Intelligent safety box measurement and control method and system based on data bidirectional encryption

Abstract

The invention discloses an intelligent safety box measurement and control method and system based on data bidirectional encryption, and relates to the technical field of safety box measurement and control. The method comprises the steps that firstly, according to safety of safety box storage, an area is divided into sub-areas with different safety, and then edge servers in machine rooms of the different sub-areas are adjusted; according to the method, the efficiency and the safety of data transmission, analysis and control of the safety box are ensured, transportation personnel are monitored in the storage and transportation process of articles, the transportation safety is ensured, when the safety box is used, the safety box is monitored, and then real-time mapping with a safety box digital model is performed, so that transparent monitoring of the safety box is realized; and meanwhile, after the safety box receives the unlocking request, the requester is monitored and analyzed, so that the unlocking safety is ensured, the risk of article loss and damage is reduced, and the safety of the intelligent safety box is improved.

Description

TECHNICAL FIELD

[0001] The present application relates to the technical field of safe control, and particularly relates to a smart safe control method and system based on data bidirectional encryption. BACKGROUND

[0002] The smart safe is used for protecting valuable and high-value goods transportation, and has functions of real-time monitoring and positioning, and data transmission through data bidirectional encryption to improve the safety of the smart safe.

[0003] In the prior art, when the smart safe stores goods, the smart safe can be opened as long as the unlocking person is verified successfully, and the environment difference between the inside and outside of the safe is ignored, which affects the safety of the goods storage. In addition, the smart safe may be subjected to malicious unlocking requests for theft, but the prior art lacks security assessment of the authorized account when setting temporary permissions for the safe, and cannot prevent risk personnel from opening the safe, increasing the probability of goods loss and reducing the safety of storage.

[0004] In the prior art, when a user selects a smart safe for storage, the user is randomly assigned a vacant safe and a delivery person according to the distance, but lacks the safety of the goods value and the historical delivery behavior of the delivery person to assign a relatively safe safe and delivery person to the user, so as to reduce the risk of information leakage of goods storage and reduce the safety of goods storage. SUMMARY

[0005] In view of the above technical problems, the present application provides a smart safe control method and system based on data bidirectional encryption.

[0006] To solve the above technical problems, the present application adopts the following technical scheme: in the first aspect, the present application provides a smart safe control method based on data bidirectional encryption, comprising the following steps: S1, obtaining the operation log of each safe in the region from the blockchain platform, dividing the region into high-risk sub-regions, medium-risk sub-regions and low-risk sub-regions, and then setting an edge server for the region.

[0007] S2, when the safe is used, setting a first user for the safe, generating a safe digital model at the first user terminal by using the monitoring device in the safe, setting a safe monitoring scheme, and simultaneously mapping the safe digital model in real time.

[0008] S3, when the safe receives the unlocking request, identity authentication is carried out, the associated data of the safe is obtained, corresponding processing is carried out according to the identity authentication result and the associated data of the safe, then it is recorded in the operation log of the safe, and is chained.

[0009] In a second aspect, the application provides a smart safe monitoring system based on data bidirectional encryption, comprising: a server setting module, used for obtaining the operation logs of each safe in the region from the blockchain platform, dividing the region into high-risk sub-regions, medium-risk sub-regions and low-risk sub-regions, and then setting an edge server for the region.

[0010] A safe setting module is used for setting a first user for the safe when the safe is used, generating a digital model of the safe at the first user terminal by using the monitoring equipment in the safe, setting a safe monitoring scheme, and simultaneously mapping the safe monitoring scheme with the digital model of the safe in real time.

[0011] A safe monitoring module is used for identity authentication when the safe receives the unlocking request, obtaining the associated data of the safe, and performing corresponding processing according to the identity authentication result and the associated data of the safe, then recording in the operation log of the safe, and chaining.

[0012] The application has the beneficial effects that the application provides a smart safe monitoring method and system based on data bidirectional encryption, first divides the region into sub-regions with different safety according to the safety of the safe, adjusts the edge servers in the machine room of different sub-regions, ensures the efficiency and safety of the safe data transmission, analysis and control, monitors the safe when the safe is used, maps the safe monitoring scheme with the digital model of the safe in real time, realizes the transparent monitoring of the safe, monitors and analyzes the request person when the safe receives the unlocking request, ensures the safety of the unlocking, reduces the risk of loss and damage of the goods, and improves the safety of the smart safe. BRIEF DESCRIPTION OF DRAWINGS

[0013] In order to more clearly illustrate the technical solutions in the embodiments of the application or the prior art, the following will briefly introduce the drawings needed to be used in the embodiment or prior art description. Obviously, the drawings in the following description only some embodiments of the application, and for those skilled in the art, other drawings can be obtained without creative labor on the basis of these drawings.

[0014] Figure 1 The method embodiment step flow diagram of the application.

