Theft-proof low-voltage cabinet based on multi-lock linkage control

Abstract

The application discloses an anti-theft low-voltage cabinet based on multi-lock linkage control and belongs to the technical field of low-voltage cabinet anti-theft. The anti-theft low-voltage cabinet comprises a lock state acquisition module, an identity verification module, a linkage arbitration module, an execution driving module and a state monitoring feedback module. The lock state acquisition module acquires mechanical state signals and electrical state signals of multiple lock points on a cabinet door and an internal function panel and generates lock point state sequence data. The identity verification module acquires and verifies multi-dimensional identity credential data of an operator and generates identity verification result data. The linkage arbitration module analyzes real-time locking states of the lock points and determines an operation permission level, matches the two to generate a lock linkage arbitration instruction, and generates time-division sequence driving signals of the lock points according to the instruction, drives an execution mechanism to act in sequence and generates lock point action feedback data. The state monitoring feedback module checks the consistency of an actual action state and a target action state and returns the consistency checking result to the linkage arbitration module for secondary locking determination.

Description

Technical Field

[0001] This invention relates to the field of anti-theft technology for low-voltage cabinets, specifically an anti-theft low-voltage cabinet based on multi-lock linkage control. Background Technology

[0002] Low-voltage switchgear is an important terminal distribution and control device in power systems. Its cabinet door and internal functional panels are usually equipped with multiple lockable points to prevent unauthorized personnel from touching live parts or performing misoperations. Existing anti-theft solutions for low-voltage switchgear mostly use a single mechanical or electronic lock for centralized control of the cabinet door. The lock status acquisition and authentication methods are relatively isolated, lacking coordinated management and dynamic security monitoring of multiple lock points.

[0003] Traditional solutions like these have significant drawbacks when dealing with multi-point distributed, hierarchical authorization scenarios. If a mechanical lock or simple combination lock is illegally cracked or the key is lost, the entire cabinet loses its protective capability. Even with electronic identification technology, all locks are typically unlocked after a one-time verification, failing to differentiate the unlocking range of different panel areas based on the operator's actual permissions. More critically, existing control methods fail to link the real-time locking status of each lock with permissions. When a lock malfunctions or is forcibly opened, there is a lack of a global state-based re-evaluation mechanism, making it difficult to detect and block unauthorized intrusion during the unlocking process. Furthermore, the driving process for multiple locks is usually executed synchronously or in a fixed sequence, without considering the impact of each lock's status feedback on subsequent unlocking steps. If a lock fails or incompletely performs its action, subsequent locks will still be driven, causing inconsistencies between local locking states and the overall security strategy, leaving security vulnerabilities.

[0004] To address the aforementioned issues, there is an urgent need to solve how to implement dynamic timing interlocking control based on action feedback in a multi-locking environment, as well as the anti-theft control problem of introducing closed-loop state consistency verification and secondary locking determination in the unlocking process. Summary of the Invention

[0005] This invention provides a low-voltage anti-theft cabinet based on multi-lock linkage control. By introducing a time-sequence interlocking mechanism driven by lock point action feedback and a status consistency verification and secondary locking determination mechanism after unlocking, it achieves high-security linkage anti-theft control in a multi-locking environment.

[0006] To achieve the above objectives, the present invention provides the following technical solution: The present invention provides an anti-theft low-voltage cabinet based on multi-lock linkage control, including a lock status acquisition module, an identity verification module, a linkage arbitration module, an execution drive module, and a status monitoring feedback module.

[0007] The lock status acquisition module is used to collect mechanical and electrical status signals of multiple locking points on the low-voltage cabinet door and internal functional panel, generating lock point status sequence data. As a technical solution of this invention, the lock status acquisition module is equipped with an angle sensor and an electromagnetic status sensor at each locking point. The angle sensor detects the rotational displacement of the mechanical lock cylinder and outputs an analog voltage signal, while the electromagnetic status sensor detects the armature position of the electromagnetic lock cylinder and outputs high and low level signals. The lock status acquisition module synchronously acquires the analog voltage signal and the high and low level signals according to a fixed sampling period. It performs analog-to-digital conversion on the analog voltage signal to obtain a digital angle value, and performs level shaping on the high and low level signals to obtain digital on / off values. The digital angle value and digital on / off value are associated and stored according to the sampling time. Preferably, the digital angle value of each locking point is calibrated as an angle quantization value, and the digital on / off value is calibrated as an on / off logic value. The angle quantization value and on / off logic value of each locking point are arranged in the order of the locking point number to form the original state vector of that locking point. The original state vectors of each locking point are then combined in the order of the acquisition timestamps to obtain the lock point status sequence data. This acquisition method can reflect the mechanical position and electrical on / off state of each locking point in real time and accurately, providing two levels of redundant criteria for subsequent locking state analysis.

[0008] The identity verification module acquires multi-dimensional identity credential data of the operator and verifies the multi-dimensional identity credential data to generate identity verification result data. In a preferred embodiment, the identity verification module acquires the operator's biometric data, electronic key data, and dynamic password data in parallel. Specifically, fingerprint feature data is acquired through a fingerprint acquisition unit, encrypted identity code data stored in the electronic key card is acquired through an RFID card reader, and dynamic verification code data input by the operator is acquired through a key input unit. The fingerprint feature data, encrypted identity code data, and dynamic verification code data are respectively sent to three independent verification subunits within the identity verification module for simultaneous verification. Each subunit generates intermediate verification results, which are then aggregated to a fusion judgment subunit. The fusion judgment subunit performs feature matching on the biometric data to obtain a biometric matching score, performs key verification on the electronic key data to obtain a key verification score, and performs password comparison on the dynamic password data to obtain a password comparison score. The biometric matching score, key verification score, and password comparison score are then weighted and fused according to preset weights to obtain a comprehensive identity confidence level. The comprehensive identity confidence level is compared with a preset confidence threshold, and identity verification result data is generated based on the comparison result. By integrating verification information from three dimensions—biometrics, physical medium, and dynamic password—the accuracy of identity recognition and the ability to prevent counterfeiting are significantly improved.

[0009] The linkage arbitration module, as the core decision-making unit, receives lock point status sequence data and authentication result data, and generates unlock or prohibit unlocking instructions. This module extracts the angle quantization value and on / off logic value of each lock point from the lock point status sequence data. It compares the angle quantization value of each lock point with a preset angle blocking range, and the on / off logic value of each lock point with a preset on / off blocking value. When the angle quantization value falls within the angle blocking range and the on / off logic value equals the on / off blocking value, the real-time locking state of that lock point is marked as a valid locking state; otherwise, it is marked as an invalid locking state, and the number of lock points in a valid locking state is counted. Simultaneously, the linkage arbitration module extracts the authorized lock point set corresponding to the operation permission level from the authentication result data. Preferably, the authorized lock point set includes a high-voltage side lock point set and a low-voltage side lock point set. The minimum unlocking threshold for the high-voltage side and the minimum unlocking threshold for the low-voltage side corresponding to the operation permission level are set independently to adapt to the security isolation requirements of different voltage areas. The linkage arbitration module determines whether the number of lock points in a valid locked state reaches the minimum unlocking threshold required by the authorized lock point set. If so, it generates a linkage arbitration command that allows unlocking; otherwise, it generates a linkage arbitration command that prohibits unlocking. This arbitration mechanism, based on the bidirectional matching of real-time lock point status and operation permissions, ensures that unlocking can only be performed under the condition that the permission requirements are met, effectively eliminating the risk of single-point failure or forced cracking.

