Cabinet access control management system

Abstract

The invention discloses a cabinet access control management system, which relates to the technical field of equipment safety management and control, and comprises a multi-mode identity verification module, a security classification management and control module, an electromagnetic shielding linkage module and a permission dynamic synchronization module, the multi-modal identity verification module is used for collecting and verifying multi-modal biological characteristic information of an operator and outputting an identity verification result; and the security classification management and control module is connected with the multi-mode identity verification module and is used after the identity verification is passed. According to the cabinet access control management system provided by the invention, through collaborative linkage and closed-loop design of multiple modules, systematic potential safety hazards existing in cabinet access control management in a confidential scene are effectively solved, and identity verification combinations with corresponding strength can be automatically matched according to cabinets with different confidentiality levels; the possibility that low-authority personnel contact high-security-level equipment is avoided, and the problem of efficiency and safety imbalance caused by insufficient or excessive verification intensity is also avoided.

Description

Technical Field

[0001] This invention relates to the field of equipment safety management and control technology, specifically to a cabinet access control management system. Background Technology

[0002] In classified sectors such as military, government, and finance, server racks serve as critical storage carriers for classified equipment and core information. The security, accuracy, and standardization of access control for these racks directly impact the confidentiality of classified information, making them a core component of the overall security management system for classified data centers. To address the access control needs of classified server racks, relevant access control technologies have been gradually applied. Existing technologies attempt to verify operator identities through methods such as facial recognition, fingerprint verification, and password verification. Basic technological explorations have also been conducted in areas such as access control and electromagnetic shielding, providing some technical support for the basic security protection of classified server racks and becoming an important technological direction in the field of classified equipment security management.

[0003] While existing technologies for access control of classified server racks possess basic control capabilities, they still have many areas for improvement in adapting to the specific needs of classified scenarios. The identity verification process lacks specific optimization for the unique environment of classified server rooms, including low light, strong backlight, and equipment reflection. Furthermore, the security levels of some single verification methods are insufficient to match the verification standards of high-class scenarios. A precise matching relationship is not established between rack security levels and verification strength, and a unified control model cannot meet the requirements of classified hierarchical management. Electromagnetic shielding devices and access control systems are often deployed independently, making it difficult to balance the convenience of equipment maintenance and debugging with the security of classified signals. Access control relies heavily on manual operation and lacks effective integration with human resources systems. Changes in personnel positions and qualifications cannot be promptly adjusted for different permissions. Moreover, existing technologies are mostly single-function improvements, and the various control links do not form a deeply collaborative closed-loop system, failing to fully meet the secure, accurate, and standardized end-to-end control requirements of classified scenarios. To address these issues, we propose a server rack access control management system. Summary of the Invention

[0004] To address the aforementioned technical issues, a rack access control management system is provided. This technical solution resolves the problems of identity verification not being adapted to the special environment of the data center, insufficient security level of some verification methods, mismatch between rack security level and verification strength, independent deployment of electromagnetic shielding and access control making it difficult to balance security and maintenance, reliance on manual access control with no linkage to the human resources system, and the lack of a deeply collaborative closed-loop system among various control links.

[0005] To achieve the above objectives, the technical solution adopted by the present invention is as follows: A rack access control management system, comprising: Multimodal authentication module, security level classification control module, electromagnetic shielding linkage module, and dynamic permission synchronization module; The multimodal identity verification module is used to collect and verify the multimodal biometric information of the operator and output the identity verification result; The security level classification control module is connected to the multimodal identity verification module. After identity verification is passed, it is used to match and confirm whether the corresponding multimodal verification combination is complete according to the request issued by the operator to unlock the security level of the cabinet, and output the security level matching result. The electromagnetic shielding linkage module is connected to the security level control module. It is used to automatically send a start signal to the electromagnetic shielding device of the target cabinet after the security level matching is passed, and to send a stop signal after detecting that the cabinet door is closed and locked. The dynamic permission synchronization module is used to connect with external human resources systems and automatically and dynamically adjust the cabinet access permissions of employees in the system based on the received information on employee positions, resignations, and changes in confidential qualifications.

[0006] Preferably, the multimodal authentication module operates as follows: Collect facial images, fingerprint information, and NFC work badge information of operators. When requesting to unlock a top-secret cabinet, hardware key information must be collected. For classified computer room environments, the collected facial images are processed using reflection suppression and illumination equalization algorithms to eliminate reflections on equipment surfaces and interference from weak light and strong backlight; 3D structured light liveness detection is used to verify the liveness of the processed face image, and the face features and fingerprint features are compared with the preset database respectively. When all collected biometric information passes the liveness verification and is successfully matched, an identity verification pass signal is output; otherwise, a verification failure signal is output and an alarm is triggered.

