Multi-factor authentication intelligent security access control system and method

Abstract

The invention provides a multi-factor authentication intelligent security access control system and method, and belongs to the technical field of attendance registration. The method comprises the following steps: an access control security terminal generates a valid security authentication code in a current period and sends the valid security authentication code to a user mobile terminal in response to that a preset condition is met; in response to successful connection of the near field communication, the access control security terminal reads a security authentication code received by the user mobile terminal; when the security authentication code is in the current effective period, triggering the user mobile terminal to call a pre-associated target application program; and in response to successful calling of the target application program, the access control security terminal passes the authentication of the current user mobile terminal. And the user mobile terminal stores the security authentication code sent by the access control security terminal to a plurality of preset storage positions corresponding to the plurality of near field communication modes. The system is combined with multi-factor authentication, supports various near field communication and personalized authorization, gives consideration to safety and convenience, and is adaptive to owners and visitors.

Description

Technical Field

[0001] This invention relates to intelligent access control technology that combines identity verification with that of the certificate holder, to the field of attendance registration technology, and particularly to a multi-factor authentication intelligent security access control system and method. Background Technology

[0002] With the acceleration of urbanization and the popularization of smart buildings, the current mainstream access control technology has gradually evolved from early mechanical keys and combination locks to various forms such as IC cards, biometrics (fingerprints, faces, irises) and mobile authentication. However, there are still many pain points that need to be addressed in practical applications.

[0003] From a security perspective, traditional single-factor authentication mechanisms have significant vulnerabilities. Mechanical keys and IC cards are easily lost, stolen, or copied, and the widespread use of IC card cloning devices has drastically reduced the anti-counterfeiting capabilities of cards. Password locks face risks such as password leaks and brute-force attacks, especially in high-traffic office areas or communities where password sharing is common, further amplifying security risks. While biometric technology was once considered the "ultimate solution," its privacy risks cannot be ignored—fingerprints, faces, and other biometric features are unique and unchangeable; once the database is compromised, users face permanent security threats.

[0004] In terms of convenience and adaptability, existing systems are insufficiently adapted to different user groups. For homeowners or long-term users, most systems adopt a fixed permission model, which cannot be dynamically adjusted according to their behavioral habits. For example, users who are used to leaving early and returning late still need to repeat the cumbersome authentication process, while scenarios such as working overtime or visiting relatives and friends require additional permission applications, resulting in redundant operations. For temporary visitors, the traditional process is even more inefficient: visitors need to register their identity information at the front desk, obtain temporary vouchers (such as paper passes or temporary IC cards), and return them when leaving. This is not only time-consuming and labor-intensive, but also carries the risk of lost or misused vouchers. In large communities or parks, visitor registration during peak hours may even cause congestion at the entrance, affecting the access experience.

[0005] From a management efficiency perspective, the existing system has weak dynamic adjustment capabilities. Administrators need to manually maintain the user permission list. In scenarios with frequent personnel turnover (such as business visitors and construction workers), the granting and revoke of permissions rely entirely on manual operation, which is prone to oversights. At the same time, the system lacks the ability to analyze user behavior data and cannot optimize permission policies based on information such as historical access time, location, and frequency. This leads to a prevalent "one-size-fits-all" management model, which not only affects the access efficiency of legitimate users but may also create security risks due to excessively open permissions. Summary of the Invention

[0006] To address the aforementioned technical problems, this invention proposes a multi-factor authentication intelligent security access control system and method.

[0007] In a first aspect of the invention, a multi-factor authentication intelligent security access control method is proposed, the method being applied to at least one access control security terminal, the access control security terminal communicating with at least one user mobile terminal, the method comprising the following steps:

[0008] In response to the preset conditions being met, the access control security terminal generates a security authentication code valid for the current period and sends the security authentication code to the at least one user mobile terminal;

[0009] When the user mobile terminal and the access control security terminal are within the near-field communication range, in response to the successful connection of the near-field communication, the access control security terminal reads the security authentication code received by the user mobile terminal;

[0010] When the security authentication code is within its current validity period, the user's mobile terminal is triggered to retrieve the pre-associated target application;

[0011] In response to the successful retrieval of the target application, the access control security terminal authenticates the current user's mobile terminal.

[0012] The plurality of user mobile terminals include authorized owner terminals and temporary visitor terminals;

[0013] The security authentication code is divided into an authorization authentication code for the corresponding authorized owner terminal and a visitor authentication code for the corresponding temporary visitor terminal; the visitor authentication code embeds a one-time temporary mapping ID, which is only temporarily bound to the owner's identity during the authorized period.

[0014] In one scenario, the preset condition is met, including: reaching the target time period;

[0015] The target time period corresponds to each user's mobile terminal, and each user's mobile terminal corresponds to multiple target time periods, and the multiple target time periods corresponding to at least two user's mobile terminals are not completely the same.

[0016] The multiple target time periods corresponding to each user mobile terminal are determined by the access control security terminal based on the time, location, and frequency of each user mobile terminal passing through the access control security terminal within a preset historical time period.

[0017] In another scenario, the preset conditions are met, including: the access control security terminal receives a request code from the first user mobile terminal, and the request code requests the access control security terminal to issue a security authentication code to the designated second user mobile terminal;

[0018] The first user mobile terminal sends the request code to the access control security terminal after successfully retrieving the target application.

[0019] A successful near-field communication connection may be initiated in one of the following ways:

[0020] The access control security terminal and the user mobile terminal successfully connected via Bluetooth;

[0021] The access control security terminal and the user's mobile terminal successfully connected via a Wi-Fi hotspot;

[0022] The access control security terminal and the user's mobile terminal successfully connected via NFC.

[0023] The user's mobile terminal saves the received security authentication code to multiple preset storage locations corresponding to various near-field communication methods.

[0024] In a second aspect of the invention, a multi-factor authentication intelligent security access control method is proposed, the method being applied to at least one user mobile terminal, the user mobile terminal communicating with at least one access control security terminal, the method comprising:

[0025] The user mobile terminal saves the security authentication code sent by the access control security terminal to multiple preset storage locations corresponding to various near-field communication methods;

[0026] When the user mobile terminal and the access control security terminal are within the near-field communication range, in response to the successful connection of the near-field communication, the access control security terminal reads the security authentication code received by the user mobile terminal;

[0027] When the security authentication code is within its current validity period, the user's mobile terminal is triggered to retrieve the pre-associated target application;

[0028] In response to the successful retrieval of the target application, the access control security terminal authenticates the current user's mobile terminal.

[0029] Among them, the various near-field communication methods include Bluetooth near-field communication, WIFI hotspot near-field communication, and NFC.

[0030] The multiple user mobile terminals include authorized owner terminals and temporary visitor terminals;

[0031] The security authentication code is divided into an authorization authentication code for the corresponding authorized owner terminal and a visitor authentication code for the corresponding temporary visitor terminal; the visitor authentication code embeds a one-time temporary mapping ID, which is only temporarily bound to the owner's identity during the authorized period.

[0032] In one scenario, the user's mobile terminal is an authorized owner's terminal;

[0033] When the target time period is reached, the access control security terminal generates a security authentication code valid for the current period and sends the security authentication code to the authorized owner terminal;

[0034] The target time period corresponds to each authorized owner terminal, each authorized owner terminal corresponds to multiple target time periods, and the multiple target time periods corresponding to at least two authorized owner terminals are not completely the same;

[0035] The multiple target time periods corresponding to each authorized owner terminal are determined by the access control security terminal based on the time, location, and frequency of each authorized owner terminal passing through the access control security terminal within a preset historical time period.