[0010] The execution drive module generates time-series drive signals for each lock point based on the linkage arbitration command for unlocking, and drives the actuators of each lock point sequentially according to the time-series drive signals. Preferably, the execution drive module extracts the lock point number sequence to be driven and the target action direction of each lock point from the linkage arbitration command, and determines the action priority of each lock point according to the order of the lock point number sequence. Based on the action priority and target action direction of each lock point, the duty cycle and duration of the corresponding lock point's drive pulse width modulation signal are generated. Further, the execution drive module extracts the action duration and action speed level of each lock point to be driven from the linkage arbitration command, calculates the frequency and initial duty cycle value of the drive pulse width modulation signal of each lock point accordingly, and arranges the drive pulse width modulation signals of each lock point into a drive timing chain according to the action priority from high to low. After the duration of the action of the previous locking point ends, the execution drive module checks whether the actual position signal of the previous locking point has reached the target position. If the target position is reached, a preset stabilization waiting time is applied before the drive pulse width modulation signal output of the next locking point is initiated. If the target position is not reached, the duration of the drive pulse width modulation signal of the current locking point is extended until the target position is reached. There is a dynamic interval between the drive signal outputs of two adjacent locking points, triggered by the feedback signal of the previous locking point's action completion. This dynamic interval is positively correlated with the actual action duration of the previous locking point. After the actuator of each locking point completes its action, the actual position signal of that locking point is collected, and the actual position signals of each locking point are combined into locking point action feedback data according to the time sequence of action completion. This time-sequential, feedback-checked drive method ensures the logical sequence and mechanical coordination of multiple locking point actions, avoiding mechanism jamming or locking failure caused by simultaneous driving or incomplete action.

[0011] The status monitoring and feedback module receives lock point action feedback data, verifies the consistency between the actual action state and the target action state of each lock point, and generates an action consistency verification result. Specifically, this module extracts the actual position signal of each lock point from the lock point action feedback data, converts it into actual angle values ​​and actual on / off values, and obtains the target angle value and target on / off value corresponding to the target action direction of each lock point from the execution drive module. It calculates the difference between the actual angle value and the target angle value of the same lock point to obtain the angle deviation; it also performs an XOR comparison between the actual on / off value and the target on / off value of the same lock point to obtain an on / off consistency flag. When the angle deviation of all lock points is less than the preset angle deviation threshold and the on / off consistency flags of all lock points are consistent, an action consistency verification pass result is generated; otherwise, an action consistency verification fail result is generated. The status monitoring and feedback module sends the action consistency verification pass or fail result back to the linkage arbitration module. If an action consistency verification fail result is generated, this module also records the current lock point's angle deviation and on / off consistency flag, and stores the recorded data as a fault log in local storage for subsequent fault tracing.

[0012] Upon receiving a failure to verify the consistency of actions, the linkage arbitration module initiates a secondary locking determination process. The module suspends the current unlocking operation, re-acquires the current mechanical and electrical status signals of each locking point from the lock status acquisition module, updates the locking point status sequence data, and re-analyzes the real-time locking status of each locking point based on the updated data. The re-analyzed real-time locking status is then re-matched with the authorized locking point set. If the re-matching succeeds, a linkage arbitration command to resume unlocking is generated, allowing the unlocking process to continue. If the re-matching fails, a locking maintenance command is generated and a cabinet door alarm signal is triggered, providing immediate locking warnings in case of abnormal actions and effectively preventing security vulnerabilities caused by unauthorized entry or mechanical malfunctions.

[0013] The technical effects and advantages provided by the present invention in the above technical solution are as follows: By constructing a time-sequential interlocking drive mechanism based on action feedback, the drive control in the multi-lock unlocking process is transformed from a fixed sequence to a dynamic chain drive triggered by the feedback of the previous lock's action completion. The execution drive module extracts the lock number sequence to be driven and the target action direction of each lock from the lock linkage arbitration command, determines the action priority according to the lock number, and generates a corresponding drive pulse width modulation signal based on the target action direction of each lock. There is a dynamic interval between the drive signal outputs of adjacent locks. This dynamic interval is triggered based on the actual action completion feedback signal of the previous lock and is positively correlated with the actual action duration of the previous lock. This time-sequential dynamic interval drive method replaces the traditional synchronous drive or preset fixed interval drive mode, allowing each lock's unlocking action to receive independent action completion confirmation before executing the next lock. This avoids the subsequent unrelated locks being incorrectly driven due to mechanical jamming or electrical failure of a lock, thus preventing the security risk of some locks failing during the unlocking process but still being able to open other sensitive areas. It also improves the isolation capability of the multi-lock continuous unlocking process against single-point failures.

[0014] Through a post-unlocking state consistency verification and secondary locking determination mechanism, a closed-loop verification of the actual action status of all locking points is performed after the action is executed, triggering arbitration for re-determination, rather than relying solely on a single open-loop command execution. The state monitoring feedback module extracts the actual angle value and actual on / off value of each locking point from the locking point action feedback data, compares the deviation with the target angle value and target on / off value, and determines consistency. When the angle deviation of any locking point exceeds a preset threshold or the on / off consistency flag is inconsistent, an action consistency verification failure result is generated and sent back to the linkage arbitration module. The linkage arbitration module pauses the current unlocking process, re-obtains the current state signal of each locking point from the lock status acquisition module, updates the locking point state sequence data, and re-matches and determines the lock status based on the updated real-time locking status and the authorized locking point set. If the re-determination passes, unlocking resumes; otherwise, locking is maintained and a cabinet door alarm signal is triggered. This closed-loop verification and secondary judgment mechanism changes the control logic of the traditional scheme where authorization is permanent. After the unlocking action is executed, the security status of the global lock point is reconfirmed. It can effectively detect abnormal actions or illegal interference behaviors that occur during the unlocking process and feed the abnormal status back to the arbitration level for global interlocking decision-making. This prevents intrusion operations from being carried out during the unlocking process and enhances the anti-theft reliability in complex attack scenarios. Attached Figure Description

[0015] To more clearly illustrate the technical solutions in the embodiments of this application or the prior art, the drawings used in the embodiments will be briefly introduced below. Obviously, the drawings described below are only some embodiments recorded in this invention. For those skilled in the art, other drawings can be obtained based on these drawings.

[0016] Figure 1 This is a system flowchart for an anti-theft low-voltage cabinet based on multi-lock linkage control; Figure 2 This is a schematic diagram of the lock status acquisition module; Figure 3 This is a structural diagram of the authentication module; Figure 4 This is a schematic diagram of the structure and arbitration logic of the linkage arbitration module; Figure 5 This is a diagram illustrating the overall identity confidence level and verification result for identity verification. Figure 6 This is a schematic diagram illustrating the quantization value of the locking point angle and the determination of the effective locking state; Figure 7 This is a schematic diagram for verifying the consistency of the locking point angle deviation. Detailed Implementation

[0017] To make the objectives, technical solutions, and advantages of the embodiments of the present invention clearer, the technical solutions of the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of the present invention, not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of the present invention.

[0018] See Figure 1 This invention provides a low-voltage anti-theft cabinet based on multi-lock linkage control. The cabinet includes a lock status acquisition module, an authentication module, a linkage arbitration module, an execution drive module, and a status monitoring feedback module. The lock status acquisition module collects mechanical and electrical status signals from multiple lock points on the cabinet door and internal function panel, generating lock point status sequence data. The authentication module acquires multi-dimensional identity credentials of the operator, verifies the credentials, and generates authentication result data. The linkage arbitration module analyzes the real-time locking status of each lock point based on the lock point status sequence data, determines the operation permission level based on the authentication result data, matches the real-time locking status with the operation permission level, and generates a lock linkage arbitration command. The execution drive module generates time-series drive signals for each lock point based on the lock linkage arbitration command, sequentially drives the actuators of each lock point according to the time-series drive signals, and generates lock point action feedback data. The status monitoring feedback module verifies the consistency between the actual action status of each lock point and the target action status based on the lock point action feedback data, generates an action consistency verification result, and sends the action consistency verification result back to the linkage arbitration module for secondary locking determination.

[0019] Example 1: In specific implementation, please refer to Figure 2 The lock status acquisition module acquires mechanical and electrical status signals through sensing units deployed at various locking points on the low-voltage cabinet door and internal functional panel. For each locking point, the lock status acquisition module is equipped with an angle sensor and an electromagnetic status sensor. The angle sensor is coaxially mounted with the mechanical lock cylinder. When the mechanical lock cylinder rotates, the conductive plastic resistor track and brush inside the angle sensor generate relative displacement, outputting an analog voltage signal linearly related to the rotation angle. The electromagnetic status sensor is installed at the end of the armature's travel in the electromagnetic lock cylinder. It detects the armature position through a Hall element or reed switch. When the armature is engaged, the electromagnetic status sensor outputs a high-level signal; when the armature is released, the electromagnetic status sensor outputs a low-level signal.

