Bidirectional identity verification unlocking method and system of passive intelligent lock
By recording operation time, calculating behavior coefficients and stability factors, evaluating credibility ratings, and dynamically managing permissions, the problem of not being able to distinguish the legitimacy of operators in passive smart lock systems has been solved, improving system security and the accuracy of permission management.
Patent Information
- Application Number
- CN202511874697.X
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2025-12-12
- Publication Date
- 2026-02-17
AI Technical Summary
Existing passive smart lock systems cannot effectively distinguish the legitimacy of specific operators when operating multiple locks consecutively, leading to increased key sharing and security risks, and making it difficult to trace illegal unlocking incidents.
By recording the operation time of unlocking devices, calculating behavior coefficients and stability factors, determining the depth of operation, evaluating credibility ratings, and dynamically managing device permissions and authentication policies, continuous implicit verification of unlocking devices can be achieved.
It effectively prevents unauthorized users from abusing unlocking devices, improves system security, and significantly reduces the problems of blurred security boundaries and lax permission control caused by device sharing.
Smart Images
Figure CN121545253A_ABST
Abstract
Description
Technical Field
[0001] This invention relates to the field of passive smart lock technology, specifically to a two-way authentication unlocking method and system for a passive smart lock. Background Technology
[0002] Passive smart locks, as an emerging type of intelligent security device, are characterized by the fact that they do not require an internal power source. Instead, an authorized external unlocking device approaches the lock, and the lock's antenna captures carrier energy to complete the charging process before performing two-way authentication and unlocking. This technology eliminates the need for an internal battery and related wiring, effectively reducing device maintenance costs and simplifying the maintenance process.
[0003] In existing passive smart lock systems, two-way authentication is a core element for ensuring security. This process requires: on the one hand, the lock must verify whether the unlocking device is genuinely authorized to prevent counterfeit devices from illegally unlocking the lock and causing property damage; on the other hand, the unlocking device must also verify the legitimacy of the lock, such as confirming that the lock has not been replaced and that the locking position complies with regulations, to prevent physical tampering with the lock itself or "man-in-the-middle" attacks.
[0004] Currently, the industry primarily relies on pre-distributed explicit identity keys (such as digital certificates and symmetric keys) to achieve the aforementioned two-way authentication. However, this approach has significant security shortcomings: when an authorized unlocking device is used by multiple different operators (for example, a maintenance team sharing a single professional unlocking device), the explicit key itself cannot distinguish the specific user of the device. Anyone with access to the device can pass the authentication, which essentially results in key sharing. Once an unauthorized unlocking incident occurs, it is difficult to accurately trace the specific operator, significantly increasing the difficulty of security risks and liability determination. This is especially true in application scenarios requiring the continuous operation of multiple locks, such as a single equipment maintenance task requiring the sequential opening and locking of twenty smart locks. Existing technologies, relying solely on explicit key authentication mechanisms, cannot continuously and implicitly verify the legitimacy of the operator, leading to blurred security boundaries and lax access control due to device sharing. Summary of the Invention
[0005] To address the security risks inherent in existing technologies when multiple passive smart locks are operated consecutively, where the legitimacy of the operator cannot be effectively verified, the present invention aims to provide a two-way authentication unlocking method for passive smart locks. The specific technical solution adopted is as follows: Record the operation time required for a user to complete each single operation in the current unlocking process using the unlocking device; Calculate the behavior coefficient of the current unlocking process based on the operation time; Calculate the stability factor of each operation task in the single operation, and determine the user's operation depth based on the stability factor; The reliability evaluation value of the unlocking device is calculated based on the stability factor of the operation depth in the current unlocking process and the previous unlocking process, and the behavior coefficient of the current unlocking process and the previous unlocking process. The permissions and authentication policies for the unlocked device are managed based on the credibility rating.
[0006] Furthermore, the recording of the operation time required for the user to complete each individual operation using the unlocking device in the current unlocking process includes: At least two single operations are generated. The generation process of the single operation includes: recording the moment when the lock performs the unlocking action after the user aligns the unlocking device with the lock and verifies it as the start time of the single operation; and recording the moment when the lock performs the locking action after the user completes the operation inside the locked area and aligns the unlocking device with the lock again and verifies it as the locking time of the single operation. The operation time is the time interval between the start time and the locking time, wherein the current unlocking process is arranged in the order of the start times of each single operation.
