TWI840670B - Access management system - Google Patents

Abstract

It is to provide an access management system, mainly comprising a mobile device, a cloud server and a gate control device. The mobile device obtains an identified feature data and gets a door control command. The cloud service receiving the said data and command from the mobile device mainly comprises an authority database, a features database, a decryption module and a processing module. The processing module performs feature comparison and authority determination, so as to generate an act command accordingly. The gate control device thus controls an access control actuation unit based on the act command. With the provided system, the users are able to remotely control the doors. This system also provides a safer way through encrypting identified feature data in order to enhance personal information security.

Description

Access control system

An access control management system, in particular an access control management system that uses a mobile device combined with encrypted information to remotely control access control equipment.

Common access control management is to issue users an inductive magnetic buckle or access card to control the opening and closing of the gate or door when entering and exiting the door. During the epidemic period of infectious diseases, there is a potential risk of infection when swiping cards to enter and exit the access control, exchanging cards, and swiping cards to touch the access control device. It is also easy to lose or drop the access card when using the access card to enter and exit, or even to be stolen to enter and exit the controlled area.

Furthermore, as awareness of personal information security has risen, users or residents want access control systems to provide security for their personal property, but they are also worried that their personal information will be leaked and captured in a crude access control system without their knowledge.

In view of the above problems, the present invention provides a door access management system, which mainly includes a mobile device, a cloud server and a door control device. The mobile device captures feature identification data and generates a door control command, and encrypts the feature identification data and the door control command into encrypted data. The cloud server is connected to the mobile device to receive encrypted data. The cloud server mainly includes an authority data storage module, a feature data storage module, a decryption module and a processing module: the authority data storage module stores multiple authority data, each of which includes identity data and the corresponding authorized access control range; the feature data storage module stores multiple feature data, each of which includes feature identification registration data and the corresponding identity data; the decryption module decrypts the encrypted data to obtain the feature identification data and the door control command; the processing module compares the feature identification data with the feature data stored in the feature data storage module. When the comparison is consistent, it determines whether the door control command meets the authorized access control range based on the identity data, and generates the access control command when it is determined to be consistent. The access control device is connected to the cloud server and controls the access control actuator unit based on the access control commands received.

Thus, the access control management system of the present invention utilizes the method of encrypting and decrypting characteristic identification data to provide access control management that can protect personal information security and has remote control, and solves the inconvenience of having to use a key or access control sensor card when passing through the access control channel and reduces the potential risk of contact infection.

Furthermore, the cloud server of the access control management system provided by the present invention may further include an encryption module, which is connected to the processing module to receive the registration data of the automatic device. The encryption module encrypts the registration data into identity data, the permission data storage module stores the permission data according to the identity data, and the feature data storage module stores the feature data according to the identity data. Therefore, the cloud server will not directly store the user's identity data, but the identity data after the data is encrypted, so that hackers can be prevented from maliciously invading the cloud server database to steal personal information, thereby achieving the effect of personal information protection.

In some embodiments, the access control management system of the present invention, when the access control device opens the access control actuator unit according to the received access control command, the processing module of the cloud server sends a personnel entry and exit notification to the communication device of the contact person specified by the identity data. Therefore, the access control management system of the present invention has the effect of notifying the designated contact person of the situation of controlling the access control by the mobile device.

In some embodiments, the access control management system of the present invention, wherein the door control device includes an image capture module, after the image capture module captures the visitor's image and transmits it to the mobile device, the door control device controls the access control actuator unit according to the received access control command. In this way, when a visitor comes, the access control management system of the present invention provides a convenient remote door opening method.

The present invention uses a mobile device combined with a feature data encryption mechanism to upload encrypted data to the cloud for decryption and identity comparison to control the access control device. This provides encryption protection for user data, solves the inconvenience of having to use a key or access control card when passing through access control channels, reduces potential contact infection risks, and has the function of remote access control. Furthermore, the identity data stored in the cloud server is encrypted, which has the function of protecting personal data.

In addition, the present invention can also notify designated contacts of the access control status of mobile devices. Also, when visitors come, it provides a convenient remote door opening method and other functions.

20: Mobile devices

30: Cloud Server

31: Feature data storage module

32: Permission data storage module

33: Processing module

34: Decryption module

35: Encryption module

40: Door control device

41: Access control actuator unit

411: Intercom module

412: Door lock module

413: Elevator operation module

414: Elevator

42: Image capture module

60: Communication device

[Figure 1] is a block diagram of the access control management system of an embodiment of the present invention (I).

