CN104966343B - Access control method Internet-based - Google Patents
Access control method Internet-based Download PDFInfo
- Publication number
- CN104966343B CN104966343B CN201510413724.3A CN201510413724A CN104966343B CN 104966343 B CN104966343 B CN 104966343B CN 201510413724 A CN201510413724 A CN 201510413724A CN 104966343 B CN104966343 B CN 104966343B
- Authority
- CN
- China
- Prior art keywords
- terminal
- access controller
- information
- server
- sent
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
- 238000000034 method Methods 0.000 title claims abstract description 59
- 238000004891 communication Methods 0.000 claims abstract description 45
- 230000005764 inhibitory process Effects 0.000 claims abstract description 43
- 238000010200 validation analysis Methods 0.000 claims description 17
- 239000000284 extract Substances 0.000 claims description 3
- 238000012795 verification Methods 0.000 description 12
- 238000005516 engineering process Methods 0.000 description 10
- 238000010295 mobile communication Methods 0.000 description 5
- 230000008569 process Effects 0.000 description 5
- 230000006870 function Effects 0.000 description 4
- 230000005540 biological transmission Effects 0.000 description 3
- 238000010168 coupling process Methods 0.000 description 3
- 238000005859 coupling reaction Methods 0.000 description 3
- 230000009977 dual effect Effects 0.000 description 3
- 238000009434 installation Methods 0.000 description 3
- 238000012545 processing Methods 0.000 description 3
- 230000008901 benefit Effects 0.000 description 2
- 230000008878 coupling Effects 0.000 description 2
- 238000011161 development Methods 0.000 description 2
- 230000000694 effects Effects 0.000 description 2
- 230000009471 action Effects 0.000 description 1
- 238000004364 calculation method Methods 0.000 description 1
- 230000008859 change Effects 0.000 description 1
- 238000004590 computer program Methods 0.000 description 1
- 238000010586 diagram Methods 0.000 description 1
- 230000002452 interceptive effect Effects 0.000 description 1
- 210000000056 organ Anatomy 0.000 description 1
- 238000012797 qualification Methods 0.000 description 1
- 238000012360 testing method Methods 0.000 description 1
Landscapes
- Telephonic Communication Services (AREA)
Abstract
The present invention provides a kind of access control methods Internet-based, using terminal, server and access controller, terminal and access controller are configured by server, termination box access controller is set to be directly realized by data communication, terminal still can control access controller by server simultaneously, with Internet door control system in the prior art in the case where communication terminal is without network, it cannot achieve that the control flexibility to gate inhibition's unit is poor and real-time is poor compares, it is in the case where distance is relatively close, terminal-pair access controller can be made to be attached, directly controlled by terminal-pair access controller, real-time is preferable, save the flow of user, reduce the cost of user；Terminal still can control access controller by way of server apart from farther out, and user can select different control modes according to the difference of distance, and flexibility is preferable, easy to use and better user experience.
Description
Technical field
The present invention relates to access control fields, in particular to access control method Internet-based.
Background technology
With the development of electronic information technology, access control system has also obtained great development, and access control system is operated due to it
The advantage convenient and at low cost waited, increasingly instead of traditional mechanical key and mechanical lock.
Traditional access control system is typically to be made of identity recognizer, access controller, lockaid gun and management software；User
During use, show identity (such as IC/ID cards, fingerprint, the face of oneself to access controller using identity recognizer
Portion's information etc.), access controller combination management software confirms the identity shown and permission, is confirming that result is qualification
When, access controller combination management software control lockaid gun opens corresponding door-control lock；
But existing access control mode is single, when user loses access card or when identity recognizer is invalid, then
Door lock can not be opened.
To solve the above-mentioned problems, the relevant technologies additionally provide a kind of Internet door control system, including central server list
Member, gate inhibition's unit and communication terminal；Central server unit is connected with gate inhibition's unit by network, central server unit with it is logical
Believe that terminal through internet is connected；User can use shape of the communication terminal by central server unit access control unit
State, to the state of access control.
Inventor has found that the Internet door control system provided in the related technology is in feelings of the communication terminal without network under study for action
Under condition, the control to gate inhibition's unit is cannot achieve, flexibility is poor；And it needs to pass through control of network flow quantity gate inhibition's unit in real time
State, real-time is poor and cost is higher.
Invention content
The purpose of the present invention is to provide access control methods Internet-based, to realize closely lower terminal-pair gate inhibition
Controller directly controls, and real-time is preferable, and saves the flow of user；And in the case that at a distance, terminal can also
Access controller is controlled by server, user can select different control modes according to the difference of distance, flexibly
Preferable, the easy to use and better user experience of property.
In a first aspect, an embodiment of the present invention provides a kind of access control methods Internet-based, including：
What reception terminal was sent is used to ask and the first solicited message of access controller direct data communication；First request
Information carries authentication information；
The second configuration information of the first configuration information and access controller of terminal is generated according to the first solicited message；
First configuration information is sent to terminal and the second configuration information is sent to access controller, so that according to
Terminal and access controller after the completion of first configuration information and the configuration of the second configuration information can communicate directly.
With reference to first aspect, an embodiment of the present invention provides the first possible embodiments of first aspect, wherein root
The second configuration information of the first configuration information and access controller of terminal is generated according to the first solicited message, including：
Extract the terminal serial number and access controller sequence number in authentication information；
The first configuration information is generated according to terminal serial number, and generates second according to access controller sequence number and matches confidence
Breath.
