CN105257145B - Remote safe deposit box - Google Patents
Remote safe deposit box Download PDFInfo
- Publication number
- CN105257145B CN105257145B CN201510562365.8A CN201510562365A CN105257145B CN 105257145 B CN105257145 B CN 105257145B CN 201510562365 A CN201510562365 A CN 201510562365A CN 105257145 B CN105257145 B CN 105257145B
- Authority
- CN
- China
- Prior art keywords
- user
- safe
- controller
- safety box
- key
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
Landscapes
- Lock And Its Accessories (AREA)
Abstract
The present invention relates to a kind of remote safe deposit box, including：Safe body；Electronic lock；And Safe controller, it is connected by control line with electronic lock to control the opening and closing of the electronic lock, and the Safe controller, by wireless connection and relay server, the Safe controller includes：Memory, is stored thereon with computer executable program；Processor, it is configured as performing the computer executable program performing following action：In the case where user inputs first user's voucher to Relay Server success identity by the safety box application run on mobile device, pass through Relay Server and the safety box application communication；Second user voucher by safety box application input is received from user by Relay Server；Second user voucher described in certification；And to control of user's imparting to the electronic lock in the case of certification is successful.The invention further relates to corresponding safety deposit box system and the method for operation safety box.
Description
Technical field
The present invention relates to safety box field, more particularly it relates to a kind of remote safe deposit box.
Background technology
With the improvement of living standards with the accumulation of individual wealth, the keeping of personal effects is increasingly becoming of concern ask
Topic.Safety box (also known as safety cabinet, safe deposit box) is widely adopted as a kind of inexpensive property keeping means.
Traditional insurance case is using complicated lockset, such as mechanical lock, coded lock and Fingerprint Lock.But the peace of these locksets
The raising of full property be using complexity and high cost as cost, even and if advanced lockset may also as time goes by and
Cracked by offender.In addition, traditional insurance case often only possesses onsite alarming function, and can not remotely it notify not at the scene
Owner, this is unfavorable for the disposal of emergency.
With the rise of Internet of Things, there is the trial that safety box is networked in the market.But such safety box has
Often have as a drawback that：
(a) safety issue.Due to the diversity and complexity of internet, the safety precaution of networking safety box be one must
The problem of must considering.Conventional networking safety box is difficult to ensure that the communication security between safety box and authorisation device；
(b) power problemses.For largely with battery powered internet of things equipment, the power consumption of equipment is one and greatly chosen
War.Such as safety box is generally powered by No. 5 batteries, and in the case that Industry code requirements are unlocked 10 times in every day, battery can connect
It is continuous to use more than 6 months.This is a huge challenge, the thing of especially Wi-Fi accesses for the equipment of many Internet of Things networkings
The power consumption of networked devices is bigger (being tens milliamperes during communication, also there is several milliamperes when standby)；And
(c) connectivity problem.The problem of in order to not have public ip address when overcoming household internal Wi-Fi equipment to connect (referring tohttps://en.wikipedia.org/wiki/IP_address), P2P agreements are generally used by the Wi-Fi equipment networked,
And P2P working methods require that when the controller of counterpart device is accessed, the controller or mobile phone necessarily be in " ready "
(ready) state, otherwise side needs constantly inquiry the opposing party's state is until ready.And safety box of networking can not be constantly in
Ready state, and more electric energy can be consumed if its state is constantly inquired about, this can cause poor Consumer's Experience.Therefore,
Connecting for safety box of networking is always a significant problem for perplexing developer.
The content of the invention
Therefore, task of the invention is to provide a kind of remote safe deposit box system, a kind of remote safe deposit box and one kind and is used for
The method for running remote safe deposit box, the system, remote safe deposit box and method can solve the problem that one or more problems above, have
For body, high security, low-power consumption are had according to the safety box of the present invention and rational connected mode is used.
According to the first aspect of the invention, the task is solved by a kind of remote safe deposit box system, and the system includes：
Remote safe deposit box, it includes safe body, electronic lock and Safe controller, the Safe controller
It is connected by control line with electronic lock to control the opening and closing of the electronic lock, and the Safe controller passes through nothing
Line is connected and relay server；
Safety box application on the mobile device of user；And
Relay Server, itself and the safety box application communication；
Wherein user, to after Relay Server success identity, passes through by safety box application first user's voucher of input
Relay Server set up with the communication of Safe controller, then user by safety box application input second user voucher to
After Safe controller success identity, the control to electronic lock is obtained.
Had the following advantages that according to the remote safe deposit box system of the present invention：
(1) it is safe.Because, the safety certification carried out by mobile devices such as mobile phones is due to through professional institution
(such as professional encryption chip Chevron Research Company (CRC), the service of telecommunications short message certification, dynamic password offer company) design is performed and had
There is a higher reliability, the finger print identifying (TouchID) of such as Apple Inc., short message certification, dynamic password etc., this is tradition
Lockset is incomparable.In addition, the remote safe deposit box of the present invention is using double authentication, i.e. user enters to Relay Server first
Row certification is to obtain with the right of correspondence of Safe controller and then user to Safe controller certification to obtain to electronic lock
Control, can greatly improve security, because in the present invention, Relay Server function only as the effect of information transfer without
It is responsible for the certification of the control on electronic lock, therefore, it is difficult to the control to electronic lock is obtained by attacking Relay Server
Power；
(2) it is inexpensive.Due to possessing these safety certification means, it can simplify or even cancel tradition machinery lock or close
Code lock, so as to reduce the cost of safety box.
