WO2019128681A1

WO2019128681A1 - Access control method, computer device, and readable storage medium

Info

Publication number: WO2019128681A1
Application number: PCT/CN2018/119993
Authority: WO
Inventors: 张斌
Original assignee: 中兴通讯股份有限公司
Priority date: 2017-12-26
Filing date: 2018-12-10
Publication date: 2019-07-04
Also published as: CN109961541A

Abstract

An access control method, a computer device, and a readable storage medium. The method comprises: receiving room identification information input by a visitor, and generating a corresponding verification code according to the room identification information (S1); obtaining visitor identity information generated by the visitor according to the verification code (S2); and verifying the visitor identity information according to the identity verification information corresponding to the room identification information, and performing access control to allow or not allow access according to the verification result (S3).

Description

Method, computer device and readable storage medium for access control

The present application claims the priority of the Chinese Patent Application No. PCT Application No.

Technical field

The present application relates to the field of communications, for example, to a method of access control, a computer device, and a readable storage medium.

Background technique

Daily control of visitor entry is relatively weak, and it is mainly controlled by manpower. For example, the visitor is required to register information such as the visitor's name and the visitor's address, but the property cannot screen and check the information provided by the visitor. Moreover, because some visitors are worried about the troubles caused by the disclosure of identity information, they will deliberately provide false identity information to the property, thus bringing uncertainty and hidden danger to the security of the community.

Summary of the invention

The following is an overview of the topics detailed in this document. This Summary is not intended to limit the scope of the claims.

The present application proposes a method, a computer device and a readable storage medium for access control, which can realize the self-registration of a visitor, and the homeowner can accurately identify the visitor and control the access control at any time, thereby avoiding false information of the visitor in the traditional community access control.

An embodiment of the present application provides a method for controlling access control, the method comprising: receiving room identification information input by a visitor, generating a corresponding verification code according to the room identification information; and obtaining a generated by the visitor according to the verification code. The visitor identity information is verified according to the identity verification information corresponding to the room identification information, and the access control is controlled according to the verification result.

Another embodiment of the present application provides a computer device including a memory, a processor, and a computer program stored on the memory and executable on the processor, the processor implementing the program The following steps of a method of access control:

Receiving room identification information input by the visitor, and generating a corresponding verification code according to the room identification information;

Obtaining visitor identity information generated by the visitor according to the verification code;

And verifying the visitor identity information according to the identity verification information corresponding to the room identification information, and performing switch control on the access control according to the verification result.

Another embodiment of the present application provides a computer readable storage medium having stored thereon a computer program that, when executed by a processor, implements the above-described method of access control.

Other aspects will be apparent upon reading and understanding the drawings and detailed description.

DRAWINGS

1 is a flow chart showing a method for controlling access control according to a first embodiment of the present application;

2 is a flowchart of a method for access control according to a second embodiment of the present application in scenario 1;

3 is a flowchart of a method for controlling access control in scenario 2 according to a second embodiment of the present application;

4 is a flowchart of a method for controlling access control in scenario 3 according to a second embodiment of the present application;

FIG. 5 is a flowchart of a method for access control according to a second embodiment of the present application in scenario 4;

FIG. 6 is a schematic structural diagram of a computer device according to a third embodiment of the present application.

Detailed ways

It is understood that the specific embodiments described herein are merely illustrative of the application and are not intended to be limiting.

In the following description, the suffixes such as "module," "component," or "unit" used to denote an element are merely illustrative for the benefit of the present application, and have no particular meaning per se. Therefore, "module", "component" or "unit" can be used in combination.

In order to facilitate the understanding of the embodiments of the present application, the implementation process of the present application will be described in detail below through several specific embodiments.

FIG. 1 is a block diagram of a flow of a first embodiment of the present application. According to FIG. 1 , in a first embodiment of the present application, a method for access control is provided, which is based on an access control system, the method comprising receiving room identification information input by a visitor, and generating corresponding information according to the room identification information. a verification code; obtaining visitor identity information generated by the visitor according to the verification code; verifying the visitor identity information according to the identity verification information corresponding to the room identification information, and performing switch control on the access control according to the verification result.

