Method and system for realizing visitor unlocking by double app cooperation

Abstract

The application discloses a method and system for realizing visitor unlocking by double APP cooperation, and the method comprises the following steps: generating encrypted authorization data containing biological feature information of both parties by a master side APP according to a video interaction channel established by a house owner and a third party non-completely trusted personnel; transmitting the authentication result of the encrypted authorization data to a first door lock through a near field communication mode, connecting a wireless access point provided by a mobile terminal of the third party personnel to access the Internet by the first door lock, and constructing a local communication network for other door locks to access; generating a plurality of temporary unlocking credentials according to the event of successful verification of the first door lock; triggering the unlocking action of all door locks in the local communication network after the first door lock completes the final authentication according to the triggering authentication request of any second door lock of the third party personnel in the local communication network. By using the embodiment of the application, temporary authorization and cooperative unlocking of multiple door locks can be realized, and the authorization security and multi-device linkage are ensured.

Description

Technical Field

[0001] This invention belongs to the field of smart lock technology, specifically a method and system for enabling visitor unlocking through dual-APP collaboration. Background Technology

[0002] In offline environments (such as vacant houses without WiFi), smart locks with multiple lock configurations [1] (for example, some homeowners abroad install multiple locks on one door to increase the difficulty for lock pickers) face the problem of temporary authorization management. Homeowners need to frequently set temporary passwords on-site for visitors (such as real estate agents) to unlock the door. Especially when multiple visitors visit in batches, the number of temporary passwords is limited and cannot be updated remotely, resulting in cumbersome operation.

[0003] In existing technologies, remote authorization for smart locks relies on a stable network connection, making it difficult to achieve collaborative management of multiple locks offline. Single temporary passwords are easily abused, and in multi-lock scenarios, each device requires separate authorization, resulting in insufficient security and convenience. Furthermore, the trustworthiness of third-party personnel (such as intermediaries) is difficult to guarantee, and directly granting permanent permissions poses security risks. Summary of the Invention

[0004] The purpose of this invention is to provide a method and system for enabling visitor unlocking through dual-APP collaboration, in order to overcome the shortcomings of the prior art, and to achieve temporary authorization and collaborative unlocking of multiple locks, ensuring authorization security and multi-device linkage.

[0005] One embodiment of this application provides a method for visitor unlocking via dual-app collaboration, the method comprising: Collaborative generation of authorization information: Based on the video interaction channel established between the homeowner and a third-party non-fully trusted person, the homeowner's app generates encrypted authorization data containing the biometric information of both parties and sends it to the third-party person's app. Near-field door lock authentication and network configuration: Based on the authentication result transmitted to the first door lock via near-field communication according to the encrypted authorization data, the first door lock connects to the wireless access point provided by a third-party personnel mobile terminal to access the Internet and builds a local communication network for other door locks to access. Temporary credential distribution and synchronization: Based on the successful verification of the first door lock, multiple temporary unlocking credentials are generated, and the temporary unlocking credentials are distributed and synchronized to the owner's APP and all door locks in the local communication network; Multi-lock collaborative unlocking execution: Based on the authentication request triggered by any second door lock in the local communication network by a third party, after the first door lock completes the final authentication, all door locks in the local communication network are triggered to perform unlocking actions.

[0006] Optionally, the collaborative generation of the authorization information includes: Two-way biometric extraction: Based on the video call initiated by the owner's app, the owner's first biometric feature is extracted, and at the same time, the second biometric feature of the third party is parsed from the video stream. Authorized data encryption and encapsulation: According to a preset encryption algorithm, the first biometric feature and the second biometric feature are encrypted to generate encrypted biometric information; Secure channel transmission: Based on the network connection established between the two apps, the encrypted biometric information is encapsulated into an authorized data packet and sent to the third-party personnel-side app.

[0007] Optionally, the near-field door lock authentication and network configuration includes: Near-field data transmission: Based on the operation instructions received by the third-party personnel-side APP, the information containing the encrypted authorization data and the wireless access point credentials of the third-party personnel's mobile terminal is transmitted to the first door lock via near-field communication. Owner authentication: The first biometric feature obtained by decrypting the first door lock is compared with the locally stored biometric feature template to obtain the owner authentication result; Internet access and local networking: Based on the successful authentication of the owner, the first door lock is configured and connected to the wireless access point of a third-party personnel mobile terminal to access the Internet; at the same time, the first door lock turns on its own wireless hotspot for other door locks to access in order to form the local communication network.

[0008] Optionally, the temporary credential distribution and synchronization includes: Temporary credential generation: Based on the successful internet connection status of the first door lock, generate a specified number of temporary passwords locally; Encrypted distribution of credentials: The temporary password is encrypted according to the preset key, and synchronization messages are sent to the address of the master's APP and the addresses of other door locks in the network. Multi-terminal credential storage: Based on the received synchronization message, the owner's APP and other door locks decrypt and store the temporary password locally, completing the synchronization of the temporary unlocking credential.

