WO2018095184A1

WO2018095184A1 - Data interaction method and system

Info

Publication number: WO2018095184A1
Application number: PCT/CN2017/107611
Authority: WO
Inventors: 李东声
Original assignee: 天地融科技股份有限公司
Priority date: 2016-11-25
Filing date: 2017-10-25
Publication date: 2018-05-31
Also published as: CN107231340A; CN107231340B

Abstract

The present invention provides a data interaction method and a system. The method comprises: a first server receives first information sent by a client terminal; the first server allocates target user for location information, determines identity information of the target user, and sends the second information to a second server; the second server receives the second information and stores the second information; an authority control device detects that a first to-be-verified information carrier enters a detection range and reads the first to-be-verified information from the first to-be-verified information carrier; the authority control device acquires the to be verified location information and sends an authentication request to the second server; the second server receives the authentication request, uses the stored identity information of target users to perform a first authentication on the to-be-verified identity information, uses the stored location information to perform a second authentication on the to-be-verified location information, and sends an authentication pass response to the authority control device after the first authentications and the second authentication are both passed; the authority control device receives the authentication pass response and performs an authorization operation.

Description

Data interaction method and system

Cross-reference to related applications

This application claims the priority of the Chinese patent application filed by the Chinese Patent Office, the application No. 201611059517.3, entitled "A Data Interaction Method and System" on November 25, 2016.

Technical field

The present invention relates to the field of electronic technologies, and in particular, to a data communication device and system.

Background technique

At present, in order to improve the security of the community, the entrance of some community gates and the entrances of various buildings in the community usually have access control. The owner who lives in the community can use the access card issued by the community to enter and exit the cell and the building, and the person without the access card cannot enter the cell.

With the rapid development of the Internet, more and more users choose to shop online, order online, or apply for electrical repairs online. When service personnel, such as couriers or maintenance workers, need to provide services, the location is located in the community with access control. Service personnel are usually unable to enter the community. How to enable the service personnel without access rights to enter the cell while providing services to the user without affecting the security of the management of the cell itself is an urgent problem to be solved.

Summary of the invention

The present invention is directed to solving the above problems.

The main object of the present invention is to provide a data interaction method;

Another object of the present invention is to provide a data interaction system.

In order to achieve the above object, the technical solution of the present invention is specifically implemented as follows:

The first aspect of the present invention provides a data interaction method, including: a first server receives first information sent by a client, the first information includes location information; and the first server allocates a target to the location information. The user determines the identity information of the target user, and sends the second information to the second server, where the second information includes: the location information and identity information of the target user; and the second server receives the second information The information, the second information is stored; the right control device detects that the first to-be-certified information carrier enters the detection range, and reads the first to-be-certified information from the first to-be-certified information carrier, where the first to-be-certified information includes: to be authenticated The identity control device obtains the location information to be authenticated, and sends an authentication request to the second server, where the authentication request includes: the to-be-authenticated location information and the identity to be authenticated; the second server receives Determining, by using the stored identity information of the target user, the first authentication of the identity information to be authenticated, and Performing second authentication on the to-be-authenticated location information by using the stored location information, after the first authentication and the second authentication are both passed, sending an authentication pass response to the rights control device; the rights control device receiving the location The authentication performs a authorization operation by responding.

The method of claim 1, the method further comprising: after performing the authorization operation, the authority control device sends a security processing instruction to the second server; the second server receives the security processing instruction Deleting the stored second information or setting the state of the second information to a failed state; or, the second server deleting the stored first after the first authentication and the second authentication are passed The second information or the state in which the second information is set is a failure state.

The method of claim 1, wherein the rights control device acquires the location information to be authenticated, the method includes: the rights control device acquires location information of the rights control device itself, and the location information of the rights control device itself The location information to be authenticated.

The method according to the first aspect, wherein the rights control device acquires the location information to be authenticated, the method includes: the rights control device detects that the second to-be-certified information carrier enters the detection range, and the second to-be-certified information carrier Reading the second to-be-certified information, where the second to-be-certified information includes: location information to be authenticated.

