TWI355624B - Admitting method for access control, mobile electr - Google Patents

Description

1355624

。 。 。 。 。 。 。 。 。 。 。 。 。 。 。 。 。 。 。 。 。 。 。 。 。 。 。 。 。 。 。 。 。 。 。 。 。 。 。 。 。 。 。 。 。 。 。 。 。 。 。 。 。 。 。 。 。 The authentication method of the access control of the International Mobile Subscriber (Identification, IMSI) and the mobile device and access control system using the mobile phone. • [Prior Art] Traditional access control management uses magnetic cards as the basis for identifying identities. However, the security management of access control systems has always been a risk of theft or loss of magnetic cards. How to reduce the risk of access control systems is a subject worth studying. And for the user, many access control systems may be used during the day. Therefore, the user must have several magnetic cards (such as community buildings, office buildings, offices, factories, laboratories, and access cards for parking lots). This has caused the burden of modern people going out. As a result, there is a need for a low-risk and easy-to-use access control system and its authentication method. SUMMARY OF THE INVENTION The present invention relates to an authentication method for access control and a mobile electronic device and an access control system using the same, using an access control area code of each access control system, a password set by a user, an international mobile subscriber identification code, and an effective authentication. Temporality, compiled into an access code, and converted to a two-dimensional bar code is scanned and transmitted to the access control system for identity authentication. By this, lower 6 1355624

'Sanda ΐ 号 : TW3853PA The risk of the password being stolen and stolen is used to greatly improve the security of access control. Moreover, by setting different access control area codes and integrating with mobile phones or personal mobile assistants, users no longer need to carry many access cards to go out to reduce the burden on users. The present invention proposes an authentication method for access control, including the following steps. At a first time, an access control area code, a user password, an international mobile subscriber identity code, and a first time are used as an intermediate code by a mobile electronic device. Converting the intermediate code into a mobile electronic device becomes a two-dimensional bar code. In a second time, a two-dimensional bar code is obtained with an access control system. The two-dimensional bar code is converted into an intermediate code by the access control system. The intermediate code is interpreted by the access control system as the access control area code, user password, international mobile subscriber identity code and the first time. Determine whether the access control area code, user password, and international mobile user ID are stored in an access control database. It is judged whether the difference between the first time and the second time exceeds a predetermined time. When the access control area code, user password and international mobile subscriber identity code do not exist in the access control system database, or the difference between the first time and the second time exceeds a predetermined time ^, the electronic lock is locked to prohibit holding One of the mobile electronic devices is accessible to the user. The invention provides a mobile electronic device comprising a coding unit, a transcoding unit and a screen. The coding unit is configured to generate a banned area code, a user password, an international mobile subscriber identity code, and the first time into an intermediate code at a first time. The transcoding unit is used to convert the intermediate code into a two-dimensional barcode. The screen is used to display 2D barcodes to provide an access control system for scanning. 7 1355624

Sanda K: TW3853PA The present invention provides an access control system including an electronic lock, a scan mode group, a transcoding unit, a decoding unit, an access control system database, a first determining unit, and a second determining unit. And a control unit. The scanning module is configured to scan a two-dimensional barcode displayed by a mobile electronic device at a second time. The transcoding unit is configured to convert the two-dimensional barcode into an intermediate code. Decoding unit • Used to interpret the intermediate code to become an access area code, a user password, an - international mobile subscriber identity code and a first time. The access control system database is used to store an access area code and a plurality of user passwords and a plurality of international mobile subscriber identification codes. The first determining unit is configured to determine whether the access control area code, the user password, and the international mobile subscriber identity code are present in the access control system database. The second determining unit is configured to determine whether the difference between the first time and the second time exceeds a predetermined time. When the first determining unit determines that the access control area code, the user password, and the international mobile subscriber identity code do not exist in the access control system database, or the second determining unit determines that the difference between the first time and the second time exceeds a predetermined time, the control The unit locks the electronic lock to prohibit access by the user holding the mobile electronic device. BRIEF DESCRIPTION OF THE DRAWINGS In order to make the above description of the present invention more comprehensible, a preferred embodiment will be described in detail below with reference to the accompanying drawings. The authentication method and the mobile electronic device and the access control system using the same. The authentication method for the access control proposed herein is that a user holds a mobile electronic device and an access control system for identity authentication. 8 1355624

