RU2751643C1 - System for automated pass control and method implemented by this system - Google Patents

Abstract

FIELD: controlling.SUBSTANCE: invention relates to systems for limiting the entry of unauthorised persons to the territory, and can be used in organising access control at enterprises and organisations in any branches of industry. The technical result of the claimed solution is achieved due to the fact that in the claimed solution a time stamp is included in the process of coding the application data, and the pass control module verifies compliance of the pass application data with the established rules and uniqueness thereof.EFFECT: reducing errors in the pass control module of the automated pass control system, reducing unsanctioned pass registration by the pass registration module, reducing the risk of issuing a pass through the pass control module by persons without corresponding authorisation, reducing the resource capacity of the pass application database, reducing the risk of unsanctioned pass copying by the pass control module.10 cl, 2 dwg

Description

The group of inventions relates to systems for restricting the admission of unauthorized persons to the territory and can be used to organize access control at enterprises and organizations of any industry.

A system and method for automated processing of requests for access to user information in a networked computing environment are known, the system comprises an interface, a module for generating a request for access to user information, a database with requests for access to user information and a module for processing a request for access to user information , and the method consists in the fact that the module for generating a request for access to user information processes incoming user requests, while the module for processing the request for access checks the user's data in a request for the ability to provide this user with access to information in databases [US7076558, date publications: 11.07.2006, IPC: G06F 15/16].

The disadvantage of the known technical solution is the low efficiency of processing user requests by the system, which is due to the low speed of checking user data in a request with data on the user's possible access to information.

An authentication system and a method for automated processing of requests for access to a territory are known, the system comprises an interface, a module for generating an application for access with a database required for access to a territory, and a module for processing user requests for access, and the method consists in the fact that the user a QR code is scanned through the interface, which is processed by the module for generating an application for access to the territory and this module sends data to authenticate the user through the interface, after which the data entered by the user through the interface is sent to the module for processing user requests for access, which, in response to this generates a one-time password for access to the territory [WO2018198036, publication date: 01/11/2018, IPC: H04L 29/06; H04W 12/06].

As a prototype, a system and a method for automated control of passes were selected, while the system contains a module for generating an application for a pass with a database of applications for passes and an interface and a module for managing passes, made with the ability to exchange data with each other, and the method consists in the operator entering through the interface into a module for generating an application for skipping the data of an application for a pass, coding by the module for generating an application for skipping the data of an application for a pass into a QR code, then reading the QR code by the user through the interface, reading this QR code by the pass management module and recognizing the associated data of the application for a pass in this QR code [CN107845173, publication date: 03/27/2018, IPC: G06Q 50/20; G07C 9/00].

The advantage of the prototype and the known technical solution is a higher efficiency of processing requests or applications of users for access or pass, which is due to the use of data encrypted in QR codes in systems. Also, the advantage of such systems is the possibility of organizing, on the basis of the modules existing in it, a pass management system, which will provide the ability to carry out the stage of filling out an application on paper and supplementing the paper medium with a QR code. The organization of such a pass management system is required at enterprises with mandatory signatures by officials in applications for a pass and the subsequent registration of applications signed by officials by an employee of the pass bureau, who must subsequently transfer the application data to the system by scanning the application data and QR code from paper. However, the disadvantage of the prototype and the known technical solution in this case is the high probability of errors when making a decision to issue a pass or reject an application for a pass, which is due to the possible inconsistency of the data in the application for a pass scanned by the operator of the pass bureau, the conditions of compliance of the application with the established rules for issuing passes, which are checked by the operator manually, as a result of which the quality of automated pass management deteriorates.

The technical problem to be solved by the group of inventions is the need to improve the quality of automated pass management.

The technical result to be achieved by the group of inventions is to reduce the risk of errors in the pass management module of the automated pass management system.

An additional technical result, to which the group of inventions is directed, is to reduce the risk of unauthorized registration of a pass by the pass registration module.

An additional technical result, to which the group of inventions is aimed, is to reduce the risk of issuing a pass through the pass management module by persons who do not have the appropriate rights to do so.

An additional technical result, to which the group of inventions is directed, is to reduce the resource intensity of the database of applications for passes.

An additional technical result, to which the group of inventions is directed, is to reduce the risk of unauthorized creation of a copy of the pass by the pass control module.

The essence of the first invention from the group of inventions is as follows.

