CN105610792B - Near-field communication moves system of registering - Google Patents

Near-field communication moves system of registering Download PDF

Info

Publication number
CN105610792B
CN105610792B CN201510955499.6A CN201510955499A CN105610792B CN 105610792 B CN105610792 B CN 105610792B CN 201510955499 A CN201510955499 A CN 201510955499A CN 105610792 B CN105610792 B CN 105610792B
Authority
CN
China
Prior art keywords
terminal
registering
information
mobile intelligent
intelligent terminal
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Active
Application number
CN201510955499.6A
Other languages
Chinese (zh)
Other versions
CN105610792A (en
Inventor
郑紫微
潘洋
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Huzhou lingchuang Technology Co., Ltd
Original Assignee
Ningbo University
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Ningbo University filed Critical Ningbo University
Priority to CN201510955499.6A priority Critical patent/CN105610792B/en
Publication of CN105610792A publication Critical patent/CN105610792A/en
Application granted granted Critical
Publication of CN105610792B publication Critical patent/CN105610792B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Classifications

    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00Network architectures or network communication protocols for network security
    • H04L63/04Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks
    • H04L63/0407Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the identity of one or more communicating identities is hidden
    • H04L63/0421Anonymous communication, i.e. the party's identifiers are hidden from the other party or parties, e.g. using an anonymizer
    • GPHYSICS
    • G07CHECKING-DEVICES
    • G07CTIME OR ATTENDANCE REGISTERS; REGISTERING OR INDICATING THE WORKING OF MACHINES; GENERATING RANDOM NUMBERS; VOTING OR LOTTERY APPARATUS; ARRANGEMENTS, SYSTEMS OR APPARATUS FOR CHECKING NOT PROVIDED FOR ELSEWHERE
    • G07C1/00Registering, indicating or recording the time of events or elapsed time, e.g. time-recorders for work people
    • G07C1/10Registering, indicating or recording the time of events or elapsed time, e.g. time-recorders for work people together with the recording, indicating or registering of other data, e.g. of signs of identity
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00Network architectures or network communication protocols for network security
    • H04L63/08Network architectures or network communication protocols for network security for authentication of entities
    • H04L63/0884Network architectures or network communication protocols for network security for authentication of entities by delegation of authentication, e.g. a proxy authenticates an entity to be authenticated on behalf of this entity vis-à-vis an authentication entity
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/08Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords
    • H04L9/0816Key establishment, i.e. cryptographic processes or cryptographic protocols whereby a shared secret becomes available to two or more parties, for subsequent use
    • H04L9/0838Key agreement, i.e. key establishment technique in which a shared key is derived by parties as a function of information contributed by, or associated with, each of these
    • H04L9/0841Key agreement, i.e. key establishment technique in which a shared key is derived by parties as a function of information contributed by, or associated with, each of these involving Diffie-Hellman or related key agreement protocols
    • H04L9/0844Key agreement, i.e. key establishment technique in which a shared key is derived by parties as a function of information contributed by, or associated with, each of these involving Diffie-Hellman or related key agreement protocols with user authentication or key authentication, e.g. ElGamal, MTI, MQV-Menezes-Qu-Vanstone protocol or Diffie-Hellman protocols using implicitly-certified keys
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/08Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords
    • H04L9/0891Revocation or update of secret information, e.g. encryption key update or rekeying
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04WWIRELESS COMMUNICATION NETWORKS
    • H04W12/00Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/06Authentication
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04WWIRELESS COMMUNICATION NETWORKS
    • H04W4/00Services specially adapted for wireless communication networks; Facilities therefor
    • H04W4/80Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04WWIRELESS COMMUNICATION NETWORKS
    • H04W40/00Communication routing or communication path finding
    • H04W40/02Communication route or path selection, e.g. power-based or shortest path routing
    • H04W40/22Communication route or path selection, e.g. power-based or shortest path routing using selective relaying for reaching a BTS [Base Transceiver Station] or an access point
    • YGENERAL TAGGING OF NEW TECHNOLOGICAL DEVELOPMENTS; GENERAL TAGGING OF CROSS-SECTIONAL TECHNOLOGIES SPANNING OVER SEVERAL SECTIONS OF THE IPC; TECHNICAL SUBJECTS COVERED BY FORMER USPC CROSS-REFERENCE ART COLLECTIONS [XRACs] AND DIGESTS
    • Y02TECHNOLOGIES OR APPLICATIONS FOR MITIGATION OR ADAPTATION AGAINST CLIMATE CHANGE
    • Y02DCLIMATE CHANGE MITIGATION TECHNOLOGIES IN INFORMATION AND COMMUNICATION TECHNOLOGIES [ICT], I.E. INFORMATION AND COMMUNICATION TECHNOLOGIES AIMING AT THE REDUCTION OF THEIR OWN ENERGY USE
    • Y02D30/00Reducing energy consumption in communication networks
    • Y02D30/70Reducing energy consumption in communication networks in wireless communication networks

Abstract

The present invention relates to near-field communications to move system of registering, it is characterized in that, including mobile intelligent terminal, terminal of registering, visa terminal and a NFC link terminals of relaying fusion center and N (N >=3) being located near terminal of registering, visa terminal is separately connected mobile intelligent terminal and terminal of registering.When needing to register, information by the way that the second-generation identification card information of personnel to be registered and finger print information etc. to be related to personal information security encrypts, is stored to mobile intelligent terminal in advance, personnel to be registered are not required to expend the time and are lined up and register at terminal of registering, the information of registering that only mobile intelligent terminal need to prestore sends terminal of registering to through optimum N FC relayings, can quick, safety completion entirely register process, raising is registered efficiency;Meanwhile in being related to the more demanding occasions of registering such as secrecy, if the personnel of having registered leave terminal certain distance of registering, the attention device of the system of registering can make prompt, to remind the administrative staff that register, to further increase security of system energy.