'Sanda nickname: TW3853PA Please refer to FIG. 1 , which is a functional block diagram of the operation 'electronic device and access control system according to a preferred embodiment of the present invention. As shown in FIG. 1, the mobile electronic device 100 includes an editing unit 110, an encoding unit 120, a transcoding unit 130, and a screen 140. The editing unit 110 is configured to provide a user input access control area code and a user password. The encoding unit 120 is configured to: at a first time, prepare an access control area code, a user password, an international mobile subscriber identifier, and the first time to become an intermediate code C1. The transcoding unit 130 is configured to convert the intermediate code C1 into a two-dimensional barcode C2. The screen 140 is used to display a two-dimensional bar code C2 to provide an access control system 200 for scanning. The access control system 200 includes a scanning module 210, a transcoding unit 220, a decoding unit 230, a first determining unit 240, an access control system database 242, a second determining unit 250, a control unit 260, and an electronic lock. 270. The scanning module 210 is configured to scan the two-dimensional barcode C2 displayed by the mobile electronic device 100 at a second time. The transcoding unit 220 is configured to convert the two-dimensional barcode C2 into the intermediate code C1. The decoding unit 230 is configured to interpret the intermediate code C1 as an access control area code, a user password, an international mobile subscriber identity code, and a first time. The access control system database 242 is used to store an access control area code and a plurality of user passwords and a plurality of international mobile subscriber identification codes. The first determining unit 240 is configured to determine whether the access control area code, the user password, and the international mobile subscriber identity code are present in the access control system database 242. The second determining unit 250 is configured to determine whether the difference between the first time and the second time exceeds a predetermined time. The control unit 260 is used to lock or unlock the electronic lock 270 to prohibit or allow the user holding the mobile electronic device 100 to pass. Please refer to FIG. 2, which illustrates an access control according to a preferred embodiment of the present invention. 9 1355624

Sanda Li: TW3853PA 'Flowchart for the certification method of regulation. First, the access control area code and the user password are input through the editing unit of the mobile electronic device 1 as shown in step S1. Then, the access control area code, the user password, the international mobile subscriber identity code, and the first time are made into the intermediate code C1 by the coding unit 120 of the mobile electronic device 100 at the first time as shown in step S2. • In step S2, the access control area code is the specific code of an access control system. Therefore, different access control systems have different access control areas. For example, access control systems such as community buildings, offices, or laboratories have their own access control area codes. The user password is the password set between the user and an access control system. The International Mobile Subscriber Identity is a personal identification number stored in a Subscriber Identity Module (SIM) of a mobile electronic device. This international mobile subscriber identity is unique. Therefore, the identity of the user can be authenticated by identifying the international mobile subscriber identity. In addition, when the intermediate code is compiled, the intermediate code is made temporal by adding the first time (this first time is the current time for compiling the intermediate code, for example, a certain time of a certain month). Therefore, if the predetermined time is exceeded after the preparation, the intermediate code will lose the authentication effect to prevent the intermediate code from being repeatedly used for theft after being copied. Next, as shown in step S3, the transcoding unit 130 of the mobile electronic device 1 converts the intermediate code ci into a two-dimensional barcode C2, and displays the two-dimensional barcode C2 on the screen 140 of the mobile electronic device 100. In step S3, the two-dimensional barcode C2 is preferably a Quick Response Code (QR c〇de). Since QR code is currently 1355624