[0036] In another scenario, the user's mobile terminal is a temporary visitor terminal;

[0037] After the temporary visitor terminal submits an access request to the authorized owner terminal, the authorized owner terminal sends a request code to the access control security terminal, and the request code requests the access control security terminal to issue a security authentication code to the designated temporary visitor terminal.

[0038] The authorized owner terminal sends the request code to the access control security terminal after successfully retrieving the target application.

[0039] In a third aspect of the present invention, in order to implement the methods described in the first and second aspects, a multi-factor authentication intelligent security access control system is also proposed, the system comprising multiple user mobile terminals and multiple access control security terminals;

[0040] The multiple access control security terminals are located at the entrances of multiple geographically separated target areas;

[0041] The multiple user mobile terminals include authorized owner terminals and temporary visitor terminals;

[0042] When the target time period is reached, the access control security terminal generates a security authentication code valid for the current period and sends the security authentication code to the authorized owner terminal; the multiple target time periods corresponding to each authorized owner terminal are determined by the access control security terminal based on the time, location, and frequency of each authorized owner terminal passing through the access control security terminal within a preset historical time period;

[0043] After the temporary visitor terminal submits an access request to the authorized owner terminal, the authorized owner terminal sends a request code to the access control security terminal, and the request code requests the access control security terminal to issue a security authentication code to the designated temporary visitor terminal.

[0044] The user mobile terminal saves the security authentication code sent by the access control security terminal to multiple preset storage locations corresponding to various near-field communication methods;

[0045] When the user mobile terminal and the access control security terminal are within the near-field communication range, in response to the successful connection of the near-field communication, the access control security terminal reads the security authentication code received by the user mobile terminal;

[0046] When the security authentication code is within its current validity period, the user's mobile terminal is triggered to retrieve the pre-associated target application;

[0047] In response to the successful retrieval of the target application, the access control security terminal authenticates the current user's mobile terminal.

[0048] Among them, the various near-field communication methods include Bluetooth near-field communication, WIFI hotspot near-field communication, and NFC.

[0049] In a fourth aspect of the present invention, an electronic terminal device is also provided, which may be a user handheld mobile terminal device and a security access control terminal device. The electronic terminal device includes a memory and a processor. The memory stores computer program instructions. When the processor executes the computer program instructions, the multi-factor authentication intelligent security access control method described in the first or second aspect is implemented.

[0050] In response to the numerous problems existing in the prior art, this invention effectively solves the pain points of traditional access control systems, such as weak security, poor adaptability, and inefficient management, through targeted technical improvements. The technical effects and advantages of the improvements are outstanding.

[0051] In terms of security, a multi-factor authentication method of "dynamic security authentication code + target application retrieval" is adopted. The security code is only valid for the current period and authentication is only passed if the associated application is successfully retrieved, thus eliminating the risk of fixed credentials being intercepted and reused. At the same time, the security code is stored in preset locations corresponding to multiple near-field communication methods such as Bluetooth, WiFi hotspot, and NFC. This not only supports multi-mode communication to adapt to different scenarios (such as Bluetooth for two-handed objects and NFC for fast sensing), but also avoids authentication failure caused by interference with a single communication.

[0052] In terms of user compatibility and convenience, for authorized owners, the system determines a specific target time period based on their preset historical access time, location, and frequency, and pushes security codes on a regular basis, eliminating the need for repeated authentication; for temporary visitors, the security code can be issued simply by the authenticated owner sending a request code to the access control terminal, saving the manual registration and temporary certificate process and improving access efficiency.

[0053] In terms of management efficiency, the system automatically generates personalized authorization periods based on the owner's historical data, eliminating the need for administrators to manually maintain the permission list and reducing human error.

[0054] As can be seen, the overall solution of this invention achieves a synergistic improvement in security, convenience and intelligent management, and is suitable for use in multiple scenarios such as communities, parks and residential areas, taking into account both the long-term access needs of residents and the temporary access needs of visitors.

[0055] Further advantages of the present invention will be further detailed in the Specific Embodiments section in conjunction with the accompanying drawings. Attached Figure Description

[0056] To more clearly illustrate the technical solutions in the embodiments of the present invention or the prior art, the drawings used in the embodiments will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present invention. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.

[0057] Figure 1 This is a schematic diagram illustrating the steps of a multi-factor authentication intelligent security access control method applied to an access control security terminal according to an embodiment of the present invention;

[0058] Figure 2 yes Figure 1 A flowchart illustrating the process of generating a security authentication code valid for the current period;

[0059] Figure 3 This is a schematic diagram illustrating the steps of a multi-factor authentication smart security access control method applied to a user's mobile terminal according to an embodiment of the present invention;

[0060] Figure 4 It is to achieve Figure 1 or Figure 3 A schematic diagram of the hardware scenario of the multi-factor authentication intelligent security access control system described in the multi-factor authentication intelligent security access control method;

[0061] Figure 5 This is a schematic diagram of the overall hardware / software architecture and terminal interaction for implementing the technical solution of this invention. Detailed Implementation

[0062] Exemplary embodiments will now be described in detail, examples of which are illustrated in the accompanying drawings. When the following description relates to the drawings, unless otherwise indicated, the same numbers in different drawings denote the same or similar elements. The embodiments described in the following exemplary embodiments do not represent all embodiments identical to those described in this application. Rather, they are merely examples of apparatuses and methods identical to some aspects of this application as detailed in the appended claims.

[0063] In specific embodiments of this application, if user-related data is involved, user permission or consent must be obtained when the embodiments of this application are applied to specific products or technologies, and the collection, use and processing of related data must comply with the relevant laws, regulations and standards of the relevant countries and regions.

[0064] First see Figure 1 . Figure 1 This is a schematic diagram illustrating the steps of a multi-factor authentication intelligent security access control method applied to an access control security terminal according to an embodiment of the present invention. The access control security terminal and at least one user mobile terminal can realize near-field wireless communication in various ways, including Bluetooth near-field communication, WIFI hotspot near-field communication, and NFC.

[0065] Figure 1 The method described herein includes steps S100-S400, and each step is implemented as follows:

[0066] S100: In response to the preset condition being met, the access control security terminal generates a security authentication code valid for the current period and sends the security authentication code to the at least one user mobile terminal;

[0067] S200: When the user mobile terminal and the access control security terminal are within the near-field communication range, in response to the successful connection of the near-field communication, the access control security terminal reads the security authentication code received by the user mobile terminal;

[0068] S300: When the security authentication code is within the current validity period, the user's mobile terminal is triggered to retrieve the pre-associated target application;

[0069] S400: In response to the successful retrieval of the target application, the access control security terminal authenticates the current user's mobile terminal.

[0070] It is understandable that the description here Figure 1 The method is "applied to at least one access control security terminal," meaning that... Figure 1 The execution entity of the method can be an "access control security terminal". When describing the method, unless otherwise specified, most of the steps of the method are implemented (executed) by the "access control security terminal". However, it is understood that the overall execution of the method embodiment necessarily requires the interaction and cooperation between the "access control security terminal" and the "user mobile terminal", and the execution entity of some steps necessarily involves the "user mobile terminal".