Description

Near-field communication moves system of registering
Technical field
The present invention relates to the communications fields more particularly to a kind of near-field communication to move system of registering.
Background technology
During the daily operation of enterprises and institutions, various meetings and it is on and off duty be required for employee to register, with the palm Hold attendance.In existing mode of registering, fractional unit still uses traditional handwriting signature form, is susceptible to and is signed for people To situations such as, be unfavorable for grasping true attendance;Separately there is fractional unit although to use popular fingerprint typing label To or facial characteristics identification the emerging electronic signing mode such as register, but these new electronics register mode in efficiency side of registering Face has still had shortcoming.
For example, in the electronic signing mode identified using fingerprint typing or facial characteristics, at terminal of registering, when waiting for Personnel amount of registering is more, needs to be lined up and completes fingerprint typing or facial characteristics identification, this undoubtedly wastes the big of queuing personnel The time is measured, efficiency of registering is also reduced;In addition, since the finger print information and face feature information of personnel to be registered belong to individual's Privacy information, when the storage of these privacy informations is to registering in terminal, once personnel's leaving office or terminal of registering are invaded by disabled user Enter, leaking for personal information will certainly be caused, seriously threaten personal information security.
With the continuous development of the communication technology and intelligent terminal, there is near-field communication (Near Field Communication, abbreviation NFC) the NFC intelligent terminals of function continue to bring out.NFC is a kind of radio skill of short distance high frequency Art is from non-contact radio-frequency identification technology and point-to-point communication technological incorporation differentiation, 0 to 20cm apart from interior transmission Speed has 106Kbit/ seconds, 212Kbit/ seconds or three kinds of 424Kbit/ seconds, and can be automatic between different transmission speeds Switching.Important use pattern of the peer-to-peer mode as NFC, for realizing the data between different NFC intelligent terminals Interaction to connect multiple intelligent terminals for having NFC function, and passes through the point of link layer communication protocols realization data To a transmission.Advantage based on NFC technique in short distance point-to-point communication is combined NFC technique with the existing mode of registering, with Formation can solve the Current electronic insufficient movement system of registering of mode of registering and be possibly realized.
Invention content
It can either rapid and convenient completion the technical problem to be solved by the present invention is to provide one kind for the above-mentioned prior art It registers process, and the near-field communication movement for the personal information safety that can ensure to register is registered system.
Technical solution is used by the present invention solves above-mentioned technical problem:Near-field communication moves system of registering, feature It is, including mobile intelligent terminal, terminal of registering, visa terminal and the relaying fusion center being located near terminal of registering With a NFC link terminals of N (N >=3), visa terminal is separately connected mobile intelligent terminal and terminal of registering, wherein:
The mobile intelligent terminal includes microprocessor and is separately connected the China second-generation identity card scanner of microprocessor, refers to Line collector, the first encrypting module, SIM card, message processing module of registering, the first clock device, GPS positioning module, camera, sound Frequency collector, pulse transducer, heart rate sensor, memory, the first LTE communication module, the first bluetooth module, the first NFC moulds Block and the first frequency spectrum sensing module that idle frequency range can be detected;Wherein:
The China second-generation identity card scanner, fingerprint capturer are separately connected the first encrypting module, and the China second-generation identity card is swept It retouches device, fingerprint capturer, SIM card, the first clock device and GPS positioning module and is separately connected message processing module of registering;The label It is separately connected memory to message processing module, camera, audio collection device, pulse transducer and heart rate sensor;It is described to deposit Reservoir is separately connected the first LTE communication module, the first bluetooth module and the first NFC module;The message processing module point of registering The first bluetooth module and the first NFC module are not connected;The audio collection device, pulse transducer and heart rate sensor are separately connected First LTE communication module;Wherein:
On the one hand the China second-generation identity card scanner is believed to obtain the identity card of mobile intelligent terminal lawful owner Breath, and it is saved in memory after the encryption of the first encrypting module;On the other hand, encrypted ID card information to be sent to It registers message processing module;
The fingerprint capturer, on the one hand to acquire the finger print information of mobile intelligent terminal lawful owner, and through It is saved in memory after one encrypting module encryption;On the other hand encrypted finger print information is sent to information of registering Processing module;
The pulse transducer and heart rate sensor, to the corresponding arteries and veins for obtaining mobile intelligent terminal lawful owner respectively Information of fighting and heart rate information, and using the pulse information of acquisition and heart rate information as the individual of mobile intelligent terminal lawful owner Biological information is preserved;
The message processing module of registering, according to needs of registering, generation includes SIM card information, clock information and GPS fixed The basic information or to generate include that register basic information, ID card information, finger print information, personal biology is special of registering of position information The safety of reference breath is registered information, and the basic information that will register, safety information of registering respectively are sent to memory;
First NFC module, according to the order of microprocessor, register basic information or the safety that will be preserved in memory Information of registering is sent to terminal of registering;
The camera, audio collection device, for the corresponding video letter for obtaining mobile intelligent terminal lawful owner respectively Breath, audio-frequency information, and preserve video information, audio-frequency information to memory;
The terminal of registering includes central processing unit and is separately connected the second LTE communication module of central processing unit, Two NFC modules, the second bluetooth module, second clock device, Bluetooth signal energy detector, attention device, register information database and Second encrypting module;The information database of registering is separately connected the second LTE communication module, the second NFC module, the second bluetooth mould Block, the second encrypting module and second clock device;Wherein:
Second NFC module, communicates with the first NFC module, is sent out through the first NFC module to receive mobile intelligent terminal Register basic information or the safe information of registering sent, and it is saved in information database of registering;
The Bluetooth signal energy detector, in mobile intelligent terminal and first bluetooth mould of the terminal through pairing of registering After block, the second bluetooth module establish communication, the energy of Bluetooth signal, and the letter that the first bluetooth module identification number will be accompanied with are detected Breath and corresponding Bluetooth signal energy value are sent to central processing unit;
The information database of registering, to preserve register basic information or the safe letter of registering of mobile intelligent terminal transmission Breath, and register basic information or safe information addition time of reception label of registering to being preserved;
Second encrypting module, to be done the encryption process to the information of registering of the safety in information database of registering, to prevent Only identity information and finger print information leakage;
The second clock device, value is sent respectively to central processing unit and information data of registering at the time of will generate Library;
The central processing unit, on the one hand, the mobile intelligent terminal that information database is received is sent to judge to register Information of registering it is whether consistent with the information to prestore in information database of registering:When judging that information is consistent, then letter of registering is ordered Breath database does label of having registered to the name of mobile intelligent terminal owner;Otherwise, then label of not registering is done;Another party Face, when judging that the Bluetooth information received can be worth less than preset energy value, then order registers information database to intelligent movable end The name of end owner is left the table label, and order attention device sends out voice prompt;Otherwise, it registers information database and attention device Any operation is not done;
The visa terminal includes visa processor and is separately connected the third LTE communication module of visa processor and body Part identification number database, third LTE communication module connection identity number library;The visa terminal passes through first LTE communication module, third LTE communication module connect mobile intelligent terminal, it is described register terminal by the second LTE communication module, Third LTE communication module connects visa terminal, wherein:
The safety of register basic information or safe information of registering is realized between first NFC module and the second NFC module Communication process includes the following steps (1) to step (11):
(1) its true identity identification number is sent to visa terminal storage by mobile intelligent terminal, by the generation pair of visa terminal Shared secret key that should be between the anonymous identification number and visa terminal and mobile intelligent terminal of mobile intelligent terminal, and by Visa terminal sends the shared secret key generated to mobile intelligent terminal;Wherein:
The true identity identification number of mobile intelligent terminal is labeled as IDMobile, the anonymous identification number of mobile intelligent terminal Labeled as ID'Mobile, visa terminal label is TSM, and the true identity identification number of visa terminal TSM is denoted as IDTSM, visa terminal Shared secret key between mobile intelligent terminal is denoted as SKMobile-TSM
