CN111063073B - Access control system, control method and device thereof - Google Patents

Access control system, control method and device thereof Download PDF

Info

Publication number
CN111063073B
CN111063073B CN201911230057.XA CN201911230057A CN111063073B CN 111063073 B CN111063073 B CN 111063073B CN 201911230057 A CN201911230057 A CN 201911230057A CN 111063073 B CN111063073 B CN 111063073B
Authority
CN
China
Prior art keywords
authority level
level
authority
information
server
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Active
Application number
CN201911230057.XA
Other languages
Chinese (zh)
Other versions
CN111063073A (en
Inventor
翟壮
丁明君
王长杰
方才华
金朝
吴伟杰
徐苏杨
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
719th Research Institute of CSIC
Original Assignee
719th Research Institute of CSIC
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by 719th Research Institute of CSIC filed Critical 719th Research Institute of CSIC
Priority to CN201911230057.XA priority Critical patent/CN111063073B/en
Publication of CN111063073A publication Critical patent/CN111063073A/en
Application granted granted Critical
Publication of CN111063073B publication Critical patent/CN111063073B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Images

Landscapes

  • Alarm Systems (AREA)
  • Lock And Its Accessories (AREA)
  • Time Recorders, Dirve Recorders, Access Control (AREA)

Abstract

The invention discloses an access control system, which comprises a first authority level console, a second authority level execution system and a security level conversion module which is connected with the first authority level console and the second authority level execution system; the first authority level console is used for collecting and verifying user identity information and sending a first authority level control signal to the security level conversion module through the first authority level network; the security level conversion module receives the first authority level control signal, converts the first authority level control signal into a mechanical driving signal, and transmits the mechanical driving signal to the second authority level execution system; and the second permission level execution system receives the mechanical driving signal and drives the entrance guard to open. The system can convert the confidential signals into non-circuit or non-network transmission to control a non-confidential access control or non-confidential execution system, and the secure connection between the confidential internal network and the access control system in the information management system of the confidential enterprise and public institution is realized.