[0071] therefore, Figure 1 The method here is "applied to at least one access control security terminal", and subsequent... Figure 3The methods described are essentially the same in that they are "applied to user mobile terminals," only with different focuses.

[0072] Next, regarding Figure 1 The steps of the method will be explained in detail.

[0073] First, in step S100: in response to the preset condition being met, the access control security terminal generates a security authentication code valid for the current period and sends the security authentication code to the at least one user mobile terminal.

[0074] Step S100 emphasizes that the access control security terminal proactively sends a security authentication code to the user's mobile terminal when preset conditions are met. The user's mobile terminal here includes authorized owner terminals and temporary visitor terminals.

[0075] Authorized owner terminals refer to resident users in the target area who have pre-entered relevant identity authentication information into the central database of the access control system based on their relevant identity information.

[0076] As described in the background section, in the prior art, access control systems, based on the aforementioned authentication information, can grant authentication (access) permissions through various methods such as sending physical access cards to authorized owner terminals (virtual access cards can also be generated via mobile phones), recording biometric features, and assigning access passwords. At the same time, relevant laws and regulations also stipulate that other authentication methods besides biometrics must be provided to meet the needs of personal privacy protection.

[0077] However, each of these single-factor authentication methods has its own drawbacks. The static nature of the authentication mechanism leads to prominent security risks. Traditional systems rely on fixed credentials (such as long-term valid IC cards and static passwords). Once the credentials are lost or copied, unauthorized access can easily occur. Although biometrics improves security, features such as fingerprints and faces are unchangeable. Database leaks will lead to permanent privacy risks for users, and environmental factors such as humidity and obstruction can easily cause authentication failure. At the same time, there is a lack of user hierarchical management capabilities. For homeowners, permissions are often applied in a "one-size-fits-all" manner, making it impossible to dynamically adjust the authentication process based on their historical travel patterns (such as commuting at 8 am and returning home at 6 pm), resulting in frequent and repetitive verifications that degrade the user experience. For visitors, manual registration and obtaining temporary credentials (such as paper slips or temporary cards) are required, which is cumbersome and carries the risk of credential misuse, potentially causing congestion at entrances in densely populated areas (such as communities and industrial parks). Furthermore, administrators need to manually maintain the user permission list, and granting and revoking permissions for short-term visitors (such as construction workers) relies on manual operations, which can easily lead to oversights. The lack of ability to analyze user behavior data makes it impossible to optimize permission strategies based on information such as historical access times and frequencies, resulting in contradictions between "over-authorization" and "insufficient permissions."

[0078] Therefore, the technical solution of this application is proposed.

[0079] In the following description of this invention, different terms may be used to describe the same object to better fit different contexts, such as "terminal" and "device", "authorized user", "authorized owner" and "authorized terminal", "temporary visitor" and "temporary terminal", "user terminal", "mobile terminal" and "smartphone", etc.

[0080] Understandably, authorized resident terminals should have the ability to freely enter and exit the entire area around the clock (with access control security authentication) and can apply for access time slots at any time; while temporary visitor terminals can only have the ability to enter and exit the community at specific times / locations after being authorized / invited.

[0081] Therefore, in the various embodiments of the present invention, the user mobile terminal is divided into two cases: authorized owner terminal and temporary visitor terminal, which will be described in detail.

[0082] When performing step S100, for the authorized owner terminal, the preset conditions are met, including: reaching the target time period;

[0083] The target time period corresponds to each user's mobile terminal, each user's mobile terminal corresponds to at least one target time period, and the multiple target time periods corresponding to at least two user's mobile terminals are not completely the same.

[0084] At this point, there are two ways to determine the target time period:

[0085] (1) Active determination of authorized users: This method is suitable for the early operation stage of the access control system and temporary access for users outside of their regular access habits.

[0086] (2) Autonomous learning determination of access control security terminal: After the access control system has been running for a long time and has obtained enough historical access habit data of each authorized user, it can autonomously determine multiple target time periods for each user terminal. That is, the multiple target time periods corresponding to each user mobile terminal are determined by the access control security terminal based on the access habit data such as time, location, and frequency of each user mobile terminal passing through the access control security terminal within the preset historical time period.

[0087] Regarding method (1), it can be understood that as long as an authorized user has a need for passage, they can define the current time period as the target time period at any time.

[0088] For example, users can preset multiple target time periods (e.g., 7:00-8:30 AM, 5:00-10:00 PM) according to their own habits, and can update the target time periods at any time;

[0089] For example, if a user has a temporary need for passage outside of a preset target time period, they can submit a temporary passage application. This can be done by submitting the application with a single click via a pre-associated target application on the terminal, with the next time period (e.g., the next hour) being the default target time period. In practice, the application can be executed with a single click using a shortcut key set on the terminal.

[0090] Therefore, when performing step S100, for the authorized owner terminal, the preset conditions being met also include: the access control security terminal receiving a request code from the first user mobile terminal, the request code requesting the access control security terminal to issue a security authentication code to the designated second user mobile terminal; wherein, the first user mobile terminal sends the request code to the access control security terminal after successfully retrieving the target application.

[0091] In this scenario, the second user mobile terminal can be the same as the first user mobile terminal (the authorized user requests a temporary request code to itself), or it can be different (the authorized user has two authorized terminal devices A and B, and is currently using authorized terminal A as the first user mobile terminal, requesting to send a request code to the second user mobile terminal (authorized terminal device B)).

[0092] After running for a longer period of time (a longer number of passes) based on method (1), each authorized user has enough historical pass data, and at this time the self-learning stage of method (2) can be executed.

[0093] Of course, it is understandable that even if one has entered the self-learning stage of method (2) and can independently determine multiple target time periods, the method of setting target time periods in method (1) is still effective, and the method of setting target time periods in method (1) has a higher priority than method (2) in order to ensure the autonomy of the authorized owner.

[0094] As a specific embodiment of method (2), the access control security terminal analyzes the historical access data (time, location, frequency) of authorized users and autonomously generates personalized target time periods to achieve intelligent management of "on-demand push of security authentication codes".

[0095] The data collection dimensions include the precise time of each passage (e.g., 7:35, 18:20), the location of passage (e.g., the main gate of the community, the entrance to the underground parking garage), and the weekly passage frequency (e.g., high frequency on weekdays, low frequency on weekends).

[0096] The analysis model uses an improved K-means clustering algorithm to cluster historical data for three consecutive months into "high-traffic periods" (such as weekdays 7:00-8:30 and 18:00-20:00) and "sparse periods," and calculates the confidence level of each period (periods with ≥80% confidence are marked as the target period).

[0097] The model is also configured with dynamic adjustment rules:

[0098] Periodic Updates: Data is re-analyzed every 30 days. If user travel habits change (such as working overtime leading to a later return time), the target time period is automatically adjusted.

[0099] Manual intervention is prioritized: Users can manually add / delete time periods through the target application (e.g., adding "Wednesday 14:00-15:00" for temporary business trips). Manually set time periods have higher priority than system-generated time periods, ensuring user autonomy.

[0100] Compared to traditional "24-hour authorization" or "fixed-time authorization", this mechanism makes the generation and push of security authentication codes more accurate, reduces the transmission of invalid codes (reducing redundant communication by 80%), and at the same time reduces authentication interference on user terminals by "pushing only during the target time period", thus improving the user experience.