(2) its true identity identification number is sent to visa terminal storage by terminal of registering, and is generated by visa terminal, storage Shared secret key between the anonymous identification number and visa terminal and terminal of registering of terminal of registering;Wherein:
The true identity identification number for terminal of registering is labeled as IDRegistration, the anonymous identification labelled notation for terminal of registering For ID'Registration, the shared secret key between visa terminal and terminal of registering is denoted as SKRegistration-TSM
(3) mobile intelligent terminal sends visa solicited message and gives visa terminal, to obtain the anonymous body of mobile intelligent terminal Part identification number, and by the time of visa terminal record mobile intelligent terminal transmission visa solicited message and visa terminal, movement The generated time of secret key is shared between intelligent terminal;Wherein, the time of mobile intelligent terminal transmission visa solicited message is denoted as T1; The generated time that secret key is shared between visa terminal, mobile intelligent terminal is denoted as T2
(4) the self-position data (x that mobile intelligent terminal and terminal of registering will be obtained respectively respectivelyMobile,yMobile, zMobile) and (xRegistration,yRegistration,zRegistration) it is sent to relaying fusion center, by relaying fusion center to move The midpoint of dynamic intelligent terminal and terminal line of registering as the centre of sphere, using half of the mobile intelligent terminal away from terminal distance of registering as The radius of a ball establishes space sphere equation S;Wherein, the centre of sphere is denoted as O (xo,yo,zo), the radius of a ball is denoted as R0, sphere equation S calculates public Formula is as follows:
S:(x-xo)2+(y-yo)2+(z-zo)2=R0 2
(5) the self-position data (x that N number of NFC link terminals will be obtained respectively respectivelyRelay,n,yRelay,n,zRelay,n) and Signal to Noise Ratio (SNR)Relay,nIt is sent to relaying fusion center, judged by relaying fusion center, choose the optimum N FC for participating in near-field communication Link terminal;Wherein, relaying fusion center selection optimum N FC link terminal processes include the following steps (5-1) to step (5- 3):
(5-1) relays position data (x of the fusion center according to N number of NFC link terminalsRelay,n,yRelay,n,zRelay,n), sentence Disconnected (xRelay,n-xo)2+(yRelay,n-yo)2+(zRelay,n-zo)2≤R0 2When, then choose the corresponding NFC link terminals of the position data As the alternative link terminal for participating in near-field communication;Otherwise, if the position data of N number of NFC link terminals is satisfied by (xRelay,n- xo)2+(yRelay,n-yo)2+(zRelay,n-zo)2>R0 2When, then N number of NFC link terminals are rejected, by mobile intelligent terminal and are registered Terminal directly carries out near-field communication;
(5-2) relays signal-to-noise ratio of the fusion center according to each alternative link terminal, calculates and obtains each alternative link terminal The sincere coefficient of relaying;Wherein, the relaying sincerity coefficient of i-th of alternative link terminal is denoted as κRelay,i, relay sincere coefficient κRelay,i Calculation formula is as follows:
Wherein, N'(0≤N'≤N) be alternative link terminal number;
(5-3) relays fusion center according to each alternative link terminal apart from centre of sphere O (xo,yo,zo) distance dRelay,iAnd The relaying sincerity coefficient κ of each alternative link terminal obtainedRelay,i, obtain the participation coefficient ξ of each alternative link terminalRelay,i, and To participate in the alternative link terminal corresponding to coefficient maximum value as the optimum N FC link terminals for participating in near-field communication;Wherein, join With coefficient ξRelay,iCalculation formula it is as follows:
(6) mobile intelligent terminal is logical more than near field close to distance between terminal and mobile intelligent terminal and terminal of registering of registering When communication distance, mobile intelligent terminal sends near field communication request information and gives optimum N FC link terminals, by optimum N FC link terminals Forward the near field communication request information to terminal of registering;Wherein:
Near field communication request information includes the shared secret key between mobile intelligent terminal and terminal of registering SKMobile-Registration, terminal of registering generate visa random number n1(n1∈ (0,9) and n1∈ Z), mobile intelligent terminal send The time T of visa solicited message1, mobile intelligent terminal anonymous identification ID'Mobile, mobile intelligent terminal and visa it is whole Hold the shared secret key SK between TSMMobile-TSM;Wherein, near field communication request information flag is as follows:
SM-R(Request,ID'Mobile,n1,T1,SKMobile-TSM,SKMobile-Registration);
(7) terminal of registering is in the near-field communication for receiving the mobile intelligent terminal transmission forwarded through optimum N FC link terminals After solicited message, terminal of registering sends the anonymous identification ID' for including terminal of registeringRegistration, terminal of registering and visa Secret key SK is shared between terminalRegistration-TSMAnd the Licensing Authority of received mobile intelligent terminal near field communication request information Solicited message is authenticated to visa terminal;Wherein, Licensing Authority solicited message label is as follows:
SR-T(Request,ID'Mobile,ID'Registration,n1,T1,SKMobile-TSM,SKMobile-Registration, SKRegistration-TSM);
(8) register received by the Licensing Authority solicited message of terminal transmission of visa terminal information extraction and sentence It is disconnected, with the mobile intelligent terminal identity of certification request and terminal near-field communication of registering:
When the mobile intelligent terminal anonymous identification number that terminal of registering is extracted in Licensing Authority solicited message, move Shared between intelligent terminal and terminal of registering secret key and the shared secret key generated time with the shifting that is stored in visa terminal Dynamic intelligent terminal anonymous identification ID'Mobile, shared secret key SKMobile-TSM, shared secret key generated time T2When consistent, then Its shared secret key between terminal of registering of visa terminal-pair is updated, and sends license near-field communication information and new update Shared secret key to registering terminal;Otherwise, refusal near-field communication information is sent to terminal of registering;Wherein:
The license near-field communication information that visa terminal is sent includes that secret key is shared between mobile intelligent terminal and visa terminal SKMobile-TSM, the shared secret key SKMobile-TSMGenerated time T2, mobile intelligent terminal send certification request information time T1, updated shared secret key is denoted as SK' between visa terminal and terminal of registeringRegistration-TSM
License near-field communication information is ST-R(Accept,T1,T2,SKMobile-TSM,SKMobile-Registration, SKRegistration-TSM);Refusal near-field communication information is ST-R(Reject,SKRegistration-TSM);
(9) terminal of registering receives, stores itself and the updated shared secret key of visa terminal, and according to received visa terminal License near-field communication information or refusal near-field communication information, mobile intelligent terminal is sent through optimum N FC link terminals Near field communication request information, which is given, to be fed back:
When terminal of registering receives the license near-field communication information of visa terminal, then terminal of registering receives intelligent movable end The near field communication request sent is held, and generates and shares secret key for the update that terminal and mobile intelligent terminal are shared of registering SK'Mobile-Registration, while it includes that secret key generated time T is shared between mobile intelligent terminal and visa terminal to send2, register Terminal shares secret key SK' with mobile intelligent terminal updateMobile-Registration, terminal of registering anonymous identification number ID'RegistrationNear-field communication receive information to mobile intelligent terminal;Wherein, it is S that near-field communication, which receives information flag,R-P (Accept,ID'Registration,SK'Mobile-Registration,T2);
When terminal of registering receives the refusal near-field communication information of visa terminal, then terminal of registering refuses mobile intelligent terminal The near field communication request of transmission, and refusal near-field communication information is sent to mobile intelligent terminal;Wherein, refuse near-field communication information It is denoted as SR-P(Reject,SKMobile-Registration);
(10) mobile intelligent terminal receives the information of the terminal transmission of registering through optimum N FC relay forwardings, and according to being connect Breath of collecting mail is judged and is operated:
When received information is that near-field communication receives information, mobile intelligent terminal extracts near-field communication and receives institute in information Including mobile intelligent terminal and visa terminal between share secret key TimeGenerated value, and when judging that the shared secret key of extraction generates Between value with mobile intelligent terminal itself storage shared secret key TimeGenerated value T2When consistent, then mobile intelligent terminal is realized and is signed To the secure communication process between terminal, by register basic information or the safe information transmission of registering of mobile intelligent terminal user To registering, terminal is registered, and sent after the completion of secure communication by mobile intelligent terminal update share secret key solicited message to Visa terminal;Otherwise, when received information is refusal near-field communication information, mobile intelligent terminal, which stops transmission near-field communication, asks Ask information to terminal of registering;Wherein:
It includes the true identity mark for having mobile intelligent terminal that secret key solicited message is shared in the update that mobile intelligent terminal is sent Knowledge IDMobile, terminal of registering anonymous identification ID'Registration, mobile intelligent terminal and visa terminal update before Shared secret key SKMobile-TSM;Update shares secret key solicited message and is denoted as SM-T(Renew,IDMobile,ID'Registration, SKRegistration-TSM);
(11) after visa terminal receives the shared secret key request of update that mobile intelligent terminal is sent, visa terminal updates it Shared secret key between mobile intelligent terminal obtains updated shared secret key, and new updated shared secret key is sent To mobile intelligent terminal, used so that mobile intelligent terminal carries out the when of registering next time;Wherein, updated shared secret key is denoted as SK'Mobile-TSM