The method of any one of the preceding claims, wherein the authorization control device receives the authentication response and performs an authorization operation, the method includes: after the authorization control device receives the authentication response, determining that the timing arrives Whether the time exceeds the prescribed time, if the specified time is not exceeded, the authorization operation is performed, wherein the timing is sent by the authority control device to the second server for authentication Start after the request.

The method of any one of the preceding claims, wherein the first to-be-certified information carrier is an identity card, a graphic code carrying identity information, a barcode carrying identity information, or a biometric.

The method of any one of the preceding claims, wherein the method further comprises: after receiving the authentication pass response, the authority control device sends the identity information to be authenticated to the client.

The eighth aspect of the present invention provides a data interaction system, including: a first server, configured to receive first information sent by a client, where the first information includes location information; and assign a target user to the location information, Determining the identity information of the target user, and sending the second information to the second server, where the second information includes: the location information and identity information of the target user; and the second server is configured to receive the The second information is used to store the second information; the right control device is configured to detect that the first to-be-certified information carrier enters the detection range, and reads the first to-be-certified information from the first to-be-certified information carrier, the first to-be-authenticated information The method includes: information to be authenticated; obtaining location information to be authenticated, and sending an authentication request to the second server, where the authentication request includes: the to-be-authenticated location information and the identity to be authenticated; the second server And receiving, by using the stored identity information of the target user, performing first authentication on the identity information to be authenticated, and using The stored location information performs second authentication on the to-be-authenticated location information, and after the first authentication and the second authentication are both passed, the authentication pass response is sent to the rights control device; the rights control device is further used The authorization operation is performed by receiving the authentication and responding.

The system of claim 8, the authority control device is further configured to: after performing the authorization operation, send a security processing instruction to the second server; the second server is further configured to receive the security Processing the instruction, deleting the stored second information or setting the state of the second information to a failure state; or the second server is further configured to: after the first authentication and the second authentication are passed, Deleting the stored second information or setting the state of the second information to a failure state.

The system of claim 8, wherein the authority control device is configured to acquire location information of the rights control device itself, and the location information of the rights control device itself is the to-be-authenticated location information.

The system of claim 8, wherein the authority control device is configured to detect that the second to-be-certified information carrier enters the detection range, and reads the second to-be-certified information from the second to-be-certified information carrier, where The second to-be-certified information includes: location information to be authenticated.

The system of any one of the preceding claims, wherein the authority control device is configured to: after receiving the response, determine whether the time when the timing arrives exceeds a predetermined time, and if the specified time is not exceeded, An authorization operation is performed, wherein the timing begins after the rights control device sends an authentication request to the second server.

The system of any one of the preceding claims, wherein the first to-be-certified information carrier is an identity card, a graphic code carrying identity information, a barcode carrying identity information, or a biometric.

The system of any one of the preceding claims, wherein the authorization control device is further configured to send the identity information to be authenticated to the client after receiving the authentication response.

According to the technical solution provided by the present invention, after receiving the location information sent by the client, the first server allocates the target user and sends the identity information of the target user to the second server, where the target user is located in the The person who provides the service of the location information (for example, the delivery person or the food delivery staff, etc.), after the target user arrives at the location of the authority control device, places the first information carrier to be authenticated held in the detection area of the authority control device. The authority control device detects and reads the identity information to be authenticated, and obtains the location information to be authenticated, and requests the second server to authenticate the target user. If the authentication passes, the authorization operation is performed. It can be seen that in the cell with the access control (the access control is the authority control device), even if the target user (such as a delivery person or a food delivery person, etc.) does not have the access card of the cell, the present invention can be used. The solution sends the identity information of the target user to the second server through the first server, and the second server authenticates the target user by the access control. If the authentication is passed, the target user obtains authorization, thereby entering the cell, and enjoying The customer of the service provided by the target user does not need to go out to open the access control for the target user, which provides convenience for the customer. On the other hand, the target user is authorized to enter the second server after entering the cell, and the security is guaranteed. safety.

DRAWINGS

In order to more clearly illustrate the technical solutions of the embodiments of the present invention, the drawings used in the description of the embodiments will be briefly described below. It is obvious that the drawings in the following description are only some embodiments of the present invention, Those of ordinary skill in the art will be able to obtain other figures from these drawings without the inventive effort.