[0015] Figure 2 The system structure connection diagram of the application. DETAILED DESCRIPTION

[0016] The technical solutions in the embodiments of the present application will be apparently and completely described below with reference to the drawings in the embodiments of the present application. Obviously, the described embodiments are only part of the embodiments of the present application, rather than all the embodiments. Based on the embodiments in the present application, all other embodiments obtained by a person of ordinary skill in the art without creative work belong to the protection scope of the present application.

[0017] Embodiment 1 Referring to Figure 1 As shown in the figure, an intelligent safe case measurement and control method based on data bidirectional encryption, comprising the following steps: S1, obtaining the operation log of each safe case in the region from the block chain platform, dividing the region into high-risk sub-regions, medium-risk sub-regions and low-risk sub-regions, and then setting an edge server for the region.

[0018] In a specific embodiment, the region is divided, and the specific process is as follows: S1.1-1, dividing each safe case in the region into each fixed safe case and each transport safe case, obtaining the position, signal abnormal data, access abnormal data and environment abnormal data of each fixed safe case, and obtaining the transportation route data, signal abnormal data, access abnormal data and environment abnormal data of each transport safe case, and calculating the safety level of each fixed safe case and each transport safe case.

[0019] It should be noted that the fixed safe case is a safe case with fixed position, which is only used for storing goods, and the transport safe case is a movable safe case, which is used for transporting goods.

[0020] Obtaining the position, signal abnormal data, access abnormal data, environment abnormal data of each fixed safe case, transportation route data, signal abnormal data, access abnormal data and environment abnormal data of each transport safe case from the control center.

[0021] The signal abnormal data includes the number of signal connection interruption and the number of signal reconnection, etc., the access abnormal data includes the number of abnormal unlocking application and the number of malicious unlocking users, etc., and the environment abnormal data includes the number of abnormal environment in the cabinet and the number of unlocking environment danger, etc.; the transportation route data is the route of each transportation.

[0022] It should be noted that when the cabinet environment difference rate of the environment data of the safe case collected at this time and the suitable environment data of the goods in the safe case is greater than the preset cabinet environment difference rate threshold, it indicates that the cabinet environment at this collection time is abnormal, and the cabinet environment abnormality is added by 1, wherein the cabinet environment difference rate = | suitable environment data - environment data | ÷ suitable environment data.

[0023] When the difference between the environment data outside the cabinet and the environment data is greater than the preset threshold of the difference between the environment data inside and outside the cabinet, the number of dangerous unlocking environments is increased by 1. The difference between the environment data inside and outside the cabinet = |environment data outside the cabinet - environment data| ÷ environment data.

[0024] The environment data of the safe cabinet is the environment data inside the safe cabinet, which is collected by the monitoring device in the safe cabinet.

[0025] It should be noted that the difference between the environment data inside the cabinet is the benchmark value for judging whether the environment inside the cabinet meets the storage requirements of the goods, and the threshold of the difference between the environment data inside and outside the cabinet is the benchmark value for judging whether the environment inside and outside the cabinet is large, which is set and modified by the management personnel according to the specific regional safe cabinet management requirements, and the specific numerical limit is not performed here.

[0026] Preferably, the calculation process of the security level of each fixed safe cabinet and each transport safe cabinet is that the signal abnormal data, access abnormal data and environment abnormal data of each fixed safe cabinet are normalized, and the processed values are respectively denoted as , and , w represents the number of each fixed safe cabinet, w is a positive integer, and the dangerous coefficient of the wth fixed safe cabinet is obtained by using the calculation formula: . The dangerous coefficient of each fixed safe cabinet is compared with the dangerous coefficient interval corresponding to each security level. If the dangerous coefficient of a fixed safe cabinet is within the dangerous coefficient interval corresponding to a security level, the security level is taken as the security level of the fixed safe cabinet, and thus the security level of each fixed safe cabinet is obtained.

[0027] It should be noted that the higher the security level, the smaller the value of the corresponding dangerous coefficient interval, and the dangerous coefficient interval corresponding to each security level represents the standard dangerous coefficient interval corresponding to each security level, which is formulated and modified by the management personnel according to the storage requirements of the safe cabinet in the region, and the specific numerical limit is not performed here.

[0028] In the above, the security level of each transport safe cabinet is calculated according to the calculation method of the security level of each fixed safe cabinet.

[0029] The greater the safe cabinet signal abnormal data, access abnormal data and environment abnormal data, the lower the security, and when the safe cabinet is used for storing goods, the higher the frequency of monitoring required, so more edge servers are needed to cooperate with the safe cabinet and perform data processing, thereby ensuring the monitoring, data analysis and corresponding timeliness of the safe cabinet and protecting the security of the safe cabinet.