In this way, the visitor needs to input the identity information of the visitor through the QR code to complete the identity verification, thereby realizing the visitor entering the self-registration, thereby avoiding the situation that the visitor registers the false information, and the homeowner can accurately identify the visitor and control the access control at any time. At the same time, it overcomes the situation that the traditional community access control, the human card does not correspond, the visitor's false information, the authority is difficult to recycle, the environmental damage caused by the hardware equipment transformation and the high transformation cost. Moreover, during the verification process, the information of the homeowner is not revealed, which helps to improve the security performance of the homeowner.

1 is a block diagram of a method for controlling access control according to a first embodiment of the present invention. According to FIG. 1 , a method for controlling access control according to a first embodiment of the present application is based on an access control system, including steps S1 to S3.

In step S1, the room identification information input by the visitor is received, and a corresponding verification code is generated according to the room identification information.

In the embodiment, the form of the room identification information is not limited, and may be a room number, or may be other information that can accurately identify the room of the homeowner. Moreover, the corresponding room can be uniquely determined by the room identification information.

In addition, the access control is connected to the verification terminal of the homeowner through the access control system, wherein the verification terminal can be a mobile terminal or a PC terminal.

When the visitor arrives at the access control, the room identification information to be visited needs to be input at the access control place. In this case, the access control obtains a corresponding verification code according to the room identification information through the access control system. And the verification code is displayed in the display window of the access control. For example, the verification code includes a verification code of the verification terminal identifier (Identity, ID) of the homeowner corresponding to the room identification information, and the verification code may be in the form of a two-dimensional code or a barcode.

In step S2, visitor identity information generated by the visitor according to the verification code is obtained.

The visitor scans the verification code through the mobile terminal to send the visitor identity information indicating the identity of the visitor in the mobile terminal of the visitor to the access control system, and initiates an authentication authentication request to the access control system. That is, the visitor scans the verification code so that the access control system can obtain the visitor identity information indicating the identity of the visitor from the mobile terminal of the visitor.

In step S3, the visitor identity information is verified according to the identity verification information corresponding to the room identification information, and the access control is switched and controlled according to the verification result.

The access control system verifies the acquired visitor identity information according to the identity verification information corresponding to the room identification information, wherein each room identification information corresponds to one identity verification information.

In an embodiment, after the access control system knows the identity information of the visitor, it needs to determine whether the visitor has set a mode of not accepting the visitor. If the mode of not accepting the visitor has been set, the access control system will directly reply to the access control and the verification fails. If the mode of not accepting the visitor is not set, the visitor identity information is verified by the authentication information corresponding to the room identification information.

The access control system controls the switch of the access control according to the verification result.

In an embodiment, the authentication information includes at least one of the following: an address book, a preset allowed guest list, and a preset list of prohibited visitors.

The address book is an address book stored in the mobile terminal, and the preset access list is allowed. Pre-set guest list.

If the visitor identity information is in the address book or the default allowed guest directory, the verification is passed, thereby opening the access control. If the visitor identity information is in the default list of forbidden visitors, the verification fails, thereby continuing to close the access control.

In an embodiment, the performing the switch control on the access control according to the verification result includes: sending the access control to the access control if the verification of the visitor identity information is passed according to the identity verification information corresponding to the room identification information And instructing the verification terminal of the homeowner and the verification channel of the access control to establish a verification channel of the homeowner and verifying the verification of the visitor identity information according to the identity verification information corresponding to the room identification information The visitor identity information is verified by the verification channel; the access control is switched on and off according to the result of the homeowner verifying the visitor identity information through the verification channel.

If the visitor identity information is verified by the identity verification information corresponding to the room identification information, the access control system sends an access control open command to the access control, and opens the access control by using the access control open command. If the verification of the visitor identity information fails by the authentication information corresponding to the room identification information, it is determined whether the visitor continues to perform verification, and when it is determined that the visitor needs to continue verification (ie, the access control system determines that the visitor identity needs to be continued) During verification, the access control system establishes a session verification channel between the visitor and the homeowner, so that the homeowner directly verifies the visitor identity information through the verification channel, thereby the visitor directly initiates text to the homeowner, Pictures, voices, videos, etc. are sufficient to indicate identity or intention to help the homeowner verify the identity of the visitor. After the verification is completed, the access control is controlled according to the verification result of the homeowner.

