Nuclear security access control device, storage medium and electronic equipment

Abstract

The invention discloses a nuclear security access control device, a storage medium and electronic equipment, and the device comprises a collection module which is used for collecting personnel data, setting personnel weights, obtaining batch multi-person weights according to access control equipment, and setting area weights for areas according to nuclear power plant safety rules; the deployment module is used for setting an access control criterion according to the operation period of the nuclear power plant, sending the access control criterion to access control equipment and deploying the access control criterion, and the operation period comprises a normal period, an important safety period and an anti-terrorism abnormal state; the entering module is used for judging the personnel weight, the multi-person weight and the area weight obtained by the access control equipment based on the access control criterion to obtain entering information, and the entering information comprises a timestamp, entering personnel information and the corresponding personnel weight; and the prediction module is used for counting the entrance information in the fixed time node to obtain the accessible personnel information of the next time node.

Description

TECHNICAL FIELD

[0001] The present application relates to the technical field of nuclear facility physical protection, and in particular to a nuclear security access control device, a storage medium and an electronic device. BACKGROUND

[0002] In a nuclear facility physical protection system, an access control system is an important component of the nuclear safety and protection system. Compared with a common civilian access control system, the access control of a nuclear facility not only needs to realize personnel identity recognition and permission verification, but also needs to meet the multi-level security requirements and anti-terrorism requirements under the nuclear safety supervision system; a traditional access control system usually adopts a fixed permission configuration logic of "personnel-permission group (group)-access point (reader interface)-time period". In such a system, the permission configuration, personnel grouping and the mapping relationship thereof with the access point depend on manual maintenance and static rules. Once the running state or protection level changes, for example, the nuclear power plant switches from the normal operation period to the safety inspection period or the anti-terrorism abnormal state, the system needs to reload a new permission table or strategy configuration file, resulting in a tedious permission conversion process, a long response time and low execution efficiency.

[0003] In addition, the traditional access control system generally lacks comprehensive judgment capability for information such as "personnel safety level", "multi-person collaborative operation risk" and "region sensitivity". In the operation and management of a nuclear facility, personnel of different post levels and different identity categories enter the same region in different safety periods, and their risk levels and security requirements differ significantly; at the same time, the safety rules of a nuclear power plant require dynamic monitoring and quantity limitation of personnel access behavior to avoid overstaffing, level exceeding or abnormal aggregation in a critical period. The traditional system cannot realize multi-dimensional weight judgment based on real-time state through a static permission table, and it is also difficult to comprehensively calculate and predictively control personnel access data within a time window.

[0004] In patent document CN120510663A, a door access authorization system based on facial features is disclosed, which includes a management network data transmission subsystem arranged in a first region, used for encrypting attribute information corresponding to a target object to obtain target feature information, wherein the attribute information includes target facial features corresponding to the target object and door access subsystem information; a real security network data transmission subsystem arranged in a second region, used for analyzing the target feature information to obtain the target facial features and the door access subsystem information, and issuing the target facial features to a door access subsystem corresponding to the target object, wherein the first region and the second region are physically isolated, and the security level of the second region is higher than that of the first region. The problem of lacking a multi-dimensional weight judgment mechanism based on personnel attributes and safety rules in the access control of a nuclear facility has not been solved.

[0005] Patent document CN120126247A discloses an IoT-based intelligent control system platform, including a monitoring module, an analysis module, a processing module, a judgment module, and a correction module. While this invention monitors the real-time operating status, environmental parameters, and personnel information of the access control system, as well as equipment status, access card information, and access records, it does not address the lack of a multi-dimensional weighted judgment mechanism based on personnel attributes and safety rules in nuclear facility access control.

[0006] In summary, neither of the two existing patents mentioned above addresses the problem of the lack of a multi-dimensional weighted judgment mechanism based on personnel attributes and safety rules in the access control of nuclear facilities. Summary of the Invention

[0007] Based on the above-mentioned technical problems, this invention proposes a nuclear security access control device, storage medium, and electronic device to solve the problem of the lack of a multi-dimensional weighted judgment mechanism based on personnel attributes and safety rules in the access control of nuclear facilities.

[0008] To achieve the above objectives, the present invention proposes a nuclear security access control method for nuclear security access control devices.

[0009] A nuclear security access control method includes: Personnel data collection sets personnel weights, batch weights for multiple people are obtained based on access control equipment, and area weights are set according to nuclear power plant safety rules; Access control criteria are set according to the operation period of the nuclear power plant, and the access control criteria are sent to the access control equipment and deployed. The operation period includes normal period, important security period and counter-terrorism emergency period. Based on the access control criteria, the personnel weight, multiple person weight, and area weight obtained by the access control device are judged to obtain entry information, which includes a timestamp, entry personnel information, and the corresponding personnel weight. By statistically analyzing the entry information within a fixed time node, information on personnel eligible to enter at the next time node can be obtained.

[0010] Furthermore, the personnel data includes: Identity information, security level, reliability, and authorization status.