[0030] S1.1-2. Based on the security levels of each fixed safe and each transport safe, generate a regional safe security hotspot map. Using a clustering algorithm, divide the regional safe security hotspot map into a first-level security area, a second-level security area, and a third-level security area, which are respectively designated as high-risk, medium-risk, and low-risk sub-regions of the region.

[0031] It should be noted that the location of each fixed safe and the route of each transport safe are marked with colors corresponding to each security level within the heat map. Then, DBSCAN density clustering is used to divide the regional safe security heat map into Level 1 security areas, Level 2 security areas and Level 3 security areas.

[0032] DBSCAN density clustering is an existing technology, and the specific clustering process can be found on the Internet, so it will not be described in detail here.

[0033] In a specific embodiment, the process of setting up edge servers for a region is as follows: S1.2-1, obtain the number of data centers, the location of each data center and the edge server deployment data in each sub-region, analyze whether the edge server deployment in each sub-region needs to be increased, if not, no adjustment is made, if it is needed, then execute S1.2-2.

[0034] It should be noted that in this application, each sub-region represents a high-risk sub-region, a medium-risk sub-region, and a low-risk sub-region, respectively. The number of data centers, the location of each data center, and the edge server deployment data for each sub-region are obtained from the control center. The edge server deployment data includes the number of edge servers and the data centers where each edge server is located.

[0035] The above analysis determines whether the deployment of edge servers in each sub-region needs to be increased. The specific process is as follows: obtain the threshold number of safes that a single edge server can collaborate with in each sub-region from the control center; obtain the number of edge servers in each sub-region from the edge server deployment data of each sub-region; multiply the number of edge servers in each sub-region by the threshold number of safes that a single edge server can collaborate with in each sub-region to obtain the number of safes that an edge server can collaborate with in each sub-region.

[0036] It should be noted that the threshold for the number of safes that a single edge server can collaborate with is set and modified by administrators based on the specific area's safe monitoring needs, and no specific numerical limit is set here.

[0037] The number of fixed safes and the number of transported safes in each sub-region are counted. When the number of safes that the edge server in a sub-region can cooperate with is greater than or equal to the sum of the number of fixed safes and the number of transported safes in the sub-region, it indicates that the deployment of the edge server in the sub-region does not need to be increased, otherwise it indicates that the deployment of the edge server in the sub-region needs to be increased, so as to analyze whether the deployment of the edge server in each sub-region needs to be increased.

[0038] S1.2-2, the sub-region needing to be adjusted is marked as a marked sub-region, whether each edge server in the marked sub-region cooperates with each safe is obtained, the data processing state of each server in each machine room in the marked sub-region is analyzed, the number of machine rooms needing to be increased in the marked sub-region and the number of edge servers needing to be increased are confirmed, and corresponding deployment is performed.

[0039] It should be noted that the cooperative relationship represents a relationship that can perform data transmission.

[0040] In the above, the specific process of S1.2-2 is as follows: S1.2-2.1, a positioning system is deployed in each safe, the positions of each safe in the current marked sub-region are obtained through the positioning system, and the distances between each safe and each machine room in the marked sub-region are obtained according to the positions of each machine room, if the distance between a safe and a machine room is less than a preset distance, it indicates that the safe cooperates with each edge server in the machine room, so as to obtain whether each edge server cooperates with each safe.

[0041] It should be noted that the preset distance is set and modified by the management personnel according to the specific regional safe monitoring demand, and the specific numerical value is not limited here.

[0042] S1.2-2.2, the number of edge servers that cooperate with each edge server in each machine room is counted, the number of edge servers that cooperate with each edge server in each machine room is counted, and the number of edge servers that cooperate with each edge server in each machine room is counted. According to the number of safes that a single edge server cooperates with and the machine room where each edge server is located, the number of safes that each edge server in each machine room can cooperate with is obtained.

[0043] S1.2-2.3, when the number of safes that the edge server in a machine room can cooperate with is less than the number of edge servers that the edge server in the machine room needs to cooperate with, it indicates that the machine room needs to increase the server, then the number of edge servers that the edge server in the machine room needs to cooperate with is subtracted from the number of safes that the edge server in the machine room can cooperate with, and then divided by the number of safes that a single edge server cooperates with, and the calculation result is rounded up to obtain the number of edge servers that the edge server in the machine room needs to increase. In this way, the number of machine rooms needing to be increased in the marked sub-region and the number of edge servers needing to be increased are obtained.

[0044] It should be noted that if there is more than one sub-area that needs to be adjusted, the number of each machine room and edge server that needs to be increased in the multiple sub-areas that need to be adjusted is analyzed according to steps S1.2-2.1-S1.2-2.3.

[0045] S2, when the safe is used, set the first user for the safe, generate the digital model of the safe at the first user terminal by using the monitoring device in the safe, set the monitoring scheme of the safe, and simultaneously map the digital model of the safe in real time.