[0020] The lock status acquisition module incorporates a multi-channel synchronous sampling controller. This controller sends sample-and-hold commands to the angle sensors and electromagnetic status sensors at all locking points according to a fixed sampling period. The sampling period is determined based on the maximum angular velocity of the mechanical lock cylinder during operation. To avoid aliasing of angle signals, the sampling frequency is no less than twice the highest movement frequency of the mechanical lock cylinder. At each sampling moment, the sampling controller synchronously captures the analog voltage signals output by the angle sensors at all locking points and the high and low level signals output by the electromagnetic status sensors.

[0021] The acquired analog voltage signals are sequentially converted by the lock status acquisition module using a multi-channel analog-to-digital converter (ADC). The ADC has a 12-bit resolution, an input voltage range of 0V to 5V, and the converted digital values ​​are latched in binary form. The resulting digital value is recorded as a digital angle value. The lock status acquisition module will acquire digital angle values. The mapping is done using angle quantization values, and the mapping relationship uses a linear normalization formula: in, This represents the quantized value of the angle; This represents the digital angle value output by the analog-to-digital converter; This indicates the lower limit of the digital angle value output by the analog-to-digital converter, and its value is 0. This indicates the upper limit of the digital angle value output by the analog-to-digital converter, with a value of 4095. This indicates the upper limit of the preset angle quantization value, which is 100. This indicates the lower limit of the preset angle quantization value, which is 0. and The value is determined by the number of bits in the analog-to-digital converter. When a 12-bit analog-to-digital converter is used and the input voltage range is 0V to 5V, the digital value 0 corresponds to a 0V input and the digital value 4095 corresponds to a 5V input. and The value of is limited to the range of 0 to 100, where 0 corresponds to the fully locked position of the mechanical lock cylinder and 100 corresponds to the fully unlocked position. Through the above formula, the minute deviations in the analog voltage caused by assembly differences at different locking points are normalized to a uniform quantization scale.

[0022] The lock status acquisition module performs level shaping on the acquired high and low level signals. The signal first passes through a Schmitt trigger, with a positive threshold voltage set to 3.0 volts and a negative threshold voltage set to 1.5 volts to eliminate contact bounce and noise interference. The shaped signal is then converted to a 3.3-volt logic level by a level conversion circuit to obtain the on / off logic value. On / off logic value The value can be either logic "1" or logic "0". Logic "1" indicates that the electromagnetic lock cylinder is in a locked state where it is energized and engaged, while logic "0" indicates that the electromagnetic lock cylinder is in an unlocked state where it is de-energized and released.

[0023] The lock status acquisition module quantizes the angle value of a lock point acquired at the same sampling time. On / off logic values Arrange the lock points in order of their numbers to generate the original state vector for each lock point. Assume the low-voltage switchgear has a total of... There are 10 lock points, each assigned a unique lock point number. , The value range is 1 to Then the first The original state vector of each lock point is represented as follows: The lock status acquisition module will collect the original state vectors of all lock points acquired within a complete sampling period, categorized by lock point number. The states are combined in ascending order to form a lock point state row vector.

[0024] The lock status acquisition module has a built-in real-time clock that marks the acquisition timestamp for each sampling operation. , This is the sampling sequence number. The collection timestamp. Using Unix timestamp format, accurate to milliseconds, the lock status acquisition module processes the lock point status row vectors obtained from each sampling according to the acquisition timestamp. The data is arranged in chronological order to form a lockpoint state sequence data. Logically, the lockpoint state sequence data is represented as a two-dimensional data table, where each row corresponds to a collection timestamp. Each column corresponds to a lock point, and each cell stores the original state vector of the corresponding lock point. The lock point state sequence data is temporarily cached in the dual-port random access memory of the lock state acquisition module and is read by the linkage arbitration module through a parallel bus interface.

[0025] Example 2: In specific implementation, please refer to Figure 3 The identity verification module consists of three independent credential acquisition units and three independent verification subunits. The three credential acquisition units are a fingerprint acquisition unit, an RFID card reader unit, and a key input unit. The three verification subunits are a biometric verification subunit, a key verification subunit, and a password verification subunit. The identity verification module also includes a fusion judgment subunit, which receives the intermediate verification results output by the three verification subunits and generates the identity verification result data.

[0026] The authentication module acquires the operator's fingerprint feature data through the fingerprint acquisition unit. The fingerprint acquisition unit uses a semiconductor capacitive fingerprint sensor with a sensor array of 192 columns by 256 rows and a resolution of 508 dots per inch. When the operator presses their finger on the sensing area of ​​the fingerprint acquisition unit, the capacitive fingerprint sensor detects the capacitance difference caused by the fingerprint ridges and valleys, forming a fingerprint grayscale image. The fingerprint acquisition unit preprocesses the fingerprint grayscale image, including mean filtering for noise reduction, gradient magnitude-based image enhancement, Otsu's method-based binarization, and morphological thinning for fingerprint ridge extraction. After preprocessing, the fingerprint acquisition unit extracts feature points from the thinned fingerprint ridge map. Feature point types include ridge endpoints and ridge bifurcation points. Each extracted feature point is described as a feature point triplet, containing the feature point's x-coordinate, y-coordinate, and orientation angle. The fingerprint acquisition unit sorts all extracted feature point triplets according to their orientation angle and assembles them into fingerprint feature data. Fingerprint feature data is output to the biometric verification subunit in the form of a fixed-length feature point set.

[0027] The authentication module obtains the encrypted identity code data stored in the operator's electronic key card through the RFID card reader unit. The RFID card reader unit uses a contactless card reader operating at a frequency of 13.56 MHz and supports the ISO / IEC 14443 Type A protocol. When the operator brings the electronic key card close to the RFID card reader unit's induction antenna, the RFID card reader unit transmits a carrier signal to power the electronic key card and reads the encrypted identity code data stored in a designated storage sector of the electronic key card through load modulation. The encrypted identity code data is a 128-bit ciphertext data, generated by the electronic key card's personalization device during the card issuance stage using an encryption algorithm to encrypt the original identity code, which is a concatenated string of the operator's employee ID and department number. The RFID card reader unit transmits the read encrypted identity code data verbatim to the key verification subunit.

[0028] The authentication module acquires the dynamic verification code data entered by the operator through the key input unit. The key input unit contains a 12-key silicone matrix keyboard with a layout of number keys (0-9), an OK key, and a Delete key. The dynamic verification code data is generated by a dynamic password token bound to the low-voltage cabinet. Every 30 seconds, the dynamic password token generates a 6-digit decimal dynamic verification code based on a time synchronization algorithm. The operator visually views the currently displayed 6-digit dynamic verification code on the dynamic password token and enters it key by key through the key input unit. Each key press generates a corresponding key scan code. After debouncing, the key scan code sequence is synthesized into a dynamic verification code data string by the state machine inside the key input unit. The key input unit then sends the dynamic verification code data string to the password verification subunit.

[0029] In some embodiments, fingerprint feature data, encrypted identity code data, and dynamic verification code data are simultaneously verified by the biometric verification subunit, key verification subunit, and password verification subunit within the identity verification module, respectively. Each of the three independent verification subunits generates an intermediate verification result, which is then aggregated into the fusion judgment subunit of the identity verification module. The parallel verification process of the three verification subunits is as follows.