[0011] Furthermore, the data collection personnel are assigned weights, including: Based on the personnel data transformation rules, the identity information, security level, reliability, and authorization status are converted into corresponding weight coefficients, which are then substituted into the personnel weight formula to calculate the personnel weight.

[0012] Furthermore, the personnel weighting formula is expressed as follows: , in Let I be the weight of the person, S be the weight coefficient corresponding to the identity information, R be the weight coefficient corresponding to the security level, A be the weight coefficient corresponding to the reliability, and A be the weight coefficient corresponding to the authorization status. , , and is a coefficient.

[0013] Furthermore, the personnel data conversion rules are characterized by: setting a corresponding weight coefficient based on the job level in the identity information; setting a corresponding weight coefficient based on the security level; obtaining a corresponding weight coefficient based on the number of violations and the violation threshold in the reliability; and setting a corresponding weight coefficient based on the authorization status.

[0014] Furthermore, based on the weights of multiple users in a batch obtained from the access control device, the expression is as follows: , in For the weights of the aforementioned multiple people, Let i be the number of people in the batch, and i be the index of the people. Visitor weight, The weight of the personnel mentioned.

[0015] Furthermore, the access control criteria include normal period criteria, critical security period criteria, and counter-terrorism non-normal period criteria. The normal period criteria include setting an employee threshold zone; if the collected personnel weights meet the employee threshold zone, a corresponding verification method is provided, and the door lock is opened after the verification method is met. The critical security period criteria include setting a minimum dwelling threshold and a maximum number of people per batch threshold. If, under the condition that all personnel in a batch meet the normal period criteria, the access control device opens the door if the weight of multiple people is greater than the minimum dwelling threshold and the number of people in the batch is less than the maximum number of people per batch threshold, then the door lock is opened. The operational period is the counter-terrorism non-normal period; if the personnel weight is greater than the area weight, then the door lock is opened.

[0016] Furthermore, by statistically analyzing the entry information within a fixed time node, information on personnel eligible to enter at the next time node is obtained, including: Each of the normal period, the critical security period, and the counter-terrorism emergency period is assigned a corresponding weight upper limit and adjustment coefficient. The entry information within a fixed time node is calculated to obtain the corresponding entry weight. The weight upper limit is subtracted from the entry weight to obtain the adjustment weight. The information of personnel who can enter is obtained based on the adjustment weight and the adjustment coefficient.

[0017] Further, based on the adjusted weights, information on eligible personnel is obtained, including: The adjustable parameter is obtained by multiplying the adjustment weight and the adjustment coefficient. Based on the proportion of the identity information in the entry information within the current time node, the adjustable parameter is used to allocate personnel to obtain the information of personnel who can enter.

[0018] To achieve the above objectives, the present invention also proposes a nuclear security access control device.

[0019] A nuclear security access control device, characterized in that it comprises: The data acquisition module is used to collect personnel data and set personnel weights, obtain the weights of multiple people in batches based on access control equipment, and set area weights for areas according to nuclear power plant safety rules. The deployment module is used to set access control criteria according to the operation period of the nuclear power plant, send the access control criteria to the access control equipment and deploy them. The operation period includes normal period, important security period and counter-terrorism emergency period. The entry module is used to determine the personnel weight, multiple person weight and area weight obtained by the access control device based on the access control criteria, and obtain entry information, which includes a timestamp, entry personnel information and the corresponding personnel weight; The prediction module is used to statistically analyze the entry information within a fixed time node to obtain the information on personnel who can enter at the next time node.

[0020] Based on the above technical solution, the present invention has at least the following beneficial effects: 1. This invention proposes a nuclear security access control device, storage medium, and electronic equipment. The method of this invention first collects personnel data and assigns personnel weights, enabling the system to achieve individualized risk identification based on different job levels and security attributes. Then, it obtains batch weights for multiple individuals through the access control device, enabling coordinated security control under multi-person collaborative behavior, preventing unauthorized entry or abuse of privileges by a single person. Furthermore, it assigns area weights based on nuclear power plant safety rules, allowing the system to establish differentiated access standards for different sensitive areas. Simultaneously, it sets and deploys access control criteria according to the nuclear power plant's operational period, enabling rapid switching of access control strategies under operational changes. Finally, by statistically analyzing entry information within fixed time nodes and generating information on personnel allowed to enter at the next time node, it achieves multi-dimensional dynamic updates and precise control of access permissions. Therefore, this invention can significantly improve the security response speed, management flexibility, and overall protection level of nuclear facility access control systems under different operating conditions.

[0021] 2. This invention proposes a nuclear security access control device, storage medium, and electronic device. By collecting personnel data including identity information, security level, reliability, and authorization status, and converting each indicator into quantifiable weight coefficients according to personnel data conversion rules, the system can comprehensively evaluate the security attributes of individuals in a quantitative manner, thereby achieving refined and adjustable access control judgments and improving the identification accuracy and management flexibility for personnel in different positions and at different risk levels.