The automated pass management system contains a module for generating an application for a pass with a database of applications for passes and an interface and a module for managing passes, made with the ability to exchange data with each other, while the module for generating an application for a pass is configured to receive application data for a pass through the interface and coding pass application data into a machine readable identifier, and the pass control module is configured to read the machine readable identifier with the pass application data. Unlike the prototype, the pass control module contains a database of conditions for the compliance of the application data with the established rules and a means for checking the data of the application for a pass for compliance with the established rules, made with the ability to exchange data with the database of conditions for the compliance of the application with the established rules.

The essence of the second invention from the group of inventions is as follows.

The method for automated control of passes includes input through the interface of data for obtaining a pass into the module for generating an application for a pass, coding by the module for generating an application to pass the data of the application for a pass into a machine-readable identifier, and reading by the module for managing passes a machine-readable identifier with data of the application for a pass. In contrast to the prototype, the pass management module checks the data of the application for a pass for compliance with the established rules by comparing them with the conditions for compliance of the application with the established rules contained in the database of conditions for the compliance of the application with the established rules.

The interface allows the initiator to enter data into the system and output data from it. The initiator can be either the recipient of the pass, or an authorized person at the facility with access control. The interface can be represented by a Web application window or an application installed on a personal computer, tablet or mobile phone. In this case, data entry can imply the input of text and graphic information, for which the interface can contain text fields or windows, a virtual or physical keyboard, as well as a scanner, photo or video camera, RFID reader - tags, or ports for connecting these devices. Data output can imply the display of textual or graphic information, including printing on paper or other media, for which the interface can contain a monitor or display, or a projector or printer, or ports for connecting these devices. At the same time, to reduce the risk of errors during data entry, the interface may contain templates for pass applications in html format with embedded java scripts, equipped with text fields for entering the data necessary for filling out an application for a pass. Within the framework of the present group of inventions, a pass can be understood as an electronic card or a medium of text or graphic information that allows the user of the pass to access an object.

The module for generating an application for a pass provides the ability to automatically process the application data entered through the interface and save the application data to the application database. To encode the application data for a pass into a machine-readable identifier, the application generation module may contain a machine-readable identifier generating means configured to receive application data from the pass application generation module. Within the framework of the present group of inventions, a machine-readable identifier can be understood as QR codes, bar codes, unique graphic images or codes transmitted to an integrated microcircuit in a contactless way. At the same time, the means for generating a machine-readable identifier is configured to include a timestamp in the machine-readable identifier, which makes it possible to create a unique machine-readable identifier, and eliminates the possibility of duplicating an application in the application database, reducing the risk of errors in the pass management module of the automated pass management system when processing applications.

The module for generating an application for a pass for transmitting an application for a pass with a machine-readable identifier assigned to it from the application database can be connected to the control module for transmitting an application in electronic form, or the module for generating an application for a pass can be connected to the interface for displaying an application on an electronic device the user of the pass or for the withdrawal of the application for paper media through a printer or other devices.

The pass management module provides the ability to automatically receive and process pass applications, which allows it to decide whether to issue passes or reject an application for a pass. To receive applications for passes, the pass management module can be connected to the interface and / or to the module for generating an application for a pass or to the database of applications for passes. To read the machine readable identifier with the data of the pass application, the pass control module may comprise means for recognizing the machine readable identifier in the application.

The pass control module may contain a graphic information recognition tool that enables the analysis of photographs, signatures, logos and other identifying graphic information in the pass data, which reduces the risk of unauthorized registration of the pass by the pass control module and the risk of issuing a pass through the pass control module by persons who do not have a license. these are the relevant rights.

Additionally, to reduce the risk of making an erroneous decision by the pass control module, it may contain a means for recognizing text information in the pass application, which provides the ability to analyze text characters, dates, table contents, initials of responsible persons and other information entered into the text fields of the pass application.

To implement all the specified functions, the pass control module may contain a package of specialized software, or third-party modules or software and hardware complexes may be connected to it, providing the ability to perform the specified functions.

The badge compliance validation tool provides the ability to mitigate the risk of an erroneous decision by the badge management module. For this, it is made with the possibility of automatic data exchange with the base of conditions for the compliance of the application with the established rules. The following can be presented as such rules: the uniqueness of the application for a pass and / or the correctness of filling out the application for a pass and / or signing the application only by authorized persons, and / or the coincidence of the data in the application and the personal data of the user of the pass.

As a condition for the uniqueness of the application for a pass, the absence in the system of an application with an identical timestamp is presented, for which the pass control module can contain a database of processed pass applications, with which the data verification tool can exchange information obtained in the process of recognition by the pass control module of a machine-readable identifier.

