A multi-modal access control system control method, system, device and medium
By matching identification information and filtering signal strength in a multimodal access control system, combined with multi-level verification of various communication verification signals, the system solves the problems of insufficient security and convenience in existing access control systems, and improves the accuracy of identity verification and the security of system operation.
Patent Information
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- CHENGDU HONGXIN CHUANGZHI TECH CO LTD
- Filing Date
- 2026-05-07
- Publication Date
- 2026-07-31
AI Technical Summary
Existing access control systems suffer from problems such as insufficient security due to a single communication mode, chaotic module layout, signal interference, response delay, and low data interaction efficiency. In particular, when dual verification of vehicles and personnel and unstable communication with the cloud platform are required, vehicle theft and maintenance inconveniences may occur.
The system employs a multimodal access control system, which performs progressive identity verification by matching identification information and filtering signal strength thresholds. It combines multiple types of communication verification signals to form a closed-loop verification system, which is compatible with different user habits and scenarios, ensuring both security and convenience.
It achieves simultaneous improvement in user convenience and system security across diverse application scenarios, eliminates security risks associated with single verification steps, and enhances identity verification accuracy and system stability.
Smart Images
Figure CN122493568A_ABST
Abstract
Description
Technical Field
[0001] This invention relates to the field of access control technology, specifically to a multimodal access control system control method, system, device, and medium. Background Technology
[0002] Currently, intelligent access control terminals have been widely used in various security scenarios, but existing access control systems have many structural defects and are difficult to meet diverse usage needs.
[0003] For example, in existing technologies, some access control terminals only use a single communication mode (such as Bluetooth / Wi-Fi / IC card, etc.), which limits the applicable scenarios and cannot balance convenience and security; some multi-mode access control terminals have a chaotic layout of modules, poor inter-module coordination, and are prone to problems such as signal interference and response delay; some access control terminals lack local storage units, rely on the network for authentication, and cannot operate normally after the network is disconnected.
[0004] In addition, most existing access control terminals for non-motorized vehicle parking lots and new car garages do not have a dual verification structure for vehicles and personnel, which poses risks such as vehicle theft and unauthorized vehicle pickup. Furthermore, the communication structure between the terminals of existing access control systems and cloud platforms and mobile terminals is unstable, resulting in low data exchange efficiency and inconvenient operation and maintenance.
[0005] Therefore, the present invention aims to provide a multimodal access control system control method, system, device and medium to solve the aforementioned related problems. Summary of the Invention
[0006] The technical problem this invention aims to solve is that existing technologies use a single communication mode for identity verification, prioritizing scenario adaptation but failing to ensure security. The goal is to provide a multimodal access control system control method, system, device, and medium. By matching identifier information and filtering identifier signal strength thresholds, it completes the initial screening of authorized users and the locking of valid targets, thereby filtering unauthorized identifiers and invalid targets at long distances and avoiding interference from irrelevant signals. Simultaneously, through the time-sequential verification of dual communication verification signals, cross-verification of secondary communication verification signals is completed within a preset time window after the first communication verification signal passes, forming a progressive identity verification closed loop, eliminating the security risks caused by the breach of a single verification link. Furthermore, this invention is compatible with multiple types of communication verification signals, adapting to different user habits and diverse application scenarios, without being limited by the hardware constraints of a single verification method. The cross-verification of multimodal signals further compensates for the technical shortcomings of single communication modes being easily copied and interfered with, achieving a simultaneous improvement in identity verification accuracy and system operational security while ensuring user convenience.
[0007] This invention is achieved through the following technical solution:
[0008] A multimodal access control system control method, the method comprising:
[0009] After detecting the target signal of at least one first moving target within a preset range, the identification information and identification signal strength of at least one first moving target are obtained, and the at least one first moving target is matched and filtered according to the identification signal strength and identification information to obtain the second moving target;
[0010] Acquire multiple communication verification signals of the second moving target, and use pre-stored authorization information to verify the identity of the acquired multiple communication verification signals according to pre-built authorization verification rules;
[0011] Once the identity verification is successful, a control command to open the access control system will be output.