[0009] Optionally, the multi-lock collaborative unlocking execution includes: Secondary authentication trigger: Based on the biometric identification operation triggered by a third party in front of the second door lock, the second door lock collects the current biometric characteristics of the third party. Intra-network authentication request: Based on the connection of the local communication network, the second door lock sends the encrypted current biometric data to the first door lock to request final authentication; Final authentication and linkage execution: Based on the result of the first lock comparing the current biometric feature with the pre-stored second biometric feature, if the match is successful, the first lock controls itself to unlock and sends a linkage unlocking command to all other locks in the network, triggering all locks to open.

[0010] Another embodiment of this application provides a system for visitor unlocking via dual-app collaboration, the system comprising: The authorization module is used for collaborative generation of authorization information: based on the video interaction channel established between the homeowner and a third-party non-fully trusted person, the homeowner's side APP generates encrypted authorization data containing the biometric information of both parties and sends it to the third-party person's side APP; The authentication module is used for near-field door lock authentication and network configuration: based on the authentication result transmitted to the first door lock via near-field communication according to the encrypted authorization data, the first door lock connects to the wireless access point provided by the third-party personnel mobile terminal to access the Internet and builds a local communication network for other door locks to access. The distribution module is used for temporary credential distribution and synchronization: based on the successful verification of the first door lock, multiple temporary unlocking credentials are generated, and the temporary unlocking credentials are distributed and synchronized to the owner's APP and all door locks in the local communication network; The unlocking module is used for multi-lock collaborative unlocking: based on the authentication request from a third party to any second door lock in the local communication network, after the first door lock completes the final authentication, it triggers all door locks in the local communication network to perform unlocking actions.

[0011] Another embodiment of this application provides a storage medium storing a computer program, wherein the computer program is configured to execute the method described in any of the preceding claims when running.

[0012] Another embodiment of this application provides an electronic device including a memory and a processor, wherein the memory stores a computer program and the processor is configured to run the computer program to perform the method described in any of the preceding claims.

[0013] Compared with existing technologies, this invention provides a method for visitor unlocking via dual-app collaboration. Based on a video interaction channel established between the homeowner and a third-party (not fully trusted) individual, the homeowner's app generates encrypted authorization data containing biometric information of both parties. The authentication result of this encrypted authorization data, transmitted via near-field communication to a first lock, connects to a wireless access point provided by the third-party's mobile terminal to access the internet, establishing a local communication network for other locks. Multiple temporary unlocking credentials are generated based on successful authentication by the first lock. Upon a third-party authentication request from any second lock within the local communication network, the first lock completes final authentication, triggering all locks within the local communication network to perform unlocking actions. This enables temporary authorization and collaborative unlocking across multiple locks, ensuring authorization security and multi-device connectivity. Attached Figure Description

[0014] Figure 1 The hardware structure block diagram of a computer terminal for a method of visitor unlocking through dual-APP collaboration provided in an embodiment of the present invention; Figure 2 This is a flowchart illustrating a method for visitor unlocking via dual-app collaboration, as provided in an embodiment of the present invention. Figure 3 This is a schematic diagram of a system for enabling visitor unlocking through dual-app collaboration, provided in an embodiment of the present invention. Detailed Implementation

[0015] The embodiments described below with reference to the accompanying drawings are exemplary and are only used to explain the present invention, and should not be construed as limiting the present invention.

[0016] Some homeowners install multiple locks on a single door to make it more difficult for lockpickers. The homeowner wants to sell / rent the property, but since the property is vacant, there is no Wi-Fi installed inside, and no public Wi-Fi is available nearby. Multiple real estate agents bring clients to view the property in batches, and the homeowner provides each agent with a temporary password for each viewing, which expires after one use. Because the number of temporary passwords is limited, and there is no network connection between the homeowner and the locks to set new passwords remotely, the homeowner must go to the property to set new temporary passwords and provide them to the agents who bring clients to view the property later, which is inconvenient.

[0017] This invention first provides a method for enabling visitor unlocking through dual-app collaboration. This method can be applied to electronic devices, such as computer terminals, specifically ordinary computers.

[0018] The following detailed explanation uses a computer terminal as an example. Figure 1This is a hardware structure block diagram of a computer terminal for a method of visitor unlocking through dual-APP collaboration, as provided in an embodiment of the present invention. Figure 1 As shown, the computer device includes a processor, memory, and network interface connected via a system bus, wherein the memory may include non-volatile storage media and internal memory.

[0019] Non-volatile storage media can store operating systems and computer programs. These computer programs include program instructions that, when executed, cause the processor to perform any method of guest unlocking via dual-app collaboration.

[0020] The processor provides computing and control capabilities, supporting the operation of the entire computer device.