[0101] Figure 2 The flowchart illustrating the method for generating a valid security authentication code for the current period is shown, mainly including steps S101-S103 (executed by the access control security terminal):

[0102] S101: Obtain the time, location, and frequency of each user's mobile terminal passing through the access control security terminal within a preset historical time period;

[0103] S102: Determine multiple target time periods corresponding to each user's mobile terminal;

[0104] S103: When the target time period is reached, generate a security authentication code valid for the current period and send the security authentication code to the user's mobile terminal.

[0105] The multiple user mobile terminals include authorized owner terminals and temporary visitor terminals;

[0106] The security authentication code is divided into an authorization authentication code corresponding to the authorized owner's terminal and a visitor authentication code corresponding to the temporary visitor's terminal.

[0107] The authorization and authentication code limits the location and time period that the relevant user's mobile terminal (especially the authorized owner's terminal) is allowed to pass through the access control security terminal;

[0108] In addition to limiting the location and time period of access control security terminals that relevant user mobile terminals (especially temporary visitor terminals) are allowed to pass through, the visitor authentication code also embeds a one-time temporary mapping ID, which is only temporarily bound to the owner's identity during the authorized time period.

[0109] It is understood that the user mobile terminal mentioned in steps S101-S103 here is preferably an authorized owner terminal.

[0110] The user's mobile terminal saves the received security authentication code to multiple preset storage locations corresponding to various near-field communication methods.

[0111] For each authorized user terminal, its relevant identity tags (including hardware ID, terminal physical ID such as IMEI and other unique identification codes, terminal ID number) can be identified by the access control security terminal. Therefore, when the authorized user terminal and the access control security terminal are within the near-field communication range, the near-field communication will automatically and successfully connect.

[0112] The various near-field communication methods include Bluetooth near-field communication, WIFI hotspot near-field communication, and NFC.

[0113] Each authorized user terminal supports at least one of the above near-field communication methods.

[0114] Preferably, considering the current prevalence of smart devices, each authorized user terminal must support WIFI hotspot near-field communication (in actual applications, early non-smartphones have been gradually phased out).

[0115] Preferably, each authorized user terminal simultaneously supports Bluetooth near-field communication, WIFI hotspot near-field communication, and NFC to adapt to data interaction under different network conditions.

[0116] In this embodiment, the mechanism for automatic successful near-field communication connection includes:

[0117] 1. The access control terminal periodically broadcasts detection signals (Bluetooth beacon, WiFi probe, NFC field strength signal);

[0118] 2. After receiving the signal, the user terminal automatically returns its own identity tag (encrypted and containing only the hash value of the terminal's feature code).

[0119] 3. The access control terminal compares the received feature code with the authorized tags in the database. If a match is found, a communication connection is established.

[0120] Connection priority strategies include:

[0121] Distance priority: NFC (≤10cm) takes precedence over Bluetooth (1-10m), and Bluetooth takes precedence over WiFi hotspot (5-50m) to ensure fast authentication at close range;

[0122] Stability priority: If a certain communication method fails to connect twice in a row, it will automatically switch to the next priority method (such as switching to NFC when Bluetooth is interfered with).

[0123] In practical applications, the entire process does not require the user to manually activate the communication function (the terminal system-level permissions support automatic wake-up), and the average time from "approaching the access control" to "successful connection" is ≤1 second, solving the cumbersome problem of manual operation required by traditional systems.

[0124] The user mobile terminal saves the received security authentication code to multiple preset storage locations corresponding to various near-field communication methods, specifically including:

[0125] Bluetooth near-field communication, WIFI hotspot near-field communication, and NFC correspond to the Bluetooth storage area, hotspot storage area, and NFC storage area, respectively.

[0126] Different near-field communication methods have different protocol specifications and data transmission paths (e.g., Bluetooth relies on MAC address pairing, NFC is based on the ISO14443 protocol for near-field sensing, and WiFi hotspots rely on IP address interaction). By using partitioned storage, it can be ensured that when establishing a certain type of communication connection, the access control security terminal only needs to access the corresponding storage area to read the authentication code, avoiding compatibility issues related to cross-protocol data access.

[0127] If a certain type of communication method is interfered with by the environment (such as Bluetooth signal being blocked), the access control terminal can automatically switch to other communication methods and read the authentication code in the corresponding storage area to ensure authentication continuity;

[0128] Each storage area uses an independent encryption algorithm (e.g., the Bluetooth area uses AES-128 encryption, and the NFC area uses the SM4 national cryptographic algorithm), so that even if data in one storage area is leaked, the other areas remain secure;

[0129] Targeted reading of the corresponding storage area can reduce data retrieval time and improve the authentication response speed to within 500ms.

[0130] Next, proceed to step S200: In response to the successful near-field communication connection, the access control security terminal reads the security authentication code received by the user's mobile terminal, specifically including:

[0131] The access control security terminal reads the security authentication code received by the user's mobile terminal from a preset storage location corresponding to the successfully connected near-field communication.

[0132] Since the above three methods cover all possible network scenarios, in practical applications, regardless of the network conditions, it can be ensured that at least one available near-field communication connection is successfully established, thereby ensuring that the access control security terminal can always read the security authentication code received by the user's mobile terminal in a timely manner.

[0133] Then, step S300 is executed: when the security authentication code is within the current validity period, the user mobile terminal is triggered to retrieve the pre-associated target application.

[0134] The target application pre-associated in the user's mobile terminal can be any existing application with an open API interface.

[0135] The user's mobile terminal is pre-associated with an application with an open API interface (such as Alipay, WeChat, property management app, etc.). When the security authentication code is verified to be valid, the system automatically triggers the application to be invoked, forming a dual security verification of "authentication code validity + application interaction".

[0136] Taking Alipay as an example, after Alipay opens up its relevant API interfaces, it can achieve secure authentication interconnection with the access control system of residential communities. For example, the "tap to unlock" based on NFC is implemented based on such open API interfaces.

[0137] In the embodiments of this application, the relevant open API interface can be further programmed to request to call the Alipay APP after successfully reading the security authentication code;

[0138] At this time, when the security authentication code is within its current validity period, the user's mobile terminal is triggered to retrieve the pre-associated target application, which can specifically be:

[0139] When the user's mobile device is in normal use (unlocked), directly open the Alipay APP and prompt the user to click to confirm (this can be done via a pop-up window).

[0140] When a user's mobile device is locked, the system will prompt the user to unlock the device and then automatically open the Alipay app, prompting the user to click to confirm (this can be done via a pop-up window).

[0141] After clicking "Confirm," the process proceeds to step S400: In response to the successful retrieval of the target application, the access control security terminal authenticates the current user's mobile terminal.

[0142] As can be seen, even for authorized user terminal devices, the above method embodiments have implemented a variety of multi-factor authentication intelligent security access control, including the security authentication code in step S100, the near-field communication connection in step S200, and the pre-associated target application retrieval authentication (unlocking) in step S300.

[0143] Compared to traditional single-factor authentication, the above process incorporates multi-factor authentication, supports various near-field communication methods, and balances security and convenience. This multi-factor authentication method avoids the security risks associated with traditional access control technologies, such as lost user authorization terminals, stolen user authentication cards, and leaked passwords.