(3) rational connection.The relaying safety box of the present invention provides the safety box on mobile device by Relay Server
, must be constantly so as to solve Safe controller without using P2P connections using the information relaying between Safe controller
The problem of in ready state, on the contrary, can wake up or reset insurance at any time as needed according to the safety box application of the present invention
Case controller is to be communicated.
Provided in the expansion scheme of the present invention, the first user voucher includes one or many in the following
It is individual：User password, user fingerprints, user's recognition of face, user speech identification, short message certification code, user answer a question and moved
State password.These user's vouchers include safe and flexible authentication means, and user for example can voluntarily select.In addition, in
Third Party Authentication mechanism can be transferred to be authenticated the first user's voucher received after server.
Provided in another expansion scheme of the present invention, the second user voucher includes one or many in the following
It is individual：User password, user fingerprints, user's recognition of face, user speech identification, key and user answer a question.In the present invention
A preferred scheme in provide, the communication of user and Relay Server and/or the communication of user and Safe controller for plus
Close communication.By that by the communication encryption, the security of unlocking process can be greatly enhanced, prevent key from leaking.
Provided in another preferred scheme of the present invention, remote safe deposit box system as claimed in claim 1 or 2, wherein
Safety box on mobile device was applied and bound with remote safe deposit box to realize binding by user before unlocking operation is performed first
Authorize, the binding comprises the following steps：
User presses the binding button in remote safe deposit box；
Dynamic binding key is generated by remote safe deposit box and safety box is automatically transmitted to and applied to be used as binding authorized key
Or be manually entered into by user in safety box application to be used as binding authorized key；
The binding authorized key is preserved in safety box application；And
Applied and encrypted order with the binding authorized key by safety box before being communicated every time with Safe controller
Safe controller is sent to, is decrypted by Safe controller, and could be performed in the case where successful decryption obtains order
Order is as unlocked.The order may be used as security control such as timestamp and random number containing redundancy, to prevent replay attack
(replay attack)(https://en.wikipedia.org/wiki/Replay_attack).Or authorize key with binding
The reliable and secure connection such as https that spoon is set up between safety box application and Safe controller, and pass through this reliable and secure company
Tap into row information and exchange such as alarm signal and order of unlocking.For example, the binding key is by remotely insuring under symmetric encipherment algorithm
Case and safety box apply the unified key used, or the public key under asymmetrical encryption algorithm, wherein being calculated in asymmetric cryptosystem
In the case of method, safety box application holds the public key of Safe controller key centering for encryption data, and controller is sharp
It is decrypted with private key.Certainly, other AESs are also what is be contemplated that.
In above-mentioned preferred scheme, by being obtained by safety box application and storing binding authorized key so that safety box should
Confirm it oneself is authorized behaviour with the binding authorized key can be used before being communicated with Safe controller every time
Make the safety box application of the remote safe deposit box, so as to realize the safety box using the binding between the Safe controller.It is logical
The binding is crossed, security can be obviously improved, is grasped because user can be greatly reduced by the application of unwarranted safety box
Make the possibility of safety box application.
Provided in another expansion scheme of the present invention, the wireless connection be Wi-Fi connection and honeycomb mobile link it
One.In this application, preferred Wi-Fi connection, because Wi-Fi connection is more economically economical, and the electric energy of consumption is relatively low.But
It is that wider scene, such as place without Wi-Fi connection are gone for using honeycomb mobile link.
Provided in the expansion scheme of the present invention, Safe controller is in the sleep with low-power consumption at one's leisure
Pattern, and after user correspondingly operates the button in remote safe deposit box, either directly wake up Safe controller or
External circuit is caused to produce the reset signal of Safe controller and then reset and wake up Safe controller first.Pass through
The wake-up or reset mode, Safe controller may be at the extremely low sleep pattern of power consumption, such as depth and sleeps at one's leisure
Sleep mode, so as to greatly reduce power consumption, extends battery life.
Provided in another expansion scheme of the present invention, can each be inputted by safety box application in multiple users
Corresponding first user voucher and second user voucher are obtained to after Relay Server and Safe controller success identity respectively
Must be to the control of electronic lock.By the expansion scheme, control of many people to same remote safe deposit box can be realized at lower cost
System, while ensureing higher security.The multiple user is, for example, the member of the same family, employee of same company etc..
Provided in the preferred scheme of the present invention, Safe controller is sent out when detecting anomalous event to server
Notice is sent, server sends a notification message after the notice is received to safety box application.The anomalous event for example can be with
To attempt to open safety box, the non-normal switching-off of safety box, electronic lock damage etc. without permission., can by the preferred scheme
Still not inform the user anomalous event in the case of safety box scene in user, so as to be conducive to the tight of anomalous event
Anxious disposal, reduces user's loss, improves Consumer's Experience.
Provided in the expansion scheme of the present invention, security insurance case additionally has Fingerprint Lock or coded lock, wherein
When the Fingerprint Lock or coded lock are unlocked, the electronic lock is unlocked or still must be individually unlocked in the lump.By that will protect
The electronic lock of dangerous case controller control is applied in combination with conventional lock, can improve security.For example, user can open electricity
Must still open conventional lock after son lock, certainly, in order to simplify operation, can also be arranged on unlocking electronic lock or conventional lock it
In the case of one, another one is automatically turned on.
