Cooperative communication management and control method and system for RFID intelligent cabinet terminal and server

Abstract

The invention is suitable for the technical field of communication management and control, and provides a cooperative communication management and control method and system for an RFID intelligent cabinet terminal and a server, and the method comprises the steps: S1, terminal registration and session key negotiation are carried out; s2, distributed verification and remote authorization; the type of the cabinet is adaptive; s3, RFID checking and abnormity reporting are carried out; grading alarm and full-link log recording are carried out; off-line operation and breakpoint resume are synchronized, a terminal collects equipment operation data, triggers a corresponding alarm event and executes differentiated processing to generate a corresponding log record, end-to-end encryption of a full communication link is achieved, all downlink synchronization data and service instructions are encrypted based on an exclusive encryption key derived from a session key of this time, and the encryption efficiency is improved. And all uplink messages carry the integrity check codes, and when the check fails, the session key forced refresh and the device identity secondary check are triggered immediately, so that the cracking risk caused by long-term use of the fixed key and the possibility of occurrence of the message replay attack hidden danger problem are reduced.

Description

Technical Field

[0001] This invention relates to the field of communication control technology, and more specifically, to a collaborative communication control method and system for an RFID smart cabinet terminal and a server. Background Technology

[0002] With the deep integration of IoT and RFID technologies, RFID smart cabinets, with their advantages of non-contact batch identification, full life-cycle traceability of items, and automated storage and retrieval management, have been widely used in scenarios with stringent requirements for the security of item storage and retrieval, the storage of judicial evidence, the management of pharmaceutical cold chain, the storage of valuables, and the management of archives and documents.

[0003] The mainstream RFID smart cabinets in the industry are gradually evolving from a single-machine local control mode to a cloud-edge collaborative architecture that combines terminal edge computing and server centralized control. The communication reliability, data security, and control collaboration between the terminal and the server directly determine the overall protection capability and operational stability of the smart cabinet system.

[0004] However, existing technologies still suffer from multiple technical deficiencies in the communication control between RFID smart cabinet terminals and servers. First, the communication security protection mechanism is static and fixed, and the device security risks and control strategies are not linked and constrained. Second, existing technologies mostly use fixed encryption keys or single-negotiation long-term valid session keys to complete communication encryption, and the key update mechanism lacks dynamic triggering logic, making it difficult to resist network attacks such as message replay and key cracking. Third, device identity verification is only performed once upon network access, and the device operating status, sensor anomalies, and historical violation records are not included in the security assessment system. It is impossible to dynamically adjust the encryption strength, access control rules, and RFID inventory parameters based on the real-time security risk level of the device. In high-risk scenarios, forced security upgrades cannot be achieved, resulting in security vulnerabilities. This paper proposes a collaborative communication control method and system for RFID smart cabinet terminals and servers to improve the existing problems. Summary of the Invention

[0005] In view of the shortcomings of the existing technology, the purpose of this invention is to provide a collaborative communication management and control method and system for RFID smart cabinet terminals and servers.

[0006] To achieve the above objectives, the present invention provides the following technical solution: A collaborative communication control method between an RFID smart cabinet terminal and a server includes the following steps: S1. Terminal Registration and Session Key Negotiation: After powering on, the terminal loads pre-stored basic device information, initiates a connection request to the server, negotiates the session encryption key, and establishes a two-way encrypted communication channel. The terminal uploads its basic device information, the server completes device identity verification, and upon successful verification, sends out synchronized data with a digital signature, including user permissions, cabinet type configuration, RFID card reader configuration, and alarm setting parameters.

[0007] S2. Distributed Verification and Remote Authorization: The terminal receives the user's cabinet opening verification request, completes and passes local pre-verification, packages the verification data into an authorization request message, and sends it to the server. After the server's secondary verification is successful, it issues an authorization command, and the terminal controls the corresponding lock to unlock.

[0008] S3. RFID Inventory and Anomaly Reporting: After the terminal detects that the cabinet door is closed, it delays the start of the RFID reader to perform a full inventory of tags in the cabinet, compares the data with the ledger data, and triggers an alarm and synchronizes it to the server when the ledger data does not match the actual data.

[0009] The present invention is further configured such that after step S1 and before step S2, it also includes cabinet type adaptive adaptation: the terminal automatically identifies the cabinet type according to the cabinet type configuration parameters issued, and adaptively loads the matching lock control logic, RFID antenna configuration rules and human-machine interface.

[0010] Following step S3, the steps also include tiered alarm and full-link log recording, offline operation and breakpoint resume synchronization.

[0011] The specific steps for tiered alarm and full-link log recording are as follows: the terminal collects equipment operation data, triggers corresponding alarm events and performs differentiated handling, generates corresponding log records, and transmits data according to alarm priority.

[0012] The specific steps for offline operation and breakpoint resume synchronization are as follows: When terminal communication is interrupted, switch to offline mode, complete data management and cache based on local permission data. After communication is restored, perform incremental data synchronization with the server to achieve strong bidirectional data consistency.

[0013] The present invention is further configured such that, in step S1, the basic device information includes device ID, device number, device verification code, device name, service entry time, device location, and unit code. When the server verifies the identity of the device, it completes the device legitimacy verification through the device verification code; if the verification fails, the connection request from the terminal is rejected.