In an embodiment, after the verification of the visitor identity information fails according to the identity verification information corresponding to the room identification information, the method further includes: sending an alert message to the access control or the visitor terminal to query whether the visitor continues to request verification. .

In an embodiment, when the verification of the visitor identity information is not passed by the identity verification information corresponding to the room identification information, the access control system sends a prompt instruction to the access control or the visitor terminal whether to perform the next verification, the access control Or if the guest terminal receives the prompt instruction, a prompt page is displayed in the display window, and the page includes "YES" and "NO". If the visitor determines to continue the verification, the visitor clicks "YES". Then, the access control system responds to the message to establish a verification terminal of the homeowner and the session verification channel of the access control. For example, the session verification channel is a video call. Through the video call, a video chat can be performed between the visitor and the homeowner to indicate the identity information or intention of the visitor. . Of course, if the visitor hits "NO", the verification process ends here. The guest terminal may be a handheld mobile terminal such as a mobile phone.

In an embodiment, the method further includes: receiving the room identification information input by the visitor, and before generating the corresponding verification code according to the room identification information, the method further includes: receiving the permission issued by the homeowner through the verification terminal The verification of the visitor identity information according to the authentication information corresponding to the room identification information includes: verifying the visitor identity information according to the allowed guest identity verification information; In the case, the access control open command is sent to the access control.

In an embodiment, if the visitor and the homeowner are in the same chat room, when the visitor requests the homeowner to open the access control, if the homeowner agrees, the homeowner can directly send the allowable visitor identity to the access control system through the chat bot or the verification terminal. Verification information, after the visitor enters the visitor identity information through the verification code, the access control system directly verifies the visitor identity information according to the allowable guest identity verification information, and in the case of the verification pass, the direct access control command is used to open the access control. The guest identity information is included in the guest identity information, so that the access control system does not need to query the identity verification information corresponding to the room identification information of the homeowner, which can effectively reduce the workflow of the access control system and improve the verification efficiency.

In an embodiment, the allowing guest authentication information is valid for a preset time. During the limitation period, the visitor can open the access control; however, if the expiration period is exceeded, the open access control command is invalidated and the visitor cannot open the access control. Thereby, the safety performance is improved.

The method described in the present solution will be described below in conjunction with a specific application example.

The second embodiment of the present application provides a method of access control. The second embodiment of the present application provides an access control system, which is based on a related rich media message network, and adds a module in the network to complete access and management of the access control system. The access control system is used as a special rich media message terminal access system for displaying the two-dimensional code of the room, and receiving control commands such as access control opening, rejection, and alarm sent by the access control server EGS.

Entity Guard Server (EGS), which is used for user rights identification, access control, and recording, as a transit channel, responsible for message response, processing, triggering, etc.

A QR code server (QRSVR) is used to generate a two-dimensional code including a homeowner ID in a rich media message system to prevent homeowner information from being exposed.

Network Address Book (NAB), which acts as a user-uploaded network address book, is responsible for judging the social relationship between the visitor and the homeowner.

The Instant Messaging Application Server (IMAS), when a visitor needs authentication and confirmation from the homeowner, delivers messages such as text and images.

The second embodiment of the present application provides a method for access control, including the following: a visitor inputs a room information to be accessed at an access control, and a two-dimensional code for obtaining the room information by the EGS is displayed on the display screen. Next, the visitor uses his mobile phone to scan the QR code and initiate an authentication request to the EGS.

After receiving the authentication request, the EGS identifies it according to the pre-set policy of the homeowner. In an embodiment, if the homeowner is set to not authorize anyone to enter, the EGS returns an authentication failure response and the access control system displays a failure message. If the homeowner is set to enter only the address book friend, the EGS queries the NAB whether the visitor matches any number in the homeowner's address book. If the visitor matches any number in the homeowner's address book, the authentication is passed and the access control is opened; The visitor does not match any number in the homeowner's address book and proceeds to the next step of identification.