Provided in the preferred scheme of the present invention, the wireless connection is Wi-Fi connection, and wherein safety box control
Device record Wi-Fi accesses processed (can use) delay Tw, the authentication operation time Ta of safety box application record user from Wi-Fi is waken up to
(being ordered from APP is clicked on to unlocking is sent), and if Tw >=Ta+TThreshold value, i.e. Wi-Fi connection is slower than APP operations, then when with
When family opening safety box is applied, safety box application wakes up Safe controller and reresents user's input user's voucher first, otherwise,
Safety box is applied to be authenticated successfully in user and (send unlocking order) just wakes up Safe controller, wherein T laterThreshold valueIt is to set
The threshold time put.It can be adaptively determined by the program and whether wake up Safe controller first, so as to ensure to use
Power consumption is reduced in family as far as possible in the case of experiencing, because Safe controller is after Wi-Fi is connected to, will constantly and road
Carrying out shake communication is carried out by device, this process more consumes energy, and it is unnecessary to shorten Safe controller by such scheme
Communication time, so as to reduce power consumption.For example, when it is determined that user's uncaging time is more than the Wi-Fi connection time, then user can be waited
Safe controller is waken up after being certified again to be connected to Wi-Fi, now user will not feel obvious delay, but reduce work(
Consumption；If instead it is determined that user's uncaging time is less than Wi-Fi, then Safe controller can be waken up first and carries out Wi-Fi companies
Connect, so as to reduce period of reservation of number, optimize Consumer's Experience.
Provide, connect by GPS location user and using Safe controller in another preferred scheme of the present invention
The IP address positioning remote safe deposit box of the wireless router connect, and and if only if user is located in set geographic area or used
When family and the position of remote safe deposit box meet certain relation, the user could obtain the control to the electronic lock of remote safe deposit box
Power.The program can further improve the security of remote safe deposit box.The relation for example can be between two positions away from
From.For example user can set, only at it at home when, company could obtain the control to electronic lock, or refer to
The safety box that can be just stayed at home such as company with Remote Open is put in positioning, and this can prevent from being unlocked by long-range malice.Other geographical positions
Put be also it is contemplated that, such as bank, stipulated place etc..
In the second aspect of the present invention there is provided a kind of method for running remote safe deposit box system, wherein described remote
Journey safety deposit box system includes：Remote safe deposit box, it includes safe body, electronic lock and Safe controller, the safety box
Controller passes through wireless connection and relay server；Relay Server；And the guarantor run on the mobile device of user
Dangerous case application, it comprises the following steps with the relay server, this method：
Applied by safety box from user and receive first user's voucher；
Certification user and safety box is set up in the case of certification is successful using communication with Safe controller；
Applied by safety box from user and receive second user voucher；And
Second user voucher is transferred to Safe controller for user described in Safe controller certification, wherein
In the case of success identity user control to the electronic lock is provided a user by insuring strong controller.
As described above, by using the program, it is possible to achieve high security, low cost and rationally connect these advantages.
Provided in a preferred scheme according to the present invention, the wireless connection is Wi-Fi connection, this method also includes
The following steps：
Record Wi-Fi access delays Tw；
Record the authentication operation time Ta of user；And
Tw is compared with Ta, if Tw >=Ta+TThreshold value, then when user, which opens safety box, to apply, safety box is waken up first
Controller reresents user's input user's voucher, otherwise, Safe controller is just waken up after success identity user, wherein
TThreshold valueIt is settable threshold time.
As described above, by the preferred scheme, good Consumer's Experience is provided while power consumption can be reduced.
In the third aspect of the present invention there is provided a kind of remote safe deposit box, including：
Safe body；
Electronic lock；And
Safe controller, the Safe controller is connected to control the electronic lock by control line with electronic lock
Open and close, and the Safe controller is by wireless connection and relay server, the Safe controller
Including：
Memory, be stored with computer executable program on the memory；
Processor, it is configured as performing the computer executable program performing following action：
It is successful to Relay Server by the safety box application first user's voucher of input run on mobile device in user
In the case of certification, pass through Relay Server and the safety box application communication；
Second user voucher by safety box application input is received from user by Relay Server；
Second user voucher described in certification；And
In the case of certification is successful the control to the electronic lock is assigned to user.
Brief description of the drawings
Below with reference to the accompanying drawings the present invention is expanded on further according to multiple embodiments.Accompanying drawing：
Fig. 1 shows the schematic diagram of the remote safe deposit box system according to the present invention；
Fig. 2 shows the flow chart of the operation method of the remote safe deposit box system according to the present invention；
Fig. 3 shows the flow chart of the expansion scheme of the operation method of the remote safe deposit box system according to the present invention；
Fig. 4 shows the flow chart of the operation method of the remote safe deposit box according to the present invention；And
Fig. 5 shows the block diagram of the remote safe deposit box according to the present invention.
Embodiment
Fig. 1 shows the system environments figure of the remote safe deposit box 100 according to the present invention.Remote safe deposit box 100 includes insurance
Box main body (not shown), Safe controller 101 and electronic lock 102.Safe controller 101 passes through control line 110 and electronics
Lock 102 connects to control the unlocking and locking of electronic lock 102.Safe controller 101 can use various processors or micro-control
Device or on-chip system (System on Chip) processed, such as arm processor, Power PC Processor, ESP8266 chips etc..Electricity
Son lock 102 can be using common electromagnet lock or motor control lock, and is receiving corresponding control signal from safety box
Shi Kaisuo and locking.The electronic locks of other forms it is also contemplated that, such as electric mortise lock etc..