[0014] All data exchanged between the terminal and the server follows preset application-layer communication rules. These rules include a fixed message header and a variable message body. The message header must include at least the protocol version number, message type, message length, encryption flag, and cyclic redundancy check (CRC) code. Upon receiving data, the server first parses the message header, and then parses the message body according to the message type and length.

[0015] The present invention is further configured such that, after the encrypted communication connection is established in step S1, a heartbeat keep-alive mechanism is maintained between the terminal and the server. The terminal sends heartbeat messages to the server according to a preset heartbeat cycle. The heartbeat message includes the terminal's running status code, the current firmware version number, and a sensor data summary. If the server does not receive a heartbeat message within several consecutive heartbeat cycles, it determines that the terminal is offline and triggers an offline alarm on the server side.

[0016] The present invention is further configured such that, in the cabinet type adaptive adaptation, the cabinet type includes desktop cabinets and combination cabinets. If a desktop cabinet is identified, the terminal loads single-door lock control logic, activates the corresponding RFID antenna, and directly executes the single-door unlocking action after successful cabinet opening verification. If a combination cabinet is identified, the terminal loads multi-compartment lock control logic, activates the RFID antenna array matching the compartment, synchronously loads the mapping configuration relationship between the RFID antenna and the compartment, displays the compartment selection interface after successful cabinet opening verification, and executes the corresponding compartment unlocking action after receiving the user's compartment selection command.

[0017] The present invention is further configured such that, in step S2, the cabinet opening verification request supports any one or more combinations of password verification, fingerprint verification, and facial recognition. The preset number of users for cabinet opening verification includes four levels: single-person verification, two-person verification, three-person verification, and four-person verification. During local pre-verification on the terminal, valid verification of the corresponding number of users must be completed, and the verification data of each user must match the locally stored user permission data to pass the pre-verification. The authorization instruction issued by the server includes the authorization validity period and a unique operation ID.

[0018] The present invention is further configured such that: the upload of verification data in distributed verification and remote authorization, the synchronization of inventory results in RFID inventory and anomaly reporting, and the upload of alarm data in hierarchical alarm and full-link log recording all employ a preset symmetric encryption algorithm to encrypt the data, and a preset hash algorithm is used to generate a data integrity verification code. When the terminal uploads batch log data, the data is first compressed and encoded, and then encrypted for transmission.

[0019] This invention is further configured such that, in RFID inventory and anomaly reporting, the configurable range for the RFID reading delay time when the door is closed is 5-30 seconds, and the configurable range for the cyclic RFID reading time is 10-60 seconds. When the terminal performs a full inventory operation, the cyclic reading duration can be dynamically adjusted according to the number of tags counted. If no new tags are added after three consecutive reads, the inventory operation is terminated early. In the hierarchical alarm and full-link log recording, the types of alarm events include tilt alarm, excessive error alarm, door not closed alarm, abnormal door opening alarm, and internal movement alarm. For different types of alarm events, the trigger threshold, alarm duration, voice broadcast rules, and data upload priority can be configured independently.

[0020] This invention is further configured such that, in the hierarchical alarm and full-link log recording, the log records are divided into three categories: management logs, cabinet opening logs, and alarm logs. The management log records all user operations in the system settings; the cabinet opening log records all user cabinet opening operations and results; and the alarm log records the triggering, handling, and termination records of all alarm events. Each log entry carries an identifier and a timestamp. After receiving data, the server verifies the data by comparing the identifier, rejects duplicate messages, and rearranges out-of-order messages according to the timestamp.

[0021] A collaborative communication control system for an RFID smart cabinet terminal and a server is provided to execute a collaborative communication control method for an RFID smart cabinet terminal and a server as described above. The system includes a smart terminal and a server platform, wherein the smart terminal and the server platform are encrypted and connected via an Internet of Things (IoT) communication link.

[0022] The intelligent terminal includes a main control module, as well as a biometric data acquisition module, an RFID reading and writing module, a lock control execution module, a sensor module, a storage module, a human-computer interaction module, and a communication module, which are electrically connected to the main control module.

[0023] The main control module is used to run the embedded operating system and coordinate the collaborative work of various functional modules.

[0024] The biometric data collection module includes a fingerprint collection unit, a facial recognition unit, and a password input unit, used to collect user verification data for opening the cabinet. The RFID reader / writer module is used to read the RFID tags of items inside the cabinet, completing the inventory check of the items inside.

[0025] The lock control execution module is used to receive the cabinet opening authorization command from the main control module and execute the unlocking action of the corresponding cabinet door or cabinet compartment.

[0026] The sensor module includes tilt sensors, door magnetic sensors, and vibration sensors, which are used to collect the device's posture data, cabinet door status data, and data on the movement of items inside the cabinet.

[0027] The storage module is used to store basic information about local storage devices, user permission data, configuration parameters, log data, and offline cache data.

[0028] The human-computer interaction module includes a touch screen and a voice broadcast unit, which are used to display the human-computer interaction interface, receive user operation commands, and broadcast voice prompts and alarm sounds.

[0029] The communication module is used to maintain an encrypted long-term connection with the server platform, encrypt and decrypt data at the transport layer, and complete reliable bidirectional transmission of instructions and data.