[0007] Preferably, the reflection suppression and illumination equalization algorithm specifically performs the following steps: The system captures raw images containing the operator's face using a camera and identifies highlighted areas within the images. Based on the identified bright area outline and its pixel brightness value, the source of the reflection is determined to be the surface of a fixed device or an ambient light source. If the issue is determined to be surface reflection, a region segmentation-based repair algorithm is used to fill and repair the reflective area using pixel information from the surrounding normal skin-colored areas. If the image is determined to be unevenly lit, an adaptive histogram equalization algorithm is used to compensate for the overall lighting conditions of the image.

[0008] Preferably, the matching differential verification combination in the security level classification and control module specifically includes: Each cabinet is pre-assigned a security classification identifier in the system, which includes secret, confidential, and top secret classifications. The confidential server rack is pre-configured with a dual verification combination of "facial recognition + fingerprint verification"; The confidential server racks are pre-set with a triple verification combination of "face verification + fingerprint verification + NFC employee badge verification"; The top-secret server rack is pre-set with a four-fold verification combination of "face verification + fingerprint verification + NFC employee badge verification + hardware key verification"; When an operator initiates an unlocking request, the security classification identifier of the target cabinet is retrieved, and the verification information provided by the operator is verified to meet the preset verification combination corresponding to that security classification.

[0009] Preferably, the security classification control module is further used to support dynamic adjustment of verification combinations, specifically through the following method: Provides an administrator configuration interface, allowing authorized administrators to modify the verification combination corresponding to any security level identifier according to changes in the security management policy; The modifications include adding or reducing the types of verification factors, or adjusting the combination order of different verification factors under the same security level.

[0010] Preferably, the linkage logic of the electromagnetic shielding linkage module is as follows: Upon receiving a matching pass signal from the security classification control module, a shielding start command is automatically generated. The shielding activation command is sent to the electromagnetic shielding device built into the target cabinet, controlling it to activate and block the wireless signals inside the cabinet; When the access control sensor detects that the cabinet door is closed and physically locked, it automatically generates a shielding stop command and sends it to the electromagnetic shielding device to control its closure.

[0011] Preferably, the electromagnetic shielding linkage module is also used to trace the shielding operation, specifically by: Record the start and stop timestamps of each shielding device, the corresponding cabinet number, and the identity information of the operator who triggered the linkage operation in real time. The start-stop records are associated and stored in the system's operation log to form a queryable electromagnetic shielding operation history.

[0012] Preferably, the real-time synchronization logic of the permission dynamic synchronization module is as follows: Establish a real-time connection with an external human resources management system through a data interface, and listen for and receive employee status change events pushed by the human resources system. When an employee is reassigned, the server rack access permissions for the employee's original position are automatically deleted, and the server rack access permissions for the new position are added. When an employee resignation is detected, all access control permissions for that employee will be automatically frozen. When an employee's confidentiality qualification is changed, the scope of cabinet security levels that the employee can access is automatically adjusted to match the current qualification.

[0013] Preferably, it further includes: The classified operation log module is used to encrypt and store all operation logs of the system using the SM4 national cryptographic algorithm for a period of not less than 3 years. The operation logs include records of identity verification, access control opening and closing, shielding start and stop, and permission change. The anomaly alarm module is used to trigger the on-site audible and visual alarm and simultaneously push alarm information to the administrator terminal when authentication failure, access control anomaly, shielding linkage failure, or permission synchronization failure is detected.

[0014] Preferably, the workflow is as follows: The operator initiates an unlock request, and the multimodal authentication module completes the identity verification. After identity verification is passed, the security classification control module verifies whether the combination matches the security classification of the target cabinet; Once the matching is successful, the electromagnetic shielding linkage module automatically activates the electromagnetic shielding device of the target cabinet, and then the access control unlocks. After the operator completes the work and closes the cabinet door, the electromagnetic shielding linkage module automatically shuts down the shielding device; During this process, the dynamic permission synchronization module continuously monitors personnel status and adjusts permissions in real time. All operations are recorded by the confidential operation log module, and abnormal situations are reported by the abnormal alarm module.

[0015] Compared with the prior art, the beneficial effects of the present invention are as follows: The rack access control management system proposed in this invention effectively solves the systemic security risks of rack access control management in classified scenarios through multi-module collaborative linkage and closed-loop design. It can automatically match the corresponding strength of identity verification combination according to racks with different security levels, realizing the precise correspondence between access control and confidentiality level. It not only eliminates the possibility of low-level personnel accessing high-security equipment, but also avoids the efficiency and security imbalance caused by insufficient or excessive verification strength. For the complex lighting and reflection environment of classified computer rooms, the system adopts optimized image processing and liveness detection technology, which significantly improves the accuracy and reliability of identity verification. The electromagnetic shielding device and access control status are intelligently linked, shielding when the door is open and restoring when the door is closed. While ensuring the secure isolation of wireless signals, it greatly facilitates daily operation and maintenance. Attached Figure Description

[0016] Figure 1 This is a system module diagram of the present invention. Detailed Implementation

[0017] The following description is intended to disclose the invention and enable those skilled in the art to implement it. The preferred embodiments described below are merely examples, and other obvious variations will occur to those skilled in the art.