Done at terminal of registering using mobile intelligent terminal in order to facilitate personnel it is hand-written register, as an improvement, the movement Intelligent terminal further includes the touch screen for inputting handwritten signature information, and the touch screen connects microprocessor.
Compared with the prior art, the advantages of the present invention are as follows:In the present invention near-field communication movement the system of registering pass through by Information of registering that second-generation identification card information and finger print information etc. of the personnel to be registered of acquisition is related to personal information security is encrypted, It is stored in mobile intelligent terminal in advance;When needing to register, personnel to be registered need not expend the time and be lined up label at terminal of registering It arrives, personnel to be registered only need pre-stored information of registering in mobile intelligent terminal through the optimum N FC near terminal of registering Relaying sends terminal of registering to, you can quick, safety completion is entirely registered process, and the efficiency of registering of system is improved;Meanwhile In being related to the more demanding occasions of registering such as secrecy, if the personnel of having registered leave terminal certain distance of registering, this is registered Attention device in system can also make prompt, to remind the administrative staff that register, to further improve the security performance of system.
Description of the drawings
Fig. 1 is the structural schematic diagram that near-field communication moves system of registering in the embodiment of the present invention;
Fig. 2 is the flow diagram of the first NFC module and the second NFC module secure communication in system shown in Figure 1.
Specific implementation mode
Below in conjunction with attached drawing embodiment, present invention is further described in detail.
As shown in Figure 1, near-field communication movement is registered system in the present embodiment, including mobile intelligent terminal 1, terminal of registering 2, Visa terminal 3 and the relaying fusion center 4 being located near terminal 2 of registering and a NFC link terminals 5 of N (N >=3), In:
Mobile intelligent terminal 1 includes microprocessor 100 and the China second-generation identity card scanner for being separately connected microprocessor 100 101, fingerprint capturer 102, the first encrypting module 103, SIM card 104, message processing module 105 of registering, the first clock device 106, GPS positioning module 107, camera 108, audio collection device 109, pulse transducer 110, heart rate sensor 111, memory 112, First LTE communication module 113, the first bluetooth module 114, the first NFC module 115 and the first frequency that idle frequency range can be detected Compose sensing module 116;Wherein:
China second-generation identity card scanner 101, fingerprint capturer 102 are separately connected the first encrypting module 103, and China second-generation identity card is swept It retouches device 101, fingerprint capturer 102, SIM card 104, the first clock device 106 and GPS positioning module 107 and is separately connected information of registering Processing module 105;Register message processing module 105, camera 108, audio collection device 109, pulse transducer 110 and heart rate passes Sensor 111 is separately connected memory 112;Memory 112 is separately connected the first LTE communication module 113, the first bluetooth module 114 With the first NFC module 115;Message processing module 105 of registering is separately connected the first bluetooth module 114 and the first NFC module 115; Audio collection device 109, pulse transducer 110 and heart rate sensor 111 are separately connected the first LTE communication module 113;Wherein:
China second-generation identity card scanner 101, on the one hand to obtain the ID card information of mobile intelligent terminal lawful owner, And it is saved in memory 112 after the encryption of the first encrypting module 103;On the other hand, encrypted ID card information to be sent out Give message processing module 105 of registering;
Fingerprint capturer 102, on the one hand to acquire the finger print information of mobile intelligent terminal lawful owner, and through first It is saved in memory 112 after 103 encryption of encrypting module;On the other hand it registers encrypted finger print information to be sent to Message processing module 105;The finger print information that fingerprint capturer 102 acquires can also both be made as conventional information of registering It is special occasions to the authentication information of specific participant's identity, such as when be related to the special occasions such as secrecy meeting.
Pulse transducer 110 and heart rate sensor 111 obtain mobile intelligent terminal lawful owner's to corresponding respectively Pulse information and heart rate information, and using the pulse information of acquisition and heart rate information as of mobile intelligent terminal lawful owner People's biological information preserves;
It registers message processing module 105, according to needs of registering, generation includes SIM card information, clock information and GPS fixed The basic information or to generate include that register basic information, ID card information, finger print information, personal biology is special of registering of position information The safety of reference breath is registered information, and the basic information that will register, safety information of registering respectively are sent to memory 112;Wherein, Basic information of registering herein is registered the acquisition of information for conventional, and safety registers information then as special occasions to participant Member shows up the acquisition of information of registering;
First NFC module 115, according to the order of microprocessor 100, the basic information of registering that will be preserved in memory 112 Or safe information of registering is sent to terminal 2 of registering.Since traditional mode of registering is personnel's typing hand in person at terminal of registering The fingerprint of finger invades terminal inner of registering due to the finger print information of a large amount of personnel of terminal storage of registering when there is illegal third party When stealing finger print information, it is bound to cause the finger print information leakage of a large amount of personnel, serious prestige is caused to the information security for the personnel of registering The side of body.In the present embodiment, personnel to be registered using mobile intelligent terminal 1 by the information of registering including finger print information of acquisition It is transmitted to terminal 2 of registering by the near-field communication between the first NFC module 115, the second NFC module 22, to complete safely, quickly to sign It arrives.
Camera 108, audio collection device 109, for the corresponding video for obtaining mobile intelligent terminal lawful owner respectively Information, audio-frequency information, and preserve video information, audio-frequency information to memory 112;
Terminal of registering 2 include central processing unit 20 and be separately connected central processing unit 20 the second LTE communication module 21, Second NFC module 22, second clock device 24, Bluetooth signal energy detector 25, attention device 26, is registered at second bluetooth module 23 Information database 27 and the second encrypting module 28;Information database 27 of registering is separately connected the second LTE communication module 21, second NFC module 22, the second bluetooth module 23, the second encrypting module 24 and second clock device 24;Wherein:
Second NFC module 22 realizes near-field communication with the first NFC module 115, to receive mobile intelligent terminal 1 through the Register basic information or the safe information of registering of one NFC module 115 transmission, and it is saved in information database 27 of registering;
Bluetooth signal energy detector 25, in mobile intelligent terminal 1 and first bluetooth mould of the terminal 2 through pairing of registering After block 114, the second bluetooth module 23 establish communication, the energy of Bluetooth signal is detected, and the first bluetooth module 114 will be accompanied with and marked The information of knowledge number and corresponding Bluetooth signal energy value are sent to central processing unit 20;
For example, setting the identification number of the first bluetooth module of a mobile intelligent terminal 1 as BluetoothA, the bluetooth mould Block BluetoothAIt is E with the Bluetooth signal energy value after 23 paired communication of the second bluetooth moduleBluetoothA, then in terminal of registering 2 Bluetooth signal energy detector by the first bluetooth module identification number BluetoothAAnd its Bluetooth signal energy when communication Value EBluetoothAIt is sent to the processing of central processing unit 20;
Register information database 27, to preserve the transmission of mobile intelligent terminal 1 register basic information or safety is registered letter Breath, and register basic information or safe information addition time of reception label of registering to being preserved;By by second clock device 24 At the time of label be added to and register basic information or safety is registered in information, can be in order to being inquired in information database 27 of registering The specific time registered with grasp everyone;
Second encrypting module 28, to be done the encryption process to the information of registering of the safety in information database 27 of registering, to prevent Only identity information and finger print information leakage;
Second clock device 24, value is sent respectively to central processing unit 20 and information database of registering at the time of will generate 27;
Central processing unit 20, on the one hand, the mobile intelligent terminal 1 that information database 27 is received is sent to judge to register Information of registering it is whether consistent with the information to prestore in information database 27 of registering:When judging that information is consistent, then order is registered Information database 27 does label of having registered to the name of mobile intelligent terminal owner;Otherwise, then label of not registering is done;It is another Aspect indicates the corresponding mobile intelligent terminal of the bluetooth module when judging that the Bluetooth information received can be worth less than preset energy value Terminal 2 of registering is had been moved off, the owner of the mobile intelligent terminal has left the table, then order registers information database 27 to the movement The name of intelligent terminal owner is left the table label, and order attention device 26 sends out voice prompt, to remind the administrative staff that register; Otherwise, it registers information database 27 and attention device 26 does not do any operation;