[0030] In summary, this application includes at least one of the following beneficial technical effects: (1) Through the two-way session key negotiation mechanism that is executed as soon as the terminal is powered on, end-to-end encryption of the entire communication link is realized. All downlink synchronization data and service instructions are encrypted with dedicated encryption keys derived from the session key. All uplink messages are accompanied by integrity verification codes. If the verification fails, the session key will be forcibly refreshed and the device identity will be verified again, which reduces the risk of cracking and the possibility of message replay attack caused by long-term use of fixed keys.

[0031] (2) Based on the operating status, sensor data and historical anomaly records in the heartbeat message, the present invention generates a real-time security level through a security scoring model and uses the security score as a mandatory constraint parameter for the entire business process. Differentiated encryption refresh rules, permission verification strength and RFID inventory parameters are set for high, medium and low risk levels to achieve real-time linkage between security risks and control strategies. At the same time, in conjunction with the security score cumulative downgrade mechanism, the full-cycle security defense line of equipment network access verification, dynamic evaluation during operation and mandatory closed-loop control of anomalies is further consolidated to improve the inherent security of system communication and equipment operation.

[0032] (3) The present invention constructs a distributed collaborative management and control architecture of local terminal pre-verification and secondary authorization verification of the server. It reduces the server's computing pressure and network dependence through local pre-verification, and solves the security vulnerabilities of local permission tampering and unauthorized operation through secondary server verification, thus taking into account the system's security and operational availability. At the same time, the present invention also supports the free combination of multiple types of verification methods and multi-level multi-person verification configuration, and can dynamically upgrade the verification strength based on the device's security level, which can flexibly adapt to the management and control needs of different security level scenarios.

[0033] (4) This invention establishes a multi-dimensional adaptive adjustment rule for inventory parameters. On the one hand, it strictly follows the inventory parameter constraints corresponding to the real-time safety score of the equipment. On the other hand, it can dynamically adjust the RFID antenna transmission power, polling order and cycle reading time based on the historical tag reading rate of the cabinet. At the same time, it supports dynamically adjusting the inventory time according to the tag reading situation and terminating the inventory operation without new tags in advance. Under the premise of ensuring the integrity of the inventory data, it maximizes the improvement of inventory efficiency. Attached Figure Description

[0034] Figure 1 This is a schematic diagram of a collaborative communication control method between an RFID smart cabinet terminal and a server according to the present invention.

[0035] Figure 2 This is a system flowchart of the collaborative communication management method in this invention.

[0036] Figure 3 This is a block diagram of the overall architecture of the collaborative communication and control system between the RFID smart cabinet terminal and the server in this invention.

[0037] Figure 4 This is a schematic diagram of the safety scoring and grading control logic in this invention. Detailed Implementation

[0038] It should be noted that, unless otherwise specified, the embodiments and features described in this application can be combined with each other. The present invention will now be described in detail with reference to the accompanying drawings and embodiments.

[0039] It should be noted that, unless otherwise specified, all technical and scientific terms used in this application have the same meaning as commonly understood by one of ordinary skill in the art to which this application pertains.

[0040] Please see Figures 1-4 The present invention provides the following technical solutions: Example 1, see Figure 1 and Figure 2 A collaborative communication and control method between an RFID smart cabinet terminal and a server includes the following steps: S1. Terminal registration and session key negotiation.

[0041] S11. After the terminal is powered on, it loads the pre-stored basic device information, initiates a connection request to the server, negotiates the session encryption key, and establishes a two-way encrypted communication channel.

[0042] S12. The terminal uploads basic device information, and the server completes device identity verification. When the server verifies the device identity, it completes the device legality verification through the device verification code.

[0043] The pre-stored basic equipment information includes, but is not limited to, equipment ID, equipment number, equipment verification code, equipment name, service entry time, equipment location, and unit code.

[0044] S13. After successful verification, the server sends out synchronization data with a digital signature. This synchronization data includes user permissions, cabinet type settings, RFID card reader configuration, and alarm setting parameters. If the verification fails, the terminal's connection request is rejected.

[0045] All synchronization data, business instructions, and authorization messages sent by the server are encrypted using a dedicated encryption key derived from the session key negotiated in this transaction. All business data and request messages reported by the terminal must use the session key negotiated in this transaction to generate an integrity check code. Messages that fail the check will be rejected by the server, and the session key will be forcibly refreshed and the device identity will be verified again immediately.

[0046] To maintain connection stability, a heartbeat keep-alive mechanism is maintained between the terminal and the server after the encrypted communication connection is established to ensure connection stability.

[0047] The terminal sends heartbeat messages to the server according to a preset heartbeat cycle. The heartbeat message includes at least the terminal's running status code, the current firmware version number, and a sensor data summary.

[0048] If the server does not receive a heartbeat message within several consecutive heartbeat cycles, it determines that the terminal is offline and triggers an offline alarm on the server side.

[0049] Each time the server receives a heartbeat message, it generates a real-time safety score for the device based on the running status code, sensor data summary, and historical anomaly records in the message, using a preset safety scoring model.