1 is a flowchart of a data interaction method according to Embodiment 1 of the present invention;

FIG. 2 is a schematic structural diagram of a data interaction system according to Embodiment 2 of the present invention.

detailed description

The technical solutions in the embodiments of the present invention are clearly and completely described in the following with reference to the drawings in the embodiments of the present invention. It is obvious that the described embodiments are only a part of the embodiments of the present invention, and not all of the embodiments. All other embodiments obtained by a person of ordinary skill in the art based on the embodiments of the present invention without creative efforts are within the scope of the present invention.

In the description of the present invention, it is to be understood that the terms "center", "longitudinal", "lateral", "upper", "lower", "front", "back", "left", "right", " The orientation or positional relationship of the indications of "upright", "horizontal", "top", "bottom", "inside", "outside", etc. is based on the orientation or positional relationship shown in the drawings, only for the convenience of describing the present invention and The simplification of the description is not intended to limit or imply that the device or component that is referred to has a particular orientation, is constructed and operated in a particular orientation, and thus is not to be construed as limiting. Moreover, the terms "first" and "second" are used for descriptive purposes only and are not to be construed as indicating or implying a relative importance or quantity or location.

In the description of the present invention, it should be noted that the terms "installation", "connected", and "connected" are to be understood broadly, and may be fixed or detachable, for example, unless otherwise explicitly defined and defined. Connected, or integrally connected; can be mechanical or electrical; can be directly connected, or indirectly connected through an intermediate medium, can be the internal communication of the two components. The specific meaning of the above terms in the present invention can be understood in a specific case by those skilled in the art.

The embodiments of the present invention will be further described in detail below with reference to the accompanying drawings.

To facilitate the understanding of the present invention, a brief description of possible application scenarios in this embodiment is provided below:

The applicable scenarios in this embodiment include, but are not limited to, a client, a first server, a second server, and an authority control device; the client purchases a certain service through the client through the online order (for example, online shopping, online ordering, etc.) The client sends location information (such as a shipping address) to the first server, the first server allocates a target user (such as a courier) for the location information, and sends the identity information and location information of the target user to the second server. The target user holds the first information carrier to be authenticated. When the target user arrives at the location of the authority control device, the rights control device sends an authentication request for identity authentication to the target user, and the second server uses the identity information of the target user. And the location information authenticates the target user, and the authentication is returned to the authority control device by the response, and the authority control device authorizes the target user (for example, opening the door lock so that the target user can enter).

Example 1

This embodiment provides a data interaction method. As shown in FIG. 1, the method includes the following steps:

101. The first server receives first information sent by a client, where the first information includes location information.

The first server in this embodiment can communicate with the client. The first server may be a server that provides an online service such as an online supermarket or an online ordering service, and the client may be an application for realizing online shopping or ordering services, and the client may be installed on a device held by the user (for example, a PC). , mobile phones, PDAs, etc.).

In this embodiment, the first information may be order information, and the location information may be an order address; for example, when the online shopping is performed, the location information is specifically a delivery address, and when the online order is ordered, the location information is specifically a delivery address and the like. For different application scenarios, the location information may represent address information of different meanings, and is not limited herein.

In addition, the first information may further include information such as an order number, an order detail, an order amount, an order date, a user name of the order, and the like, and is not limited herein.

102. The first server allocates a target user to the location information, determines identity information of the target user, and sends second information to the second server, where the second information includes: the location information and the target user. Identity information;

In this embodiment, the target user is a person who provides a corresponding service to the client located in the location information. For example, when the online shopping is performed, the target user is specifically a delivery person. When the online order is ordered, the location information is specifically a food delivery person, etc. . For different application scenarios, the target user can indicate the person providing different services, and there is no limitation here.

The identity information of the target user in this embodiment may be ID information or may be any biometric information such as fingerprint information, palm print information or iris information. The ID card information includes at least an ID card number, and the ID card information can be read from the ID card, or can be read from an order graphic code or an order barcode code carrying the ID card information.

In this embodiment, the second server may be used to manage the rights control device. For example, in the cell with the access control, the rights control device may be the access control, and the second server is the server that can implement data interaction and management for the access control.