[0030] The biometric verification subunit performs feature matching on the fingerprint feature data to obtain a biometric matching score. Internally, the subunit stores a database of fingerprint templates for registered operators. Each fingerprint template contains a set of template feature points and the corresponding operator's ID. The subunit performs minutiae matching on the feature point triplets in the input fingerprint feature data against sequentially selected template feature point sets from the fingerprint template database. Minutiae matching employs a matching algorithm based on local neighborhood structure. For each feature point in the input fingerprint feature data, the subunit constructs a circular neighborhood with a radius of 15 pixels centered on that feature point, and statistically analyzes the relative polar coordinate distribution of other feature points within the neighborhood to form a local feature description vector. Similarly, a local feature description vector is constructed for each template feature point in the fingerprint template. The subunit calculates the Euclidean distance between the two local feature description vectors. When the Euclidean distance is less than a preset local matching threshold, the input feature point and the template feature point are considered a candidate matching pair. The preset local matching threshold is set to 0.25. This threshold is determined based on the product of the fingerprint sensor resolution and the average frequency of the fingerprint ridges. With 508 fingerprint points per inch, the ridge period is approximately 10 pixels. The upper limit of the normalized Euclidean distance of the feature distribution within the local neighborhood is between 0.2 and 0.3. The midpoint value of 0.25 is used as the boundary for distinguishing between true and false matches. A random sampling consensus algorithm is used to eliminate false matches from all candidate matching point pairs, ultimately obtaining the number of correctly matched point pairs. Biometric matching score. The calculation formula is: in, Indicates the biological matching score. The score is out of 100, and the value ranges from 0 to 100. This represents the number of correctly matched point pairs after being filtered by the random sampling consensus algorithm. This indicates the number of feature points in the input fingerprint feature data; This indicates the number of feature points in the current matching template within the fingerprint template. The value of is a non-negative integer, with a maximum value not exceeding 1. and The smaller value in the range. The biometric verification subunit matches the fingerprint feature data with all templates in the fingerprint template library one by one, and takes the biometric matching score obtained from each match. The maximum value in the result is taken as the biometric matching score for this verification, and this biometric matching score, together with the corresponding operator number, is output as the intermediate verification result of the biometric verification subunit.

[0031] The key verification subunit performs key verification on the electronic key data to obtain a key verification score. Internally, the key verification subunit stores a list of decryption keys for all legitimate electronic key cards in the low-voltage cabinet management system. Each decryption key is bound to an operator's ID. After receiving the encrypted identity code data transmitted from the RFID card reader, the key verification subunit sequentially calls each decryption key in the decryption key list to decrypt the encrypted identity code data. The decryption operation uses the Advanced Encryption Standard (AES-128) algorithm, operates in electronic keybook mode, and has a key length of 128 bits. The decrypted plaintext data is compared with a preset identity code format: a 10-byte employee ID followed by a 2-byte department number. When the decrypted plaintext data is 12 bytes long and the first 10 bytes are all printable ASCII numeric characters, and the last 2 bytes are all printable ASCII numeric characters, decryption is considered successful, and the operator's ID corresponding to the decryption key is recorded. The key verification score is a binary logical value; it is 1 for successful decryption and 0 for failure after traversing all decryption keys. The key verification subunit outputs the key verification score and the operator number corresponding to successful decryption as the intermediate verification result of the key verification subunit.

[0032] The password verification subunit compares the dynamic password data to obtain a password comparison score. Internally, the password verification subunit maintains a time-synchronized dynamic password calculation engine, which shares the same symmetric key and clock reference as the dynamic password token held by the operator. The dynamic password calculation engine uses a time-based hash message authentication code one-time password algorithm, employing the secure hash algorithm SHA-256, with a time step of 30 seconds and a password length of 6 decimal digits. After receiving the dynamic verification code data sent by the key input unit, the password verification subunit reads the current system time and expands it forward and backward by one time window, calculating the baseline dynamic passwords for three time windows. The password verification subunit compares the input dynamic verification code data with each of the three baseline dynamic passwords one by one. If the input dynamic verification code data completely matches any one of the baseline dynamic passwords, the password comparison score is 1; if it does not match any of the three baseline dynamic passwords, the password comparison score is 0. The password verification subunit outputs the password comparison score as the intermediate verification result of the password verification subunit.

[0033] The fusion decision subunit of the authentication module aggregates the intermediate verification results generated by the biometric verification subunit, key verification subunit, and password verification subunit. The fusion decision subunit first checks if the operator IDs carried in the three intermediate verification results are consistent. If any two of the three verification subunits return different operator IDs, the fusion decision subunit directly generates an authentication result indicating that the authentication has failed. If the operator IDs returned by the three verification subunits are consistent, or if only the biometric verification subunit returns a valid operator ID while the other verification subunits do not, the fusion decision subunit performs a weighted fusion calculation.

[0034] The fusion judgment subunit weights and fuses the biometric matching score, key verification score, and password comparison score according to preset weights to obtain the comprehensive identity confidence level. The preset weight for the biometric matching score is set to... The preset weight of the key verification score is set to The preset weight for the password comparison score is set to The preset weights are allocated as follows: The biometric matching score reflects the operator's inherent biometric attributes, cannot be borrowed or transferred, and has the highest anti-counterfeiting strength, therefore it has the highest weight; the key verification score reflects the physical token held by the operator, which is at risk of loss or borrowing, has medium anti-counterfeiting strength, and has the next highest weight; the password comparison score reflects the operator's short-term memory information, which is at risk of being spied on or leaked, has relatively low anti-counterfeiting strength, and has the lowest weight. The sum of the three preset weights is 1. Overall identity confidence level. The calculation is accomplished through linear weighted summation: in, Indicates the overall confidence level of identity; The preset weight for the biometric matching score is 0.5; Indicates the biological matching score; The preset weight for the key verification score is 0.3; This represents the key verification score, which can be either 0 or 1. This represents the preset weight for the password comparison score, with a value of 0.2. This represents the password comparison score, which can be either 0 or 1.

[0035] The integrated identity confidence level is calculated by the fusion judgment subunit. Then, the overall identity confidence level will be considered. The result is compared with a preset confidence threshold. The preset confidence threshold is set to 60. This confidence threshold of 60 is based on the following: when an operator passes both biometric verification and key verification simultaneously, but password verification fails, the weighted fusion score is [value missing]. If the biological matching score A score of 60 results in a total score of 60; if only biometric and password verification pass but key verification fails, the weighted composite score is [value missing]. Even if the biological matching score is low at this point Even with a maximum score of 100, the total score is only 70, still higher than the threshold of 60; if only key verification and password verification pass but biometric verification fails, that is... The weighted fusion score is This is far below the threshold of 60. Therefore, the threshold of 60 can tolerate the failure of a single non-biometric credential while allowing for partial distortion of biometric verification, but strictly rejects scenarios where biometric verification is completely missing. When considering the overall identity confidence level... When the confidence level is greater than or equal to the preset confidence threshold of 60, the fusion judgment subunit generates authentication result data indicating that the authentication has been successful. The authentication result data includes the operation permission level, the verified operator number, and the overall identity confidence level. When the overall identity confidence level When the confidence level is less than the preset confidence threshold of 60, the fusion judgment subunit generates authentication result data indicating that the authentication failed. The authentication result data only contains the authentication failure flag code.

[0036] See Figure 5 In the figure, the vertical axis represents the comprehensive identity confidence score (dimensionless percentage) calculated by the identity verification module's fusion judgment subunit, and the horizontal axis represents the sequence number of consecutive verification attempts. In the legend, solid circles represent samples that have passed identity verification, and crosses represent samples that have failed identity verification. The dashed line in the figure represents the preset confidence threshold of 60.

[0037] As shown in the figure, within the range of verification attempt numbers from 0 to 350, the vast majority of the comprehensive identity confidence scores are above the threshold of 60, and the corresponding markers all indicate successful identity verification. This aligns with the logic in Example 2 where the fusion judgment subunit determines successful identity verification when the comprehensive identity confidence score is greater than or equal to 60. The samples that passed verification at this stage are dispersed and numerous, indicating that the identity verification module can reliably identify legitimate operators under normal working conditions.

[0038] Within the verification attempt range of 350 to 500, the overall identity confidence score was mostly below the threshold of 60, and the corresponding markers were all for identity verification failure, indicating that the identity verification module determined that identity verification failed at this stage. The confidence score value in this stage showed a downward trend and large fluctuations, reaching a minimum close to 0, reflecting that the input multi-dimensional identity credential data failed to pass the weighted fusion judgment of biometric verification, key verification, or password verification.

[0039] Example 3: In specific implementation, please refer to Figure 4The linkage arbitration module receives lock point status sequence data and authentication result data from the lock status acquisition module and authentication module respectively through data interfaces. Internally, the linkage arbitration module includes a status parsing submodule, an authorization decision submodule, and a matching decision submodule. The status parsing submodule parses and marks the lock point status; the authorization decision submodule extracts the operation authorization level and determines the authorized lock point set and threshold; and the matching decision submodule executes the matching decision and generates a lock linkage arbitration command.