Safe controller 101 is communicated by wireless connection with Relay Server 104.In the present embodiment, the communication
Connect through following manner realization：Safe controller 101 is connected to wireless router 103 by Wi-Fi connection 106, wirelessly
Router 103 is connected to network 104, such as internet 104, Relay Server 104 further through wired or wireless connection 107
Network 104 is connected to by connection 108, so as to realize the communication of Safe controller 101 and Relay Server 104.Note, this
It is merely exemplary, Safe controller 101 can also be communicated by honeycomb mobile link with Relay Server 104.Relaying
Server 104 is preferably the server of safety box producer operation, but Relay Server 104 can also be by third party, example
Such as the server of certification authority's trustship.
Relay Server 104 (is herein smart mobile phone 105, but other mobile devices by the mobile device 105 of user
Be also it is contemplated that, such as PDA, tablet personal computer etc.) on the safety box that runs communicate and used with certification with user using 111
Family, wherein mobile device 105 are connected to network by wireless connection 109 (such as Wi-Fi connection, honeycomb mobile link etc.)
104。
When to be unlocked, user for example by the safety box on mobile phone 105 using 111 first user's vouchers of input, for example
Short message certification code, so as to the certification oneself of Relay Server 104.After success identity, Relay Server 104 is authorized to user
With the right of correspondence of Safe controller 101, that is to say, that Relay Server 104 is set up safety box and controlled using 111 with safety box
The communication of device 101, now, user can be communicated by its safety box using 111 with Safe controller 101, to be authenticated.
Then, user is encrypted by its safety box using 111 input second user vouchers, such as fingerprint, dynamic password, authorized key
Second user voucher (for example cryptographically) is transmitted to Safe controller 101 by static password, Relay Server 104.Protect
Dangerous case controller 101 is assigned to electricity according to the second user credential authentication user, and in the case of certification is successful to user
The control of son lock, the i.e. ability of unlocking and the locking of control electronic lock.
The safety certification carried out by mobile phone has higher reliability, otherwise because these authentication modes are by special
(TouchID of such as Apple Inc. just employs professional encryption chip) of industry mechanism design, otherwise verification process is by specialty
Mechanism perform (such as short message certification is performed by regular telecommunications company, and dynamic password is by professional third party certification authority
There is provided), and these authentication modes can all constantly update and perfect over time, therefore security is higher, this is traditional locks
Tool is incomparable.In addition, the remote safe deposit box of the present invention is using double authentication, i.e. user is carried out to Relay Server first
Certification is to obtain with the right of correspondence of Safe controller and then user to Safe controller certification to obtain the control to electronic lock
System power, can greatly improve security, because in the present invention, Relay Server functions only as the effect of information transfer without negative
The certification of the control on electronic lock is blamed, therefore, it is difficult to the control to electronic lock is obtained by attacking Relay Server.
Further, since possessing these safety certification means, it can simplify or even cancel tradition machinery lock or coded lock, so as to reduce guarantor
The cost of dangerous case.Again, the safety box that relaying safety box of the invention is provided by Relay Server on mobile device apply with
Information relaying between Safe controller, must be constantly in just so as to solve Safe controller without using P2P connections
The problem of not-ready status, on the contrary, can wake up or reset safety box control at any time as needed according to the safety box application of the present invention
Device is to be communicated.
Fig. 2 shows the flow 200 of the operation method of the remote safe deposit box system according to the present invention.
In step 202, Relay Server 104 receives first user's voucher using 111 by safety box from user.For example,
User opens safety box on mobile phone using 111 and inputs fingerprint with to the certification oneself of Relay Server 104.First user's voucher
Preferably dynamic subscriber's voucher, such as short message certification, user's recognition of face, user speech identification, key, dynamic password etc.
Deng, can so prevent static subscriber's voucher monitored by third party after carry out malice unlocking.
In step 204, by Relay Server by the certification user of Relay Server 104 and in the case of certification is successful
104 set up safety box using 111 communications with Safe controller 101.Relay Server 104 is recognized described in oneself can performing
Card, but user's voucher can also be transmitted to Third Party Authentication mechanism and be authenticated and connect from it by Relay Server 104
Receive authentication result.Safety box applies the communication set up between 111 and Safe controller 101 can be in Relay Server 105
Relaying under carry out, i.e. the communication carries out transfer by Relay Server.The repeated communication is preferably cryptographically entered
OK so that Relay Server 105 can not know the Content of Communication, so as to improve security.
In step 206, second user voucher is received from user using 111 by safety box by Relay Server 104.Second
User's voucher is preferably static subscriber's voucher, such as user fingerprints, user's recognition of face, user speech identification, key, Yong Hushe
The answer of the safety problem put, user password etc..By being used in the communication of user and Safe controller without the 3rd
Static subscriber's voucher that side is participated in, can improve security, prevent from causing damage because third party is leaked to user, but this is not
Exclude and use dynamic subscriber's voucher, for example, still can now use the high dynamic subscriber's voucher of reliability.As described above, to increase
Plus security, the communication of user and Safe controller can carry out cryptographically.
In step 208, from Relay Server 104 by second user voucher be transferred to Safe controller 101 for
User described in the certification of Safe controller 101, wherein being carried in the case of success identity user from insuring strong controller to user
For the control to the electronic lock.
Fig. 3 shows the flow 300 of the expansion scheme of the operation method of the remote safe deposit box system according to the present invention.Flow
300 can be carried out before flow 200, for example, flow 300 is carried out when can open safety box every time in user using 111.
In step 302, record Wi-Fi access delays Tw.The delay Tw refer to Safe controller 101 from start wake up
To being successfully connected to the time that Wi-Fi is spent.The delay Tw for example can be user repeatedly recorded in unlocking process
The average value of delay.The delay can also for example be set by factory pre-sets or by user.