[0021] Internal memory provides an environment for the execution of computer programs in non-volatile storage media. When these computer programs are executed by the processor, the processor can execute any method of dual-app collaboration to enable visitor unlocking.

[0022] This network interface is used for network communication, such as sending assigned tasks. Those skilled in the art will understand that... Figure 1 The structure shown is merely a block diagram of a portion of the structure related to the present application and does not constitute a limitation on the computer device to which the present application is applied. Specific computer devices may include more or fewer components than those shown in the figure, or combine certain components, or have different component arrangements.

[0023] It should be understood that the processor can be a Central Processing Unit (CPU), but it can also be other general-purpose processors, digital signal processors (DSPs), application-specific integrated circuits (ASICs), field-programmable gate arrays (FPGAs), or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc. Among these, a general-purpose processor can be a microprocessor or any conventional processor.

[0024] See Figure 2 The present invention provides a method for visitor unlocking through dual-app collaboration, which may include the following steps: S201, Collaborative Generation of Authorization Information: Based on the video interaction channel established between the homeowner and a third-party, not fully trusted, individual, the homeowner's app generates encrypted authorization data containing biometric information of both parties and sends it to the third-party individual's app; specifically, the collaborative generation of authorization information includes: Two-way biometric extraction: Based on the video call initiated by the owner's app, the owner's first biometric feature is extracted, and at the same time, the second biometric feature of the third party is parsed from the video stream. Authorized data encryption and encapsulation: According to a preset encryption algorithm, the first biometric feature and the second biometric feature are encrypted to generate encrypted biometric information; Secure channel transmission: Based on the network connection established between the two apps, the encrypted biometric information is encapsulated into an authorized data packet and sent to the third-party personnel-side app.

[0025] S202, Near-field door lock authentication and network configuration: Based on the authentication result transmitted to the first door lock via near-field communication using the encrypted authorization data, the first door lock connects to a wireless access point provided by a third-party mobile terminal to access the Internet and establishes a local communication network for other door locks to access; specifically, the near-field door lock authentication and network configuration includes: Near-field data transmission: Based on the operation instructions received by the third-party personnel-side APP, the information containing the encrypted authorization data and the wireless access point credentials of the third-party personnel's mobile terminal is transmitted to the first door lock via near-field communication. Owner authentication: The first biometric feature obtained by decrypting the first door lock is compared with the locally stored biometric feature template to obtain the owner authentication result; Internet access and local networking: Based on the successful authentication of the owner, the first door lock is configured and connected to the wireless access point of a third-party personnel mobile terminal to access the Internet; at the same time, the first door lock turns on its own wireless hotspot for other door locks to access in order to form the local communication network.

[0026] S203, Temporary credential distribution and synchronization: Based on the successful verification event of the first door lock, multiple temporary unlocking credentials are generated, and the temporary unlocking credentials are distributed and synchronized to the owner's APP and all door locks within the local communication network; specifically, the temporary credential distribution and synchronization includes: Temporary credential generation: Based on the successful internet connection status of the first door lock, generate a specified number of temporary passwords locally; Encrypted distribution of credentials: The temporary password is encrypted according to the preset key, and synchronization messages are sent to the address of the master's APP and the addresses of other door locks in the network. Multi-terminal credential storage: Based on the received synchronization message, the owner's APP and other door locks decrypt and store the temporary password locally, completing the synchronization of the temporary unlocking credential.

[0027] S204, Multi-lock Coordinated Unlocking Execution: Based on an authentication request from a third party to any second lock in the local communication network, after the first lock completes final authentication, all locks in the local communication network are triggered to perform unlocking actions. Specifically, the multi-lock coordinated unlocking execution includes: Secondary authentication trigger: Based on the biometric identification operation triggered by a third party in front of the second door lock, the second door lock collects the current biometric characteristics of the third party. Intra-network authentication request: Based on the connection of the local communication network, the second door lock sends the encrypted current biometric data to the first door lock to request final authentication; Final authentication and linkage execution: Based on the result of the first lock comparing the current biometric feature with the pre-stored second biometric feature, if the match is successful, the first lock controls itself to unlock and sends a linkage unlocking command to all other locks in the network, triggering all locks to open.

[0028] In practical applications, for smart door locks in offline environments (one door with two or more locks), it is desirable to collaboratively set temporary door lock passwords via the homeowner's lock app and a third-party, not fully trusted, lock app (such as a real estate agent). For the homeowner, this means remote network connection to the lock can be achieved without being physically present. Multiple temporary passwords can be set remotely by temporarily connecting the lock to the third-party, not fully trusted, mobile WLAN hotspot, allowing the person to enter the house after successful verification, ensuring both security and convenience. A specific technical implementation scheme can be as follows: (I) Core Idea: Prerequisites: The main gate is equipped with two or more smart locks. All locks store the same WLAN hotspot information and WLAN connection configuration information, meaning these two pieces of information contain the same WLAN hotspot SSID (Service SetIdentifier, wireless network name) and password. The advantage of keeping the WLAN hotspot information and WLAN connection configuration information consistent is that any lock can use this information to activate its own hotspot or connect to hotspots activated by other locks. Subsequently, after any lock activates its own WLAN hotspot (using the aforementioned SSID name and password), other locks can connect to that WLAN hotspot using the same SSID and password. Furthermore, both A and a third-party, not fully trusted individual (B, such as an intermediary) have installed and registered the lock's app. When A initializes the lock configuration using the app, they have configured a shared key for each lock and stored A's facial feature vector in each lock.