[0018] Reference Figure 1 As shown, a cabinet access control management system includes: Multimodal authentication module, security level classification control module, electromagnetic shielding linkage module, and dynamic permission synchronization module; The multimodal identity verification module is used to collect and verify the multimodal biometric information of the operator and output the identity verification result; The working method of the multimodal authentication module is as follows: Collect facial images, fingerprint information, and NFC work badge information of operators. When requesting to unlock a top-secret cabinet, hardware key information must be collected. For classified computer room environments, the collected facial images are processed using reflection suppression and illumination equalization algorithms to eliminate reflections on equipment surfaces and interference from weak light and strong backlight; 3D structured light liveness detection is used to verify the liveness of the processed face image, and the face features and fingerprint features are compared with the preset database respectively. When all collected biometric information passes the liveness verification and is successfully matched, an identity verification pass signal is output; otherwise, a verification failure signal is output and an alarm is triggered.

[0019] The specific processing steps for reflection suppression and illumination equalization are as follows: The system captures raw images containing the operator's face using a camera and identifies bright areas within the images. During the identification process, a pixel brightness threshold of 220 (grayscale value range 0-255) is set. When a pixel's grayscale value is greater than this threshold and the number of consecutive pixels exceeds 30, it is determined to be a bright area. Simultaneously, the Canny edge detection algorithm is used to extract the contours of the bright areas. The type of reflection source is initially determined by the regularity, area size, and positional distribution of the contours.

[0020] Based on the identified bright area outline and its pixel brightness value, the source of the reflection is determined to be either a fixed device surface or an ambient light source. The criteria are as follows: if the bright area outline is regular, the edges are clear, and the position is fixed at the edge of the image (corresponding to the device frame or lens surface), and the difference in pixel brightness value within the area is less than 15, then it is determined to be a reflection from the device surface; if the bright area outline is irregular, the edges are blurred, and it is evenly distributed or appears as local blocks in the image, and the difference in pixel brightness value within the area is greater than 30, then it is determined to be uneven ambient lighting.

[0021] If the issue is determined to be surface reflection from a device, a region segmentation-based repair algorithm is employed. First, the watershed algorithm is used to segment the reflective area from the overall facial image, clearly defining the boundary between the reflective area and the normal skin tone area. Then, the pixel information of the surrounding normal skin tone area is used to fill and repair the reflective area. The repair process employs a bilinear interpolation algorithm, using the boundary pixels of the reflective area as a reference. By calculating the average value of skin tone pixels within a 5×5 pixel range around the boundary, interpolation is performed on each pixel within the reflective area to ensure that the repaired area blends naturally with the surrounding skin tone without any obvious stitching marks.

[0022] If the image is determined to be unevenly lit, an adaptive histogram equalization algorithm is used to compensate for the overall lighting of the image. Specifically, the face image is divided into 8×8 sub-regions. Each sub-region independently calculates its histogram and performs equalization processing. At the same time, a contrast limit parameter is set to 2.0. When the number of pixels at a certain gray level in a sub-region exceeds the threshold set by this parameter, the excess pixels are evenly distributed to other gray levels to avoid image distortion caused by excessive enhancement of local contrast. Ultimately, the overall lighting of the image is balanced, highlighting facial feature details.

[0023] The liveness detection component employs 3D structured light technology to acquire depth information. Specifically, a coded structured light pattern is projected onto the operator's face. A binocular camera captures the distorted image of this pattern on the facial surface. Triangulation is used to calculate the three-dimensional spatial coordinates of each pixel in the image, generating a 3D depth map of the face. The criteria for determining whether a face is real include 3D facial features and liveness verification. 3D features primarily detect the height difference of the bridge of the nose, the depth of the eye sockets, and the prominence of the cheekbones. Thresholds for the height difference of the bridge of the nose are set at 8mm-15mm, and for the depth of the eye sockets at 5mm-10mm. If the detected 3D features exceed these reasonable ranges, the face is considered non-live. Liveness verification requires the operator to perform preset actions, such as blinking twice consecutively or slowly opening their mouth once. The system captures the 3D trajectory of these facial movements in real time to determine the authenticity and continuity of the actions, preventing deception using photos or videos.