In step 304, the authentication operation time Ta of user is recorded.Authentication operation time Ta refers to defeated since user
Enter first user's voucher to Relay Server certification success the spent time.Authentication operation time Ta can be that user is more
The average value of authentication operation time recorded in secondary unlocking process.The uncaging time for example can also by factory pre-sets or
Set by user.
In step 306, Tw is compared with Ta, if Tw >=Ta+TThreshold value, then when user, which opens safety box, to apply, first
Wake up Safe controller 101 and reresent user's input user's voucher, otherwise, safety box is just waken up after success identity user
Controller 101, wherein TThreshold valueIt is settable threshold time, threshold time TThreshold valueCan be 0 or other positive numbers.During the threshold value
Between TThreshold valueIt can be set by factory pre-sets or by user.
Fig. 4 shows the flow chart of the operation method of the remote safe deposit box 100 according to the present invention.The flow chart preferably by
Processor is performed, but the flow chart can also be realized by such as FPGA, ASIC etc hardware.
In step 402, first user's voucher is inputted to relaying by the safety box application run on mobile device in user
In the case of server success identity, pass through Relay Server and the safety box application communication.The communication is preferably to encrypt
, for example the communication is encrypted using des encryption algorithm or RSA Algorithm.
In step 404, the second user voucher by safety box application input is received from user by Relay Server.
In step 406, second user voucher described in certification.The certification can be held by the processor of remote safe deposit box 100
OK, specific authentication chip or in remote safe deposit box 100 is performed.
In step 408, the control to the electronic lock is assigned to user in the case of certification is successful.
Fig. 5 shows the block diagram of the remote safe deposit box 100 according to the present invention.Remote safe deposit box 100 includes safe body
(not shown), Safe controller 101, electronic lock 102, it is optional wake up button 114, optional password generated button 113, with
And optional additional lockset 112.Wherein dotted line frame or dotted arrow represent that the part or connection are optional.
Safe controller 101 includes processor 101a and memory 101b, and the Safe controller 101 passes through control
Line is connected with electronic lock 102 to control the opening and closing of the electronic lock 102, and the Safe controller 101 passes through
Wireless connection communicates with Relay Server 104.Be stored with computer executable program on memory 101b, and processor 101a
It is configured as performing the computer executable program performing following action：In user by running on mobile device 105
Safety box, in the case of the success identity of Relay Server 104, passes through Relay Server using 111 first user's vouchers of input
104 communicate with the safety box using 111；Received by Relay Server 104 from user by safety box using 111 inputs
Second user voucher；Second user voucher described in certification；And in the case of certification is successful to user assign to the electronics
The control of lock 102.
Remote safe deposit box 100 also has optional additional lockset 112, and the additional lockset 112 is, for example, coded lock or fingerprint
Lock.Additional lockset 112 is used to increase the security of remote safe deposit box 100.Additional lockset 112 can be independently unlocked, i.e., with
The unlocking of electronic lock 102 is independently unlocked, but additional lockset 112 can also be unlocked together with electronic lock 102, i.e. when attached
The opposing party when side in tool 112 and electronic lock 102 is unlocked is locked also automatically to be unlocked, so that simplify operation, it is now attached
Lock tool 112 and be connected to electronic lock 102 or Safe controller 101 (referring to dotted arrow in figure).
Remote safe deposit box 100 also includes optional wake-up button 114.The wake-up button 114 is used in Safe controller
101 generate reseting event signal and send the signal to external circuit when being in deep sleep, external circuit is according to the event
Generation reset signal is transmitted to Safe controller 101, so that Safe controller 101 be resetted, is called out with reaching
Eye-catching.This is favourable, because (now electric current one when Safe controller 101 needs to be in deep-sleep due to energy-conservation
As be 10-20 μ A), that Safe controller will be unable to be waken up and normal operation again after can only first resetting, it is therefore desirable to by
In external wake mechanism, such as wake up button and external circuit to reset and thereby make Safe controller 101 normally to run.When
So, wake-up button 101 is alternative in, by the safety box on the mobile device of user 111 can also be applied to produce the reset
Event signal, and external circuit is forwarded it to by Relay Server 104, external circuit regeneration reset signal is simultaneously conveyed to guarantor
Dangerous case controller 101.In other cases, for example when Safe controller 101 is in common park mode, (now electric current is
10-20mA or 0.5mA, Safe controller 101 can be waken up), by safety box applies 111 generation corresponding events to wake up insurance
Case controller 101.
Remote safe deposit box 100 also has optional binding button 113.Binding button 113 is used for the mobile device in user
Bound with remote safe deposit box, transmission key is used as following unlocking voucher.And alternatively only when user mobile device 105 with it is remote
After the success of journey safety box binding 100, user could use the safety box on the mobile device 105 to come using 111 to long-range guarantor
Dangerous case 100 is operated, otherwise, and safety box application will be prompted to user and have no right to operate the remote safe deposit box 100.The bind package
Include the following steps (1) to (4)：
(1) user presses the binding button 113 in remote safe deposit box 100.
(2) dynamic binding key is generated by remote safe deposit box 100 and is automatically transmitted to safety box using 111 to be used as binding
Authorized key is manually entered into during safety box applies 111 to be used as binding authorized key by user.The dynamic binding key
Spoon can use the fixed binding key of remote safe deposit box to be encrypted, to improve security.Now, user is needed first to guarantor
Fixed binding key is inputted in dangerous case application the dynamic binding key received is decrypted.In addition it is also possible in turn by
Safety box is using 100 generation dynamic binding keys and is transferred to remote safe deposit box to be used as binding authorized key.
