CN114553474B

CN114553474B - Access control permission control method and device based on Internet of things

Info

Publication number: CN114553474B
Application number: CN202210014996.6A
Authority: CN
Inventors: 黄兵; 唐重阳; 张泰�; 李澄澄; 程鹏飞; 曾锡池
Original assignee: China Southern Power Grid Digital Platform Technology Guangdong Co ltd
Current assignee: China Southern Power Grid Digital Platform Technology Guangdong Co ltd
Priority date: 2022-01-07
Filing date: 2022-01-07
Publication date: 2023-11-03
Anticipated expiration: 2042-01-07
Also published as: CN114553474A

Abstract

The invention discloses an access control authority control method and device based on the Internet of things, wherein the method comprises the following steps: when a passing request aiming at access control equipment accessing to an internet of things platform is detected, acquiring identification information corresponding to a target object corresponding to the passing request, wherein the target object comprises personnel or vehicles triggering the passing request; determining authority attributes of the target object according to the identification information; controlling the access control equipment to execute matched operation according to the authority attribute; and storing equipment data corresponding to the access control equipment into a storage space corresponding to the access control equipment on the internet of things platform, wherein the equipment data at least comprises traffic data of a target object about a traffic request. Therefore, the invention can not only control the entrance and exit channels of personnel and vehicles in real time, but also meet the monitoring and backtracking requirements of the traffic conditions of the personnel and vehicles by storing the equipment data of the entrance guard equipment, thereby being beneficial to improving the safety of the entrance guard system and reducing the safety control cost of the entrance guard system.

Description

Access control permission control method and device based on Internet of things

Technical Field

The invention relates to the technical field of the Internet of things, in particular to an access control right control method and device based on the Internet of things.

Background

In real life, the access control system is widely applied to the access channels of various places, such as communities and industrial parks, because the access channels can be effectively and safely controlled. However, the practice finds that the current access control system can only control the access passage of people and vehicles at present, and cannot trace back the traffic situation of the people and vehicles, so that the security of the access control system is low and the cost of security control is high. Therefore, how to provide a new access control authority control method to improve the security of the access control system and reduce the security management and control cost of the access control system is important.

Disclosure of Invention

The technical problem to be solved by the invention is to provide the access control authority control method and the device based on the Internet of things, which are beneficial to improving the safety of an access control system and reducing the safety control cost of the access control system.

In order to solve the technical problems, the first aspect of the invention discloses an access control authority control method based on the Internet of things, which comprises the following steps:

when a passing request aiming at access control equipment accessing to an internet of things platform is detected, acquiring identification information corresponding to a target object corresponding to the passing request, wherein the target object comprises personnel or vehicles triggering the passing request;

Determining the authority attribute of the target object according to the identification information;

according to the authority attribute, controlling the access control equipment to execute matched operation;

and storing the equipment data corresponding to the access control equipment into a storage space corresponding to the access control equipment on the internet of things platform, wherein the equipment data at least comprises traffic data of the target object about the traffic request.

As an optional implementation manner, in the first aspect of the present invention, the determining, according to the identification information, a rights attribute of the target object includes:

determining target identity information corresponding to the identification information based on an identity database of the internet of things platform, and determining identity information of all authorized objects corresponding to the access control equipment based on an access control authority database of the internet of things platform;

judging whether the target identity information is matched with the identity information of one of the authorized objects;

when the judgment result is yes, determining that the authority attribute of the target object is an authorized attribute;

when the judgment result is negative, determining that the authority attribute of the target object is an unauthorized attribute;

when the identification information includes at least two pieces of sub-identification information, the determining, based on the identity database of the internet of things, the target identity information corresponding to the identification information includes:

Based on an identity database of the Internet of things platform, determining identity information corresponding to each piece of sub-identification information;

judging whether the identity information corresponding to each piece of sub-identification information is the same identity information or not;

when the judgment result is yes, determining the identity information corresponding to any sub-identification information as target identity information corresponding to the identification information;

when the judgment result is negative, determining identity information corresponding to body identification information in all the sub-identification information as target identity information corresponding to the identification information, wherein the body identification information comprises the sub-identification information determined based on the body characteristics of the target object;

and controlling the access control equipment to execute matched operation according to the authority attribute, wherein the method comprises the following steps:

when the authority attribute is an authorized attribute, controlling the access control equipment to release the target object;

and when the permission attribute is an unauthorized attribute, controlling the access control equipment to output a no-pass permission prompt to the target object.

As an optional implementation manner, in the first aspect of the present invention, after the determining, according to the identification information, a rights attribute of the target object, the method further includes:

When the authority attribute is the unauthorized attribute, detecting whether an access control authorization request aiming at the access control equipment, triggered by the target object, is received;

when the detection result is yes, judging whether the target object meets the authorization condition of the access control equipment according to the target identity information;

when the target object meets the authorization condition, granting the target object target authority for the access control equipment;

wherein, before the granting of the rights of the target object to the access control device, the method further comprises:

judging whether the authority level corresponding to the target object is greater than or equal to a preset level according to the target identity information;

when the authority level is greater than or equal to the preset level, determining that the target authority comprises a first authority and a second authority, wherein the first authority comprises the passing authority of the access control equipment, and the second authority comprises the authority for adding an authorized object to the access control equipment and/or deleting the authorized object;

and when the permission level is smaller than the preset level, determining that the target permission comprises a first permission.

As an optional implementation manner, in the first aspect of the present invention, before the granting of the right to the access device to the target object, the method further includes:

Judging whether associated access control equipment of the access control equipment exists in all unauthorized access control equipment corresponding to the target object according to a control area corresponding to the access control equipment, wherein the control area corresponding to the associated access control equipment comprises a control area corresponding to the access control equipment;

and when the judgment result is yes, granting the target permission of the target object for the access control equipment comprises the following steps:

and granting the target object target permission aiming at the access control equipment and the associated access control equipment.