Sanda ΐ 号: The TW3853PA mobile phone is widely used as a 2D barcode, and the QR code can accommodate thousands of characters. Therefore, when the conversion intermediate code C1 becomes the two-dimensional barcode C2, the text message can be simultaneously converted into the two-dimensional barcode C2. When the user wants to add a text message, the transcoding unit 130 converts the intermediate code C1 and the text message into a two-dimensional bar code C2. Then, as shown in step S4, at a second time, the scanning module 210 of the access control system 200 acquires the two-dimensional barcode C2 in a scanning manner. Next, as shown in step S5, the transcoding unit 220 of the access control system 200 converts the two-dimensional bar C 2 into the intermediate code C1. In step S5, when the two-dimensional barcode C2 further includes a text message, the transcoding unit 220 converts the two-dimensional barcode C2 into the intermediate code C1 and the text message, and transmits the text message to a host (not shown) to Save this text message. Then, as shown in step S6, the decoding unit 230 of the access control system 200 interprets the intermediate code C1 as the access control area code, the user password, the international mobile subscriber identification code, and the first time. Next, as shown in step S7, the first determining unit 240 determines whether the access control area code, the user password, and the international mobile subscriber identity code are present in the access control system database 242. Then, as shown in step S8, the second determining unit 250 determines whether the difference between the first time and the second time exceeds a predetermined time. In steps S7 and S8, when the first determining unit 240 determines that the access control area code, the user password, and the international mobile subscriber identity code are not present in the access control system database 242, or the second determining unit 250 determines the first time and 11 1355624

'No. 3: TW; 3853PA When the difference between the second time exceeds the predetermined time, the process proceeds to step S9. Next, as shown in step S9, the electronic lock 270 is locked by the control unit 260 to prohibit the user holding the mobile electronic device 1 from passing. In steps S7 and S8, the first determining unit 240 determines that the access control area code, the user password, and the international mobile subscriber identity code are present in the access control system database 242, and the second determining unit 250 determines the first time and the second time. If the difference does not exceed a predetermined time, the process proceeds to step S1. Next, as shown in step S10, the electronic lock #270 is unlocked by the control unit 260 to allow the user holding the mobile electronic device 1 to pass. In addition, for areas that are frequently in and out or where security is not critical, such as offices, parking lots, etc. In step S1, in addition to the entry of the access area code and the user password through the editing unit 110, the user can also select the access area code by selecting a method instead of the manual input step, thereby saving a lot of time. Referring to Figure 3, the bean diagram shows the functional block diagram of the mobile electronic device integrated with the mobile electronic device database. Compared with the first picture in Figure 3! In the figure, the mobile electronic device 3 (8) further includes a mobile electronic device database 112, a selection unit 114 and a reading unit 116. The mobile electronic aggregation database 112 is configured to store a plurality of access control area codes and a plurality of user passwords. The selecting unit 114 is configured to provide the user with one of the = access area codes. The reading unit... reads the opposite party from the mobile electronic device according to the access control area. (4) In step S1, the user can also select the access control area code provided by the mobile electronic device library 12. Thereby, the code unit 120 will obtain the user's selection through the selection unit 114 12 1355624

^Sanda's code: TW3853PA forbidden area code, and the user password is automatically obtained through the reading unit 116. Furthermore, if the mobile electronic device is more integrated with the global positioning system, the mobile electronic device can locate the geographic location of the mobile electronic device through the global positioning system, thereby automatically obtaining the access control area code. Please refer to FIG. 4, which is a functional block diagram of a mobile electronic device integrated with the Global System. In contrast to FIG. 4, in contrast to FIG. 3, the mobile electronic device 400 further includes a global positioning system 118. The global positioning system 118 is used to locate a geographic location of the mobile electronic device 400, and according to the geographic location, the corresponding access control area code is read from the mobile electronic device database 12. Therefore, in step S1, the user can also set the mobile electronic device 400 to locate the geographical location of the mobile electronic device 400 through the global positioning system 118 to read the corresponding access control area code. Thereby, the encoding unit 120 automatically acquires the access control area code through the global positioning system 118, and automatically obtains the user password through the reading unit 116. The authentication method for the access control disclosed in the above embodiments of the present invention and the mobile electronic device and the access control system using the same. Use each access control system with a specific code (forbidden area code), a password set between the user and each access control system (user password), and a personal identification number in the user identification card (International Mobile Subscriber ID) The uniqueness and the timeliness of effective authentication are compiled into the access code (intermediate code) and converted into a two-dimensional bar code and transmitted to the access control system in a scanning manner for identity authentication. Thus, with the password set by the user, the risk of security management can be avoided after the mobile electronic device is stolen. The International Mobile Subscriber Identity identifies the identity of the user. Timeliness of certification utility to avoid theft of access codes 13 1355624