Description

Access control system, control method and device thereof
Technical Field
The invention relates to an access control system, a control method and a device thereof, in particular to an access control system for converting a secret-related signal into a non-secret signal and a use method thereof.
Background
The application of the access control system is an important security control means in the office of enterprises and public institutions. In a security unit, access to the unit is confirmed by security personnel, and further, the access to a room having a use function or storing important data is subject to authority verification. The access control system used traditionally at present is generally a non-secret data loop system, such as a card-swiping access control system. The card swiping access control system consists of a card swiping device, an access control data storage, a non-secret server and a terminal, and the setting mode is shown in figure 1 in detail. The operation mode of the system is as follows: firstly, security personnel collect and authorize identity cards of users or workers and store data; and then when the user or the staff needs to pass through the access control, the user or the staff uses the respective identity card to operate on the card reader, information is transmitted through the non-secret data loop, verification judgment is completed through the non-secret server, if the verification is passed, the loop is electrified, the door is opened, and otherwise, the door cannot be opened.
However, with the rapid development of informatization, information interaction between networks is more and more frequent and the data volume is larger and larger, especially the interaction of the first authority level/secret-related network. The traditional access control system is usually operated independently based on a non-secret network in an enterprise and public institution, the assignment of the authority of the personnel is realized at the beginning, if the authority of the personnel is changed due to the change of work, the information of each access control terminal must be changed again, redundant workload and management overhead are brought, and the operation efficiency of the system is not high. On the other hand, for the particularly important input/output and the area for storing the materials to be borrowed, the single access control system needs to be provided with a special manager to verify whether the user or the staff has specific work to enter the area, and the information to be verified is stored in the secret-related intranet, so that the information management is blocked, the work inconvenience is increased, and meanwhile, the potential safety hazard caused by the work error of the manager is easily brought. Therefore, an access control system meeting the physical isolation requirement and simultaneously realizing the first authority level/secret-related network information transmission is urgently needed.
Disclosure of Invention
In view of the above, the main objective of the present invention is to provide an access control system, wherein the system can convert the confidential signals into non-circuit or non-network methods (such as physical media) for transmission to control a non-confidential access control or non-confidential execution system, so as to implement the secure connection between the confidential internal network and the access control system in the information management system of the confidential enterprise and public institution. Meanwhile, the secret-related network of the system also has a multi-authority verification mode, so that the secret-related network can be conveniently used by users in different working environments, and the safety and the convenience of use are comprehensively considered.
The invention provides an access control system in a first aspect, which comprises a first authority level console, a second authority level execution system and a security level conversion module which establishes connection with the first authority level console and the second authority level execution system; wherein the content of the first and second substances,
the first authority level console is used for acquiring and verifying user identity information, and if the user identity information passes verification, a first authority level control signal is sent through a first authority level network and transmitted to the security level conversion module; the security classification conversion module is used for receiving the first authority class control signal, converting the first authority class control signal into a mechanical driving signal, and transmitting the mechanical driving signal to the second authority class execution system through mechanical driving transmission; and the second permission level execution system is used for receiving a mechanical driving signal and driving the entrance guard to open.
Further, the security classification conversion module comprises a first authority level connection component and a second authority level connection component; wherein the content of the first and second substances,
the first authority level connecting assembly is connected with the first authority level console and used for receiving a first authority level control signal, converting the first authority level control signal into a mechanical driving signal and sending the mechanical driving signal to a second authority level connecting assembly; the second authority level connecting assembly is connected with a second authority level executing system, and is used for receiving a mechanical driving signal and sending the mechanical driving signal to the second authority level executing system.
Furthermore, the first authority level connection assembly comprises a relay, a current excitation trigger and a power supply, the relay and the first authority level console are connected with each other to form an electric loop, the relay is connected with the first authority level console through a first authority level transmission network, receives a first authority level control signal, drives the current excitation trigger through the electric loop, generates a mechanical driving signal and sends the mechanical driving signal to the second authority level connection assembly.
Still further, the second privilege level connection component includes a mechanical connection component for enabling transmission of the mechanical drive signal to the second privilege level execution system via a mechanical drive transmission.
Furthermore, the second permission level execution system comprises a microswitch, the microswitch is connected with the secret level conversion module, and the microswitch receives a mechanical driving signal to open the switch so as to drive the entrance guard to be opened.
Further, the first privilege level console comprises an authentication module and a server; wherein the content of the first and second substances,
the authentication module is used for acquiring user identity information and transmitting the information to the server through first authority level transmission; and the server receives and compares the information, and if the information passes the verification, a first authority level control signal is sent out and sent to the security level conversion module through a first authority level transmission network.
Further, the access control system further comprises: the first authority level console is used for collecting and processing the verification mode selected by the user and issuing task information according to the user identity information.
Still further, the access control system further comprises: the authentication module can send task information to be handled according to selection of a user verification mode, the server receives the task information to be handled through the first permission level transmission network, and whether a task exists or not is judged according to user identity information;
if the server judges that no task exists, the server issues failure information to the authentication module;
if the server judges that the task exists, the server issues task information to the authentication module, the authentication module collects and sends user identity information according to the task information, and the server receives the user identity information and judges whether the verification is passed; if the verification is judged not to pass, the server sends failure information to the authentication module; if the judgment shows that the verification is passed, the server sends a first authority level control signal to the security level conversion module, the security level conversion module converts the first authority level control signal into a mechanical driving signal and sends the mechanical driving signal to the second authority level execution system, and therefore the entrance guard is driven to be opened.
A second aspect of the present invention provides a control method for an access control system, including:
providing a first privilege level console, a second privilege level execution system, and
providing a security classification conversion module; wherein the content of the first and second substances,
the first authority level console collects and verifies user identity information, and if the user identity information passes the verification, a first authority level control signal is sent through a first authority level network and transmitted to the security level conversion module; the security classification conversion module receives the first authority class control signal, converts the first authority class control signal into a mechanical driving signal, and transmits the mechanical driving signal to the second authority class execution system through mechanical driving transmission; and the second permission level execution system receives the mechanical driving signal and drives the entrance guard to open.
Further, a control method of an access control system is provided, which includes:
providing a first privilege level console, a second privilege level execution system, and
providing a security level conversion module which comprises a first authority level connecting component and a second authority level connecting component; wherein the content of the first and second substances,
the first authority level console collects and verifies user identity information, and if the user identity information passes verification, a first authority level control signal is sent through a first authority level network and transmitted to the first authority level connecting assembly; the first authority level connecting assembly receives a first authority level control signal, converts the first authority level control signal into a mechanical driving signal and sends the mechanical driving signal to the second authority level connecting assembly; the second authority level connecting assembly is connected with a second authority level executing system, receives a mechanical driving signal and sends the mechanical driving signal to the second authority level executing system; and the second permission level execution system receives the mechanical driving signal and drives the entrance guard to open.
Further, a control method of an access control system is provided, which includes:
providing a first permission level console;
providing a second privilege level execution system comprising a microswitch; and
providing a security level conversion module which comprises a relay, a current excitation trigger, a power supply and a mechanical connecting assembly; the relay, the current excitation trigger and the power supply are connected with each other to form a circuit; wherein the content of the first and second substances,