The possible embodiment of with reference to first aspect the first, an embodiment of the present invention provides second of first aspect
Possible embodiment, wherein the method further includes：
According to user information in terminal serial number, authentication information and access controller sequence number, testing for unlocking certificate is generated
Demonstrate,prove standard information；
Validation criteria information is sent to access controller, so that access controller sends out terminal according to validation criteria information
The unlocking certificate sent is verified.
Second of possible embodiment with reference to first aspect, an embodiment of the present invention provides the third of first aspect
Possible embodiment, wherein the method further includes：
Receive the second solicited message for asking unlocking certificate that terminal is sent；
According to the second solicited message, unlocking certificate is inquired in the preset database；
The unlocking certificate of inquiry is sent to terminal, so that terminal is directly unlocked according to unlocking certificate.
Second aspect, the embodiment of the present invention additionally provide a kind of access control method Internet-based, including：
Sent to server for the first solicited message with access controller direct data communication, so as to server according to
First solicited message generates the first configuration information；First solicited message carries authentication information；
Information configuration is carried out according to the first configuration information of server feedback；Information configuration includes at least matching for communication protocol
It sets；
Terminal by information configuration obtains unlocking certificate；Unlocking certificate includes at least one kind in following information：It unlocks
Solicited message and unlocking verification information；
Unlocking certificate is sent to the access controller by configuration, so that access controller is according to unlocking certificate access control
State；
Receive the feedback information for being used to indicate gate inhibition's state that access controller is sent.
In conjunction with second aspect, an embodiment of the present invention provides the first possible embodiments of second aspect, wherein warp
Cross information configuration terminal obtain unlocking certificate include：
The unlocking instruction that terminal by information configuration is sent according to user generates unlocking certificate；
Alternatively, the terminal to server by information configuration sends the second solicited message for asking unlocking certificate, with
And receive the unlocking certificate that server is sent.
In conjunction with the first possible embodiment of second aspect, an embodiment of the present invention provides second of second aspect
Possible embodiment, wherein the method further includes：
When more than pre-determined distance with access controller, sends the third request for ask to unlock to server and believe
Breath, in order to which server obtains unlocking certificate and is sent to access controller and receives the result of access controller feedback；
Receive the feedback information for instruction gate inhibition's state that server is sent.
The third aspect, the embodiment of the present invention additionally provide a kind of access control method Internet-based, including：
Receive the second configuration information that server is sent；
Information configuration is carried out according to the second configuration information, is directly communicated with the data of terminal to realize；Information configuration is extremely
Include the configuration of communication protocol less；
According to the unlocking certificate sent with the information receiving terminal postponed/server, unlocking certificate includes at least following letter
One kind in breath：The solicited message of unlocking and the verification information of unlocking；
According to unlocking certificate, the state of access control.
In conjunction with the third aspect, an embodiment of the present invention provides the first possible embodiments of the third aspect, wherein root
According to unlocking certificate, the state of access control includes：
Receive the validation criteria information that server is sent；
It is verified according to the unlocking verification information in validation criteria information dual lock certificate；
When unlocking verification information is verified, access control is opened.
In conjunction with the first possible embodiment of the third aspect, an embodiment of the present invention provides second of the third aspect
Possible embodiment, wherein the method further includes：
Real-time broadcast wireless signal；It is real according to the signal strength of wireless network when detecting terminal incoming wireless signal
When positioning terminal position；According to the position of terminal gate inhibition's sequence number to be controlled is sent to terminal；
Alternatively, real-time broadcast wireless signal；When detecting terminal incoming wireless signal, what real-time reception terminal was sent works as
Prelocalization position；According to current position location gate inhibition's sequence number to be controlled is sent to terminal；
Method further includes：
Record current status information in real time, and by current status information in real time/be periodically reported to server；
The standard information of storage and the status information of storage are deleted in timing.
The access control method of internet provided in an embodiment of the present invention is led to using terminal, server and access controller
It crosses server to configure terminal and access controller, so that termination box access controller is directly realized by data communication, together
When terminal still access controller can be controlled by server, with Internet door control system in the prior art logical
In the case of believing terminal without network, the control to gate inhibition's unit is cannot achieve, flexibility is poor and needs to pass through network flow in real time
The state of access control unit is measured, real-time is poor and cost is higher compares, and in the case where distance is relatively close, can make terminal
Access controller is attached, is directly controlled by terminal-pair access controller, real-time is preferable, saves user's
Flow reduces the cost of user；Terminal still can be controlled gate inhibition by way of server apart from farther out
Device processed is controlled, and user can select different control modes according to the difference of distance, and flexibility is preferable, easy to use and use
Family experience is preferable.
To enable the above objects, features and advantages of the present invention to be clearer and more comprehensible, preferred embodiment cited below particularly, and coordinate
Appended attached drawing, is described in detail below.
Description of the drawings
In order to illustrate the technical solution of the embodiments of the present invention more clearly, below will be to needed in the embodiment attached
Figure is briefly described, it should be understood that the following drawings illustrates only certain embodiments of the present invention, therefore is not construed as pair
The restriction of range for those of ordinary skill in the art without creative efforts, can also be according to this
A little attached drawings obtain other relevant attached drawings.
Fig. 1 shows the structural schematic diagram for the access control system Internet-based that the embodiment of the present invention is provided；
Fig. 2 shows a kind of flow charts for access control method Internet-based that the embodiment of the present invention is provided；
Fig. 3 shows the flow chart for the another kind access control method Internet-based that the embodiment of the present invention is provided；
Fig. 4 shows the flow chart for the another kind access control method Internet-based that the embodiment of the present invention is provided；
Fig. 5 shows the flow chart for the another kind access control method Internet-based that the embodiment of the present invention is provided；
Fig. 6 shows the flow chart for the another kind access control method Internet-based that the embodiment of the present invention is provided；
Fig. 7 shows the flow chart for the another kind access control method Internet-based that the embodiment of the present invention is provided；
Fig. 8 shows the flow chart for the another kind access control method Internet-based that the embodiment of the present invention is provided；
Fig. 9 shows the flow chart for the another kind access control method Internet-based that the embodiment of the present invention is provided.