(3) the binding authorized key is preserved in safety box applies 111.
(4) it will be ordered and authorized with the binding before being communicated every time with Safe controller 101 using 111 by safety box
Key encryption is sent to Safe controller 101, is decrypted by Safe controller 101, and obtain order in successful decryption
In the case of could perform order as unlocked, or set up with binding authorized key safety box using 111 and Safe controller 105
Between reliable and secure connection such as https, and by this it is reliable and secure connect into row information exchange.
For example, the binding key is by remote safe deposit box 100 and safety box to apply 105 systems used under symmetric encipherment algorithm
Public key under one key, or asymmetrical encryption algorithm, wherein in the case of asymmetrical encryption algorithm, safety box application
105 hold the public key of Safe controller key centering for encryption data, and controller is decrypted using private key.When
So, other AESs are also what is be contemplated that.
In addition, the binding authorized key can also be generated by safety box application and be sent to Safe controller, or
The initial key of fixation that authorized key is remote safe deposit box is bound described in person, user can be directly inputted to safety box application
In.In above-mentioned two situations, user need not press binding button.
Although some embodiments of the present invention are described in present specification, to art technology
Personnel are it is readily apparent that these embodiments are merely possible to shown in example.It may occur to persons skilled in the art that numerous
Flexible program, alternative solution and improvement project without beyond the scope of this invention.Appended claims are intended to limit this hair
Bright scope, and thereby cover method and structure of these claims and its in the range of equivalents in itself.
Claims (19)
1. a kind of remote safe deposit box system, including：
Remote safe deposit box, it includes safe body, electronic lock and Safe controller, and the Safe controller passes through
Control line is connected with electronic lock to control the opening and closing of the electronic lock, and the Safe controller is by wirelessly connecting
Connect and relay server；
Safety box application on the mobile device of user；And
Relay Server, itself and the safety box application communication；
Wherein user, to after Relay Server success identity, is passing through relaying by safety box application first user's voucher of input
Server sets up the communication with Safe controller, and then user is inputting second user voucher to insurance by safety box application
After case controller success identity, the control to electronic lock is obtained.
2. remote safe deposit box system as claimed in claim 1, wherein the first user voucher includes one in the following
It is individual or multiple：User password, user fingerprints, user's recognition of face, user speech identification, short message certification code, user answer a question
And dynamic password.
3. remote safe deposit box system as claimed in claim 1 or 2, wherein the second user voucher is included in the following
It is one or more：Preset electron key, letter of identity, user password, user fingerprints, user's recognition of face, user speech are known
Not, key, dynamic password and user answer a question.
4. remote safe deposit box system as claimed in claim 1 or 2, the wherein communication of user and Relay Server and/or user
Communication with Safe controller is coded communication.
5. remote safe deposit box system as claimed in claim 4, coded communication therein includes using symmetric encipherment algorithm and non-
The communication that symmetric encipherment algorithm is encrypted.
6. remote safe deposit box system as claimed in claim 1 or 2, wherein user will be mobile before unlocking operation is performed first
Safety box in equipment, which is applied, to be bound with remote safe deposit box to realize that binding is authorized, and the binding comprises the following steps：
Static binding key is received using manual by safety box application as binding authorized key or user from safety box application
The fixed binding key of remote safe deposit box is inputted using as binding authorized key, under wherein the binding key is symmetric encipherment algorithm
Apply the unified key used by remote safe deposit box and safety box, or the Safe controller under asymmetrical encryption algorithm is carried
The public key of confession；
The binding authorized key is preserved in safety box application；And
Applied and sent order with the binding authorized key encryption by safety box before being communicated every time with Safe controller
To Safe controller, decrypted by Safe controller, and could perform in the case where successful decryption obtains order order,
Or the reliable and secure connection set up with binding authorized key between safety box application and Safe controller, and can by this
Enter row information by secure connection to exchange.
7. remote safe deposit box system as claimed in claim 1 or 2, wherein user will be mobile before unlocking operation is performed first
Safety box in equipment, which is applied, to be bound with remote safe deposit box to realize that binding is authorized, and the binding comprises the following steps：
User presses the binding button in remote safe deposit box；
By remote safe deposit box generate dynamic binding key and be automatically transmitted to safety box apply using as binding authorized key or
It is manually entered into by user in safety box application to be used as binding authorized key, or remote safe deposit box application generation dynamic binding
Key is simultaneously automatically delivered to remote safe deposit box using as binding authorized key, wherein the binding key be under symmetric encipherment algorithm by
Remote safe deposit box and safety box apply the unified key used, or the public key under asymmetrical encryption algorithm, wherein not right
In the case of claiming AES, safety box application holds the public key of Safe controller key centering for encryption data, and
Controller is decrypted using private key；
The binding authorized key is preserved in safety box application；And
Applied and sent order with the binding authorized key encryption by safety box before being communicated every time with Safe controller
To Safe controller, decrypted by Safe controller, and could perform in the case where successful decryption obtains order order,
Or the reliable and secure connection set up with binding authorized key between safety box application and Safe controller, and can by this
Enter row information by secure connection to exchange.
8. remote safe deposit box system as claimed in claim 7, wherein the order includes the order unlocked.
