WO2018205064A1

WO2018205064A1 - Access control method and system

Info

Publication number: WO2018205064A1
Application number: PCT/CN2017/083382
Authority: WO
Inventors: 李卓希
Original assignee: 深圳市卓希科技有限公司
Priority date: 2017-05-08
Filing date: 2017-05-08
Publication date: 2018-11-15

Abstract

Disclosed is an access control method. The method comprises: S101, using a first wireless signal and a second wireless signal to respectively carry out recognition and tracking on a control terminal so as to acquire corresponding first position information and second position information; S102, based on the first position information and the second position information, acquiring calibration position information about the control terminal; and S103, determining whether the calibration position information is located in a signal coverage area of a local area network, if so, allowing the control terminal to access a service terminal in the local area network, and if not, prohibiting the control terminal from accessing the service terminal in the local area network. Also disclosed is an access control system. The present application can provide a highly secure and simple access control method.

Description

Access control method and system

Technical field

The present invention relates to the field of communications technologies, and in particular, to an access control method and system.

Background technique

With the development of Internet technology, users can transmit data information between different service terminals by establishing a local area network to share data information. The user usually arranges the wireless network device in a certain area, and controls the terminal through a control terminal such as a mobile phone or a computer, and wirelessly connects the different types of service terminals in the area to the communication node by using the wireless network device, so that the control terminal is connected. The corresponding control program can realize the directed transfer of control instructions and the shared transmission of data information for the different types of service terminals. And the wireless network provided by the wireless network device is usually only limited to the certain area. If the control terminal leaves the range of the certain area, it will not be able to connect to the wireless network, which makes the control terminal lose the pair. The control of the service terminal.

In order to ensure the data security of each service terminal in the area, the local area network in the area generally sets an access authentication mechanism for the control terminal, and the control terminal needs to perform different forms of identity authentication steps such as password input to obtain the permission to enter the local area network. This can prevent other malicious users from illegally accessing the local area network and stealing and tampering with the data information in each service terminal. The prior art local area network only uses a wireless signal for data transmission and positioning of each terminal device, which greatly reduces the data signal transmission quality and positioning accuracy of the local area network. It can be seen that the prior art wireless network access method cannot provide a high user experience.

Summary of the invention

In view of the above drawbacks of the prior art, the technical problem to be solved by the present invention is that the prior art wireless local area network uses only a single form of wireless signal for data transmission, and control terminal and service terminal identification and positioning. The WLAN not only reduces the transmission quality of data signals in the local area network, but also can not accurately locate the control terminal and the service terminal, thereby bringing unstable factors to the access and access of the control terminal and the service terminal in the local area network. The object of the present invention is to provide an access capable of accurately locating different terminals in a local area network to achieve stable access of the terminal to the local area network. Ask the control method and system.

In order to solve the above technical problem, an embodiment of the present invention provides an access control method, where the method includes:

S101: Perform tracking and tracking on the control terminal by using the first wireless signal and the second wireless signal, respectively, to obtain corresponding first location information and second location information;

S102. Acquire, according to the first location information and the second location information, information about calibration location of the control terminal.

S103. Determine whether the calibration location information is located in a signal coverage area of the local area network. If yes, allow the control terminal to access the service terminal in the local area network. If not, prohibit the control terminal from accessing the service in the local area network. terminal;

Further, in S101, the first wireless signal and the second wireless signal are a wifi signal, an infrared signal, a microwave signal, a GPS signal, or an LTE signal;

And, the first wireless signal and the second wireless signal are different types of wireless signals;

Further, in S101, the first location information and the second location information are obtained by a wireless signal strength measurement method or a wireless signal triangulation method;

Further, in S102, the calibration position information is obtained by performing weighting calculation on the first position information and the second position information by different weight ratios;

The weight ratio setting of each of the first location information and the second location information depends on a location of the control terminal in the local area network;

Further, in S103, determining whether the calibration location information is located in a signal coverage area of the local area network specifically determines a relative positional relationship between the calibration location information and one or more threshold boundaries of the signal coverage area.