the first authority level console collects and verifies user identity information, and if the user identity information passes verification, a first authority level control signal is sent through a first authority level network and transmitted to the relay; the relay receives a first authority level control signal, drives a current excitation trigger through the electric loop, generates a mechanical driving signal and sends the mechanical driving signal to the mechanical connecting component; the mechanical connecting assembly is connected with the current excitation trigger and the microswitch, and the microswitch receives a mechanical driving signal and is linked with the current excitation trigger to open the switch, so that the entrance guard is driven to be opened.
Further, a control method of an access control system is provided, which includes:
providing a first permission level console comprising an authentication module and a server;
providing a second privilege level execution system comprising a microswitch; and
providing a security level conversion module which comprises a relay, a current excitation trigger, a power supply and a mechanical connecting assembly; the relay, the current excitation trigger and the power supply are connected with each other to form a circuit; wherein the content of the first and second substances,
the authentication module collects user identity information and sends the information to a server through first authority level transmission; the server receives the information and compares the information, and if the information passes the verification, a first authority level control signal is sent out and transmitted to the relay; the relay receives a first authority level control signal, drives a current excitation trigger through the electric loop, generates a mechanical driving signal and sends the mechanical driving signal to the mechanical connecting component; the mechanical connecting assembly is connected with the current excitation trigger and the microswitch, and the microswitch receives a mechanical driving signal and is linked with the current excitation trigger to open the switch, so that the entrance guard is driven to be opened.
Furthermore, the control method of the access control system further includes: the authentication module collects and sends a verification mode selected by a user; and the server receives and processes the verification mode selected by the user and issues task information according to the user identity information.
Furthermore, the control method of the access control system further includes:
the authentication module can send task information to be handled according to selection of a user verification mode, the server receives the task information to be handled through the first permission level transmission network, and whether a task exists or not is judged according to user identity information;
if the server judges that no task exists, the server issues failure information to the authentication module;
if the server judges that the task exists, the server issues task information to the authentication module, the authentication module collects and sends user identity information according to the task information, and the server receives the user identity information and judges whether the verification is passed; if the verification is judged not to pass, the server sends failure information to the authentication module; if the judgment shows that the verification is passed, the server sends a first authority level control signal to the security level conversion module, the security level conversion module converts the first authority level control signal into a mechanical driving signal and sends the mechanical driving signal to the second authority level execution system, and therefore the entrance guard is driven to be opened.
A third aspect of the present invention provides an apparatus for an access control system, comprising:
a first permission level console;
a second privilege level enforcement system comprising a microswitch and at least one gate, the gate dividing a first privilege level region and a second privilege level region; and
the security level conversion module comprises a first authority level connection assembly and a second authority level connection assembly; wherein the content of the first and second substances,
the security classification conversion module is hermetically arranged in the first authority class area and cannot be contacted with the outside;
the first authority level console is connected with the relay through a first authority level network, and the security classification conversion module is connected with the second authority level execution system through a mechanical drive;
and the second authority level execution system drives the door to open.
Further, there is provided an apparatus of an access control system, comprising:
the first authority level console comprises an authentication module and a server which are connected through a first authority level network;
a second privilege level enforcement system comprising a microswitch and at least one gate, the gate dividing a first privilege level region and a second privilege level region; and
the security level conversion module comprises a relay, a current excitation trigger, a power supply and a mechanical connecting assembly; the relay, the current excitation trigger and the power supply are connected with each other to form a circuit; wherein the content of the first and second substances,
the authentication module is arranged at one side of a second authority level area of the door, and the server is arranged in the first authority level area and has a distance of at least 1.2 meters with the door;
the security classification conversion module is hermetically arranged in the first authority class area and cannot be contacted with the outside;
the micro switch drives the door to open.
Compared with the prior art, the access control system and the use method thereof provided by the invention have the following beneficial effects:
firstly, the access control system comprehensively considers the use conditions of a non-secret access control system and a secret network system, combines the current security requirement, provides a control method for transmitting a secret network electric signal through a physical medium and simultaneously realizing authority authentication of the secret network and non-secret access control, and constructs the security connection between the secret network and the access control system in the secret information management system; when the situation that corresponding access control permission changes due to work needs of users or workers in the secret-related network is ensured, the access control system can be directly acted on by the information management system, and therefore the efficiency and the safety of work are improved.
Secondly, the access control system provided by the invention can aim at the particularly important input/output and area for storing the materials to be borrowed, does not need to be equipped with special management personnel, can verify whether the user or the staff has specific work to enter the area at any time, and has high automation degree. The method has important use value for important places such as laboratories, centralized input and output rooms and the like of secret enterprises and public institutions requiring high efficiency and high safety.
Finally, the access control system provided by the invention also has multiple authority verification modes, including key input (numbering), identity medium verification (employee card), face identification and other technologies, and realizes switching modes of card swiping access and secondary verification, so that the access control system is convenient for users to use in different working environments, and the safety and the convenience of use are comprehensively considered.
Description of the drawings:
fig. 1 is a schematic view of an overall structure of a conventional access control system;
FIG. 2 is a schematic diagram of the workflow of an access control system implemented in accordance with the present invention;
FIG. 3 is a schematic diagram of the overall architecture of a security classification conversion module implemented in accordance with the present invention;
FIG. 4 is a schematic diagram of a first privilege level console authentication process implemented in accordance with the present invention;
fig. 5 is a schematic structural diagram of an external appearance of the access control system implemented according to the present invention.
Detailed Description
Embodiments of the present invention will be described in detail below with reference to examples, but it will be understood by those skilled in the art that the following examples are only illustrative of the present invention and should not be construed as limiting the scope of the present invention. The examples, in which specific conditions are not specified, were conducted under conventional conditions or conditions recommended by the manufacturer.
Throughout the specification, unless otherwise specifically noted, terms used herein should be understood as having meanings as commonly used in the art. Accordingly, unless defined otherwise, all technical and scientific terms used herein have the same meaning as commonly understood by one of ordinary skill in the art to which this invention belongs. If there is a conflict, the present specification will control.
The present invention provides an access control system, comprising: the system comprises a first authority level console, a second authority level execution system and a security level conversion module which establishes connection with the first authority level console and the second authority level execution system; fig. 2 is a schematic view of a work flow of the access control system according to an embodiment of the present invention.
In this embodiment, the first authority level console is configured to collect and verify user identity information, and if the user identity information passes the verification, the first authority level console sends a first authority level control signal through the first authority level network and transmits the first authority level control signal to the security level conversion module; the security level conversion module is used for receiving the first authority level control signal, converting the first authority level control signal into a mechanical driving signal, and transmitting the mechanical driving signal to the second authority level execution system through mechanical driving transmission; and the second permission level execution system is used for receiving the mechanical driving signal and driving the entrance guard to open. If the verification fails, the first authority level console cannot output a first authority level control signal, and the security level conversion module transmits no signal to the second authority level execution system, so that the entrance guard cannot be opened.
Specifically, the first permission level refers to secret, and the second permission level refers to non-secret. Therefore, the security level conversion module in the invention can convert the electric signals of the confidential network into physical media for transmission, thereby simultaneously realizing the authority authentication of the first authority level/confidential network and the control method of the non-confidential access control, and constructing the secure connection between the first authority level/confidential network in the confidential information management system and the access control system.