[0144] In practical applications, when performing secondary programming design on the aforementioned open API interface, three core requirements must be met:

[0145] 1. Access Control Isolation: The application only opens the "Access Control Authentication Confirmation" interface and does not disclose other user data (such as payment information);

[0146] 2. Log traceability: The application call process generates tamper-proof logs (including time, terminal ID, and operation result), which are synchronized to the access control system storage unit;

[0147] 3. Anomaly interception: If the application is not installed or the API call fails, it is judged as an anomaly, and a secondary verification step needs to be added.

[0148] Compared to the traditional "credential verification only" model, the addition of the "application retrieval + user confirmation" step can effectively prevent the terminal from being misused by others after it is lost (user interaction is required to confirm identity), reducing the risk of misuse by more than 90%.

[0149] The above mechanism constructs a closed loop of multi-factor authentication from four dimensions: data storage, interactive verification, connection efficiency, and intelligent adaptation. It not only solves the security shortcomings of traditional access control, but also balances the needs of convenience through intelligent design, forming a synergistic optimization of "security-efficiency-experience".

[0150] The above description elaborates on the method embodiments for the scenario where the user's mobile terminal is an authorized owner's terminal. In practical applications, there are also temporary visitor needs. How to achieve a similar multi-factor authentication closed loop for visitors is another problem that this invention aims to solve.

[0151] Next, the method implementation will be described in detail with the scenario of the user's mobile terminal serving as a temporary visitor terminal.

[0152] First, the temporary visitor terminal submits an access request to the authorized owner terminal;

[0153] After the temporary visitor terminal submits an access request to the authorized owner terminal, the authorized owner terminal sends a request code to the access control security terminal, and the request code requests the access control security terminal to issue a security authentication code to the designated temporary visitor terminal.

[0154] The authorized owner terminal sends the request code to the access control security terminal after successfully retrieving the target application.

[0155] Next, the access control security terminal receives a request code from the first user mobile terminal (i.e., the aforementioned authorized owner terminal), which requests the access control security terminal to issue a security authentication code to the designated second user mobile terminal (i.e., the aforementioned temporary visitor terminal).

[0156] The second user mobile terminal saves the received security authentication code to multiple preset storage locations corresponding to various near-field communication methods.

[0157] at this time, Figure 1 The second scenario in which the preset conditions of the method embodiment are met, namely the preset conditions are met, includes: the access control security terminal receives a request code from the first user mobile terminal, and the request code requests the access control security terminal to issue a security authentication code to the designated second user mobile terminal;

[0158] The first user mobile terminal sends the request code to the access control security terminal after successfully retrieving the target application.

[0159] at this time, Figure 1 Step S100 is specifically executed as follows:

[0160] In response to the preset conditions being met, the access control security terminal generates a security authentication code valid for the current period and sends the security authentication code to the temporary visitor terminal;

[0161] Step S200 is specifically executed as follows:

[0162] When the temporary visitor terminal and the access control security terminal are within the near-field communication range, in response to the successful connection of the near-field communication, the access control security terminal reads the security authentication code received by the temporary visitor terminal.

[0163] When the user's mobile terminal is a temporary visitor terminal, the execution principle of the above method steps S100-S200 is slightly different from that when the user's mobile terminal is an authorized owner terminal.

[0164] At this time, in step S100, the access control security terminal generates a security authentication code valid for the current period. This security authentication code enables the temporary visitor terminal to have an identity simulation function. This identity simulation function enables the temporary visitor terminal to simulate the identity ID of the authorized owner terminal during the validity period of the security authentication code, thereby successfully establishing the near-field communication in step 200.

[0165] The core difference between temporary visitor terminals and authorized owner terminals is that the former does not have a pre-recorded permanent identity tag for the access control system (such as IMEI binding or hardware ID registration), and cannot directly trigger automatic near-field communication connections.

[0166] The temporary visitor terminal has a target application (such as a property management app or Alipay) associated with the access control system installed. Visitors can use the "Visitor Application" function within the application to enter the authorized resident's associated information (such as the resident's mobile phone number and apartment number), and fill in the reason for the visit (such as "Visiting the resident of apartment 302 in Building 1"), the expected visit time (such as "2025 Month X Day 14:00-16:00"), and the intended access area (such as "Community Main Gate, Building 1 Unit Entrance"). After submission, the request information is pushed to the corresponding resident's target application in real time. The request information is required to include a "unique identifier for the visitor terminal" (such as IMEI or mobile phone number, automatically obtained by the system and unalterable by the visitor) to prevent others from impersonating the visitor and submitting requests.

[0167] After the authorized owner terminal receives a visitor's request, it must complete the "endorsement" through "target application retrieval verification" before sending the request code to the access control security terminal;

[0168] After receiving the owner's request code, the access control security terminal must first verify the validity of the request code, and then generate a security authentication code for temporary visitors. The core feature of this authentication code is "temporary identity simulation", which gives the visitor terminal a "limited-term simulated owner identity ID" to provide a basis for subsequent near-field communication connections.

[0169] Unlike the security authentication code for authorized resident terminals, the authentication code for temporary visitors is additionally embedded with a "temporary mapping ID" to achieve the "identity simulation" function. This ID is not a direct reuse of the resident's permanent identity ID, but a "one-time temporary identity identifier" generated by the access control for this visit.

[0170] A "temporary association table" is established within the access control system between the temporary mapping ID and the owner's permanent identity ID (stored only in the temporary cache area of ​​the access control security terminal and deleted immediately after the authorization expires): When a visitor terminal uses the authentication code to initiate near-field communication, the access control will identify "the visitor is authorized by an owner" through the temporary mapping ID, thereby allowing the connection to be established - which is equivalent to giving the visitor a "temporary identity under the owner's authorization" without disclosing the owner's permanent identity information, thus balancing legality and security.

[0171] After receiving the security authentication code, the temporary visitor terminal must first store the data in a multi-communication mode partition (consistent with the owner's terminal: Bluetooth → Bluetooth storage area, WiFi → hotspot storage area, NFC → NFC storage area), and then connect to the access control system via near-field communication during access. Unlike the owner's terminal's "automatic connection," the visitor terminal's connection requires "temporary mapping ID verification" to ensure that only authorized visitors can establish a connection. A specific example is as follows:

[0172] When a temporary visitor carrying a terminal enters the near-field communication range of the access control security terminal (Bluetooth ≤ 10m, WiFi ≤ 50m, NFC ≤ 10cm), the access control terminal periodically broadcasts a "communication detection signal" (containing the access control's own area code, such as "001"). After receiving the signal, the visitor's terminal's "communication interaction unit" performs two preprocessing steps: the terminal parses the area code in the detection signal and compares it with the "authorized area code" in the security authentication code. If they do not match (e.g., the visitor has entered an unauthorized "underground garage access control 003"), the terminal does not respond to the detection signal to avoid invalid connection requests.

[0173] The terminal automatically detects the communication methods it supports (e.g., only Bluetooth + WiFi), and prioritizes the "short-range high-security method": NFC > Bluetooth > WiFi (NFC is the best choice for visitor scenarios because it is a physical contact communication method and is not easily intercepted). If a certain method has a weak signal (e.g., Bluetooth is interfered with), it automatically switches to the second-best method.

[0174] The visitor terminal sends a "connection request" to the access control system, which includes an "encrypted temporary mapping ID" (extracted from the security authentication code and encrypted in real time). Upon receiving this, the access control security terminal performs triple connection verification via the "near-field communication unit," replacing the "permanent identity tag matching" of the resident terminal.