[0040] The state parsing submodule extracts the angle quantization value of each lock point from the lock point state sequence data. On / off logic values subscript Indicates the lock point number. The value range is the set of numbers for all locking points of the low-voltage switchgear. Angle quantization value. This is a dimensionless value, obtained by the lock status acquisition module based on the mechanical lock cylinder rotation angle signal. Its value ranges from 0 to 100, where 0 corresponds to the fully locked position and 100 corresponds to the fully unlocked position. (On / off logic value) It is a binary logic quantity, which is obtained by the lock status acquisition module based on the on / off signal of the electromagnetic lock cylinder. The value is either logic 1 or logic 0. Logic 1 indicates that the electromagnetic lock cylinder is in the locked state when it is energized and attracted, and logic 0 indicates that the electromagnetic lock cylinder is in the unlocked state when it is de-energized and released.

[0041] The state parsing submodule internally stores preset angle locking intervals. and preset on / off blocking values The lower bound of the preset angle-locked interval. The value is 0, and the upper bound is... The value is set to 15. The basis for setting this range is as follows: When the low-voltage switchgear door and internal function panels are in normal locked condition, the locking pin of the mechanical lock cylinder is fully inserted into the lock hole, and the angle sensor is at the locking angle reference position due to mechanical limitation. Considering machining tolerances, thermal expansion and contraction caused by temperature, and minor wear caused by long-term use, the locking position of the mechanical lock cylinder exhibits a narrow range of fluctuation at the angle sensor output. Actual measurements show that this fluctuation range does not exceed the angle quantization value of 15, therefore the upper limit is set... Set to 15, lower bound Setting it to 0 will fully cover all normal mechanical interlocking states. Preset on / off interlocking value. The value is logic 1, which means that the electromagnetic lock cylinder is considered to be in a locked state when it is energized and attracted, which is consistent with the design logic of the electromagnetic lock.

[0042] The state resolution submodule performs a locking state determination for each lock point one by one, using valid locking state flags during the determination process. Record the results. Valid locking status flag. The calculation formula is: in, Indicates the first The effective locking status flag of the nth lock point is set to 1, indicating that the nth lock point is locked. The lock point is in a valid locked state. A value of 0 indicates that the lock point is in a valid locked state. The lock points are in an invalid locking state; Indicates the first The angle quantization value of each lock point; This indicates the lower bound of the preset angle-locking interval, and its value is 0. This represents the upper bound of the preset angle locking interval, with a value of 15. Indicates the first The on / off logic values ​​of each lock point; This represents the preset on / off blocking value, which is logic 1.

[0043] It is understandable that when the first quantization value of the angle of each lock point satisfy And the first On / off logic values ​​of each lock point equal At that time, the effective locking status is marked. Setting it to 1 indicates that the lock point is in a valid locked state; otherwise, the valid locked state is marked. Setting it to 0 indicates that the lock point is in an invalid locking state. The state parsing submodule iterates through all lock points of the low-voltage switchgear and then counts the values ​​of all lock points. The total number of lock points in an effective locked state is obtained by calculating the number of lock points, denoted as . Meanwhile, the status parsing submodule statistically analyzes the set of high-voltage side locking points. The number of lock points, denoted as In the statistical low-pressure side lock point set The number of lock points, denoted as The division of the high-voltage side lock point set and the low-voltage side lock point set is pre-configured in the non-volatile memory of the state parsing submodule. The high-voltage side lock point set contains all lock point numbers installed on the high-voltage busbar compartment cabinet door and the high-voltage function panel, and the low-voltage side lock point set contains all lock point numbers installed on the low-voltage outgoing line compartment cabinet door and the low-voltage function panel.

[0044] The permission decision submodule extracts the operation permission level from the authentication result data. When the authentication result data indicates successful authentication, it contains the corresponding operation permission level for the operator. The operation permission level is represented by an integer code; for example, level 1 corresponds to low-voltage maintenance permission, level 2 to high-voltage inspection permission, and level 3 to all operation permissions. Internally, the permission decision submodule stores a mapping table between operation permission levels and authorized lock point sets, as well as a correspondence table between operation permission levels and the minimum unlocking thresholds for both the high-voltage and low-voltage sides.

[0045] In some embodiments, the authorized locking point set includes a high-voltage side locking point set and a low-voltage side locking point set. For operation permission level 1, the authorized locking point set only includes the low-voltage side locking point set. The minimum unlocking threshold for the high-voltage side is set to inapplicable or infinite, and the minimum unlocking threshold for the low-voltage side is set to 80% of the total number of low-voltage side locking points. For example, if there are 6 locking points installed on the low-voltage side, the minimum unlocking threshold for the low-voltage side is 5. For operation permission level 2, the authorized locking point set includes both the high-voltage side and low-voltage side locking point sets. The minimum unlocking threshold for the high-voltage side is set to 90% of the total number of high-voltage side locking points. For example, if there are 10 locking points installed on the high-voltage side, the minimum unlocking threshold for the high-voltage side is 9, and the minimum unlocking threshold for the low-voltage side is set to 100% of the total number of low-voltage side locking points, meaning all low-voltage side locking points must be in an effective locked state. For operation permission level 3, the authorized locking point set includes all locking points. The minimum unlocking threshold for the high-voltage side is set to 70% of the total number of high-voltage side locking points, and the minimum unlocking threshold for the low-voltage side is set to 70% of the total number of low-voltage side locking points. The reason for setting the minimum unlocking threshold for the high-voltage side and the minimum unlocking threshold for the low-voltage side independently is that the high-voltage side involves safety risks at higher voltage levels, and different operation permission levels have different requirements for the locking reliability of the high-voltage side lock points. Setting them independently allows for the layered deployment of safety strategies.

[0046] The permission determination submodule queries the set of currently effective authorized lock points based on the operation permission level and extracts the minimum unlocking threshold on the high-voltage side. and minimum unlocking threshold on the low-voltage side The authorized lock point set, and Send to the matching determination submodule.

[0047] The matching determination submodule receives the output of the status parsing submodule. and And the set of authorized lock points output by the permission decision submodule, and The matching and determination submodule performs a matching and determination of the real-time locking status and operation permission level. Specifically, the matching and determination submodule determines... Is it greater than or equal to? At the same time, judge Is it greater than or equal to? When both of the above conditions are met, the matching and determination submodule generates a linkage arbitration instruction that allows unlocking; when either condition is not met, the matching and determination submodule generates a linkage arbitration instruction that prohibits unlocking. The linkage arbitration instruction that allows unlocking contains a sequence of lock point numbers to be driven and the target action direction for each lock point. The sequence of lock point numbers to be driven is determined by the authorized lock point set and the operation permission level, and the target action direction is a switch from the locked state to the unlocked state. The linkage arbitration instruction that prohibits unlocking only contains a prohibition flag code and does not carry any lock point driving information.

[0048] In some embodiments, when either the high-voltage side lock point set or the low-voltage side lock point set does not exist in the authorized lock point set of the current operation permission level, the minimum unlocking quantity threshold for the corresponding side is considered to be automatically satisfied. That is, the matching determination submodule only performs threshold comparison on the valid authorized side. For example, if the authorized lock point set for operation permission level 1 only contains the low-voltage side lock point set, the minimum unlocking quantity threshold for the high-voltage side is not involved in the determination, and the matching determination submodule only compares... and The size of the lock linkage arbitration command is determined by the matching and determination submodule. After generating the command, the command is sent to the execution driver module via the output bus of the linkage arbitration module for subsequent actions.

[0049] See Figure 6 In the graph, the horizontal axis represents the sample number, and the vertical axis represents the quantized angle value of the locking point. The quantized angle value is a dimensionless value ranging from 0 to 100, where 0 corresponds to the fully locked position of the mechanical lock cylinder and 100 corresponds to the fully unlocked position. Samples marked with solid black dots represent valid locked states, while samples marked with crosses represent invalid locked states. The dashed line indicates the upper limit of the preset angle locking interval, 15.

[0050] As can be seen from the figure, within the sample number range of 0 to 400, the angle quantization values ​​of the vast majority of samples are distributed between 0 and 15, and are all represented by solid dots. This indicates that the locking point is within the preset angle locking range and meets the effective locking state conditions. This phenomenon is consistent with the angle locking range setting of the state analysis submodule in Example 3, verifying the performance of the mechanical lock cylinder rotation angle signal under normal locking conditions.