As an optional implementation manner, in the first aspect of the present invention, the device data has a corresponding data theme;

before the device data corresponding to the access control device are stored in the storage space corresponding to the internet of things platform, the method further comprises:

uploading equipment data corresponding to the access control equipment to a data middleware of the Internet of things platform;

judging whether a data theme corresponding to the equipment data is matched with a target data theme in the data middleware or not, wherein the target data theme comprises any data theme subscribed by an engine corresponding to the Internet of things platform in the data middleware, and the engine corresponds to at least one analysis mode;

When the judgment result is yes, determining a target analysis mode corresponding to the access control equipment in all the analysis modes according to the data subject corresponding to the equipment data;

screening equipment data which are correspondingly matched with the target analysis mode from the equipment data based on the engine;

embedding the screening equipment data into a data model corresponding to the target analysis mode to obtain target equipment data based on a target storage format;

and storing the equipment data corresponding to the access control equipment to a storage space corresponding to the access control equipment in the internet of things platform, wherein the storage space comprises:

and storing the target equipment data into a storage space corresponding to the access control equipment in the internet of things platform.

As an optional implementation manner, in the first aspect of the present invention, before uploading the device data corresponding to the access control device to the data middleware of the internet of things platform, the method further includes:

judging whether a data theme corresponding to equipment data of the access control equipment is matched with any data theme in a data middleware of the Internet of things platform;

if not, creating a data theme corresponding to the equipment data in the data middleware;

Adding a data theme corresponding to the equipment data to a subscribed theme queue of an engine of the internet of things platform in the data middleware, and triggering and executing the operation of uploading the equipment data corresponding to the access control equipment to the data middleware of the internet of things platform;

and when the data subject corresponding to the equipment data is not matched with all the data subjects in the data middleware, determining a target analysis mode corresponding to the access control equipment in all the analysis modes according to the data subject corresponding to the equipment data, wherein the target analysis mode comprises the following steps:

determining equipment corresponding to each analysis mode corresponding to the engine;

judging whether the same type of equipment corresponding to the access control equipment exists in all the equipment corresponding to the analysis mode;

and when the judgment result is yes, determining the analysis mode corresponding to the equipment of the same type as the target analysis mode of the access control equipment.

As an alternative embodiment, in the first aspect of the present invention, the method further includes:

analyzing all historical traffic data of the access control equipment in the storage space to obtain traffic flow corresponding to each time interval of the access control equipment in a preset period, wherein the preset period comprises any one of natural years, natural months, natural weeks and natural days;

Judging whether the traffic flow of the access control equipment corresponding to each time interval is smaller than a preset flow or not according to the traffic flow of the access control equipment corresponding to each time interval, and determining the time interval as a target time interval when the judgment result is yes;

when the current moment is positioned in any target time interval, detecting whether an access reservation request corresponding to the access control equipment in the target time interval is received in advance or not;

when the detection result is negative, controlling the access control equipment to enter a dormant state;

and when the detection result is yes, determining an access time interval corresponding to the access reservation request according to the access reservation request, and controlling the access control equipment to enter a sleep state in a sleep time interval, wherein the sleep time interval comprises a time interval except the access time interval in a target time interval in which the current time is positioned.

The invention discloses an access control right control device based on the Internet of things, which comprises:

the system comprises an acquisition module, a control module and a control module, wherein the acquisition module is used for acquiring identification information corresponding to a target object corresponding to a passing request when the passing request of access control equipment accessed to an internet of things platform is detected, and the target object comprises personnel or vehicles triggering the passing request;

The determining module is used for determining the authority attribute of the target object according to the identification information;

the control module is used for controlling the access control equipment to execute matched operation according to the authority attribute;

and the storage module is used for storing the equipment data corresponding to the access control equipment into a storage space corresponding to the access control equipment on the internet of things platform, wherein the equipment data at least comprises the traffic data of the target object about the traffic request.

In a second aspect of the present invention, as an optional implementation manner, the determining module determines, according to the identification information, a rights attribute of the target object, where the specific manner includes:

The identification information comprises at least one piece of sub-identification information, and the specific mode of determining the target identity information corresponding to the identification information based on the identity database of the Internet of things comprises the following steps:

when the identification information comprises at least two pieces of sub-identification information, determining identity information corresponding to each piece of sub-identification information based on an identity database of the internet of things platform;

and the specific mode of controlling the access control equipment to execute the matched operation by the control module according to the authority attribute comprises the following steps:

As an alternative embodiment, in the second aspect of the present invention, the apparatus further includes:

the first detection module is used for detecting whether an access control authorization request for the access control equipment triggered by the target object is received or not when the authority attribute is the unauthorized attribute after the determination module determines the authority attribute of the target object according to the identification information;

the first judging module is used for judging whether the target object meets the authorization condition of the access control equipment according to the target identity information when the first detecting module detects that the access control authorization request is received;

the authorization module is used for granting the target object target permission for the access control equipment when the first judgment module judges that the target object meets the authorization condition;

the first judging module is further used for judging whether the authority level corresponding to the target object is greater than or equal to a preset level according to the target identity information before the authorization module grants the target authority of the target object to the access control equipment;

The determining module is further configured to determine that the target authority includes a first authority and a second authority when the first judging module judges that the authority level is greater than or equal to the preset level, and determine that the target authority includes a first authority when the first judging module judges that the authority level is less than the preset level; the first authority comprises the passing authority of the access control equipment, and the second authority comprises the authority for adding and/or deleting the authorized object to the access control equipment.