[0029] Core process: A and B establish a connection and conduct a video call through their respective door lock apps. A's app obtains A's facial feature vector and obtains B's facial feature vector through the video feed, encrypts it, and sends it to B's app. B's app, based on the encrypted facial feature vectors from A and B, further adds B's mobile WLAN hotspot name and password, A's mobile app ID and IP information, etc., and encapsulates it into a data packet.

[0030] B brings their phone close to the NFC (Near Field Communication) sensing area of ​​any door lock (e.g., Lock_A, assuming Lock_A is positioned low for easy phone access). Through NFC communication, B sends encrypted facial feature vectors of both A and B, B's phone's WLAN hotspot information (which Lock_A will later connect to for internet access), and A's phone's ID and IP information (which the door lock, knowing after setting a temporary password, can use to send to A's app). After successful verification using A's facial feature vector, Lock_A saves B's facial feature vector locally and connects to B's WLAN hotspot using B's WLAN hotspot information to access the internet. Simultaneously, Lock_A activates its own WLAN hotspot, allowing other door locks to automatically connect and access the internet (Lock_A configures IP addresses for other door locks via the door lock's DHCP service, thus obtaining their IP information).

[0031] Lock_A then uses an encryption algorithm to randomly generate multiple temporary passwords and stores them locally. These temporary passwords are then unicasted to A's app and all other door locks connected to its WLAN hotspot via the internet. The temporary passwords are stored locally by A's app and the other door locks.

[0032] B then performs facial authentication in front of any other lock (such as Lock_B, assuming Lock_B is positioned higher for easier face capture). This lock obtains B's facial feature vector, encrypts it, and sends it to Lock_A. Lock_A decrypts the vector and compares it with B's locally stored facial feature vector. If the comparison is successful, it unlocks itself and notifies all other locks to unlock as well, completing the unlocking of all locks and facilitating B's entry.

[0033] If a real estate agent brings another client to view the property, the landlord can provide the agent with a temporary password. The agent enters the temporary password on any lock (e.g., Lock_A). The lock unlocks after successful local verification and marks the password as expired from its local temporary password list (a temporary password can only be used once). Then, the agent activates its own Wi-Fi hotspot. When other locks connect to this Wi-Fi hotspot, Lock_A sends the temporary password entered by the agent to them for verification. Each lock compares the received temporary password with its locally stored temporary password. If successful, the lock also marks the password as expired from its local temporary password list and unlocks. Once all locks are open, the agent can enter the property.

[0034] (II) Complete technical implementation process: 1. Prerequisites: The main gate is equipped with two or more smart door locks (Lock_A, Lock_B, Lock_C, etc.), supports NFC reading and writing, has a WiFi module, and supports connecting to WLAN hotspots.

[0035] Phone A has a door lock app (APP_A) installed and a user account registered (unique ID: APP_A_ID, bound to phone A's phone number). As the administrator, A has configured and associated all smart door locks for the gate through APP_A, configuring each lock's WLAN hotspot with the same SSID (Lock_WLAN_SSID) and password (Lock_WLAN_PSW). A has also configured each lock's WLAN connection with the name and password Lock_WLAN_SSID and Lock_WLAN_PSW, and enabled automatic connection. This configuration means that when any lock subsequently activates its own WLAN hotspot (SSID: Lock_WLAN_SSID, password: Lock_WLAN_PSW), other locks can connect to that WLAN hotspot using Lock_WLAN_SSID and Lock_WLAN_PSW. During the initial configuration of the door locks, APP_A has configured a shared key for each lock and stored A's facial feature vector in each lock.

[0036] A requests that a third party (B, such as an intermediary) who is not entirely trusted download and install the door lock app (APP_B) beforehand, and register a user account via mobile phone number verification (the unique ID is APP_B_ID, which is bound to B's mobile phone number). APP_B must have NFC interaction permissions on the mobile phone.

[0037] 2. Network connection and interaction between mobile apps A and B: A requests B's assistance (by informing B of the operation method via phone or other means) to assist A in setting a temporary password at the smart lock.

