WO2019204954A1

WO2019204954A1 - Smart lock system

Info

Publication number: WO2019204954A1
Application number: PCT/CN2018/084014
Authority: WO
Inventors: 裘炅; 裘晃
Original assignee: 杭州全视软件有限公司
Priority date: 2018-04-23
Filing date: 2018-04-23
Publication date: 2019-10-31

Abstract

A smart lock system, comprising a smart lock terminal and a terminal processing system. The terminal processing system comprises an input module, a terminal server, and a plurality of sub-servers, the terminal server being used for storing identity information of super users corresponding to each smart lock and managing the super users of all of the smart lock terminals. One sub-server corresponds to one smart terminal and is used for management of the information of the user of each smart lock terminal, unlocking verification, and recording unlocking events.

Description

Intelligent lock system

Technical field

The invention relates to a smart lock system.

Background technique

At present, the existing electronic code locks only use the generation of a password or a carrier (such as an electronic key such as an IC card). The electronic key can also use a dynamic password. With each use of the electronic key, the password in the non-volatile memory and the electronic key is dynamically updated by an algorithm or a random code during data exchange between the electronic key and the combination lock. It's not easy to copy or crack others. Through the development of encryption technology, it has been widely used in hotels, office buildings and homes. However, the following problems exist:

1. The strength of addition and decryption is not great: the electronic lock basically adopts a chip with weak computing power such as single-chip microcomputer, and it is difficult to implement it by asymmetric encryption.

2. The process information auditing ability is not strong: it is impossible to verify the information of the relevant personnel who unlocked, and it is more difficult to use it as sufficient evidence to audit the process information. In addition, each time the opening and closing time needs to be registered.

3. There must be a physical key: the physical key is basically required, and once the physical key is copied, it is difficult to ensure security.

4. Temporary authorization cannot be realized: it is difficult to achieve when multiple parties can work together to unlock.

Summary of the invention

It is an object of the present invention to provide a smart lock system in view of the deficiencies of the prior art.

The object of the present invention is achieved by the following technical solutions; a smart lock system, including a smart lock terminal and a terminal processing system;

The terminal processing system includes a first input module, a first login module, and a terminal server and a plurality of sub-servers, wherein the terminal server is configured to store identity information of a super user corresponding to each smart lock and super for all smart lock terminals. The user manages; a sub-server corresponds to a smart lock terminal, which is used for information management of the user of the smart lock terminal (superuser information and authorized user information and update of the smart lock), unlock verification, and recording of unlocking events. .

The smart lock terminal includes a second input module, a second login module, and a lock core control module;

The second input module is configured to input a change request to change the authorized user; the change request includes the identification information and the change instruction, where the change instruction is to add an authorized user, delete the authorized user; and the change request is logged into the sub-server by the second login module. The identification information is verified. If the verification condition is met, the verification is passed, and the authorized user is added or deleted according to the change instruction; and the child server generates a change log, including the time and the change request. The verification condition is: including identification information of one or more super users;

The second input module is further configured to input the unlocking verification information, and include the identification information; the unlocking verification information is verified by the second login module to log in to the sub-server for unlocking, and if the verification condition is met, the verification is passed, and the sub-server sends a control information to control The lock cylinder control module unlocks; at the same time, the sub-server generates an unlock log, including time and unlock verification information. The verification condition is: including identification information of one or more unlocked users, and the unlocked user is an authorized user or a super user.

The first input module is configured to input a change request of the super user, including the identification information, the change instruction, and the change object (using the id of the smart lock terminal as an input), and the change request is performed by the first login module to log in to the terminal server to perform the identification information. Verification, if the verification condition is met, the verification is passed, and the super user information in the private chain corresponding to the designated smart lock terminal is changed according to the change instruction; and the terminal server generates the change log, including the time and the change request. The verification condition is: including one or more identification information of the super user corresponding to the change object.

Further, the terminal server further stores the identity information of the administrator. When the super user changes, if the change request originates from the administrator, the verification is passed, and according to the change instruction, the designated smart lock terminal corresponds to the super in the private chain. User information is changed; the terminal server generates a change log, including time and change requests.

Further, the identification information is one or more of biometric information, an identity ID (eg, an ID number, etc.).

Further, the information input of the first input module and the second input module is implemented by remote input, and the remote input mode is specifically: generating the summary (plain text) by using the SHA256 method, and using the key for the summary information. Encrypting generates a digest signature, and sends the input information + abstract (plaintext) + digest signature + public key to the first input module or the second input module together; the first input module or the second input module decrypts the digest signature with the public key to obtain the original Summary, compared with the abstract (plain text), consistently upload the input information to the terminal server or sub-server through the login module.

Further, the terminal server and the plurality of sub-servers are located in a blockchain system, and the terminal server is located on a public chain of the blockchain system, and the sub-servers are respectively located on a private chain of the blockchain system. The public and private chains package the generated logs out of blocks.

Further, the change instruction of the change authorized user further includes a clock instruction, where the clock instruction corresponds to a valid time for the newly authorized user.