[0051] Within the sample sequence range of 400 to 480, the angle quantization value exhibits a significant jump. For some samples, the angle quantization value greatly exceeds the upper limit of the locking range by 15, reaching a high value range of approximately 20 to 100. These samples are marked with a cross, indicating an invalid locking state. This change reflects the mechanical lock cylinder's transition from a locked state to an unlocked or abnormal state, with the angle signal exceeding the normal locking range.

[0052] Within the sample sequence 480 to 490, the angle quantization value returned to the vicinity of the locking interval, but was still marked with a cross to indicate an invalid locking state. This indicates that it is not sufficient for the angle quantization value to be in the locking interval alone. It is necessary to combine the on / off logic value of the electromagnetic lock core to determine the valid locking state. It is possible that the on / off state of the electromagnetic lock core does not meet the locking requirements at this time.

[0053] Example 4: In practical implementation, the execution drive module receives the unlocking permission arbitration command from the linkage arbitration module via the data bus. The execution drive module internally has an instruction parsing buffer. This buffer parses the unlocking permission arbitration command, extracting the sequence of lock point numbers to be driven and the target action direction for each lock point. The sequence of lock point numbers to be driven is an ordered list, pre-arranged according to the security sequence requirements of the unlocking operation. This order is determined by the structural design of the low-voltage cabinet; for example, unlocking the outer lock points of the cabinet door first, then unlocking the internal function panel lock points. The target action direction is represented by an enumeration value: an enumeration value of "0" indicates a switch from the locked state to the unlocked state, and an enumeration value of "1" indicates a switch from the unlocked state to the locked state.

[0054] The execution driver module directly determines the action priority of each lock point from the ordered sequence of lock point numbers to be driven. The lock point at the beginning of the sequence has the highest action priority, and the action priority of subsequent lock points decreases accordingly. The priority value is a consecutive integer starting from 1, with smaller values ​​indicating higher priority.

[0055] After determining the action priority, the execution drive module further extracts the action duration and action speed level of each lock point to be driven from the linkage arbitration commands that allow unlocking. The action duration refers to the expected time from receiving the drive signal to completing the target action by the lock point's actuator, measured in milliseconds. The action speed level is a predefined grading parameter, taking the value of an integer 1, 2, or 3. Level 1 corresponds to slow action, level 2 to medium-speed action, and level 3 to fast action. The value of the action speed level is determined according to the type of actuator. For electromagnetic lock cylinders, the actuator speed level is determined by the rated current of the electromagnetic coil and the armature stroke; for mechanical lock cylinders, the actuator speed level is determined by the rated speed of the drive motor and the reduction ratio.

[0056] The execution drive module calculates the initial values ​​of the frequency and duty cycle of the drive pulse width modulation signal for each lock point based on the action duration and action speed level. The frequency of the drive pulse width modulation signal... Based on action speed level Frequency obtained by looking up a table The lookup table relationship is: when hour Hertz, when hour Hertz, when hour Hertz. Initial duty cycle value. The calculation formula is: in, The initial value of the duty cycle of the driving pulse width modulation signal is expressed as a percentage. Indicates the speed level of the action. The minimum effective drive pulse width time at the corresponding drive frequency, in microseconds, is the time during which the actuator can reliably respond. The value of is determined by the electrical characteristics of the actuator; for example, for a DC electromagnet, The excitation settling time required for the armature to move from its initial position is measured to be 200 microseconds. This indicates the duration of the action, measured in microseconds. Read directly from the joint arbitration instruction. The value is obtained in advance from the actuator's specifications and stored in the parameter register of the execution driver module.

[0057] The execution driver module arranges the drive pulse width modulation signals of each lock point into a drive timing chain according to the action priority from high to low. The drive timing chain is a data structure containing a list of nodes sorted by priority. Each node is bound to the drive pulse width modulation signal parameters of a lock point, including frequency. Initial value of duty cycle Duration of the action And the target location value.

[0058] During the execution process, the execution driver module first initiates the output of the drive pulse width modulation signal at the first lock point in the drive timing chain. The drive pulse width modulation signal is generated by a timer unit within the execution driver module, and the timer unit's counter period is set to the frequency... The corresponding period value, duty cycle is set to The corresponding comparison matching value. The drive pulse width modulation signal is amplified by the power drive circuit and applied to the actuator coil or motor terminal of the corresponding locking point.

[0059] Duration of the action of the current lock point After completion, the execution drive module checks whether the actual position signal of the previous locking point has reached the target position. The actual position signal is provided in real time by the angle sensor and electromagnetic state sensor installed at the locking point, and its detection process is consistent with the acquisition method of the lock state acquisition module. The execution drive module compares the actual position signal with the target position signal. The target position signal corresponds to the target action direction. When the target action direction is unlocking, the angle quantization value of the target position signal is 100 and the on / off logic value is logic 0; when the target action direction is locking, the angle quantization value of the target position signal is 0 and the on / off logic value is logic 1.

[0060] When the actual position signal matches the target position signal, meaning the previous locking point has reached the target position, the execution drive module begins timing for a preset stabilization waiting time. The preset stabilization waiting time is set to 50 milliseconds. This setting is based on the following: after the actuator finishes its action, the mechanical components will experience slight oscillations due to inertia. The time required for these oscillations to decay to a stable state is measured to be approximately 30 to 40 milliseconds. Setting it to 50 milliseconds ensures that the mechanical components remain stationary under any operating condition. After the stabilization waiting time has elapsed, the execution drive module initiates the output of the drive pulse width modulation signal for the next locking point.

[0061] When the actual position signal is inconsistent with the target position signal, i.e., the previous lock point has not reached the target position, the execution drive module extends the duration of the drive pulse width modulation signal of the current lock point. The extension method is as follows: the frequency and duty cycle of the current drive pulse width modulation signal remain unchanged, the drive signal is continuously output, and the actual position signal is checked every 5 milliseconds until the actual position signal matches the target position signal. During each detection interval, the execution drive module accumulates the total extension time. When the accumulated total extension time exceeds the action duration... When the value is twice the value, the execution drive module determines that the current lock point has an execution fault, terminates the drive signal output and generates a lock point action abnormality flag, and writes the lock point action abnormality flag into the lock point action feedback data.

[0062] There is a dynamic interval between the drive pulse width modulation (PWM) signal outputs of two adjacent locking points, triggered by the feedback signal of the previous locking point's completion. This dynamic interval is positively correlated with the actual duration of the previous locking point's action. The method for determining it is as follows: in, Indicates the first in the driving timing chain After the first lock point completes the drive, until the... The dynamic interval between each lock point startup driver, in milliseconds; Indicates the first The actual action time of each lock point from the start of the drive signal output to the arrival of the actual position signal at the target position, in milliseconds; This represents the dynamic interval scaling factor. The value is 0.2. Dynamic interval scaling factor. The rationale for setting it to 0.2 is as follows: When continuously driving adjacent locking points, the micro-vibration of the cabinet caused by the action of the previous locking point may affect the mechanical alignment accuracy of the subsequent locking point. By setting an interval time that is proportional to the actual action time of the previous locking point, the cabinet structure vibration can be provided with attenuation time. The value range of the proportional coefficient 0.2 comes from the damping characteristics of the structure. According to modal testing, the time required for the cabinet vibration to attenuate to below 10% of the initial amplitude is about 0.15 to 0.25 times the action cycle. The middle value of 0.2 is taken as the general parameter.

[0063] Before initiating the drive pulse width modulation signal for the next locking point, the execution drive module acquires and temporarily stores the actual position signal and action feedback data of the previous locking point. After the actuator of each locking point completes its action, the execution drive module acquires the actual position signal of that locking point, which includes the locking point number, the actual angle quantization value, and the actual on / off logic value. The execution drive module combines the actual position signals of each locking point according to the time sequence of action completion to form locking point action feedback data. The locking point action feedback data is a linear list structure, where each item corresponds to the feedback information of one locking point, arranged in the order of completion. The locking point action feedback data is sent to the status monitoring feedback module through the output interface of the execution drive module.