Main element symbol description：
11, terminal；12, server；13, access controller.
Specific implementation mode
Below in conjunction with attached drawing in the embodiment of the present invention, technical solution in the embodiment of the present invention carries out clear, complete
Ground describes, it is clear that described embodiments are only a part of the embodiments of the present invention, instead of all the embodiments.Usually exist
The component of the embodiment of the present invention described and illustrated in attached drawing can be arranged and be designed with a variety of different configurations herein.Cause
This, the detailed description of the embodiment of the present invention to providing in the accompanying drawings is not intended to limit claimed invention below
Range, but it is merely representative of the selected embodiment of the present invention.Based on the embodiment of the present invention, those skilled in the art are not doing
The every other embodiment obtained under the premise of going out creative work, shall fall within the protection scope of the present invention.
For the ease of the understanding to the present embodiment, first to the present embodiment provided based on internet access control system
It is briefly described.As shown in Figure 1, it is according to the present invention based on the access control system of internet include：At least one terminal
11 (3 are only shown in Fig. 1), server 12 and at least one access controller 13 (3 are only shown in Fig. 1), terminal 11 and door
Prohibit controller 13 with 12 network connection of server, is used to realize that data communicate with server 12.Wherein, terminal 11 of the invention
In APP (Application, application program) is installed in advance, the APP for realizing various data transmission, reception and processing
Etc. functions.
In addition, in the present embodiment, server 12 can also configure terminal 11 and access controller 13, make terminal 11
It can directly be communicated with access controller 13；In specific implementation process, for a terminal 11, server 12 only needs to carry out
The subsequent processes for configuring for the first time, and matching the terminal 11 postponed can be realized direct with access controller 12 automatically
Communication.
In embodiments of the present invention, above-mentioned terminal 11 can be such as smart mobile phone of the electric terminal with communication function,
Tablet computer or other communications electronics products.Also, it includes WIFI (WIreless- that these electric terminals, which need to be arranged,
Fidelity, Wireless Fidelity) communication chip including chip or Bluetooth chip, and the network mould of wireless communication may be implemented
Block, such as 2G (2-Generation wireless telephone technology, second generation mobile communication technical specification), 3G
(3rd-Generation, 3rd generation mobile communication technology), 4G (the 4th Generation mobile
Communication technology, fourth generation mobile communication technology) and 5G (5-Generat ion, the 5th third-generation mobile communication
Technology) etc..
Communication module (such as 2G, 3G, 4G and 5G module, WiFi moulds are integrated in access controller in the embodiment of the present invention
Block and/or bluetooth module), it can automatically be connect with terminal automatically in pre-determined distance, realize the direct communication with terminal；This
Invent provide access controller preferably in the case of short distance with terminal direct communication.
Access controller in the present invention can be integrated in gate inhibition's unit, can also be arranged closer apart from gate inhibition's unit
Position, by the cooperation of access controller and gate inhibition's unit, access control unit it is open-minded.
The specific implementation of the present invention is as follows：
With reference to figure 2, the present invention provides a kind of access control method Internet-based, the method is related to server
Side, the method includes：
What 101, reception terminal was sent is used to ask and the first solicited message of access controller direct data communication；First
Solicited message carries authentication information.
In the present embodiment, authentication information preferably includes terminal serial number, access controller sequence number to be controlled and user
Information (such as user name, name, cell-phone number etc.).
Specifically, user is when using the method for the present invention, it is necessary first to download this in preset network address by terminal
The APP (including Android version and ios release) provided is provided, after then installation is complete in APP, is carried out in the register interface of APP
Information registering, therefore server side is previously stored with the information of user's registration.
When terminal needs to directly control access controller, sent to server direct with access controller for asking
First solicited message of data communication at this point, server then receives the first solicited message of terminal transmission, and extracts the first request
Then authentication information in information is verified the authentication information according to pre-stored log-on message；When being verified,
The configuration for carrying out subsequent permission terminal and access controller direct communication is handled；Verification not by when, then feed back to terminal
Unsanctioned message is verified, and without any processing.
Wherein, it during user carries out log-on message by terminal to server, is sent and is noted by terminal to server
Volume information, server then receive and preserve the log-on message；At this point, intermediate server is then according to preset log-on message to service
The log-on message of device storage is verified, and when being verified, is allowed user to complete registration and (is generated the request succeeded in registration to believe
Cease to server, so that server feedback is to terminal), otherwise (solicited message for generating registration failure is given for user's registration failure
Server, so that server feedback is to terminal).
Wherein, above-mentioned intermediate server is the corresponding intermediate servers of third parties such as property, needs to send user and note
Volume information (specifying information of cell, unit building such as) is verified, it is ensured that the information security of user.
102, the second configuration information of the first configuration information and access controller of terminal is generated according to the first solicited message.
Specifically, the first solicited message includes authentication information, authentication information is preferably terminal serial number, gate inhibition to be controlled
Controller sequence number and user information (such as user name, name, cell-phone number etc.).
Server then generates the first configuration information of terminal according to terminal serial number, which includes at least logical
Believe the configuration of agreement；Server generates the second configuration information of terminal also according to access controller sequence number, likewise, second matches
Configuration of the confidence breath including at least communication protocol.First configuration information and the second configuration information match, that is, be defaulted as through
It crosses the first configuration information and the second configuration information matches the setting postponed and can be directly connected to communicate with data.