The control method for realizing the access control system based on the access control system comprises the following steps:
step 1: the first authority level console collects and verifies the user identity information and judges whether the user identity information passes the verification;
step 2-N: if the verification fails, the first authority level console issues failure information; (end of operation)
Step 2-Y: if the verification is passed, the first authority level console sends a first authority level control signal through a first authority level network and transmits the first authority level control signal to the security level conversion module;
and step 3: the security classification conversion module receives the first authority class control signal, converts the first authority class control signal into a mechanical driving signal, and transmits the mechanical driving signal to the second authority class execution system through mechanical driving transmission;
and 4, step 4: and the second permission level execution system receives the mechanical driving signal and drives the entrance guard to open.
In the invention, the security level conversion module is used for connecting the first authority level console and the second authority level execution system. Fig. 3 is a schematic diagram of an overall structure of a security classification conversion module according to an embodiment of the present invention.
In this embodiment, the security classification conversion module includes a first authority level connection component and a second authority level connection component. The first authority level connecting assembly is connected with the first authority level console, and if the first authority level console passes the verification, the first authority level console sends a first authority level control signal which is used for receiving the first authority level control signal, converting the first authority level control signal into a mechanical driving signal and sending the mechanical driving signal to the second authority level connecting assembly; the second authority level connecting assembly is connected with the second authority level executing system and used for receiving the mechanical driving signal and sending the mechanical driving signal to the second authority level executing system, namely the first authority level/secret-related network electric signal is transmitted by the physical medium.
Specifically, as shown in the right diagram of fig. 3, the inventor designs the security classification conversion module as a control box. The port of the first authority level connecting assembly is connected with the first authority level console and used for receiving a control signal and converting the control signal into a mechanical drive; the second permission level connecting assembly is connected with the first permission level connecting assembly and used for achieving mechanical linkage with the first permission level connecting assembly. Therefore, the first authority level control console and the second authority level execution system can be connected through a non-circuit/non-network or physical medium means, and the access control device in a non-first authority level/secret-related area is controlled through the first authority level/secret-related network.
The control method for realizing the access control system based on the access control system comprises the following steps:
step 1: the first authority level console collects and verifies the user identity information and judges whether the user identity information passes the verification;
step 2-N: if the verification fails, the first authority level console issues failure information; (end of operation)
Step 2-Y: if the verification is passed, the first authority level console sends a first authority level control signal through the first authority level network and transmits the first authority level control signal to the first authority level connecting assembly if the verification is passed;
the first authority level connecting assembly receives the first authority level control signal, converts the first authority level control signal into a mechanical driving signal and sends the mechanical driving signal to the second authority level connecting assembly;
and 4, step 4: the second authority level connecting assembly receives a mechanical driving signal and sends the mechanical driving signal to the second authority level executing system;
and 5: and the second permission level execution system receives the mechanical driving signal and drives the entrance guard to open.
In this embodiment, the first authority level connection assembly includes a relay, a current excitation trigger, and a power supply, which are connected to form an electrical loop, and the relay is connected to the first authority level console through a first authority level transmission network, receives the first authority level control signal, drives the current excitation trigger through the electrical loop, generates a mechanical drive signal, and sends the mechanical drive signal to the second authority level connection assembly.
In this embodiment, the second authority level connection component includes a mechanical connection component, which is configured to send the mechanical driving signal to the second authority level execution system in a mechanical driving transmission manner.
In this embodiment, the second permission level execution system includes a micro switch, the micro switch is connected to the secret level conversion module, and the micro switch receives a mechanical driving signal to turn on the switch, so as to drive the entrance guard to open.
Specifically, a relay in the first authority level connection assembly is connected with a first authority level console through a USB port; in the first permission level connecting component, a relay, a current excitation trigger and a power supply are connected with each other to form an electric loop; and the current excitation trigger in the first authority level connecting assembly is connected with a microswitch in a second authority level execution system through a mechanical connecting assembly in the second authority level connecting assembly. The relay receives a first authority level control signal sent by the first authority level console, drives the current excitation trigger, and the current excitation trigger is linked with the microswitch through the mechanical connecting assembly to execute a starting command.
Specifically, the first authority level console collects and verifies user identity information to perform identity verification of a user, and if the user passes the verification, a first authority level control signal is sent through a first authority level network and transmitted to a relay; the relay receives a first authority level control signal to drive a current through the electrical loop to energize the trigger. The flow activated trigger drives a microswitch in the second privilege level execution system in tandem through the mechanical linkage assembly. The microswitch can drive the entrance guard to be opened, so that an opening command is executed. Preferably, the microswitch also has a reset function, and after the opening command is executed, the microswitch can be immediately reset to enable the entrance guard to be in a closed state.
Preferably, the relay and the current excitation trigger are connected in series through an electric circuit, and power is applied to the electric circuit; the relay is a USB relay, the current excitation trigger is a push-pull electromagnet assembly, the power supply is a storage battery, 220V three-phase power, a red-black power supply input 220V three-phase power supply and the like, and the mechanical connection assembly is connected through a wire rope to ensure the normal operation of the dense-level conversion module. The push-pull electromagnet assembly comprises a plurality of groups of electromagnets, the electromagnets are directly connected with a power supply, the electromagnets are provided with telescopic rods, and when the electromagnets are powered on, the telescopic rods shrink to toggle the micro switch, and the access control is triggered through physical connection at the moment to execute an opening command. The microswitch is connected in the control link of the second privilege level execution system.
Preferably, the security conversion module is designed into a control box, is installed in a wall-hung manner, is sealed at the periphery, is fastened in a room during installation, cannot be contacted with the security conversion module from the outside and cannot be detached from the security conversion module from the outside, and the physical safety of the security conversion module is ensured.
The control method for realizing the access control system based on the access control system comprises the following steps:
step 1: the first authority level console collects and verifies the user identity information and judges whether the user identity information passes the verification;
step 2-N: if the verification fails, the first authority level console issues failure information; (end of operation)
Step 2-Y: if the verification is passed, the first authority level console sends a first authority level control signal through a first authority level network and transmits the first authority level control signal to a relay in the first authority level connection assembly;
and step 3: the relay receives the first authority level control signal, drives the current excitation trigger through the electric loop, generates a mechanical driving signal and sends the mechanical driving signal to a mechanical connecting component in the second authority level connecting component;
and 4, step 4: the mechanical connecting assembly is connected with a mechanical driving signal and sends the mechanical driving signal to a microswitch in the second authority level execution system;
and 5: the microswitch receives a mechanical driving signal and is linked with the current excitation trigger to open the switch, so that the entrance guard is driven to be opened.
In the invention, a first authority level console comprises an authentication module and a server, wherein the authentication module is used for acquiring user identity information and sending the information to the server through first authority level transmission; the server receives the information and compares the information, and if the information passes the verification, a first authority level control signal is sent out and sent to the security level conversion module through a first authority level transmission network. If the verification fails, the server cannot output the first authority level control signal, and the security level conversion module transmits no signal to the second authority level execution system, so that the entrance guard cannot be opened. Preferably, the first permission level console may be an all-in-one machine of the access control system client, that is, the user information acquisition and the display background are integrated, and the two are subjected to information interaction through the first permission level/secret-involved network.
Specifically, the authentication module is used for collecting and sending user identity information. Preferably, the authentication module comprises at least one authentication device, each authentication device comprising an information acquisition apparatus including, but not limited to, a facial recognition camera, a key input console, an identity media reader, a fingerprint entry port, and the like. And meanwhile, the collected user information is sent to the server through the first authority level/secret-involved network. Preferably, the authentication module further comprises a display device for displaying the verification result. Preferably, the authentication module is installed in a non-first privilege level/secret-related area, so that it does not store any secret-related information, without risk of compromising secret leakage.