[0050] See Figure 4 The risk rating is divided into three levels: high risk, medium risk, and low risk. The risk rating serves as a mandatory constraint parameter for all subsequent business steps, and the specific rules are as follows: High-risk level: Force immediate refresh of session key, and each subsequent cabinet opening operation must derive a one-time session sub-key based on the unique operation ID; lock single-person cabinet opening verification permission, and force all cabinet opening requests to upgrade to multi-factor verification by two or more people; force the RFID inventory delay time to the minimum value of 5 seconds, force the loop reading time to the maximum value of 60 seconds, and disable the optimization logic of "prematurely terminating inventory after three consecutive no new tags"; simultaneously trigger the highest level local audible and visual alarm and push notification to the administrator.

[0051] Medium risk level: Session key refresh cycle shortened by 50%; cabinet opening verification requires additional password confirmation on top of the original verification method; RFID cycle reading time extended by 50% on top of the original configuration, and the condition for early termination of inventory is upgraded to five consecutive reads with no new tags.

[0052] Low risk level: Perform the entire process according to the original preset configuration.

[0053] The equipment safety score implements a cumulative downgrade mechanism. After a single abnormal trigger causes the score to be downgraded, the initial score can only be restored after 10 consecutive normal heartbeats without abnormalities and confirmation from the administrator.

[0054] All data exchanged between the terminal and the server follows the preset application layer communication rules.

[0055] The default application layer communication rules include a fixed message header and a variable message body.

[0056] The message header must include at least the protocol version number, message type, message length, encryption flag, and cyclic redundancy check code.

[0057] The server's message parsing logic is as follows: after receiving data, the server first parses the message header, and then parses the message body according to the message type and length.

[0058] S2, Distributed Authentication and Remote Authorization.

[0059] S21. The terminal receives the user's request to open the cabinet for verification.

[0060] When a user needs to open the cabinet, a cabinet opening verification request is initiated through the human-computer interaction interface. This request supports multiple verification methods.

[0061] The cabinet opening verification request supports any one or more combinations of password verification, fingerprint verification, and facial verification.

[0062] The preset number of people allowed for opening the cabinet for verification includes four levels: single verification, double verification, triple verification, and quadruple verification.

[0063] S22. The terminal performs local pre-verification, and after the local pre-verification passes, it packages the verification data to generate an authorization request message and sends it to the server.

[0064] During local pre-verification on the terminal, valid verification of a corresponding number of users must be completed, and the verification data of each user must match the user permission data stored locally in order to pass the pre-verification.

[0065] After the local pre-verification is successful, the terminal packages the relevant data of this verification into an authorization request message and sends it to the server through an encrypted channel.

[0066] S23. After the server passes the secondary verification, it issues an authorization command, and the terminal controls the corresponding lock to unlock.

[0067] After receiving the request, the server performs a secondary verification, such as verifying whether the user has the right to operate the cabinet at the current time and whether the operation is within the validity period.

[0068] After the server passes the secondary verification, it issues an authorization command. This command contains the authorization validity period and a unique operation ID, which is used to prevent command replay and track the operation.

[0069] The authorization instruction also includes a whitelist of tags for the authorized items. The whitelist is generated based on the user's permission scope and the cabinet opening application, and clearly indicates the operation type (retrieval only / storage only / accessible). After receiving the authorization instruction, the terminal immediately starts the real-time monitoring mode of the RFID reader and polls the status of tags in the cabinet at a preset frequency. If the terminal detects that the tag retrieved / placed by the user is not in the whitelist of this authorization, or the operation type does not match the authorization, it immediately triggers a local audible and visual alarm, locks the cabinet door, and reports the abnormal event to the server in real time.

[0070] After receiving the authorization command, the terminal controls the corresponding lock control module to open the cabinet door or compartment.

[0071] S3, RFID inventory and anomaly reporting.

[0072] S31. After the terminal detects that the cabinet door is closed, it delays the start of the RFID reader to perform a full inventory of the tags inside the cabinet.

[0073] After the terminal detects that the cabinet door is closed via the door magnetic sensor, it does not immediately start the inventory count. Instead, it delays for a configurable period of time before starting the RFID reader. Once the inventory count is started, the RFID reader begins to perform a full inventory count of the tags inside the cabinet. The time for cyclically reading RFID tags can be configured.

[0074] Setting a delay time can reduce the impact of vibration and interference at the moment of door closing on the accuracy of inventory counting. In RFID inventory and abnormal reporting, the configurable range of the RFID reading delay time when closing the door is 5-30 seconds, and the configurable range of the RFID reading time in the loop is 10-60 seconds.

[0075] When the terminal performs inventory operations, it must simultaneously follow the inventory parameter constraint rules corresponding to the real-time security score of the device during terminal registration and session key negotiation. At the same time, based on the tag reading rate data of the cabinet's historical inventory, the terminal can dynamically adjust the RFID antenna transmission power and polling order. If the tag reading rate of the cabinet is lower than the preset threshold for two consecutive inventory checks, the loop reading time will be automatically extended to ensure the integrity of the inventory data.

[0076] S32. When the data in the ledger does not match the actual data, an alarm is triggered and synchronized to the server.

[0077] When the terminal compares the list of tags counted with the locally stored ledger data, in order to optimize the inventory efficiency, the terminal can dynamically adjust the loop reading time according to the number of tags counted. When no new tags are added after three consecutive reads, the inventory operation is terminated in advance.