[0046] In a specific embodiment, the specific process of S2 is: S2-1, after the safe control platform receives the safe use application of the user, the safe and the transportation personnel are allocated, and the transportation personnel take, transport and place the goods through triple verification, and record the placement behavior data of the transportation personnel.

[0047] In the above, the specific steps of S2-1 are: S2-1.1, the user applies for the use of the safe through the terminal in the safe control platform, fills in the identity information of the owner of the goods, the demand of the goods, the address information and the contact information, confirms after filling in, and the platform generates a digital verification code.

[0048] It should be noted that the demand of the goods includes the type of the goods, the value type of the goods and the storage mode; the type of the goods includes jewelry, electronic products and frozen seafood; the value type of the goods includes valuable goods and medium-value goods, and the storage mode includes only storage and storage and transportation; the demand of the goods includes valuable goods storage, valuable goods storage and transportation, medium-value goods storage and medium-value goods storage and transportation, etc. It is filled in by the user.

[0049] The address information includes the address of the goods collection and the address of the delivery, etc.

[0050] S2-1.2, according to the demand of the goods and the address information, allocate the safe for the user, and allocate the transportation personnel, send the face image of the transportation personnel and the number of the safe to the user from the background, and set the owner of the goods as the first user of the safe.

[0051] It should be noted that only storage is to allocate a fixed safe for the user, and storage and transportation is to allocate a mobile safe for the user, and the type of the safe includes fixed safe and mobile safe.

[0052] In the above, the safe deposit box is allocated to the user, and the process is as follows: according to the storage mode of the article, the type of the safe deposit box is confirmed, the empty safe deposit boxes of the type of the safe deposit box allocated to the user are obtained from the control center, denoted as each empty safe deposit box, and the security level and position of each empty safe deposit box are obtained, and the appropriate safe deposit box security level corresponding to each article value type is obtained from the control center, thereby obtaining the appropriate safe deposit box security level corresponding to the article; the distance between the article and each empty safe deposit box is obtained by using the position of each empty safe deposit box and the collection address of the article; the environment data of the current each empty safe deposit box is collected by using the monitoring equipment, and the appropriate environment data corresponding to each article category is obtained from the control center, and the appropriate environment data of the article is obtained based on the category of the article.

[0053] The appropriate safe deposit box security level corresponding to the article and the appropriate environment data of the article are denoted as b1 and b2 respectively, the security level of each empty safe deposit box and the environment data of each empty safe deposit box are denoted as and The distance between the article and each empty safe deposit box is denoted as The priority value of the fth empty safe deposit box is obtained by using the calculation formula: , wherein f represents the number of each empty safe deposit box, f is a positive integer, , which represents the average value of the distance between the article and each empty safe deposit box, and the empty safe deposit box with the largest priority value is allocated to the user.

[0054] It should be noted that the appropriate safe deposit box security level corresponding to each article value type and the appropriate environment data corresponding to each article category are set and modified by the management personnel according to the specific regional safe deposit box management requirements, and no specific numerical limit is made here.

[0055] In the above, the transport personnel are allocated, and the specific process is as follows: the each time placing behavior data of each transport personnel is obtained from the blockchain, wherein the placing behavior data includes transport speed, verification failure times, unauthorized lock opening times, etc., the each time placing behavior data is averaged to obtain the average behavior data of each transport personnel, and is compared with the behavior data interval corresponding to the preset each transport behavior security level, to obtain the transport behavior security level of each transport personnel; the appropriate transport behavior security level corresponding to each article value type is obtained from the control center, thereby obtaining the appropriate transport behavior security level of the article.

[0056] It should be noted that the appropriate transport behavior security level corresponding to each article value type is set and modified by the management personnel according to the specific regional safe deposit box management requirements, and no specific numerical limit is made here.

[0057] ​Meanwhile, the positions of the transporters are obtained from the platform, and the distances between the transporters and the articles are obtained, and the transport behavior safety level of each transporter, the appropriate transport behavior safety level of the article, and the distance between each transporter and the article are respectively denoted as , and wherein is the number of each transporter, is a positive integer, and the priority value of each transporter is obtained by using a calculation formula wherein represents the average distance between each transporter and the article, and the transporter with the largest priority value is assigned to the user.

[0058] It should be noted that each transporter is a transporter who does not have a transport task at present.

[0059] S2-1.2, before the transporter collects the article, the transporter first performs face recognition authentication, and after the authentication is successful, the platform sends the address information and the contact information of the article to the transporter; when the transporter collects the article, the first user collects the face image of the transporter and uploads it to the platform for verification, and after the verification is successful, the safe box number and the digital verification code are sent to the transporter, and the transporter performs article transportation.

[0060] It should be noted that the platform has a face recognition function, and when the transporter registers the platform account, the face image of the transporter needs to be uploaded as an initial image, and after the user uploads the face image of the transporter, the platform compares and verifies it with the initial image to prevent the transporter account from being stolen to collect the article and ensure the safety of the article collection. If the verification fails, a prompt of abnormal transporter identity is prompted in the interface of the first user to prevent the user from handing over the article and ensure the safety of the article.