In this embodiment, the first server and the second server are mutually independent servers, and each of them functions differently. The first server is used for providing a server for online shopping, online ordering, and the like, the second server is used for data interaction and management of the authority control device, and the first server and the second server can communicate with each other through a wireless network or a wired network. Communicate.

103. The second server receives the second information, and stores the second information.

In this embodiment, the second server stores the received location information and the identity information of the target user, so that when the subsequent rights control device requests to authenticate the target user, the location information and the identity information of the target user are used to identify the target user. Certification.

The permission control device detects that the first to-be-certified information carrier enters the detection range, and reads the first to-be-certified information from the first to-be-certified information carrier, where the first to-be-certified information includes: identity to be authenticated;

In this embodiment, the authority control device may be an access control.

The authority control device is provided with a module for supporting the information reading function, for example, the module may be an ID card reading module for reading the identity card information. Block, correspondingly, the first information carrier to be authenticated is an identity card, and the first information to be authenticated is the identity card information; for example, the module is a scan code module, and correspondingly, the first information carrier to be authenticated may be carried For the order graphic code or order barcode with identity information, the first information to be authenticated can be read from the order graphic code or the order barcode to read the identity information of the target user; for example, the module can read the biometric The biometric reading module, correspondingly, the first to-be-certified information carrier is a biometric feature, and the read first to-be-certified information is biometric information. The biometric feature may be a finger, and the corresponding biometric information may be a fingerprint; or the biometric feature may be a palm, and the corresponding biometric information may be a palm print; or the biometric feature may be an eye, and the corresponding biometric information may be Iris, etc., there is no limit here.

The access control device obtains the to-be-authenticated location information, and sends an authentication request to the second server, where the authentication request includes: the to-be-authenticated location information and the to-be-authenticated identity information;

In this embodiment, there are many ways for the authority control device to obtain location information to be authenticated, as described in detail below.

In this embodiment, the rights control device and the second server may communicate through a wired connection, such as a network cable connection, or may communicate through a wireless network, such as a mobile network, a local area network in a cell, or the like.

The second server receives the authentication request, performs the first authentication on the to-be-authenticated identity information by using the stored identity information of the target user, and uses the stored location information to the location information to be authenticated. Performing a second authentication, after the first authentication and the second authentication are both passed, sending an authentication pass response to the authority control device;

In this embodiment, the first authentication of the identity information to be authenticated is performed by using the stored identity information of the target user, which may be implemented by: determining the stored identity information of the target user and the identity information to be authenticated. Whether they are consistent. If they are consistent, the first authentication is passed. If they are inconsistent, the first authentication fails.

In this embodiment, the second authentication of the to-be-authenticated location information by using the stored location information may be implemented by: determining whether the stored location information is consistent with the to-be-authenticated location information, if consistent, Then, the second authentication is passed, and if not, the second authentication fails.

107. The authority control apparatus receives the authentication and performs a authorization operation by responding.

In this embodiment, when the authority control device is an access control, performing the authorization operation may be as follows: opening the door lock.

In this embodiment, after receiving the location information sent by the client, the first server allocates the target user and sends the identity information of the target user to the second server, where the target user provides services for the client located in the location information. A person (such as a delivery person or a food delivery person, etc.), after the target user arrives at the location of the authority control device, places the first information carrier to be authenticated in the detection area of the authority control device, and the authority control device detects and reads The authentication identity information is obtained, and the location information to be authenticated is obtained, and the second server is requested to authenticate the target user. If the authentication is passed, the authorization operation is performed. It can be seen that in the cell with the access control (the access control is the authority control device), even if the target user (such as a delivery person or a food delivery person, etc.) does not have the access card of the cell, the first server can be passed. Sending the identity information of the target user to the second server, and requesting the second server to authenticate the target user by the access control. If the authentication is passed, the target user is authorized to enter the cell, and on the other hand, enjoy the service provided by the target user. The customer does not need to go out to open the access control for the target user, which provides convenience for the customer. On the other hand, the target user is authorized to enter the second server after entering the cell, thereby ensuring security.