[0022] 3. This invention proposes a nuclear security access control device, storage medium, and electronic equipment. By weighted summation of the weights of personnel identified in batches to obtain the weights of multiple people, and setting different access control judgment conditions according to the access control criteria during the operation of nuclear power plants, dynamic access control based on the combined behavior of multiple people and the state of the safety period is realized. It can automatically adjust the identification method and unlocking conditions under different safety states, thereby improving the security and adaptability of access control.

[0023] 4. This invention proposes a nuclear security access control device, storage medium, and electronic equipment. By statistically analyzing entry information within a fixed time node, calculating entry weights and adjustment weights, and generating accessible personnel information for the next time node based on the weight upper limit and adjustment coefficient set during operation, the system can dynamically adjust the number of accessible personnel according to real-time personnel distribution and security status, achieving predictive control and resource optimization of the access control system, and improving the timeliness and security response capability of the nuclear facility access control system. Attached Figure Description

[0024] The accompanying drawings, which form part of this specification, are used to provide a further understanding of the invention. The illustrative embodiments of the invention and their descriptions are used to explain the invention and do not constitute an undue limitation of the invention. In the drawings: Figure 1 A flowchart illustrating an embodiment of a nuclear security access control device implementation method is shown. Figure 2 An interface diagram of a nuclear security access control device according to one embodiment is shown; Figure 3 An interface diagram of a nuclear security access control device according to one embodiment is shown; Figure 4 A schematic diagram of the structure of a nuclear security access control device according to one embodiment is shown; Figure 5 A schematic diagram of the structure of a nuclear security access control product according to one embodiment is shown; Figure 6 A schematic diagram of the structure of an electronic device according to an embodiment is shown. Detailed Implementation

[0025] It should be noted that, unless otherwise specified, the embodiments and features described in the present invention can be combined with each other. The present invention will now be described in detail with reference to the accompanying drawings and embodiments.

[0026] The present invention will be further described in detail below with reference to specific embodiments, which should not be construed as limiting the scope of protection claimed by the present invention.

[0027] Example To address the lack of a multi-dimensional weighted judgment mechanism based on personnel attributes and safety rules in the access control of nuclear facilities, this invention proposes a nuclear security access control device, storage medium, and electronic equipment.

[0028] To achieve the above objectives, the present invention also proposes a nuclear security access control method.

[0029] like Figure 1 The present invention illustrates a nuclear security access control method applicable to a nuclear security access control device, according to an embodiment of the present invention. The process mainly includes the following steps: S101: Collect personnel data and set personnel weights, obtain the weights of multiple people in a batch based on access control equipment, and set area weights for areas according to nuclear power plant safety rules.

[0030] Furthermore, personnel data includes identity information, security level, reliability, and authorization status. The identity information can be employees, supervisors, leaders, security personnel, and / or security officers; the security level can be general, restricted, or confidential; the reliability can be violation records, attendance anomalies, and alarm triggers; and the authorization status can be valid or invalid.

[0031] Furthermore, based on the personnel data conversion rules, the identity information, security level, reliability, and authorization status are respectively converted into corresponding weight coefficients. The personnel data conversion rules include setting the corresponding weight coefficient based on the job level in the identity information; setting the corresponding weight coefficient based on the security level; obtaining the corresponding weight coefficient based on the number of violations and the violation threshold in the reliability; setting the corresponding weight coefficient based on the authorization status; and substituting the corresponding weight coefficients into the personnel weight formula to calculate the personnel weight formula, the expression of which is as follows: , in Let I be the weight of the person, S be the weight coefficient corresponding to the identity information, R be the weight coefficient corresponding to the security level, A be the weight coefficient corresponding to the reliability, and A be the weight coefficient corresponding to the authorization status. , , and is a coefficient.

[0032] Specifically, converting identity into a weighting coefficient results in employee being assigned 1, supervisor 2, and leaders, security personnel, and security officers 3; converting security level into a weighting coefficient results in ordinary being assigned 1, restricted 2, and confidential 3; and converting reliability into a weighting coefficient is done using the following formula: , in The weighting coefficient for reliability. For the number of violations, The threshold for violations is set; the authorization status is converted into a corresponding weight coefficient, where a valid authorization status is set to 1, and an invalid authorization status is set to -1.

[0033] Specifically, in this embodiment, under normal conditions, assuming Zhang San's personnel data includes supervisor, valid authorization status, restricted security level, and all reliability data shows violations, the personnel weight calculation formula is as follows: ,in They are respectively , , and The coefficients, set based on empirical values, can be adjusted during other operating periods. , , and Control personnel weight.

[0034] Furthermore, based on the weights of multiple users in a batch obtained from the access control device, the expression is as follows: , in For the weights of the aforementioned multiple people, Let i be the number of people in the batch, and i be the index of the people. Visitor weight, The weight of the personnel mentioned.

[0035] Furthermore, according to the safety rules of nuclear power plants, the area weights are set for the areas. In this embodiment, the area weights of the plant area and the main control room can be set to 3, the area weights of the equipment rooms can be set to 2, and the area weights of the public passages, logistics support areas and / or general warehouses can be set to 1.