[0064] Example 5: In practical implementation, the status monitoring feedback module receives lock point action feedback data from the execution driver module through a parallel data interface. The lock point action feedback data is a linear list structure, where each entry corresponds to a lock point that has completed an action, including the lock point number, actual position signal, and action completion time. The status monitoring feedback module internally includes a position extraction unit, a consistency verification unit, and a log recording unit. The position extraction unit is responsible for extracting the actual position signal of each lock point from the lock point action feedback data and performing quantization conversion. The consistency verification unit performs action consistency verification and generates action consistency verification results. The log recording unit is responsible for storing fault logs under specific conditions.

[0065] The position extraction unit extracts the actual position signal of each locking point from the locking point action feedback data item by item. The actual position signal includes the actual angle quantization value and the actual on / off logic value corresponding to the locking point. The actual angle quantization value is output by the angle sensor installed at the locking point after analog-to-digital conversion and normalization mapping, and the value ranges from 0 to 100. 0 corresponds to the fully locked position of the mechanical lock cylinder, and 100 corresponds to the fully unlocked position of the mechanical lock cylinder. The actual on / off logic value is a binary logic quantity, which takes the value of logic 1 or logic 0. Logic 1 indicates that the electromagnetic lock cylinder is in the locked state of being energized and engaged, and logic 0 indicates that the electromagnetic lock cylinder is in the unlocked state of being de-energized and released. The position extraction unit directly uses the actual angle quantization value as the actual angle value. The actual on / off logic value is directly used as the actual on / off value. superscript This represents the lock point number, which is obtained from the lock point number sequence in the driver timing chain output by the execution driver module.

[0066] The status monitoring and feedback module obtains the target angle value and target on / off value corresponding to the target action direction of each lock point from the execution driver module. When constructing the driver timing chain, the execution driver module stores the target position parameters corresponding to the target action direction of each lock point in its internal register. The status monitoring and feedback module reads the target angle value from the execution driver module's register via the inter-module communication bus. and target on / off value When the target's movement direction is unlocking, the target angle value... The value is 100, which is the target on / off value. The value is logic 0; when the target action direction is locked, the target angle value is... The value is 0, which is the target on / off value. The value is logical 1.

[0067] The consistency verification unit checks the actual angle value of the same locking point. Angle value relative to the target Perform the difference calculation to obtain the angular deviation. angular deviation The calculation formula is: in, Indicates the first The angle deviation of each locking point, in the unit of angle quantization value division; Indicates the first The actual angle value of each locking point ranges from 0 to 100. Indicates the first The target angle value for each lock point, with a value of 0 or 100. Angle deviation. It reflects the quantitative difference between the actual stop position of the mechanical lock cylinder and the target position.

[0068] At the same time, the consistency verification unit checks the actual on / off values ​​of the same lock point. With target on / off value Perform an XOR comparison to obtain the on / off consistency flag. The XOR comparison rule is: when and When the logical values ​​are the same, A value of 0 indicates that the on / off state of the lock point is consistent with the target; when and When the logical values ​​are different, A value of 1 indicates that the on / off state of the lock point is inconsistent with the target.

[0069] The consistency verification unit internally stores a preset angle deviation threshold. Preset angle deviation threshold The value is set to 3. The basis for setting this threshold of 3 is as follows: the full scale of the angle quantization value is 100, which corresponds to the full stroke of the mechanical lock cylinder from fully locked to fully opened. The mechanical positioning tolerance introduced during the processing and assembly of the locking point does not exceed three percent of the full stroke, so the corresponding angle deviation threshold is set to 3. At the same time, the angle fluctuation caused by the repeatability of the armature stroke end positioning of the electromagnetic lock cylinder is also within this range. Therefore, setting the angle deviation threshold to 3 can distinguish between normal action deviation and abnormal action deviation.

[0070] The consistency verification unit traverses all lock points in the driver timing chain one by one, and checks each lock point... Perform the following judgment: Is it less than At the same time, judge Is it equal to 0? When all lock points satisfy... and At that time, the consistency verification unit generates an action consistency verification result. This occurs when at least one lock point exists. Make or At that time, the consistency verification unit generates a result indicating that the action consistency verification failed.

[0071] When a result indicating that the action consistency check has failed is generated, the log recording unit records the angle deviation of each lock point that does not meet the condition. and on / off consistency flag The system combines the lock point number, angle deviation, on / off consistency flag, and action completion time into a single fault log record. The log recording unit stores the fault log record in the local memory of the status monitoring feedback module. This local memory is a ferroelectric memory with a read / write capability of at least one quadrillion operations and can retain data even after power failure.

[0072] The status monitoring feedback module sends the generated action consistency verification pass or fail result to the linkage arbitration module through a dedicated feedback channel. The feedback data frame contains a verification result flag code, where one bit indicates pass or fail, and the remaining bits are reserved for expansion.

[0073] Upon receiving a failure to verify the consistency of actions, the linkage arbitration module immediately initiates a secondary locking determination process. The linkage arbitration module sends a pause command to the execution drive module. Upon receiving the pause command, the execution drive module stops outputting all currently incomplete drive pulse width modulation signals, interrupting the execution of the drive timing chain, thus pausing the current unlocking operation. The linkage arbitration module then initiates an immediate acquisition request to the lock status acquisition module via a high-speed read interface. The lock status acquisition module responds to this request by performing a complete sampling of all locking points on the low-voltage cabinet door and internal function panel, acquiring the current mechanical and electrical status signals of each locking point, and generating updated locking point status sequence data. The updated locking point status sequence data overwrites the previously stored locking point status sequence data in the linkage arbitration module's internal buffer.

[0074] The linkage arbitration module re-analyzes the real-time locking status of each lock point based on the updated lock point status sequence data. The analysis steps are as follows: extract the angle quantization value of each lock point from the updated lock point status sequence data. On / off logic values Quantize the angle value With the preset angle locking interval Compare and determine the on / off logic values. The lock is compared with the preset on / off blocking value (Logic 1). If the angle quantization value falls within the angle blocking range and the on / off logic value equals Logic 1, the real-time blocking state of the lock point is marked as a valid blocking state; otherwise, it is marked as an invalid blocking state. The subscript... Indicates the lock point number. The value range is the set of numbers for all lock points in the low-voltage switchgear. The linkage arbitration module counts the number of lock points in a valid locked state after re-parsing, thus obtaining the updated total number of lock points in a valid locked state. And the updated number of effective interlocking points on the high-voltage side. Number of effective locking points on the low-pressure side .

[0075] The linkage arbitration module will re-match and determine the updated number of valid locking points with the minimum unlocking threshold of the authorized locking point set, including the authorized locking point set and the minimum unlocking threshold on the high-voltage side. and minimum unlocking threshold on the low-voltage side The operation permission level determined from the previous authentication result data remains unchanged. and When the rematch is successful, the linkage arbitration module generates a linkage arbitration instruction to restore unlocking. This instruction contains the sequence of lock point numbers for the remaining nodes in the driver timing chain that have not yet been executed, along with their corresponding target action directions. This instruction is then resent to the execution driver module, which resumes the time-series driving of subsequent lock points from the pause point. or If the rematch fails, the linkage arbitration module generates a lock maintenance command, which is sent to the execution drive module to prevent any lock point from performing a new action. At the same time, the linkage arbitration module triggers the cabinet door alarm signal, driving the audible and visual alarm installed on the low-voltage cabinet panel to emit a continuous alarm.

[0076] See Figure 7 In the figure, the horizontal axis represents the test sample number, and the vertical axis represents the angle deviation (dimensionless), indicating the difference between the actual angle value and the target angle value of each locking point as determined by the status monitoring feedback module. The legend distinguishes between "angle deviation (normal)" and "angle deviation (abnormal)" data points, using solid circles to represent normal deviations and crosses to represent abnormal deviations. The figure also shows the preset angle deviation threshold 3 marked with a dashed line, which corresponds to the mechanical positioning tolerance and electromagnetic lock armature positioning repeatability tolerance set by the consistency verification unit in Example 5.

[0077] As can be seen from the data distribution trend in the graph, within the range of sample numbers from 0 to 450, the angle deviation is consistently below the threshold of 3, and all data points are solid circles. This indicates that the actual action state of the locking point matches the target action state during this stage, the action consistency check passes, and it conforms to normal operating conditions. Starting from approximately sample number 460, a large number of data points marked with crosses appear, and the angle deviation significantly exceeds the threshold of 3. This effectively reflects abnormal deviations in the locking point's action, and the action consistency check fails. The maximum angle deviation in this abnormal stage is close to 8, far exceeding the threshold, indicating a significant deviation between the actual rotation stop position of the mechanical lock cylinder and the target position, possibly indicating an execution malfunction or positioning anomaly.