Visa terminal 3 includes visa processor 30 and the third LTE communication module 31 for being separately connected visa processor 30 With identity number library 32, third LTE communication module 31 connects identity number library 32;Wherein:
Visa processor 30, on the one hand, to the mobile intelligent terminal true identity mark sent according to mobile intelligent terminal 1 Knowledge number and visa request generate the anonymous identification number of mobile intelligent terminal and are communicated between visa terminal 3 shared secret Key;On the other hand, according to the 2 true identity identification number of terminal of registering for the transmission of terminal 2 of registering, the anonymous body for terminal 2 of registering is generated Part identification number and the shared secret key communicated between terminal 2, visa terminal 3 of registering;
Identity number library 32, to store the mobile intelligent terminal anonymous identification of visa processor generation Number, terminal of registering anonymous identification number and visa terminal it is shared secret between mobile intelligent terminal, terminal of registering respectively Key, storage mobile intelligent terminal send the time of visa request;
Third LTE communication module 31, to realize visa terminal 3 respectively between mobile intelligent terminal 1, terminal of registering 2 Information transmission, and by identity number library anonymous identification number, shared secret key set is corresponding is sent to shifting Dynamic intelligent terminal 1 and terminal 2 of registering;Visa terminal 3 is connected by the first LTE communication module 113, third LTE communication module 31 Mobile intelligent terminal 1, terminal of registering 2 connect visa terminal 3 by the second LTE communication module 21, third LTE communication module 31.
Done at terminal of registering using mobile intelligent terminal in order to facilitate personnel it is hand-written register, mobile intelligent terminal 1 also wraps Include to input the touch screen 117 of handwritten signature information, touch screen 117 connects microprocessor 100.For example, when personnel are in movement After signing on the touch screen 117 of intelligent terminal 1, then pass through the near-field communication between mobile intelligent terminal 1 and terminal 2 of registering, people The signing messages of member can be sent to terminal 2 of registering, and is saved in and registers information database 27.
As shown in Fig. 2, between the first NFC module 115 and the second NFC module 22 realize register basic information or safety register The secure communication process of information includes the following steps 1 to step 11:
Step 1, its true identity identification number is sent to visa terminal storage by mobile intelligent terminal, is generated by visa terminal Shared secret key between the anonymous identification number and visa terminal and mobile intelligent terminal of the corresponding mobile intelligent terminal, and The shared secret key generated is sent by visa terminal to mobile intelligent terminal;
Wherein, the true identity identification number of mobile intelligent terminal is labeled as IDMobile, the anonymous Identity of mobile intelligent terminal Identification number is labeled as ID'Mobile, visa terminal label is TSM, and the true identity identification number of visa terminal TSM is denoted as IDTSM, label Shared secret key between card terminal and mobile intelligent terminal is denoted as SKMobile-TSM;When mobile intelligent terminal is communicated with visa terminal, It needs to send shared secret key SK between the twoMobile-TSM, to verify the legal identity of the two each other;
Step 2, its true identity identification number is sent to visa terminal storage by terminal of registering, and generated by visa terminal, Store the shared secret key between the anonymous identification number and visa terminal and terminal of registering for terminal of registering;Wherein, it registers end The true identity identification number at end is labeled as IDRegistration, the anonymous identification labelled notation for terminal of registering is ID'Registration, Shared secret key between visa terminal and terminal of registering is denoted as SKRegistration-TSM
Step 3, mobile intelligent terminal sends visa solicited message and gives visa terminal, to obtain the anonymity of mobile intelligent terminal Identity number, and by the time of visa terminal record mobile intelligent terminal transmission visa solicited message and visa terminal, shifting The generated time of secret key is shared between dynamic intelligent terminal;
Wherein, the time of mobile intelligent terminal transmission visa solicited message is denoted as T1;Visa terminal, mobile intelligent terminal it Between share secret key generated time be denoted as T2;Wherein, the shared secret key SK of visa terminal and mobile intelligent terminalMobile-TSM, it is mobile Intelligent terminal sends the time T of certification request information1And shared secret key SKMobile-TSMGenerated time T2Only visa terminal Know with mobile intelligent terminal, other third parties, such as terminal of registering, disabled user's terminal cannot get the shared secret key SKMobile-TSM, with this by by shared secret key SKMobile-TSM, certification request access time T1With shared secret key SKMobile-TSMGenerated time T2As the encryption information of mobile intelligent terminal and visa terminal, to ensure mobile intelligent terminal Information security;
Step 4, the self-position data (x that mobile intelligent terminal and terminal of registering will be obtained respectively respectivelyMobile,yMobile, zMobile) and (xRegistration,yRegistration,zRegistration) it is sent to relaying fusion center, by relaying fusion center to move The midpoint of dynamic intelligent terminal and terminal line of registering as the centre of sphere, using half of the mobile intelligent terminal away from terminal distance of registering as The radius of a ball establishes space sphere equation S;Wherein, the centre of sphere is denoted as O (xo,yo,zo), the radius of a ball is denoted as R0, sphere equation S calculates public Formula is as follows:
S:(x-xo)2+(y-yo)2+(z-zo)2=R0 2
In the step 4, by establishing the sphere equation in space, mainly structure limits spatial dimension, will be apart from shifting The closer NFC link terminals of dynamic intelligent terminal, terminal of registering choose, to improve NFC link terminals to mobile intelligent terminal The relay transmission efficiency of the data interaction between terminal of registering, time caused by preventing personnel from short distance queuing being needed to register waste Problem, to improve the efficiency of registering of whole system;
Step 5, the self-position data (x that N number of NFC link terminals will be obtained respectively respectivelyRelay,n,yRelay,n,zRelay,n) And Signal to Noise Ratio (SNR)Relay,nIt is sent to relaying fusion center, judged by relaying fusion center, choose the best of participation near-field communication NFC link terminals;Wherein, relaying fusion center selection optimum N FC link terminal processes include the following steps 5-1 to step 5-3:
Step 5-1 relays position data (x of the fusion center according to N number of NFC link terminalsRelay,n,yRelay,n, zRelay,n), judge (xRelay,n-xo)2+(yRelay,n-yo)2+(zRelay,n-zo)2≤R0 2When, then it is corresponding to choose the position data NFC link terminals are as the alternative link terminal for participating in near-field communication;Otherwise, if the position data of N number of NFC link terminals is full Foot (xRelay,n-xo)2+(yRelay,n-yo)2+(zRelay,n-zo)2>R0 2When, then N number of NFC link terminals are rejected, by intelligent movable Terminal and terminal of registering directly carry out near-field communication;Wherein, the quantity of the alternative link terminal of selection is set as N', it is known that, it is standby Select the number N '≤N of link terminal;
Step 5-2, relaying fusion center calculate according to the signal-to-noise ratio of each alternative link terminal and obtain each alternative link terminal Relaying sincerity coefficient;Wherein, the relaying sincerity coefficient of i-th of alternative link terminal is denoted as κRelay,i, relay sincere coefficient κRelay,iCalculation formula is as follows:
Wherein, N'(0≤N'≤N) be alternative link terminal number;
Wherein, the relay capabilities that sincere coefficient characterizes alternative link terminal are relayed, the relaying of alternative link terminal is sincere It is higher, illustrate that the relay capabilities of the alternative link terminal are higher, corresponds to the alternative link terminal in mobile intelligent terminal and label To having higher relay transmission efficiency between terminal, it is possible thereby to improve personnel using mobile intelligent terminal at terminal of registering Efficiency of registering;
Step 5-3, relaying fusion center is according to each alternative link terminal apart from centre of sphere O (xo,yo,zo) distance dRelay,i And the relaying sincerity coefficient κ of each alternative link terminal obtainedRelay,i, obtain the participation coefficient of each alternative link terminal ξRelay,i, and it is whole as the optimum N FC relayings for participating in near-field communication to participate in the alternative link terminal corresponding to coefficient maximum value End;Wherein, coefficient ξ is participated inRelay,iCalculation formula it is as follows:
In step 5-3, fully considered alternative link terminal relaying sincerity coefficient and alternative link terminal away from With a distance from the centre of sphere, the signal-to-noise ratio and transmission speed problem of alternative link terminal can be preferably taken into account, to according to participation The numerical value situation of coefficient selects best NFC link terminals;
Wherein, the participation coefficient of alternative link terminal is higher, shows that the NFC link terminals have higher junction efficiency; In near-field communication provided by the invention payment, the highest NFC link terminals of coefficient are participated in by being chosen in NFC link terminals It is relayed as optimum N FC, to carry out data interaction between mobile intelligent terminal and terminal of registering using optimum N FC relayings Transmission, to increase the communication distance of register terminal and mobile intelligent terminal;
Step 6, mobile intelligent terminal is more than close close to distance between terminal and mobile intelligent terminal and terminal of registering of registering When the communication distance of field, mobile intelligent terminal sends near field communication request information and gives optimum N FC link terminals, is relayed by optimum N FC Terminal forwards the near field communication request information to terminal of registering;