[0061] S2-1.3, when the transporter arrives at the safe box position, the face recognition verification is performed again in the safe box, and the verification information of the face recognition is transmitted to the first user through a data bidirectional encryption channel for remote confirmation, when the face recognition verification of the safe box is successful and the remote confirmation of the first user is completed, the interface for setting the temporary opening permission of the safe box of the first user for the transporter is opened, and the first user sets the temporary opening permission for the transporter, after the setting is completed, the transporter opens the safe box by inputting the digital verification code, and then places the article; when the transporter places the article, the placement behavior data of the transporter is recorded, and then the placement behavior data of the transporter is transmitted to the edge server cooperated with the safe box through a data bidirectional encryption channel.

[0062] It should be noted that the platform records the time point when the transport personnel gets the goods, the time point when the transport personnel opens the safe to place the goods, and the transport route, thereby obtaining the transport time and the transport route length, and dividing the transport route length by the transport time to obtain the transport speed.

[0063] When the transport personnel places the goods, if there is a failure of facial recognition, the number of verification failures is increased by 1, and at the same time, when the first user has not set the temporary opening permission for the transport personnel, the transport personnel applies or attempts to open the lock, the number of unauthorized lock opening applications is increased by 1. In this way, the placement behavior data of the transport personnel is recorded. The application monitors the behavior of the transport personnel, reduces the risk of leakage and theft of the transport personnel, and ensures the safety of the goods during transportation.

[0064] S2-2, after the edge server receives the placement behavior data of the transport personnel, data analysis is performed to analyze the safety level of the goods placement.

[0065] In the above, the placement behavior data of the transport personnel is compared with the placement behavior data interval of each goods placement safety level. If the placement behavior data of the transport personnel is within the placement behavior data interval of a certain goods placement safety level, the goods placement safety level is set as the safety level of the goods placement.

[0066] It should be noted that the placement behavior data interval of each goods placement safety level is set and modified by the management personnel according to the specific regional safe management requirements, and specific numerical limits are not provided here.

[0067] S2-3, a plurality of monitoring devices are arranged in the safe, and a digital model of the safe is generated in the platform for the first user. The first user logs in to the platform account through the terminal and performs identity verification, and then queries the digital model of the safe.

[0068] It should be noted that the monitoring devices include environmental sensors and cameras, such as temperature sensors and humidity sensors. When the user registers an account in the platform, real-name authentication is required, which includes face authentication and ID number authentication. Identity verification includes face authentication and ID number authentication.

[0069] S2-4, the edge server cooperating with the safe is taken as a target server, the target server obtains the operation log of the safe, and sets a monitoring scheme for the safe according to the safety level of the goods placement.

[0070] It should be noted that each edge server having a cooperative relationship with the safe is obtained, the performance data of each edge server is read from each edge server, and the edge server with the largest performance data is selected as the cooperative edge server. The performance data includes bandwidth and CPU, etc.

[0071] Preferably, the specific process of setting the monitoring scheme for the safe is as follows: obtaining the security level of the safe, and performing mean calculation with the security level of the article placement to obtain the comprehensive security level of the safe, comparing the comprehensive security level of the safe with the comprehensive security level interval corresponding to each monitoring frequency, obtaining the monitoring frequency of the safe, and taking it as the monitoring scheme.

[0072] It should be noted that the comprehensive security level interval corresponding to each monitoring frequency is set and modified by the manager according to the specific regional safe management requirements, and no specific numerical limit is made here.

[0073] S2-5, the target server controls the monitoring device in the safe according to the monitoring scheme through the data bidirectional encryption channel, and when the monitoring device in the safe completes the collection, the collected monitoring data is transmitted to the target server again through the data bidirectional encryption channel, the target server transmits the monitoring data to the main server through the data bidirectional encryption channel, and the main server performs real-time mapping of the safe digital model.

[0074] S3, when the safe receives the unlocking request, identity verification is performed, the associated data of the safe is obtained, and corresponding processing is performed according to the identity verification result and the associated data of the safe, and then recorded in the operation log of the safe and chained.

[0075] It should be noted that the steps of S3 are as follows: S3-1, during the process of storing the article in the safe, when the safe receives the unlocking request, the unlocking method is obtained, and when the unlocking method is remote unlocking, remote unlocking verification and processing are performed.

[0076] Preferably, the specific process of remote unlocking verification and processing is as follows: S3-1.1, obtaining the associated data of the safe and analyzing the environmental safety of the safe opening, and obtaining the account information of the unlocking requester, if the unlocking requester is the first user, identity verification is performed, after the verification is successful, the environmental safety of the safe opening is prompted, if the first user confirms to open, the opening control signal is transmitted to the safe through the data bidirectional encryption channel to open.