In addition, if the homeowner is set to enter only the special user, the EGS initiates a query to the own database to determine whether the visitor is a user specially set by the homeowner. If the visitor is a user specially set by the homeowner, the EMS passes the authentication and the access is opened. If the visitor is not the user set by the homeowner, go to the next step of identification.

The next step for the above authentication is as follows: In the case that the current policy fails to match, the EGS initiates a message to the guest to directly authenticate the authentication according to the homeowner setting policy. If the visitor agrees to the authentication, the EGS establishes a session channel to the visitor and the homeowner through the IM AS, and the visitor initiates text, picture, voice, video, and the like to indicate the identity or intention by the visitor via the EGS and the IMAS. When the homeowner operates, the EGS returns information that is released or rejected to the access control system.

FIG. 2 is a flowchart of a method for providing access control according to a second embodiment of the present application in scenario 1. According to Figure 2: The scene 1 is that the visitors are strangers such as takeaways and express delivery. The method includes steps 1 through 14.

In step 1, the takeaway, courier, etc. visitor enters the room number to be visited at the access control.

In step 2, the access control initiates a request to the QRSvr in the rich media messaging system.

In step 3, the QRSvr passes the authentication and returns a two-dimensional code containing the room PUI to the access control.

In step 4, the takeaway, courier, and the like scan the QR code through the handheld terminal (eg, mobile phone).

In step 5, the handheld terminal directly initiates an access request to the EGS, and the access request includes identity information of the guest such as a takeaway or a courier.

In step 6, the EGS carries the identity of the visitor, accesses the room identity, and initiates an authentication request to the NAB.

In step 7, the NAB is pre-set according to the homeowner, such as by querying whether the identity information of the visitor is in the address book. Thus, it is determined that the visitor is not directly allowed to enter.

In step 8, the EGS returns a question of whether to perform further authentication to the handheld terminal of the visitor according to the received command. Of course, in the present embodiment, it is also possible to return a question of whether to perform further authentication like the access control.

In step 9, the visitor clicks Yes, and the EGS transparently transmits the command to the IMAS.

In step 10 to step 11, the IM AS initiates a communication link creation request to the guest terminal and the homeowner terminal respectively, and the homeowner can directly authenticate the visitor through the link.

In step 12, after the link is created, the takeaway, express, and other visitors are uttered by voice instructions.

In step 13, the homeowner clicks on to enter, and the IMAS transparently transmits the command to the EGS.

In step 14, the EGS issues a door open command to the access control based on the received command.

FIG. 3 is a flowchart of a method for providing access control according to a second embodiment of the present application in scenario 2. According to FIG. 3, the scenario 2 is: the access control process in the case where the visitor is a friend of the household. The method includes steps 1 through 8.

In step 1, the friend visitor enters the room number to be visited at the access control.

In step 4, the friend visitor scans the two-dimensional code through a handheld terminal (eg, a mobile phone).

In step 5, the handheld terminal directly initiates an access request to the EGS, the access request including identity information of the friend visitor.

In step 6, the EGS carries the identity of the visitor, accesses the room identifier, and authenticates to the NAB.

In step 7, the NAB finds a friend visitor in the homeowner's address book, and then determines that the friend can enter and returns the release command to the EGS.

In step 8, the EGS issues an open command to the access control based on the received command.

FIG. 4 is a flowchart of a method for providing access control according to a second embodiment of the present application in scenario 3. According to FIG. 4, the scenario 3 is: an access control process in which a visitor is blacklisted because of a bad behavior such as a small advertisement. The method includes steps 1 through 6.

In step 1, the blacklist visitor enters the room number to be visited at the access control.

In step 4, the blacklist visitor scans the two-dimensional code through a handheld terminal (eg, a mobile phone).

In step 5, the handheld terminal directly initiates an access request to the EGS, the access request including the identity information of the blacklisted visitor.