[Figure 2A] is a block diagram of the access control actuation unit of the access control management system of an embodiment of the present invention (I).

[Figure 2B] is a block diagram of the access control actuation unit of the access control management system of an embodiment of the present invention (II).

[Figure 3] is a block diagram of the access control management system of an embodiment of the present invention (II).

[Figure 4] is a block diagram of the access control management system of an embodiment of the present invention (III).

[Figure 5] is a block diagram of the cloud server of the access control management system of an embodiment of the present invention.

The following is a specific embodiment to illustrate the content of the present invention in detail, and the drawings are used as auxiliary explanations. The symbols mentioned in the specification are referred to in the symbol description.

Please refer to Figures 1 to 5: Figures 1, 3, and 4 are respectively block diagrams (I), (II), and (III) of the access control management system of different embodiments of the present invention; Figures 2A and 2B are access control actuators of the access control management system of different embodiments of the present invention; Figure 5 is a cloud server of the access control management system of one embodiment of the present invention.

In addition, the connection between components or modules referred to below refers to data transmission, which can be unidirectional data transmission or bidirectional data transmission. Data transmission can be, for example, receiving or sending messages or images, receiving or sending commands, etc., but is not limited to the above.

The data transmission mentioned above may include the use of direct electrical connection, or the use of wireless communication technologies such as communication protocols (Low Power Wide Area, LoRa), Bluetooth, WiFi, ZigBee, or the use of fixed network, coaxial cable or ADSL (asymmetric digital subscriber loop), or mobile network (3G, 4G, 5G mobile Internet) and other Internet methods to transmit information, but the aforementioned communication methods are only examples and are not limited to this.

Please refer to FIG. 1, which is a block diagram of an access control management system of an embodiment of the present invention. The access control management system mainly includes a mobile device 20, a cloud server 30, and a door control device 40. The mobile device 20 captures feature identification data and generates a door control command, and encrypts the feature identification data and the door control command into encrypted data.

Mobile device 20 The mobile device may be a smart phone, a tablet computer, a laptop, a smart watch, or a smart device that has the function of capturing identification features and generating door control commands.

The feature identification data captured by the mobile device 20 can be a biometric feature, such as a voice feature, a facial feature, a fingerprint feature, or an eye pupil feature; or a graphic feature, such as drawing a specified graphic on the mobile phone screen. Or a combination of multiple identification features can be used as feature identification data.

The cloud server 30 is connected to the mobile device 20, and the mobile device 20 receives the encrypted data. The cloud server 30 mainly includes an authority data storage module 32, a feature data storage module 31, a decryption module 34 and a processing module 33.

The permission data storage module 32 stores multiple permission data, each permission data includes identity data and the corresponding authorized access range. The identity data may include name, phone number, address, ID, any information that can identify the identity or encrypted identification code, or identity data that is a combination of multiple data. Each piece of identity data corresponds to an authorized access range.

The feature data storage module 31 stores multiple feature data, each of which includes feature identification registration data and corresponding identity data. That is, each feature identification registration data has a corresponding identity data. For example, the facial feature registration data registered by Mr. A and Mr. A's identity data are stored as one feature data.

The decryption module 34 decrypts the received encrypted data to obtain the characteristic identification data and the gate control instruction.

The processing module 33 compares the characteristic identification data to determine whether it matches any of the characteristic data stored in the characteristic data storage module 31, compares the identity data of the matched characteristic data to determine whether it matches any of the permission data stored in the permission data storage module 32, and determines whether the scope of the door control instruction matches the authorized access control scope according to the authorized access control scope of the matched permission data. When it is determined that the scope of the door control instruction matches the authorized access control scope, an access control instruction is generated; when it is determined that the scope of the door control instruction does not match the authorized access control scope, an error notification is generated and sent to the mobile device 20.

Specifically, the processing module 33 of the cloud server 30 will perform feature matching based on the feature identification data captured by the mobile device 20 to confirm the identity of the user who issued the door control command, and determine whether the door control command issued by the mobile device 20 meets the access control authority of the user based on the identity information that matches the feature.

For example, the encrypted data uploaded by Mr. A through the mobile device 20 is decrypted by the decryption module 34 of the cloud server 30 to obtain Mr. A's facial recognition features (feature recognition data) and the command to open the community gate (gate control command) input by Mr. A, that is, the scope of the gate control command is the community gate. The processing module 33 of the cloud server 30 performs feature comparison and determines whether the scope of the gate control command (community gate opening command) is within the scope of Mr. A's authority. If it is determined to be in compliance, the community gate will be opened; if it is determined not to be in compliance, an error notification will be used to remind Mr. A that the community gate cannot be opened.