Correspondingly, an embodiment of the present invention further provides an access control system, where the system includes a control unit, a first wireless signal transmitting unit, a second wireless signal transmitting unit, a first wireless signal receiving unit, and a second wireless Signal receiving unit

The first wireless signal transmitting unit and the second wireless signal transmitting unit are configured to respectively transmit a first wireless signal and a second wireless signal to perform identification tracking on the control terminal;

The first wireless signal receiving unit and the second wireless signal receiving unit are configured to receive the first wireless signal and the second wireless signal, respectively;

The control unit acquires corresponding first location information and second location information based on the first wireless signal and the second wireless signal, and calculates calibration location information of the control terminal;

The control unit further determines whether the calibration location information is located in a signal coverage area of the local area network, and if so, allows the control terminal to access a service terminal in the local area network, and if not, prohibits the control terminal from accessing the local area network Service terminal

Further, the first wireless signal and the second wireless signal are wifi signals, infrared signals, microwave signals, GPS signals, or LTE signals;

Further, the system further includes a wireless signal reference unit capable of performing an operation of reflecting or receiving the first wireless signal and the second wireless;

The control unit obtains the first location information and the second location information based on a wireless signal strength measurement method or a wireless signal triangulation method;

Further, the control unit further obtains the calibration location information by performing weighting calculation on the first location information and the second location information by using different weight ratios;

Further, the control unit determines whether the calibration location information is located in a signal coverage area of the local area network by determining a relative positional relationship between the calibration location information and one or more threshold boundaries of the signal coverage area. operating.

The present invention provides an access control method and system for identifying and tracking a control terminal by using a first wireless signal and a second wireless signal, respectively, to obtain corresponding first location information and second location information, and then The first location information and the second location information acquire the calibration location information of the control terminal, and the manner of acquiring the location information by using the first wireless signal and the second wireless signal can avoid positioning by using a single wireless signal, thereby causing positioning data error A large problem; in addition, the method and system can also set a connection state between the control terminal and the service terminal in the local area network according to the relative positional relationship between the calibration position information and the coverage area of the local area network signal to ensure Only the control terminal within the preset area can obtain the corresponding access rights, thereby improving the data security of the service terminal.

DRAWINGS

In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings used in the embodiments or the prior art description will be briefly described below. Obviously, the following description The drawings in the drawings are only some of the embodiments of the present invention, and those skilled in the art can obtain other drawings according to the drawings without any creative work.

1 is a schematic flowchart of an access control method according to an embodiment of the present invention;

FIG. 2 is a schematic structural diagram of an access control system according to an embodiment of the present invention.

detailed description

The technical solutions in the embodiments of the present invention are clearly and completely described in the following with reference to the accompanying drawings in the embodiments of the present invention. It is obvious that the described embodiments are only a part of the embodiments of the present invention, but not all embodiments. All other embodiments obtained by those skilled in the art based on the embodiments of the present invention without creative efforts are within the scope of the present invention.

FIG. 1 is a schematic flowchart of an access control method according to an embodiment of the present invention. In the embodiment of the present invention, the method includes:

S101: Perform tracking and tracking on the control terminal by using the first wireless signal and the second wireless signal respectively, and acquire corresponding first location information and second location information.

Specifically, the access control method is used to control whether a control terminal can obtain the access permission of the local area network in a certain area; wherein the control terminal can be, but not limited to, a mobile phone, a tablet computer, or a smart wearable electronic device. A portable electronic device having a network connection function; the local area network is a wireless communication network disposed in a certain area, wherein the certain area means that the wireless signal of the local area network can cover a maximum boundary range conveyed, that is, outside the maximum boundary range The wireless signal strength of the local area network will be greatly attenuated, resulting in the data signal not being transmitted normally. The local area network may be a wifi wireless network, a broadband wireless network, or a near field communication wireless network; preferably, the local area network may be provided with one or more wireless connection nodes, and the control terminal may access the wireless connection node through the wireless connection node. In the LAN. In addition, the certain area is further provided with one or more service terminals. Preferably, the service terminal can be an electronic device having a specific data processing and network connection function, such as a scanner, a projector or a printer; the service terminal can be established by The wireless channel is connected to the local area network, and the wireless channel can be, but not limited to, a wifi wireless channel, an infrared wireless channel, or a Bluetooth wireless channel. The wireless signals of each service terminal are dedicated to transmitting corresponding control commands and data information. In this way, each service terminal has a specific service area, and the service areas of different service terminals are independent of each other and do not have any overlapping range, which can ensure that different service terminals pass through the wireless network. The data crosstalk does not occur when the network interacts with the control terminal.