[0007] Furthermore, the process of obtaining the behavior coefficient includes: The deviation between the operation time of each single operation and the average operation time is calculated, and the deviation is amplified, wherein the average operation time is the average of the operation times of each single operation. The behavior coefficient is obtained by calculating the average of the amplified deviations.
[0008] Furthermore, the process of obtaining the stability factor includes: Determine the adaptation range within which the user can complete the operation task with high stability and concentration; The concentration of the operation tasks is measured by calculating the ratio of the number of operation tasks in the adaptation interval to the total number of operation tasks. The degree of deviation is obtained based on the deviation between the time interval between adjacent operational tasks that are not in the adaptation interval and the average time interval between adjacent operational tasks in the adaptation interval. The stability factor is obtained based on the standardized degree of deviation and the degree of concentration.
[0009] Furthermore, the process of determining the adaptation interval includes: The target time difference set is determined by using the preset maximum interval method based on the time difference value, wherein the time difference value is the time difference value between each pair of adjacent operation tasks; Identify adjacent operation task pairs whose time difference belongs to the target time difference set, and determine at least two operation tasks that are consecutively connected on the time axis in the adjacent operation task pairs as a continuous task group; From the continuous task groups, select the task group containing the most operation tasks, record the time corresponding to the start operation task of the task group as the earliest time, and record the time corresponding to the end operation task of the task group as the latest time, and define the adaptation interval by the earliest time and the latest time.
[0010] Furthermore, the process of obtaining the target time difference set includes: Arrange the time differences in ascending order of their values to form an ordered sequence. Calculate the difference between every two adjacent time differences in the ordered sequence, and determine the maximum value among them; Based on the maximum value, the ordered sequence is divided into a preceding sequence and a following sequence, and the preceding sequence is defined as the target time difference set.
[0011] Furthermore, determining the user's operational depth based on the stability factor includes: When the stability factor is greater than the corresponding historical average stability factor, the operation task is marked as an operation depth point. The historical average stability factor is the average value of the stability factor corresponding to the operation task in a preset number of historical unlocking processes before the current unlocking process.
[0012] Furthermore, the process of obtaining the credibility evaluation value includes: Calculate the stability adjustment amount of the stability factor of the operation depth in each current unlocking process compared to the stability factor of the corresponding operation depth in the previous unlocking process; Obtain the difference in behavior coefficients between the current unlocking process and the previous unlocking process. The credibility evaluation value is obtained by summing the difference in the behavior coefficients and the stability adjustment amount.
[0013] Furthermore, managing the permissions and authentication policies of the unlocked device based on the trustworthiness evaluation value includes: When the credibility evaluation value is within a first preset range, the unlocking device is granted full permissions and the user does not need to authenticate. When the credibility evaluation value is within the second preset range, the unlocking device is granted a first number of permissions and the user needs to verify identity when performing the unlocking operation. When the credibility evaluation value is within a third preset range, the unlocking device is granted a second number of permissions, and the user needs to verify identity when performing unlocking and locking operations, wherein the second number is less than the first number; When the credibility evaluation value is within the fourth preset range, the permissions of the unlocking device are prohibited, its authentication function is locked, and its location information is sent to the preset server. The first preset range, the second preset range, the third preset range, and the fourth preset range have no overlap.
[0014] This invention also provides a two-way authentication unlocking system for a passive smart lock, the system comprising: The recording module is used to record the operation time required for the user to complete each single operation in the current unlocking process using the unlocking device; The behavior coefficient module is used to calculate the behavior coefficient of the current unlocking process based on the operation time. The operation depth module is used to calculate the stability factor of each operation task in the single operation, and determine the user's operation depth based on the stability factor. The credibility evaluation module is used to calculate the credibility evaluation value of the unlocking device based on the stability factor of the operation depth in the current unlocking process and the previous unlocking process, and the behavior coefficient of the current unlocking process and the previous unlocking process. The access control module is used to manage the permissions and authentication policies of the unlocking device based on the trustworthiness evaluation value.
[0015] The present invention has the following beneficial effects: First, record the operation time required for the user to complete each individual operation using the unlocking device in the current unlocking process. This operation time forms the data basis for subsequent analysis of the behavioral coefficients of the current unlocking process.