The door control device 40 is connected to the cloud server 30 and controls the door control actuator unit 41 according to the received door control command.

The door control device 40 can be an independent control host or a control device that can control the gate of the entrance and exit, the electronic lock of the closed space, or any access control related equipment.

Access control commands include unlocking, locking, opening or closing or lifting gates, opening or closing calls, opening or closing video surveillance, etc. The above are for illustrative purposes only and are not limited to the above.

The access control actuator unit 41 can be a gate at the entrance or exit, an electronic lock on the door, a mailbox smart lock, a door video monitoring device, a DVR (Digital video recorder), an NVR (Network Video Recorders), etc.

In addition, as shown in FIG. 2A and FIG. 2B , the access control actuation unit 41 may also include an intercom module 411 and a door lock module 412, such as an access control communication intercom, etc. The intercom module 411 communicates with the mobile device 20, and the access control actuation unit 41 opens or closes the door lock module 412 according to the access control command. For example, a user can remotely open the access control communication intercom at the entrance of the community through the access control management system of the present invention to talk to a visiting visitor, or open the surveillance image on the access control communication intercom, etc.

The access control actuation unit 41 may also be a device including an elevator operation module 413 and an elevator 414. The elevator operation module 413 drives the elevator 414 to operate according to the access control command. For example, a user can use the access control management system of the present invention to open the community gate (the scope of the access control command is the community gate) with a mobile phone, enter the elevator entrance, and issue a access control command through the mobile phone to control the elevator to reach the user's residential floor (the scope of the access control command is the residential floor) or the authorized public facility floor (the scope of the access control command is the authorized public facility floor). The aforementioned examples of the access control actuation unit 41 are only for illustrative purposes and are not limited to the aforementioned.

In this way, users can easily use the mobile device 20 at hand to remotely control the opening or locking of the electronic lock of the access control in a "one-click door opening" manner to solve the inconvenience of emergency needs. For example, when leaving home in a hurry, you can remotely close the door at home, or when the food delivery arrives, you don't have to rush downstairs to open the door, you can remotely open the downstairs door. You can also remotely control the lifting of the parking lot's driveway gate.

In some embodiments, please refer to FIG. 3 , in the access control management system of the present invention, when the door control device 40 opens the access control actuator unit 41 according to the received access control command, the processing module 33 of the cloud server 30 will send a personnel entry and exit notification to the communication device 60 of the contact person specified by the identity data. Therefore, the access control management system of the present invention has the effect of notifying the designated contact person of the situation of the mobile device 20 controlling the access control.

For example, when a user uses his mobile device 20 to open the door for an elderly person living alone, the cloud server 30 performs a similar process to the feature comparison and authority judgment described above to generate an access control command, which will not be repeated here. When the door control device 40 opens the access control actuator unit 41 according to the received access control command, the cloud server 30 can transmit the elderly's door opening information to the communication device 60 of the designated contact person set by the elderly to notify the elderly's family or friends, which can be notified by sending text messages, push messages or sending emails.

In addition, in some embodiments, please refer to FIG. 4 , the door control device 40 of the access control management system of the present invention includes an image capture module 42. After the image capture module 42 captures the visitor image and transmits it to the mobile device 20, the user confirms whether the visitor at the door is the guest he/she has agreed to visit or a friend he/she knows through the visitor image displayed on the mobile device 20. After the user confirms that it is correct, he/she can use the mobile device 20 to transmit his/her feature identification data and door control instructions to the cloud. The cloud server 30, or more preferably, the mobile device 20 can automatically capture the feature identification data to combine with the door control command selected by the user and send it to the cloud server 30, that is, the mobile device 20 automatically captures the feature identification data in response to the door control command selected by the user, combines the feature identification data with the door control command and sends it to the cloud server 30, and performs a similar process to the feature comparison and authority judgment described above to control the access control, which will not be repeated here.

Thus, through the access control management system of the present invention, when visitors come, users can also conveniently open the door remotely in a "one-click door opening" manner.

In some embodiments, before using the access control management system provided by the present invention to remotely control access control according to the above operation, a user registration procedure may be further included. Please refer to FIG. 5, which is another embodiment of the cloud server 30 of the present invention having the function of a user registration procedure.

The cloud server 30 may further include an encryption module 35, which is connected to the processing module 33 to receive the registration data of the automatic device 20. The registration data includes the user's basic information, verification information (such as identity card photos, employee ID photos, etc.), etc.

The encryption module 35 encrypts the registration data into identity data (for example, in the form of an encrypted identification code), the permission data storage module 32 stores the permission data according to the identity data, and the feature data storage module 31 stores the feature data according to the identity data. Therefore, from user registration to remote control of the access control device, the cloud server 30 will not directly store the user's basic data, but will encrypt the personal basic data, so as to prevent hackers from maliciously invading the database of the cloud server 30 to steal personal information, thereby achieving the effect of personal information security protection.

In summary, the present invention utilizes a mobile device combined with a feature data encryption mechanism to upload encrypted data to the cloud for decryption and identity comparison to control the access control device. This provides encryption protection for user data, and can also solve the inconvenience of having to use a key or access control sensor card when passing through access control channels, reduce potential contact infection risks, and provide remote access control. Furthermore, the identity data stored in the cloud server is encrypted, which has the effect of protecting personal data.

In addition, the present invention can also notify designated contacts of the access control status of mobile devices. Also, when visitors come, it provides a convenient remote door opening method and other functions.

Through the above detailed description, it can be fully demonstrated that the purpose and effect of this invention are both progressive and have great industrial utilization value. It is also a new invention that has never been seen on the market. It fully meets the patent requirements, so the application is filed in accordance with the law. However, the above is only a better implementation example of this invention, and it should not be used to limit the scope of implementation of this invention. That is, all equal changes and modifications made according to the scope of this invention should fall within the scope of this invention. Please examine it and pray for your approval. This is my prayer.

20: Mobile devices

30: Cloud Server

31: Feature data storage module

32: Permission data storage module

33: Processing module

34: Decryption module

40: Door control device

41: Access control actuator unit

Claims (9)

A door access management system includes: a mobile device, in response to a user selecting a door control command, automatically captures a feature identification data, and encrypts the feature identification data and the door control command into an encrypted data, wherein the door control command has a range; a cloud server, connected to the mobile device and receiving the encrypted data, the cloud server including: an authority data storage module, storing a plurality of authority data, each of which includes an identity data and an authorized door access range corresponding to the identity data; a feature data storage module, storing a plurality of feature data, each of which includes a feature identification registration data and the corresponding feature identification registration data. identity data; a decryption module, decrypting the encrypted data to obtain the feature identification data and the door control command; and a processing module, comparing the feature identification data with the feature data stored in the feature data storage module to obtain the corresponding identity data stored in the feature data storage module, and when the feature identification data matches the feature data, judging whether the door control command matches the authorized access control range stored in the permission data storage module according to the identity data corresponding to the feature data, and generating an access control command when it is judged to match; and a door control device, connected to the cloud server, controlling an access control actuator unit according to the received access control command. The access control management system as described in claim 1, wherein the cloud server further comprises an encryption module connected to the processing module and receives a registration data from the mobile device, the encryption module encrypts the registration data into the identity data, the permission data storage module stores a piece of the permission data according to the identity data, and the feature data storage module stores a piece of the feature data according to the identity data. The access control management system as described in claim 1, wherein the processing module generates an error notification and sends it to the mobile device when determining that the access control instruction does not comply with the authorized access control range. The access control management system as described in claim 1, wherein when the access control device opens the access control actuator unit according to the received access control command, the processing module of the cloud server sends a personnel entry and exit notification to a communication device of a contact person specified by the identity data. The access control management system as described in claim 1, wherein the access control device includes an image capture module, and after the image capture module captures a visitor image and transmits it to the mobile device, the access control device controls the access control actuation unit according to the received access control command. The access control management system as described in claim 5, wherein after the image capture module captures the visitor image and transmits it to the mobile device, the mobile device automatically captures the feature identification data. The access control management system as described in claim 1, wherein the access control actuation unit includes an intercom module and a door lock module, the intercom module communicates with the mobile device, and the access control actuation unit opens or closes the door lock module according to the access control command. The access control management system as described in claim 1, wherein the access control actuator unit includes an electronic lock that is opened or closed according to the access control command. The access control management system as described in claim 1, wherein the access control actuation unit comprises an elevator operation module and an elevator, and the elevator operation module drives the elevator to actuate according to the access control command.

Images