[0036] S102: Set access control criteria according to the operation period of the nuclear power plant, send the access control criteria to the access control equipment and deploy them, the operation period includes normal period, important security period and counter-terrorism emergency period.

[0037] Furthermore, the access control criteria include normal period criteria, critical security period criteria, and counter-terrorism emergency criteria. The normal period criteria include setting an employee threshold zone; if the collected personnel weights meet the employee threshold zone, a corresponding verification method is provided, and the door lock is opened after the verification method is met. Figure 2 As shown in the figure, in this embodiment, the employee threshold area can be Psl≥0, where Psl is the personnel weight. The employee threshold area can be divided into the following verification methods: when 0≤Psl≤1, the verification method is "card reading plus password"; when Psl≤2 and Psl>1, the verification method is "card reading"; when Psl≥3, the verification method is "card reading or face recognition". In other embodiments, the verification method can be adjusted accordingly. The important security period criteria include setting a minimum dwelling threshold and a maximum number of people threshold per session. The access control device, under the condition that all personnel in a batch meet the normal period criteria, if the weight of multiple people is greater than the minimum dwelling threshold and the number of people in the batch is less than the maximum number of people threshold per session, then the door lock is opened. In this embodiment, the minimum dwelling threshold is 3 and the maximum number of people threshold per session is 2, that is, the weight of multiple people is greater than 3, and only 2 people can pass through at a time. The corresponding actual situation is that it must include 1 supervisor-level personnel, and no more than 2 people can be allowed to enter at a time. The operational period refers to the non-normal state of counter-terrorism. Firstly, personnel data must meet the criteria of the normal period, and the personnel weight must be greater than the area weight before the door lock is opened. Figure 3 As shown, when the operation period is a counter-terrorism non-state, the increment of Isl, i.e., the area weight, is set to 1. That is, the door lock can only be opened if the personnel weight is greater than the area weight plus 1. In other embodiments, the increment can also be set to 2, 3, or 4, that is, the door lock can only be opened if the personnel weight is greater than the area weight plus 2, 3, or 4.

[0038] S103: Based on the access control criteria, determine the personnel weight, multiple person weight, and area weight obtained by the access control device to obtain entry information, which includes a timestamp, entry personnel information, and the corresponding personnel weight.

[0039] Specifically, in this embodiment, the entry information can be as shown in Table 1 below, where the timestamp is 202201100920, which is 9:20 AM on January 10, 2022. The entry personnel information includes name, identity information, authorization status, and security level. The personnel weight is calculated based on the above normal period. Zhang San's personnel weight is 2, Li Si's personnel weight is 1.3, and in this embodiment, the weight of multiple people is 3.3. Since the weight of multiple people is greater than 3 and the maximum number of people at a time is 2, the door lock can be opened to enter the area.

[0040] Table 1 Entry Information Table S104: Calculate the entry information within a fixed time node to obtain the information on personnel who can enter at the next time node.

[0041] Furthermore, corresponding weight upper limits and adjustment coefficients are set for the normal period, the important security period, and the counter-terrorism abnormal state, respectively. The entry information within a fixed time node is calculated to obtain the corresponding entry weight. The weight upper limit is subtracted from the entry weight to obtain the adjustment weight. The information of personnel who can enter is obtained according to the adjustment weight and the adjustment coefficient.

[0042] Specifically, in this embodiment, the weight limits for the normal period, the important security period, and the counter-terrorism abnormal state settings are 10000, 8000, and 500, respectively, and the adjustment coefficients are 1, 0.8, and 0.8, respectively.

[0043] Furthermore, the adjustable parameter is obtained by multiplying the adjustment weight and the adjustment coefficient. Based on the proportion of the identity information in the entry information within the current time node, the adjustable parameter is used to allocate personnel to obtain the information of personnel who can enter.

[0044] Specifically, in the non-normal counter-terrorism situation, the sum of the weights of all personnel in the current entry information is 300. Multiplying 300 by the adjustment coefficient 0.8 yields an adjustable parameter of 240. At the current node, the personnel weight allocation is 5:2:1 for employees, supervisors, and leaders, with corresponding weight allocations of 150, 60, and 30 for employees, supervisors, and leaders, respectively. These are deployed on the access control equipment as information on personnel who can enter. When the access control equipment detects that the sum of the weights corresponding to the identity information is greater than the allocated number of personnel who can enter, it sends a prompt message to the control room to confirm whether manual access is allowed.

[0045] Furthermore, the fixed time point can be 0.5h, 1h, or 2h.

[0046] It should be noted that, for the sake of simplicity, the foregoing method embodiments are all described as a series of actions. However, those skilled in the art should understand that this application is not limited to the described order of actions, as some steps may be performed in other orders or simultaneously according to this application. Furthermore, those skilled in the art should also understand that the embodiments described in the specification are preferred embodiments, and the actions and modules involved are not necessarily essential to this application.