[0175] The temporary mapping ID in the access control decryption connection request is used to query the temporary association table. If the ID does not exist (e.g., authorization has been revoked) or has expired (exceeding the authorized period), the connection is rejected directly, and a message "Invalid permission, please contact the authorized owner" is pushed to the visitor's terminal.

[0176] Reconfirm that the access control area code currently connected to by the visitor (e.g., "001") is consistent with the "authorized area code" in the authentication code to prevent visitors from using the access control across areas during the authorized period (e.g., only authorizing "001 main door" but attempting to connect to "002 unit door").

[0177] The access control system reads the visitor terminal's real-time IMEI (obtained via near-field communication protocol) and compares it with the "visitor terminal IMEI" recorded in the temporary association table. If they do not match (e.g., the visitor forwards the authentication code to someone else), the connection is immediately interrupted, and an alert is sent to the authorized owner that "terminal identifier does not match, there may be a risk of impersonation."

[0178] After the triple verification is passed, the access control security terminal establishes a near-field communication connection with the visitor terminal (the connection time is ≤1 second, consistent with the efficiency of the owner terminal).

[0179] After the connection is established, the access control security terminal reads the security authentication code from the corresponding storage area of ​​the visitor terminal based on the "current communication method":

[0180] - If using NFC connection, read the authentication code from the NFC storage area;

[0181] -If using Bluetooth connection, read the authentication code from the Bluetooth storage area;

[0182] - If using a WiFi connection, read the authentication code from the hotspot storage area.

[0183] After reading, the access control system immediately verifies the verification code of the authentication code (by comparing it with the hash value generated from the first 3 fields) to confirm that the authentication code has not been tampered with, thus completing the core process of S200.

[0184] Compared to traditional visitor processes (manual registration, temporary cards / paper slips), this invention, through the design of S100-S200, achieves "triple security enhancement" and "dual convenience optimization" for temporary visitor access control:

[0185] Security Enhancements: ① Target applications requiring authorization from the homeowner are verified (to prevent impersonation of the homeowner); ② The security authentication code includes a temporary mapped ID (to prevent permanent identity leakage); ③ Terminal identifier is verified upon connection (to prevent authentication code forwarding).

[0186] Convenient optimization: ① No manual registration required, authorization takes effect in real time; ② Adaptable to multiple communication methods, avoiding passage obstruction caused by the failure of a single method.

[0187] This process not only solves the pain points of traditional visitor credentials being easily misused and permissions being difficult to control, but also achieves compatible authentication with authorized owner terminals through the "identity simulation" mechanism, forming a complete closed loop for multi-factor authentication of temporary visitors.

[0188] The above embodiments focus on "applied to at least one access control security terminal" to introduce specific embodiments of a multi-factor authentication intelligent security access control method of this application. It can be understood that the method can also be "applied to at least one user mobile terminal".

[0189] Specifically, when the method is "applied to at least one user mobile terminal", see [reference needed]. Figure 3 , Figure 3 This is a schematic diagram illustrating the steps of a multi-factor authentication smart security access control method applied to a user's mobile terminal according to an embodiment of the present invention. The steps include Step 1-Step 4:

[0190] Step 1: The user mobile terminal saves the security authentication code sent by the access control security terminal to multiple preset storage locations corresponding to various near-field communication methods;

[0191] Step 2: When the user mobile terminal and the access control security terminal are within the near-field communication range, in response to the successful connection of the near-field communication, the access control security terminal reads the security authentication code received by the user mobile terminal;

[0192] Step 3: When the security authentication code is within the current validity period, the user's mobile terminal is triggered to retrieve the pre-associated target application;

[0193] Step 4: In response to the successful retrieval of the target application, the access control security terminal authenticates the current user's mobile terminal.

[0194] Among them, the various near-field communication methods include Bluetooth near-field communication, WIFI hotspot near-field communication, and NFC.

[0195] In one scenario, the user's mobile terminal is an authorized owner's terminal;

[0196] When the target time period is reached, the access control security terminal generates a security authentication code valid for the current period and sends the security authentication code to the authorized owner terminal;

[0197] The target time period corresponds to each authorized owner terminal, each authorized owner terminal corresponds to multiple target time periods, and the multiple target time periods corresponding to at least two authorized owner terminals are not completely the same;

[0198] The multiple target time periods corresponding to each authorized owner terminal are determined by the access control security terminal based on the time, location, and frequency of each authorized owner terminal passing through the access control security terminal within a preset historical time period.

[0199] In another scenario, the user's mobile terminal is a temporary visitor terminal;

[0200] After the temporary visitor terminal submits an access request to the authorized owner terminal, the authorized owner terminal sends a request code to the access control security terminal, and the request code requests the access control security terminal to issue a security authentication code to the designated temporary visitor terminal.

[0201] The authorized owner terminal sends the request code to the access control security terminal after successfully retrieving the target application.

[0202] As mentioned above, the aforementioned Figure 1 The method "applies to at least one access control security terminal", and here Figure 3 The methods described, "applied to user mobile terminals," are essentially the same, differing only in their emphasis. Therefore, their implementation principles are fundamentally the same, as explained earlier. Figure 1 The method mentioned herein refers to the improvements and their effects. Figure 3 The same method exists, so it will not be described again.

[0203] exist Figures 1-3 Based on the method implementation examples, Figure 4 It is to achieve Figure 1 or Figure 3 A schematic diagram of the hardware scenario of the multi-factor authentication intelligent security access control system described in the multi-factor authentication intelligent security access control method.

[0204] Figure 4 The system includes multiple user mobile terminals and multiple access control security terminals;

[0205] The multiple access control security terminals are located at the entrances of multiple geographically separated target areas; the multiple user mobile terminals include authorized owner terminals and temporary visitor terminals;

[0206] When the preset conditions are met (e.g., the target time period is reached), the access control security terminal generates a security authentication code valid for the current period and sends the security authentication code to the authorized owner terminal; the multiple target time periods corresponding to each authorized owner terminal are determined by the access control security terminal based on the time, location, and frequency of each authorized owner terminal passing through the access control security terminal within the preset historical time period;

[0207] After the temporary visitor terminal submits an access request to the authorized owner terminal, the authorized owner terminal sends a request code to the access control security terminal, and the request code requests the access control security terminal to issue a security authentication code to the designated temporary visitor terminal.

[0208] Of course, the authorized owner terminal can send a request code to the access control security terminal at any time based on its needs. The request code requests the access control security terminal to issue a security authentication code to another designated user mobile terminal (which can be an authorized user terminal or a temporary visitor terminal).

[0209] The user mobile terminal saves the security authentication code sent by the access control security terminal to multiple preset storage locations corresponding to various near-field communication methods;

[0210] When the user mobile terminal and the access control security terminal are within the near-field communication range, in response to the successful connection of the near-field communication, the access control security terminal reads the security authentication code received by the user mobile terminal;

[0211] When the security authentication code is within its current validity period, the user's mobile terminal is triggered to retrieve the pre-associated target application;

[0212] In response to the successful retrieval of the target application, the access control security terminal authenticates the current user's mobile terminal.

[0213] Among them, the various near-field communication methods include Bluetooth near-field communication, WIFI hotspot near-field communication, and NFC.

