The utility model content
(1) technical matters that will solve
The technical problems to be solved in the utility model is, how to overcome in the existing bank security system authentication object of reference that security gate inhibition based on ID card and fingerprint recognition exists in authenticating easily stolen, duplicate or pollute the authentication efficient that caused and the defective of accuracy.
(2) technical scheme
For solving the problems of the technologies described above, the technical solution of the utility model provides a kind of gate control system based on the palm vein authentication, comprising: a plurality of palm vein terminals, central processing unit and a plurality of controlling device for doors;
Each described palm vein terminal is arranged at a security door place, gathers user's to be certified palm vein image, sends central processing unit after the processing to;
Central processing unit is connected with described a plurality of controlling device for doors with described a plurality of palm vein terminals, stores palm vein information, palm vein end message, controlling device for doors information, authority information, the safety rule information of validated user; Be used to read described user's to be certified palm vein image, and in the palm vein information of described validated user, search for comparison, if there is matching image, then further judge entering of described user to be certified and/or whether current opening door operation meets safety requirements according to described authority information and safety rule information, if then send the instruction of opening the door to corresponding controlling device for doors;
A plurality of controlling device for doors are used to respond the corresponding security door of the described instruction control of opening the door and open.
Preferably, described a plurality of palm vein terminal, a plurality of controlling device for doors are connected by LAN (Local Area Network) with described central processing unit.
Preferably, each described palm vein terminal comprises:
The near infrared ray generator, the response authentication solicited message generates near infrared ray and shines user's palm to be verified;
Sensor receives by the near infrared ray of user's palmar to be verified and generates vein image; And,
Data processor compresses and encryption described vein image, and exports to described central processing unit.
Preferably, each described palm vein terminal also comprises:
Storage unit, palm vein information, controlling device for doors information, authority information and the safety rule information of storage validated user;
Authentication ' unit, when described palm vein terminal can't be connected with described central processing unit, read described user's to be certified palm vein image, and in the palm vein information of described validated user, search for comparison, if there is matching image, then further judge entering of described user to be certified and/or whether current opening door operation meets safety requirements according to described authority information and safety rule information, if, then to the corresponding controlling device for doors transmission instruction of opening the door.
Preferably, described system also comprises: data synchronization unit, with described central processing unit and described a plurality of palm vein terminal downlink connection, regularly connect each described palm vein terminal successively according to described palm vein end message and carry out data sync, send the personal information and the palm vein data of the validated user relevant stored in the described central processing unit to corresponding palm vein terminal with each palm vein terminal.
Preferably, described near infrared ray generator and described set of sensors become the palm vein sensor based on the infrared photography principle.
(3) beneficial effect
Compared with prior art, the gate control system based on the palm vein authentication that the utility model provides has following advantage: human body palm vein data are extremely difficult forges or duplicates, and overcome of the influence of abnormal factorses such as dry skin, dust, made the authentication mode of discerning based on palm vein can satisfy bank's high level of security requirement the authentication accuracy; In addition, the vein of palm is thicker, and quantity is many, can realize high-precision identification; Central processing unit is formed LAN (Local Area Network) with each palm vein terminal and is communicated by letter, be responsible for the collection of palm vein data by each palm vein terminal, sending to the palm vein processing server then focuses on, improved the maximum number of user that system can have greatly, improve the speed of authentication, alleviated the complexity of management; Native system can insert wide area network by LAN (Local Area Network), realizes the integral sharing of the inner vein data of bank thus, more helps the expansion of other related service systems.
Embodiment
Below in conjunction with drawings and Examples, embodiment of the present utility model is described in further detail.Following examples are used to illustrate the purpose of this utility model, but are not used for limiting scope of the present utility model.
Erythrocytic protoheme has lost oxygen in the human vein, and this reduced heme can absorb specific near infrared light.Therefore, when using near infrared light irradiation human body, have only vein segment to have faint reflection, thereby form dim image.Palm vein is hidden in the following 3 millimeters depths of skin, belongs to inside of human body information, and extremely difficulty is duplicated; And vein image possesses live body and detects function, can't usurp, that is: the palm after the amputation does not have blood flow, can't obtain image; In addition, the vein quantity in the palm is many, lines are complicated, forms individual difference easily, may be read into more stable information, realizes high-precision identification thus.Through experimental verification, my reject rate of palm vein identification is 0.001% (100,000/), and other people receptance is 0.00008% (8/10000000ths), can satisfy higher security requirement.