[0078] If a discrepancy is found between the records and the actual inventory, such as the presence of extra unregistered labels or missing labels, the terminal will immediately trigger an alarm and synchronize the alarm event and inventory results to the server.

[0079] The terminal synchronously compares the inventory results with the whitelist of items authorized for this opening. Missing tags within the whitelist trigger a high-priority alarm, while changes to tags outside the whitelist trigger the highest-priority alarm. Upon receiving an alarm event indicating a discrepancy between inventory and records, the server immediately enforces the following mandatory constraints: Constraint 1: Temporarily lock the user's access to open the cabinet for this operation. When the user initiates the next cabinet opening request, the local pre-verification will be forcibly upgraded to two-person multi-factor authentication, and the server's secondary verification will require an additional manual approval step by the administrator.

[0080] Constraint 2: Lower the real-time security score of the corresponding device, triggering the corresponding level of security control rules.

[0081] Restriction 3: If the inventory results of the same user after opening the cabinet three times in a row show discrepancies between the records and the actual inventory, the user's cabinet opening privileges will be permanently frozen and can only be restored after the administrator reviews and authorizes them again.

[0082] Example 2, see reference Figure 1 and Figure 2 Based on the collaborative communication management method described in Example 1, this embodiment adds a cabinet type adaptive adaptation step, a graded alarm and full-link log recording step, and an offline operation and breakpoint resume synchronization step to further improve the confidentiality, security and scenario adaptability of terminal and server interaction.

[0083] After step S1 and before step S2 in Embodiment 1, there is also a cabinet type adaptive adaptation step.

[0084] The specific steps for adaptive matching of cabinet type are as follows: Step 1: The terminal automatically identifies the cabinet type based on the cabinet type configuration parameters sent to it.

[0085] In the cabinet type adaptive adaptation, the cabinet types include desktop cabinets and combination cabinets.

[0086] Step 2: Adaptively load and match the lock control logic, RFID antenna configuration rules, and human-machine interface based on the cabinet type.

[0087] If the device is identified as a desktop cabinet, the terminal loads the single-door lock control logic, activates the corresponding RFID antenna, and directly executes the single-door unlocking action after the cabinet opening verification is successful.

[0088] If the cabinet is identified as a combination cabinet, the terminal loads the multi-compartment locking logic, enables the RFID antenna array that matches the compartment, and synchronously loads the mapping configuration relationship between the RFID antenna and the compartment. After the cabinet opening verification is successful, the compartment selection interface is displayed. After receiving the user's compartment selection command, the terminal executes the unlocking action of the corresponding compartment.

[0089] By setting up adaptive matching for cabinet types, the same set of terminal hardware can be flexibly adapted to cabinets with different physical structures, greatly improving the versatility of the product and production efficiency.

[0090] It should be noted that after each full inventory check, the terminal automatically calibrates the hardware configuration of the cabinet based on the inventory results: if the antenna of a certain cabinet reads the tag of an adjacent cabinet multiple times in a row, the transmission power and polling rules of the antenna are automatically adjusted, and the mapping relationship between the antenna and the cabinet is recalibrated to avoid tag cross-reading; if the desktop cabinet repeatedly shows an abnormal situation where the number of inventory tags exceeds the cabinet capacity, the cabinet type is automatically re-identified and the configuration is synchronized, so that the cabinet configuration matches the hardware status.

[0091] Following step S3 in Example 1, the system also includes steps for hierarchical alarm and full-link log recording, offline operation and breakpoint resume synchronization.

[0092] The specific steps for tiered alarm and full-link logging are as follows: The terminal collects equipment operation data, triggers corresponding alarm events and performs differentiated handling, generates corresponding log records, and transmits data according to alarm priority.

[0093] In the hierarchical alarm and full-link log recording, the types of alarm events include tilt alarms (such as alarms where the cabinet tilt angle exceeds the standard), alarms with too many errors (such as alarms where the password is continuously wrong), alarms where the door is not closed, alarms where the door is opened abnormally (such as alarms where the door is opened without authorization), alarms where internal movement is detected by vibration sensors, etc.

[0094] For different types of alarm events, trigger thresholds, alarm durations, voice broadcast rules, and data upload priorities can be configured independently.

[0095] For example, the tilt alarm has the highest priority and must be uploaded immediately and trigger a local audible and visual alarm; while the error overload alarm has a lower priority and can be uploaded within a preset time window.

[0096] Tiered alarms and all events in the entire chain generate corresponding log records, which are divided into three categories: management logs, cabinet opening logs, and alarm logs.

[0097] The management log records all user operations in the system settings, the cabinet opening log records all user cabinet opening operations and results, and the alarm log records the triggering, handling, and termination of all alarm events.

[0098] Each log entry carries an identifier and a timestamp. After receiving the data, the server verifies it by comparing the identifier, rejects duplicate messages, and rearranges out-of-order messages according to the timestamp.

[0099] It should be noted that after receiving the log data, the server performs strong binding verification across log types: each cabinet opening log must have a one-to-one correspondence with the corresponding management log, server authorization log, and inventory log. The unique operation ID in the cabinet opening log must completely match the authorization instruction ID and inventory result ID. If there is a cabinet opening log without a corresponding authorization ID, ID mismatch between logs, or no corresponding trigger record in the alarm log, the server will directly determine that the data is abnormal, refuse to process the message, and trigger a device security score downgrade and a forced refresh of the session key.