Specifically, the server is used for receiving, verifying and storing user identity information and outputting a first authority level control signal. The server can convert the picture and the digital information of the user sent by the authentication module into data for receiving, and the data is used for storage or later comparison to complete verification. Preferably, the server is installed in a first authority level/secret-involved area, so that stored user information is prevented from being leaked, and meanwhile, remote control can be completed. Preferably, the installation security distance between the server and the second authority level execution system is more than 1.2 meters, preferably more than 1.5 meters; i.e. the secret conversion module setting length cannot be below the above distance.
Specifically, the manager interacts with the authentication module through the server at the background, and the interaction mode is a first authority level/a first security-related network in a security-related area. The administrator sends a network instruction through the server to enable the authentication module to open the information acquisition device to acquire user identity information including human face features, resident identification card photos, access control keys, fingerprint information, IC card serial numbers, two-dimensional code graphs and the like, but not limited to the above. And the server stores the user identity information for later verification and comparison to determine whether to output a first authority level control signal. Preferably, when some users lose the qualification of entering the first authority level/secret-related area, the manager can directly delete the authorization information from the server, so that the unauthorized user is prohibited from entering the first authority level/secret-related area. Preferably, in the management program of the whole authentication module, the unattended access control management can be completely realized by matching with the first authority level/secret-involved network setting, remote server operation and two-dimensional code online payment.
The control method for realizing the access control system based on the access control system comprises the following steps:
step 1: the authentication module collects user identity information and sends the information to a server through first authority level transmission; the server receives the information and compares the information,
step 2-N: if the verification fails, the server sends failure information to the authentication module; (end of operation)
Step 2-Y: if the verification is passed, the server sends a first authority level control signal through a first authority level network and transmits the first authority level control signal to the relay;
and step 3: the relay receives the first authority level control signal, drives the current excitation trigger through the electric loop, generates a mechanical driving signal and sends the mechanical driving signal to the mechanical connecting component;
and 4, step 4: the mechanical connecting assembly is connected with a mechanical driving signal and sends the mechanical driving signal to a microswitch in the second authority level execution system;
and 5: the microswitch receives a mechanical driving signal and is linked with the current excitation trigger to open the switch, so that the entrance guard is driven to be opened.
Specifically, the access control system of the present invention further comprises: the first authority level console is used for collecting and processing the verification mode selected by the user and issuing task information according to the user identity information. Fig. 4 is a schematic diagram of a process of performing selection authentication by a first permission level console according to an embodiment of the present invention. The first authority level console is mainly used for completing information interaction between the authentication module and the server through a first authority level/secret-involved network. The multiple methods can be selected for verification through the authentication module, so that the problems that the entrance guard card is omitted and is identified by faking, and the face information of the person entering or exiting the entrance guard card is not recorded can be effectively prevented. Meanwhile, part of the identity authentication information can be cut off as required, for example, when a card is swiped and is not used as a mode of entrance guard access, related information can be directly shielded through the first authority level/secret-related network system, an entrance guard device does not need to be replaced, and replacement cost is saved.
Specifically, the authentication module is used for collecting and sending user identity information, and also used for collecting and sending a verification mode selected by a user. The authentication module comprises multiple information acquisition devices and a display device, and a user can select a verification mode through an initialized page of the display device. The verification method is preferably face recognition, key input, card swiping, two-dimensional code recognition, fingerprint entry, and the like, but is not limited thereto. The information is transmitted to a server arranged in a first authority level/secret-related area through a first authority level/secret-related network.
Specifically, the corresponding server is used for receiving, verifying and storing user identity information and outputting a first authority level control signal; and the system is also used for receiving and processing the verification mode selected by the user and issuing task information according to the user identity information. The server is connected with the authentication module through a network interface and is used for finishing a communication task.
Specifically, the authentication module can send task information to be handled according to selection of a user verification mode, the server receives the task information to be handled through the first permission level transmission network, and whether a task exists is judged according to user identity information;
a: if the server judges that no task exists, the server sends failure information to the authentication module;
b: if the server judges that the task exists, the server issues task information to the authentication module, the authentication module collects and sends user identity information according to the task information, and the server receives the user identity information and judges whether the verification is passed; wherein the content of the first and second substances,
b-1: if the verification is judged not to pass, the server sends failure information to the authentication module;
b-2: if the server judges that the verification is passed, the server sends a first authority level control signal to the security level conversion module, the security level conversion module converts the first authority level control signal into a mechanical driving signal and sends the mechanical driving signal to the second authority level execution system, and therefore the entrance guard is driven to be opened.
Specifically, the server resets and initializes the information of the authentication module, clearly sends and receives the information without barriers, and a user selects an authentication device in the authentication module and selects a verification mode through an initialized page; the information of the authentication equipment is recorded as an equipment IP, and the selected verification mode is recorded as an identifier 1, an identifier 2 and the like; meanwhile, the server also collects the basic information of the user, such as the IC card number, the user number and the like, and records the basic information as user information A.
Specifically, the authentication module sends the identifier 1 or the identifier 2, the user information and the device IP to the service through a first authority level/secret-involved network; preferably, when the sending is finished, the server applies for interrupting the transmission, so as to avoid the occurrence of events such as a group of information which is not verified, a group of information which is received again or errors. Meanwhile, the server converts the received information into data for receiving, compares the data with the stored data, and judges whether the data is authorized. Preferably, the server first determines whether the user information exists, and then determines whether the user information has a matching identifier 1 or identifier 2.
Specifically, if it is determined that there is no task, the server issues failure information to the authentication module. If the server judges that the user is not authorized when the user data and the stored data are compared, the server sends failure information to the authentication module. The authentication module will display the user authentication failure in the display device of the corresponding authentication device. Preferably, the authentication device may simultaneously voice-report that the verification fails.
Specifically, if the task is judged to exist, the server issues task information to the authentication module, the authentication module collects and sends user identity information according to the task information, and the server receives the user identity information and judges whether the verification is passed.
Specifically, the server determines that the user is authorized if the user data is compared with the stored data. If the authorization is judged, further checking the user information to determine that the user information is not fake or disguised; the task information is issued to the authentication module again, and the authentication module acquires the identification information corresponding to the user according to the requirement of the identifier 1 or the identifier 2 selected by the verification mode and records the identification information as user information B.
Specifically, the authentication module sends the identifier 1 or the identifier 2, the user information B and the equipment IP to a secret-related service through a first authority level/secret-related network; preferably, the server applies for an interruption of the transmission when the transmission is finished. Meanwhile, the server converts the received information into data to be received, compares the data with the stored data, and judges whether the information of the user is correct in the corresponding verification mode to judge whether the verification is passed.
Specifically, if it is determined that the verification fails, the server issues failure information to the authentication module. And if the server judges that the information of the user is incorrect in the corresponding verification mode of the user when the user data and the stored data are compared, the server sends failure information to the authentication module. The authentication module will display the user authentication failure in the display device of the corresponding authentication device. Preferably, the authentication device can simultaneously voice-report that the verification fails.