[0047] Based on another aspect of the embodiments of this application, the present invention also provides a nuclear security access control device. For example... Figure 4 As shown, the device includes: The data acquisition module 401 is used to collect personnel data and set personnel weights, obtain the weights of multiple people in a batch based on the access control equipment, and set area weights for areas according to the safety rules of nuclear power plants. Deployment module 402 is used to set access control criteria according to the operation period of the nuclear power plant, send the access control criteria to the access control equipment and deploy them, wherein the operation period includes normal period, important security period and counter-terrorism emergency period; The entry module 403 is used to determine the personnel weight, multiple person weight and area weight obtained by the access control device based on the access control criteria, and obtain entry information, wherein the entry information includes a timestamp, entry personnel information and the corresponding personnel weight; The prediction module 404 is used to statistically analyze the entry information within a fixed time node to obtain the information on personnel who can enter at the next time node.

[0048] As an optional solution, the above-mentioned device is also used to: collect the personnel data, including identity information, security level, reliability and authorization status.

[0049] As an optional solution, the above-mentioned device is also used for: collecting personnel data and setting personnel weights, including: converting the identity information, the security level, the reliability and the authorization status into corresponding weight coefficients based on the personnel data conversion rules, and then calculating the personnel weights by substituting them into the personnel weight formula.

[0050] As an optional solution, the above-mentioned device is also used to: calculate the personnel weight formula, the expression of which is as follows: ,in Let I be the weight of the person, S be the weight coefficient corresponding to the identity information, R be the weight coefficient corresponding to the security level, A be the weight coefficient corresponding to the reliability, and A be the weight coefficient corresponding to the authorization status. , , and is a coefficient.

[0051] As an optional solution, the above-mentioned device is also used for: deploying personnel data conversion rules, including: setting the corresponding weight coefficient according to the job level in the identity information; setting the corresponding weight coefficient according to the security level; obtaining the corresponding weight coefficient according to the number of violations and the violation threshold in the reliability; and setting the corresponding weight coefficient according to the authorization status.

[0052] As an optional solution, the above-mentioned device is also used to: obtain the weight of multiple people in a batch based on the access control device, the expression of which is as follows: ,in For the weights of the aforementioned multiple people, Let i be the number of people in the batch, and i be the index of the people. Visitor weight, The weight of the personnel mentioned.

[0053] As an optional solution, the above-mentioned device is also used to: deploy access control criteria, including normal period criteria, important security period criteria, and counter-terrorism abnormal state criteria. The normal period criteria include setting an employee threshold zone. If the collected personnel weights meet the employee threshold zone, a corresponding verification method is provided, and the door lock is opened after the verification method is met. The important security period criteria include setting a minimum dwelling threshold and a maximum number of people per batch threshold. The access control device, under the condition that all personnel in a batch meet the normal period criteria, if the weight of multiple people is greater than the minimum dwelling threshold and the number of people in the batch is less than the maximum number of people per batch threshold, then the door lock is opened. The operation period is the counter-terrorism abnormal state. If the personnel weight is greater than the area weight, then the door lock is opened.

[0054] As an optional solution, the above-mentioned device is also used to: obtain the information of personnel who can enter at the next time node by statistically analyzing the entry information within a fixed time node, including: setting corresponding weight upper limits and adjustment coefficients for the normal period, the important security period and the counter-terrorism abnormal state respectively; calculating the entry information within the fixed time node to obtain the corresponding entry weight; subtracting the entry weight from the weight upper limit to obtain the adjustment weight; and obtaining the information of personnel who can enter based on the adjustment weight and the adjustment coefficient.

[0055] As an optional solution, the above-mentioned device is also used to: obtain the information of the personnel who can enter according to the adjustment weight, including: multiplying the adjustment weight and the adjustment coefficient to obtain an adjustable parameter, and allocating the adjustable parameter to personnel according to the proportion of the identity information in the entry information within the current time node to obtain the information of the personnel who can enter.

[0056] In this application embodiment, the terms "module" or "unit" refer to a computer program or part of a computer program that has a predetermined function and works with other related parts to achieve a predetermined goal, and can be implemented wholly or partially using software, hardware (such as processing circuitry or memory), or a combination thereof. Similarly, a processor (or multiple processors or memory) can be used to implement one or more modules or units. Furthermore, each module or unit can be part of an overall module or unit that includes the functionality of that module or unit.

[0057] Regarding the apparatus in the above embodiments, the specific manner in which each module performs its operation has been described in detail in the embodiments related to the method, and will not be elaborated upon here.

[0058] According to one aspect of this application, a computer program product is provided, the computer program product comprising a computer program.

[0059] The sequence numbers of the embodiments in this application are for descriptive purposes only and do not represent the superiority or inferiority of the embodiments.

[0060] Figure 5 A schematic block diagram of a computer system architecture for implementing an electronic device according to embodiments of the present application is shown.

[0061] It should be noted that, Figure 5 The computer system 500 of the electronic device shown is merely an example and should not impose any limitation on the functionality and scope of use of the embodiments of this application.