[0016] Secondly, based on the operation time, a behavioral coefficient for the current unlocking process is calculated. This behavioral coefficient quantifies whether the user's operation is stable and the rhythm is uniform during the current unlocking process; the lower the value, the more stable and uniform the user's operation is during the current unlocking process.
[0017] Then, the stability factor of each operation task in the single operation is calculated, and the user's operation depth is determined based on the stability factor. The larger the value of the stability factor, the more likely the operation task is to become the user's operation depth.
[0018] Furthermore, based on the stability factors of the operation depth points in the current unlocking process and the previous unlocking process, as well as the behavioral coefficients of the current unlocking process and the previous unlocking process, a trustworthiness evaluation value for the unlocking device is calculated. A higher trustworthiness evaluation value indicates greater trust in the current user of the unlocking device.
[0019] Finally, the permissions and authentication policies of the unlocking device are managed based on the credibility evaluation value. Adjusting the permissions of the unlocking device and determining whether to trigger its authentication function based on the credibility evaluation value further ensures the security of user operations and prevents unauthorized individuals from unauthorizedly unlocking the device without detection.
[0020] In summary, this invention dynamically adjusts device permissions and authentication policies through a trustworthiness evaluation value, effectively preventing unauthorized users from abusing device unlocking capabilities and significantly improving system security. Attached Figure Description
[0021] To more clearly illustrate the technical solutions and advantages in the embodiments of the present invention or the prior art, the drawings used in the description of the embodiments or the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present invention. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.
[0022] Figure 1 A flowchart illustrating a two-way authentication unlocking method for a passive smart lock provided in the first embodiment of the present invention; Figure 2 A flowchart illustrating the process of obtaining behavioral coefficients according to the second embodiment of the present invention; Figure 3 A flowchart illustrating the process of obtaining the stability factor according to the third embodiment of the present invention; Figure 4 A flowchart illustrating the process of determining the adaptation range provided in the fourth embodiment of the present invention; Figure 5 A flowchart illustrating the process of obtaining the target time difference set provided in the fifth embodiment of the present invention; Figure 6 This is a flowchart illustrating the process of obtaining the credibility evaluation value provided in the sixth embodiment of the present invention; Figure 7 This is a schematic diagram of a two-way authentication unlocking system for a passive smart lock provided in the seventh embodiment of the present invention. Detailed Implementation
[0023] To further illustrate the technical means and effects adopted by the present invention to achieve its intended purpose, the following, in conjunction with the accompanying drawings and preferred embodiments, details the specific implementation, structure, features, and effects of a two-way authentication unlocking method and system for a passive smart lock according to the present invention. In the following description, different "one embodiment" or "another embodiment" do not necessarily refer to the same embodiment. Furthermore, specific features, structures, or characteristics in one or more embodiments can be combined in any suitable form.
[0024] Unless otherwise defined, all technical and scientific terms used herein have the same meaning as commonly understood by one of ordinary skill in the art to which this invention pertains.
[0025] The following description, in conjunction with the accompanying drawings, details a specific scheme for a two-way authentication unlocking method for a passive smart lock provided by the present invention.
[0026] Please see Figure 1 The diagram illustrates a flowchart of a two-way authentication unlocking method for a passive smart lock according to the first embodiment of the present invention. The specific technical solution adopted is as follows: S101. Record the operation time required for the user to complete each single operation in the current unlocking process using the unlocking device.
[0027] In this invention, the following steps are required before obtaining the operation time: Step 1. Hardware installation and power-on self-test; Lock body installation: Securely install the passive smart lock body in the target location (such as the door or cabinet).
[0028] Device deployment: Install and configure unlocking devices, such as dedicated handheld terminals or install and adapt mobile apps.
[0029] Power-on and diagnostics: After powering on, the system will perform a hardware self-test upon startup. Using serial port logs or Bluetooth debugging tools, confirm that core modules such as the communication module, sensors, and power management are all functioning correctly and their status is "ready".
[0030] Step 2. System initialization and log configuration.
[0031] Security information configuration: By unlocking the device's wireless module (such as Wi-Fi / 4G / 5G), the "unique identifier" and "device key" of the locks under its jurisdiction are downloaded from the central server and securely stored to complete the identity binding.