[0214] It is understood that when the technical solution of this invention is applied to access control, most of the execution process is completed automatically in the background. For the user terminal, the actions to be performed only include taking out the terminal / unlocking the device and clicking the pop-up confirmation to call the target application; other execution steps are completed automatically by the system.

[0215] See last. Figure 5 The diagram illustrates the overall hardware / software architecture and terminal interaction diagram for implementing the technical solution of this invention.

[0216] Figure 5 The system showcases the functional components, hardware and software attributes, and data interaction logic of its two core hardware carriers (access control security terminal and user mobile terminal), intuitively presenting the technical implementation path of multi-factor authentication.

[0217] Figure 5 Functional units are labeled with rectangles, different levels of units are distinguished by solid lines, and arrows indicate the flow of data transmission / control commands. Units labeled "(hardware)" or "(hardware + driver)" are physical components, units labeled "(software module)" or "(software)" are logical modules, and units labeled "(hardware and software integration)" are integrated units of physical carrier and supporting software.

[0218] The upper access control security terminal's core is the "core control unit" (including processor hardware and control logic software), which is responsible for scheduling other units: the "security authentication code generation unit" (software module) generates periodically valid encryption passwords; the "access management unit" (hardware and software combination) analyzes the owner's historical data to generate target time periods and processes visitor request codes; the "near field communication unit" (hardware and software combination) integrates Bluetooth, WiFi hotspot, and NFC modules; the "storage unit" (hardware and software combination) stores user data and authentication records; and the "access control execution unit" (hardware + driver) triggers door opening after successful authentication.

[0219] The user mobile terminal below (including authorized owner terminals and temporary visitor terminals) is centered around a "terminal control unit" (including terminal processor hardware and terminal logic software): The "communication interaction unit" (a combination of hardware and software) receives the security authentication code sent by the access control system; the "security code storage unit" (a combination of hardware and software) stores the authentication code in partitions in corresponding storage areas for Bluetooth, WiFi, and NFC; the "target application invocation unit" (a software module) triggers the associated application when the authentication code is valid; the "user interaction unit" (a combination of hardware and software) distinguishes between owner (viewing time periods, sending request codes) and visitor (receiving authentication codes, confirming application invocation) operations; and the "terminal storage unit" (a combination of hardware and software) stores application data and temporary cache.

[0220] The data flow indicated by the arrows covers the entire authentication process, such as the connection between the access control near-field communication unit and the user communication interaction unit, and the scheduling of each functional unit by the core control unit, reflecting the closed loop of "security authentication code generation-issuance-storage-verification-application call-door opening".

[0221] In the above description of the embodiments, it is understood that the block diagrams shown in the accompanying drawings are merely functional entities and do not necessarily correspond to physically independent entities. That is, these functional entities can be implemented in software, in one or more hardware modules or integrated circuits, or in different network and / or processor devices and / or microcontroller devices.

[0222] Therefore, although not shown in the accompanying drawings, more embodiments also include a computer-readable storage medium for storing computer instructions that, when executed on an electronic device, enable the implementation of a multi-factor authentication smart security access control method according to an embodiment of the present invention.

[0223] Similarly, although not shown in the accompanying drawings, more embodiments may also include an electronic device comprising a processor and a memory, the memory for storing instructions, and the processor for calling the instructions in the memory to cause the electronic device to execute a multi-factor authentication smart security access control method according to an embodiment of the present invention.

[0224] Similarly, although not shown in the accompanying drawings, more embodiments should also include a computer program product, the product comprising a computer program, when the computer program is executed, implementing a multi-factor authentication smart security access control method according to an embodiment of the present invention.

[0225] Through testing and practical application, compared with relevant existing technologies, the improvements of this invention include at least the following aspects:

[0226] First, this invention establishes a solid security foundation with "dynamic multi-factor authentication," addressing the vulnerabilities of traditional static access control authentication at its source. Traditional systems rely on fixed credentials (such as IC cards and static passwords), which are easily lost or copied, while biometric authentication carries the risk of privacy leaks. This invention, however, constructs a protective network through a dual verification system of "periodic security authentication codes + target application retrieval"—the security authentication code is only valid within the current period and automatically expires after that time. Furthermore, authentication requires the terminal to successfully retrieve a pre-associated application (such as Alipay or a property management app) and the user to confirm the request. For temporary visitors, an innovative "temporary identity simulation" mechanism is introduced: the visitor authentication code embeds a one-time "temporary mapping ID," which is only temporarily bound to the resident's identity during the authorized period, without disclosing the resident's permanent information. Simultaneously, the consistency of the terminal identifier must be verified upon connection, preventing the forwarding and misuse of the authentication code and reducing the risk of unauthorized access to zero.

[0227] Secondly, this invention optimizes convenience while maintaining security, balancing user experience and efficient access. For authorized residents, the system can generate personalized target time periods through "active setting + self-learning": residents can manually preset their commuting time periods, or the access control system can automatically adapt based on historical access data (time, location, frequency), proactively pushing a security authentication code before the expiration date, eliminating the need for repeated operations; for temporary visitors, the cumbersome process of traditional manual registration and obtaining temporary passes is eliminated, residents only need to complete the verification through the application and send a request code, and visitors can receive the authentication code. The entire process takes ≤2 minutes, significantly reducing entrance congestion, especially during peak hours in communities and office buildings.

[0228] Furthermore, this invention enhances scenario adaptability through "multi-mode near-field communication fusion," breaking the limitations of single communication methods. Traditional access control systems rely solely on single methods such as NFC and Bluetooth, which are susceptible to interference from metal (e.g., elevator entrances), dense signal areas (e.g., lobbies), and extreme weather (e.g., rain), resulting in an authentication success rate often below 85%. In contrast, this invention integrates three communication methods: Bluetooth, WiFi hotspot, and NFC. Security authentication codes are stored in corresponding preset locations in partitions, allowing the system to automatically switch to the optimal method based on the environment—Bluetooth for metal environments, NFC for areas with signal interference, and WiFi for outdoor use in rainy weather—ensuring an authentication success rate of ≥99% across all scenarios without requiring manual user adjustments, truly achieving "environmental self-adaptation."

[0229] Then, this invention reduces operating costs and improves management efficiency through "intelligent access control management." Traditional systems require administrators to manually maintain user permissions, and the granting and revocation of permissions for short-term visitors (such as decorators) is prone to oversight. In contrast, this invention supports dynamic adjustment of permissions: for homeowners, the access control system learns access habits and generates target time periods without manual intervention; for visitors, the authorization period is bound to the access request, and permissions are automatically revoked upon expiration. This reduces the daily workload of administrators by ≥80%, while the response time for permission adjustment is ≤10 seconds, avoiding the contradiction of "over-authorization" or "insufficient permissions," and transforming access control management from "manual operation" to "intelligent collaboration."

[0230] Finally, this invention boasts strong compatibility and scalability, seamlessly integrating with existing ecosystems and supporting future upgrades. The system employs an open API interface, enabling seamless integration with existing applications such as Alipay and WeChat, eliminating the need for users to download a dedicated app. Simultaneously, it reserves interfaces for future functional expansion, allowing for integration into smart home scenarios (such as linking lights and air conditioning upon door opening) and security monitoring (such as automatically triggering recording during abnormal access). This not only meets current access control needs but also provides fundamental support for the construction of smart communities and smart office buildings, demonstrating long-term application value.