103, the first configuration information is sent to terminal and the second configuration information is sent to access controller, so that
Terminal and access controller after the completion of being configured according to the first configuration information and the second configuration information can communicate directly.
Specifically, match the terminal that postpones according to the first configuration information, it is defaulted as postponing with according to the second configuration information being matched
Access controller connects automatically, as the bluetooth and WIFI module of terminal can connect automatically access controller by bluetooth module or
The signal of person's WIFI module broadcast.
The access control method of internet provided in an embodiment of the present invention is led to using terminal, server and access controller
It crosses server to configure terminal and access controller, so that termination box access controller is directly realized by data communication, together
When terminal still access controller can be controlled by server, with Internet door control system in the prior art logical
In the case of believing terminal without network, the control to gate inhibition's unit is cannot achieve, flexibility is poor and needs to pass through network flow in real time
The state of access control unit is measured, real-time is poor and cost is higher compares, and in the case where distance is relatively close, can make terminal
Access controller is attached, is directly controlled by terminal-pair access controller, real-time is preferable, saves user's
Flow reduces the cost of user；Terminal still can be controlled gate inhibition by way of server apart from farther out
Device processed is controlled, and user can select different control modes according to the difference of distance, and flexibility is preferable, easy to use and use
Family experience is preferable.
With reference to figure 3, in the present embodiment, above-mentioned steps 102 are realized especially by such as under type, including：
201, the terminal serial number and access controller sequence number in authentication information are extracted.
202, the first configuration information is generated according to terminal serial number, and generates second according to access controller sequence number and matches
Confidence ceases.
Specifically, the first configuration information is to carry out communication protocol configuration, the second configuration to the corresponding terminal of terminal serial number
Information is to be configured to the communication protocol of the corresponding access controller of access controller sequence number；Wherein, a terminal is only right
Answer a sequence number, such as the corresponding handset serial of mobile phone；One access controller sequence number equally only corresponds to a gate inhibition
Controller.In the present embodiment, server can carry out multiple terminals and multiple access controllers to configure identical configuration, service
Device can also carry out configuring different configurations to multiple terminals and multiple access controllers.
Further, with reference to figure 4, it is related to server side, access control method Internet-based further includes：
301, according to user information in terminal serial number, authentication information and access controller sequence number, unlocking certificate is generated
Validation criteria information.
Specifically, user information and access controller sequence in terminal serial number, authentication information is generated in advance in server section
Incidence relation between row number, generates the validation criteria information of access controller side according to incidence relation, and access controller can be with
The unlocking instruction (being certificate in the present embodiment) sent to terminal according to validation criteria information is verified.
302, validation criteria information is sent to access controller, so as to access controller according to validation criteria information to end
The unlocking certificate that end is sent is verified.
Specifically, access controller is stored after receiving the validation criteria information, being called when to need should
Validation criteria information is simultaneously verified according to the validation criteria information dual lock certificate.
In the present embodiment, terminal part obtains unlocking certificate, and there are two types of acquisition modes, and one of which is directly according to user
Triggering command generate, be for second to send request to server to obtain；Specifically, terminal is to service request unlocking certificate
Method is specific as follows, and with reference to figure 5, the method is related to server side：
401, the second solicited message for asking unlocking certificate that terminal is sent is received.
402, according to the second solicited message, unlocking certificate is inquired in the preset database.
403, the unlocking certificate of inquiry is sent to terminal, so that terminal is directly unlocked according to unlocking certificate.
The access control method of internet provided in an embodiment of the present invention is led to using terminal, server and access controller
It crosses server to configure terminal and access controller, so that termination box access controller is directly realized by data communication, together
When terminal still access controller can be controlled by server, with Internet door control system in the prior art logical
In the case of believing terminal without network, the control to gate inhibition's unit is cannot achieve, flexibility is poor and needs to pass through network flow in real time
The state of access control unit is measured, real-time is poor and cost is higher compares, and in the case where distance is relatively close, can make terminal
Access controller is attached, is directly controlled by terminal-pair access controller, real-time is preferable, saves user's
Flow reduces the cost of user；Terminal still can be controlled gate inhibition by way of server apart from farther out
Device processed is controlled, and user can select different control modes according to the difference of distance, and flexibility is preferable, easy to use and use
Family experience is preferable.
With reference to figure 6, the present invention also provides a kind of access control method Internet-based, the method is related to terminal
Side, the method specifically include：
501, it is sent to server for the first solicited message with access controller direct data communication, so as to server
The first configuration information is generated according to the first solicited message；First solicited message carries authentication information.
Specifically, in the case of short distance, terminal can directly control access controller, therefore firstly the need of server to end
End and corresponding access controller are configured；
In the present embodiment, authentication information preferably includes terminal serial number, access controller sequence number to be controlled and user
Information (such as user name, name, cell-phone number etc.).
502, information configuration is carried out according to the first configuration information of server feedback；Information configuration includes at least communication protocol
Configuration；
Specifically, may include protocol package in the first configuration information, terminal can download the protocol package and install the agreement
Packet is completed to configure the communication protocol of itself at this time.
Installing the terminal of protocol package in the first configuration information can control with the gate inhibition of protocol package in the second configuration information of installation
Device direct communication processed.
Preferably, server only configures terminal for the first time, after the completion of configuring for the first time, by the terminal of configuration, then
In subsequent work can directly with the access controller direct communication postponed, without being configured again.