[0032] Log channel establishment: Configure the unlocking device so that it can automatically transmit key information (including: lock ID, precise unlocking time, and unlocking duration) back to the central server via the wireless module each time an unlocking operation is performed.
[0033] Log formation: The server receives and records these events in chronological order, forming an immutable and continuous sequence of "lock-device" operation logs.
[0034] Because the application scenario of this invention is that users need to continuously operate multiple locks, such as an inspector checking multiple locks, the current unlocking process includes multiple single operations, and each single operation contains multiple operation tasks. An operation task refers to a discrete, recordable, single specific action necessary to complete the goal of unlocking or locking; that is, a single operation refers to the specific action to complete the unlocking process or the specific action to complete the locking process. For example, for locks a, b, and c, lock a needs to be unlocked and locked. Unlocking and locking each correspond to an operation task, and these two operation tasks constitute a single operation. Similarly, lock b needs to be unlocked and locked. Unlocking and locking each correspond to an operation task, and these two operation tasks constitute a single operation. The recording of the operation time required for the user to complete each single operation using the unlocking device in the current unlocking process includes: At least two single operations are generated. The generation process of the single operation includes: recording the moment when the lock performs the unlocking action after the user aligns the unlocking device with the lock and verifies it as the start time of the single operation; and recording the moment when the lock performs the locking action after the user completes the operation inside the locked area and aligns the unlocking device with the lock again and verifies it as the locking time of the single operation. The operation time is the time interval between the start time and the locking time, wherein the current unlocking process is arranged in the order of the start times of each single operation.
[0035] S102. Calculate the behavior coefficient of the current unlocking process based on the operation time.
[0036] Analysis of the usage characteristics of unlocking devices reveals that if an unlocking device is used incorrectly, the lock will not be able to be opened, thus effectively preventing unauthorized cross-use between devices. Specifically, for a particular lock, unlocking can only be performed by using a matching unlocking device after key verification. This process constitutes an explicit identity verification mechanism.
[0037] However, for authorized unlocking devices, if used by unauthorized personnel, although the key remains unchanged, their operational behavior often differs from that of the original user. Because device owners develop stable operating patterns through long-term use, their behavior exhibits identifiable characteristics over time; while the actions of unauthorized personnel are prone to deviation. Based on this, the central server can perform real-time verification of the operational sequence. Once abnormal behavior is detected, an identity verification mechanism is triggered, and the authorization policy for the device is dynamically adjusted.
[0038] The process of obtaining the behavior coefficients will be described in detail in the second embodiment, and will not be repeated here.
[0039] The behavior coefficient measures the stability and consistency of user operations. A low behavior coefficient indicates good internal consistency in the current unlocking process. The user's operation rhythm is stable, and the time taken for each step is even, indicating a smooth and coherent operation, possibly reflecting a state of high focus or proficiency. Conversely, a high behavior coefficient indicates poor internal consistency in the current unlocking process. The user may be unusually fast in some steps (e.g., skillful operation due to muscle memory) and unusually slow in others (e.g., encountering problems, hesitation, unfamiliarity, or being interrupted). The overall rhythm of the operation is uneven and disjointed.
[0040] S103. Calculate the stability factor of each operation task in the single operation, and determine the user's operation depth based on the stability factor.
[0041] To analyze user operating habits, this invention introduces the concept of "deep operation points." During long-term, multi-process device use, the user's operation time at different lock points fluctuates due to external factors such as device status, path accessibility, and maintenance procedures. However, operations at certain lock points exhibit significant temporal stability, meaning that the completion time of multiple executions is highly concentrated. These stable operation points constitute the user's "deep operation points." By identifying these deep points, the inherent operating characteristics of unlocking device users can be accurately depicted, providing crucial evidence for subsequent behavior authentication and anomaly detection.
[0042] The process of obtaining the stability factor will be described in detail in the third embodiment, and will not be repeated here.
[0043] Determining the user's operational depth based on the aforementioned stability factor includes: When the stability factor is greater than the corresponding historical average stability factor, the operation task is marked as an operation depth point. The historical average stability factor is the average value of the stability factor corresponding to the operation task in a preset number of historical unlocking processes before the current unlocking process.
[0044] After calculating the stability factor of the operation task and filtering out the deep points of the operation, a unique operation benchmark profile of the user can be constructed based on this profile for device theft detection.