[0024] The security level classification control module is connected to the multimodal identity verification module. After identity verification is passed, it is used to match and confirm whether the corresponding multimodal verification combination is complete according to the request issued by the operator to unlock the security level of the cabinet, and output the security level matching result. The specific matching of differentiated verification combinations in the security level classification and control module is as follows: Each cabinet is pre-assigned a security classification identifier in the system, which includes secret, confidential, and top secret classifications. The confidential server rack is pre-configured with a dual verification combination of "facial recognition + fingerprint verification"; The confidential server racks are pre-set with a triple verification combination of "face verification + fingerprint verification + NFC employee badge verification"; The top-secret server rack is pre-set with a four-fold verification combination of "face verification + fingerprint verification + NFC employee badge verification + hardware key verification"; When an operator initiates an unlocking request, the security classification identifier of the target cabinet is retrieved, and the verification information provided by the operator is verified to meet the preset verification combination corresponding to that security classification.

[0025] The system internally stores the mapping relationship between security levels and verification combinations using a key-value pair data structure. The key is the security level identifier (01 for Secret, 02 for Confidential, and 03 for Top Secret), and the value is a list of verification factors. This list contains all verification factor types and their verification order required for the corresponding security level. During verification, the system first extracts all verification factor types provided by the operator, then retrieves the verification factor list corresponding to the target cabinet's security level, comparing the two lists one by one. Not only must all verification factor types match, but the verification result for each verification factor must also be confirmed as passed. If any verification factor is missing or fails verification, the security level match is deemed unsuccessful.

[0026] The security classification control module is also used to support the dynamic adjustment of verification combinations, specifically through the following method: Provides an administrator configuration interface, allowing authorized administrators to modify the verification combination corresponding to any security level identifier according to changes in the security management policy; The modifications include adding or reducing the types of verification factors, or adjusting the combination order of different verification factors under the same security level.

[0027] The administrator configuration interface uses a web-based visual interface, accessible only to personnel with system super administrator privileges. Administrators must complete two-factor authentication upon login: first, facial recognition and fingerprint verification, followed by a secondary verification using their administrator-specific hardware key. Only after successful verification can access the configuration page. The operation process involves the administrator selecting the target security level on the configuration page, adding or removing verification factor types by checking or dechecking options, adjusting the combination order by dragging and dropping verification factor icons, and clicking the submit button. The system automatically generates a modification request and records the verification combination before and after modification, the modification time, and the administrator's identity information. Upon receiving the dynamic adjustment command, the system immediately updates the security level-verification combination mapping table in memory and writes the modified content to the system configuration database for encrypted storage, ensuring the update takes effect in real time. All subsequent unlocking requests for racks with this security level are verified according to the modified verification combination. If a network interruption or other abnormal situation occurs during the modification process, the system automatically triggers a rollback mechanism, restoring the verification combination state before modification and pushing a modification failure message to the administrator's terminal.

[0028] The electromagnetic shielding linkage module is connected to the security level control module. It is used to automatically send a start signal to the electromagnetic shielding device of the target cabinet after the security level matching is passed, and to send a stop signal after detecting that the cabinet door is closed and locked. The linkage logic of the electromagnetic shielding linkage module is as follows: Upon receiving a matching pass signal from the security classification control module, a shielding start command is automatically generated. The shielding activation command is sent to the electromagnetic shielding device built into the target cabinet, controlling it to activate and block the wireless signals inside the cabinet; When the access control sensor detects that the cabinet door is closed and physically locked, it automatically generates a shielding stop command and sends it to the electromagnetic shielding device to control its closure.

[0029] The electromagnetic shielding device and the access control system are connected via RS485 wired communication protocol. This protocol features strong anti-interference capabilities and long transmission distances, making it suitable for the complex electromagnetic environment of classified computer rooms. The physical connection uses shielded twisted-pair cable, directly connecting the signal output interface of the access control system to the signal input interface of the electromagnetic shielding device. Lightning and surge protection devices are installed at both ends of the connection line to prevent external interference signals from affecting command transmission. Both shielding start and stop commands use 8-bit binary data format. The shielding start command is 00010001, where the first four bits (0001) indicate a start command and the last four bits (0001) indicate a valid command. The shielding stop command is 00100001, where the first four bits (0010) indicate a stop command and the last four bits (0001) indicate a valid command. Parity checking is used during command transmission to ensure accuracy. If the receiver detects a check error, it immediately sends a retransmission request to the sender.

[0030] The specific mechanism for the access control sensor to detect the physical lock of the cabinet door is as follows: A Hall sensor is installed at the cabinet latch. The Hall sensor and the metal latch of the cabinet door lock form a sensing loop. When the cabinet door is not closed or the latch is not fully extended, the Hall sensor does not detect a metal sensing signal and outputs a high level. When the operator closes the cabinet door and completes the physical lock, the latch is fully extended and in contact with the Hall sensor. The Hall sensor detects a metal sensing signal and outputs a low level. The system determines whether the cabinet door is physically locked by detecting the level change of the Hall sensor. At the same time, it combines the signal from the cabinet door closure sensor for double confirmation. Only when both sensors output a locking signal is the cabinet door determined to be closed and locked.