[0038] Both A and B open the app, log in via the internet, and connect to the door lock's cloud management platform. A searches for B's phone number using app_A, finds B, and establishes a connection with app_B via the door lock's cloud management platform over the internet (both are mature technologies and will not be elaborated upon). After establishing the connection, both app_A and app_B obtain each other's app ID (APP_A_ID, APP_B_ID), IP address (APP_A_IP, APP_B_IP), and display the connection interface in their respective apps. The interface includes the other party's name (A, B), app ID, connection status (connected), etc. App_B's interface also displays a "video call" button.

[0039] B walks to the smart lock and, on the interface connecting APP_B and APP_A, clicks the "Video Call" button. Afterwards, APP_B and APP_A can conduct video calls (a mature technology, not elaborated upon). During the video call, A clicks the "Send Face Verification Authorization Information" button. APP_A then obtains A's facial feature vector through A's phone camera and B's facial feature vector through the video call screen. After encrypting the facial feature vectors, it sends a "Face Verification Authorization Notification Message" to APP_B, containing the message ID, message type (Face Verification Authorization Notification Message), sender ID (APP_A_ID), receiver ID (APP_B_ID), sender IP (APP_A_IP), receiver IP (APP_B_IP), face verification authorization information (encrypted A's facial feature vector and encrypted B's facial feature vector), and message timestamp.

[0040] After receiving the message and parsing the facial verification authorization information, APP_B will automatically check whether the phone's Wi-Fi hotspot and NFC functions are enabled, and provide prompts as appropriate. For example, if the phone's Wi-Fi hotspot and / or NFC are not enabled, it will prompt "A has authorized the temporary password setting. Please enable the phone's Wi-Fi hotspot and / or NFC, and then click confirm." After B clicks confirm, APP_B will check again whether the phone's Wi-Fi hotspot and / or NFC are enabled. If any are not enabled, it will prompt again until they are enabled. Next, APP_B encapsulates the operation instructions (FaceVer_HSConn_HSEbl_PWSet_UL, i.e., verify face + connect to hotspot + turn on hotspot + set temporary password + unlock), face verification authorization information (i.e., encrypted face feature vector of A, encrypted face feature vector of B), B's mobile WLAN hotspot name and password, temporary password receiver ID (APP_A_ID), and temporary password receiver IP (APP_A_IP) into a data packet, ready to be sent via NFC communication. APP_B then displays the message: "A has authorized the temporary password setting, and the mobile WiFi hotspot and NFC have also been turned on. Now please bring the back of your phone close to the NFC sensing area (numeric keypad area) of the door lock for verification."

[0041] 3. B interacts with the door lock: App_B brings its phone close to the NFC sensing area of ​​any door lock (such as Lock_A, assuming Lock_A is positioned low so that the phone can easily reach it). App_B then sends a data packet (containing encrypted face verification authorization information, mobile WLAN hotspot credentials, temporary password recipient ID, and IP information) to Lock_A via NFC communication.

[0042] Lock_A receives and parses the data packet to obtain the operation instruction. Based on this instruction, it determines the next operation to be performed. First, Lock_A obtains the decrypted face feature vector of person A, the decrypted face feature vector of person B, the WLAN hotspot name and password of person B (B_WLAN_SSID and B_WLAN_PSW), and saves the face feature vector of person B, the temporary password recipient ID, and IP information locally. Then, Lock_A compares the obtained face feature vector of person A with the locally saved face feature vector of person A. If the comparison fails, Lock_A issues an alarm and sends a failure feedback message to APP_B via NFC, including the operation type (NFC data verification) and the operation result (verification failed). If the comparison is successful, Lock_A further uses the WLAN hotspot name (B_WLAN_SSID) and password (B_WLAN_PSW) information from phone B to automatically configure the door lock's wireless network and connect to the internet. Lock_A's IP address (Lock_A_IP) is assigned by the DHCP service of phone B's WLAN hotspot. Then, it sends a successful verification feedback message to APP_B via NFC, including the operation type (NFC data verification), operation result (verification successful), and response content (0: hotspot connection successful; 1: hotspot connection failed. Normal is 0). Afterward, Lock_A also turns on its own WLAN hotspot, and other door locks automatically connect to Lock_A's WLAN hotspot using the pre-configured WLAN hotspot SSID (Lock_WLAN_SSID) and password (Lock_WLAN_PSW) information, thus also connecting to the internet. The IP addresses of each door lock (such as Lock_B_IP, Lock_C_IP) are assigned by the DHCP service of Lock_A's WLAN hotspot. After Lock_A establishes a WLAN hotspot connection with other door locks, it can communicate to obtain each other's ID and IP information.