As an optional implementation manner, in the second aspect of the present invention, the first determining module is further configured to determine, according to a control area corresponding to the access control device, whether associated access control devices of the access control device exist in all unauthorized access control devices corresponding to the target object before the authorization module grants the target object permission for the access control device, where the control area corresponding to the associated access control device includes a control area corresponding to the access control device;

and the specific mode of the authorization module granting the permission of the target object to the access control equipment comprises the following steps:

And when the first judging module judges that the associated access control equipment exists in all the unauthorized access control equipment, granting the target object target permission for the access control equipment and the associated access control equipment.

the data transmission module is used for uploading the equipment data corresponding to the access control equipment to the data middleware of the internet of things platform before the storage module stores the equipment data corresponding to the access control equipment to the storage space corresponding to the internet of things platform;

the second judging module is used for judging whether a data theme corresponding to the equipment data is matched with a target data theme in the data middleware or not, wherein the target data theme comprises any data theme subscribed by an engine corresponding to the Internet of things platform in the data middleware, and the engine corresponds to at least one analysis mode;

the determining module is further configured to determine, according to the data subject corresponding to the device data, a target analysis mode corresponding to the access control device from all the analysis modes when the second judging module judges that the data subject corresponding to the device data matches the target data subject;

The screening module is used for screening equipment data which are correspondingly matched with the target analysis mode from the equipment data based on the engine;

the embedding module is used for embedding the screening equipment data into a data model corresponding to the target analysis mode to obtain target equipment data based on a target storage format;

and the specific mode of the storage module for storing the equipment data corresponding to the access control equipment into the storage space corresponding to the internet of things platform by the access control equipment comprises the following steps:

As an optional implementation manner, in the second aspect of the present invention, the second judging module is further configured to judge, before the data transmission module uploads the device data corresponding to the access control device to the data middleware of the internet of things platform, whether a data topic corresponding to the device data of the access control device matches any one of the data topics in the data middleware of the internet of things platform;

the apparatus further comprises:

the creation module is used for creating the data theme corresponding to the equipment data in the data middleware when the second judgment module judges that the data theme corresponding to the equipment data is not matched with all the data themes in the data middleware;

The adding module is used for adding the data theme corresponding to the equipment data to a subscribed theme queue of an engine of the internet of things platform in the data middleware and triggering the data transmission module to execute the operation of uploading the equipment data corresponding to the access control equipment to the data middleware of the internet of things platform;

and the determining module determines the specific mode of the target analysis mode corresponding to the access control equipment in all the analysis modes according to the data subject corresponding to the equipment data, wherein the specific mode comprises the following steps:

when the second judging module judges that the data subject corresponding to the equipment data is not matched with all the data subjects in the data middleware, equipment corresponding to each analysis mode corresponding to the engine is determined;

the analysis module is used for analyzing all historical traffic data of the access control equipment in the storage space to obtain traffic flow corresponding to each time interval of the access control equipment in a preset period, wherein the preset period comprises any one of natural years, natural months, natural weeks and natural days;

The second judging module is further configured to judge, according to the traffic flow of the access control device corresponding to each time interval, whether the traffic flow of the access control device corresponding to the time interval is smaller than a preset flow, and when the judgment result is yes, determine the time interval as a target time interval;

the second detection module is used for detecting whether an access reservation request corresponding to the access control equipment in the target time interval is received in advance or not when the current moment is in any target time interval;

the control module is further used for controlling the access control equipment to enter a dormant state when the second detection module detects that the access reservation request is not received in advance;

the determining module is further configured to determine, when the second detecting module detects that the access reservation request is received in advance, an access time interval corresponding to the access reservation request according to the access reservation request;

the control module is further used for controlling the access control device to enter a sleep state in a sleep time interval, and the sleep time interval comprises a time interval except the access time interval in a target time interval where the current moment is located.

The third aspect of the invention discloses another access control right control device based on the Internet of things, which comprises:

a memory storing executable program code;

a processor coupled to the memory;

the processor calls the executable program codes stored in the memory to execute the access control authority control method based on the Internet of things, which is disclosed in the first aspect of the invention.

The fourth aspect of the present invention discloses a computer storage medium, where the computer storage medium stores computer instructions, where the computer instructions are used to execute the access right control method based on the internet of things disclosed in the first aspect of the present invention when the computer instructions are called.

Compared with the prior art, the embodiment of the invention has the following beneficial effects:

in the embodiment of the invention, when a passing request aiming at access control equipment accessing to an internet of things platform is detected, identification information corresponding to a target object corresponding to the passing request is acquired, wherein the target object comprises personnel or vehicles triggering the passing request; determining authority attributes of the target object according to the identification information; controlling the access control equipment to execute matched operation according to the authority attribute; and storing the equipment data corresponding to the access control equipment into a storage space corresponding to the access control equipment on the internet of things platform, wherein the equipment data at least comprises traffic data of the target object about the traffic request. Therefore, the invention can not only carry out real-time control when people and vehicles enter and exit channels, but also can meet the monitoring and backtracking requirements on the traffic conditions of the people and vehicles by storing the equipment data of the access control equipment, so that the responsibility main body can be confirmed by checking the equipment data when the control area corresponding to the access control equipment is abnormal, thereby being beneficial to further improving the safety of the access control system and reducing the safety control cost of the access control system.

Drawings

In order to more clearly illustrate the technical solutions of the embodiments of the present invention, the drawings required for the description of the embodiments will be briefly described below, and it is apparent that the drawings in the following description are only some embodiments of the present invention, and other drawings may be obtained according to these drawings without inventive effort for a person skilled in the art.

Fig. 1 is a schematic flow chart of an access control authority control method based on the internet of things, which is disclosed by the embodiment of the invention;

fig. 2 is a schematic flow chart of another access right control method based on the internet of things, which is disclosed in the embodiment of the invention;

fig. 3 is a schematic structural diagram of an access right control device based on the internet of things, which is disclosed in the embodiment of the invention;

fig. 4 is a schematic structural diagram of another access right control device based on the internet of things, which is disclosed in the embodiment of the invention;

fig. 5 is a schematic structural diagram of another access right control device based on the internet of things according to the embodiment of the invention.

Detailed Description

In order that those skilled in the art will better understand the present invention, a technical solution in the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings in which it is apparent that the described embodiments are only some embodiments of the present invention, not all embodiments. All other embodiments, which can be made by those skilled in the art based on the embodiments of the invention without making any inventive effort, are intended to be within the scope of the invention.

The terms first, second and the like in the description and in the claims and in the above-described figures are used for distinguishing between different objects and not necessarily for describing a sequential or chronological order. Furthermore, the terms "comprise" and "have," as well as any variations thereof, are intended to cover a non-exclusive inclusion. For example, a process, method, apparatus, article, or article that comprises a list of steps or elements is not limited to only those listed but may optionally include other steps or elements not listed or inherent to such process, method, article, or article.