[0031] The electromagnetic shielding linkage module is also used to trace the shielding operation, specifically through the following method: Record the start and stop timestamps of each shielding device, the corresponding cabinet number, and the identity information of the operator who triggered the linkage operation in real time. The start-stop records are associated and stored in the system's operation log to form a queryable electromagnetic shielding operation history.

[0032] Start-up and shutdown records are stored in a structured database table. The table structure includes a log ID, a mask start timestamp, a mask stop timestamp, a rack number, an operator ID, an operator name, and an operation type. The log ID is a unique identifier using an auto-incrementing integer format. The mask start and stop timestamps use UTC time format, accurate to milliseconds. The rack number uses the rack's physical location code. The operator ID and name are associated with the system's user database to ensure the accuracy of identity information. The association method involves binding the start-up and shutdown timestamps, rack number, and operator identity information through the log ID. Each mask operation record corresponds to a unique log ID. The system supports multi-condition queries based on rack number, operator name, and time range. Query results can be exported as an encrypted document to ensure the standardization and security of the traceability process.

[0033] The dynamic permission synchronization module is used to connect with external human resources systems and automatically and dynamically adjust the cabinet access permissions of employees in the system based on the received information on employee positions, resignations, and changes in confidential qualifications.

[0034] The real-time synchronization logic of the dynamic permission synchronization module is as follows: Establish a real-time connection with an external human resources management system through a data interface, and listen for and receive employee status change events pushed by the human resources system. When an employee is reassigned, the server rack access permissions for the employee's original position are automatically deleted, and the server rack access permissions for the new position are added. When an employee resignation is detected, all access control permissions for that employee will be automatically frozen. When an employee's confidentiality qualification is changed, the scope of cabinet security levels that the employee can access is automatically adjusted to match the current qualification.

[0035] The data interface uses a RESTful API to connect with the external human resources management system. The interface employs HTTPS encrypted transmission protocol to ensure data security during transmission. An interface access key is also configured, allowing only the human resources system with the valid key to push data to the access control system. Real-time connection and event monitoring utilize a Webhook callback mechanism. The access control system pre-registers a callback address with the human resources system. When an employee's status changes in the human resources system, the system automatically pushes the change event data to this callback address, eliminating the need for the access control system to actively poll, reducing system resource consumption, and ensuring the real-time nature of the change event. The callback response timeout is set to 30 seconds. If no response is received within the timeout period, the human resources system will push the data three times. If there is still no response, a synchronization failure log is recorded, and a notification is sent to the administrator.

[0036] Data for all types of change events is formatted in JSON format. Employee reassignment event data includes employee ID, employee name, original position ID, new position ID, and effective reassignment date. Employee resignation event data includes employee ID, employee name, resignation date, and reason for resignation. Employee confidential qualification change event data includes employee ID, employee name, original qualification level, new qualification level, and effective qualification change date. Internally, the system uses access control lists to store employee permission information. These lists include employee ID, a list of accessible rack numbers, accessible security levels, effective permission time, expiration permission time, and permission status, which is categorized as either normal or frozen.

[0037] The specific rules and procedures for permission adjustments are as follows: Upon receiving an employee reassignment event, the system queries the permission records in the current access control list based on the employee ID, deletes the corresponding list of accessible rack numbers and accessible security levels based on the original job ID, and then queries the corresponding permission information from the job-permission mapping table based on the new job ID, adds it to the employee's access control list, and updates the permission effective time to the reassignment effective time. Upon receiving an employee resignation event, the system changes the permission status in the employee's access control list to frozen, freezing all accessible rack numbers and security levels, and records the freeze time as the resignation date. Upon receiving an employee confidentiality qualification change event, the system adjusts the accessible security level range based on the new qualification level. If the new qualification level is higher than the original level, access permissions for the corresponding high-security racks are added; if the new qualification level is lower than the original level, access permissions for the corresponding high-security racks are deleted, and the permission effective time is updated to the qualification change effective time.

[0038] The effective time for permission changes is the time specified in the change event. If no effective time is specified, the changes take effect immediately. The system has a permission change rollback mechanism. When abnormal situations such as data errors or interface interruptions occur during the change process, the system will automatically restore the permission state before the change. At the same time, the abnormal information, the permissions before the change, and the permissions after the change will be recorded in the synchronization log. Administrators can query the cause of the abnormality through the log and manually trigger resynchronization.