503, unlocking certificate is obtained by the terminal of information configuration；Unlocking certificate includes at least one kind in following information：
The solicited message of unlocking and the verification information of unlocking；
In the present embodiment, the terminal by configuration obtains there are two types of the modes of unlocking certificate, one is：First configuration information
In include unlocking certificate corresponding document, terminal after receiving the unlocking instruction of user, directly according to the corresponding document give birth to
At unlocking certificate；Another way be do not include the corresponding document of unlocking certificate in the first configuration information, at this point, terminal need
It to be made requests on to server, to obtain unlocking certificate.
Wherein, unlocking certificate can be include unlocking solicited message and unlocking verification information certificate, can also
For individual password；If the former, then terminal is sent to access controller；If the latter, then user can be directly in door
Prohibit and inputs password on controller.
504, unlocking certificate is sent to the access controller by configuration, so that access controller is controlled according to unlocking certificate
The state of gate inhibition；
When preferably, within the scope of the pre-determined distance with access controller, terminal is directly communicated with access controller, i.e., directly
It connects to access controller and sends unlocking certificate, so that access controller is according to the state of unlocking certificate access control.
Pre-determined distance in the present embodiment can realize that effect is configured according to cost, such as 2 kilometers, 5 kilometers of surrounding
Deng.
505, the feedback information for being used to indicate gate inhibition's state that access controller is sent is received.
It is successfully opened specifically, feedback information includes gate inhibition, gate inhibition opens failure.
The access control method of internet provided in an embodiment of the present invention is led to using terminal, server and access controller
It crosses server to configure terminal and access controller, so that termination box access controller is directly realized by data communication, together
When terminal still access controller can be controlled by server, with Internet door control system in the prior art logical
In the case of believing terminal without network, the control to gate inhibition's unit is cannot achieve, flexibility is poor and needs to pass through network flow in real time
The state of access control unit is measured, real-time is poor and cost is higher compares, and in the case where distance is relatively close, can make terminal
Access controller is attached, is directly controlled by terminal-pair access controller, real-time is preferable, saves user's
Flow reduces the cost of user；Terminal still can be controlled gate inhibition by way of server apart from farther out
Device processed is controlled, and user can select different control modes according to the difference of distance, and flexibility is preferable, easy to use and use
Family experience is preferable.
In the present embodiment, in above-mentioned steps 505, it includes two kinds that the terminal by information configuration, which obtains unlocking certificate, wherein
One is the unlocking instructions that the terminal Jing Guo information configuration is sent according to user, generate unlocking certificate；Second is by information
The terminal to server of configuration sends the second solicited message for asking unlocking certificate, and receives the unlocking that server is sent
Certificate.
In the present embodiment, access controller increases the verification process to the unlocking certificate when receiving unlocking certificate, uses
To ensure safety, specific implementation is as follows, and with reference to figure 7, the method is related to end side, and the method further includes：
601, it when more than pre-determined distance with access controller, sends the third for ask to unlock to server and asks
Information, in order to which server obtains unlocking certificate and is sent to access controller and receives the result of access controller feedback；
602, the feedback information for instruction gate inhibition's state that server is sent is received.
In the present embodiment, apart from farther out, the side of directly controlling of terminal-pair access controller may be not suitable for
Method, therefore terminal can also control access controller by server.
In addition, the APP in the terminal of the present invention, further includes some recreations, registration user is directly interactive and uses
The integral activity etc. of family individual, has provided a variety of abundant lives to the user.
The present invention also provides a kind of access control methods Internet-based, with reference to figure 8, including：
701, the second configuration information that server is sent is received.
702, information configuration is carried out according to the second configuration information, is directly communicated with the data of terminal to realize；Information is matched
Set the configuration including at least communication protocol.
Specifically, may include protocol package in the second configuration information, access controller can download the protocol package and install
The protocol package is completed to configure the communication protocol of itself at this time.
The access controller for installing protocol package in the second configuration information can be with protocol package in the first configuration information of installation
Terminal direct communication.
Preferably, server only configures access controller for the first time, after the completion of configuring for the first time, by the door of configuration
Prohibit controller, then in subsequent work can directly with the terminal organ direct communication postponed, without being configured again.
703, according to postpone information receiving terminal/server send unlocking certificate, unlocking certificate include at least with
One kind in lower information：The solicited message of unlocking and the verification information of unlocking.
In pre-determined distance (in other words in the case of short distance), opening for terminal transmission is received with the access controller postponed
Lock certificate；Outside pre-determined distance (in other words at a distance), receive what server was sent with the access controller postponed
Unlocking certificate.
704, according to unlocking certificate, the state of access control.
In the present embodiment, gate inhibition's opening can be directly controlled according to unlocking certificate；Or gate inhibition is verified first,
When being verified, access control is opened.
The access control method of internet provided in an embodiment of the present invention is led to using terminal, server and access controller
It crosses server to configure terminal and access controller, so that termination box access controller is directly realized by data communication, together
When terminal still access controller can be controlled by server, with Internet door control system in the prior art logical
In the case of believing terminal without network, the control to gate inhibition's unit is cannot achieve, flexibility is poor and needs to pass through network flow in real time
The state of access control unit is measured, real-time is poor and cost is higher compares, and in the case where distance is relatively close, can make terminal
Access controller is attached, is directly controlled by terminal-pair access controller, real-time is preferable, saves user's
Flow reduces the cost of user；Terminal still can be controlled gate inhibition by way of server apart from farther out
Device processed is controlled, and user can select different control modes according to the difference of distance, and flexibility is preferable, easy to use and use
Family experience is preferable.