[0100] Meanwhile, based on log data from all terminals, the server dynamically optimizes core control rules and synchronizes them to the corresponding terminals through a preset self-learning model: dynamically adjusting application layer communication rules based on historical packet out-of-order and packet loss frequency; automatically optimizing RFID antenna configuration, inventory delay time, and loop reading duration based on read rate data from historical inventory logs; and automatically adjusting the trigger threshold for corresponding alarm types based on false alarm data from historical alarm logs to reduce the false alarm rate.

[0101] The specific steps for offline operation and breakpoint resume synchronization are as follows: Step 1: When terminal communication is interrupted, switch to offline mode, complete management and control based on local permission data, and cache data.

[0102] When the terminal's communication module detects a network interruption, the terminal automatically switches to offline operation mode. In offline mode, the terminal completes local cabinet opening verification and lock control operations normally based on locally stored user permission data and configuration parameters, and caches all operation records, alarm events, inventory results, and other data in the local storage module.

[0103] It should be noted that when a terminal switches to offline mode, an offline mode control policy is dynamically generated based on the device's real-time security score from the last synchronization before going offline, user permission level rules, and user's historical operation credit records. Strategy 1: If the device security score is high before going offline, all ordinary users' access to the cabinet will be locked directly in offline mode. Only the administrator's emergency password can be used to open the cabinet, and the duration of each cabinet opening cannot exceed 30 seconds, and the number of times the cabinet can be opened cannot exceed 1.

[0104] Strategy 2: If the device security score is medium risk before going offline, single-person verification permission will be cancelled in offline mode. All cabinet opening operations will require dual-person verification, and a single user's cumulative number of offline cabinet openings will not exceed three.

[0105] Strategy 3: If a user's historical inventory check records show no abnormalities for five consecutive times, the user can perform the inventory check operation with the original permissions in offline mode; otherwise, the verification method needs to be upgraded.

[0106] In offline mode, all operation records, alarm events, and inventory data are generated into an immutable chain log in chronological order. Each log carries the hash value of the previous log, a unique identifier of the current operation, and is bound to the root hash value of the last server synchronization before going offline, thus preventing offline data tampering.

[0107] Step 2: After communication is restored, incremental data synchronization is completed with the server to achieve strong bidirectional data consistency.

[0108] Once communication is restored, the terminal actively reconnects to the server and initiates the incremental data synchronization process.

[0109] The terminal first sends the summary information of the locally cached data to the server. After comparing the summary with the corresponding data stored locally, the server requests the missing detailed data from the terminal. After receiving the request, the terminal uploads the corresponding detailed data.

[0110] Meanwhile, the server sends configuration updates or control commands that need to be synchronized to the terminal during the terminal's offline period to the terminal; through the above-mentioned breakpoint resume and incremental synchronization mechanism, strong bidirectional data consistency between the terminal and the server is achieved.

[0111] It should be noted that after communication is restored, the terminal first uploads the summary information of the offline hash chain log. The server first completes the hash chain integrity verification. If the verification fails, it is directly determined that the offline data has been tampered with, incremental synchronization is refused, and the device identity is triggered to re-verify. All cabinet opening permissions of the device are temporarily locked until the administrator confirms on-site.

[0112] After the hash chain verification passes, the server completes incremental data synchronization and immediately updates the device's real-time security score, user permissions, and device configuration parameters based on offline operation data. If a high-level alarm event occurs during offline operation, the device security score is directly lowered and the cabinet opening verification strength is upgraded after synchronization. If a discrepancy is found between the account and the actual situation after a user opens a cabinet during offline operation, the user's online cabinet opening permission is immediately locked after synchronization. If multiple sensor anomalies occur during offline operation, the server reissues the alarm threshold parameters after synchronization, narrowing the trigger threshold and improving alarm sensitivity.

[0113] The definitions of hash algorithm, hash value, and hash chain involved in this scheme are as follows: A hash algorithm, also known as a hashing algorithm, is an algorithm that maps input data of arbitrary length to a fixed-length binary string through irreversible cryptographic mathematical operations. The fixed-length binary string generated by the operation is the hash value. The hash value generated by the same input data through the same hash algorithm is unique and deterministic. Any slight change in the input data will lead to a completely different change in the generated hash value, and it is impossible to deduce the original input data from the hash value. Therefore, it can be used for data integrity verification and anti-tampering verification. A hash chain is a chain-like anti-tampering data structure built on a hash algorithm. Its core logic is that each data record generated in chronological order generates a corresponding hash value through a hash algorithm, and the hash value calculation of the subsequent data record needs to include the hash value of the previous data record as the core input parameter. This forms a chain-like hash sequence with strong correlation between the preceding and following records. Tampering with a single record will cause the entire chain to fail, which can realize the immutable traceability of the entire process operation record.

[0114] The above steps further optimize the communication stability and security between the terminal and the server. Furthermore, in this method, the upload of verification data in distributed verification and remote authorization, the synchronization of inventory results in RFID inventory and anomaly reporting, and the upload of alarm data in hierarchical alarms and full-link log recording all employ a preset symmetric encryption algorithm to encrypt the data, and a preset hash algorithm is used to generate a data integrity verification code. When the terminal uploads batch log data, the data is first compressed and encoded before being encrypted for transmission, thus saving network bandwidth and traffic.