[0077] S3-1.2, if the unlocking requestor is not the first user, obtaining the account information and IP information of the unlocking requestor and sending them to the first user for confirmation and temporary unlocking authorization, if the first user chooses not to authorize, the unlocking requestor is recorded as a malicious unlocking user; if the first user chooses to authorize, the security level of the unlocking requestor is analyzed, if the security level is greater than or equal to the preset security level threshold, according to the environmental safety of the safe opening, the first user is provided with each time period that can be authorized, the first user only selects an authorized time period in the set of each time period that can be authorized for temporary authorization, after the authorization is successful, the unlocking requestor can open the safe once in the authorized time period; after the unlocking requestor opens the safe, record the operation behavior of the unlocking requestor and transmit it to the target server through the data bidirectional encryption channel; if the security level is less than the preset security level threshold, a risk personnel unlocking prohibition prompt is displayed on the first user interface.

[0078] It should be noted that the unlocking request of the malicious unlocking user is recorded as an abnormal unlocking application.

[0079] It should be noted that the abnormal unlocking data of the unlocking requestor is obtained from the background, including the number of times marked as malicious unlocking user and the number of abnormal unlocking applications, etc., and then the security level of the unlocking requestor is analyzed according to the analysis mode of the transportation behavior security level of each transportation personnel.

[0080] The preset security level threshold represents the security level reference value that can be authorized to unlock, which is set and modified by the management personnel according to the specific regional safe management requirements, and no specific numerical limit is made here.

[0081] In the above, each time period that can be authorized is provided to the first user, the specific process is as follows: obtaining the cabinet outside environment data of each time period from the meteorological center, and obtaining the environment data of the safe, according to the calculation formula: cabinet inside and outside environment difference rate = |cabinet outside environment data-environment data|÷environment data, calculate the cabinet inside and outside environment difference rate of each time period, the cabinet inside and outside environment difference rate less than the preset cabinet inside and outside environment difference rate threshold is each time period that can be authorized.

[0082] Selecting a time period with smaller environmental difference to open the safe reduces the risk of damage caused by too large temperature difference of the goods.

[0083] S3-2, when the unlocking mode is physical unlocking, the safe face recognition verification is started, whether the unlocking request person is the first user is verified, if the first user, the safe is opened, if not the first user, the face image of the unlocking request person is obtained, the security level of the unlocking request person is calculated, when the security level of the unlocking request person is greater than or equal to the preset security level threshold, the face image and risk level of the unlocking request person are transmitted to the first user, and whether the temporary unlocking permission of the unlocking request person is authorized is selected by the first user, if the first user selects to authorize, after the unlocking request person unlocks successfully, the operation behavior of the unlocking request person is recorded and transmitted to the target server through the data bidirectional encryption channel; if the first user selects not to authorize or the security level of the unlocking request person is less than the preset security level threshold, the unlocking request person is recorded as a malicious unlocking user, and the unlocking request of the malicious unlocking user is recorded as an abnormal unlocking application.

[0084] It should be noted that the face image of the unlocking request person is collected by the camera outside the safe, and is compared and matched with the face images of all users registered in the platform, if it cannot be matched, the security level of the unlocking request person is 0, if it can be matched, the abnormal unlocking data of the unlocking request person is obtained, and the security level of the unlocking request person is analyzed according to the analysis mode of the transportation behavior security level of each transportation personnel.

[0085] S3-3, the target server records each unlocking request and permission setting of the safe during the storage of the articles in the operation log, and evaluates the safe storage security, if the safe storage security is low, the first user replaces the safe.

[0086] It should be noted that according to the operation log, the security level of the safe storage articles is calculated according to the calculation mode of the security level of each fixed safe and each transportation safe, and is compared with the article storage security level threshold, if the security level of the safe storage articles is less than the article storage security level threshold, it indicates that the safe storage security is low, otherwise it indicates that the safe storage security is high.

[0087] Embodiment 2: Referring to Figure 2 As shown in the figure, an intelligent safe measurement and control system based on data bidirectional encryption, comprising: a server setting module, used for obtaining the operation log of each safe in the region from the block chain platform, dividing the region into high-risk sub-regions, medium-risk sub-regions and low-risk sub-regions, and then setting edge servers for the region.

[0088] A safe setting module is used for setting a first user for the safe when the safe is used, generating a safe digital model on the first user terminal by using the monitoring equipment in the safe, setting a safe monitoring scheme, and simultaneously mapping the safe digital model in real time.

[0089] The safe monitoring module is used for identity verification when the safe receives an unlocking request, obtaining the associated data of the safe, and performing corresponding processing according to the identity verification result and the associated data of the safe, and then recording in the operation log of the safe and chaining.