With reference to figure 9, it is preferred that access controller first verifies gate inhibition, and when being verified, access control is beaten
It opens；The specific implementation of the step 704 of above-mentioned verification is as follows：
801, the validation criteria information that server is sent is received.
802, it is verified according to the unlocking verification information in validation criteria information dual lock certificate.
803, when unlocking verification information is verified, access control is opened.
In the present embodiment, access controller real-time broadcast wireless signal；When detecting terminal incoming wireless signal, according to
The position of the real-time positioning terminal of signal strength of wireless network；According to the position of terminal gate inhibition's sequence to be controlled is sent to terminal
Number；
Alternatively, real-time broadcast wireless signal；When detecting terminal incoming wireless signal, what real-time reception terminal was sent works as
Prelocalization position；According to current position location gate inhibition's sequence number to be controlled is sent to terminal；
Specifically, access controller can be according to the strong of the signal (intensity of such as Bluetooth signal or WIFI signal) sent out
The position of real-time positioning terminal is spent, or receives the location information for the terminal that terminal locating module itself is sent, and according to positioning
The sequence number of acquisition of information gate inhibition, and real time push is to user, so that user directly controls the gate inhibition.
It should be noted that according to the position of signal strength positioning terminal, if the signal strength of different location is the same,
Corresponding multiple gate inhibitions are illustrated in terminal, user oneself is made to select.
In addition, access controller is additionally operable to record current status information in real time, and current status information is real-time/fixed
When be reported to server；
Since the limited storage space of access controller, such as access controller also need to the standard information that storage is deleted in timing
And the status information of storage, to clear up storage information in real time.
With reference to terminal, server and access controller are to the access control that the present invention is the internet that embodiment provides
Method illustrates；
Server can in advance configure terminal and access controller, and terminal and access controller is allow directly to lead to
Letter；
Data communication can be achieved in server and terminal and server and access controller.
In the case where distance is relatively close, (such as 1 kilometer, 2 kilometers, 5 kilometers etc.) user can directly pass through terminal control door
Prohibit controller to unlock；
Either (such as larger than 5 kilometers or 10 kilometers kilometers etc.) user control terminal passes through apart from farther out
Server opens the unlocking of access control controller.
In addition, when having visitor's arrival, user can be directly controlled access controller by terminal and be opened the door (including card
Letter ceases and password two ways)；Alternatively, user's using terminal is opened the door (including certificate by server controls access controller
Information and password two ways)；
Alternatively, user can send the cryptogram on the mobile terminal of visitor, visitor is self by the password control received
Access controller processed opens the door.
The access control method of internet provided in an embodiment of the present invention is led to using terminal, server and access controller
It crosses server to configure terminal and access controller, so that termination box access controller is directly realized by data communication, together
When terminal still access controller can be controlled by server, with Internet door control system in the prior art logical
In the case of believing terminal without network, the control to gate inhibition's unit is cannot achieve, flexibility is poor and needs to pass through network flow in real time
The state of access control unit is measured, real-time is poor and cost is higher compares, and in the case where distance is relatively close, can make terminal
Access controller is attached, is directly controlled by terminal-pair access controller, real-time is preferable, saves user's
Flow reduces the cost of user；Terminal still can be controlled gate inhibition by way of server apart from farther out
Device processed is controlled, and user can select different control modes according to the difference of distance, and flexibility is preferable, easy to use and use
Family experience is preferable.
The computer program product for the progress access control method Internet-based that the embodiment of the present invention is provided, including
The computer readable storage medium of program code is stored, the instruction that said program code includes can be used for executing previous methods real
The method described in example is applied, specific implementation can be found in embodiment of the method, and details are not described herein.
It is apparent to those skilled in the art that for convenience and simplicity of description, the system of foregoing description,
The specific work process of device and unit, can refer to corresponding processes in the foregoing method embodiment, and details are not described herein.
In several embodiments provided herein, it should be understood that disclosed systems, devices and methods, it can be with
It realizes by another way.The apparatus embodiments described above are merely exemplary, for example, the division of the unit,
Only a kind of division of logic function, formula that in actual implementation, there may be another division manner, in another example, multiple units or component can
To combine or be desirably integrated into another system, or some features can be ignored or not executed.Another point, it is shown or beg for
The mutual coupling, direct-coupling or communication connection of opinion can be by some communication interfaces, device or unit it is indirect
Coupling or communication connection can be electrical, machinery or other forms.
The unit illustrated as separating component may or may not be physically separated, aobvious as unit
The component shown may or may not be physical unit, you can be located at a place, or may be distributed over multiple
In network element.Some or all of unit therein can be selected according to the actual needs to realize the mesh of this embodiment scheme
's.
In addition, each functional unit in each embodiment of the present invention can be integrated in a processing unit, it can also
It is that each unit physically exists alone, it can also be during two or more units be integrated in one unit.
It, can be with if the function is realized in the form of SFU software functional unit and when sold or used as an independent product
It is stored in a computer read/write memory medium.Based on this understanding, technical scheme of the present invention is substantially in other words
The part of the part that contributes to existing technology or the technical solution can be expressed in the form of software products, the meter
Calculation machine software product is stored in a storage medium, including some instructions are used so that a computer equipment (can be
People's computer, server or network equipment etc.) it performs all or part of the steps of the method described in the various embodiments of the present invention.
And storage medium above-mentioned includes：USB flash disk, mobile hard disk, read-only memory (ROM, Read-Only Memory), arbitrary access are deposited
The various media that can store program code such as reservoir (RAM, Random Access Memory), magnetic disc or CD.