[0062] like Figure 5 As shown, the computer system 500 includes a central processing unit (CPU) 501, which can perform various appropriate actions and processes based on programs stored in read-only memory (ROM) 502 or programs loaded from storage section 508 into random access memory (RAM). The RAM 503 also stores various programs and data required for system operation. The CPU 501, ROM 502, and RAM 503 are interconnected via a bus 504. An input / output interface 505 (I / O interface) is also connected to the bus 504.

[0063] The following components are connected to the input / output interface 505: an input section 506 including a keyboard, mouse, etc.; an output section 507 including a cathode ray tube (CRT), liquid crystal display (LCD), etc., and speakers, etc.; a storage section 508 including a hard disk, etc.; and a communication section 509 including a network interface card such as a local area network card, modem, etc. The communication section 509 performs communication processing via a network such as the Internet. A drive 510 is also connected to the input / output interface 505 as needed. A removable medium 53, such as a disk, optical disk, magneto-optical disk, semiconductor memory, etc., is installed on the drive 510 as needed so that computer programs read from it can be installed into the storage section 508 as needed.

[0064] Specifically, according to embodiments of this application, the processes described in the various method flowcharts can be implemented as computer software programs. For example, embodiments of this application include a computer program product comprising a computer program carried on a computer-readable medium, the computer program containing program code for performing the methods shown in the flowcharts. In such embodiments, the computer program can be downloaded and installed from a network via communication section 509, and / or installed from removable medium 53. When the computer program is executed by central processing unit 501, it performs various functions defined in the system of this application.

[0065] In such an embodiment, the computer program can be downloaded and installed from a network via communication section 509, and / or installed from removable media 53. When the computer program is executed by central processing unit 501, it performs various functions provided in the embodiments of this application.

[0066] According to another aspect of the embodiments of this application, an electronic device for a nuclear security access control method is also provided. This embodiment uses this electronic device as an example of a terminal device for illustration. Figure 6 As shown, the electronic device includes a memory 602 and a processor 604. The memory 602 stores a computer program, and the processor 604 is configured to execute the steps in any of the above method embodiments via the computer program.

[0067] Optionally, in this embodiment, the aforementioned electronic device may be located in at least one of a plurality of network devices in a computer network.

[0068] Optionally, in this embodiment, the processor may be configured to execute the methods in the embodiments of this application via a computer program.

[0069] Alternatively, as those skilled in the art will understand, Figure 6 The structure shown is for illustrative purposes only. Figure 6 This does not limit the structure of the aforementioned electronic devices. For example, the electronic device may also include components that are more... Figure 6 The more or fewer components shown (such as network interfaces, etc.), or having the same Figure 6 The different configurations shown.

[0070] The memory 602 can be used to store software programs and modules, such as the program instructions / modules corresponding to the nuclear security access control method and device in this embodiment. The processor 604 executes various functional applications and data processing by running the software programs and modules stored in the memory 602, thereby realizing the aforementioned nuclear security access control method. The memory 602 may include high-speed random access memory, and may also include non-volatile memory, such as one or more magnetic storage devices, flash memory, or other non-volatile solid-state memory. In some instances, the memory 602 may further include memory remotely located relative to the processor 604, and these remote memories can be connected to the terminal via a network. Examples of such networks include, but are not limited to, the Internet, corporate intranets, local area networks, mobile communication networks, and combinations thereof. Specifically, the memory 602 may be used, but is not limited to, to store collected operational data or cleaned data information. As an example, such as... Figure 6 As shown, the memory 602 may include, but is not limited to, the acquisition module 401, deployment module 402, access module 403, and prediction module 404 from the aforementioned nuclear security access control device. Furthermore, it may include, but is not limited to, other module units from the aforementioned device, which will not be elaborated upon in this example.

[0071] Optionally, the transmission device 606 described above is used to receive or send data via a network. Specific examples of the network described above may include wired networks and wireless networks. In one example, the transmission device 606 includes a Network Interface Controller (NIC), which can be connected to other network devices and routers via a network cable to communicate with the Internet or a local area network. In another example, the transmission device 606 is a radio frequency (RF) module, used for wireless communication with the Internet.

[0072] In addition, the aforementioned electronic device also includes: a display 608 for displaying the aforementioned operating data or cleaning data; and a connection bus 610 for connecting the various module components in the aforementioned electronic device.

[0073] In other embodiments, the aforementioned terminal device or server can be a node in a distributed system, wherein the distributed system can be a blockchain system, which is a distributed system formed by connecting multiple nodes through network communication. The nodes can form a peer-to-peer network, and any form of computing device, such as a server, terminal, or other electronic device, can become a node in the blockchain system by joining this peer-to-peer network.

[0074] According to one aspect of this application, a computer-readable storage medium is provided, wherein a processor of an electronic device reads computer instructions from the computer-readable storage medium, and executes the computer instructions, causing the electronic device to perform a nuclear security access control method provided in one of the various alternative implementations of nuclear security access control described above.