Wherein, near field communication request information includes the shared secret key between mobile intelligent terminal and terminal of registering SKMobile-Registration, terminal of registering generate visa random number n1(n1∈ (0,9) and n1∈ Z), mobile intelligent terminal send The time T of visa solicited message1, mobile intelligent terminal anonymous identification ID'Mobile, mobile intelligent terminal and visa it is whole Hold the shared secret key SK between TSMMobile-TSM;Wherein, near field communication request information flag is as follows:
SM-R(Request,ID'Mobile,n1,T1,SKMobile-TSM,SKMobile-Registration);
Wherein, secret key SK is sharedMobile-TSMIt is unknown for terminal of registering;Thus terminal of registering can only be got The anonymous identification ID' of mobile intelligent terminalMobile, the true identity identification number of mobile intelligent terminal can not be obtained IDMobile;It can ensure that the information security of mobile intelligent terminal in this way;
Step 7, terminal of registering is logical in the near field for receiving the mobile intelligent terminal transmission forwarded through optimum N FC link terminals After believing solicited message, terminal of registering sends the anonymous identification ID' for including terminal of registeringRegistration, terminal of registering with label Secret key SK is shared between card terminalRegistration-TSMAnd the license of received mobile intelligent terminal near field communication request information is recognized Card solicited message is authenticated to visa terminal;Wherein, Licensing Authority solicited message label is as follows:
SR-T(Request,ID'Mobile,ID'Registration,n1,T1,SKMobile-TSM,SKMobile-Registration, SKRegistration-TSM);
Wherein, the shared secret key SK in Licensing Authority solicited message transmitted by terminal of registeringRegistration-TSMTo enable label Card terminal-pair terminal identity of registering is verified, and communication between the two is realized after being verified;
Step 8, visa terminal register received by terminal transmission Licensing Authority solicited message carry out information extraction And judgement, with the mobile intelligent terminal identity of certification request and terminal near-field communication of registering:
When the mobile intelligent terminal anonymous identification number that terminal of registering is extracted in Licensing Authority solicited message, move Shared between intelligent terminal and terminal of registering secret key and the shared secret key generated time with the shifting that is stored in visa terminal Dynamic intelligent terminal anonymous identification ID'Mobile, shared secret key SKMobile-TSM, shared secret key generated time T2When consistent, then Its shared secret key between terminal of registering of visa terminal-pair is updated, and sends license near-field communication information and new update Shared secret key to registering terminal;Otherwise, refusal near-field communication information is sent to terminal of registering;
Wherein, the license near-field communication information that visa terminal is sent includes being shared between mobile intelligent terminal and visa terminal Secret key SKMobile-TSM, the shared secret key SKMobile-TSMGenerated time T2, mobile intelligent terminal send certification request information when Between T1, updated shared secret key is denoted as SK' between visa terminal and terminal of registeringRegistration-TSM
License near-field communication information is ST-R(Accept,T1,T2,SKMobile-TSM,SKMobile-Registration, SKRegistration-TSM);Refusal near-field communication information is ST-R(Reject,SKRegistration-TSM);
Step 9, terminal of registering receives, stores itself and the updated shared secret key of visa terminal, and according to received visa The license near-field communication information or refusal near-field communication information of terminal, send out mobile intelligent terminal through optimum N FC link terminals The near field communication request information sent, which is given, to be fed back:
When terminal of registering receives the license near-field communication information of visa terminal, then terminal of registering receives intelligent movable end The near field communication request sent is held, and generates and shares secret key for the update that terminal and mobile intelligent terminal are shared of registering SK'Mobile-Registration, while it includes that secret key generated time T is shared between mobile intelligent terminal and visa terminal to send2, register Terminal shares secret key SK' with mobile intelligent terminal updateMobile-Registration, terminal of registering anonymous identification number ID'RegistrationNear-field communication receive information to mobile intelligent terminal;Wherein, it is S that near-field communication, which receives information flag,R-P (Accept,ID'Registration,SK'Mobile-Registration,T2);
When terminal of registering receives the refusal near-field communication information of visa terminal, then terminal of registering refuses mobile intelligent terminal The near field communication request of transmission, and refusal near-field communication information is sent to mobile intelligent terminal;Wherein, refuse near-field communication information It is denoted as SR-P(Reject,SKMobile-Registration);
Step 10, mobile intelligent terminal receives the information of the terminal transmission of registering through optimum N FC relay forwardings, and according to institute Information is received to judge and operate:
When received information is that near-field communication receives information, mobile intelligent terminal extracts near-field communication and receives institute in information Including mobile intelligent terminal and visa terminal between share secret key TimeGenerated value, and when judging that the shared secret key of extraction generates Between value with mobile intelligent terminal itself storage shared secret key TimeGenerated value T2When consistent, then mobile intelligent terminal is realized and is signed To the secure communication process between terminal, by register basic information or the safe information transmission of registering of mobile intelligent terminal user To registering, terminal is registered, and sent after the completion of secure communication by mobile intelligent terminal update share secret key solicited message to Visa terminal;Otherwise, when received information is refusal near-field communication information, mobile intelligent terminal, which stops transmission near-field communication, asks Ask information to terminal of registering;Wherein:
It includes the true identity mark for having mobile intelligent terminal that secret key solicited message is shared in the update that mobile intelligent terminal is sent Knowledge IDMobile, terminal of registering anonymous identification ID'Registration, mobile intelligent terminal and visa terminal update before Shared secret key SKMobile-TSM;Update shares secret key solicited message and is denoted as SM-T(Renew,IDMobile,ID'Registration, SKRegistration-TSM);
Wherein, it updates the purpose for sharing secret key between visa terminal and terminal of registering to be, prevents from having used shared secret key quilt When reusing, ensure the information security of terminal of registering.Once terminal of registering is repeated use with shared secret key, then If other third parties get the shared secret key being used again, third party will illegally obtain the letter of cash receiving terminal Breath, threatens to the safety of near-field communication payment system;
Step 11, after visa terminal receives the shared secret key request of update that mobile intelligent terminal is sent, visa terminal is more Its new shared secret key between mobile intelligent terminal obtains updated shared secret key, and will new updated shared secret key It is sent to mobile intelligent terminal, is used so that mobile intelligent terminal carries out the when of registering next time;Wherein, updated shared secret key note For SK'Mobile-TSM
Below in conjunction with Fig. 1, the working condition that system of registering is moved to near-field communication in the embodiment of the present invention is explained:
Personnel to be registered advance with mobile intelligent terminal 1, and the second-generation identification card information of itself and finger print information is right respectively After acquiring the scanning of China second-generation identity card scanner 101, fingerprint capturer 102 with answering, after the encryption of the first encrypting module 103, protect It is stored in the memory 112 of mobile intelligent terminal 1, and by message processing module 105 of registering according to second-generation identification card information, fingerprint The current position determination data that information and GPS positioning module 107 obtain generates corresponding information of registering;When personnel to be registered gradually lean on At nearly terminal 2 of registering, establishes mobile intelligent terminal 1 and obtain anonymous identification number at visa terminal 3, and pass through optimum N FC Relay forwarding function realizes near field communication processes safe between mobile intelligent terminal 1 and terminal 2 of registering, and sends information of registering To registering, terminal 2 stores, and the data for the personnel that registered, which are then saved in, registers information database 27, and for registering, administrative staff look into It askes and grasps;If according to needs of registering, handwritten signature can also be stored in advance in memory 112, in order to subsequently register When directly transmit handwritten signature to register terminal 2 storage;
When the Bluetooth signal energy detector 25 in terminal 2 of registering detects the Bluetooth signal energy of the mobile intelligent terminal 1 When amount is less than preset energy value, then the attention device 26 in terminal of registering 2 generates prompt, to remind the administrative staff that register;Otherwise, it signs Any operation is not done to information database 27 and attention device 26.
The near-field communication moves the second-generation identification card information and fingerprint letter that system of registering passes through the personnel to be registered that will be acquired Breath etc. be related to personal information security information of registering it is encrypted, be stored in mobile intelligent terminal in advance;When needing to register, wait registering Personnel need not expend the time and be lined up and register at terminal of registering, and personnel to be registered only need in advance to deposit in mobile intelligent terminal The information of registering of storage sends terminal of registering to through the optimum N FC relayings near terminal of registering, you can quick, safety completion is entire It registers process, improves the efficiency of registering of system;Meanwhile in being related to the more demanding occasions of registering such as secrecy, if signed Terminal certain distance of registering is left to personnel, then the attention device in the system of registering can also make prompt, to remind management of registering Personnel, to further improve the security performance of system.