As an optional implementation manner of this embodiment, in order to improve the security of the authorization operation, the method further includes the following steps: sending the second server to the second server after performing the authorization operation. a security processing instruction; the second server receives the security processing instruction, deletes the stored second information, or sets a state of the second information to a failure state; or, exemplarily, the second server is in the After the first authentication and the second authentication are passed, the method further includes the following steps: the second server deletes the stored second information or sets the state of the second information to a failure state.

In this embodiment, after the current authentication or the current authorization operation is performed, the stored second information is deleted, so that the second information cannot be used for the next authentication or authorization in the subsequent process, or the state of the second information is set. The failure status, that is, the second information is invalid after being used for one authentication and authorization operation, and then the second information cannot be used for the next authentication or authorization, thereby avoiding the second information being Illegal reuse for authentication and authorization.

As an optional implementation manner of the embodiment, in order to further ensure the security of the authorization operation, the authorization operation may also set the time limit for the authorization operation, and the rights control device receives the authentication response and performs the authorization operation, which is specifically implemented by the following manner. After the authorization control device receives the authentication response, it determines whether the timing of the timing arrival exceeds a predetermined time, and if the predetermined time is not exceeded, performing an authorization operation, wherein the timing is performed by the authority control device The second server starts after sending an authentication request.

For example, the time when the authorization control device sends the authentication request to the second server is 9:00 am, and the time is started. The specified time can be set to 12 am, and if the authentication response sent by the second server is received, the authority control If the timing of the device timing does not exceed 12 o'clock in the morning, the authorization operation is allowed. If the time exceeds 12 o'clock, the authorization operation is not performed even if the authentication response is received.

As an optional implementation manner of the embodiment, the obtaining, by the privilege control device, the location information to be authenticated may be implemented in the following manner: the privilege control device acquires location information of the privilege control device itself, and the privilege control device The location information of the self is the location information to be authenticated. In this embodiment, the authority control device does not need to obtain the location information to be authenticated from the outside, and the solution is relatively simple. By After the identity control device reads the identity information, it indicates that the target user has reached the location of the authority control device, and thus the location information of the authority control device itself can be used to indicate the location of the target user, that is, as the location information to be authenticated, and controlled by the authority. The device sends to the second server for second authentication.

As an optional implementation manner of this embodiment, the obtaining, by the privilege control device, the location information to be authenticated may be implemented by: the privilege control device detecting that the second to-be-certified information carrier enters the detection range, from the The second to-be-certified information carrier reads the second to-be-certified information, where the second to-be-certified information includes: to-be-authenticated location information.

In this embodiment, the second to-be-certified information carrier includes an order graphic code or an order barcode carrying the location information (such as a delivery address), and the permission control device can read the delivery address from the order graphic code or the order barcode, and the delivery The cargo address is equivalent to the location information to be authenticated. In this embodiment, the authority control device obtains the location information to be authenticated by reading the second to-be-certified information carrier that carries the location information externally. It should be noted that, in this embodiment, when the first to-be-authenticated information carrier and the second to-be-certified information carrier both carry the identity information and the location information of the target user, the first to-be-authenticated information carrier and the second to-be-certified information The carrier may be the same carrier. For example, the first to-be-certified information carrier and the second to-be-certified information carrier are both an order graphic code or an order barcode, and the order graphic code or the order barcode carries the identity information and location information of the target user. The control device can obtain the identity information of the target user by scanning the code, and can also obtain the location information. Certainly, the first to-be-certified information carrier and the second to-be-certified information carrier may be different carriers. For example, the first to-be-certified information carrier is an identity card of the target user, and the second to-be-certified information carrier is an order graphic code or an order barcode. Location information is carried in the order graphic code or order barcode.

As an optional implementation manner of this embodiment, after receiving the authentication and passing response, the method further includes the following steps: sending the to-be-authenticated identity information to the client. In this embodiment, the authority control device receives the authentication, and the identity information to be authenticated is consistent with the identity information of the target user. At this time, the rights control device sends the identity information to be authenticated (that is, the identity information of the target user) to the client. The client prompts the client that the target user has passed the authorization. For example, after the access control receives the authentication, the access control sends the identity information of the courier to the client, so that the client can prompt the courier to pass the authentication, and the delivery is about to be performed.