[0012] Further, at least one first moving target is matched and filtered based on the identification signal strength and identification information to obtain a second moving target, specifically as follows:
[0013] The identification information of at least one first moving target is matched in a pre-built user identification database, and the identification signal strength of the first moving target after the match is passed is judged.
[0014] When the identification signal strength of the first moving target after a successful match is greater than the preset signal strength threshold, the corresponding first moving target will be output as the second moving target.
[0015] Furthermore, multiple communication verification signals of the second moving target are acquired, and the identity verification of the acquired multiple communication verification signals is performed using pre-stored authorization information and pre-constructed authorization verification rules, specifically as follows:
[0016] Acquire the first and second communication verification signals of the second moving target, and verify the first communication verification signal using pre-stored authorization information;
[0017] Within a preset time after the first communication verification signal is successfully verified, the second communication verification signal is verified using pre-stored authorization information.
[0018] Furthermore, the method also includes:
[0019] Obtain the average strength of the identification signal of the first moving target, and use the average strength as a preset signal strength threshold.
[0020] Furthermore, the identification information is an IRK key identifier or a MAC address identifier.
[0021] Furthermore, the communication verification signal includes RFID verification signal, Bluetooth verification signal, NFC verification signal, IC verification signal, and Wi-Fi verification signal.
[0022] The present invention also provides a multimodal access control system control system, which is used in the multimodal access control system control method described in any one of the above claims, the system comprising:
[0023] The target identification and filtering module is used to detect the target signal of at least one first moving target within a preset range, acquire the identification information and identification signal strength of at least one first moving target, and match and filter at least one first moving target according to the identification signal strength and identification information to obtain a second moving target;
[0024] The target authentication module is used to acquire multiple communication authentication signals of the second mobile target and, using pre-stored authorization information and pre-built authorization authentication rules, verify the identity of the acquired multiple communication authentication signals.
[0025] The multimodal access control system control module is used to output control commands to open the access control system after the identity verification is successful.
[0026] The present invention also provides a computer device, including a system memory and a processor, wherein the system memory stores a computer program, and the processor executes the computer program to implement the steps of any of the methods described above.
[0027] The present invention also provides a computer-readable storage medium having a computer program stored thereon, wherein the computer program, when executed by a processor, implements the steps of any of the methods described above.
[0028] The present invention also provides a computer program product containing instructions that, when executed by a cluster of computer devices, cause the cluster of computer devices to perform the method described in any of the preceding claims.
[0029] Compared with the prior art, the present invention has the following advantages and beneficial effects:
[0030] In this invention, by matching identification information and filtering identification signal strength thresholds, the initial screening of authorized users and the locking of effective targets are completed, thereby filtering out unauthorized identifiers and invalid targets at long distances and avoiding interference from irrelevant signals. At the same time, through the time-sequential verification of dual communication verification signals, the cross-verification of secondary communication verification signals is completed within a preset time window after the first communication verification signal passes, forming a layer-by-layer progressive identity verification closed loop, eliminating the security risks caused by the cracking of a single verification link. In addition, this invention is compatible with multiple types of communication verification signals, which can adapt to the usage habits of different users and diverse application scenarios, without being limited by the hardware constraints of a single verification method. Furthermore, the cross-verification of multi-modal signals further makes up for the technical shortcomings of single communication modes being easily copied and interfered with, achieving a simultaneous improvement in identity verification accuracy and system operation security while taking into account user convenience. Attached Figure Description
[0031] To more clearly illustrate the technical solutions of the exemplary embodiments of the present invention, the accompanying drawings used in the embodiments will be briefly described below. It should be understood that the following drawings only show some embodiments of the present invention and should not be regarded as a limitation of the scope. For those skilled in the art, other related drawings can be obtained based on these drawings without creative effort. In the drawings:
[0032] Figure 1 This is a schematic diagram of the method flow of a multimodal access control system control method in this embodiment;
[0033] Figure 2 This is a schematic diagram of the module connection of a multimodal access control system control system in this embodiment;
[0034] Figure 3 This is a schematic diagram of the structure of a computer device in this embodiment. Detailed Implementation
[0035] The exemplary embodiments of this disclosure are described below with reference to the accompanying drawings, including various details of the embodiments to aid understanding, and should be considered merely exemplary. Therefore, those skilled in the art will recognize that various changes and modifications can be made to the embodiments described herein without departing from the scope of this disclosure. Similarly, for clarity and brevity, descriptions of well-known functions and structures are omitted in the following description.