Reference herein to "an embodiment" means that a particular feature, structure, or characteristic described in connection with the embodiment may be included in at least one embodiment of the invention. The appearances of such phrases in various places in the specification are not necessarily all referring to the same embodiment, nor are separate or alternative embodiments mutually exclusive of other embodiments. Those of skill in the art will explicitly and implicitly appreciate that the embodiments described herein may be combined with other embodiments.

The invention discloses an access control authority control method and device based on the Internet of things, which not only can carry out real-time control on access channels of personnel and vehicles, but also can meet the monitoring and backtracking requirements on the traffic conditions of the personnel and the vehicles by storing equipment data of access control equipment, so that a responsible main body can be confirmed by checking the equipment data when abnormal states occur in a control area corresponding to the access control equipment, the safety of an access control system can be further improved, and the safety control cost of the access control system can be reduced. The following will describe in detail.

Example 1

Referring to fig. 1, fig. 1 is a flow chart of an access right control method based on the internet of things according to an embodiment of the present invention. The access right control method based on the internet of things described in fig. 1 can be applied to any scene where the traffic of people and vehicles is required to be controlled, such as an entrance and an exit of a district, a school, a office building and the like, and an entrance and an exit of a parking lot in the above places, and can also be applied to switching equipment for controlling the use right, such as switching equipment of an intelligent drawer and the like. As shown in fig. 1, the access control authority control method based on the internet of things may include the following operations:

101. when a passing request aiming at access control equipment accessing to the internet of things platform is detected, acquiring identification information corresponding to a target object corresponding to the passing request, wherein the target object comprises personnel or vehicles triggering the passing request.

In the embodiment of the invention, the passing request can be actively triggered by a target object, when the target object is a person, the target object can trigger the passing request by inputting a fingerprint to access control equipment, swiping an access control card or an IC card and clicking a related button, and can trigger the passing request on an internet of things platform through an intelligent terminal; the passing request can also be automatically triggered by the target object, specifically, when the detection device corresponding to the access control device detects that the target object enters the detection range of the detection device, the detection device can comprise a recognition device, such as a camera or an infrared detector, the embodiment of the invention is not limited, in addition, when the target object is a vehicle, besides the triggering method, the vehicle can also automatically perform wireless short-distance communication interaction triggering passing request through the communication device corresponding to the access control device on the vehicle when entering the signal recognition range of the access control device, wherein the detection device or the communication device can be independent of the access control device or can be integrated in the access control device, and the embodiment of the invention is not limited.

In the embodiment of the present invention, when the target object is a person, the identification information of the target object may include one or more of face information, fingerprint information, access control card or IC card information, height information, and the like of the target object, and when the target object is a vehicle, the identification information of the target object may include one or more of vehicle identifications corresponding to the vehicle, such as license plate numbers, ETC identifications, and face information, fingerprint information, access control card or IC card information, and the like of related persons of the vehicle, where the embodiment of the present invention is not limited.

102. And determining the authority attribute of the target object according to the identification information.

As an alternative embodiment, determining the authority attribute of the target object according to the identification information may include:

and when the judgment result is negative, determining that the authority attribute of the target object is an unauthorized attribute.

In this optional embodiment, optionally, the target identity information includes one or more of a personnel number, a personnel name, personnel identity card information, personnel occupation information, and the like of the target object, which is not limited by the embodiment of the present invention.

Therefore, the implementation of the optional implementation mode can determine the authority attribute of the target object by combining the acquired identification information with the database of the internet of things platform, and the intelligence, accuracy and reliability of determining the authority attribute are improved, so that the safety of the access control system is improved.

In this optional embodiment, optionally, the identification information includes at least one piece of sub-identification information, and when the identification information includes at least two pieces of sub-identification information, determining, based on an identity database of the internet of things, the target identity information corresponding to the identification information may include:

when the judgment result is yes, the identity information corresponding to any piece of sub-identification information is determined to be the target identity information corresponding to the identification information;

and when the judgment result is negative, determining the identity information corresponding to the body identification information in all the sub-identification information as target identity information corresponding to the identification information, wherein the body identification information comprises the sub-identification information determined based on the body characteristics of the target object.

Therefore, when the sub-identification information of the same target object is not matched, the identity information of the target object can be determined based on the physical characteristics, so that the accuracy and the reliability of determining the identity information of the target object are improved, the condition that the target object uses the identity information of other people to pass through the access control equipment is reduced, and the safety and the reliability of the access control system are improved.

103. And controlling the access control equipment to execute the matched operation according to the authority attribute.

As an optional implementation manner, according to the authority attribute, controlling the access control device to perform the matched operation may include:

when the right attribute is an authorized attribute, controlling the access control equipment to release the target object;

It can be seen that implementing this alternative embodiment can improve the accuracy and reliability of controlling the access control device to perform the matched operation.

104. And storing the equipment data corresponding to the access control equipment into a storage space corresponding to the access control equipment on the internet of things platform, wherein the equipment data at least comprises traffic data of the target object about the traffic request.

In the embodiment of the invention, the passing data of the target object about the passing request can include one or more of identification information, target identity information corresponding to the identification information, authority attribute, passing request triggering mode, passing request triggering time, physical parameter corresponding to the target identity, equipment identifier of access control equipment and the like, wherein the passing request triggering mode can include one or more of card swiping triggering mode, fingerprint triggering mode, face triggering mode and the like. Optionally, the device data corresponding to the access device may further include one or more of a device state of the access device, an authorization record of the access device, and the like, the device state of the access device may include one of an online state, an offline state, an abnormal state, and the like, the authorization record of the access device may include one or more of identity information of an authorized object of the authorization record, identification information of the authorized object, an authorization time range of the authorized object, an authorized subject, and the like, where the authorized subject may include one of the access device, an authority control system corresponding to the access device, an authority control person corresponding to the access device, and the like.