The method transmits a first wireless signal and a second wireless signal respectively by the first wireless signal transmitting unit and the second wireless signal transmitting unit. The first wireless signal and the second wireless signal may be, but are not limited to, a wifi signal, an infrared signal, a microwave signal, a GPS signal, an LTE signal, etc., and the first wireless signal and the second wireless signal are respectively different types of wireless signals. In this way, it is possible to prevent crosstalk between the first wireless signal and the second wireless signal during propagation and to improve the recognition of the wireless signal. Correspondingly, the control terminal is provided with a first wireless signal receiving unit and a second wireless signal receiving unit for respectively receiving the first wireless signal and the second wireless signal, and a wireless signal reference is disposed in an area corresponding to the local area network. a unit, the wireless signal reference unit capable of performing an operation of reflecting or receiving the first wireless signal and the second wireless, and the first wireless signal transmitting unit, the second wireless signal transmitting unit, and the wireless signal reference unit are in the area The position in the field is fixed, and those skilled in the art can select the fixed positions of the three units according to the device pattern in the LAN setting area, and the first wireless receiving unit and the second wireless receiving unit are Provided on the control terminal, the positions of the two wireless receiving units can be changed as the control terminal moves.

The first location information and the second location information may be derived by means of wireless signal strength measurement. For example, when the first wireless signal transmitting unit sends the first wireless signal to the outside world, the first wireless signal receiving unit receives the first wireless signal and generates a corresponding first wireless signal receiving intensity value Q1, the wireless The signal reference unit generates a first wireless signal reference intensity value Q2 corresponding to the first wireless signal arriving thereon, and the first wireless signal transmitted by the first wireless signal transmitting unit has a signal initial intensity value Q3, the signal The received intensity value Q1, the signal reference intensity value Q2, and the signal initial intensity value Q3 are simultaneously transmitted to the control unit for the next calculation process. It is known from the common knowledge in the art that when a wireless signal is transmitted from a signal source, the wireless signal strength is attenuated with the distance it travels, and the wireless signal strength and the propagation distance are linear or regular. The non-linear relationship, the specific form of the relationship presented between the two depends on the type of the wireless signal and the propagation environment in which the wireless signal is located. The position of the first wireless signal transmitting unit and the wireless signal reference unit is fixed in a region corresponding to the local area network, that is, the relative distance DR between the first wireless signal transmitting unit and the wireless signal reference unit is also fixed. The control unit performs an equal proportional operation or a fitting of the wireless signal propagation function model by the signal receiving intensity value Q1, the signal reference intensity value Q2, the signal initial intensity value Q3, and the relative distance DR. A relative distance D1 between the first wireless signal transmitting unit and the first wireless signal receiving unit can be obtained. Similarly, the relative distance D2 between the second wireless signal transmitting unit and the first wireless signal receiving unit can also be calculated in the same manner as described above.

In addition, the first location information and the second location information may also be calculated by means of triangulation, time of flight, or the like. Moreover, the first location information and the second location information may be two-dimensional planes or three-dimensional spatial location information.

S102. Acquire, according to the first location information and the second location information, the calibration location information of the control terminal.

Specifically, after receiving the first location information and the second location information, the control unit calculates, according to the first location information and the second location information, calibration location information about the control terminal, where the calibration location information is The first position information and the second position information are obtained by performing correlation calculation conversion. Since there is a certain error in the single positioning measurement by the wireless signal, this step obtains the calibration position by performing positioning measurement on two different types of wireless signals and combining the measurement results according to the two types of wireless signals with specific operation rules. Information, which can improve the accuracy of wireless positioning measurements and improve the adaptability of the wireless positioning measurement to different applications. For different wireless positioning measurement applications and wireless positioning measurement accuracy requirements, the method for performing correlation calculation on the first position information and the second position information is various, and those skilled in the art can select according to actual needs. For example, the method for calculating the correlation operation may be, but not limited to, weighting the first position information and the second position information or calculating other weighted mean values; obtaining the calibration position information, or the first position The position information of the information and the second position information, which is the smallest or largest distance from the center point of the wireless signal source of the local area network, is used as the calibration position information.

For example, when the first wireless signal is a wifi signal and the second wireless signal is a Bluetooth signal, it is known from the common knowledge in the art that the propagation capability of the wifi signal is stronger than that of the Bluetooth signal, that is, the propagation of the wifi signal. The distance of the distance is larger than that of the Bluetooth signal. Therefore, for the distance to be measured of different length ranges, the positioning measurement accuracy of the wifi signal and the Bluetooth signal are also different, for example, the distance from the central point of the wireless signal source of the local area network is small. In the area, the accuracy of positioning measurement using Bluetooth signal is higher than that of using wifi signal for positioning measurement. Conversely, in the area with large distance from the wireless signal center point of the local area network, the accuracy of positioning measurement using wifi signal is required. Higher than the accuracy of positioning measurement using Bluetooth signal, the user can according to the current position of the control terminal Setting the state to select the first location information and the second location information to calculate the weight ratio of the calibration location information by using the weight average value, for example, when the distance between the control terminal and the central point of the local area wireless signal source is greater than or equal to 8 m The weight ratio of the first location information may be set to 80% or more, and the weight ratio of the second location information may be set to be less than 20%; when the distance between the control terminal and the central point of the local area wireless signal source is greater than 4 m And less than 8m, the weight ratio of each of the first location information and the second location information may be set to 50%; when the distance between the control terminal and the central point of the local area wireless signal source is less than 4 meters, the first The weight ratio of the position information may be set to 30% or less, and the weight ratio of the second position information may be set to 70% or more. In addition, when the first location information and the second location information are three-dimensional information, the control unit may calculate corresponding correspondences according to the calibration coordinate information on the different dimensions by calculating the calibration coordinate information on different dimensions of the location information, respectively. Calibration location information.