[0231] Nevertheless, it should be particularly noted that although the present invention provides multiple embodiments, each embodiment can constitute an independent technical solution and may contribute to the prior art and solve corresponding technical problems. That is, each embodiment can solve at least one technical problem and have at least one improvement effect, but it is not required that each individual embodiment solve multiple or all technical problems or have all improvement effects.

[0232] It is understood that the specific parameters mentioned in the above embodiments of this application (such as time period setting, threshold time setting, number of terminals, etc.) are merely illustrative and do not constitute a specific limitation on the scope of protection of the technical solution of this invention.

[0233] Other technologies, principles, algorithms, or models not elaborated in detail in this application can be found in the prior art.

[0234] The foregoing has shown and described the method embodiments and systems of the present invention, but it will be understood by those skilled in the art that various changes, modifications, substitutions and variations can be made to these embodiments without departing from the principles and spirit of the present invention, the scope of which is defined by the appended claims and their equivalents.

Claims

1. A multi-factor authentication intelligent security access method, the method is applied to at least one access security terminal, the access security terminal communicates with at least one user mobile terminal, characterized in that, The method comprises: In response to a preset condition being met, the access security terminal generates a security authentication code valid for a current period, and sends the security authentication code to the at least one user mobile terminal; When the user mobile terminal is within a near field communication range of the access security terminal, in response to successful connection of the near field communication, the access security terminal reads the security authentication code received by the user mobile terminal; When the security authentication code is within the current valid period, the user mobile terminal triggers a pre-associated target application program; In response to successful invocation of the target application program, the access security terminal passes the authentication of the current user mobile terminal; The user mobile terminal comprises an authorized owner terminal and a temporary visitor terminal; The security authentication code is divided into an authorized authentication code corresponding to the authorized owner terminal and a visitor authentication code corresponding to the temporary visitor terminal; the visitor authentication code embeds a one-time temporary mapping ID and is temporarily bound with the owner identity only within an authorized period.

2. The multi-factor authentication intelligent security access method of claim 1, wherein: The preset condition is met, including: reaching a target time period; The target time period corresponds to each user mobile terminal, each user mobile terminal corresponds to multiple target time periods, and the multiple target time periods corresponding to at least two user mobile terminals are not completely the same; The multiple target time periods corresponding to each user mobile terminal are determined by the access security terminal according to the time, place, and frequency of each user mobile terminal passing through the access security terminal in a preset historical time period.

3. The multi-factor authentication intelligent security access method of claim 1, wherein: The preset condition is met, including: the access security terminal receiving a request code of a first user mobile terminal, the request code requesting the access security terminal to issue a security authentication code to a specified second user mobile terminal; The first user mobile terminal sends the request code to the access security terminal after successfully invoking the target application program.

4. The multi-factor authentication intelligent security access method of claim 3, wherein: In response to successful connection of the near field communication, one of the following is included: The access security terminal and the user mobile terminal are successfully connected through Bluetooth; The access security terminal and the user mobile terminal are successfully connected through a WIFI hotspot; The access security terminal and the user mobile terminal are successfully connected through NFC.

5. The multi-factor authentication intelligent security access method of claim 1, wherein: The user mobile terminal saves the received security authentication code to multiple preset storage locations corresponding to multiple near field communication methods.

6. A multi-factor authentication intelligent security access method, the method is applied to at least one user mobile terminal, the user mobile terminal communicates with at least one access security terminal, characterized in that, The method comprises: The user mobile terminal saves the security authentication code sent by the access security terminal to multiple preset storage locations corresponding to multiple near field communication methods; When the user mobile terminal and the access control security terminal are in the near field communication range, the access control security terminal reads the security authentication code received by the user mobile terminal in response to the successful connection of the near field communication; When the security authentication code is in the current effective period, the user mobile terminal triggers the pre-associated target application program; In response to the successful call of the target application program, the access control security terminal passes the authentication of the current user mobile terminal; The multiple near field communication modes include one of Bluetooth near field communication, WIFI hotspot near field communication, and NFC; The user mobile terminal includes an authorized owner terminal and a temporary visitor terminal; The security authentication code includes an authorized authentication code corresponding to the authorized owner terminal and a visitor authentication code corresponding to the temporary visitor terminal; the visitor authentication code is embedded with a one-time temporary mapping ID and is temporarily bound with the owner identity only within the authorized period.

7. The multi-factor authentication intelligent security access method of claim 6, wherein: The user mobile terminal is an authorized owner terminal; When the target time period is reached, the access control security terminal generates a security authentication code valid in the current period and sends the security authentication code to the authorized owner terminal; The target time period corresponds to each authorized owner terminal, each authorized owner terminal corresponds to multiple target time periods, and the multiple target time periods corresponding to at least two authorized owner terminals are not completely the same; The multiple target time periods corresponding to each authorized owner terminal are determined by the access control security terminal according to the time, location, and frequency of each authorized owner terminal passing through the access control security terminal in a preset historical time period.

8. A multi-factor authentication intelligent security access method as claimed in claim 7, characterized by: The user mobile terminal is a temporary visitor terminal; After the temporary visitor terminal submits an access request to the authorized owner terminal, the authorized owner terminal sends a request code to the access control security terminal, which requests the access control security terminal to issue a security authentication code to the specified temporary visitor terminal; The authorized owner terminal sends the request code to the access control security terminal after successfully calling the target application program.

9. A multi-factor authentication intelligent security access system, the system comprising multiple user mobile terminals and multiple access control security terminals, wherein: The multiple access control security terminals are located at the entrance positions of multiple target areas that are geographically separated from each other; The multiple user mobile terminals include authorized owner terminals and temporary visitor terminals; When the target time period is reached, the access control security terminal generates a security authentication code valid in the current period and sends the security authentication code to the authorized owner terminal; the multiple target time periods corresponding to each authorized owner terminal are determined by the access control security terminal according to the time, location, and frequency of each authorized owner terminal passing through the access control security terminal in a preset historical time period; After the temporary visitor terminal submits an access request to the authorized owner terminal, the authorized owner terminal sends a request code to the access control security terminal, which requests the access control security terminal to issue a security authentication code to the specified temporary visitor terminal; The security authentication code is divided into an authorized authentication code corresponding to an authorized owner terminal and a visitor authentication code corresponding to a temporary visitor terminal; The visitor authentication code is embedded with a one-time temporary mapping ID and is temporarily bound with the owner identity only within an authorized period; The user mobile terminal saves the security authentication code sent by the access control security terminal to a plurality of preset storage locations corresponding to a plurality of near field communication modes; When the user mobile terminal and the access control security terminal are within the near field communication range, the access control security terminal reads the security authentication code received by the user mobile terminal in response to the successful connection of the near field communication; When the security authentication code is within the current effective period, the user mobile terminal triggers the pre-associated target application program; In response to the successful call of the target application program, the access control security terminal passes the authentication of the current user mobile terminal; The plurality of near field communication modes include one of Bluetooth near field communication, WIFI hotspot near field communication, and NFC.

10. An electronic terminal device, characterized by: The electronic terminal device includes a memory and a processor, and the memory stores computer program instructions. When the processor executes the computer program instructions, the multi-factor authentication intelligent security access control method of any one of claims 1-5 or 6-7 is implemented.

Images