[0115] Example 3, see reference Figure 3 A collaborative communication control system for an RFID smart cabinet terminal and a server is provided for executing a collaborative communication control method for an RFID smart cabinet terminal and a server as described above. The system includes a smart terminal and a server platform, wherein the smart terminal and the server platform are encrypted and connected via an Internet of Things (IoT) communication link.

[0116] The intelligent terminal includes a main control module, as well as a biometric data acquisition module, an RFID reading and writing module, a lock control execution module, a sensor module, a storage module, a human-computer interaction module, and a communication module, which are electrically connected to the main control module.

[0117] The main control module is used to run the embedded operating system, coordinate the work of each module, and execute the terminal-side logic in the above-mentioned collaborative communication management method, including but not limited to protocol parsing, data encryption and decryption, local permission verification, and management policy execution.

[0118] The biometric data collection module includes a fingerprint collection unit, a face collection unit, and a password input unit, which are used to collect the user's data for opening the cabinet.

[0119] The RFID reader / writer module communicates with one or more RFID antennas deployed inside the cabinet to read the RFID tags attached to the items inside the cabinet, complete the inventory operation of the items inside the cabinet, and report the data to the main control module.

[0120] The lock control execution module is used to receive the cabinet opening authorization command from the main control module, drive the electromagnetic lock or other electronically controlled lock, and execute the unlocking action of the corresponding cabinet door or cabinet compartment.

[0121] The sensor module includes tilt sensors, door magnetic sensors, and vibration sensors, which are used to collect the device's posture data, cabinet door status data, and abnormal vibration or item movement data inside the cabinet.

[0122] The storage module is used to store basic information about local storage devices, user permission data, configuration parameters, log data, and offline cache data.

[0123] The human-computer interaction module includes a touch screen and a voice broadcast unit, which are used to display the human-computer interaction interface, receive user operation commands, and broadcast voice prompts and alarm sounds.

[0124] The communication module is used to maintain an encrypted long-term connection with the server platform, encrypt and decrypt data at the transport layer, and complete the reliable bidirectional transmission of control commands and business data.

[0125] A server platform typically consists of one or more high-performance servers, responsible for centralized services such as handling terminal connection requests, device management, user permission management, data storage and analysis, and command issuance.

[0126] Obviously, the embodiments described above are merely some, not all, embodiments of the present invention. All other embodiments obtained by those skilled in the art based on the embodiments of the present invention without inventive effort should fall within the scope of protection of the present invention.

Claims

1. A collaborative communication and control method between an RFID smart cabinet terminal and a server, characterized in that: Includes the following steps: S1. Terminal registration and session key negotiation: After the terminal is powered on, it loads the pre-stored basic device information, initiates a connection request to the server, negotiates the session encryption key, and establishes a two-way encrypted communication channel. The terminal uploads basic device information, the server completes device identity verification, and after successful verification, it sends out synchronized data with digital signature, including user permissions, cabinet type configuration, RFID card reader configuration, and alarm setting parameters. S2. Distributed verification and remote authorization: The terminal receives the user's cabinet opening verification request, completes and passes the local pre-verification, packages the verification data to generate an authorization request message and sends it to the server; after the server passes the secondary verification, it issues an authorization command, and the terminal controls the corresponding lock to perform unlocking. S3. RFID Inventory and Anomaly Reporting: After the terminal detects that the cabinet door is closed, it delays the start of the RFID reader to perform a full inventory of tags in the cabinet, compares the data with the ledger data, and triggers an alarm and synchronizes it to the server when the ledger data does not match the actual data.

2. The collaborative communication and control method between an RFID smart cabinet terminal and a server according to claim 1, characterized in that: After step S1 and before step S2, the system also includes cabinet type adaptive adaptation: the terminal automatically identifies the cabinet type according to the cabinet type configuration parameters issued, and adaptively loads the matching lock control logic, RFID antenna configuration rules and human-machine interface. After step S3, the steps also include graded alarm and full-link log recording, offline operation and breakpoint resume synchronization. The specific steps for graded alarm and full-link log recording are as follows: the terminal collects equipment operation data, triggers corresponding alarm events and performs differentiated handling, generates corresponding log records, and transmits data according to alarm priority. The specific steps for offline operation and breakpoint resume synchronization are as follows: when terminal communication is interrupted, switch to offline mode, complete management and control based on local permission data and cache data; after communication is restored, complete incremental data synchronization with the server to achieve strong bidirectional data consistency.

3. The collaborative communication and control method between an RFID smart cabinet terminal and a server according to claim 1, characterized in that: In step S1, the basic device information includes device ID, device number, device verification code, device name, service entry time, device location, and unit code. When the server verifies the identity of the device, it completes the device legitimacy verification through the device verification code. If the verification fails, the connection request from the terminal is rejected. All data exchanged between the terminal and the server follows preset application layer communication rules; the rules include a fixed message header and a variable message body; the message header includes at least the protocol version number, message type, message length, encryption flag, and cyclic redundancy check code; after receiving the data, the server first parses the message header, and then parses the message body according to the message type and length.