Therefore, by implementing the embodiment of the invention, not only can the real-time control be performed when people and vehicles enter and exit channels, but also the requirements of monitoring and backtracking the traffic conditions of the people and the vehicles can be met by storing the equipment data of the access control equipment, so that the responsibility main body can be confirmed by checking the equipment data when the control area corresponding to the access control equipment is abnormal, the safety of the access control system can be further improved, and the safety control cost of the access control system can be reduced.

In an alternative embodiment, the device data has a corresponding data theme;

before the device data corresponding to the access control device are stored in the storage space corresponding to the internet of things platform, the method can further comprise the following steps:

judging whether a data theme corresponding to the equipment data is matched with a target data theme in the data middleware, wherein the target data theme comprises any data theme subscribed by an engine corresponding to the Internet of things platform in the data middleware, and the engine corresponds to at least one analysis mode;

when the judgment result is yes, determining a target analysis mode corresponding to the access control equipment in all analysis modes according to the data subject corresponding to the equipment data;

screening the screening equipment data which are correspondingly matched with the target analysis mode from the equipment data based on the engine;

and storing the device data corresponding to the access control device to a storage space corresponding to the access control device on the internet of things platform, which may include:

Therefore, the data can be stored into the storage space after accurate screening and format conversion by implementing the optional embodiment, so that the accuracy and reliability of data storage are improved, and the accurate equipment data can be conveniently output by related personnel of the Internet of things platform when the equipment data need to be checked.

In this optional embodiment, as an optional implementation manner, before uploading the device data corresponding to the access control device to the data middleware of the internet of things platform, the method may further include:

if the judgment result is negative, creating a data theme corresponding to the backup data in the data middleware;

and adding the data theme corresponding to the equipment data to a subscribed theme queue of an engine of the internet of things platform in the data middleware, and triggering and executing the operation of uploading the equipment data corresponding to the access control equipment to the data middleware of the internet of things platform.

Therefore, by implementing the optional implementation mode, the data subject can be automatically added to the equipment data of the access control equipment in the data middleware, so that the situation that the data cannot be screened or stored due to the fact that the data subject matched with the equipment data of the access control equipment does not exist is reduced.

In this optional embodiment, optionally, when the data theme corresponding to the device data does not match all the data themes in the data middleware, determining, according to the data theme corresponding to the device data, the target analysis mode corresponding to the access device in all the analysis modes may include:

judging whether the equipment corresponding to the access control equipment exists in the equipment corresponding to all the analysis modes;

Therefore, the implementation of the optional implementation mode can also reduce the time cost and the operation cost consumed by creating a new analysis mode by referring to the analysis modes of other equipment of the same type as the analysis modes of the access control equipment, and improve the efficiency of determining the analysis modes corresponding to the access control equipment.

In another alternative embodiment, the method may further comprise:

and when the detection result is yes, determining an access time interval corresponding to the access reservation request according to the access reservation request, and controlling the access control equipment to enter a sleep state in a sleep time interval, wherein the sleep time interval comprises a time interval except the access time interval in a target time interval where the current time is positioned.

Therefore, by implementing the optional embodiment, the working state of the access control equipment can be regulated and controlled according to the historical traffic data of the access control equipment, so that the energy consumption of the access control equipment in a time interval with less visitors is saved.

In yet another alternative embodiment, the method may further comprise:

determining all data types corresponding to the access control equipment and acquisition trigger mechanisms of all the data types, wherein the acquisition trigger mechanisms of all the data types comprise a time trigger mechanism and/or an event trigger mechanism;

When the acquisition triggering mechanism of the target data type corresponding to the access control equipment comprises a time triggering mechanism, judging whether the acquisition interval duration corresponding to the access control equipment is longer than a preset duration; when the judgment result is yes, acquiring target equipment data corresponding to the target data type based on the access control equipment, and triggering and executing the operation of storing the equipment data corresponding to the access control equipment into a storage space corresponding to the internet of things platform of the access control equipment; the acquisition interval time is the interval time between the acquisition time of equipment data corresponding to the last acquisition target data type and the current time, and the equipment data corresponding to the access control equipment comprises the target equipment data;

when the acquisition trigger mechanism of the target data type corresponding to the access control equipment comprises an event trigger mechanism, detecting whether a trigger event aiming at the target equipment data corresponding to the target data type currently occurs or not based on the access control equipment; when the detection result is yes, acquiring target equipment data corresponding to the target data type based on the access control equipment, and triggering and executing the operation of storing the equipment data corresponding to the access control equipment into a storage space corresponding to the internet of things platform of the access control equipment; the equipment data corresponding to the access control equipment comprise target equipment data.

Therefore, by implementing the optional embodiment, a matched acquisition trigger mechanism can be selected according to different data types, so that the matching degree of acquired equipment data and actual requirements is improved, and the diversity and flexibility of data acquisition and data storage are improved.

Example two

Referring to fig. 2, fig. 2 is a flow chart of another access right control method based on the internet of things according to an embodiment of the present invention. The access right control method based on the internet of things described in fig. 2 can be applied to any scene where the traffic of people and vehicles is required to be controlled, such as an entrance and an exit of a district, a school, a office building and the like, and an entrance and an exit of a parking lot in the above places, and can also be applied to switching equipment for controlling the use right, such as switching equipment of an intelligent drawer and the like. As shown in fig. 2, the access control authority control method based on the internet of things may include the following operations:

201. when a passing request aiming at access control equipment accessing to the internet of things platform is detected, acquiring identification information corresponding to a target object corresponding to the passing request, wherein the target object comprises personnel or vehicles triggering the passing request.

202. And determining the authority attribute of the target object according to the identification information.

203. And controlling the access control equipment to execute the matched operation according to the authority attribute.

204. And storing the equipment data corresponding to the access control equipment into a storage space corresponding to the access control equipment on the internet of things platform, wherein the equipment data at least comprises traffic data of the target object about the traffic request.

205. And when the permission attribute is an unauthorized attribute, detecting whether an access control authorization request for the access control equipment triggered by the target object is accepted.

In the embodiment of the invention, the target object can trigger the access control authorization request through the access control equipment, can trigger the access control authorization request through the intelligent equipment such as the intelligent terminal, and can be optionally triggered in a key interaction mode or in a voice interaction mode when the target object triggers the access control authorization request through the access control equipment.