Based on above-mentioned palm vein recognition principle, the technical solution of the utility model provides a kind of gate control system based on the palm vein authentication, this system comprises a plurality of palm vein terminals 1, central processing unit 2 and a plurality of controlling device for doors 3, wherein, each palm vein terminal 1 is arranged at a security door 4 places; Each palm vein terminal, controlling device for doors all possess the facility information of oneself, that is: palm vein end message and controlling device for doors information.System of the present utility model can work in network schemer and single cpu mode, and under network schemer, a plurality of palm vein terminals 1 are connected with central processing unit 2; Under single cpu mode, a plurality of palm vein terminals 1 are not connected with central processing unit 2.
In the embodiment show in figure 1, described a plurality of palm vein terminals 1 and controlling device for doors 3 are all formed LAN (Local Area Network) with central processing unit 2 by switch 5, that is: the gate control system based on the palm vein authentication of present embodiment is in the network work pattern.
In the present embodiment, the major function of palm vein terminal 1 comprises: gather user's to be certified palm vein data, data are compressed, after encryption etc. handles, sent central processing unit 2 to by LAN (Local Area Network).Preferably, palm vein terminal 1 can comprise: the near infrared ray generator is used to generate near infrared ray and shines user's palm to be verified; Sensor receives the near infrared ray by user's palmar to be certified, and obtains vein image; And data processing equipment is used to realize the compression and the encryption of vein image.Wherein, near infrared ray generator and sensor can be integrated into a palm vein recognition device sensor, for example, the PalmSecure of Fujitsu sensor, user to be certified places palm can accept irradiation and image acquisition on the sensor.Ciphering process can pass through AES (Advanced Encryption Standard, high-level data encryption standard) to be realized.
This palm vein terminal 1 can also comprise Tip element, is used to the user to show information from data processor 2, and this information can provide with the form of literal, light, sound.This suggestion device can be a kind of in display screen, pilot lamp, the hummer or other.
As mentioned above, under the network schemer, palm vein terminal 1 only is used to gather user's to be certified palm vein data.
For the palm vein terminal 1 under the network schemer, the processing of its vein data and identification work are carried out by central processing unit 2.Central processing unit 2 can be realized by server.Specifically, all allow can register by this server by the user of security door, submit ID, palm vein data and the authority information of oneself to, are edited and input database by the keeper; The keeper can also be in database each palm vein terminal information of typing, comprise the identification marking of palm vein terminal and allow to enter personnel ID accordingly; In addition, can also comprise in this database by keeper's preset security rule information, comprise: anti-trail that strategy, interlocking strategy, many people authentication policy, urgent hold-open door normal closed gate strategy, fire-fighting open the door, fixed time hold-open door normal closed gate strategy, overtime close to report to the police be provided with, long-rangely open the door, coerce password setting etc., these security strategies will be triggered under the specified conditions that preset.
When receiving user's authentication request information, central processing unit 2 reads the venous information in the palm vein image that receives, for example, the shape of vein, in database, corresponding vein image under this security door sign is carried out comparing based on overlapping the search of judging, seek the palm vein image consistent with its shape; If search out matching image, then further examine the personal information of the validated user corresponding: user ID and authority with this matching image, and it is combined with the security strategy that presets carry out logic analysis, whether can be allowed to enter this security door this moment to judge this user; Even that is: this user to be certified validated user that is this security door also needs to judge further according to security strategy whether the unlatching of this security door this moment meets safety requirements.For example, be the example explanation with the interlocking strategy in the aforementioned safety rule information, interlocking strategy regulation A in the present embodiment and B door are interior at one time can only to have a side to open.Then have, when the user attempts to open the B door under the prerequisite that the A door has been unlocked, logical definition according to the interlocking security strategy, it has triggered the interlocking security strategy, even this moment, the palm vein authentication showed that it is a validated user, central processing unit still judges that according to logic analysis the current unlatching of B door does not meet safety requirements, will not send the instruction of opening the door to door controller, and with the corresponding palm vein terminal of B door will be to the relevant information of user prompt; When the A door is normally closed, be not triggered according to the logical definition of interlocking security strategy, central processing unit will directly send the instruction of opening the door to door controller if the authentication of user's palm vein is passed through this moment, and the B door can be opened.
In the specific implementation process, central processing unit 2 can also write down and preserve authentication information, and for example sign, authentication personnel ID and the authentication result of Ren Zheng time, authentication place security door are so that take place in time to search after the safety failure problem.The central processing unit 2 that writes down and preserve authenticated time also can be used for common attendance recorder, and has stopped other people and swiped the card in generation or the alternative phenomenon of finger print.In other words, this central processing unit 2 can be used as management platform, and the keeper can pass through its executive arm's management, user management, equipment control, security policy manager, work attendance output etc.