Specifically, if the authentication is determined to pass, the server sends out a first authority level control signal to enable the second authority level execution system to execute the opening command. If the server judges that the information of the user is correct in the corresponding verification mode of the user when comparing the user data with the stored data, the server outputs a first authority level control signal and issues successful information to the authentication module, and the authentication module can display that the user passes the verification in a display device of the corresponding authentication equipment. Preferably, the authentication devices can simultaneously voice-report verification pass.
The control method for realizing the selectable verification mode of the access control system based on the access control system comprises the following steps:
step 1: the authentication module collects the verification mode selected by the user, and the server receives and processes the verification mode selected by the user and issues task information according to the user identity information;
step 2: the authentication module can send the task information to be handled according to the selection of the user verification mode, the server receives the task information to be handled and judges whether a task exists according to the user identity information;
step 3-N: if the server judges that no task exists, the server sends failure information to the authentication module; (end of operation)
Step 3-Y: if the server judges that the task exists, the server issues task information to the authentication module, the authentication module collects and sends user identity information according to the task information, and the server receives the user identity information and judges whether the verification is passed;
step 4-N: if the verification fails, the server sends failure information to the authentication module; (end of operation)
Step 4-Y: if the verification is passed, the server sends a first authority level control signal through a first authority level network and transmits the first authority level control signal to the relay;
and 5: the relay receives the first authority level control signal, drives the current excitation trigger through the electric loop, generates a mechanical driving signal and sends the mechanical driving signal to the mechanical connecting component;
step 6: the mechanical connecting assembly is connected with a mechanical driving signal and sends the mechanical driving signal to a microswitch in the second authority level execution system;
and 7: the microswitch receives a mechanical driving signal and is linked with the current excitation trigger to open the switch, so that the entrance guard is driven to be opened.
The invention provides a device of an access control system, which comprises:
a first permission level console;
the second authority level execution system comprises a microswitch and at least one door, wherein the door divides a first authority level/a secret-involved area and a second authority level/a non-secret area; and
the security level conversion module comprises a first authority level connection assembly and a second authority level connection assembly; wherein the content of the first and second substances,
the security classification conversion module is hermetically arranged in the first authority class area and cannot be in contact with the outside; the first authority level console is connected with the relay through a first authority level network, and the security level conversion module is connected with the second authority level execution system through a mechanical drive; the second privilege level execution system drives the door to open.
Specifically, the present invention provides an apparatus of an access control system, comprising:
the first authority level console comprises an authentication module and a server which are connected through a first authority level network;
the second authority level execution system comprises a microswitch and at least one door, and the door divides a first authority level area and a second authority level area; and
the security level conversion module comprises a relay, a current excitation trigger, a power supply and a mechanical connecting assembly; the relay, the current excitation trigger and the power supply are connected with each other to form a circuit; wherein the content of the first and second substances,
the security classification conversion module is hermetically arranged in the first authority class area and cannot be in contact with the outside; the authentication module is arranged at one side of a second authority level area of the door, and the server is arranged in the first authority level area and has a distance of at least 1.2 meters with the door; the security classification conversion module is hermetically arranged in the first authority class area and cannot be contacted with the outside; the micro switch drives the door to open.
Specifically, a first authority level console is connected with a relay through a first authority level network, and a security level conversion module is connected with a second authority level execution system through a mechanical drive; the second privilege level execution system drives the door to open.
Specifically, fig. 5 is a schematic view of an appearance structure of the access control system according to an embodiment of the present invention. In this embodiment, the door has a first side and a second side; the first side faces the first authority level/the secret-involved area, the second side faces the second authority level/the non-secret area, and the authentication module is arranged on the first side and interacts with the server; preferably, the door is combined with a microswitch, the microswitch receives a command issued by the server through the security classification conversion module to execute the opening of the door control, and the door can move from a closed position to an open position.
Specifically, the door position is an entrance/exit of a first authority level/a secret-involved area and a second authority level/a non-secret area, and the door moves from a closed position to an open position to enable a user to enter and exit the two areas. The first side of the door faces a non-first privilege level/privacy-related region and the second side faces a first privilege level/privacy-related region. The authentication module is arranged on the first side face, and when a user wants to enter the first authority level/secret-related area, the authentication module can select a verification mode and input or input user information. The authentication module transmits the related information to the server through the first authority level/secret-involved network for verification, if the verification is passed, the server outputs a first authority level control signal, the signal is converted into a physical medium through the secret level conversion module for transmission, and the micro switch generates mechanical movement so as to execute a starting command. Preferably, the door may be a security door, an openable and closable door sill, a rolling door, a parking lot door rod, but is not limited thereto.
Preferably, a door-out button is arranged on the second side surface of the door, and the door-out button is a point contact device which is directly connected with the microswitch. When a user needs to enter a non-secret area from a first authority level/secret-related area, the user can directly press an exit button without verification, so that the microswitch is driven to directly execute an opening command.
The access control device can realize a specific implementation mode, and an authorized user can access the first authority level/secret-related area through user authentication, and the access control device comprises the following steps:
step 1: the user requests verification through an authentication module at one side of the door in a second authority level/non-secret area, the authentication module collects and sends user identity information through a first authority level/secret-involved network, and the server receives the user identity information, compares the user identity information with stored information and judges whether the user passes the verification;
step 2-N: if the verification is judged not to pass, the server sends failure information to the authentication module, and the user can not enter the authentication module; (end of operation)
Step 2-Y: if the authentication is judged to pass, the server sends out a first authority level control signal;
and step 3: the first authority level control signal is transmitted to the relay through the authentication module, and the relay drives a current to excite the trigger through a power supply;
and 4, step 4: the telescopic rod of the current excitation trigger contracts to link the microswitch through the physical medium, the microswitch is opened, the entrance guard is opened, and a user can enter a first permission level/secret-related area through the entrance guard. (end of operation)
Specifically, a specific implementation mode can be realized based on the above-mentioned access control device, and the access control device can perform authentication by selecting an authentication mode by a user, so that an authorized user can access a first authority level/secret-related area, and the method includes the following steps:
step 1: the user requests a verification mode through an authentication module at one side of the door in a second authority level/non-secret area, the authentication module collects the verification mode and user information, sends the information of the task to be handled sent by the user through a first authority level/secret-involved network, and the server receives the information of the task to be handled and judges whether the task exists according to the identity information of the user;
step 2-N: if no task is judged, the server sends failure information to the authentication module, and the user cannot enter the authentication module; (end of operation)
Step 2-Y: if the server judges that the task exists, the server sends task information to the authentication module, the authentication module collects and sends user identity information according to the task information, and the server receives the user identity information, compares the user identity information with the stored information and judges whether the user identity information passes verification;
step 3-N: if the verification is judged not to pass, the server sends failure information to the authentication module, and the user can not enter the authentication module; (end of operation)
Step 3-Y: if the authentication is judged to pass, the server sends out a first authority level control signal;
and 4, step 4: the first authority level control signal is transmitted to the relay through the authentication module, and the relay drives a current to excite the trigger through a power supply;
and 5: the telescopic rod of the current excitation trigger is contracted to link the microswitch through a physical medium;
step 6: the micro switch is turned on, the entrance guard is turned on, and a user can enter the first permission level/secret-related area through the entrance guard. (end of operation)
Specifically, a specific implementation mode can be realized based on the above-mentioned access control device, which can enter a second permission level/non-secret area through a first permission level/secret-related area of the access control device, and the method includes the following steps:
step 1: a user starts a door-out button on one side of a door in a first authority level/secret-related area;
step 2: the going-out button is linked with the microswitch, the microswitch is opened, the entrance guard is opened, and the user can enter a second permission level/non-secret area through the entrance guard. (the operation is ended).