[0045] Legitimate User Behavior Patterns: Due to their high familiarity with business processes, device owners exhibit extremely high temporal consistency and structural stability in their operations at the "deepest level." Even if occasional anomalies cause deviations in individual tasks, the core characteristics of the overall operation sequence still highly match the baseline profile, thus confirming that the operation was performed by the owner and not stolen.
[0046] Misapper Behavior Patterns: Unauthorized users, due to unfamiliarity with business processes or intent to intrude, exhibit operational sequences that significantly deviate from the baseline profile. This deviation manifests in two aspects: first, a continuous deviation between the real-time operational chain and the owner's habits; and second, a concentrated occurrence of anomalies in multiple high-stability tasks. By monitoring these "real-time deviations" and "anomaly concentrations," misappropriation behavior can be effectively identified.
[0047] S104. Calculate the reliability evaluation value of the unlocking device based on the stability factor of the operation depth in the current unlocking process and the previous unlocking process, and the behavior coefficient of the current unlocking process and the previous unlocking process.
[0048] The process of obtaining the credibility evaluation value will be described in detail in the sixth embodiment, and will not be repeated here.
[0049] The credibility rating represents the level of trust in the user who unlocked the device. The higher the credibility rating, the lower the probability that the user who unlocked the device is an unauthorized user.
[0050] S105. Manage the permissions and authentication policies of the unlocked device based on the credibility evaluation value.
[0051] Managing the permissions and authentication policies of the unlocked device based on the aforementioned trustworthiness evaluation value includes: When the credibility evaluation value is within a first preset range, the unlocking device is granted full permissions and the user does not need to authenticate. When the credibility evaluation value is within the second preset range, the unlocking device is granted a first number of permissions and the user needs to verify identity when performing the unlocking operation. When the credibility evaluation value is within a third preset range, the unlocking device is granted a second number of permissions, and the user needs to verify identity when performing unlocking and locking operations, wherein the second number is less than the first number; When the credibility evaluation value is within the fourth preset range, the permissions of the unlocking device are prohibited, its authentication function is locked, and its location information is sent to the preset server. The first preset range, the second preset range, the third preset range, and the fourth preset range have no overlap.
[0052] The first preset range, the second preset range, the third preset range, and the fourth preset range can all be set independently according to the actual situation. Preferably, the first preset range is (0.5, 1], the second preset range is (0.2, 0.5], the third preset range is (0, 0.2], and the fourth preset range is [-1, 0].
[0053] Figure 2 The flowchart below shows the process for obtaining behavioral coefficients according to the second embodiment of the present invention. The process for obtaining behavioral coefficients includes: S201. Calculate the deviation between the operation time of each single operation and the average operation time, and amplify the deviation, wherein the average operation time is the average of the operation times of each single operation.
[0054] The degree of deviation can be expressed as: , wherein Indicates the first The operation time for each single operation, the The average operation time is represented by the... The standard deviation of the operation time for each of the individual operations is used for data standardization.
[0055] The degree of deviation is amplified as follows: The purpose of raising the value to the fourth power is to amplify outliers and suppress normal values. If the operation time of a single operation deviates significantly from the average operation time (whether too long or too short), the value will become very large after raising it to the fourth power. If the operation time of a single operation is close to the average operation time, its standardized score is already close to 0, and it will be even closer to 0 after raising it to the fourth power.
[0056] S202. Calculate the average value of each amplified deviation to obtain the behavior coefficient.
[0057] The behavior coefficient can be expressed by the formula: ; Wherein, N is the number of operations in a single operation, and the This represents the behavior coefficient.
[0058] Figure 3 The flowchart below shows the process for obtaining the stability factor according to the third embodiment of the present invention. The process for obtaining the stability factor includes: S301. Determine the adaptation range in which the user can complete the operation task with high stability and concentration.
[0059] The process of determining the adaptation interval will be described in detail in the fourth embodiment, and will not be repeated here.
[0060] The function of the adaptation interval is a data filtering mechanism that can be used to accurately separate the operation tasks that represent the user's stable habits.
[0061] S302. Calculate the ratio of the number of operation tasks in the adaptation interval to the total number of operation tasks to measure the concentration of the operation tasks.
[0062] The concentration of the operational tasks can be expressed as: , wherein Indicates the number of operation tasks within the adaptation interval, subscript It has no practical significance and is only used for distinction. This indicates the total number of the operation tasks.