S103. Determine whether the calibration location information is located in a signal coverage area of the local area network. If yes, allow the control terminal to access the service terminal in the local area network. If not, the control terminal is prohibited from accessing the service terminal in the local area network.

Specifically, after the control unit calculates the calibration location information, the calibration location information is subjected to a determination process, where the determination process is used to determine whether the calibration location information is located in the local area network service area, that is, whether the signal is located in the local area network. Within the coverage area, the local area network service area or the signal coverage area should have a threshold boundary. When the calibration position information is within the range defined by the threshold boundary, the control terminal is located in the signal coverage area of the local area network. At this time, the control terminal can perform network data communication with the local area network; when the calibration position information is outside the range defined by the threshold boundary, it indicates that the control terminal is outside the signal coverage area of the local area network, and the control terminal at this time Network data communication with the local area network is not possible. Further, the signal coverage area of the local area network may further perform corresponding area division by using multiple threshold boundaries, where the setting of the multiple threshold boundaries is based on the data transmission quality between the control terminal and the local area network, when the control terminal The higher the data transmission quality with the local area network, the closer the corresponding threshold boundary is to the wireless signal source center point of the local area network. Otherwise, the corresponding threshold boundary is farther away from the wireless signal source center point of the local area network.

Then, the control unit sets a connection state between the control terminal and the service terminal in the local area network according to the relative positional relationship between the calibration position information and the coverage area of the local area network signal. Specifically, when the calibration location information is located in a signal coverage area of the local area network, the control unit indicates Establishing a wireless connection channel between the service terminal in the local area network and the control terminal, and the control terminal obtains the access right to the service terminal; when the calibration location information is outside the signal coverage area of the local area network, the control unit indicates The service terminal in the local area network turns off its wireless connection function, and at this time, the control terminal cannot obtain the access right to the service terminal.

As can be seen from the foregoing embodiment, the access control method separately performs tracking and tracking on the control terminal by using the first wireless signal and the second wireless signal to obtain corresponding first location information and second location information, and then based on the first The location information and the second location information acquire the calibration location information of the control terminal, and the manner of acquiring the location information by using the first wireless signal and the second wireless signal can avoid positioning with a single wireless signal and causing a large error in positioning data. The method is further capable of setting a connection state between the control terminal and the service terminal in the local area network according to the relative positional relationship between the calibration location information and the coverage area of the local area network signal, so as to ensure that only the preset is The control terminals in the area can obtain the corresponding access rights, thereby improving the data security of the service terminal.

FIG. 2 is a schematic structural diagram of an access control system according to an embodiment of the present invention. In the embodiment of the present invention, the access control system can obtain location information about a control terminal by using a wireless signal location measurement method, and The position information is subjected to corresponding operation transformation to obtain calibration position information, and finally, based on the relative position relationship judgment result between the calibration position information and the coverage of the local area network signal, the control terminal is controlled to have access authority to the service terminal.

The access control system includes a control unit, first and second wireless signal transmitting units, first and second wireless signal receiving units, and a wireless signal reference unit. The control unit is configured to control an operating state of the first and second wireless signal transmitting units, the first and second wireless signal receiving units, and the wireless signal reference unit, and perform corresponding arithmetic processing.

The first and second wireless signal transmitting units are configured to respectively transmit different types of first wireless signals and second wireless signals, and feed back to the control unit the signal initial intensity values Q3 of the first and second wireless signals.

The first and second wireless signal receiving units are configured to respectively receive the first wireless signal and the second wireless signal, and feed back to the control unit a signal receiving intensity value Q1 of the first and second wireless signals.

The wireless signal reference unit is configured to be capable of reflecting or receiving the first wireless signal and the second wireless, and generating a corresponding signal reference intensity value Q2.