Claims (2)

1. near-field communication movement is registered system, which is characterized in that including mobile intelligent terminal, terminal of registering, visa terminal and The relaying fusion center and a NFC link terminals of N (N >=3), visa terminal being located near terminal of registering are separately connected movement Intelligent terminal and terminal of registering, wherein:
The mobile intelligent terminal includes microprocessor and is separately connected China second-generation identity card scanner, the fingerprint of microprocessor and adopts Storage, the first encrypting module, SIM card, message processing module of registering, the first clock device, GPS positioning module, camera, audio are adopted Storage, pulse transducer, heart rate sensor, memory, the first LTE communication module, the first bluetooth module, the first NFC module with And the first frequency spectrum sensing module of idle frequency range can be detected;Wherein:
The China second-generation identity card scanner, fingerprint capturer are separately connected the first encrypting module, the China second-generation identity card scanner, Fingerprint capturer, SIM card, the first clock device and GPS positioning module are separately connected message processing module of registering;The information of registering Processing module, camera, audio collection device, pulse transducer and heart rate sensor are separately connected memory;The memory point The first LTE communication module, the first bluetooth module and the first NFC module are not connected;The message processing module of registering is separately connected First bluetooth module and the first NFC module;The audio collection device, pulse transducer and heart rate sensor are separately connected first LTE communication module;Wherein:
The China second-generation identity card scanner, on the one hand to obtain the ID card information of mobile intelligent terminal lawful owner, and It is saved in memory after the encryption of the first encrypting module;On the other hand, it registers encrypted ID card information to be sent to Message processing module;
The fingerprint capturer on the one hand to acquire the finger print information of mobile intelligent terminal lawful owner, and adds through first It is saved in memory after close module encryption;On the other hand encrypted finger print information is sent to information processing of registering Module;
The pulse transducer and heart rate sensor, to the corresponding pulse letter for obtaining mobile intelligent terminal lawful owner respectively Breath and heart rate information, and using the pulse information of acquisition and heart rate information as individual's biology of mobile intelligent terminal lawful owner Characteristic information is preserved;
The message processing module of registering, according to needs of registering, generation includes SIM card information, clock information and GPS positioning letter Breath register basic information or generate include register basic information, ID card information, finger print information, personal biology characteristics letter The safety of breath is registered information, and the basic information that will register, safety information of registering respectively are sent to memory;
First NFC module, according to the order of microprocessor, by preserved in memory register basic information or safety is registered Information is sent to terminal of registering;
The camera, audio collection device, for the corresponding video information for obtaining mobile intelligent terminal lawful owner, sound respectively Frequency information, and preserve video information, audio-frequency information to memory;
The terminal of registering includes central processing unit and is separately connected the second LTE communication module of central processing unit, the 2nd NFC Module, the second bluetooth module, second clock device, Bluetooth signal energy detector, attention device, information database and second of registering add Close module;The information database of registering is separately connected the second LTE communication module, the second NFC module, the second bluetooth module, Two encrypting modules and second clock device;Wherein:
Second NFC module, communicates with the first NFC module, is sent through the first NFC module receiving mobile intelligent terminal It registers basic information or safety is registered information, and be saved in information database of registering;
The Bluetooth signal energy detector, to mobile intelligent terminal and first bluetooth module of the terminal through pairing of registering, After second bluetooth module establishes communication, the energy of Bluetooth signal, and the information that the first bluetooth module identification number will be accompanied with are detected And corresponding Bluetooth signal energy value is sent to central processing unit;
The information database of registering, to preserve register basic information or the safe information of registering of mobile intelligent terminal transmission, And register basic information or safe information addition time of reception label of registering to being preserved;
Second encrypting module, to be done the encryption process to the information of registering of the safety in information database of registering, to prevent body Part information and finger print information leakage;
The second clock device, value is sent respectively to central processing unit and information database of registering at the time of will generate;
The central processing unit, on the one hand, the label sent to the mobile intelligent terminal that the information database that judges to register is received It is whether consistent with the information to prestore in information database of registering to information:When judging that information is consistent, then Information Number of registering is ordered Label of having registered is done to the name of mobile intelligent terminal owner according to library;Otherwise, then label of not registering is done;On the other hand, sentence When the Bluetooth information that disconnecting is received can be worth less than preset energy value, then information database of registering is ordered to possess the mobile intelligent terminal The name of person is left the table label, and order attention device sends out voice prompt;Otherwise, it registers information database and attention device is not done Any operation;
The visa terminal includes visa processor and is separately connected the third LTE communication module of visa processor and identity mark Know number library, third LTE communication module connection identity number library;Wherein:
The secure communication of register basic information or safe information of registering is realized between first NFC module and the second NFC module Process includes the following steps (1) to step (11):
(1) its true identity identification number is sent to visa terminal storage by mobile intelligent terminal, and corresponding be somebody's turn to do is generated by visa terminal Shared secret key between the anonymous identification number and visa terminal and mobile intelligent terminal of mobile intelligent terminal, and by visa Terminal sends the shared secret key generated to mobile intelligent terminal;Wherein:
The true identity identification number of mobile intelligent terminal is labeled as IDMobile, the anonymous identification labelled notation of mobile intelligent terminal For ID'Mobile, visa terminal label is TSM, and the true identity identification number of visa terminal TSM is denoted as IDTSM, visa terminal with move Shared secret key between dynamic intelligent terminal is denoted as SKMobile-TSM
(2) its true identity identification number is sent to visa terminal storage by terminal of registering, and is generated by visa terminal, stored and register Shared secret key between the anonymous identification number and visa terminal and terminal of registering of terminal;Wherein:
The true identity identification number for terminal of registering is labeled as IDRegistration, the anonymous identification labelled notation for terminal of registering is ID'Registration, the shared secret key between visa terminal and terminal of registering is denoted as SKRegistration-TSM
(3) mobile intelligent terminal sends visa solicited message and gives visa terminal, to obtain the anonymous Identity mark of mobile intelligent terminal Knowledge number, and by the time of visa terminal record mobile intelligent terminal transmission visa solicited message and visa terminal, intelligent movable The generated time of secret key is shared between terminal;Wherein, the time of mobile intelligent terminal transmission visa solicited message is denoted as T1;Visa The generated time that secret key is shared between terminal, mobile intelligent terminal is denoted as T2
(4) the self-position data (x that mobile intelligent terminal and terminal of registering will be obtained respectively respectivelyMobile,yMobile,zMobile) (xRegistration,yRegistration,zRegistration) it is sent to relaying fusion center, by relaying fusion center with intelligent movable The midpoint of terminal and terminal line of registering is as the centre of sphere, half using half of the mobile intelligent terminal away from terminal distance of registering as ball Diameter establishes space sphere equation S;Wherein, the centre of sphere is denoted as O (xo,yo,zo), the radius of a ball is denoted as R0, sphere equation S calculation formula are such as Under:
S:(x-xo)2+(y-yo)2+(z-zo)2=R0 2
(5) the self-position data (x that N number of NFC link terminals will be obtained respectively respectivelyRelay,n,yRelay,n,zRelay,n) and noise Compare SNRRelay,nIt is sent to relaying fusion center, judged by relaying fusion center, choose the optimum N FC relayings for participating in near-field communication Terminal;Wherein, relaying fusion center selection optimum N FC link terminal processes include the following steps (5-1) to step (5-3):
(5-1) relays position data (x of the fusion center according to N number of NFC link terminalsRelay,n,yRelay,n,zRelay,n), judge (xRelay,n-xo)2+(yRelay,n-yo)2+(zRelay,n-zo)2≤R0 2When, then it chooses the corresponding NFC link terminals of the position data and makees To participate in the alternative link terminal of near-field communication;Otherwise, if the position data of N number of NFC link terminals is satisfied by (xRelay,n-xo)2 +(yRelay,n-yo)2+(zRelay,n-zo)2>R0 2When, then N number of NFC link terminals are rejected, by mobile intelligent terminal and terminal of registering Directly carry out near-field communication;
(5-2) relays signal-to-noise ratio of the fusion center according to each alternative link terminal, calculates the relaying for obtaining each alternative link terminal Sincere coefficient;Wherein, the relaying sincerity coefficient of i-th of alternative link terminal is denoted as κRelay,i, relay sincere coefficient κRelay,iIt calculates Formula is as follows:
Wherein, N'(0≤N'≤N) be alternative link terminal number;
(5-3) relays fusion center according to each alternative link terminal apart from centre of sphere O (xo,yo,zo) distance dRelay,iAnd it obtains Each alternative link terminal relaying sincerity coefficient κRelay,i, obtain the participation coefficient ξ of each alternative link terminalRelay,i, and with ginseng With the alternative link terminal corresponding to coefficient maximum value as the optimum N FC link terminals for participating in near-field communication;Wherein, system is participated in Number ξRelay,iCalculation formula it is as follows:
(6) mobile intelligent terminal close to distance of registering between terminal and mobile intelligent terminal and terminal of registering be more than near-field communication away from From when, mobile intelligent terminal send near field communication request information give optimum N FC link terminals, by optimum N FC link terminals forward The near field communication request information is to terminal of registering;Wherein:
Near field communication request information includes the shared secret key SK between mobile intelligent terminal and terminal of registeringMobile-Registration, label The visa random number n generated to terminal1(n1∈ (0,9) and n1∈ Z), mobile intelligent terminal send visa solicited message time T1, mobile intelligent terminal anonymous identification ID'Mobile, it is shared secret between mobile intelligent terminal and visa terminal TSM Key SKMobile-TSM;Wherein, near field communication request information flag is as follows:
SM-R(Request,ID'Mobile,n1,T1,SKMobile-TSM,SKMobile-Registration);
(7) terminal of registering is in the near field communication request for receiving the mobile intelligent terminal transmission forwarded through optimum N FC link terminals After information, terminal of registering sends the anonymous identification ID' for including terminal of registeringRegistration, terminal of registering and visa terminal Between share secret key SKRegistration-TSMAnd the Licensing Authority request of received mobile intelligent terminal near field communication request information Information is authenticated to visa terminal;Wherein, Licensing Authority solicited message label is as follows:
SR-T(Request,ID'Mobile,ID'Registration,n1,T1,SKMobile-TSM,SKMobile-Registration, SKRegistration-TSM);
(8) register received by the Licensing Authority solicited message of terminal transmission of visa terminal carries out information extraction and judgement, With the mobile intelligent terminal identity of certification request and terminal near-field communication of registering:
When mobile intelligent terminal anonymous identification number, the intelligent movable that terminal of registering is extracted in Licensing Authority solicited message Shared between terminal and terminal of registering secret key and the shared secret key generated time with the mobile intelligence that is stored in visa terminal It can terminal anonymous identification ID'Mobile, shared secret key SKMobile-TSM, shared secret key generated time T2When consistent, then visa Its shared secret key between terminal of registering of terminal-pair is updated, and sends license near-field communication information and new newer total Secret key is enjoyed to terminal of registering;Otherwise, refusal near-field communication information is sent to terminal of registering;
Wherein, the license near-field communication information that visa terminal is sent includes that secret key is shared between mobile intelligent terminal and visa terminal SKMobile-TSM, the shared secret key SKMobile-TSMGenerated time T2, mobile intelligent terminal send certification request information time T1, updated shared secret key is denoted as SK' between visa terminal and terminal of registeringRegistration-TSM
License near-field communication information is ST-R(Accept,T1,T2,SKMobile-TSM,SKMobile-Registration, SKRegistration-TSM);Refusal near-field communication information is ST-R(Reject,SKRegistration-TSM);
(9) terminal of registering receives, stores itself and the updated shared secret key of visa terminal, and is permitted according to received visa terminal Can near-field communication information or refusal near-field communication information, the near field that mobile intelligent terminal is sent through optimum N FC link terminals Communication request information, which is given, to be fed back:
When terminal of registering receives the license near-field communication information of visa terminal, then terminal of registering receives mobile intelligent terminal hair The near field communication request sent, and generate and share secret key for the update that terminal and mobile intelligent terminal are shared of registering SK'Mobile-Registration, while it includes that secret key generated time T is shared between mobile intelligent terminal and visa terminal to send2, register Terminal shares secret key SK' with mobile intelligent terminal updateMobile-Registration, terminal of registering anonymous identification number ID'RegistrationNear-field communication receive information to mobile intelligent terminal;Wherein, it is S that near-field communication, which receives information flag,R-P (Accept,ID'Registration,SK'Mobile-Registration,T2);
When terminal of registering receives the refusal near-field communication information of visa terminal, then terminal of registering is refused mobile intelligent terminal and is sent Near field communication request, and send refusal near-field communication information to mobile intelligent terminal;Wherein, refusal near-field communication information is denoted as SR-P(Reject,SKMobile-Registration);
(10) mobile intelligent terminal receives the information of the terminal transmission of registering through optimum N FC relay forwardings, and believes according to receiving Breath is judged and is operated:
When received information is that near-field communication receives information, mobile intelligent terminal extracts near-field communication and receives included in information Mobile intelligent terminal and visa terminal between share secret key TimeGenerated value, and judge the shared secret key TimeGenerated value of extraction With the shared secret key TimeGenerated value T of mobile intelligent terminal itself storage2When consistent, then mobile intelligent terminal is realized and is registered end Secure communication process between end, by mobile intelligent terminal user register basic information or safety information of registering is sent to label It registers to terminal, and sends update after the completion of secure communication by mobile intelligent terminal and share secret key solicited message to visa Terminal;Otherwise, when received information is refusal near-field communication information, mobile intelligent terminal stops sending near field communication request letter It ceases to terminal of registering;Wherein:
It includes the true identity identification number for having mobile intelligent terminal that secret key solicited message is shared in the update that mobile intelligent terminal is sent IDMobile, terminal of registering anonymous identification ID'Registration, mobile intelligent terminal and visa terminal update before be total to Enjoy secret key SKMobile-TSM;Update shares secret key solicited message and is denoted as SM-T(Renew,IDMobile,ID'Registration, SKRegistration-TSM);
(11) after visa terminal receives the shared secret key request of update that mobile intelligent terminal is sent, visa terminal updates itself and shifting Shared secret key between dynamic intelligent terminal obtains updated shared secret key, and new updated shared secret key is sent to shifting Dynamic intelligent terminal uses so that mobile intelligent terminal carries out the when of registering next time;Wherein, updated shared secret key is denoted as SK'Mobile-TSM
The system 2. near-field communication movement according to claim 1 is registered, which is characterized in that the mobile intelligent terminal also wraps Include to input the touch screen of handwritten signature information, the touch screen connects microprocessor.
CN201510955499.6A 2015-12-18 2015-12-18 Near-field communication moves system of registering Active CN105610792B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN201510955499.6A CN105610792B (en) 2015-12-18 2015-12-18 Near-field communication moves system of registering