'Sanda nickname: TW3853PA or the risk of copying. In this way, the security of access control is greatly improved. Moreover, by setting different access control area codes and integrating with mobile phones or personal mobile assistants, users no longer need to carry many access cards to go out to reduce the burden on users. In conclusion, the present invention has been disclosed above in a preferred embodiment, and is not intended to limit the invention. It will be apparent to those skilled in the art that various changes and modifications can be made without departing from the spirit and scope of the invention. Therefore, the scope of protection of the present invention is defined by the scope of the appended claims.

14 1355624

Sanda Number: TW3853PA [Simple Description of the Drawings] Fig. 1 is a functional block diagram of a mobile electronic device and an access control system in accordance with a preferred embodiment of the present invention. Figure 2 is a flow chart showing the authentication method of the access control according to the preferred embodiment of the present invention. Figure 3 is a functional block diagram of the mobile electronic device incorporating the mobile electronic device database. Figure 4 is a block diagram showing the function of the mobile electronic device integrated with the global positioning system. [Main component symbol description] 100, 300, 400: mobile electronic device 110: editing unit 114: selection unit 112: mobile electronic device database 116: reading unit 118: global positioning system 120: encoding unit 130, 220: transcoding Unit 140 screen 200 access control system 210 scanning module 230 decoding unit 240 first determining unit 15 1355624

Sanda Li: TW3853PA 242 Access Control System Library 250 Second Judgment Unit 260 Control Unit 270 Electronic Lock Cl : Intermediate Code C2 : 2D Bar Code

16

Claims (1)

1355624 _Sanda's No.: TW3853PA ' X. Patent application scope: 1. A method of authentication for access control, including: (a) Preparing an access control area code and a user with a mobile electronic device at a first time a password, an International Mobile Subscriber Identity (IMSI) and the first time become an intermediate code; (b) converting the intermediate code into a two-dimensional barcode by the mobile electronic device (Two-dimension Barcode) (c) at a second time, the two-dimensional bar code is obtained by an access control system; (d) the two-dimensional bar code is converted into the intermediate code by the access control system; (e) the intermediate code is interpreted by the access control system; The access control area code, the user password, the international mobile subscriber identity code, and the first time; (f) determining whether the access control area code, the user password, and the international mobile subscriber identity code are present in an access control system (g) determining whether the difference between the first time and the second time exceeds a predetermined time; and * (h) when the access area code, the user password, and If the international mobile subscriber identity code does not exist in the access control system database, or the difference between the first time and the second time exceeds a predetermined time, an electronic lock is locked to prohibit possession of the mobile electronic device. User access. 2. The authentication method described in claim 1 of the patent scope further includes: (i) when the access control area code, the user password, and the international mobile subscriber identity code are present in the access control system database, and the When the difference between the time and the second time does not exceed a predetermined time, the electronic 17 24 - 2nd number: TW3853PA lock ' is released to allow the user holding the mobile electronic device to pass. The authentication method described in the first aspect of the patent application, wherein the authentication method further comprises: (J) the mobile electronic device displaying the two-dimensional barcode on a screen; In the code step (1), the access control system obtains the two-dimensional strip by scanning. 4) The step U) as recited in the item Scope of the claim is further included: the U1) providing-turning unit for the ❹ Domain code and the user password. The certification party 1 described in the first paragraph of the patent application scope (a) further includes: 〃 (a2) provides a plurality of access control area codes for the selection; and the heart (a3) automatically according to the access area code Read the corresponding password. 6. If you apply for a patent scope! And the step (a) further includes: ^ (a4) positioning a location of the mobile electronic device in a global positioning system; (a5) reading the corresponding location according to the geographic location The access area code; and (a6) automatically reading the corresponding user password according to the access area code.