The above description is merely a specific embodiment, but scope of protection of the present invention is not limited thereto, any
Those familiar with the art in the technical scope disclosed by the present invention, can easily think of the change or the replacement, and should all contain
Lid is within protection scope of the present invention.Therefore, protection scope of the present invention should be based on the protection scope of the described claims.
Claims (3)
1. a kind of access control method Internet-based, which is characterized in that including：
What reception terminal was sent is used to ask and the first solicited message of access controller direct data communication；First request
Information carries authentication information；
The second configuration information of the first configuration information and access controller of terminal is generated according to first solicited message；
First configuration information is sent to the terminal and second configuration information is sent to the access control
Device, so that the terminal after the completion of being configured according to first configuration information and second configuration information and the gate inhibition
Controller can communicate directly；Wherein, the first configuration information and the gate inhibition that terminal is generated according to first solicited message
Second configuration information of controller, including：
Extract the terminal serial number and access controller sequence number in the authentication information；
The first configuration information is generated according to the terminal serial number, and generates second according to the access controller sequence number and matches
Confidence ceases, wherein and first configuration information is the information that communication protocol configuration is carried out to the corresponding terminal of terminal serial number, the
Two configuration informations are to be configured to the communication protocol of the corresponding access controller of access controller sequence number.
2. access control method Internet-based according to claim 1, which is characterized in that the method further includes：
According to user information in the terminal serial number, the authentication information and the access controller sequence number, generates and unlock
The validation criteria information of certificate；
The validation criteria information is sent to the access controller, so that the access controller is according to the validation criteria
Information verifies the unlocking certificate that the terminal is sent.
3. access control method Internet-based according to claim 2, which is characterized in that the method further includes：
Receive the second solicited message for asking unlocking certificate that terminal is sent；
According to second solicited message, the unlocking certificate is inquired in the preset database；
The unlocking certificate of inquiry is sent to the terminal, so that the terminal is directly carried out according to the unlocking certificate
It unlocks.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201510413724.3A CN104966343B (en) | 2015-07-14 | 2015-07-14 | Access control method Internet-based |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201510413724.3A CN104966343B (en) | 2015-07-14 | 2015-07-14 | Access control method Internet-based |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN104966343A CN104966343A (en) | 2015-10-07 |
| CN104966343B true CN104966343B (en) | 2018-10-09 |
Family
ID=54220374
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201510413724.3A Active CN104966343B (en) | 2015-07-14 | 2015-07-14 | Access control method Internet-based |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN104966343B (en) |
Families Citing this family (9)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| WO2017070935A1 (en) * | 2015-10-30 | 2017-05-04 | 深圳市奥星澳科技有限公司 | Method for controlling access control, terminal, server and access control system |
| CN105652707B (en) * | 2015-12-14 | 2019-04-19 | 重庆川仪自动化股份有限公司 | A kind of signal acquisition method, apparatus and system |
| CN105825562B (en) * | 2016-03-18 | 2018-08-24 | 胡家安 | A kind of unlocking apparatus and method for unlocking |
| CN106686754B (en) * | 2016-12-06 | 2020-03-20 | 厦门中控智慧信息技术有限公司 | Data interaction method and data interaction system |
| CN107197445B (en) * | 2017-05-16 | 2019-12-10 | 北京千丁互联科技有限公司 | Memory, Bluetooth intelligent terminal, distance calculation method and door opening control method |
| CN107516363A (en) * | 2017-08-24 | 2017-12-26 | 上海与德科技有限公司 | Management method, device, mobile terminal and the storage medium of intelligent residential district |
| CN109949461B (en) * | 2019-03-15 | 2021-01-01 | 北京深思数盾科技股份有限公司 | Unlocking method and device |
| CN110599647A (en) * | 2019-09-05 | 2019-12-20 | 广东纬德信息科技有限公司 | Intelligent lock authentication method and system |
| CN112016079A (en) * | 2020-08-27 | 2020-12-01 | 深圳市亲邻科技有限公司 | Equipment terminal verification method, device and storage medium |
Citations (6)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101162530A (en) * | 2006-10-12 | 2008-04-16 | 霍尼韦尔国际公司 | Method and system for controlling a security system using near field communication |
| CN103839318A (en) * | 2014-03-18 | 2014-06-04 | 昆明理工大学 | Access control system and method of remote centralized authentication |
| CN103971435A (en) * | 2014-05-22 | 2014-08-06 | 广东欧珀移动通信有限公司 | Unlocking method, server, mobile terminal, electronic lock and unlocking system |
| CN104063932A (en) * | 2014-06-18 | 2014-09-24 | 大连智慧城科技有限公司 | Non-networking access system based on mobile terminal and implementation method |
| CN104123777A (en) * | 2014-08-05 | 2014-10-29 | 上海众人科技有限公司 | Access control remote authorization method |
| CN204288333U (en) * | 2014-12-09 | 2015-04-22 | 深圳市麦驰安防技术有限公司 | Based on the cloud gate inhibition system of mobile internet |
Family Cites Families (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US8831568B2 (en) * | 2011-09-27 | 2014-09-09 | Qualcomm Incorporated | Automatic configuration of a wireless device |
| CN103793960B (en) * | 2012-10-31 | 2016-12-21 | 株式会社易保 | Method for mobile key service |