[0063] S303. Obtain the degree of deviation based on the deviation between the time interval between adjacent operation tasks that are not in the adaptation interval and the average time interval between adjacent operation tasks in the adaptation interval.
[0064] The degree of deviation can be expressed as: , wherein This represents the time interval between the j-th adjacent operation tasks that are not within the adaptation interval. This represents the average time interval between adjacent operational tasks within the adaptation interval.
[0065] S304. Obtain the stability factor based on the standardized degree of deviation and the concentration.
[0066] The stability factor can be expressed by the formula: ; Wherein, D represents the stability factor of the operation task, and the The number of time intervals between adjacent operation tasks that are not within the adaptation interval. This represents the average time interval between all adjacent operation tasks, used to standardize the degree of deviation. This represents an exponential function with base e.
[0067] It should be noted that the operation task mentioned here refers to the same operation task. Since a single operation is performed multiple times, the number of the same operation task is also multiple.
[0068] As can be seen from the formula, the higher the concentration, the lower the degree of deviation, and the more stable the stability factor.
[0069] Figure 4 The flowchart below shows the process for determining the adaptation interval provided in the fourth embodiment of the present invention. The process for determining the adaptation interval includes: S401. Using the preset maximum interval method, a target time difference set is determined based on the time difference value, wherein the time difference value is the time difference value between each pair of adjacent operation tasks.
[0070] The process of obtaining the target time difference set will be described in detail in the fifth embodiment, and will not be repeated here.
[0071] S402. Identify adjacent operation task pairs whose time difference belongs to the target time difference set, and determine at least two operation tasks that are continuously connected on the time axis in the adjacent operation task pairs as a continuous task.
[0072] S403. From the continuous task groups, select the task group containing the most operation tasks, record the time corresponding to the start operation task of the task group as the earliest time, and record the time corresponding to the end operation task of the task group as the latest time, and define the adaptation interval by the earliest time and the latest time.
[0073] Figure 5 The flowchart below shows the process of obtaining the target time difference set according to the fifth embodiment of the present invention. The process of obtaining the target time difference set includes: S501. Arrange the time difference values in ascending order to form an ordered sequence.
[0074] S502. Calculate the difference between every two adjacent time differences in the ordered sequence, and determine the maximum value among them.
[0075] S503. Based on the maximum value, the ordered sequence is divided into a preceding sequence and a following sequence, and the preceding sequence is defined as the target time difference set.
[0076] Figure 6 This is a flowchart of the process for obtaining the credibility evaluation value provided in the sixth embodiment of the present invention. The process for obtaining the credibility evaluation value includes: S601. Calculate the stability adjustment amount of the stability factor of the operation depth point in each current unlocking process compared to the stability factor of the corresponding operation depth point in the previous unlocking process.
[0077] The stability adjustment amount can be expressed by the formula: ; Among them, the This indicates the depth of operation in the current unlocking process. The stability factor, the This indicates the depth of the operation in the previous unlocking process. The stabilizing factor.
[0078] S602. Obtain the difference in behavior coefficients between the behavior coefficients of the current unlocking process and the behavior coefficients of the previous unlocking process.
[0079] The difference in behavioral coefficients can be expressed by the following formula: ; Among them, the This represents the behavior coefficient of the current unlocking process. This represents the behavior coefficient of the previous unlocking process, the... It represents the absolute value.
[0080] S603. Obtain the credibility evaluation value based on the cumulative sum of the behavioral coefficient difference and the stability adjustment amount.
[0081] The credibility evaluation value can be expressed by the formula: ; Wherein, K represents the credibility evaluation value, and the The purpose of this setting is to prevent the denominator from being zero. Users can set it themselves according to their actual needs. The The normalization function, such as the range normalization function, is used to normalize the value to the range [-1, 1], and F represents the number of operation depths.
[0082] The smaller the difference in the behavior coefficients, the higher the cumulative sum of the stability adjustments, i.e., each Compared to The higher the value, the higher the credibility rating.