206. And when the detection result of the step 205 is yes, judging whether the target object meets the authorization condition of the access control equipment according to the target identity information.

207. And when the judgment result of the step 206 is yes, granting the target object target permission for the access control equipment.

In the embodiment of the present invention, for other descriptions of steps 201 to 204, please refer to the detailed descriptions of steps 101 to 104 in the first embodiment, and the description of the embodiment of the present invention is omitted.

It should be noted that, in other embodiments, when the authority attribute is an unauthorized attribute, step 205 may be directly triggered without executing step 206.

Therefore, the embodiment of the invention not only can carry out real-time control when people and vehicles enter and exit channels, but also can meet the requirements of monitoring and backtracking the passing conditions of the people and the vehicles by storing the equipment data of the access control equipment, so that the security of the access control system can be further improved by checking the equipment data to confirm the responsibility main body when the abnormal state occurs in the control area corresponding to the access control equipment, the security control cost of the access control system can be reduced, in addition, the access control authority of the personnel or the vehicles on the access control equipment can be timely granted according to the acquired identification information, and the convenience and the intelligence of the access control authority grant can be improved.

In an alternative embodiment, the method may further comprise, prior to granting the target object rights to the access device:

when the authority level is greater than or equal to a preset level, determining that the target authority comprises a first authority and a second authority, wherein the first authority comprises the passing authority of the access control equipment, and the second authority comprises the authority for adding an authorized object to the access control equipment and/or deleting the authorized object;

When the authority level is smaller than the preset level, determining that the target authority comprises the first authority.

Therefore, the implementation of the optional embodiment can grant different types of rights to the target object according to actual requirements, so that the diversity and flexibility of access right grant can be improved, and the matching degree of the granted rights type and the identity information of the target object can be improved, thereby improving the accuracy and reliability of access right grant.

In another alternative embodiment, the method may further comprise, prior to granting the target object rights to the access device:

judging whether associated access control equipment of the access control equipment exists in all unauthorized access control equipment corresponding to the target object according to a control area corresponding to the access control equipment, wherein the control area corresponding to the associated access control equipment comprises the control area corresponding to the access control equipment;

when the judgment result is yes, the granting of the target permission of the target object for the access control equipment can comprise:

and granting the target object target permission for the access control equipment and the associated access control equipment.

Therefore, the implementation of the optional embodiment can grant the access control device and the access control permission of the associated access control device for the target object at the same time, so that the efficiency of the access control permission grant is improved.

Example III

Referring to fig. 3, fig. 3 is a schematic structural diagram of an access right control device based on the internet of things according to an embodiment of the present invention. The access right control device based on the internet of things described in fig. 3 can be applied to any scene where the traffic of people and vehicles is required to be controlled, such as an entrance and an exit of a district, a school, a office building and the like, and an entrance and an exit of a parking lot in the above places, and can also be applied to a switch device for controlling the use right, such as a switch device of an intelligent drawer and the like. As shown in fig. 3, the access right control device based on the internet of things may include:

the acquisition module 301 is configured to acquire, when a passage request for an access control device accessing to the internet of things platform is detected, identification information corresponding to a target object corresponding to the passage request, where the target object includes a person or a vehicle triggering the passage request;

a determining module 302, configured to determine a rights attribute of the target object according to the identification information;

the control module 303 is configured to control the access control device to perform a matched operation according to the authority attribute;

the storage module 304 is configured to store device data corresponding to the access control device into a storage space corresponding to the access control device on the internet of things platform, where the device data at least includes traffic data about a traffic request of a target object.

Therefore, the device described in the implementation fig. 3 not only can perform real-time control on the entrance and exit channels of people and vehicles, but also can meet the monitoring and backtracking requirements on the traffic conditions of the people and vehicles by storing the equipment data of the entrance guard equipment, so that the responsibility main body can be confirmed by checking the equipment data when the control area corresponding to the entrance guard equipment is abnormal, the safety of the entrance guard system can be further improved, and the safety control cost of the entrance guard system can be reduced.

In an alternative embodiment, as shown in fig. 3, the specific manner of determining the rights attribute of the target object by the determining module 302 according to the identification information may include:

The determining module 302 may determine, based on the identity database of the internet of things, the specific manner of determining the target identity information corresponding to the identification information, where the identification information includes:

when the judgment result is negative, the identity information corresponding to the body identification information in all the sub-identification information is determined to be the target identity information corresponding to the identification information, and the body identification information comprises the sub-identification information determined based on the body characteristics of the target object;

and, the specific manner of controlling the access control device to perform the matched operation by the control module 303 according to the authority attribute may include:

It can be seen that the device described in fig. 3 can also combine the collected identification information with the database of the internet of things platform to determine the authority attribute of the target object, so that the intelligence, accuracy and reliability of determining the authority attribute are improved, the identity information of the target object can be determined based on the physical characteristics when a plurality of pieces of sub-identification information of the same target object are not matched, the accuracy and reliability of determining the identity information of the target object are improved, the condition that the target object uses the identity information of other people to pass through the access control equipment is reduced, and the safety and reliability of the access control system are improved.

In another alternative embodiment, as shown in fig. 4, the apparatus may further include:

the first detection module 305 is configured to detect whether an access control authorization request for an access control device triggered by a target object is received when the authority attribute is an unauthorized attribute after the determination module 302 determines the authority attribute of the target object according to the identification information;

a first judging module 306, configured to judge, according to the target identity information, whether the target object meets an authorization condition of the access control device when the first detecting module 305 detects that the access control authorization request is received;

An authorization module 307, configured to grant the target object a target right for the access control device when the first determination module 306 determines that the target object meets an authorization condition;

and, the first judging module 306 is further configured to judge, according to the target identity information, whether the permission level corresponding to the target object is greater than or equal to a preset level before the authorization module 307 grants the target permission to the access control device to the target object;

the determining module 302 is further configured to determine that the target authority includes a first authority and a second authority when the first determining module 306 determines that the authority level is greater than or equal to the preset level, and determine that the target authority includes the first authority when the first determining module 306 determines that the authority level is less than the preset level; the first authority comprises the passing authority of the access control equipment, and the second authority comprises the authority for adding an authorized object to the access control equipment and/or deleting the authorized object.