[0043] Lock_A randomly generates multiple (e.g., 5) temporary passwords locally using an encryption algorithm and stores them locally; then, based on the temporary password recipient information (APP_A_ID and APP_A_IP), it sends a "temporary password synchronization message" to APP_A, including message ID, message type (temporary password synchronization message), sender ID (Lock_A_ID), recipient ID (APP_A_ID), sender IP (Lock_A_IP), recipient IP (APP_A_IP), temporary password list (encrypted using a shared key), temporary password validity period, and message timestamp; similarly... Lock_A also unicasts "temporary password synchronization information" to all other locks connected to its WLAN hotspot. This information includes a message ID, message type (temporary password synchronization message), sender ID (Lock_A_ID), receiver IDs (Lock_B_ID, Lock_C_ID, etc.), sender IP (Lock_A_IP), receiver IPs (Lock_B_IP, Lock_C_IP, etc.), a list of temporary passwords (encrypted using a shared key), the temporary password validity period, and a message timestamp. Each receiving lock saves the temporary password locally upon receiving it. At this point, Lock_A has completed setting the temporary password and synchronized the temporary password information with APP_A and other locks for future unlocking.

[0044] 4. This door lock is directly authorized for unlocking: As mentioned earlier, after receiving the successful verification feedback from Lock_A via NFC, APP_B also prompts "NFC data verification successful, door lock mobile WLAN hotspot connection successful. Now please stand in front of any other door lock for face verification to unlock." B stands in front of any other door lock (such as Lock_B, assuming Lock_B is positioned higher to facilitate face capture) for face authentication. After Lock_B obtains B's facial feature vector, it sends an "unlock authentication request message" to Lock_A via network connection, containing message ID, message type (unlock authentication request message), sender ID (Lock_B_ID), receiver ID (Lock_A_ID), sender IP (Lock_B_IP), receiver IP (Lock_A_IP), face verification information (encrypted B's facial feature vector), and message timestamp. Upon receiving the message, Lock_A decrypts the facial feature vector of person B in the message and compares it with the facial feature vector of person B that APP_A had previously sent to Lock_A via NFC through APP_B and which is now stored locally. If the comparison is successful, Lock_A automatically unlocks the door (indicating that the person currently in the lock is indeed the one who just had a video call with the homeowner) and unicasts a "linked unlock notification message" to all other locks connected to its WLAN hotspot. This message includes the message ID, message type (linked unlock notification message), sender ID (Lock_A_ID), receiver IDs (IDs of all other locks connected to its WLAN hotspot, such as Lock_B_ID, Lock_C_ID), sender IP (Lock_A_IP), receiver IP (such as Lock_B_IP, Lock_C_IP), and message timestamp. Upon receiving this message, the other locks also automatically unlock. Once all locks are open, person B can enter the house.

[0045] 5. Subsequent door lock unlocking via temporary password verification: The temporary password generated by the door lock can be used by the real estate agent when showing the property to clients. The homeowner tells the temporary password to the agent and marks it as used in the app. The agent enters the temporary password using any door lock (e.g., Lock_A). Lock_A compares the temporary password with its locally stored list of temporary passwords (including password information comparison and expiration date comparison). If one or more passwords fail to match, an alarm is triggered. If the match is successful, Lock_A unlocks the door and marks the password as expired (i.e., it expires after one use) in its locally stored list. Then, Lock_A activates its own WLAN hotspot (the hotspot SSID and password are Lock_WLAN_SSI and Lock_WLAN_PSW, respectively), allowing other door locks to connect to the WLAN hotspot (since Lock_A is not connected to the internet at this time, multiple locks communicate via a local area network). Next, Lock_A unicasts a "temporary password verification message" containing a message ID, message type (temporary password verification message), and sender ID (Lock_A_ID). The system records the following information: receiver ID (Lock_B_ID, Lock_C_ID, etc.), sender IP (Lock_A_IP), receiver IP (Lock_B_IP, Lock_C_IP, etc.), temporary password information, and message timestamp. The receiver's lock then uses this temporary password information to compare it against a locally stored list of temporary passwords (including comparison of the temporary password information and its expiration date). If one or more comparisons fail, an alarm is triggered, and a failure message is sent to Lock_A. If the comparison is successful, the receiver's lock unlocks, and the password is marked as expired in the locally stored list of temporary passwords. Once all locks are unlocked, the intermediary can enter the house.

[0046] In the future, once any door lock is connected to the internet, it can send a "Temporary Password Expiration Synchronization Message" to APP_A (used to synchronize expired temporary password information to prevent the owner from forgetting to mark expired temporary passwords in the APP). This message includes a message ID, message type (temporary password expiration synchronization message), sender ID (e.g., Lock_A_ID), receiver ID (APP_A_ID), sender IP (e.g., Lock_A_IP), receiver IP (APP_A_IP), a list of expired temporary passwords (1-multiple), and a message timestamp. Upon receiving this message, APP_A will mark all expired temporary passwords as used in the APP.