[0075] Optionally, in this embodiment, the computer-readable storage medium described above may be configured to store methods for performing the embodiments of this application.

[0076] Optionally, in this embodiment, those skilled in the art will understand that all or part of the steps in the various methods of the above embodiments can be implemented by a program instructing the hardware related to the terminal device. The program can be stored in a computer-readable storage medium, which may include: flash drive, read-only memory (ROM), random access memory (RAM), disk or optical disk, etc.

[0077] The sequence numbers of the embodiments in this application are for descriptive purposes only and do not represent the superiority or inferiority of the embodiments.

[0078] If the integrated units in the above embodiments are implemented as software functional units and sold or used as independent products, they can be stored in the aforementioned computer-readable storage medium. Based on this understanding, the technical solution of this application, in essence, or the part that contributes to the prior art, or all or part of the technical solution, can be embodied in the form of a software product. This computer software product is stored in a storage medium and includes several instructions to cause one or more electronic devices to execute all or part of the steps of the methods described in the various embodiments of this application.

[0079] In the above embodiments of this application, the descriptions of each embodiment have different focuses. For parts not described in detail in a certain embodiment, please refer to the relevant descriptions of other embodiments.

[0080] In the several embodiments provided in this application, it should be understood that the disclosed application can be implemented in other ways. The device embodiments described above are merely illustrative; for example, the division of units is only a logical functional division, and in actual implementation, there may be other division methods. For example, multiple units or components may be combined or integrated into another system, or some features may be ignored or not executed. Furthermore, the displayed or discussed mutual couplings, direct couplings, or communication connections may be through some interfaces; indirect couplings or communication connections between units or modules may be electrical or other forms.

[0081] The units described as separate components may or may not be physically separate. The components shown as units may or may not be physical units; that is, they may be located in one place or distributed across multiple network units. Some or all of the units can be selected to achieve the purpose of this embodiment according to actual needs.

[0082] Furthermore, the functional units in the various embodiments of this application can be integrated into one processing unit, or each unit can exist physically separately, or two or more units can be integrated into one unit. The integrated unit can be implemented in hardware or as a software functional unit.

[0083] The above description is merely a preferred embodiment of the present invention and is not intended to limit the invention. Various modifications and variations can be made to the present invention by those skilled in the art. Any modifications, equivalent substitutions, improvements, etc., made within the spirit and principles of the present invention should be included within the scope of protection of the present invention.

[0084] In summary, as can be seen from the above description, the embodiments of the present invention achieve the following technical effects: 1. This invention proposes a nuclear security access control device, storage medium, and electronic equipment. The method of this invention first collects personnel data and assigns personnel weights, enabling the system to achieve individualized risk identification based on different job levels and security attributes. Then, it obtains batch weights for multiple individuals through the access control device, enabling coordinated security control under multi-person collaborative behavior, preventing unauthorized entry or abuse of privileges by a single person. Furthermore, it assigns area weights based on nuclear power plant safety rules, allowing the system to establish differentiated access standards for different sensitive areas. Simultaneously, it sets and deploys access control criteria according to the nuclear power plant's operational period, enabling rapid switching of access control strategies under operational changes. Finally, by statistically analyzing entry information within fixed time nodes and generating information on personnel allowed to enter at the next time node, it achieves multi-dimensional dynamic updates and precise control of access permissions. Therefore, this invention can significantly improve the security response speed, management flexibility, and overall protection level of nuclear facility access control systems under different operating conditions.

[0085] 2. This invention proposes a nuclear security access control device, storage medium, and electronic device. By collecting personnel data including identity information, security level, reliability, and authorization status, and converting each indicator into quantifiable weight coefficients according to personnel data conversion rules, the system can comprehensively evaluate the security attributes of individuals in a quantitative manner, thereby achieving refined and adjustable access control judgments and improving the identification accuracy and management flexibility for personnel in different positions and at different risk levels.

[0086] 3. This invention proposes a nuclear security access control device, storage medium, and electronic equipment. By weighted summation of the weights of personnel identified in batches to obtain the weights of multiple people, and setting different access control judgment conditions according to the access control criteria during the operation of nuclear power plants, dynamic access control based on the combined behavior of multiple people and the state of the safety period is realized. It can automatically adjust the identification method and unlocking conditions under different safety states, thereby improving the security and adaptability of access control.

[0087] 4. This invention proposes a nuclear security access control device, storage medium, and electronic equipment. By statistically analyzing entry information within a fixed time node, calculating entry weights and adjustment weights, and generating accessible personnel information for the next time node based on the weight upper limit and adjustment coefficient set during operation, the system can dynamically adjust the number of accessible personnel according to real-time personnel distribution and security status, achieving predictive control and resource optimization of the access control system, and improving the timeliness and security response capability of the nuclear facility access control system.

[0088] The above description is merely a preferred embodiment of the present invention and is not intended to limit the invention. Various modifications and variations can be made to the present invention by those skilled in the art. Any modifications, equivalent substitutions, improvements, etc., made within the spirit and principles of the present invention should be included within the scope of protection of the present invention.