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN201510955499.6A CN105610792B (en) 2015-12-18 2015-12-18 Near-field communication moves system of registering

Publications (2)

Publication Number Publication Date
CN105610792A CN105610792A (en) 2016-05-25
CN105610792B true CN105610792B (en) 2018-10-19

Family

ID=55990330

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201510955499.6A Active CN105610792B (en) 2015-12-18 2015-12-18 Near-field communication moves system of registering

Country Status (1)

Country Link
CN (1) CN105610792B (en)

Families Citing this family (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN106303930A (en) * 2016-09-20 2017-01-04 南京软腾信息科技有限公司 A kind of intelligent patrol detection based on BLE management system and method
CN106874986A (en) * 2017-02-28 2017-06-20 四川建筑职业技术学院 Differentiate whether I uses identity card and the method for pointing out identity card to lose
CN108390847B (en) * 2017-12-29 2020-08-25 上海顶竹通讯技术有限公司 Wireless private network real-time communication service encryption method and system
CN109410355B (en) * 2018-08-31 2021-10-01 湖南新云网科技有限公司 Non-perception sign-in method, sign-in equipment and sign-in system
CN109413582A (en) * 2018-11-01 2019-03-01 苏州道博环保技术服务有限公司 One kind is registered method
CN111861431A (en) * 2020-06-08 2020-10-30 西安艾润物联网技术服务有限责任公司 Digital currency payment method and system

Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN103077560A (en) * 2011-10-25 2013-05-01 上海博路信息技术有限公司 Sign-in system based on NFC terminal
CN202995836U (en) * 2012-12-01 2013-06-12 上海照恒科技有限公司 Electric sign-in position serving system
CN103700152A (en) * 2013-12-23 2014-04-02 广州中国科学院软件应用技术研究所 Check-in method and device based on NFC (near field communication) communication technology

Family Cites Families (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US8789158B2 (en) * 2011-02-17 2014-07-22 Ebay Inc. Using clock drift, clock slew, and network latency to enhance machine identification

Patent Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN103077560A (en) * 2011-10-25 2013-05-01 上海博路信息技术有限公司 Sign-in system based on NFC terminal
CN202995836U (en) * 2012-12-01 2013-06-12 上海照恒科技有限公司 Electric sign-in position serving system
CN103700152A (en) * 2013-12-23 2014-04-02 广州中国科学院软件应用技术研究所 Check-in method and device based on NFC (near field communication) communication technology

Non-Patent Citations (2)

* Cited by examiner, † Cited by third party
Title
《基于NFC技术的Android签到管理系统的设计与实现》;魏小锐等;《东莞理工学院学报》;20150630;第22卷(第3期);全文 *
《基于NFC近场通讯技术的课堂智能签到系统的设计》;许晨等;《金陵科技学院学报》;20150331;第31卷(第1期);全文 *

Also Published As

Publication number Publication date
CN105610792A (en) 2016-05-25

Similar Documents

Publication Publication Date Title
CN105610792B (en) Near-field communication moves system of registering
EP2629239B1 (en) Establishing an ad hoc network using face recognition
TW201734907A (en) Payment authentication method and system based on face recognition and HCE
CN104050510A (en) Intelligent room reservation system based on mobile terminal
CN102222368A (en) Electronic ticket authentication system applying short-distance communication technology and detection method
CN107194688A (en) In payment system and its method of the offline scenario based on Quick Response Code
CN109600519A (en) Mobile phone control method and system
US20130290229A1 (en) Gripping-feature learning authentication system and gripping-feature learning authentication method
JP2007052513A (en) Target device, authentication device, and authentication method
CN106211159A (en) Personal identification method based on bluetooth and device
CN107493561A (en) Shared equipment unlocking method, apparatus and system
CN106231531A (en) Main equipment, from equipment, main equipment and the system and method from communication between devices
US9306749B2 (en) Method of biometric authentication, corresponding authentication system and program
CN110102063A (en) Identify binding method, device, terminal, server and storage medium
CN110047304A (en) Parking ancillary service managing device uses the method for support, management method and non-transitory computer-readable storage media
KR101163709B1 (en) System and method for releasing lock
CN108062481A (en) A kind of intelligent encryption method of logistics information
CN103259711B (en) communication information transmission method and system
CN106535190A (en) Network connection method and apparatus
CN105072084B (en) The method for building up of mobile terminal and external equipment data connection
CN108055297A (en) For going out the interim dialogue method of administrative staff and device
CN103200155B (en) A kind of authority control system and method based on limited area
MXPA05013336A (en) Credential communication device.
WO2016092143A1 (en) Local authentication
CN105376704B (en) Mobile wallet near-field communication method of payment based on image encryption

Legal Events

Date Code Title Description
C06 Publication
PB01 Publication
C10 Entry into substantive examination
SE01 Entry into force of request for substantive examination
GR01 Patent grant
GR01 Patent grant
TR01 Transfer of patent right

Effective date of registration: 20210427

Address after: Room 406, 3020 Huling Road, Linghu Town, Nanxun District, Huzhou City, Zhejiang Province, 313009

Patentee after: Huzhou lingchuang Technology Co., Ltd

Address before: 315211 Zhejiang Province, Ningbo Jiangbei District Fenghua Road No. 818

Patentee before: Ningbo University

TR01 Transfer of patent right