[0078] The above description is merely a specific embodiment of this application, but the scope of protection of this application is not limited thereto. Any changes or substitutions that can be easily conceived by those skilled in the art within the scope of the technology disclosed in this application should be included within the scope of protection of this application.

Claims

1. A burglarproof low-voltage cabinet based on multi-lock linkage control, characterized in that, The anti-theft low-voltage cabinet includes: The lock status acquisition module is used to collect mechanical and electrical status signals of multiple lock points on the low-voltage cabinet door and internal function panel, and generate lock point status sequence data. The identity verification module is used to acquire multi-dimensional identity credential data of operators, verify the multi-dimensional identity credential data, and generate identity verification result data. The linkage arbitration module parses the real-time locking status of each lock point based on the lock point status sequence data, determines the operation permission level based on the identity verification result data, matches and determines the real-time locking status and the operation permission level, and generates a lock linkage arbitration command. The execution drive module generates a time-series drive signal for each locking point according to the lock linkage arbitration command, and drives the actuator of each locking point to act sequentially according to the time-series drive signal, generating locking point action feedback data. The status monitoring feedback module verifies the consistency between the actual action state of each lock point and the target action state based on the lock point action feedback data, generates an action consistency verification result, and sends the action consistency verification result back to the linkage arbitration module for secondary locking determination.

2. The anti-theft low-voltage cabinet based on multi-lock linkage control according to claim 1, characterized in that, The specific steps for the lock status acquisition module to acquire mechanical and electrical status signals from multiple locking points on the low-voltage switchgear door and internal functional panel, and generate lock point status sequence data, are as follows: The lock status acquisition module acquires the mechanical lock cylinder rotation angle signal and the electromagnetic lock cylinder on / off signal at each lock point. It converts the mechanical lock cylinder rotation angle signal into an angle quantization value and the electromagnetic lock cylinder on / off signal into an on / off logic value. The angle quantization value and on / off logic value of each lock point are arranged in the order of the lock point number to generate the original state vector of each lock point. The original state vectors of each lock point are combined into lock point state sequence data according to the acquisition timestamp order.

3. The anti-theft low-voltage cabinet based on multi-lock linkage control according to claim 1, characterized in that, The specific steps for the identity verification module to acquire multi-dimensional identity credential data of the operator, verify the multi-dimensional identity credential data, and generate identity verification result data are as follows: The identity verification module acquires the operator's biometric data, electronic key data, and dynamic password data in parallel. It performs feature matching on the biometric data to obtain a biometric matching score, performs key verification on the electronic key data to obtain a key verification score, and performs password comparison on the dynamic password data to obtain a password comparison score. The biometric matching score, the key verification score, and the password comparison score are weighted and fused according to preset weights to obtain a comprehensive identity confidence score. The comprehensive identity confidence score is compared with a preset confidence threshold, and identity verification result data is generated based on the comparison result.

4. The anti-theft low-voltage cabinet based on multi-lock linkage control according to claim 1, characterized in that, The linkage arbitration module receives the lock point status sequence data and the authentication result data, parses the real-time locking status of each lock point based on the lock point status sequence data, determines the operation permission level based on the authentication result data, and generates a lock linkage arbitration command by matching the real-time locking status and the operation permission level. The specific steps are as follows: The linkage arbitration module extracts the angle quantization value and on / off logic value of each lock point from the lock point state sequence data. It compares the angle quantization value of each lock point with a preset angle locking interval and the on / off logic value of each lock point with a preset on / off locking value. When the angle quantization value falls within the angle locking interval and the on / off logic value is equal to the on / off locking value, the real-time locking state of the lock point is marked as a valid locking state; otherwise, it is marked as an invalid locking state. The module counts the number of lock points in a valid locking state among all lock points. It extracts the authorized lock point set corresponding to the operation permission level from the identity verification result data and determines whether the number of lock points in a valid locking state reaches the minimum unlocking threshold of the authorized lock point set. If so, a linkage arbitration command that allows unlocking is generated; otherwise, a linkage arbitration command that prohibits unlocking is generated.

5. The anti-theft low-voltage cabinet based on multi-lock linkage control according to claim 4, characterized in that, The authorized lock point set in the linkage arbitration module includes a high-voltage side lock point set and a low-voltage side lock point set. The minimum unlocking quantity threshold for the high-voltage side and the minimum unlocking quantity threshold for the low-voltage side corresponding to the operation permission level are set independently.

6. The anti-theft low-voltage cabinet based on multi-lock linkage control according to claim 4, characterized in that, The execution drive module receives the lock linkage arbitration command, generates a time-series drive signal for each locking point based on the lock linkage arbitration command, and drives the actuator of each locking point to operate sequentially according to the time-series drive signal. The specific steps for generating locking point action feedback data are as follows: After receiving the linkage arbitration command that allows unlocking, the execution drive module extracts the lock point number sequence to be driven and the target action direction of each lock point from the linkage arbitration command. It determines the action priority of each lock point according to the order of the lock point number sequence, generates the duty cycle and duration of the corresponding lock point's drive pulse width modulation signal according to the action priority and target action direction of each lock point, and outputs the corresponding drive pulse width modulation signal to the execution mechanism of each lock point in descending order of action priority. After the execution mechanism of each lock point completes its action, it collects the actual position signal of the lock point and combines the actual position signals of each lock point according to the time order of action completion to form lock point action feedback data.

7. The anti-theft low-voltage cabinet based on multi-lock linkage control according to claim 6, characterized in that, When the execution drive module outputs drive pulse width modulation signals to the execution mechanism of each lock point in descending order of action priority, there is a dynamic interval between the output drive pulse width modulation signals of two adjacent lock points, which is triggered by the feedback signal of the previous lock point's action completion. The dynamic interval is positively correlated with the actual action duration of the previous lock point.

8. The anti-theft low-voltage cabinet based on multi-lock linkage control according to claim 7, characterized in that, The specific steps of the status monitoring feedback module receiving the lock point action feedback data, verifying the consistency between the actual action state and the target action state of each lock point based on the lock point action feedback data, generating an action consistency verification result, and sending the action consistency verification result back to the linkage arbitration module are as follows: The status monitoring feedback module extracts the actual position signal of each lock point from the lock point action feedback data, converts the actual position signal of each lock point into an actual angle value and an actual on / off value, obtains the target angle value and target on / off value corresponding to the target action direction of each lock point from the execution drive module, calculates the angle deviation by subtracting the actual angle value and the target angle value of the same lock point, and performs an XOR comparison between the actual on / off value and the target on / off value of the same lock point to obtain an on / off consistency flag. When the angle deviation of all lock points is less than the preset angle deviation threshold and the on / off consistency flag of all lock points is consistent, an action consistency verification pass result is generated; otherwise, an action consistency verification fail result is generated, and the action consistency verification pass result or the action consistency verification fail result is sent back to the linkage arbitration module.

9. A burglarproof low-voltage cabinet based on multi-lock linkage control according to claim 8, characterized in that, When the status monitoring feedback module generates a result indicating that the action consistency verification has failed, it records the current angle deviation of the lock point and the on / off consistency flag, and stores the recorded data as a fault log in the local memory.

10. A burglarproof low-voltage cabinet based on multi-lock linkage control according to claim 8, characterized in that, After receiving the result of the action consistency verification failing, the specific steps for the linkage arbitration module to perform the secondary locking determination are as follows: After receiving a result indicating that the action consistency verification failed, the linkage arbitration module pauses the current unlocking operation process, re-acquires the current mechanical and electrical status signals of each locking point from the lock status acquisition module, updates the locking point status sequence data, re-parses the real-time locking status of each locking point based on the updated locking point status sequence data, and re-matches the re-parsed real-time locking status with the authorized locking point set. If the re-matching judgment passes, a linkage arbitration command to resume unlocking is generated; if the re-matching judgment fails, a locking maintenance command is generated and a cabinet door alarm signal is triggered.

Images