[0089] It should be noted that, in this document, relational terms such as "first" and "second" are used merely to distinguish one entity or operation from another, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Furthermore, the terms "comprising," "including," or any other variations thereof are intended to cover non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements includes not only those elements but also other elements not expressly listed, or elements inherent to such a process, method, article, or apparatus. Without further limitations, an element defined by the phrase "comprising one..." does not exclude the presence of other identical elements in the process, method, article, or apparatus that includes the element.

[0090] It should be noted that, in the description of this specification, the references to terms such as "one embodiment," "some embodiments," "example," "specific example," or "some examples," etc., indicate that a specific feature, structure, material, or characteristic described in connection with that embodiment or example is included in at least one embodiment or example of the present invention. In this specification, the illustrative expressions of the above terms do not necessarily refer to the same embodiment or example. Furthermore, the specific features, structures, materials, or characteristics described may be combined in any suitable manner in one or more embodiments or examples. Moreover, without contradiction, those skilled in the art can combine and integrate the different embodiments or examples described in this specification, as well as the features of different embodiments or examples.

Claims

1. A nuclear security access control device, characterized in that, include: The data acquisition module is used to collect personnel data and set personnel weights, obtain the weights of multiple people in batches based on access control equipment, and set area weights for areas according to nuclear power plant safety rules. The deployment module is used to set access control criteria according to the operation period of the nuclear power plant, send the access control criteria to the access control equipment and deploy them. The operation period includes normal period, important security period and counter-terrorism emergency period. The entry module is used to determine the personnel weight, multiple person weight and area weight obtained by the access control device based on the access control criteria, and obtain entry information, which includes a timestamp, entry personnel information and the corresponding personnel weight; The prediction module is used to statistically analyze the entry information within a fixed time node to obtain the information on personnel who can enter at the next time node.

2. The apparatus according to claim 1, characterized in that, The acquisition module is used for: Collect the personnel data, including identity information, security level, reliability, and authorization status.

3. The apparatus according to claim 2, characterized in that, The data acquisition module is used to: convert the identity information, security level, reliability and authorization status into corresponding weight coefficients based on the personnel data conversion rules, and then calculate the personnel weight by substituting them into the personnel weight formula.

4. The apparatus according to claim 3, characterized in that, The acquisition module is used for: The formula for calculating the personnel weights is as follows: ， in Let I be the weight of the person, S be the weight coefficient corresponding to the identity information, R be the weight coefficient corresponding to the security level, A be the weight coefficient corresponding to the reliability, and A be the weight coefficient corresponding to the authorization status. , , and is a coefficient.

5. The apparatus according to claim 3, characterized in that, The acquisition module is used for: The personnel data conversion rules are formulated as follows: setting a corresponding weight coefficient based on the job level in the identity information; setting a corresponding weight coefficient based on the security level; obtaining a corresponding weight coefficient based on the number of violations and the violation threshold in the reliability; and setting a corresponding weight coefficient based on the authorization status.

6. The apparatus according to claim 1, characterized in that, The acquisition module is used for: The weights of multiple users in a batch, obtained from the access control device, are expressed as follows: ， in For the weights of the aforementioned multiple people, Let i be the number of people in the batch, and i be the index of the people. For visitor weight, The weight of the personnel mentioned.

7. The apparatus according to claim 1, characterized in that, The deployment module is used for: The access control criteria include normal period criteria, critical security period criteria, and counter-terrorism abnormal state criteria. The normal period criteria include setting an employee threshold zone; if the collected personnel weights meet the employee threshold zone, a corresponding verification method is provided, and the door lock is opened after the verification method is met. The critical security period criteria include setting a minimum dwell time threshold and a maximum number of people per batch threshold. If, under the condition that all personnel in a batch meet the normal period criteria, the access control device opens the door if the weight of multiple people is greater than the minimum dwell time threshold and the number of people in the batch is less than the maximum number of people per batch threshold, the door lock is opened. The operational period is the counter-terrorism abnormal state; if the personnel weight is greater than the area weight, the door lock is opened.

8. The apparatus according to claim 1, characterized in that, The prediction module is used for: To obtain the information on personnel who can enter at the next time point by statistically analyzing the entry information within a fixed time node, the method includes: setting corresponding weight upper limits and adjustment coefficients for the normal period, the important security period, and the counter-terrorism emergency period; calculating the corresponding entry weight for the entry information within the fixed time node; subtracting the entry weight from the weight upper limit to obtain the adjustment weight; and obtaining the information on personnel who can enter based on the adjustment weight and the adjustment coefficient.

9. The apparatus according to claim 8, characterized in that, The prediction module is used for: Obtaining the information of personnel who can enter based on the adjusted weights includes: multiplying the adjusted weights and the adjusted coefficients to obtain an adjustable parameter; and allocating personnel to the adjustable parameter based on the proportion of the identity information in the entry information within the current time node to obtain the information of personnel who can enter.

Images