| CN103971427A (en) * | 2013-02-06 | 2014-08-06 | 希姆通信息技术（上海）有限公司 | Mobile terminal, entrance guard terminal, entrance guard system, security system and verification method |
| CN104637131B (en) * | 2013-11-15 | 2019-02-26 | 腾讯科技（深圳）有限公司 | A kind of access control system authorization method, device and access control system |
| CN104243160A (en) * | 2014-07-24 | 2014-12-24 | 秦锋 | Identity authentication management method and identity authentication method and device |
-
2015
- 2015-07-14 CN CN201510413724.3A patent/CN104966343B/en active Active
Patent Citations (6)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101162530A (en) * | 2006-10-12 | 2008-04-16 | 霍尼韦尔国际公司 | Method and system for controlling a security system using near field communication |
| CN103839318A (en) * | 2014-03-18 | 2014-06-04 | 昆明理工大学 | Access control system and method of remote centralized authentication |
| CN103971435A (en) * | 2014-05-22 | 2014-08-06 | 广东欧珀移动通信有限公司 | Unlocking method, server, mobile terminal, electronic lock and unlocking system |
| CN104063932A (en) * | 2014-06-18 | 2014-09-24 | 大连智慧城科技有限公司 | Non-networking access system based on mobile terminal and implementation method |
| CN104123777A (en) * | 2014-08-05 | 2014-10-29 | 上海众人科技有限公司 | Access control remote authorization method |
| CN204288333U (en) * | 2014-12-09 | 2015-04-22 | 深圳市麦驰安防技术有限公司 | Based on the cloud gate inhibition system of mobile internet |
Also Published As
| Publication number | Publication date |
|---|---|
| CN104966343A (en) | 2015-10-07 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN104966343B (en) | Access control method Internet-based | |
| CN104424679B (en) | Authorization method and authorization system of intelligent key in wireless terminal as well as terminal and server | |
| CN104424779B (en) | System, the method for vehicle are controlled by mobile terminal | |
| US9256723B2 (en) | Security key using multi-OTP, security service apparatus, security system | |
| CN103152402A (en) | Method and system for logging in through mobile terminal and cloud server | |
| CN102349061B (en) | Method and system for authenticating a user | |
| CN104753894B (en) | A kind of data processing method, apparatus and system | |
| CN103136820A (en) | Remote access control system based on terminal fingerprint identification | |
| CN104751038A (en) | Identity authentication method, device and system | |
| CN102982592A (en) | NFC terminal electronic key | |
| CN107426160A (en) | Control method, system, terminal, FIDO servers and the safety means of smart home | |
| CN103746969A (en) | Vehicle terminal authentication method and authentication server | |
| CN102982593A (en) | Electronic key system based on mobile terminal | |
| WO2010096991A1 (en) | An application downloading system and method | |
| CN104424676A (en) | Identity information sending method, identity information sending device, access control card reader and access control system | |
| CN105488870A (en) | Entrance guard control method, apparatus, terminal and control server | |
| CN101399659B (en) | Cipher key authentication method and device between user identification module and terminal | |
| CN110660145A (en) | Lock control method, system, lock and storage medium based on mobile terminal | |
| CN107948970A (en) | System of real name method of network entry, system and the mobile terminal of subordinate terminal | |
| CN107679488A (en) | Control terminal in control method for vehicle and system, cloud server, vehicle | |
| CN107248212A (en) | A kind of intelligent lock system and its method for unlocking based on NFC | |
| CN104700270A (en) | Payment request processing method, payment request processing device and terminal | |
| CN103747051A (en) | Service platform of vehicle-mounted terminal | |
| CN113434766B (en) | Subscription information pushing method and device, storage medium and electronic device | |
| CN107657199A (en) | Mobile device, verification device and verification method thereof |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant | ||
| PE01 | Entry into force of the registration of the contract for pledge of patent right |
Denomination of invention: Access control method based on Internet Effective date of registration: 20220118 Granted publication date: 20181009 Pledgee: Bank of Jiangsu Limited by Share Ltd. Shenzhen branch Pledgor: SHENZHEN QINLIN SCIENCE & TECHNOLOGY CO.,LTD. Registration number: Y2022440020009 |
|
| PE01 | Entry into force of the registration of the contract for pledge of patent right | ||
| PC01 | Cancellation of the registration of the contract for pledge of patent right |
Date of cancellation: 20230516 Granted publication date: 20181009 Pledgee: Bank of Jiangsu Limited by Share Ltd. Shenzhen branch Pledgor: SHENZHEN QINLIN SCIENCE & TECHNOLOGY CO.,LTD. Registration number: Y2022440020009 |
|
| PC01 | Cancellation of the registration of the contract for pledge of patent right | ||
| PE01 | Entry into force of the registration of the contract for pledge of patent right |
Denomination of invention: Internet based access control method Effective date of registration: 20230518 Granted publication date: 20181009 Pledgee: Bank of Jiangsu Limited by Share Ltd. Shenzhen branch Pledgor: SHENZHEN QINLIN SCIENCE & TECHNOLOGY CO.,LTD. Registration number: Y2023980040996 |
|
| PE01 | Entry into force of the registration of the contract for pledge of patent right | ||
| PC01 | Cancellation of the registration of the contract for pledge of patent right |
Granted publication date: 20181009 Pledgee: Bank of Jiangsu Limited by Share Ltd. Shenzhen branch Pledgor: SHENZHEN QINLIN SCIENCE & TECHNOLOGY CO.,LTD. Registration number: Y2023980040996 |
|
| PC01 | Cancellation of the registration of the contract for pledge of patent right | ||
| PE01 | Entry into force of the registration of the contract for pledge of patent right |
Denomination of invention: Internet based access control method Granted publication date: 20181009 Pledgee: Bank of Jiangsu Limited by Share Ltd. Shenzhen branch Pledgor: SHENZHEN QINLIN SCIENCE & TECHNOLOGY CO.,LTD. Registration number: Y2024980025469 |
|
| PE01 | Entry into force of the registration of the contract for pledge of patent right |