Therefore, the device described in the implementation fig. 4 can grant different types of rights to the target object according to actual requirements, so that the diversity and flexibility of access right grant can be improved, and the matching degree of the granted rights and the identity information of the target object can be improved, thereby improving the accuracy and reliability of access right grant.

In yet another alternative embodiment, as shown in fig. 4, the first determining module 306 is further configured to determine, before the authorization module 307 grants the permission of the target object for the access device, whether associated access devices of the access devices exist in all unauthorized access devices corresponding to the target object according to a control area corresponding to the access devices, where the control area corresponding to the associated access devices includes a control area corresponding to the access devices;

and, the specific manner in which the authorization module 307 grants the target object the right to the access control device may include:

and when the first judging module 306 judges that the associated access control equipment exists in all the unauthorized access control equipment, the target object is granted with the target authority for the access control equipment and the associated access control equipment.

It can be seen that the device described in fig. 4 can also grant access rights to both the access device and the associated access device for the target object, thereby improving the efficiency of access rights grant.

In yet another alternative embodiment, as shown in fig. 4, the apparatus may further include:

the data transmission module 308 is configured to upload device data corresponding to the access control device to a data middleware of the internet of things platform before the storage module 304 stores the device data corresponding to the access control device to a storage space corresponding to the internet of things platform;

The second judging module 309 is configured to judge whether a data topic corresponding to the device data matches a target data topic in the data middleware, where the target data topic includes any data topic subscribed by an engine corresponding to the platform of the internet of things in the data middleware, and the engine corresponds to at least one analysis mode;

the determining module 302 is further configured to determine, according to the data topic corresponding to the device data, a target analysis mode corresponding to the access control device from all analysis modes when the second judging module 309 judges that the data topic corresponding to the device data matches the target data topic;

a screening module 310, configured to screen, based on the engine, screening device data corresponding to the target analysis mode from the device data;

the embedding module 311 is configured to embed the screening device data into a data model corresponding to the target analysis mode, so as to obtain target device data based on a target storage format;

and, the specific manner of the storage module 304 storing the device data corresponding to the access control device into the storage space corresponding to the platform of the internet of things of the access control device may include:

Therefore, the device described in fig. 4 can also store the data into the storage space after accurate screening and format conversion, so that the accuracy and reliability of data storage are improved, and the relevant personnel of the internet of things platform can conveniently output accurate equipment data when the equipment data need to be checked.

In yet another optional embodiment, as shown in fig. 4, the second determining module is further configured to determine, before the data transmission module uploads the device data corresponding to the access control device to the data middleware of the internet of things platform, whether a data topic corresponding to the device data of the access control device matches any one of the data topics in the data middleware of the internet of things platform;

the apparatus may further include:

a creating module 312, configured to create a data topic corresponding to the backup data in the data middleware when the second judging module 309 judges that the data topic corresponding to the device data does not match all the data topics in the data middleware;

the adding module 313 is configured to add a data topic corresponding to the device data to a subscribed topic queue of an engine of the internet of things platform in a data middleware, and trigger the data transmission module 308 to upload the device data corresponding to the access control device to the data middleware of the internet of things platform;

and, the determining module 302 may determine, according to the data subject corresponding to the device data, a specific manner of determining, in all the analysis manners, the target analysis manner corresponding to the access control device, including:

when the second judging module 309 judges that the data subject corresponding to the device data is not matched with all the data subjects in the data middleware, determining the device corresponding to each analysis mode corresponding to the engine;

Therefore, the device described in fig. 4 can also automatically add a data theme to the device data of the access control device in the data middleware, so that the situation that the data cannot be screened or stored due to the fact that the data theme matched with the device data of the access control device does not exist is reduced, the analysis modes of other types of devices can be cited as the analysis modes of the access control device, the time cost and the operation cost consumed by creating a new analysis mode are reduced, and the efficiency of determining the analysis mode corresponding to the access control device is improved.

the analysis module 314 is configured to analyze all the historical traffic data of the access control device in the storage space to obtain traffic flow corresponding to each time interval of the access control device in a preset period, where the preset period includes any one of natural years, natural months, natural weeks, and natural days;

The second judging module 309 is further configured to judge, according to the traffic flow of the access control device corresponding to each time interval, whether the traffic flow of the access control device corresponding to the time interval is smaller than a preset flow, and when the judgment result is yes, determine the time interval as a target time interval;

the second detection module 315 is configured to detect whether an access reservation request corresponding to the access control device in any target time interval is received in advance when the current time is in the target time interval;

the control module 303 is further configured to control the access control device to enter a sleep state when the second detection module 315 detects that the access reservation request is not received in advance;

the determining module 302 is further configured to determine, when the second detecting module 315 detects that the access reservation request is received in advance, an access time interval corresponding to the access reservation request according to the access reservation request;

the control module 303 is further configured to control the access control device to enter a sleep state in a sleep time interval, where the sleep time interval includes a time interval other than an access time interval in a target time interval in which the current time is located.

Therefore, the device described in the implementation fig. 4 can also regulate and control the working state of the access control equipment according to the historical traffic data of the access control equipment, so that the energy consumption of the access control equipment in a time interval with less visitors is saved.

Example IV

Referring to fig. 5, fig. 5 is a schematic structural diagram of an access right control device based on the internet of things according to an embodiment of the present invention. As shown in fig. 5, the access right control device based on the internet of things may include:

a memory 401 storing executable program codes;

a processor 402 coupled with the memory 401;

the processor 402 invokes executable program codes stored in the memory 401 to execute the steps in the access right control method based on the internet of things described in the first embodiment or the second embodiment of the present invention.

Example five

The embodiment of the invention discloses a computer storage medium which stores computer instructions, wherein the computer instructions are used for executing the steps in the access control method based on the Internet of things described in the first embodiment or the second embodiment of the invention when the computer instructions are called.