[0083] Figure 7 This is a schematic diagram of a two-way authentication unlocking system for a passive smart lock provided in the seventh embodiment of the present invention. The system includes: The recording module 701 is used to record the operation time required for the user to complete each single operation using the unlocking device in the current unlocking process. The behavior coefficient module 702 is used to calculate the behavior coefficient of the current unlocking process based on the operation time; The operation depth module 703 is used to calculate the stability factor of each operation task in the single operation, and determine the user's operation depth based on the stability factor. The credibility evaluation module 704 is used to calculate the credibility evaluation value of the unlocking device based on the stability factor of the operation depth in the current unlocking process and the previous unlocking process, and the behavior coefficient of the current unlocking process and the previous unlocking process. The access control module 705 is used to manage the access permissions and authentication policies of the unlocking device based on the trustworthiness evaluation value.
[0084] The technical features and effects of the passive smart lock two-way authentication unlocking system proposed in this embodiment of the invention are the same as those of the method proposed in this embodiment of the invention, and will not be repeated here.
[0085] The present invention has the following beneficial effects: First, record the operation time required for the user to complete each individual operation using the unlocking device in the current unlocking process. This operation time forms the data basis for subsequent analysis of the behavioral coefficients of the current unlocking process.
[0086] Secondly, based on the operation time, a behavioral coefficient for the current unlocking process is calculated. This behavioral coefficient quantifies whether the user's operation is stable and the rhythm is uniform during the current unlocking process; the lower the value, the more stable and uniform the user's operation is during the current unlocking process.
[0087] Then, the stability factor of each operation task in the single operation is calculated, and the user's operation depth is determined based on the stability factor. The larger the value of the stability factor, the more likely the operation task is to become the user's operation depth.
[0088] Furthermore, based on the stability factors of the operation depth points in the current unlocking process and the previous unlocking process, as well as the behavioral coefficients of the current unlocking process and the previous unlocking process, a trustworthiness evaluation value for the unlocking device is calculated. A higher trustworthiness evaluation value indicates greater trust in the current user of the unlocking device.
[0089] Finally, the permissions and authentication policies of the unlocking device are managed based on the credibility evaluation value. Adjusting the permissions of the unlocking device and determining whether to trigger its authentication function based on the credibility evaluation value further ensures the security of user operations and prevents unauthorized individuals from unauthorizedly unlocking the device without detection.
[0090] In summary, this invention dynamically adjusts device permissions and authentication policies through a trustworthiness evaluation value, effectively preventing unauthorized users from abusing device unlocking capabilities and significantly improving system security.
[0091] It should be noted that the order of the above embodiments of the present invention is merely for descriptive purposes and does not represent the superiority or inferiority of the embodiments. The processes depicted in the accompanying drawings do not necessarily require a specific or sequential order to achieve the desired result. In some embodiments, multitasking and parallel processing are also possible or may be advantageous.
[0092] The various embodiments in this specification are described in a progressive manner. The same or similar parts between the various embodiments can be referred to each other. Each embodiment focuses on describing the differences from other embodiments.
Claims
1. A bidirectional identity authentication unlocking method of a passive intelligent lock, characterized in that, The method comprises: recording operation time required by a user to complete each single operation in a current unlocking process using an unlocking device; calculating a behavior coefficient of the current unlocking process based on the operation time; calculating a stability factor of each operation task in the single operation, and determining an operation depth point of the user based on the stability factor; calculating a reliability evaluation value of the unlocking device according to the stability factor of the operation depth point in the current unlocking process and a previous unlocking process, and the behavior coefficients of the current unlocking process and the previous unlocking process; managing a permission and an authentication strategy of the unlocking device based on the reliability evaluation value.
2. The two-way identity verification unlocking method of the passive intelligent lock according to claim 1, wherein, The recording of the operation time required by the user to complete each single operation in the current unlocking process using the unlocking device comprises: generating at least two single operations, and the generation process of the single operations comprises: recording a time point when the unlocking device is aligned with a lock and verified as passing, and a time point when the lock performs a lock opening action as a start time point of the single operation, and recording a time point when the user completes an internal operation of a locking area, and a time point when the unlocking device is aligned with the lock again and verified as passing, and a time point when the lock performs a lock closing action as a locking time point of the single operation; the operation time is a time interval between the start time point and the locking time point, and the current unlocking process is arranged in a sequence of the start time points of the single operations.