In step 6, the EGS finds the blacklist guest in the blacklist according to the built-in blacklist management module, and determines that the user is a blacklist user, prohibiting the user from entering and sending an audible and visual alarm through the access control system.

FIG. 5 is a flowchart of a method for access control according to a second embodiment of the present application in scenario 4. According to FIG. 5, the scene 4 is: the visitor controls the opening of the door through the chat room mode. The method includes steps 1 through 11.

In step 1, the visitor communicates with the homeowner in the same chat room.

In step 2, the visitor requests the homeowner to open the door.

In step 3, the homeowner sends a command to the EGS robot in the group chat to open the temporary access permission for the visitor, and the group chat AS forwards the message to the EGS.

In step 4, the EGS records the license information and saves the validity period according to the preset configuration.

In step 5, the visitor enters the room number to be visited at the access control.

In step 6, the access control initiates a request to the QRSvr in the rich media messaging system.

In step 7, the QRSvr passes the authentication and returns a two-dimensional code containing the room PUI to the access control.

In step 8, the visitor scans the two-dimensional code through a handheld terminal (eg, a mobile phone).

In step 9, the handheld terminal directly initiates an access request to the EGS, the access request including the identity information of the visitor.

In steps 10 to 11, the EGS issues a door open command to the access control after matching the permission information.

FIG. 6 is a computer device according to a third embodiment of the present application. According to FIG. 6, a third embodiment of the present application provides a computer device including a memory, a processor, and a computer program stored on the memory and executable on the processor, the processor executing the The following steps of the method for implementing an access control method: receiving room identification information input by a visitor, generating a corresponding verification code according to the room identification information; obtaining visitor identity information generated by a visitor according to the verification code; The identity verification information corresponding to the room identification information verifies the visitor identity information, and performs switch control on the access control according to the verification result.

In an embodiment, when performing the switch control on the access control according to the verification result, the processor includes: when the visitor identity information is verified according to the identity verification information corresponding to the room identification information, Sending an access control open command to the access control; establishing a verification terminal of the homeowner and the access control if the verification of the visitor identity information fails and the visitor needs to be verified according to the identity verification information corresponding to the room identification information The verification channel is used by the homeowner to verify the visitor identity information through the verification channel; and the access control is switched on and off according to the result of the homeowner verifying the visitor identity information through the verification channel.

In an embodiment, after the processor performs the verification of the visitor identity information according to the identity verification information corresponding to the room identification information, the processor further performs the step of: sending an inquiry to the access control or the guest terminal to ask the visitor whether to continue the request. Verified reminder message.

In an embodiment, before performing the receiving the room identification information input by the visitor and generating the corresponding verification code according to the room identification information, the processor further performs the following steps: receiving the allowed guest sent by the homeowner through the verification terminal Authentication information; said allowing guest authentication information to be time-sensitive;

When the processor performs the receiving the room identification information input by the visitor and generating the corresponding verification code according to the room identification information, the processor includes: verifying the visitor identity information according to the allowed guest identity verification information; In the case of passing, the access control open command is sent to the access control.

In an embodiment, the verification code includes: a verification code of the verification terminal ID of the homeowner corresponding to the room identification information.

In an embodiment, the authentication information includes at least one of the following directories: a contact list, a preset allowed guest list, and a preset list of prohibited visitors.

A fourth embodiment of the present application provides a computer readable storage medium having a computer program stored thereon, and the program is implemented by a processor to implement the above-described method of access control.

Since the method of an access control has been described in detail in the first embodiment, the implementation of the method is not repeatedly described in the present embodiment.

It is to be understood that the term "comprises", "comprising", or any other variants thereof, is intended to encompass a non-exclusive inclusion, such that a process, method, article, or device comprising a series of elements includes those elements. It also includes other elements that are not explicitly listed, or elements that are inherent to such a process, method, article, or device. An element that is defined by the phrase "comprising a ..." does not exclude the presence of additional equivalent elements in the process, method, item, or device that comprises the element.

The serial numbers of the embodiments of the present application are merely for the description, and do not represent the advantages and disadvantages of the embodiments.