Example six

An embodiment of the present invention discloses a computer program product, which includes a non-transitory computer readable storage medium storing a computer program, and the computer program is operable to cause a computer to execute steps in the access right control method based on the internet of things described in the first embodiment or the second embodiment.

The apparatus embodiments described above are merely illustrative, wherein the modules illustrated as separate components may or may not be physically separate, and the components shown as modules may or may not be physical, i.e., may be located in one place, or may be distributed over a plurality of network modules. Some or all of the modules may be selected according to actual needs to achieve the purpose of the solution of this embodiment. Those of ordinary skill in the art will understand and implement the present invention without undue burden.

From the above detailed description of the embodiments, it will be apparent to those skilled in the art that the embodiments may be implemented by means of software plus necessary general hardware platforms, or of course by means of hardware. Based on such understanding, the foregoing technical solutions may be embodied essentially or in part in the form of a software product that may be stored in a computer-readable storage medium including Read-Only Memory (ROM), random-access Memory (Random Access Memory, RAM), programmable Read-Only Memory (Programmable Read-Only Memory, PROM), erasable programmable Read-Only Memory (Erasable Programmable Read Only Memory, EPROM), one-time programmable Read-Only Memory (OTPROM), electrically erasable programmable Read-Only Memory (EEPROM), compact disc Read-Only Memory (Compact Disc Read-Only Memory, CD-ROM) or other optical disc Memory, magnetic disc Memory, tape Memory, or any other medium that can be used for computer-readable carrying or storing data.

Finally, it should be noted that: the embodiment of the invention discloses an access control right control method and device based on the Internet of things, which are disclosed by the embodiment of the invention, are only used for illustrating the technical scheme of the invention, and are not limited by the technical scheme; although the invention has been described in detail with reference to the foregoing embodiments, those of ordinary skill in the art will understand that; the technical scheme recorded in the various embodiments can be modified or part of technical features in the technical scheme can be replaced equivalently; such modifications and substitutions do not depart from the spirit and scope of the corresponding technical solutions.

Claims

1. An access control right control method based on the Internet of things is characterized by comprising the following steps:

Storing equipment data corresponding to the access control equipment into a storage space corresponding to the access control equipment on the internet of things platform, wherein the equipment data at least comprises traffic data of the target object about the traffic request;

the method further comprises the steps of:

when the authority attribute is an unauthorized attribute, detecting whether an access control authorization request aiming at the access control equipment, triggered by the target object, is received;

when the access control authorization request is received, judging whether the target object meets the authorization condition of the access control equipment according to target identity information;

when the target object meets the authorization condition, judging whether the authority level corresponding to the target object is greater than or equal to a preset level according to the target identity information;

when the authority level is greater than or equal to the preset level, determining that the target authority of the target object for the access control equipment comprises a first authority and a second authority, wherein the first authority comprises the passing authority of the access control equipment, and the second authority comprises the authority for adding an authorized object to the access control equipment and/or deleting the authorized object;

when the permission level is smaller than the preset level, determining that the target permission of the target object for the access control equipment comprises a first permission;

Granting the target object target authority for the access control equipment;

the method further comprises the steps of:

when the access reservation request is not received in advance, controlling the access control equipment to enter a dormant state;

when the access reservation request is received in advance, determining an access time interval corresponding to the access reservation request according to the access reservation request, and controlling the access control equipment to enter a sleep state in a sleep time interval, wherein the sleep time interval comprises a time interval except the access time interval in a target time interval in which the current time is located.

2. The access control method based on the internet of things according to claim 1, wherein the determining the authority attribute of the target object according to the identification information includes:

3. The access control method based on the internet of things according to claim 2, wherein the identification information includes at least one piece of sub-identification information, and when the identification information includes at least two pieces of sub-identification information, the determining, based on the identity database of the internet of things, the target identity information corresponding to the identification information includes:

4. The access control method based on the internet of things according to claim 1, wherein before the granting of the rights of the target object to the access control device, the method further comprises:

5. The access control method based on the internet of things according to any one of claims 1-4, wherein the device data has a corresponding data theme;

6. The access control method based on the internet of things according to claim 5, wherein before uploading the device data corresponding to the access control device to the data middleware of the platform of the internet of things, the method further comprises:

7. The access control method based on the internet of things according to claim 6, wherein when the data subject corresponding to the device data is not matched with all the data subjects in the data middleware, determining, according to the data subject corresponding to the device data, the target analysis mode corresponding to the access control device in all the analysis modes includes:

8. An access control right control device based on the internet of things, which is characterized by comprising:

the storage module is used for storing equipment data corresponding to the access control equipment into a storage space corresponding to the access control equipment on the internet of things platform, wherein the equipment data at least comprises traffic data of the target object about the traffic request;

the first detection module is used for detecting whether an access control authorization request aiming at the access control equipment, triggered by the target object, is received when the permission attribute is an unauthorized attribute;

the first judging module is further configured to judge, according to the target identity information, whether a permission level corresponding to the target object is greater than or equal to a preset level when the first judging module judges that the target object meets the authorization condition;

the determining module is further configured to determine that the target permission of the target object for the access control device includes a first permission and a second permission when the first judging module judges that the permission level is greater than or equal to the preset level, and determine that the target permission of the target object for the access control device includes the first permission when the first judging module judges that the permission level is less than the preset level; the first authority comprises the passing authority of the access control equipment, and the second authority comprises the authority for adding an authorized object to the access control equipment and/or deleting the authorized object;

The authorization module is used for granting the target object target authority for the access control equipment;

the apparatus further comprises:

the second judging module is further used for judging whether the traffic flow of the access control equipment corresponding to each time interval is smaller than a preset flow or not according to the traffic flow of the access control equipment corresponding to each time interval, and when the judging result is yes, the time interval is determined to be a target time interval;

9. An access control right control device based on the internet of things, which is characterized by comprising:

a memory storing executable program code;

a processor coupled to the memory;

the processor invokes the executable program code stored in the memory to perform the access control method based on the internet of things as claimed in any one of claims 1 to 7.

10. A computer storage medium storing computer instructions for executing the access right control method based on the internet of things according to any one of claims 1-7 when the computer instructions are called.