[0090] The above is only an example and description of the concept of the present application. Those skilled in the art can make various modifications or supplements to the described specific embodiments or use similar ways to replace, as long as the modifications or supplements do not deviate from the concept of the present application or exceed the scope defined in the specification, and should belong to the protection scope of the present application.

Claims

1. A smart safe control method based on data two-way encryption, characterized in that, The method comprises the following steps: S1, obtaining the operation log of each safe in the region from the blockchain platform, dividing the region into high-risk sub-regions, medium-risk sub-regions and low-risk sub-regions, and setting an edge server for the region; S2, when the safe is used, a first user is set for the safe, a digital model of the safe is generated in the first user terminal by using the monitoring equipment in the safe, and a safe monitoring scheme is set, and the safe digital model is mapped in real time; S3, when the safe receives an unlocking request, identity verification is performed, the associated data of the safe is obtained, and corresponding processing is performed according to the identity verification result and the associated data of the safe, and then recorded in the operation log of the safe and chained.

2. The intelligent safe control method based on data bidirectional encryption according to claim 1, characterized in that, The region is divided, and the specific process is: S1.1-1, each safe in the region is divided into each fixed safe and each transport safe, and the position, signal abnormal data, access abnormal data and environment abnormal data of each fixed safe are obtained, and the transport route data, signal abnormal data, access abnormal data and environment abnormal data of each transport safe are obtained, and the safety level of each fixed safe and each transport safe is calculated; S1.1-2, according to the safety level of each fixed safe and each transport safe, a region safe safety hot spot map is generated, and a clustering algorithm is used to divide the region safe safety hot spot map into a first-level safety region, a second-level safety region and a third-level safety region, which are respectively high-risk sub-regions, medium-risk sub-regions and low-risk sub-regions of the region.

3. The intelligent safe control method based on data bidirectional encryption according to claim 1, characterized in that, The specific process of setting an edge server for the region is: S1.2-1, the number of machine rooms in each sub-region, the position of each machine room and the edge server deployment data are obtained, and whether the edge server deployment in each sub-region needs to be increased is analyzed, if not, no adjustment is made, if yes, S1.2-2 is executed; S1.2-2, the sub-region needing adjustment is marked as a marked sub-region, whether each edge server in the marked sub-region cooperates with each safe is obtained, the data processing state of each server in each machine room in the marked sub-region is analyzed, the number of each machine room and the number of edge servers to be increased in the marked sub-region are confirmed, and corresponding deployment is made.

4. The intelligent safe control method based on data bidirectional encryption of claim 1, characterized in that, The specific process of S2 is: S2-1, after the safe control platform receives the safe use application of the user, the safe and the transport personnel are allocated, and the transport personnel take, transport and place the goods through three verification, and record the placement behavior data of the transport personnel; S2-2, after the edge server receives the placement behavior data of the transport personnel, data analysis is performed to analyze the safety level of the goods placement; S2-3, a plurality of monitoring equipment are arranged in the safe, a digital model of the safe is generated for the first user in the platform by using the monitoring equipment, and the first user logs in the account of the platform through the terminal and performs identity verification, and then queries the digital model of the safe; S2-4, the edge server cooperating with the safe is taken as a target server, the target server obtains the operation log of the safe, and sets a monitoring scheme for the safe according to the safety level of the goods placement; S2-5, the target server controls the monitoring device in the safe according to the monitoring scheme through the data bidirectional encryption channel, and when the monitoring device in the safe completes collection, the collected monitoring data is transmitted to the target server again through the data bidirectional encryption channel, the target server transmits the monitoring data to the main server through the data bidirectional encryption channel, and the main server performs real-time mapping of the safe digital model.

5. The intelligent safe control method based on data bidirectional encryption according to claim 4, characterized in that, The specific steps of S2-1 are as follows: S2-1.1, the user applies for the safe through the terminal on the safe control platform, fills in the identity information of the owner of the article, the demand of the article, the address information and the contact information on the platform, fills in and confirms, and the platform generates a digital verification code; S2-1.2, according to the demand of the article and the address information, the user is allocated a safe, and a transport personnel is allocated, the face image of the transport personnel and the number of the safe are sent to the user from the background, and the owner of the article is set as the first user of the safe; S2-1.2, before the transport personnel collects the article, the transport personnel first performs face recognition authentication, and after the authentication is successful, the platform sends the address information and the contact information of the article to the transport personnel; when the transport personnel collects the article, the first user collects the face image of the transport personnel and uploads it to the platform for verification, and after the verification is successful, the safe number and the digital verification code are sent to the transport personnel, and the transport personnel transports the article; S2-1.3, when the transport personnel arrives at the safe position, face recognition verification is performed again in the safe, and the verification information of face recognition is transmitted to the first user through the data bidirectional encryption channel for remote confirmation, when the face recognition verification of the safe is successful and the remote confirmation of the first user is completed, the interface of setting the temporary opening permission of the safe for the transport personnel by the first user is opened, and the first user sets the temporary opening permission for the transport personnel, after the setting is completed, the transport personnel opens the safe by inputting the digital verification code, and then places the article; when the transport personnel places the article, the placement behavior data of the transport personnel is recorded, and then the placement behavior data of the transport personnel is transmitted to the edge server cooperated with the safe through the data bidirectional encryption channel.