As a condition for the correct filling of the application for a pass, the correspondence of the filled fields in the new application for a pass with the fields of the previously completed application for a pass stored in the database of applications for passes, with which the data verification tool for the application for a pass can automatically exchange data obtained during the recognition process text and / or graphic information, which not only reduces the risk of unauthorized creation of a copy of the pass by the pass management module, but also reduces the resource intensity of the database of applications for passes.

As a condition for signing the application by authorized persons, it can be presented that the person who signed the application has the right to sign the application for a pass, who can be identified in the process of receiving graphic and / or text information from the application and comparing it with the database of authorized persons, which may also contain a pass control module and with which the pass application data validator can communicate.

As a condition for the coincidence of the data in the application and the personal data of the user of the pass, the absence of differences in the personal data of the user, obtained, for example, through the interface with graphic and / or text data in the application for the pass, can be presented. All of these conditions reduce the risk of making an erroneous decision to issue a pass or reject an application for a pass by the pass management module, and can be entered into the conditions base using the interface.

Modules of the automated pass management system, as well as a means for checking an application for a pass for compliance with the established rules within the framework of this group of inventions can be implemented on the basis of one or more personal computers, and / or on the basis of one or more software and hardware complexes, and can be connected to each other by any known means of wired and / or wireless data transmission.

The group of inventions can be made from known materials using known means, which indicates its compliance with the criterion of patentability "industrial applicability".

The group of inventions is characterized by significant features previously unknown from the prior art, consisting in the fact that the pass management module contains a database of conditions for the compliance of the application data with the established rules and a means for checking the data of the application for a pass for compliance with the established rules, made with the ability to exchange data with the database of application compliance conditions the established rules, which allows the pass management module to automatically check the data of the pass application and thus reduce the risk of an erroneous decision to issue a pass or withdraw an application for a pass with automatic pass management, thereby ensuring the achievement of a technical result, which consists in reducing the risk of errors in the pass management module of the automated pass management system, thereby improving the quality of the automated pass management.

The group of inventions is characterized by a set of essential features previously unknown from the prior art, which testifies to its compliance with the “novelty” criterion of patentability.

It is known from the prior art that it is possible to check the correspondence of the QR code data received by the system via the interface with the stored data of the pass user in the pass database. At the same time, the prior art does not know a pass control module containing a database of conditions for compliance of application data with established rules and means for checking data of an application for a pass for compliance with established rules, configured to exchange data with the database of conditions for compliance of an application with established rules. At the same time, the combination of essential features ensures that a group of inventions achieve a synergistic effect, which consists in a significant reduction in the risk, occurrence of errors in the pass management module of the automated pass management system. It is achieved both by eliminating the possibility of making mistakes when transferring application data from the application generation module to paper media and from paper media back to the pass management module due to their encoding by the pass application generation module into a machine-readable identifier and reading this machine-readable identifier by the module control of gaps, and due to the fact that after decrypting the data of the application from the machine-readable identifier, the data in the application is verified by the established internal rules, which eliminates the possibility of the human factor influencing the occurrence of errors in the control module of the gaps and ultimately significantly affects the quality of the system. In view of this, the group of inventions meets the criterion of patentability "inventive step".

The group of inventions is interconnected and forms a single inventive concept, which consists in the fact that the automated pass management system provides for the implementation of the automated pass management method, which indicates the compliance of the group of inventions with the requirement of "unity of invention".

To illustrate the possibility of implementation and a more complete understanding of the essence of the group of inventions, an embodiment is presented below, which can be changed or supplemented in any way, while the present group of inventions is by no means limited to the presented embodiment.

The group of inventions is illustrated by the following figures.

Fig. 1 - Functional diagram of the automated pass management system.

Fig. 2 - Algorithm of the automated pass control method implemented by the system shown in Fig. 1.

The automated pass management system contains an interface 100, a module 110 for generating an application for a pass with integrated means for encoding the data of an application for a pass into a machine-readable identifier, a database 111 of applications for a pass and a module 120 for managing passes with integrated means for reading a machine-readable identifier and recognizing a text information in the application for a pass, and a means 121 for checking the data of the application for a pass for compliance with the established rules, and a database 122 of conditions for the compliance of the application data with the established rules.