[0039] Also includes: The classified operation log module is used to encrypt and store all operation logs of the system using the SM4 national cryptographic algorithm for a period of not less than 3 years. The operation logs include records of identity verification, access control opening and closing, shielding start and stop, and permission change. The operation log entries for the classified operation log module include operation timestamp, operation module, operation type, operation object, operation result, operator ID, operator name, and exception information. The data format is JSON. Operation modules are divided into authentication, security level control, electromagnetic shielding linkage, and dynamic permission synchronization modules. Operation types are categorized according to different modules, such as identity verification, security level matching, shielding activation / deactivation, and permission adjustment. Operation results are categorized as success or failure. The exception information field only specifies the reason for failure when the operation fails. Storage employs a combination of local encrypted storage and off-site backup. Local storage uses encrypted hard drives, while off-site backup uses a dedicated classified backup server. Backups are performed automatically every morning to ensure no log data loss.

[0040] The SM4 national cryptographic algorithm employs ECB encryption mode with PKCS#7 padding. The encryption key is 128 bits long and uses a hierarchical storage strategy: a master key and secondary keys. The master key, stored in the hardware encryption module, is used only to encrypt secondary keys and does not directly participate in log data encryption. Secondary keys are used to encrypt operation log data; each log file corresponds to a unique secondary key. These secondary keys are encrypted with the master key and stored in the database. Secondary keys are replaced periodically every 90 days. During replacement, a new secondary key is automatically generated to encrypt newly generated log data, while the old secondary key is retained for decrypting historical log data, ensuring that historical logs can be queried normally. An encrypted channel is used during key transmission to prevent key leakage. In case of key loss or damage, it can be restored from backup after dual authentication by the administrator.

[0041] The anomaly alarm module is used to trigger the on-site audible and visual alarm and simultaneously push alarm information to the administrator terminal when authentication failure, access control anomaly, shielding linkage failure, or permission synchronization failure is detected.

[0042] The specific triggering conditions and thresholds for various abnormal situations in the abnormal alarm module are as follows: Identity verification failure trigger condition: three consecutive identity verification failures, with each failure occurring within an interval of no more than 5 minutes. If three consecutive verification failures occur, an alarm will be triggered immediately. Access control abnormality trigger condition: after the cabinet access control is unlocked, the lock is not closed within 30 minutes, or after the lock is closed, no shielding device stop signal is detected for more than 10 minutes, triggering an access control abnormality alarm. Shielding linkage failure trigger condition: after sending a shielding start command, no shielding device start success feedback signal is received within 30 seconds, or after sending a shielding stop command, no shielding device stop success feedback signal is received within 30 seconds, triggering a shielding linkage failure alarm. Permission synchronization failure trigger condition: after receiving an employee status change event, permission adjustment is not completed within 1 minute, or data errors or interface interruptions are detected during synchronization, triggering a permission synchronization failure alarm.

[0043] The generated alarm information includes alarm time, alarm type, alarm location, anomaly details, and handling suggestions. The encoding format is JSON. The alarm type corresponds to various anomalies, the alarm location specifies the rack number or module, the anomaly details describe the specific cause, and the handling suggestions provide targeted solutions. Information is pushed to administrator terminals using the MQTT communication protocol, which is lightweight and low-power, suitable for inter-device message pushing. The push process uses TLS encryption to ensure alarm information is not stolen or tampered with. The system supports simultaneous push of alarm information to multiple administrator terminals. If no administrator confirmation is received within 5 minutes of the initial push, the system will push the alarm information again until the administrator confirms receipt and takes action.

[0044] The specific workflow is as follows: The operator initiates an unlock request, and the multimodal authentication module completes the identity verification. After identity verification is passed, the security classification control module verifies whether the combination matches the security classification of the target cabinet; Once the matching is successful, the electromagnetic shielding linkage module automatically activates the electromagnetic shielding device of the target cabinet, and then the access control unlocks. After the operator completes the work and closes the cabinet door, the electromagnetic shielding linkage module automatically shuts down the shielding device; During this process, the dynamic permission synchronization module continuously monitors personnel status and adjusts permissions in real time. All operations are recorded by the confidential operation log module, and abnormal situations are reported by the abnormal alarm module.

[0045] The collaborative process of the entire workflow is as follows: The operator initiates an unlock request through the rack access control terminal, specifying the target rack number. The terminal sends the request signal to the multimodal identity verification module. The module immediately initiates the collection of face, fingerprint, and NFC employee badge information. If the target rack is classified as top secret, the operator is prompted to insert a hardware key to complete the collection. After collection, the module performs reflection suppression and illumination equalization algorithms on the face image, and then completes identity verification through 3D structured light liveness detection and feature comparison. If the verification is successful, a verification success signal and a list of verification factors provided by the operator are sent to the security classification control module. If the verification fails, the abnormal alarm module is immediately triggered, the on-site audible and visual alarm is activated, and an identity verification failure alarm message is pushed to the administrator terminal, specifying the operator's identity, the number of failures, and the reason for the failure. The system records this failed operation and prohibits the operator from initiating another request within 5 minutes.