Further, the child server also stores a fund account of each authorized user, and the child server deducts the fee from the fund account according to the effective time of the user.

Further, before unlocking, the sub-server queries the fund account balance, and when the balance is greater than the threshold, the unlocking verification step is entered.

The invention has the beneficial effects that the invention can realize the secondary encryption management combined with the intelligent terminal, realizes the transparent security management mechanism, can ensure the security of the lock under the autonomous management, and can realize the convenience of the lock security management: support for the transfer authorization , temporary users, paying users, and multi-coordination mechanisms to achieve multiple business models.

DRAWINGS

1 is a schematic structural view of a smart lock system of the present invention.

detailed description

As shown in FIG. 1 , the present invention relates to a smart lock system including a smart lock terminal and a terminal processing system; the terminal processing system includes a first input module, a first login module, and a terminal server and a plurality of sub-servers, the terminal The server is configured to store the identity information of the super user corresponding to each smart lock and manage the super users of all the smart lock terminals; one sub server corresponds to one smart lock terminal, and is used for information management of the user of the smart lock terminal ( Records the superuser information and authorized user information and updates of the smart lock), unlock verification, and unlocking events. The smart lock terminal includes a second input module, a second login module, and a lock core control module.

Taking a smart lock according to the present invention as a residence of a family of three, a family of three males as super users has advanced authority, and the hostess and the child are authorized users; the identity information of the male owner is stored in the terminal server. A family of three identification information is stored in a sub-server; super users and authorized users are collectively referred to as legitimate users.

In addition, the manufacturer of the lock or the corresponding authority as an administrator, its associated identification information is also stored in the terminal service.

The management of the smart lock system of the present invention includes the following aspects;

1. Unlocking verification: a touch screen that can be set on the smart lock, or a face recognition device, a fingerprint recognition device, etc. (second input module) inputs the unlock verification information, including the identification information; the unlock verification information is passed through the second login module ( The wireless module built into the smart lock is used to log in to the sub-server for unlock verification. If the verification condition is met, the verification is passed, the sub-server sends a control message, and the lock core control module is controlled to unlock; and the sub-server generates an unlock log, including time and time. Unlock the verification information. The verification condition is that the input verification information includes legal identification information, that is, the unlocking can be implemented only when the legal identification information is input.

For a security-level location, multiple legitimate users need to be unlocked together. In this case, the authentication information needs to include the identification information of multiple legitimate users before the unlocking can be implemented.

The above-mentioned unlocking verification information can be input through a touch screen disposed on the smart lock, or through a mobile phone wirelessly connected to the built-in processor of the smart lock. This kind of remote input method can improve security by: inputting the information into the digest (clear text) by means of SHA256, and encrypting the digest information with the key to generate the digest signature, and input the information + abstract (clear text) + Abstract signature + public key is sent to the first input module or the second input module together; the first input module or the second input module decrypts the digest signature with the public key to obtain the original digest, compares with the abstract (plain text), and consistently logs in. The module uploads the entered information to a terminal server or subserver.

For the above unlock verification, the super user and the authorized user have the same permissions.

2. Authorized User Change: Same as above, the super user and the authorized user have the same authority on the change of the authorized user. The change method is as follows: the change request is input through the second input module, and the change request includes the identification information and the change instruction, where the change instruction is to add an authorized user, delete the authorized user; and the change request is submitted to the sub-server by the second login module to submit the change. The requested user performs verification. If the user submitting the change request is a legitimate user, if the verification condition is met, the verification is passed, and the authorized user is added or deleted according to the change instruction; and the child server generates a change log, including the time and the change request. Changes to legitimate users in the child server can be achieved through simple form processing, which is common knowledge in the art.

For temporary users, set a zero-time permission, that is, add a user with a time command through the change request. The user satisfies the legal user condition within a valid time frame and can be unlocked by entering an unlock request. Otherwise, it is an illegal user.

For a consumer bicycle, a capsule hotel, etc., the smart lock according to the present invention can also be used to implement security protection and automatic charging, specifically: storing the legal user's fund account in the child server, and the child server is based on the effective time of the user. , deduct the fee from the fund account. As is common knowledge in the art, the sub-server usually needs to query the fund account balance, and when the balance is greater than the threshold, the unlock verification step is entered. The input of information such as the fund account can be completed at the time of user registration.

3. Super user changes, super users as the main responsibility of smart locks, has an important position. Superuser changes can be changed from the application, or they can be changed by an administrator, such as the manufacturer of the lock or the appropriate authority. The change verification occurs on the terminal server, and the change request is input through the first input module, and the terminal server verifies the change request. If the verification condition is met, the verification is passed, and the designated smart lock terminal corresponds to the private chain according to the change instruction. The superuser information is changed; the terminal server generates a change log, including time and change requests. The verification condition is: including one or more identification information of the super user corresponding to the change object, or the verification information of the administrator, and the verification information of the administrator may be pre-stored in the terminal server.

With the second input module, the information input of the first input module can also be realized by remote input.