Wherein, the above-mentioned course of work of central processing unit 2 can realize based on thread pool and the related mechanism of finishing port: central processing unit 2 is created and bundling ports, sets up IO processing threads pond; Begin to monitor, get access to the connection request of palm vein terminal after, with its with finish port and be associated and deliver request; Idle thread in the invokes thread pond authenticates and logical process, closes thread; When closing authentication service, be provided with to withdraw to be designated and withdraw from service state, send and close password to finishing port; Finishing port receives password and closes connection; Close and monitor socket, withdraw from service.
The instruction of opening the door of central processing unit 2 outputs is received and is carried out by controlling device for doors 3.Each palm vein terminal 1 is corresponding to a controlling device for doors 3 (controlling device for doors can simultaneously corresponding a plurality of palm vein terminals), and is connected by LAN (Local Area Network) with central processing unit 2; The instruction of opening the door of response central processing unit 2, the electronic lock of controlling on the corresponding security door is opened.
Preferably, the system of present embodiment can also comprise the data synchronization unit (not shown), is used for regularly being beneficial to the authentication identification of palm vein terminal under the single cpu mode in the palm vein terminal that the data sync of central processing unit 2 stored is extremely relevant.Specifically, data synchronization unit runs on the system backstage, realizes the data synchronization updating of palm vein terminal 1 by the reserved data in the database that obtains central processing unit 2.For the ease of management and control, data synchronization unit adopts single-threaded processing, make a pseudo-terminal simultaneously, with palm vein terminal 1 as server, when data sync, initiatively connect palm vein terminal 1, after obtaining all user's data (palm vein data and personal information) relevant by central processing unit 2 places, send the data to terminal by self-defining communication format with this terminal; The palm vein terminal is carried out local file and is refreshed after receiving all customer data, finally finishes the function of data sync.Wherein, according to the data of palm vein terminal storage in database, according to the mapping relations of gate inhibition's group and user's group, if the relative users group is arranged, this user's group is made as this terminal user so, if user's group is sky, all users of default system are this terminal user.
In the embodiment shown in Fig. 2, system of the present utility model is under the single cpu mode.At this moment, because palm vein terminal 1 does not connect central processing unit 2, palm vein terminal 1 can store local user data, comprises that permission is by ID, the authority information of the validated user of local security door 4, user's palm vein image of gathering in advance/obtain and preserving.These user data can be registered submission voluntarily by the user, and are edited and managed by the keeper, also can obtain by the data sync that above-mentioned data synchronization unit is carried out.Palm vein terminal 1 under the single cpu mode should comprise a high-performance processor, be used for after gathering user's to be certified palm vein image in real time, its local user data with storage is searched for comparison, select to send open the door instruction or display reminding information according to comparison result.Authentication information in the verification process, for example Ren Zheng time, authentication personnel ID and authentication result also will be recorded and preserve, so that take place in time to search after the safety failure problem.
Below, will be described in detail utilizing the method that authenticates based on the gate control system of palm vein authentication of the present utility model, so that the structure of native system and principle are clearer.
S101: the palm vein terminal is gathered user's to be certified palm vein image, sends to central processing unit after the processing;
S102: central processing unit reads described user's to be certified palm vein image, searches for comparison in the validated user palm vein database of having stored, if there is matching image, then enters next step; Otherwise send the information of literal, sound, image or light form to corresponding palm vein terminal;
S103: central processing unit is based on the personal information of the validated user of safety requirements information that presets and described matching image correspondence, further judge whether entering of described validated user meets safety requirements, if then send the instruction of opening the door to corresponding controlling device for doors; If not, then send the information of literal, sound or light form to corresponding palm vein terminal;
S104: the corresponding security door of the described instruction control of opening the door of controlling device for doors response is opened.
Wherein, described method also comprised before step S101: local user data is gathered/obtain and stored to the palm vein terminal, comprises user ID, authority, palm vein data; Obtain manner can be for registering submission by the user; And the step S102 of described method should comprise: described user's to be certified palm vein image is overlapped judgement with vein image under the same ID that has preserved, if the vein shape unanimity in two width of cloth images, then coupling; At this moment, continue to carry out above-mentioned steps S103.
Above embodiment only is used to illustrate the utility model; and be not to restriction of the present utility model; the those of ordinary skill in relevant technologies field; under the situation that does not break away from spirit and scope of the present utility model; can also make various variations and modification; therefore all technical schemes that are equal to also belong to category of the present utility model, and scope of patent protection of the present utility model should be defined by the claims.