 digits of their mobile phone number on the touchscreen. The cabinet locally retrieves pre-stored virtual coordinates and timestamps, and generates a second hash value H2 using the same hash algorithm. Cabinet Y then compares the second hash value H2 with fragments of the four first hash values ​​H1 stored in the cloud. After successful verification, the verification result is broadcast to cabinets X and Z via the LoRaWAN protocol. All three cabinets simultaneously clear their cached data and unlock the electromagnetic locks.

[0043] The above description is only a preferred embodiment of the present invention. It should be noted that for those skilled in the art, several improvements and modifications can be made without departing from the technical principles of the present invention, and these improvements and modifications should also be considered within the scope of protection of the present invention.

Claims

1. A smart parcel locker interaction method, characterized in that, Includes the following steps: User terminal inputs combined identification information; The first hash value H1 is generated based on the combined identification information, and the first hash value H1 is stored in segments and transmitted to the cabinet. The counter receives the same source identification information input by the user in real time and performs a local hash operation to generate a second hash value H2; The counter compares the first hash value H1 with the second hash value H2. When they match, an unlocking signal is triggered.

2. The interaction method according to claim 1, characterized in that: The original information of the first hash value H1 includes combined identification information and environmental salinity.

3. The interaction method according to claim 2, characterized in that, The environmental salinity value includes the real-time acquired geographical coordinates of the terminal and the current timestamp superimposed.

4. The interaction method according to claim 3, characterized in that, The third hash value H3 is generated based on the combined identification information, and the fourth hash value H4 is generated based on the environmental salt value. The first hash value H1 has the original information formed by combining the fragment of the third hash value H3 with the fourth hash value H4.

5. The interaction method according to claim 3, characterized in that, The geographic coordinates and current timestamp are obtained by the user terminal. Based on the user's simultaneous selection of multiple counter terminals, the same geographic coordinates and current timestamp are obtained synchronously, and the multiple counter terminals serve as the user's candidate objects.

6. The interaction method according to claim 5, characterized in that, The geographic coordinates are the virtual geographic coordinates of multiple counter terminals selected by the user at the same time.

7. The interaction method according to claim 5, characterized in that, The current timestamp is a virtual current timestamp of multiple counter terminals selected by the user at the same time.

8. The interaction method according to claim 6, characterized in that, The virtual geographic coordinates are the latitude and longitude of a random location on a geographic unit covering multiple candidate objects.

9. The interaction method according to claim 7, characterized in that, The virtual current timestamp is obtained by offsetting a certain time unit selected by the user.

10. A smart parcel locker, employing the interaction method of the smart parcel locker as described in any one of claims 1-9.

Images