[0046] After receiving the verification pass signal, the security classification control module retrieves the security classification identifier of the target cabinet and the corresponding preset verification combination. It compares the verification factor list provided by the operator with the preset combination one by one. After confirming that the types are complete and all have passed the verification, it outputs a security classification matching pass signal to the electromagnetic shielding linkage module. If the matching fails, an abnormal alarm is triggered, and a security classification mismatch alarm message is pushed to clarify the security classification of the target cabinet and the required verification combination. At the same time, the access control is prohibited from unlocking.

[0047] After receiving the matching pass signal, the electromagnetic shielding linkage module generates a shielding start command and sends it to the electromagnetic shielding device in the target cabinet via the RS485 communication protocol. Upon activation, the shielding device sends a start success signal back to the module. Receiving this signal, the module sends an unlock signal to the access control unit, unlocking the door. Simultaneously, it records the shielding start timestamp, cabinet number, and operator information. After completing the operation, the operator closes the cabinet door and physically locks it. The access control sensor detects the lock signal and sends it to the electromagnetic shielding linkage module. The module generates a shielding stop command and sends it to the shielding device. Upon closing, the shielding device sends a stop success signal back, records the shielding stop timestamp, and sends the complete shielding operation record to the classified operation log module.

[0048] Throughout the process, the dynamic permission synchronization module maintains a continuous connection with the external human resources system via a RESTful API interface. It uses a webhook mechanism to monitor employee status change events. Upon receiving events such as job transfer, resignation, or changes to confidential qualifications, it immediately adjusts the corresponding employee's access permissions according to preset rules. After adjustment, it records the permission change log. If synchronization fails, it triggers an alarm and pushes a permission synchronization failure message, which the administrator can then manually handle. The confidential operation log module records all operations in real time, including identity verification, security level matching, blocking activation / deactivation, and permission changes. The logs are encrypted using the SM4 national cryptographic algorithm to ensure security and traceability, with a storage period of no less than 3 years.

[0049] The anomaly handling procedures and system state recovery mechanisms for each key node are as follows: After identity verification fails, the system remains initially locked. The operator must re-initiate the request and complete identity verification. After three consecutive failures, the system temporarily freezes the operator's request permissions. The freeze can be lifted after administrator confirmation. After security level matching fails, the system refuses access control unlocking. The operator must confirm the security level of the target cabinet, supplement the missing verification factors, and re-initiate the request. After shielding linkage fails, the system immediately triggers an alarm and simultaneously prohibits access control unlocking. The administrator must check the connection status between the electromagnetic shielding device and the system, and whether the device itself is functioning correctly. After troubleshooting, the linkage operation can be re-triggered. After permission synchronization fails, the system maintains the original permission status. The administrator can query the logs for the cause of the anomaly and manually trigger resynchronization to ensure that the permission information is consistent with the human resources system. When access control is abnormal, the system continuously alarms. The administrator must promptly go to the site to check the cabinet status, confirm whether there is any unauthorized operation, manually reset the alarm after handling, and the system returns to normal.

[0050] The foregoing has shown and described the basic principles, main features, and advantages of the present invention. Those skilled in the art should understand that the present invention is not limited to the above embodiments. The embodiments and descriptions in the specification are merely principles of the invention. Various changes and modifications can be made to the invention without departing from its spirit and scope, and all such changes and modifications fall within the scope of the claimed invention. The scope of protection claimed by the appended claims and their equivalents is defined.

Claims

1. A cabinet access control management system, characterized in that, include: Multimodal authentication module, security level classification control module, electromagnetic shielding linkage module, and dynamic permission synchronization module; The multimodal identity verification module is used to collect and verify the multimodal biometric information of the operator and output the identity verification result; The security level classification control module is connected to the multimodal identity verification module. After identity verification is passed, it is used to match and confirm whether the corresponding multimodal verification combination is complete according to the request issued by the operator to unlock the security level of the cabinet, and output the security level matching result. The electromagnetic shielding linkage module is connected to the security level control module. After the security level matching is passed, it automatically sends a start signal to the electromagnetic shielding device of the target cabinet and sends a stop signal after detecting that the cabinet door is closed and locked. The dynamic permission synchronization module is used to connect with external human resources systems and automatically and dynamically adjust the cabinet access permissions of employees in the system based on the received information on employee positions, resignations, and changes in confidential qualifications.