[0047] Traditional door lock remote password setting requires the lock to be directly connected to the internet. This solution is designed for offline environments, allowing indirect internet access via a third-party, not fully trusted, mobile WLAN hotspot. After authentication and authorization, it supports setting a temporary password (for subsequent unlocking) and unlocking the door directly for the current person entering the house. Protection points include: 1. A connection is established between the APP of the owner and the APP of a third-party incompletely trusted person, and a video call is performed between the two APPs. The owner's APP acquires its own facial feature vector, acquires the facial feature vector of the third-party person through video frames, encrypts the facial feature vectors and sends them to the third-party person's APP, which then sends the encrypted facial feature vectors to the door lock; after verifying the owner's facial feature vector, the door lock trusts the WiFi hotspot information provided by the third-party person's APP, connects to the Internet, and simultaneously activates its own hotspot to allow other door locks to access the Internet.

[0048] 2. A third-party person performs face authentication in front of any other door lock, the door lock sends its encrypted facial feature vector to Lock_A, Lock_A decrypts the encrypted facial feature vector and compares it with the locally stored facial feature vector of the third-party person, after the comparison is passed, the door lock unlocks itself and notifies other door locks to unlock, completing the unlocking of all door locks this time.

[0049] It can be seen that, based on the video interaction channel established between the house owner and the third-party incompletely trusted person, the owner-side APP generates encrypted authorization data containing the biometric information of both parties; based on the authentication result obtained after the encrypted authorization data is transmitted to the first door lock via near-field communication, the first door lock connects to the wireless access point provided by the third-party person's mobile terminal to access the Internet, and constructs a local communication network for other door locks to access; based on the successful verification event of the first door lock, a plurality of temporary unlocking credentials are generated; in response to the trigger authentication request from any second door lock in the local communication network initiated by the third-party person, after the first door lock completes the final authentication, all door locks in the local communication network are triggered to perform an unlocking action, thereby realizing multi-door lock temporary authorization and cooperative unlocking, and ensuring authorization security and multi-device linkage.

[0050] Another embodiment of the present invention provides a system for implementing visitor unlocking through dual-APP cooperation, see Figure 3 , the system may include: An authorization module 301, configured for collaborative generation of authorization information: based on the video interaction channel established between the house owner and the third-party incompletely trusted person, the owner-side APP generates encrypted authorization data containing biometric information of both parties, and sends the encrypted authorization data to the third-party person-side APP; An authentication module 302, configured for near-field door lock authentication and network configuration: based on the authentication result obtained after the encrypted authorization data is transmitted to the first door lock via near-field communication, the first door lock connects to the wireless access point provided by the third-party person's mobile terminal to access the Internet, and constructs a local communication network for other door locks to access; A distribution module 303, configured for temporary credential distribution and synchronization: based on the successful verification event of the first door lock, a plurality of temporary unlocking credentials are generated, and the temporary unlocking credentials are distributed and synchronized to the owner-side APP and all door locks in the local communication network; The unlocking module 304 is used for multi-lock collaborative unlocking: based on the trigger authentication request of any second door lock in the local communication network by a third party, after the first door lock completes the final authentication, it triggers all door locks in the local communication network to perform unlocking actions.

[0051] This invention also provides a storage medium storing a computer program, wherein the computer program is configured to execute the steps in any of the above method embodiments when running.

[0052] This invention also provides an electronic device, including a memory and a processor, wherein the memory stores a computer program, and the processor is configured to run the computer program to perform the steps in any of the above method embodiments.

[0053] Specifically, the aforementioned electronic device may further include a transmission device and an input / output device, wherein the transmission device is connected to the aforementioned processor, and the input / output device is connected to the aforementioned processor.

[0054] The above description, based on the embodiments shown in the figures, details the structure, features, and effects of the present invention. The above description is only a preferred embodiment of the present invention, but the present invention is not limited to the scope of implementation shown in the figures. Any changes made in accordance with the concept of the present invention, or equivalent embodiments modified to have equivalent changes, that do not exceed the spirit covered by the specification and figures, should be within the protection scope of the present invention.

Claims

1. A method for enabling visitor unlocking through dual-app collaboration, characterized in that, The method includes: Collaborative generation of authorization information: Based on the video interaction channel established between the homeowner and a third-party non-fully trusted person, the homeowner's app generates encrypted authorization data containing the biometric information of both parties and sends it to the third-party person's app. Near-field door lock authentication and network configuration: Based on the authentication result transmitted to the first door lock via near-field communication according to the encrypted authorization data, the first door lock connects to the wireless access point provided by a third-party personnel mobile terminal to access the Internet and builds a local communication network for other door locks to access. Temporary credential distribution and synchronization: Based on the successful verification of the first door lock, multiple temporary unlocking credentials are generated, and the temporary unlocking credentials are distributed and synchronized to the owner's APP and all door locks in the local communication network; Multi-lock collaborative unlocking execution: Based on the authentication request triggered by any second door lock in the local communication network by a third party, after the first door lock completes the final authentication, all door locks in the local communication network are triggered to perform unlocking actions.