3. The two-way identity verification unlocking method of the passive smart lock according to claim 1, wherein, The behavior coefficient is obtained by: calculating a deviation degree of the operation time of each single operation from an operation average time, and amplifying the deviation degree, wherein the operation average time is an average value of the operation time of each single operation; calculating an average value of the amplified deviation degrees to obtain the behavior coefficient.
4. The two-way identity verification unlocking method of the passive intelligent lock according to claim 1, wherein, The stability factor is obtained by: determining an adaptive interval in which the user completes the operation task with high stability and concentration; calculating a ratio of a number of the operation tasks in the adaptive interval to a total number of the operation tasks to measure a concentration degree of the operation task; obtaining a deviation degree according to a deviation between a time interval between adjacent operation tasks not in the adaptive interval and an average time interval between adjacent operation tasks in the adaptive interval; obtaining a stability factor based on the standardized deviation degree and the concentration degree.
5. The two-way identity verification unlocking method of the passive smart lock according to claim 1, wherein, The adaptive interval is determined by: adopting a preset maximum interval method to determine a target time difference value set according to a time difference value, wherein the time difference value is a time difference value between each pair of adjacent operation tasks; identifying adjacent operation task pairs in which the time difference value belongs to the target time difference value set, and determining at least two operation tasks continuously connected in a time axis in the adjacent operation task pairs as a continuous task group; from the continuous task group, selecting a task group containing the most operation tasks, recording a time point corresponding to a starting operation task of the task group as an earliest time point, and recording a time point corresponding to an ending operation task of the task group as a latest time point, and defining an adaptive interval by the earliest time point and the latest time point.
6. The two-way identity verification unlocking method of the passive intelligent lock according to claim 5, wherein, The target time difference value set is obtained by: arranging the time difference values in ascending order to form an ordered sequence; calculating the difference between each two adjacent time difference values in the ordered sequence and determining the maximum value among them; dividing the ordered sequence into a previous sequence and a subsequent sequence according to the maximum value, and defining the previous sequence as the target time difference value set.
7. The two-way identity verification unlocking method of the passive smart lock according to claim 1, wherein, The operation deep point of the user is determined based on the stability factor, which includes: When the stability factor is greater than the average value of the corresponding historical stability factor, the operation task is marked as an operation deep point, and the average value of the stability factor corresponding to the operation task in the preset number of historical unlocking processes before the current unlocking process is the average value of the stability factor.
8. The two-way identity verification unlocking method of the passive smart lock according to claim 1, wherein, The process of obtaining the credibility evaluation value includes: calculating the stability adjustment amount of the stability factor of the operation deep point in the current unlocking process compared to the stability factor of the corresponding operation deep point in the previous unlocking process; obtaining the behavior coefficient difference between the behavior coefficient of the current unlocking process and the behavior coefficient of the previous unlocking process; obtaining the credibility evaluation value according to the cumulative sum of the behavior coefficient difference and the stability adjustment amount.
9. The two-way identity verification unlocking method of the passive smart lock according to claim 1, wherein, The permission and identity verification strategy of the unlocking device are managed based on the credibility evaluation value, which includes: When the credibility evaluation value is within a first preset range, the unlocking device is granted full permission and the user does not need to perform identity verification; When the credibility evaluation value is within a second preset range, the unlocking device is granted a first number of permissions and the user needs to perform identity verification when performing the unlocking operation; When the credibility evaluation value is within a third preset range, the unlocking device is granted a second number of permissions and the user needs to perform identity verification when performing the unlocking and locking operations, wherein the second number is less than the first number; When the credibility evaluation value is within a fourth preset range, all permissions of the unlocking device are prohibited, its identity verification function is locked, and its location information is sent to a preset server, wherein the first, second, third, and fourth preset ranges have no intersection.
10. A two-way identity verification unlocking system of a passive smart lock, characterized in that, The system includes: a recording module for recording the operation time required by the user to complete each single operation using the unlocking device in the current unlocking process; a behavior coefficient module for calculating the behavior coefficient of the current unlocking process based on the operation time; an operation deep point module for calculating the stability factor of each operation task in the single operation and determining the operation deep point of the user based on the stability factor; a credibility evaluation value module for calculating the credibility evaluation value of the unlocking device according to the stability factor of the operation deep point in the current and previous unlocking processes and the behavior coefficient of the current and previous unlocking processes; a permission control module for managing the permission and identity verification strategy of the unlocking device based on the credibility evaluation value.