Example 2

The embodiment provides a data interaction system, which can be used to execute the data interaction method in Embodiment 1, as shown in FIG. 2, the system includes: a first server 11, a second server 12, and an authority control device 13;

The first server 11 is configured to receive first information sent by the client, where the first information includes location information, assign a target user to the location information, determine identity information of the target user, and send the identity information to the second server. Second information, the second information includes: the location information and identity information of the target user;

The second server 12 is configured to receive the second information, and store the second information.

The privilege control device 13 is configured to detect that the first to-be-certified information carrier enters the detection range, and reads the first to-be-certified information from the first to-be-certified information carrier, where the first to-be-authenticated information includes: identity information to be authenticated; The authentication location information is sent to the second server 12, where the authentication request includes: the to-be-authenticated location information and the to-be-authenticated identity information;

The second server 12 is further configured to receive the authentication request, perform first authentication on the to-be-authenticated identity information by using the stored identity information of the target user, and use the stored location information to The authentication location information is subjected to the second authentication, and after the first authentication and the second authentication are both passed, the authentication passing response is sent to the authority control device 13;

The authority control device 13 is further configured to receive the authentication response and perform an authorization operation.

The identity information of the target user in this embodiment may be ID information or may be any biometric information such as fingerprint information, palm print information or iris information.

In this embodiment, the first server and the second server are mutually independent servers, and each of them functions differently. The first server is used for providing a server for online shopping, online ordering, and the like, and the second server is used for data interaction with the authority control device. And the managed server, the first server and the second server can communicate through a wireless network or a wired network.

In this embodiment, the authority control device may be an access control.

The authority control device is provided with a module for supporting the information reading function. For example, the module may be an identity card reading module for reading the identity card information, and correspondingly, the first information carrier to be authenticated is an identity card, and the first read is performed. The information to be authenticated is the ID card information; for example, the module is a scan code module, and correspondingly, the first to-be-certified information carrier may be the first to-be-certified information read by the order graphic code or the order barcode carrying the order information. The identity information of the target user may be read from the order graphic code or the order barcode; for example, the module may be a biometric reading module that reads the biometric, and correspondingly, the first information carrier to be authenticated is a biometric, read The first to-be-certified information that is taken out is biometric information. The biometric feature may be a finger, and the corresponding biometric information may be a fingerprint; or the biometric feature may be a palm, and the corresponding biometric information may be a palm print; or the biometric feature may be an eye, and the corresponding biometric information may be Iris, etc., there is no limit here.

In this embodiment, after receiving the location information sent by the client, the first server allocates the target user and sends the identity information of the target user to the second server, where the target user provides services for the client located in the location information. A person (such as a delivery person or a food delivery person, etc.), after the target user arrives at the location of the authority control device, places the first information carrier to be authenticated in the detection area of the authority control device, and the authority control device detects and reads The authentication identity information is obtained, and the location information to be authenticated is obtained, and the second server is requested to authenticate the target user. If the authentication is passed, the authorization operation is performed. It can be seen that in the cell with the access control (the access control is the authority control device), even if the target user (such as a delivery person or a food delivery person, etc.) does not have the access card of the cell, the present invention can be used. The solution sends the identity information of the target user to the second server through the first server, and the second server authenticates the target user by the access control. If the authentication is passed, the target user obtains authorization, thereby entering the cell, and enjoying The customer of the service provided by the target user does not need to go out to open the access control for the target user, which provides convenience for the customer. On the other hand, the target user is authorized to enter the second server after entering the cell, and the security is guaranteed. safety.

As an optional implementation manner of this embodiment, in order to improve the security of the authorization operation, the permission control apparatus is further configured to send a security processing instruction to the second server after performing the authorization operation; The second server is further configured to receive the security processing instruction, delete the stored second information, or set a state of the second information to a failure state;

Or, exemplarily, the second server is further configured to delete the stored second information or set the state of the second information to a failure state after the first authentication and the second authentication are passed .