2. The cabinet access control management system according to claim 1, characterized in that, The working method of the multimodal authentication module is as follows: Collect facial images, fingerprint information, and NFC work badge information of operators. When requesting to unlock a top-secret cabinet, hardware key information must be collected. For classified computer room environments, the collected facial images are processed using reflection suppression and illumination equalization algorithms to eliminate reflections on equipment surfaces and interference from weak light and strong backlight; 3D structured light liveness detection is used to verify the liveness of the processed face image, and the face features and fingerprint features are compared with the preset database respectively. When all collected biometric information passes the liveness verification and is successfully matched, an identity verification pass signal is output; otherwise, a verification failure signal is output and an alarm is triggered.

3. The cabinet access control management system according to claim 2, characterized in that, The specific processing steps of the reflection suppression and illumination equalization algorithm are as follows: The system captures raw images containing the operator's face using a camera and identifies highlighted areas within the images. Based on the identified bright area outline and its pixel brightness value, the source of the reflection is determined to be the surface of a fixed device or an ambient light source. If the issue is determined to be surface reflection, a region segmentation-based repair algorithm is used to fill and repair the reflective area using pixel information from the surrounding normal skin-colored areas. If the image is determined to be unevenly lit, an adaptive histogram equalization algorithm is used to compensate for the overall lighting conditions of the image.

4. The cabinet access control management system according to claim 3, characterized in that, The specific matching of differentiated verification combinations in the security level classification and control module is as follows: Each cabinet is pre-assigned a security classification identifier in the system, which includes secret, confidential, and top secret classifications. The confidential server rack is pre-configured with a dual verification combination of "facial recognition + fingerprint verification"; The confidential server racks are pre-set with a triple verification combination of "face verification + fingerprint verification + NFC employee badge verification"; The top-secret server rack is pre-set with a four-fold verification combination of "face verification + fingerprint verification + NFC employee badge verification + hardware key verification"; When an operator initiates an unlocking request, the security classification identifier of the target cabinet is retrieved, and the verification information provided by the operator is verified to meet the preset verification combination corresponding to that security classification.

5. A cabinet access control management system according to claim 4, characterized in that, The security classification control module is also used to support the dynamic adjustment of verification combinations, specifically through the following method: Provides an administrator configuration interface, allowing authorized administrators to modify the verification combination corresponding to any security level identifier according to changes in the security management policy; The modifications include adding or reducing the types of verification factors, or adjusting the combination order of different verification factors under the same security level.

6. The cabinet access control management system according to claim 5, characterized in that, The linkage logic of the electromagnetic shielding linkage module is as follows: Upon receiving a matching pass signal from the security classification control module, a shielding start command is automatically generated. The shielding activation command is sent to the electromagnetic shielding device built into the target cabinet, controlling it to activate and block the wireless signals inside the cabinet; When the access control sensor detects that the cabinet door is closed and physically locked, it automatically generates a shielding stop command and sends it to the electromagnetic shielding device to control its closure.

7. A cabinet access control management system according to claim 6, characterized in that, The electromagnetic shielding linkage module is also used to trace the shielding operation, specifically through the following method: Record the start and stop timestamps of each shielding device, the corresponding cabinet number, and the identity information of the operator who triggered the linkage operation in real time. The start-stop records are associated and stored in the system's operation log to form a queryable electromagnetic shielding operation history.

8. A cabinet access control management system according to claim 7, characterized in that, The real-time synchronization logic of the dynamic permission synchronization module is as follows: Establish a real-time connection with an external human resources management system through a data interface, and listen for and receive employee status change events pushed by the human resources system. When an employee is reassigned, the server rack access permissions for the employee's original position are automatically deleted, and the server rack access permissions for the new position are added. When an employee resignation is detected, all access control permissions for that employee will be automatically frozen. When an employee's confidentiality qualification is changed, the scope of cabinet security levels that the employee can access is automatically adjusted to match the current qualification.

9. A cabinet access control management system according to claim 8, characterized in that, Also includes: The classified operation log module is used to encrypt and store all operation logs of the system using the SM4 national cryptographic algorithm for a period of not less than 3 years. The operation logs include records of identity verification, access control opening and closing, shielding start and stop, and permission change. The anomaly alarm module is used to trigger the on-site audible and visual alarm and simultaneously push alarm information to the administrator terminal when authentication failure, access control anomaly, shielding linkage failure, or permission synchronization failure is detected.

10. A cabinet access control management system according to claim 9, characterized in that, The specific workflow is as follows: The operator initiates an unlock request, and the multimodal authentication module completes the identity verification. After identity verification is passed, the security classification control module verifies whether the combination matches the security classification of the target cabinet; Once the matching is successful, the electromagnetic shielding linkage module automatically activates the electromagnetic shielding device of the target cabinet, and then the access control unlocks. After the operator completes the work and closes the cabinet door, the electromagnetic shielding linkage module automatically shuts down the shielding device; During this process, the dynamic permission synchronization module continuously monitors personnel status and adjusts permissions in real time. All operations are recorded by the confidential operation log module, and abnormal situations are reported by the abnormal alarm module.

Images