9. remote safe deposit box system as claimed in claim 6, wherein user on the basis of static key binding is realized first,
A dynamic binding key is produced again before execution unlocking operation first, and the safety box on mobile device is applied and long-range insurance
Case binding is to realize that binding is authorized, and the binding comprises the following steps：
User presses the binding button in remote safe deposit box；
Dynamic binding key is generated and by the new dynamic binding key with generation of the static key encryption by remote safe deposit box,
And safety box is automatically transmitted in the way of ciphertext using to be generated as binding authorized key, or by remote safe deposit box application
Dynamic binding key and by the static key encryption with newly-generated dynamic binding key, and with ciphertext be automatically transmitted to protect
Dangerous case is so that as binding authorized key, the wherein binding key is by remote safe deposit box and safety box application under symmetric encipherment algorithm
The unified key used, or the public key under asymmetrical encryption algorithm, wherein in the case of asymmetrical encryption algorithm, insurance
Case application holds the public key of Safe controller key centering for encryption data, and controller is decrypted using private key；
The binding authorized key is preserved in safety box application；And
Applied and sent order with the binding authorized key encryption by safety box before being communicated every time with Safe controller
To Safe controller, decrypted by Safe controller, and could perform in the case where successful decryption obtains order order,
Or the reliable and secure connection set up with binding authorized key between safety box application and Safe controller, and it is reliable by this
Secure connection enters row information exchange.
10. remote safe deposit box system as claimed in claim 1 or 2, is moved wherein the wireless connection is Wi-Fi connection and honeycomb
One of dynamic connection.
11. remote safe deposit box system as claimed in claim 1 or 2, wherein Safe controller are in low at one's leisure
The sleep pattern of power consumption, and after user correspondingly operates the button in remote safe deposit box, or directly wake up safety box
Or controller, cause first external circuit produce Safe controller reset signal and then reset and wake up safety box
Controller.
12. can each it pass through insurance in remote safe deposit box system as claimed in claim 1 or 2, plurality of user
Case application inputs corresponding first user voucher and second user voucher respectively to Relay Server and Safe controller success
The control to electronic lock is obtained after certification.
13. remote safe deposit box system as claimed in claim 1 or 2, wherein Safe controller are when detecting anomalous event,
Or some user unpack when to server send notify, server after the notice is received to each safety box should
Sent a notification message with user.
14. remote safe deposit box system as claimed in claim 1 or 2, wherein security insurance case additionally have Fingerprint Lock or close
Code lock, wherein when the Fingerprint Lock or coded lock are unlocked, the electronic lock is unlocked or still must be individually unlocked in the lump,
Wherein send and notify to safety box application in unblock, or when additional controller sends alarm signal, to safety box application
Send and notify.
15. remote safe deposit box system as claimed in claim 1 or 2, wherein the wireless connection is Wi-Fi connection, and its
Middle Safe controller record Wi-Fi access delay Tw, the authentication operation time Ta of safety box application record user, and if
Tw≥Ta+TThreshold value, then when user, which opens safety box, to apply, safety box application wakes up Safe controller and reresents user first
User's voucher is inputted, otherwise, safety box is applied just wakes up Safe controller, wherein T after user is authenticated successfullyThreshold valueIt is
Settable threshold time.
16. remote safe deposit box system as claimed in claim 1, wherein being controlled by GPS location user and using safety box
The IP address positioning remote safe deposit box for the wireless router that device is connected, and and if only if user is located in set geographic area
Or the position of user and remote safe deposit box, when meeting certain relation, the user could be obtained to the electronic lock of remote safe deposit box
Control.
17. a kind of method for running remote safe deposit box system, wherein the remote safe deposit box system includes：Long-range insurance
Case, it includes safe body, electronic lock and Safe controller, and the Safe controller passes through wireless connection and middle following the service
Business device communication；Relay Server；And the safety box application run on the mobile device of user, itself and the Relay Server
Communication, this method comprises the following steps：
Applied by safety box from user and receive first user's voucher；
Certification user and safety box is set up in the case of certification is successful using communication with Safe controller；
Applied by safety box from user and receive second user voucher；And
Second user voucher is transferred to Safe controller for user described in Safe controller certification, wherein into
The control to the electronic lock is provided a user by Safe controller in the case of work(certification user.
18. method as claimed in claim 17, wherein the wireless connection is Wi-Fi connection, this method also includes following step
Suddenly：
Record Wi-Fi access delays Tw；
Record the authentication operation time Ta of user；And
Tw is compared with Ta, if Tw >=Ta+TThreshold value, then when user, which opens safety box, to apply, safety box control is waken up first
Device reresents user's input user's voucher, otherwise, Safe controller, wherein T is just waken up after success identity userThreshold valueIt is
Settable threshold time.