[0036] In this disclosure, unless otherwise stated, the use of terms such as "first," "second," etc., to describe various elements is not intended to limit the positional, temporal, or importance relationships of these elements; such terms are merely used to distinguish one element from another. In some examples, the first element and the second element may refer to the same instance of that element, while in other cases, based on the context, they may refer to different instances.
[0037] The terminology used in the description of the various examples in this disclosure is for the purpose of describing particular examples only and is not intended to be limiting. Unless the context explicitly indicates otherwise, an element may be one or more unless the number of elements is specifically limited. Furthermore, the term "and / or" as used in this disclosure covers any one of the listed items and all possible combinations thereof.
[0038] Example 1
[0039] See Figure 1 , Figure 1 A flowchart illustrating a multimodal access control system control method is provided. In this embodiment, the provided multimodal access control system control method is applied to a pedestrian access control system, which includes a human body monitoring module, a local storage module, an access control driver module, an NFC module, an IC card module, an RFID module, a Wi-Fi module, a BLE Bluetooth module, and a control terminal. The specific method includes:
[0040] S1: After detecting the target signal of at least one first moving target within a preset range, acquire the identification information and identification signal strength of at least one first moving target, and match and filter at least one first moving target according to the identification signal strength and identification information to obtain a second moving target;
[0041] Specifically, in this embodiment, the human body monitoring module first detects whether there is a first moving target within a preset range. When the first moving target is detected, a target signal is sent. The control terminal responds to the target signal to start and power on other modules, and controls the BLE Bluetooth module to obtain the identification information and identification signal strength of each first moving target. The control terminal matches and filters at least one first moving target based on the identification signal strength and identification information to obtain a second moving target.
[0042] Specifically, the matching and filtering of the first moving target is as follows: the identification information of at least one first moving target is matched in the pre-built user identification library, and the identification signal strength of the first moving target after the match is passed is judged; when the identification signal strength of the first moving target after the match is passed is greater than the preset signal strength threshold, the corresponding first moving target is output as the second moving target.
[0043] It should be noted that in this embodiment, the preset range is set to within 1-3m, and the specific range depends on the actual situation; the first moving target is a human moving target, and the detected target signal can be a facial recognition signal or a human body detection signal. This monitoring method is a conventional technical means in the field and will not be described in detail here; at the same time, the BLE Bluetooth module is used to match the obtained IRK key identifier or MAC address identifier. Only when it matches a bound user in the pre-built user identifier library is it identified as a legitimate target; the second moving target refers to the first moving target whose identifier signal strength and identifier information are successfully matched from multiple first moving targets;
[0044] Meanwhile, the pre-built user identifier library is stored in the local storage module, and user identifier information is obtained from the management cloud platform for offline matching;
[0045] Additionally, it should be noted that the identification information includes an IRK key identifier for the iOS system and a MAC address identifier for the Android system. During the initial binding phase, the multimodal access control system completes LE Secure Connections pairing with the first mobile target through an out-of-band channel, which is protected against man-in-the-middle attacks. It also generates and locally stores an IRK key corresponding to the bound user, thereby binding the user ID with the IRK identifier and permissions. The pre-stored IRK key is then matched with the subsequently acquired IRK key identifier. Based on the average strength of the currently acquired identifier signal strength of the first mobile target, the average strength is used as a preset signal strength threshold.
[0046] S2: Acquire multiple communication verification signals of the second moving target, and use pre-stored authorization information to verify the identity of the acquired multiple communication verification signals according to pre-built authorization verification rules;
[0047] Specifically, in this embodiment, a first communication verification signal and a second communication verification signal of the second moving target are acquired, and the first communication verification signal is verified using pre-stored authorization information; within a preset time after the first communication verification signal is verified, the second communication verification signal is verified using pre-stored authorization information.
[0048] It should be noted that, in this embodiment, the communication verification signal includes RFID verification signal, Bluetooth verification signal, NFC verification signal, IC verification signal, and Wi-Fi verification signal; the first communication verification signal and the second communication verification signal can be IC verification signal and NFC verification signal, or any two of them; the pre-stored authorization information is stored in the local storage module, and the user's authorization information is obtained from the management cloud platform for offline verification; after the first communication verification signal is verified, the second communication verification signal is verified, and the second communication verification signal needs to be verified within 30 seconds; at the same time, the access control system can also provide real-time feedback on the verification status through LED indicators, voice broadcast, or screen display.
[0049] S3: Once the identity verification is successful, output the control command to open the access control.
[0050] Specifically, in this embodiment, after both communication verification signals are verified, the control terminal will output a control command to control the access control drive module to open the door.
[0051] Example 2
[0052] In this embodiment, a multimodal access control system control method is applied to a non-motorized vehicle garage access control system. This system includes a vehicle monitoring module, a local storage module, an access control driver module, an NFC module, an IC card module, an RFID module, a Wi-Fi module, a BLE Bluetooth module, and a control terminal. Simultaneously, an RFID electronic tag is affixed to the non-motorized vehicle needing to enter or exit the system. The unique identifier of this electronic tag is bound to the vehicle owner's identification information. The specific method includes:
[0053] S10: After detecting the target signal of at least one first moving target within a preset range, acquire the identification information and identification signal strength of at least one first moving target, and match and filter at least one first moving target according to the identification signal strength and identification information to obtain a second moving target;
[0054] Specifically, in this embodiment, the vehicle monitoring module first detects whether a first moving target exists within a preset range. When the first moving target is detected, a target signal is sent. The control terminal responds to the target signal to start and power on other modules, and controls the BLE Bluetooth module to obtain the identification information and identification signal strength of each first moving target. The control terminal matches and filters at least one first moving target based on the identification signal strength and identification information to obtain a second moving target.
[0055] Specifically, the matching and filtering of the first moving target is as follows: the identification information of at least one first moving target is matched in the pre-built user identification library, and the identification signal strength of the first moving target after the match is passed is judged; when the identification signal strength of the first moving target after the match is passed is greater than the preset signal strength threshold, the corresponding first moving target is output as the second moving target.
[0056] It should be noted that in this embodiment, the preset range is set to within 1-3m, and the specific range depends on the actual situation; when the first moving target is a user driving a non-motorized vehicle, the detected target signal can be a vehicle identification signal. This monitoring method is a conventional technical means in the field and will not be described in detail here; at the same time, the BLE Bluetooth module is used to match the obtained IRK key identifier or MAC address identifier. Only when it matches a bound user in the pre-built user identifier library is it identified as a legitimate target; the second moving target refers to the first moving target whose identifier signal strength and identifier information are successfully matched from multiple first moving targets;
[0057] Meanwhile, the pre-built user identifier library is stored in the local storage module, and user identifier information is obtained from the management cloud platform for offline matching;
[0058] Additionally, it should be noted that the identification information includes an IRK key identifier for the iOS system and a MAC address identifier for the Android system. During the initial binding phase, the multimodal access control system completes LE Secure Connections pairing with the first mobile target through an out-of-band channel, which is protected against man-in-the-middle attacks. It also generates and locally stores an IRK key corresponding to the bound user, thereby binding the user ID with the IRK identifier and permissions. The pre-stored IRK key is then matched with the subsequently acquired IRK key identifier. Based on the average strength of the currently acquired identifier signal strength of the first mobile target, the average strength is used as a preset signal strength threshold.
[0059] S20: Acquire multiple communication verification signals of the second moving target, and use pre-stored authorization information to verify the identity of the acquired multiple communication verification signals according to pre-built authorization verification rules;
[0060] Specifically, in this embodiment, a first communication verification signal and a second communication verification signal of the second moving target are acquired, and the first communication verification signal is verified using pre-stored authorization information; within a preset time after the first communication verification signal is verified, the second communication verification signal is verified using pre-stored authorization information.
[0061] It should be noted that, in this embodiment, the communication verification signal includes RFID verification signal, Bluetooth verification signal, NFC verification signal, IC verification signal, and Wi-Fi verification signal; the first communication verification signal and the second communication verification signal can be RFID verification signal and NFC verification signal, or any two of them; the pre-stored authorization information is stored in the local storage module, and the user's authorization information is obtained from the management cloud platform for offline verification; after the first communication verification signal is verified, the second communication verification signal is verified, and the second communication verification signal needs to be verified within 30 seconds; at the same time, the access control system can also provide real-time feedback on the verification status through LED indicators, voice broadcast, or screen display.