As an optional implementation manner of the embodiment, in order to further ensure the security of the authorization operation, the authorization operation may also be set to be effective. For example, the authority control device is specifically configured to receive the authentication response, It is judged whether the time when the timing arrives exceeds the prescribed time, and if the predetermined time is not exceeded, the authorization operation is performed, wherein the timing starts after the authority control device transmits the authentication request to the second server. For example, the time when the authorization control device sends the authentication request to the second server is 9:00 am, and the time is started. The specified time can be set to 12 am, and if the authentication response sent by the second server is received, the authority control If the timing of the device timing does not exceed 12 o'clock in the morning, the authorization operation is allowed. If the time exceeds 12 o'clock, the authorization operation is not performed even if the authentication response is received.

As an optional implementation manner of this embodiment, the rights control device is specifically configured to acquire location information of the rights control device itself, and the location information of the rights control device itself is the to-be-authenticated location information. In this embodiment, the authority control device does not need to obtain the location information to be authenticated from the outside, and the solution is relatively simple. After the authorization control device reads the identity information, it indicates that the target user has reached the location of the authority control device, and thus the location information of the authority control device itself can be used to indicate the location of the target user, that is, as the location information to be authenticated, and controlled by the authority. The device sends to the second server for second authentication.

As an optional implementation manner of this embodiment, the rights control device is specifically configured to detect that the second to-be-certified information carrier enters the detection range, and reads the second to-be-certified information from the second to-be-certified information carrier. The second to-be-certified information includes: location information to be authenticated. In this embodiment, the authority control device obtains the location information to be authenticated by reading the second to-be-certified information carrier that carries the location information externally. It should be noted that, in this embodiment, when the first to-be-authenticated information carrier and the second to-be-certified information carrier both carry the identity information and the location information of the target user, the first to-be-authenticated information carrier and the second to-be-certified information The carrier may be the same carrier. For example, the first to-be-certified information carrier and the second to-be-certified information carrier are both an order graphic code or an order barcode, and the order graphic code or the order barcode carries the identity information and location information of the target user. The control device can obtain the identity information of the target user by scanning the code, and can also obtain the location information. Certainly, the first to-be-certified information carrier and the second to-be-certified information carrier may be different carriers. For example, the first to-be-certified information carrier is an identity card of the target user, and the second to-be-certified information carrier is an order graphic code or an order barcode. Location information is carried in the order graphic code or order barcode.

As an optional implementation manner of this embodiment, the rights control apparatus is further configured to: after receiving the authentication pass response, send the to-be-authenticated identity information to the client. In this embodiment, the authority control device receives the authentication, and the identity information to be authenticated is consistent with the identity information of the target user. At this time, the rights control device sends the identity information to be authenticated (that is, the identity information of the target user) to the client. The client prompts the client that the target user has passed the authorization. For example, after the access control receives the authentication, the access control sends the identity information of the courier to the client, so that the client can prompt the courier to pass the authentication, and the delivery is about to be performed.

In the description of the present specification, the description with reference to the terms "one embodiment", "some embodiments", "example", "specific example", or "some examples" and the like means a specific feature described in connection with the embodiment or example. A structure, material or feature is included in at least one embodiment or example of the invention. In the present specification, the schematic representation of the above terms does not necessarily mean the same embodiment or example. Furthermore, the particular features, structures, materials, or characteristics described may be combined in a suitable manner in any one or more embodiments or examples.

Although the embodiments of the present invention have been shown and described, it is understood that the foregoing embodiments are illustrative and not restrictive Variations, modifications, alterations and variations of the above-described embodiments are possible within the scope of the invention. The scope of the invention is defined by the appended claims and their equivalents.

Claims

A data interaction method, comprising:

The first server receives the first information sent by the client, where the first information includes location information;

The first server allocates a target user to the location information, determines identity information of the target user, and sends second information to the second server, where the second information includes: the location information and the identity of the target user. information;

The second server receives the second information, and stores the second information;

The right control device detects that the first to-be-certified information carrier enters the detection range, and reads the first to-be-certified information from the first to-be-certified information carrier, where the first to-be-certified information includes: identity information to be authenticated;

The rights control device obtains the to-be-authenticated location information, and sends an authentication request to the second server, where the authentication request includes: the to-be-authenticated location information and the to-be-authenticated identity information;