6. The intelligent safe measurement and control method based on data two-way encryption according to claim 5, characterized in that, The demand of the article includes article category, article value type and storage mode; the storage mode includes only storage and storage and transportation.

7. The intelligent safe control method based on data bidirectional encryption according to claim 6, characterized in that, The process of allocating a safe for the user is as follows: According to the storage mode of the article, the type of the safe is confirmed, the empty safes in the type of the safe allocated for the user are obtained from the control center, which are recorded as each empty safe, the safety level and the position of each empty safe are obtained, and the appropriate safe safety level corresponding to each article value type is obtained from the control center, so as to obtain the appropriate safe safety level corresponding to the article; the distance between the article and each empty safe is obtained by using the position of each empty safe and the collection address of the article; the environment data of the current each empty safe is collected by using the monitoring device, and the appropriate environment data corresponding to each article category is obtained from the control center, and the appropriate environment data of the article is obtained based on the category of the article; The appropriate safe security level and suitable environmental data for each item are denoted as b1 and b2, respectively. The security level and environmental data for each available safe are denoted as... and Record the distance between the item and each available safe as Using the calculation formula: To obtain the priority value of the f-th available safe. In the formula, f represents the number of each available safe, and f is a positive integer. This represents the average distance between the item and each available safe, and assigns the user the available safe with the highest priority.

8. The intelligent safe measurement and control method based on data two-way encryption according to claim 1, characterized in that, The steps of S3 are as follows: S3-1, in the process of storing the articles in the safe, when the safe receives an unlocking request, the unlocking mode is obtained, when the unlocking mode is remote unlocking, remote unlocking verification and processing are performed; S3-2, when the unlocking mode is physical unlocking, the face recognition verification of the safe is started, whether the unlocking requester is the first user is verified, if the first user, the safe is opened, if not the first user, the face image of the unlocking requester is obtained, the security level of the unlocking requester is calculated, and the face image of the unlocking requester and the risk level are transmitted to the first user, and whether the temporary unlocking permission of the unlocking requester is authorized by the first user, if the first user selects to authorize, the operation behavior of the unlocking requester is recorded after the unlocking requester is successfully unlocked, and is transmitted to the target server through the data bidirectional encryption channel; S3-3, the target server records each unlocking request and permission setting of the safe during storing the articles in the operation log, and evaluates the safe storage security and the first user setting security, if the safe storage security is low, the safe is replaced for the first user.

9. The intelligent safe measurement and control method based on data two-way encryption according to claim 1, characterized in that, The specific process of the remote unlocking verification and processing is: S3-1.1, the associated data of the safe is obtained, the environmental safety of the safe opening is analyzed, the account information of the unlocking requester is obtained, if the unlocking requester is the first user, the identity verification is performed, after the verification is successful, the environmental safety of the safe opening is prompted, if the first user confirms to open, the opening control signal is transmitted to the safe through the data bidirectional encryption channel to open; S3-1.2, if the unlocking requester is not the first user, the account information and IP information of the unlocking requester are obtained and sent to the first user for confirmation and temporary unlocking permission authorization, if the first user selects not to authorize, the unlocking requester is recorded as a malicious unlocking user; if the first user selects to authorize, the security level of the unlocking requester is analyzed, if the security level is greater than or equal to the preset security level threshold, according to the environmental safety of the safe opening, the first user is provided with each time period that can be authorized, the first user selects an authorized time period in the authorized time period set to temporarily authorize, after the authorization is successful, the unlocking requester can open the safe once in the authorized time period; After the unlocking requester opens the safe, the operation behavior of the unlocking requester is recorded and transmitted to the target server through the data bidirectional encryption channel; if the security level is less than the preset security level threshold, the risk personnel unlocking prohibition prompt is performed on the first user interface.

10. A smart safe control system for performing the smart safe control method based on data two-way encryption according to any one of claims 1-9, characterized in that, It includes: The server setting module is used for obtaining the operation log of each safe in the region from the blockchain platform, dividing the region into high-risk sub-regions, medium-risk sub-regions and low-risk sub-regions, and then setting the edge server for the region; The safe setting module is used for setting the first user for the safe when the safe is used, generating a digital model of the safe on the first user terminal by using the monitoring equipment in the safe, setting a safe monitoring scheme, and simultaneously mapping the safe digital model in real time; The safe monitoring module is used for identity verification when the safe receives an unlocking request, obtaining the associated data of the safe, and performing corresponding processing according to the identity verification result and the associated data of the safe, and then recording in the operation log of the safe and chaining.

Images