[0062] S30: After the identity verification is successful, output the control command to open the access control.
[0063] Specifically, in this embodiment, after both communication verification signals are verified, the control terminal will output a control command to control the access control drive module to open the door.
[0064] Example 3
[0065] See Figure 2 The present invention also provides a multimodal access control system control system, which is used in the multimodal access control system control method described in any one of the above claims, the system comprising:
[0066] The target identification and filtering module 100 is used to detect the target signal of at least one first moving target within a preset range, acquire the identification information and identification signal strength of at least one first moving target, and perform matching and filtering on at least one first moving target according to the identification signal strength and identification information to obtain a second moving target;
[0067] The target authentication module 200 is used to acquire multiple communication authentication signals of the second mobile target and to perform identity verification on the acquired multiple communication authentication signals according to the pre-built authorization authentication rules using pre-stored authorization information.
[0068] The multimodal access control system control module 300 is used to output control commands to open the access control system after the identity verification is successful.
[0069] It should be noted that the modules in the system of Embodiment 3 correspond to the steps in the methods of Embodiment 1 or Embodiment 2. The steps in the methods of Embodiment 1 or Embodiment 2 have been described in detail above, and the module content in the system will not be described in detail in this Embodiment 3.
[0070] Example 4
[0071] See Figure 3This embodiment also provides a computer device, including a system memory 1005 and a processor 1001. The system memory 1005 stores a computer program, and the processor 1001 executes the computer program to implement the steps of any of the methods described above.
[0072] It should be noted that the processor 1001 is used to execute the steps in the above method embodiments according to the instructions in the program code. Alternatively, when the processor 1001 executes the computer program, it implements the functions of each module / unit in the above system / device embodiments.
[0073] Specifically, in this embodiment, the computer program can be divided into one or more modules / units, which are stored in the system memory 1005 and executed by the processor 1001 to complete this application. The one or more modules / units can be a series of computer program instruction segments capable of performing specific functions, which describe the execution process of the computer program in the terminal device.
[0074] The terminal device can be a desktop computer, laptop, handheld computer, or cloud server, etc. The terminal device may include, but is not limited to, a processor 1001 and a system memory 1005. Those skilled in the art will understand that this does not constitute a limitation on the terminal device; it may include more or fewer components than shown in the figures, or a combination of certain components, or different components. For example, the terminal device may also include an input / output device 1003, a network access device 1002, a bus 1006, etc.
[0075] The processor 1001 can be a Central Processing Unit (CPU), or other general-purpose processors, digital signal processors (DSPs), application-specific integrated circuits (ASICs), field-programmable gate arrays (FPGAs), or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc. A general-purpose processor can be a microprocessor or any conventional processor.
[0076] System memory 1005 can be an internal storage unit of the terminal device, such as a hard drive or RAM. System memory 1005 can also be a storage device 1004 of the terminal device, such as an external hard drive, SmartMedia Card (SMC), Secure Digital (SD) card, or FlashCard. Furthermore, system memory 1005 can include both internal storage units and storage device 1004. System memory 1005 is used to store computer programs and other programs and data required by the terminal device. System memory 1005 can also be used to temporarily store data that has been output or will be output.
[0077] Those skilled in the art will clearly understand that, for the sake of convenience and brevity, the specific working processes of the systems and units described above can be referred to the corresponding processes in the foregoing method embodiments, and will not be repeated here.
[0078] Example 5
[0079] This embodiment provides a computer-readable storage medium having a computer program stored thereon, which, when executed by a processor, implements the steps of any of the methods described above.
[0080] The computer-readable storage medium may be, for example, but not limited to, an electrical, magnetic, optical, electromagnetic, infrared, or semiconductor system, device, or any combination thereof. More specific examples of computer-readable storage media (a non-exhaustive list) include: an electrical connection having one or more wires, a portable computer disk, a hard disk, random access memory (RAM), read-only memory (ROM), erasable programmable read-only memory (EPROM), registers, hard disks, optical fibers, compact disc read-only memory (CD-ROM), optical storage devices, magnetic storage devices, or any suitable combination thereof, or any other form of computer-readable storage medium in the art.