The interface 100 can be represented by a page in an Internet browser opened on a personal computer containing interconnected CPUs, RAM, ROM and data input and output devices, or by a mobile application installed on a tablet or smartphone. The pass application generation module 110, the pass control module 120, and the means 121 for checking the pass application data for compliance with the established rules can be represented by server cells containing a central processor, system memory and a system bus that contains system components, including memory associated with a central processing unit.

The database 111 of applications for admission and the database 122 of conditions for compliance of the data of the application for admission to the established rules can be represented by tables, lists and other sets of machine-readable data stored respectively in the internal memory of the module 110 for generating the application for a pass and the module 120 for managing admissions or remotely.

The interface 100 is connected to the module 110 for generating an application for a pass with the ability to input and output data of applications for a pass; the module 110 for generating the application for a pass and the module 120 for controlling the passes are connected to the database 111 of the applications for the pass with the possibility of downloading and uploading the data of the applications for the pass; the admission control module 120 is connected to the means 121 for checking the data of the pass application for compliance with the established rules with the possibility of transmitting decrypted data of the pass application, and also connected to the interface 100 with the possibility of transmitting the processed data of the pass application; means 121 for checking the data of the application for a pass for compliance with the established rules is connected to the database 122 of the conditions for compliance of the application data with the established rules with the possibility of requesting the conditions for the compliance of the application data with the established rules, and is also connected to the admission control module 120 with the possibility of transmitting the data of the compliance of the application with the established rules; the admission control module 120 is connected to the interface 100 with the possibility of receiving application data with an assigned machine-readable identifier and with the possibility of transmitting data of compliance of the application with the established rules.

The automated pass management method is performed in a number of main steps, which include: step 200, in which the applicant enters the pass application data through the interface 100; step 210, in which the pass application generation module 110 encodes the pass application data into a machine readable identifier; step 220, in which the admission control module 120 reads the machine readable identifier with the data of the pass application; step 230, in which means 121 checking the data of the application for a pass compares the data of the application with the conditions of their compliance with the established rules stored in the database 122; Step 240, in which the admission control module 120 transmits data to the interface 100 and / or to the admission request database 111.

At step 200, the applicant, through the interface 100, enters the data of the application for a pass into the module 110 for generating the application for a pass, for which text templates stored on the interface 100 can be used.

At step 210, the module 110 for generating the pass application processes the data entered into the template and then encodes the data into a machine readable identifier that is assigned to the pass application. Also during the encoding process, a time stamp is included in the machine readable identifier. Thereafter, the text template with an assigned machine-readable identifier can be printed out, or it can be transmitted electronically to the pass management module 120 or to the pass application database 111, or via the interface 100 to the applicant's electronic device.

At step 220, the pass control module 120 reads the machine readable identifier, reads the machine readable identifier and recognizes the text data in the pass application by receiving the application in electronic form with the machine readable identifier assigned to it from the module 110 or from the interface 100, and through the use of specialized software obtained the data is formalized and corrected, and text blocks are recognized in the pass application data.

At step 230, the means 121 receives decrypted data and data from the text blocks of the application from the admission control module 120 and compares them with the conditions for matching the established rules stored in the database 122, for which the application data can be loaded by the means 121 into or from the database 122 conditions can be uploaded, and data can also be obtained from the database 111 of applications for passes, after which the means 121 determines whether the data in the application meet the established rules.

At step 240, the admission control module 120 receives data whether or not the pass application matches the established rules, after which the data can be transmitted as a notification to the interface and / or stored in the pass application database 111.

The group of inventions is illustrated by the following specific example of implementation.

To gain access to the enterprise by the applicant, Sergey Anatolyevich Nikitin, through the interface 100 by accessing the Web resource of the system, the required type of application template for a pass is selected and the personal data of the recipient of the pass "Ivanov Igor Ivanovich", the data of the position and place of work are entered in electronic form: " Designer "," Department of development of project documentation ". After that, they enter the personal data of the authorized person responsible for issuing the pass "Nikitin Sergey Anatolyevich", as well as his position "Head of the personnel department". After that, the applicant fills in the data of the object to which the recipient of the pass must be admitted: "Building 1", after which the data of the official acting at the object "Oleg Mikhailovich Sidorov" is entered. After that, the data is encoded by the pass management module 120 into a QR code, which is contains a time stamp: 13 hours 17 minutes 45 seconds, after which the application for a pass is saved to the database 111 of applications for passes and is printed out by the applicant through the interface 100.