Receiving, by the second server, the authentication request, performing the first authentication on the to-be-authenticated identity information by using the stored identity information of the target user, and performing the first to be authenticated location information by using the stored location information. After the first authentication and the second authentication are both passed, the authentication pass response is sent to the authority control device;

The authority control device receives the authentication response and performs an authorization operation.
The method according to claim 1, wherein the method further comprises: the authority control means transmitting a security processing instruction to the second server after performing the authorization operation; the second server receiving the security Processing the instruction, deleting the stored second information or setting the state of the second information to a failure state;

Alternatively, after the first authentication and the second authentication are passed, the second server deletes the stored second information or sets the state of the second information to a failure state.
The method according to claim 1, wherein the obtaining, by the rights control device, location information to be authenticated comprises:

The right control device acquires the location information of the rights control device itself, and the location information of the rights control device itself is the to-be-authenticated location information.
The method according to claim 1, wherein the obtaining, by the rights control device, location information to be authenticated comprises:

The right control device detects that the second to-be-certified information carrier enters the detection range, and reads the second to-be-certified information from the second to-be-certified information carrier, wherein the second to-be-certified information includes: to-be-authenticated location information.
The method according to any one of claims 1 to 4, wherein the authorization control device receives the authentication response and performs an authorization operation, and the method includes: after the authorization control device receives the authentication response, determining Whether the time of arrival of the timing exceeds the prescribed time, and if the prescribed time is not exceeded, the authorization operation is performed, wherein the timing starts after the authority control apparatus transmits an authentication request to the second server.
The method according to any one of claims 1-4, wherein the first information carrier to be authenticated is an identity card, a graphic code carrying identity information, a barcode carrying identity information or a biometric.
The method according to any one of claims 1 to 4, wherein the method further comprises: after receiving the authentication pass response, the authority control device sends the identity to be authenticated information to the client.
A data interaction system, comprising:

a first server, configured to receive first information sent by the client, where the first information includes location information, assign a target user to the location information, determine identity information of the target user, and send second information to the second server. The second information includes: the location information and identity information of the target user;

The second server is configured to receive the second information, and store the second information.

The privilege control device is configured to detect that the first to-be-certified information carrier enters the detection range, and reads the first to-be-certified information from the first to-be-certified information carrier, where the first to-be-certified information includes: to be authenticated identity information; The location information is sent to the second server, where the authentication request includes: the to-be-authenticated location information and the to-be-authenticated identity information;

The second server is further configured to receive the authentication request, perform first authentication on the to-be-authenticated identity information by using the stored identity information of the target user, and use the stored location information to authenticate the to-be-authenticated The location information is subjected to the second authentication, and after the first authentication and the second authentication are both passed, the authentication passing response is sent to the authority control device;

The authority control device is further configured to receive the authentication response and perform an authorization operation.
The system according to claim 8, wherein the authority control device is further configured to: after performing the authorization operation, send a security processing instruction to the second server; the second server is further configured to receive the Determining, by the security processing instruction, deleting the stored second information or setting the state of the second information to a failure state;

Alternatively, the second server is further configured to: after the first authentication and the second authentication are passed, delete the stored second information or set the state of the second information to a failure state.
The system of claim 8 wherein:

The authority control device is specifically configured to acquire location information of the rights control device itself, and the rights control device The location information of the body is the location information to be authenticated.
The system of claim 8 wherein:

The privilege control device is configured to: detect that the second to-be-certified information carrier enters the detection range, and read the second to-be-certified information from the second to-be-certified information carrier, where the second to-be-certified information includes: Certified location information.
The system according to any one of claims 8 to 11, wherein the authority control means is configured to: after receiving the response by the authentication, determine whether the time when the timing arrives exceeds a prescribed time, if the specified time is not exceeded And performing an authorization operation, wherein the timing starts after the authority control device sends an authentication request to the second server.
The system according to any one of claims 8-11, wherein the first to-be-certified information carrier is an identity card, a graphic code carrying identity information, a barcode carrying identity information, or a biometric.
The system according to any one of claims 8 to 11, wherein the authority control device is further configured to: after receiving the authentication response, send the identity information to be authenticated to the client.