4. The collaborative communication and control method between an RFID smart cabinet terminal and a server according to claim 1, characterized in that: After the encrypted communication connection is established in step S1, a heartbeat keep-alive mechanism is maintained between the terminal and the server. The terminal sends a heartbeat message to the server according to a preset heartbeat cycle. The heartbeat message contains the terminal's running status code, the current firmware version number, and a sensor data summary. If the server does not receive a heartbeat message within several consecutive heartbeat cycles, it determines that the terminal is offline and triggers an offline alarm on the server side.

5. The collaborative communication and control method between an RFID smart cabinet terminal and a server according to claim 2, characterized in that: In the cabinet type adaptive adaptation, the cabinet types include desktop cabinets and combination cabinets. If it is identified as a desktop cabinet, the terminal loads single-door lock control logic, enables the corresponding RFID antenna, and directly executes the single cabinet door unlocking action after the cabinet opening verification is passed. If it is identified as a combination cabinet, the terminal loads multi-cabinet lock control logic, enables the RFID antenna array matching the cabinet, and synchronously loads the mapping configuration relationship between the RFID antenna and the cabinet. After the cabinet opening verification is passed, the cabinet selection interface is displayed, and after receiving the user's cabinet selection command, the corresponding cabinet unlocking action is executed.

6. The collaborative communication and control method between an RFID smart cabinet terminal and a server according to claim 5, characterized in that: In step S2, the cabinet opening verification request supports any one or more combinations of password verification, fingerprint verification, and face verification; the preset number of people to be verified includes four levels: single-person verification, two-person verification, three-person verification, and four-person verification; during local pre-verification of the terminal, the corresponding number of users must be validly verified, and the verification data of each user must match the user permission data stored locally in order to pass the pre-verification; the authorization instruction issued by the server includes the authorization validity period and the unique operation ID.

7. The collaborative communication and control method between an RFID smart cabinet terminal and a server according to claim 6, characterized in that: In distributed verification and remote authorization, the data upload of verification data, the synchronization of inventory results in RFID inventory and anomaly reporting, and the data upload of alarm data in hierarchical alarm and full-link log recording all use a preset symmetric encryption algorithm to encrypt the data and use a preset hash algorithm to generate a data integrity verification code. When the terminal uploads batch log data, the data is first compressed and encoded, and then transmitted in encrypted form.

8. The collaborative communication and control method between an RFID smart cabinet terminal and a server according to claim 7, characterized in that: In RFID inventory and anomaly reporting, the configurable range for the RFID reading delay time when the door is closed is 5-30 seconds, and the configurable range for the RFID cyclic reading time is 10-60 seconds. When the terminal performs a full inventory operation, the loop reading duration can be dynamically adjusted according to the number of tags counted. If no new tags are added after three consecutive reads, the inventory operation will be terminated in advance. In the hierarchical alarm and full-link log recording, the types of alarm events include tilt alarm, too many errors alarm, door not closed alarm, abnormal door opening alarm, and internal movement alarm. For different types of alarm events, the trigger threshold, alarm duration, voice broadcast rules, and data upload priority can be configured independently.

9. The collaborative communication and control method between an RFID smart cabinet terminal and a server according to claim 8, characterized in that: In the hierarchical alarm and full-link log recording, the log records are divided into three categories: management logs, cabinet opening logs, and alarm logs. The management log records all user operations in the system settings, the cabinet opening log records all user cabinet opening operations and results, and the alarm log records the triggering, handling, and termination of all alarm events; each log entry carries an identifier and a timestamp. After receiving the data, the server verifies it by comparing the identifier, rejects duplicate messages, and rearranges out-of-order messages according to the timestamp.

10. A collaborative communication control system for an RFID smart cabinet terminal and a server, used to execute the collaborative communication control method for an RFID smart cabinet terminal and a server as described in any one of claims 1-9, characterized in that: This includes smart terminals and server platforms, with the smart terminals and server platforms connected via an encrypted IoT communication link; The intelligent terminal includes a main control module, as well as a biometric data acquisition module, an RFID reading and writing module, a lock control execution module, a sensor module, a storage module, a human-computer interaction module, and a communication module, which are electrically connected to the main control module respectively. The main control module is used to run the embedded operating system and coordinate the collaborative work of various functional modules. The biometric data collection module includes a fingerprint collection unit, a face collection unit, and a password input unit, used to collect user verification data for opening the cabinet; the RFID reading and writing module is used to read the RFID tags of items in the cabinet and complete the inventory operation of the items in the cabinet. The lock control execution module is used to receive the cabinet opening authorization command from the main control module and execute the unlocking action of the corresponding cabinet door or cabinet compartment; The sensor module includes tilt sensors, door magnetic sensors, and vibration sensors, which are used to collect the device's posture data, cabinet door status data, and data on the movement of items inside the cabinet. The storage module is used to store basic information about the local storage device, user permission data, configuration parameters, log data, and offline cache data. The human-computer interaction module includes a touch screen and a voice broadcast unit, which are used to display the human-computer interaction interface, receive user operation commands, and broadcast voice prompts and alarm sounds; The communication module is used to maintain an encrypted long-term connection with the server platform, encrypt and decrypt data at the transport layer, and complete reliable bidirectional transmission of instructions and data.

Images