Through the description of the above embodiments, those skilled in the art can clearly understand that the foregoing embodiment method can be implemented by means of software plus a necessary general hardware platform, and of course, by hardware. Based on such understanding, the technical solution of the present application, which is essential or contributes to the related art, may be embodied in the form of a software product stored in a storage medium such as a read only memory/random access memory ( The Read Only Memory/Random Access Memory (ROM/RAM), a magnetic disk, and an optical disk include instructions for causing a terminal, which may be a mobile phone, a computer, a server, an air conditioner, or a network device, to perform various embodiments of the present application. Said method.

Claims

A method of access control, the method comprising:

Receiving room identification information input by the visitor, and generating a corresponding verification code according to the room identification information;

Obtaining visitor identity information generated by the visitor according to the verification code;

And verifying the visitor identity information according to the identity verification information corresponding to the room identification information, and performing switch control on the access control according to the verification result.
The method according to claim 1, wherein the switching control of the access control according to the verification result comprises:

And sending an access control open command to the access control based on the verification result that the visitor identity information is verified according to the identity verification information corresponding to the room identification information;

Establishing a verification terminal of the homeowner and the verification channel of the access control based on the verification result that the verification of the visitor identity information fails and the verification of the visitor is required according to the identity verification information corresponding to the room identification information, so as to The homeowner verifies the visitor identity information through the verification channel;

The access control is switched on and off according to the result of the homeowner verifying the visitor identity information through the verification channel.
The method according to claim 2, after the verification of the visitor identity information is not passed according to the identity verification information corresponding to the room identification information, the method further includes:

Sends an alert message to the access control or guest terminal asking if the visitor continues to request verification.
The method according to claim 1, wherein the method further comprises: before receiving the room identification information input by the guest, and generating a corresponding verification code according to the room identification information, the method further comprising:

Receiving the allowed guest identity verification information sent by the homeowner through the verification terminal; the allowing the guest identity verification information to be valid within a preset time;

The verifying the visitor identity information according to the identity verification information corresponding to the room identification information, including:

Verifying the visitor identity information according to the allowed guest identity verification information;

The access control open command is sent to the access control based on the verification result passed by the verification.
The method according to claim 1, wherein the verification code comprises: a verification code of the verification terminal identification ID of the homeowner corresponding to the room identification information.
The method of claim 1, wherein the authentication information comprises one of the following directories: a directory, a preset list of allowed visitors, and a predetermined list of forbidden visitors.
A computer apparatus comprising a memory, a processor, and a computer program stored on the memory and operable on the processor, the processor performing the program to implement the following steps of a method of access control:

Receiving room identification information input by the visitor, and generating a corresponding verification code according to the room identification information;

Obtaining visitor identity information generated by the visitor according to the verification code;

And verifying the visitor identity information according to the identity verification information corresponding to the room identification information, and performing switch control on the access control according to the verification result.
The computer device according to claim 7, wherein the processor, when performing the switching control of the access control according to the verification result, comprises:

And sending an access control open command to the access control based on the verification result that the visitor identity information is verified according to the identity verification information corresponding to the room identification information;

Establishing a verification terminal of the homeowner and the verification channel of the access control based on the verification result that the verification of the visitor identity information fails and the verification of the visitor identity information is performed according to the identity verification information corresponding to the room identification information, so that the homeowner Verifying the visitor identity information through the verification channel;

The access control is switched on and off according to the result of the homeowner verifying the visitor identity information through the verification channel.
The computer device according to claim 7, wherein the processor performs the following steps before performing the receiving the room identification information input by the visitor and generating the corresponding verification code according to the room identification information:

Receiving the allowed guest identity verification information sent by the homeowner through the verification terminal; the allowing the guest identity verification information to be valid within a preset time;

The processor, when performing the receiving the room identification information input by the visitor, and generating the corresponding verification code according to the room identification information, includes:

Verifying the visitor identity information according to the allowed guest identity verification information;

The access control open command is sent to the access control based on the verification result passed by the verification.
A computer readable storage medium having stored thereon a computer program, the program being executed by a processor to implement a method of access control according to any one of claims 1 to 6.