The control unit calculates the first position information and the second position information based on the signal received intensity value Q1, the signal reference intensity value Q2, and the signal initial intensity value Q3, and derives the calibration position information.

For the meaning and examples of the terms involved in the embodiment, reference may be made to the corresponding embodiment of FIG. 1. I will not repeat them here.

As can be seen from the above embodiment, the access control system separately performs identification tracking on the control terminal by using the first wireless signal and the second wireless signal to obtain corresponding first location information and second location information, and then based on the first The location information and the second location information acquire the calibration location information of the control terminal, and the manner of acquiring the location information by using the first wireless signal and the second wireless signal can avoid positioning with a single wireless signal and causing a large error in positioning data. In addition, the system is further configured to set a connection state between the control terminal and the service terminal in the local area network according to the relative positional relationship between the calibration location information and the coverage area of the local area network signal, so as to ensure that only the preset The control terminals in the area can obtain the corresponding access rights, thereby improving the data security of the service terminal.

One of ordinary skill in the art can understand that all or part of the process of implementing the foregoing embodiments can be completed by a computer program to instruct related hardware, and the program can be stored in a computer readable storage medium. When executed, the flow of an embodiment of the methods as described above may be included. The storage medium may be a magnetic disk, an optical disk, a read-only memory (ROM), or a random access memory (RAM).

The above disclosure is only a preferred embodiment of the present invention, and of course, the scope of the present invention is not limited thereto, and those skilled in the art can understand all or part of the process of implementing the above embodiments, and according to the present invention. The equivalent changes required are still within the scope of the invention.

Claims

An access control method, characterized in that the method comprises:

S101: Perform tracking and tracking on the control terminal by using the first wireless signal and the second wireless signal, respectively, to obtain corresponding first location information and second location information;

S102. Acquire, according to the first location information and the second location information, information about calibration location of the control terminal.

S103. Determine whether the calibration location information is located in a signal coverage area of the local area network. If yes, allow the control terminal to access the service terminal in the local area network. If not, prohibit the control terminal from accessing the service in the local area network. terminal.
The method of claim 1 wherein

In S101, the first wireless signal and the second wireless signal are a wifi signal, an infrared signal, a microwave signal, a GPS signal, or an LTE signal;

And, the first wireless signal and the second wireless signal are different types of wireless signals.
The method of claim 1 wherein

In S101, the first location information and the second location information are obtained by a wireless signal strength measurement method or a wireless signal triangulation method.
The method of claim 1 wherein

In S102, the calibration position information is obtained by performing weighting calculation on the first position information and the second position information by different weight ratios;

The weight ratio setting of each of the first location information and the second location information depends on the location of the control terminal in the local area network.
The method of claim 1 wherein

In S103, determining whether the calibration location information is located in a signal coverage area of the local area network is specifically determining one or more threshold boundaries of the calibration location information and the signal coverage area. Relative positional relationship between them.
An access control system, characterized in that the system comprises a control unit, a first wireless signal transmitting unit, a second wireless signal transmitting unit, a first wireless signal receiving unit and a second wireless signal receiving unit;

The first wireless signal transmitting unit and the second wireless signal transmitting unit are configured to respectively transmit a first wireless signal and a second wireless signal to perform identification tracking on the control terminal;

The first wireless signal receiving unit and the second wireless signal receiving unit are configured to receive the first wireless signal and the second wireless signal, respectively;

The control unit acquires corresponding first location information and second location information based on the first wireless signal and the second wireless signal, and calculates calibration location information of the control terminal;

The control unit further determines whether the calibration location information is located in a signal coverage area of the local area network, and if so, allows the control terminal to access a service terminal in the local area network, and if not, prohibits the control terminal from accessing the local area network Service terminal in.
The system of claim 6 wherein:

The first wireless signal and the second wireless signal are a wifi signal, an infrared signal, a microwave signal, a GPS signal, or an LTE signal;

And, the first wireless signal and the second wireless signal are different types of wireless signals.
The system of claim 6 wherein:

The system also includes a wireless signal reference unit capable of performing an operation of reflecting or receiving the first wireless signal and the second wireless;

The control unit obtains the first location information and the second location information based on a wireless signal strength measurement method or a wireless signal triangulation method.
The system of claim 6 wherein:

The control unit further obtains the calibration position information by performing weighting calculation of the first position information and the second position information by different weight ratios.
The system of claim 6 wherein:

The control unit determines whether the calibration location information is located in a signal coverage area of the local area network by determining a relative positional relationship between the calibration location information and one or more threshold boundaries of the signal coverage area.