[0081] An exemplary storage medium is coupled to a processor, enabling the processor to read information from and write information to the storage medium. Of course, the storage medium can also be a component of the processor. The processor and storage medium can reside within an application-specific integrated circuit (ASIC). In embodiments of the invention, the computer-readable storage medium can be any tangible medium containing or storing a program that can be used by or in conjunction with an instruction execution system, system, or device.
[0082] Example 6
[0083] This embodiment also provides a computer program product containing instructions that, when executed by a cluster of computer devices, cause the cluster of computer devices to perform the method described in Embodiment 1.
[0084] The specific embodiments described above further illustrate the purpose, technical solution, and beneficial effects of the present invention. It should be understood that the above description is only a specific embodiment of the present invention and is not intended to limit the scope of protection of the present invention. Any modifications, equivalent substitutions, improvements, etc., made within the spirit and principles of the present invention should be included within the scope of protection of the present invention.
Claims
1. A control method for a multimodal access control system, characterized in that the method... include: After detecting the target signal of at least one first moving target within a preset range, the identification information and identification signal strength of at least one first moving target are obtained, and the at least one first moving target is matched and filtered according to the identification signal strength and identification information to obtain the second moving target; Acquire multiple communication verification signals of the second moving target, and use pre-stored authorization information to verify the identity of the acquired multiple communication verification signals according to pre-built authorization verification rules; Once the identity verification is successful, a control command to open the access control system will be output.
2. The multi-modal access control system control method of claim 1, wherein, Based on the identification signal strength and identification information, at least one first moving target is matched and filtered to obtain a second moving target, specifically as follows: The identification information of at least one first moving target is matched in a pre-built user identification database, and the identification signal strength of the first moving target after the match is passed is judged. When the identification signal strength of the first moving target after a successful match is greater than the preset signal strength threshold, the corresponding first moving target will be output as the second moving target.
3. The multi-modal access control system control method of claim 1, wherein, Multiple communication verification signals from the second moving target are acquired. Using pre-stored authorization information and pre-built authorization verification rules, the identity of the acquired multiple communication verification signals is verified. Specifically: Acquire the first and second communication verification signals of the second moving target, and verify the first communication verification signal using pre-stored authorization information; Within a preset time after the first communication verification signal is successfully verified, the second communication verification signal is verified using pre-stored authorization information.
4. The multi-modal access control system control method of claim 2, wherein, The method also includes: Obtain the average strength of the identification signal of the first moving target, and use the average strength as a preset signal strength threshold.
5. The multimodal access control system control method according to claim 2, characterized in that, The identification information is either an IRK key identifier or a MAC address identifier.
6. The multimodal access control system control method according to claim 2, characterized in that, The communication verification signals include RFID verification signals, Bluetooth verification signals, NFC verification signals, IC verification signals, and Wi-Fi verification signals.
7. A control system for a multimodal access control system, characterized in that, This system is used in the multimodal access control system control method according to any one of claims 1-6, the system comprising: The target identification and filtering module is used to detect the target signal of at least one first moving target within a preset range, acquire the identification information and identification signal strength of at least one first moving target, and match and filter at least one first moving target according to the identification signal strength and identification information to obtain a second moving target; The target authentication module is used to acquire multiple communication authentication signals of the second mobile target and, using pre-stored authorization information and pre-built authorization authentication rules, verify the identity of the acquired multiple communication authentication signals. The multimodal access control system control module is used to output control commands to open the access control system after the identity verification is successful.
8. A computer device comprising a system memory and a processor, wherein the system memory stores a computer program, characterized in that, When the processor executes the computer program, it implements the steps of the method according to any one of claims 1 to 6.
9. A computer-readable storage medium having a computer program stored thereon, characterized in that, When the computer program is executed by a processor, it implements the steps of the method described in any one of claims 1 to 6.
10. A computer program product containing instructions, characterized in that, When the instructions are executed by a cluster of computer devices, the cluster of computer devices causes the cluster of computer devices to perform the method as described in any one of claims 1 to 6.