Claims (4)

1. The access control system is characterized by comprising a first authority level console, a second authority level execution system and a security level conversion module; wherein the content of the first and second substances,
the first authority level console is used for acquiring and verifying user identity information, and if the user identity information passes verification, a first authority level control signal is sent through a first authority level network and transmitted to the security level conversion module; the security classification conversion module is used for receiving the first authority class control signal, converting the first authority class control signal into a mechanical driving signal, and transmitting the mechanical driving signal to the second authority class execution system through mechanical driving transmission; the second authority level execution system is used for receiving the mechanical driving signal and driving the entrance guard to open,
the security classification conversion module comprises a first authority level connection assembly and a second authority level connection assembly; wherein the content of the first and second substances,
the first authority level connecting assembly is connected with the first authority level console and used for receiving a first authority level control signal, converting the first authority level control signal into a mechanical driving signal and sending the mechanical driving signal to a second authority level connecting assembly; the second authority level connecting component is connected with a second authority level executing system and used for receiving a mechanical driving signal and sending the mechanical driving signal to the second authority level executing system,
the first authority level connecting assembly comprises a relay, a current excitation trigger and a power supply which are connected with each other to form an electric loop, the relay is connected with the first authority level console through a first authority level transmission network, receives a first authority level control signal, drives the current excitation trigger through the electric loop, generates a mechanical driving signal and sends the mechanical driving signal to the second authority level connecting assembly,
the second authority level connection assembly comprises a mechanical connection assembly for enabling the mechanical drive signal to be transmitted to the second authority level execution system by a mechanical drive transmission manner,
the second permission level execution system comprises a microswitch, the microswitch is connected with the secret level conversion module, and the microswitch receives a mechanical driving signal to open the switch so as to drive the entrance guard to open; the second authority level execution system also comprises at least one door, and the door divides a first authority level area and a second authority level area; the security classification conversion module is arranged in the first authority level area in a sealing mode and cannot be in contact with the outside.
2. The access control system of claim 1, wherein the first privilege level console comprises an authentication module and a server; wherein the content of the first and second substances,
the authentication module is used for acquiring user identity information and transmitting the information to the server through first authority level transmission; and the server receives and compares the information, and if the information passes the verification, a first authority level control signal is sent out and sent to the security level conversion module through a first authority level transmission network.
3. The door access system of claim 2, further comprising: the authentication module can send task information to be handled according to selection of a user verification mode, the server receives the task information to be handled through the first permission level transmission network, and whether a task exists or not is judged according to user identity information;
if the server judges that no task exists, the server sends failure information to the authentication module;
if the server judges that the task exists, the server issues task information to the authentication module, the authentication module collects and sends user identity information according to the task information, and the server receives the user identity information and judges whether the verification is passed; if the verification is judged not to pass, the server sends failure information to the authentication module; if the judgment shows that the verification is passed, the server sends a first authority level control signal to the security level conversion module, the security level conversion module converts the first authority level control signal into a mechanical driving signal and sends the mechanical driving signal to the second authority level execution system, and therefore the entrance guard is driven to be opened.
4. A control method for an access control system, comprising:
providing a first permission level console comprising an authentication module and a server;
providing a second privilege level enforcement system comprising a microswitch and at least one gate, the gate dividing a first privilege level region and a second privilege level region; and
providing a security level conversion module which comprises a relay, a current excitation trigger, a power supply and a mechanical connecting assembly; the security classification conversion module is hermetically arranged in a first authority level area and cannot be contacted with the outside; wherein the content of the first and second substances,
the authentication module collects user identity information and sends the information to a server through first authority level transmission; the server receives the information and compares the information, and if the information passes the verification, a first authority level control signal is sent out and transmitted to the relay; the relay receives a first authority level control signal, drives a current excitation trigger through the electric loop, generates a mechanical driving signal and sends the mechanical driving signal to the mechanical connecting component; the mechanical connecting assembly is connected with the current excitation trigger and the microswitch, the microswitch receives a mechanical driving signal and is linked with the current excitation trigger to open the switch so as to drive the entrance guard to open,
the authentication module can send task information to be handled according to selection of a user verification mode, the server receives the task information to be handled through the first permission level transmission network, and whether a task exists or not is judged according to user identity information;
if the server judges that no task exists, the server sends failure information to the authentication module;
if the server judges that the task exists, the server issues task information to the authentication module, the authentication module collects and sends user identity information according to the task information, and the server receives the user identity information and judges whether the verification is passed; if the verification is judged not to pass, the server sends failure information to the authentication module; if the judgment shows that the verification is passed, the server sends a first authority level control signal to the security level conversion module, the security level conversion module converts the first authority level control signal into a mechanical driving signal and sends the mechanical driving signal to the second authority level execution system, and therefore the entrance guard is driven to be opened.
CN201911230057.XA 2019-12-04 2019-12-04 Access control system, control method and device thereof Active CN111063073B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN201911230057.XA CN111063073B (en) 2019-12-04 2019-12-04 Access control system, control method and device thereof