2. The method according to claim 1, characterized in that, The collaborative generation of the authorization information includes: Two-way biometric extraction: Based on the video call initiated by the owner's app, the owner's first biometric feature is extracted, and at the same time, the second biometric feature of the third party is parsed from the video stream. Authorized data encryption and encapsulation: According to a preset encryption algorithm, the first biometric feature and the second biometric feature are encrypted to generate encrypted biometric information; Secure channel transmission: Based on the network connection established between the two apps, the encrypted biometric information is encapsulated into an authorized data packet and sent to the third-party personnel-side app.

3. The method according to claim 2, characterized in that, The near-field door lock authentication and network configuration include: Near-field data transmission: Based on the operation instructions received by the third-party personnel-side APP, information including the encrypted authorization data and the third-party personnel's mobile terminal wireless access point credentials is transmitted to the first door lock via near-field communication. Owner authentication: The first biometric feature obtained by decrypting the first door lock is compared with the locally stored biometric feature template to obtain the owner authentication result; Internet access and local networking: Based on the successful authentication of the owner, the first door lock is configured and connected to the wireless access point of a third-party personnel mobile terminal to access the Internet; at the same time, the first door lock turns on its own wireless hotspot for other door locks to access in order to form the local communication network.

4. The method according to claim 3, characterized in that, The temporary credential distribution and synchronization includes: Temporary credential generation: Based on the successful internet connection status of the first door lock, generate a specified number of temporary passwords locally; Encrypted distribution of credentials: The temporary password is encrypted according to the preset key, and synchronization messages are sent to the address of the master's APP and the addresses of other door locks in the network. Multi-terminal credential storage: Based on the received synchronization message, the owner's APP and other door locks decrypt and store the temporary password locally, completing the synchronization of the temporary unlocking credential.

5. The method according to claim 4, characterized in that, The multi-lock collaborative unlocking execution includes: Secondary authentication trigger: Based on the biometric identification operation triggered by a third party in front of the second door lock, the second door lock collects the current biometric characteristics of the third party. Intra-network authentication request: Based on the connection of the local communication network, the second door lock sends the encrypted current biometric data to the first door lock to request final authentication; Final authentication and linkage execution: Based on the result of the first lock comparing the current biometric feature with the pre-stored second biometric feature, if the match is successful, the first lock controls itself to unlock and sends a linkage unlocking command to all other locks in the network, triggering all locks to open.

6. A system for enabling visitor unlocking through dual-app collaboration, characterized in that, The system includes: The authorization module is used for collaborative generation of authorization information: based on the video interaction channel established between the homeowner and a third-party non-fully trusted person, the homeowner's side APP generates encrypted authorization data containing the biometric information of both parties and sends it to the third-party person's side APP; The authentication module is used for near-field door lock authentication and network configuration: based on the authentication result transmitted to the first door lock via near-field communication according to the encrypted authorization data, the first door lock connects to the wireless access point provided by the third-party personnel mobile terminal to access the Internet and builds a local communication network for other door locks to access. The distribution module is used for temporary credential distribution and synchronization: based on the successful verification of the first door lock, multiple temporary unlocking credentials are generated, and the temporary unlocking credentials are distributed and synchronized to the owner's APP and all door locks in the local communication network; The unlocking module is used for multi-lock collaborative unlocking: based on the authentication request from a third party to any second door lock in the local communication network, after the first door lock completes the final authentication, it triggers all door locks in the local communication network to perform unlocking actions.

7. The system according to claim 6, characterized in that, The authorization module is specifically used for: Two-way biometric extraction: Based on the video call initiated by the owner's app, the owner's first biometric feature is extracted, and at the same time, the second biometric feature of the third party is parsed from the video stream. Authorized data encryption and encapsulation: According to a preset encryption algorithm, the first biometric feature and the second biometric feature are encrypted to generate encrypted biometric information; Secure channel transmission: Based on the network connection established between the two apps, the encrypted biometric information is encapsulated into an authorized data packet and sent to the third-party personnel-side app.

8. The system according to claim 7, characterized in that, The authentication module is specifically used for: Near-field data transmission: Based on the operation instructions received by the third-party personnel-side APP, information including the encrypted authorization data and the third-party personnel's mobile terminal wireless access point credentials is transmitted to the first door lock via near-field communication. Owner authentication: The first biometric feature obtained by decrypting the first door lock is compared with the locally stored biometric feature template to obtain the owner authentication result; Internet access and local networking: Based on the successful authentication of the owner, the first door lock is configured and connected to the wireless access point of a third-party personnel mobile terminal to access the Internet; at the same time, the first door lock turns on its own wireless hotspot for other door locks to access in order to form the local communication network.

9. A storage medium, characterized in that, The storage medium stores a computer program, wherein the computer program is configured to execute the method of any one of claims 1-5 when it is run.

10. An electronic device comprising a memory and a processor, characterized in that, The memory stores a computer program, and the processor is configured to run the computer program to perform the method of any one of claims 1-5.

Images