Thereafter, the printed application is scanned by a pass office employee through a scanner connected to the interface 100, and the data is transmitted to the pass management module 120, which recognizes the QR code on the application, as well as text blocks in the application. After that, the means 121, in accordance with the conditions from the database 122, checks the QR code read from the application for belonging to the system of automated processing of applications for a pass. After that, the application is checked for uniqueness, for which it is checked for the presence in the database of applications with an identical timestamp, encrypted in the QR code of the application for a pass to exclude the possibility of entering a second identical application into the system and unauthorized creation of a copy of the pass. After that, the correctness of filling out the application is checked, in particular, the completeness of the entered personal data, the recipient of the pass “Ivanov Igor Ivanovich, place of work and position is checked. After that, the compliance of the powers of Sergei Anatolyevich Nikitin and Oleg Mikhailovich Sidorov is checked by searching for data on their powers in the internal database. After completing the verification of the compliance of the application data with the established rules, the module 120 decides to issue a pass and a notification about the compliance of the data in the application for a pass, which is sent to the interface 100, and the data on the compliance of the application for a pass with the established rules is stored in the database 111 of applications for passes. Upon presentation by the recipient Igor Ivanovich of the passport to the pass bureau, module 120 receives the recipient's passport data by scanning it by the pass bureau employee and verifying the personal data in the application with the data in the presented passport. At the same time, the receipt of personal data from a passport is carried out through a document mask, which ensures that only those data are read that are allowed for storage by the Law on the Protection of Personal Data. After checking the correspondence of the data in the passport of the pass recipient by means of 121 to the established rules, a command is sent to the module 120 to print the pass.

Thus, the technical result is achieved, which consists in reducing the risk of errors in the pass management module of the automated pass management system, thereby improving the quality of the automated pass management.

Claims (10)

1. A system for automated control of passes, containing a module for generating an application for a pass with a database of applications for passes and an interface and a module for managing passes, made with the ability to exchange data with each other, while the module for generating an application for a pass is configured to receive data of an application for a pass through interface and encoding the data of the application for a pass into a machine-readable identifier, and the pass control module is configured to read the machine-readable identifier with the data of the pass application, characterized in that the pass control module contains a database of conditions for compliance of the application data with the established rules and a means for checking the data of the application for a pass for compliance with the established rules, made with the ability to exchange data with the base of conditions for the compliance of the application with the established rules, while the module for generating the application for a pass contains a means for generating a machine-readable identifier, including an unreadable identifier, a timestamp, and the uniqueness of the application is presented as a rule, the condition of compliance with which is the absence in the system of an application for a pass with an identical timestamp. 2. The system according to claim 1, characterized in that the pass control module comprises means for recognizing text or graphic information in the pass application. 3. The system according to claim 2, characterized in that the correctness of filling in the application for a pass is presented as a rule, and the correspondence of the filled fields in the new application for a pass to the completed application for a pass stored in the database of applications for passes is presented as a condition. 4. The system according to claim 2, characterized in that the signing of the application by an authorized person is presented as a rule, and the presence of rights to sign the application for a pass from the person who signed the application for a pass is presented as a condition. 5. The system according to claim 2, characterized in that, as a rule, the coincidence of the data in the application and the personal data of the user of the pass is presented, and the absence of differences in the personal data of the user, with the data in the application for the pass, is presented as a condition. 6. A method for automated control of passes, including input through the interface of data for obtaining a pass into the module for generating an application for a pass, coding by the module for generating an application to pass data of an application for a pass into a machine-readable identifier and reading by the module for managing passes a machine-readable identifier with data of an application for a pass, characterized by that the pass management module, at the expense of the data verification tool for the pass application, checks the pass application data for compliance with the established rules by comparing them with the conditions for the application compliance with the established rules in the base of the application compliance conditions with the established rules, while in the process of coding the pass application data a time stamp is included in the machine-readable identifier by the module for generating the pass request, and the pass request is checked for uniqueness, for which it is checked that there is no request for a pass with an ID in the system. It is very time-stamped. 7. The method according to claim 6, characterized in that the recognition of text or graphic information in the application for a pass is carried out. 8. The method according to claim 7, characterized in that the correctness of filling in the application for a pass is checked, for which the new application for a pass is compared by means of checking the data of the application for a pass with the existing completed applications for a pass from the database of applications for passes. 9. The method according to claim 7, characterized in that the signing of the application is checked only by authorized persons, for which it is checked whether the person who signed the application for a pass has the right to sign the application for a pass. 10. The method according to claim 7, characterized in that the coincidence of the data in the application and the personal data of the user of the pass is checked.

Images