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN201911230057.XA CN111063073B (en) 2019-12-04 2019-12-04 Access control system, control method and device thereof

Publications (2)

Publication Number Publication Date
CN111063073A CN111063073A (en) 2020-04-24
CN111063073B true CN111063073B (en) 2022-03-29

Family

ID=70299767

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201911230057.XA Active CN111063073B (en) 2019-12-04 2019-12-04 Access control system, control method and device thereof

Country Status (1)

Country Link
CN (1) CN111063073B (en)

Families Citing this family (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN113392392B (en) * 2021-03-31 2022-09-13 中富通集团股份有限公司 CTID-based intelligent terminal verification method, intelligent door lock and access control system

Citations (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN202064781U (en) * 2011-05-04 2011-12-07 北京吉源环球科技有限公司 Remote digital control automatic folding vertical hinged door
CN204442386U (en) * 2015-03-25 2015-07-01 深圳光启创新技术有限公司 A kind of photon acceptor terminal and wake-up circuit thereof
CN106981119A (en) * 2017-05-05 2017-07-25 江苏速度信息科技股份有限公司 Entrance guard management system and method based on body shape
CN206610747U (en) * 2017-01-20 2017-11-03 创景传感工业(惠州)有限公司 A kind of train door driving switch
CN207319332U (en) * 2017-11-07 2018-05-04 国网河南省电力公司中牟县供电公司 A kind of intelligent entrance guard lock
CN109191630A (en) * 2018-08-04 2019-01-11 南京理工大学 A kind of Intelligent door lock in hotel of NFC compatible bluetooth

Patent Citations (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN202064781U (en) * 2011-05-04 2011-12-07 北京吉源环球科技有限公司 Remote digital control automatic folding vertical hinged door
CN204442386U (en) * 2015-03-25 2015-07-01 深圳光启创新技术有限公司 A kind of photon acceptor terminal and wake-up circuit thereof
CN206610747U (en) * 2017-01-20 2017-11-03 创景传感工业(惠州)有限公司 A kind of train door driving switch
CN106981119A (en) * 2017-05-05 2017-07-25 江苏速度信息科技股份有限公司 Entrance guard management system and method based on body shape
CN207319332U (en) * 2017-11-07 2018-05-04 国网河南省电力公司中牟县供电公司 A kind of intelligent entrance guard lock
CN109191630A (en) * 2018-08-04 2019-01-11 南京理工大学 A kind of Intelligent door lock in hotel of NFC compatible bluetooth

Also Published As

Publication number Publication date
CN111063073A (en) 2020-04-24

Similar Documents

Publication Publication Date Title
CN102750785B (en) ATM (Automatic Teller Machine) and security authentication system of ATM
US8437477B2 (en) Key information issuing device, wireless operation device, and program
US7870595B2 (en) Apparatus, methods, and system for role-based access in an intelligent electronic device
CN109155088B (en) Dynamic key access control system, method and device
CN112214745B (en) Authenticated external biometric reader and verification device
CN108510626B (en) Dynamic password access control management method and management system thereof
US20100186075A1 (en) Method and system for accessing devices in a secure manner
CN106373237A (en) Remote control door lock system based on Wechat
CN108460862A (en) The method and electric lockset, lock system having with palmprint authentication and Mobile phone control lock
CN105261100A (en) Entrance guard unlocking method and system
US20200098208A1 (en) Security control device, security control method, security system and storage medium
CN105574967A (en) Intelligent access control system and operation method thereof
CN106355710A (en) Remotely controlled door control system based on wechat
CN106373233A (en) Remote-control door access system
CN105096423A (en) Two-dimension code-based intelligent student apartment access control system and control method thereof
CN106097490B (en) A kind of intelligent lock, the door-locking system and method for unlocking being made of lockset
CN111063073B (en) Access control system, control method and device thereof
CN114360105A (en) Wisdom visitor management and control platform
JP2016184875A (en) Key data communication system
CN206193962U (en) Adopt access control system of two -dimensional code authentication
CN109754507B (en) Door lock control method, device and system
CN104935486A (en) Intelligent gated comprehensive information management method
JP4531211B2 (en) Portable terminal having master key function and electric lock used therefor
CN108537924B (en) Method for realizing network intelligent lock
JP5255921B2 (en) Key management system

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
GR01 Patent grant
GR01 Patent grant