19. a kind of remote safe deposit box, including：
Safe body；
Electronic lock；And
Safe controller, the Safe controller is connected to control the unlatching of the electronic lock by control line with electronic lock
And closing, and the Safe controller, by wireless connection and relay server, the Safe controller includes：
Memory, be stored with computer executable program on the memory；
Processor, it is configured as performing the computer executable program performing following action：
First user's voucher is inputted to Relay Server success identity by the safety box application run on mobile device in user
In the case of, pass through Relay Server and the safety box application communication；
Second user voucher by safety box application input is received from user by Relay Server；
Second user voucher described in certification；And
In the case of certification is successful the control to the electronic lock is assigned to user.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201510562365.8A CN105257145B (en) | 2015-09-07 | 2015-09-07 | Remote safe deposit box |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201510562365.8A CN105257145B (en) | 2015-09-07 | 2015-09-07 | Remote safe deposit box |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN105257145A CN105257145A (en) | 2016-01-20 |
| CN105257145B true CN105257145B (en) | 2017-09-15 |
Family
ID=55097043
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201510562365.8A Active CN105257145B (en) | 2015-09-07 | 2015-09-07 | Remote safe deposit box |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN105257145B (en) |
Families Citing this family (15)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN105721575B (en) * | 2016-02-06 | 2019-02-12 | 宁波耀龙软件科技有限公司 | High availability remote safe deposit box system and corresponding safety box |
| CN105611616B (en) * | 2016-02-06 | 2019-05-03 | 宁波耀龙软件科技有限公司 | For based on scene connection safety box method and corresponding safety box |
| WO2017147938A1 (en) * | 2016-03-04 | 2017-09-08 | 茹旷 | Intelligent electronic lock |
| CN107461109A (en) * | 2016-06-02 | 2017-12-12 | 刘轶群 | A kind of express delivery safety box and its monitoring method and device |
| CN106326875A (en) * | 2016-08-31 | 2017-01-11 | 张北江 | Security protection fingerprint recognition method and system |
| CN107733652B (en) * | 2017-09-13 | 2021-05-25 | 捷德(中国)科技有限公司 | Unlocking method and system for shared vehicle and vehicle lock |
| CN108280581B (en) * | 2018-01-26 | 2022-06-03 | 中国银行股份有限公司 | Article management method and device |
| WO2019209842A1 (en) * | 2018-04-24 | 2019-10-31 | Spectrum Brands, Inc. | Certificate provisioning for electronic lock authentication to a server |
| CN109215307A (en) * | 2018-09-26 | 2019-01-15 | 宁波耀龙软件科技有限公司 | A kind of intelligent alarm device Internet-based |
| CN111119655B (en) * | 2019-12-12 | 2021-08-03 | 创斯达科技集团(中国)有限责任公司 | Lock control system, safe and lock control method based on communication module |
| CN111464652A (en) * | 2020-04-07 | 2020-07-28 | 中国建设银行股份有限公司 | Bank safe deposit box service providing method and device |
| CN111554055A (en) * | 2020-04-27 | 2020-08-18 | 中国银行股份有限公司 | Full-automatic safety device |
| CN113343946A (en) * | 2021-08-02 | 2021-09-03 | 深圳市顺易通信息技术有限公司 | Cross-connection cabinet based on Internet of things and control system and control method thereof |
| CN114422246A (en) * | 2022-01-20 | 2022-04-29 | 国家药品监督管理局信息中心(中国食品药品监管数据中心) | Data reading method and system and electronic equipment |
| CN114673427A (en) * | 2022-04-29 | 2022-06-28 | 中国农业银行股份有限公司 | Safe box control method and device and safe box system |
Citations (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN201738727U (en) * | 2010-06-07 | 2011-02-09 | 宁波永发集团有限公司 | Safety cabinet |
| CN102831721A (en) * | 2012-08-03 | 2012-12-19 | 杭州九树网络科技有限公司 | Intelligent safe deposit box system and control method |
Family Cites Families (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US9000916B2 (en) * | 2010-09-28 | 2015-04-07 | A. P. Unix Software | Centrally controlled safe management system |
-
2015
- 2015-09-07 CN CN201510562365.8A patent/CN105257145B/en active Active
Patent Citations (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN201738727U (en) * | 2010-06-07 | 2011-02-09 | 宁波永发集团有限公司 | Safety cabinet |
| CN102831721A (en) * | 2012-08-03 | 2012-12-19 | 杭州九树网络科技有限公司 | Intelligent safe deposit box system and control method |
Also Published As
| Publication number | Publication date |
|---|---|
| CN105257145A (en) | 2016-01-20 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN105257145B (en) | Remote safe deposit box | |
| CN102215221B (en) | Methods and systems for secure remote wake, boot, and login to a computer from a mobile device | |
| CN100387798C (en) | Electric key and electric lock device and realization method thereof | |
| CN104167029B (en) | A kind of intelligent lock and its operating method | |
| CN108055235A (en) | A kind of control method of smart lock, relevant device and system | |
| US9947154B2 (en) | Retrofitted keypad and method | |
| CN101599188B (en) | IPA security certification-based access control system | |
| CN205121680U (en) | Bluetooth lock system based on intelligent terminal | |
| CN104299300B (en) | The unblanking and close locking method of safety intelligent lock system based on NFC | |
| US8566579B2 (en) | Obfuscated authentication systems, devices, and methods | |
| CN105701873B (en) | A kind of Non-contact attendance recording method and attendance record system | |
| CN109300201A (en) | A kind of intelligent and safe lock and its encryption system and encryption method | |
| CN108460862A (en) | The method and electric lockset, lock system having with palmprint authentication and Mobile phone control lock | |
| CN204904392U (en) | Intelligent lock system is encrypted in high in clouds | |
| CN114448727B (en) | Information processing method and system based on industrial internet identification analysis system | |
| CN109035515A (en) | The control method and door-locking system of smart lock | |
| Ahtsham et al. | IoT based door lock surveillance system using cryptographic algorithms | |
| Tilala et al. | Home access control through a smart digital locking-unlocking system | |
| Feiri et al. | Efficient and secure storage of private keys for pseudonymous vehicular communication | |
| CN102833067A (en) | Trilateral authentication method and system and authentication state management method of terminal equipment | |
| US20190028470A1 (en) | Method For Verifying The Identity Of A Person | |
| CN202672887U (en) | Coded lock | |
| CN104054315A (en) | Secure information access over network | |
| CN103440695B (en) | A kind of mutual aid type lock system and control method thereof adopting asymmetric encryption techniques | |
| CN110113153A (en) | NFC secret key updating method, terminal and system |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |