TWM508172U - Access authentication system - Google Patents

Description

Access control system

This creation is an access control authentication system, especially an access control authentication system that combines the biometric characteristics of the user.

In response to the rapid development of urbanization, the security problem has become a headache for major cities today, and indirectly contributes to the rapid development of access control devices. In addition, with the development of general company number diversification or grouping, in order to provide more convenient services for consumers everywhere, many companies often carry out localization, that is, local stagnation services, providing customers with faster service.

The increase in access control devices has also been prompted by the increase in company stagnation or service stagnation. However, when the user wants to release the security status of the local access control device, it is often necessary to log in the personal authentication data. However, once you have arrived at another branch or other stagnation point, it is relatively inconvenient to log in again with the same login information. For today's busy industrial and commercial society, time is the influence of money, which inevitably increases the company's time cost, which in turn leads to an increase in operating costs.

Therefore, the development of a different access control authentication system, which reduces the existing access control system due to the need to repeatedly log in, resulting in the insignificant waste of labor costs, has become a topic of concern for developers of access control certification systems.

In view of this, an embodiment of the present invention provides an access authentication system including a first access control host and at least a second access control host. The first access control host includes a first reading module that captures the first biometric feature. The first registration module is electrically connected to the first reading module to log in as a user profile according to the first biometric feature. The first communication module is electrically connected to the first registration module to transmit user data. The second access control host includes a second communication module that receives user data. The second registration module is electrically connected to the second communication module to log in the received user data. The second reading module is electrically connected to the second registration module to capture the second biometric feature. The second registration module verifies the second biometric based on the logged user data, and releases the access control when the verification is successful.

In an embodiment, the access authentication system further includes a server. The server receives the user data transmitted by the first communication module, and transmits the user data to the second communication module. The first access control host also includes a first host serial number, and each second access control host includes a second host serial number. The first communication module transmits the user data and the first host serial number to the server, so as to facilitate the transfer of the user data to the second access control host corresponding to the second host serial number of the same user as the first host serial number.

In another embodiment, the access authentication system further includes a mobile device. The mobile device includes a third reading module and a third communication module. The third reading module captures the third biometric feature. The third communication module sends the third biometric feature to the first access control host or the second access control host to be unlocked. The first access control host or the second access control host that receives the third biometric verifies the third biometric according to the user data registered, and releases the access control when the verification succeeds.

In another embodiment, the server further includes a statistics module for counting the attendance login message and the access control opening and closing message. In addition, the access control authentication system may further include a management host. The management host is used to receive the attendance login message and the access control opening and closing message. In this way, the server transmits the attendance login message and the access control opening and closing message to the management host within a statistical time limit. The maximum statistical time limit is 24 hours.

Because the creation of the access control system is combined with the biometric characteristics of the user, and each user's biometrics are the only ones in the world, others are difficult to counterfeit, so the security of the creation access authentication system will be greatly improved. In addition, because the user's own biological characteristics are utilized, there is no need to worry about the forgetting or error of the input data, or the risk of loss of the wafer card or theft, and the convenience of the creation access authentication system can be improved.

The detailed features and advantages of the present invention will be described in detail below in the embodiments, which are sufficient to enable anyone skilled in the art to understand the technical contents of the present invention and to implement them, and to disclose the contents, patent claims and drawings according to the present specification. Anyone skilled in the art can easily understand the purpose and advantages associated with this creation.

Please refer to FIG. 1 , which is a system block diagram of the access authentication system of the first embodiment of the present invention. The access control authentication system includes a plurality of access control hosts. The first access control host 1 and the second access control host 2 are illustrated as an example, but it should be understood that the second access control host 2 may also be plural. These access control hosts may be located in the same geographic location (eg, within the same building) or may be located in different geographic locations (eg, located in different counties). The first access control host 1 includes a first reading module 11 , a first registration module 12 , and a first communication module 13 . When the user 6 wants to log its own biometrics to the first access control host 1 and the other second access control host 2, the first biometric feature of the user 6 can be retrieved by the first reading module 11. The first reading module 11 can be a conventional fingerprint identification module, an iris recognition module, a face recognition module, a palm recognition module or a voiceprint recognition module, depending on the type of biometrics used. This will not be repeated here. The biometric feature may be a fingerprint feature, an iris feature, a facial feature, a palm shape feature, a voiceprint feature, or the like, or any combination thereof, and may be a single biological feature or a combination of two or more biological features.

The first registration module 12 is electrically connected to the first reading module 11 and is registered as a user profile according to the first biometric feature of the user 6. In addition to the first biometric feature, the user profile records other identifiable information about the user, including but not limited to the employee number, identity card number, name, date of birth, contact number, and the like. The first communication module 13 is electrically connected to the first registration module 12 for transmitting user data to the second access control host 2. The first communication module 13 can be transmitted by using a wired Internet (Internet) and a wireless Internet (Internet), and a regional network connection, wherein the regional network connection includes a wired area network. Local Area Network (LAN) and Wireless LAN (Wireless LAN), but this creation is not limited to this.

The second access control host 2 includes a second communication module 21, a second registration module 22, and a second reading module 23. The second communication module 21 receives user data. The second registration module 22 is electrically connected to the second communication module 21 to log in the received user data. The second reading module 23 is electrically connected to the second registration module 22, and when the user 6 enters the second access control unit 2 and inputs the biometric feature through the second reading module 23, the second reading module 23 can capture the biometrics of the user 6 (in order to distinguish from the first biometric feature described above, referred to herein as "second biometric"). It should be understood that the first biometric feature and the second biometric feature are derived from which access control host, and the first biometric feature and the second biometric feature may still have the same biometric characteristics from the same user. content. The second reading module 23 can be a conventional fingerprint recognition module, an iris recognition module, a face recognition module, a palm recognition module, or a voiceprint recognition module, which will not be described herein. The second registration module 22 performs verification according to the logged-in user data, that is, the second biometric captured by the second reading module is compared with the first biometric feature in the user data. If the verification is successful, the user 6 can obtain the right to operate the second access control host 2 or the second access control host 2 can perform the corresponding action (such as releasing or opening the access control). In this way, the user 6 only needs to log in to one of the access control hosts to log in to their own biometrics, and can be operated by multiple access control hosts without re-entering data or logging in.

Please refer to FIG. 2, which is a system block diagram of the access authentication system of the second embodiment of the present invention. Compared with the foregoing first embodiment, the access authentication system of this embodiment may further include a server 3. The server 3 is configured to receive the user data transmitted by the first communication module 13, and transmit the user data to the second communication module 21, and the second access control host 2 performs verification. In other words, the first access control host 1 can transmit the user profile to the second access control host 2 via the server 3. The server 3 can be transmitted by using a wired Internet and a wireless Internet, and a regional network connection, where the regional network connection includes a wired local area network (Local) Area Network; LAN) and Wireless LAN, but this creation is not limited to this. Through the transmission of the server 3, each access control host can reduce the processing of the data amount, which can greatly reduce the construction cost of each access control host.

Here, the first access control host 1 may include a first host serial number (such as a factory serial number, a network address, a MAC address, etc.), and each of the second access control hosts 2 may also include a second host serial number (such as a factory serial number, Network address, MAC address, etc.). The first communication module 13 transmits the user data and the first host serial number to the server 3 to transmit the user data to the second access control host 2 corresponding to the second host serial number of the same user as the first host serial number. In this way, the server 3 can store a customer database, and the customer database can record which access control host each customer has, and can transmit the received user data to other access control hosts. For example, the customer database can record employee data of multiple companies (such as employee number, employee name, employee ID number, etc.) and access control host data of each operating point. After receiving the user data of one of the employees registered in the first access control host 1, the employee data corresponding to the user data can be found in the customer database, and the first biometrics are stored. Then, the access control host data of other access control hosts of the enterprise can be found, and the user data of the employee is transmitted to the access control hosts for login. In some embodiments, the employee may also specify the second access control host 2 of the first access control host 1 to which the user wants to log in. The server 3 may transmit the user profile only to the designated second access control host 2. Through the client database of the server 3, the administrator of the access control system can understand the authentication relationship between each user 6 and each access control host, and the management is more convenient.

In some embodiments, the server 3 further includes a statistics module 31. The statistics module 31 is configured to count the attendance login message and the access opening and closing message of the user 6 transmitted by the first access control host 1 and the second access control host 2 that have completed the login operation. Through the statistics of the statistical module 31, the administrator of the access control system can understand the absence status of the user 6, so that the personnel cost and time cost of the post-mortem investigation can be reduced, and the use is more convenient.

Please refer to FIG. 3, which is a system block diagram of the access authentication system of the third embodiment of the present invention. The same components and structures as those in the first embodiment will be denoted by the same reference numerals and will not be described again. The difference between the embodiment and the first embodiment is that the access authentication system of the embodiment further includes a mobile device 4, and the user can operate the access control host remotely by the mobile device 4. The mobile device 4 can be a personal digital assistant (PDA), a smart phone, a notebook computer, a tablet computer, or a wearable device (such as a wearable smart eyewear or a wearable smart wristband), but this creation does not limit. The mobile device 4 includes a third reading module 41 and a third communication module 42. The third reading module 41 can be a conventional fingerprint recognition module, an iris recognition module, a face recognition module, a palm recognition module, or a voiceprint recognition module, which will not be described herein. The third communication module 42 can transmit wireless transmission (for example: infrared (IrDA), Bluetooth, Zigbee, Wi-Fi, Ultra-wideband (UWB), near Field communication (NFC) and other data transmission methods, but this creation is not limited to this.

If the login operation as described in the first embodiment above is completed in advance, when the user 6 is not in the vicinity of the access control host to be operated, the user 6 can operate his mobile device 4 and input his biometrics for remote operation. The third reading module 41 can capture the biometrics of the user (herein referred to as "third biometrics"). The first, second, and third biometrics may still have the same biometric content from the same user in order to distinguish which device is being read. The third communication module 42 can send the third biometric feature to the first access control host 1 or the second access control host 2 to be unlocked. The first access control host 1 or the second access control host 2 that receives the third biometric feature verifies the third biometric according to the logged-in user data. If the verification is successful, the user 6 can obtain the permission to operate the access device by the mobile device 4. Or the access control host can perform corresponding actions (such as releasing or opening the access control).

Please refer to FIG. 4, which is a system block diagram of the access authentication system of the fourth embodiment of the present invention. The same components and structures as those in the second embodiment will be denoted by the same reference numerals and will not be described again. The difference between this embodiment and the second embodiment is that the access authentication system of the embodiment further includes a mobile device 4. The mobile device 4 can be a personal digital assistant (PDA), a smart phone, a notebook computer, a tablet computer, or a wearable device (such as a wearable smart eyewear or a wearable smart wristband), but this creation does not limit. The mobile device 4 includes a third reading module 41 and a third communication module 42. The third reading module 41 can be a conventional fingerprint recognition module, an iris recognition module, a face recognition module, a palm recognition module, or a voiceprint recognition module, which will not be described herein. The third communication module 42 can transmit wireless transmission (for example: infrared (IrDA), Bluetooth, Zigbee, Wi-Fi, Ultra-wideband (UWB), near Field communication (NFC) and other data transmission methods, but this creation is not limited to this.

In this embodiment, when the third reading module 41 can capture the biometrics of the user (herein referred to as "third biometrics"). The first, second, and third biometrics may still have the same biometric content from the same user in order to distinguish which device is being read. The third communication module 42 can send the third biometric to the server 3 for verification. The third communication module 42 can send the third biometric feature to the first access control host 1 or the second access control host 2 to be unlocked. The first access control host 1 or the second access control host 2 that receives the third biometric feature verifies the third biometric according to the logged-in user data. If the verification is successful, the user 6 can obtain the permission to operate the access device by the mobile device 4. Or the access control host can perform corresponding actions (such as releasing or opening the access control).

Please refer to FIG. 5, which is a system block diagram of the access authentication system of the fifth embodiment of the present invention. The same components and structures as those in the second embodiment will be denoted by the same reference numerals and will not be described again. The difference between this embodiment and the second embodiment is that the access authentication system of this embodiment further includes a management host 5. The management host 5 is configured to receive the attendance login message from the server 3 and the access control opening and closing message. The server 3 transmits the attendance login message and the access control opening and closing message of the user 6 to the management host 5 within a statistical time limit. Among them, the maximum value of the statistical time limit is 24 hours. That is, the server 3 transmits the attendance login message and the access control opening and closing message to the management host 5 daily. In this way, the administrator of the access control system will be able to better understand the absence status of multiple users. When the manpower needs to be deployed, the administrator of the access control system will be able to more easily deploy the existing human resources.

Please refer to FIG. 6 , which is a system block diagram of the access authentication system of the sixth embodiment of the present invention. The same components and structures as those in the fourth embodiment will be denoted by the same reference numerals and will not be described again. The difference between this embodiment and the fourth embodiment is that the access authentication system of the embodiment further includes a management host 5. The function of the management host 5 is the same as that of the fifth embodiment, and therefore will not be described herein.

Through the creation of the access control authentication system, the cloud system and the access control authentication system, combined with the user's biometric features, will allow users to log in to the cloud system or transfer to other devices by simply logging in to one of the access control hosts. The access control host eliminates the re-login authentication of the next access control host. This will reduce the waste of user login time and will bring more convenience to users.

Although the present invention is disclosed above in the foregoing embodiments, it is not intended to limit the present invention, and anyone skilled in the art can make some changes and refinements without departing from the spirit and scope of the present invention. The scope of patent protection shall be subject to the definition of the scope of the patent application attached to this specification.

1‧‧‧First access control host
11‧‧‧First reading module
12‧‧‧First registration module
13‧‧‧First communication module
2‧‧‧Second access control host
21‧‧‧Second communication module
22‧‧‧Second registration module
23‧‧‧Second reading module
3‧‧‧Server
31‧‧‧Statistical Module
4‧‧‧Mobile devices
41‧‧‧ third reading module
42‧‧‧3rd communication module
5‧‧‧Management host
6‧‧‧Users

[Fig. 1] A system block diagram of the access authentication system of the first embodiment of the present invention. [Fig. 2] A system block diagram of the second embodiment of the access control authentication system. [Fig. 3] A block diagram of the system of the third embodiment of the access control authentication system. [Fig. 4] A system block diagram of the access authentication system of the fourth embodiment of the present invention. [Fig. 5] A system block diagram of the access authentication system of the fifth embodiment of the present invention. [Fig. 6] A system block diagram of the access authentication system of the sixth embodiment of the present invention.

1‧‧‧First access control host

11‧‧‧First reading module

12‧‧‧First registration module

13‧‧‧First communication module

2‧‧‧Second access control host

21‧‧‧Second communication module

22‧‧‧Second registration module

23‧‧‧Second reading module

3‧‧‧Server

31‧‧‧Statistical Module

4‧‧‧Mobile devices

41‧‧‧ third reading module

42‧‧‧3rd communication module

5‧‧‧Management host

6‧‧‧Users

Claims (10)

An access control authentication system includes: a first access control host, comprising: a first read module for capturing a first biometric feature; and a first registration module electrically connected to the first read module And logging in the first biometric feature as a user data; and a first communication module electrically connecting the first registration module to transmit the user data; and at least one second access control host, including: a second communication module a second registration module electrically connected to the second communication module to log in the received user data; and a second reading module electrically connected to the second registration The module captures a second biometric, and the second registration module verifies the second biometric according to the user data that is logged in, and releases the access control when the verification succeeds. The access authentication system of claim 1, further comprising a server, receiving the user data transmitted by the first communication module, and transmitting the user data to the second communication module. The access control authentication system of claim 2, wherein the first access control host includes a first host serial number, each second access control host includes a second host serial number, and the first communication module transmits the user data and the first Sending a host serial number to the server to transmit the user data to the second corresponding to the second host serial number of the same user as the first host serial number Access control host. The access control authentication system of any one of claims 1 to 3, further comprising a mobile device, comprising a third reading module and a third communication module, wherein the third reading module captures a first a third biometric feature, the third communication module sends the third biometric feature to the first access control host or the second access control host to be unlocked, and receives the first access control host or the second access control of the third biometric The host verifies the third biometric according to the user data registered, and releases the access control when the verification is successful. The access authentication system according to any one of claims 1 to 3, further comprising a mobile device, wherein the first or second communication module receives an operation signal transmitted by the mobile device. The access authentication system of claim 1, wherein the biometric feature is a fingerprint feature, an iris feature, a facial feature, a palm feature, a voiceprint feature, or a combination thereof. The access control authentication system of claim 2, wherein the server further comprises a statistical module for counting a time attendance login message and a door opening and closing message. The access control authentication system of claim 7 further includes a management host for receiving the attendance login message and the access control opening and closing message. The access control authentication system of claim 8, wherein the server transmits the attendance login message and the access control opening and closing message to the management host within a statistical time limit. The access control authentication system of claim 9, wherein the maximum value of the statistical time limit is 24 hours.