For the present invention, blockchain technology can be introduced to further improve security. The terminal server and the plurality of sub-servers are located in a blockchain system, and the terminal server is located on a public chain of the blockchain system, and the sub-servers are respectively located on a private chain of the blockchain system. The public and private chains package the generated logs out of blocks.

The identification information of the present invention is one or more of biometric information (such as fingerprint, facial features, retina, etc.), identity ID (eg, ID number, etc.).

Example:

A terminal (software) having identification of biological information such as fingerprints or face recognition, a lock having a wireless connection function, a lock, a microprocessor, a memory, a wireless connection unit, and an unlocking device.

The biometric identification information can be stored in the lock, registered at the time of initialization, or newly registered by the super user registered at the time of initialization.

The manufacturer of the lock or the corresponding authoritative department has a special blockchain that can register the superuser's authority. When purchasing, it registers multiple superusers, and registers the registration information, biometric information and public key in the blockchain. Register as a super user when locking the network (such as via a mobile phone).

The blockchain can be checked for example, such as the number of super users who are currently locked, and related registration information.

Once it needs to be added or deleted, it can be added or deleted after the blockchain management organization and the lock master (natural person, legal person) agree, and the lock is required to be connected to the network (can be connected via mobile phone).

1. Authorized person unlocks

The terminal will collect biometric information, generate a digest (plain text) by means of SHA256, etc., and encrypt the digest information with a key to generate a digest signature, and send the biometric information + abstract (plain text) + digest signature + public key to the lock, lock Upon receiving, the public key is used to decrypt the digest signature to obtain the original digest, which is consistent with the abstract (plain text), and then the biometric information is compared with the biometric information registered in the lock and unlocked, and the lock is unanimous. At the same time, the relevant unlock record is sent to the terminal.

2. Authorized person registration (management)

The super user can authorize the biometric identification of the relevant authority, collect the newly registered biometric information, and then generate the digest 1 (plain text) by means of SHA256 according to the unlocking method, and simultaneously encrypt the digest 1 with the key to generate the digest signature 1; At the same time, the biometric information is used again, and the digest 2 (plain text) is generated by the digest method such as SHA256, and the digest 2 is encrypted by the key to generate the digest signature 2. The two pieces of information are respectively sent to the lock, and after the lock is received and verified, the biometric identification information is confirmed to be an administrative user, and then the registration may be performed, otherwise the rejection may be made; when the transmission is set, the management user may be set, that is, the newly registered creature may be The identification information is marked as an administrative user.

New registration biometric information + summary 1 (plain text) + summary 1 signature

Self biometric information + summary 2 (plain text) + abstract 2 signature

At the same time, the registration information is sent to the terminal.

3, the person with authority to delete (management)

The registered personnel can be obtained remotely, and the deletion can be performed by the person who has verified the relevant authority, and the administrator is not allowed to delete.

The deletion operation process is also registered.

4, the key combination of biometric identification

The key with biometric identification such as fingerprint (with no chip inside), the relevant fingerprint information is sent to the lock after short-distance wireless method, the lock is received, and the comparison is made inside, and the registration can be started after confirming registration.

5. Secure remote authorization registration management

When remotely opening, the person who needs administrator rights can authorize to open, that is, the administrator + administrator agrees that the authorized person can open, and the authorized person can be allowed to register or not.

The authorized person opens the biometric information of the person, generates the digest 1 (plain text) by means of SHA256, etc., and encrypts the digest 1 with the key to generate the digest signature 1; at the same time, adds the biometric information of the authorizer, and summarizes with SHA256, etc. The mode generates summary 2 (plaintext), and the digest 2 is encrypted with a key to generate a digest signature 2. Send the above information to the lock separately:

Licensee Biometric Information + Abstract 1 (Clear Text) + Abstract 1 Signature + Authorizer Biometric Information + Abstract 2 (Clear Text) + Abstract 2 Signature

The lock verifies the biometric information of the authorized person, and if the verification passes, the lock is opened, and the biometric information of the authorized person and the authorized person is registered.

Also, when the lock is closed, registration is also required.

This ensures that the second lock (two people) can open the lock.

6, remote authorization registration management (temporary user management)

In order to avoid the above situation, there is a permanent letter (as long as the information is replayed), and only authorized for a period of time, you need to add time information, namely:

Authorized person biometric information + abstract 1 (plain text) + abstract 1 signature + author biometric information + authorization time range + abstract 2 (plain text) + abstract 2 signature

After the lock verifies the biometric information of the authorized person, it also needs to verify the current time. If the time is not within the allowable range, the prompt cannot be opened.

7. Blockchain management (public security and related verification)

Through the networking function of the lock, blockchain management of user registration, user deletion, user authorization, and lock switch status can be realized.

At the same time, the public security or manufacturer remote maintenance interface can also be set, and the trusted blockchain remote unlocking and remote maintenance can be realized through the interface.

Claims

A smart lock system, comprising: a smart lock terminal and a terminal processing system; the terminal processing system comprises a first input module, a first login module, and a terminal server and a plurality of sub-servers, wherein the terminal server is configured to store a corresponding The identity information of the super user of each smart lock and the super user of all the smart lock terminals are managed; one sub server corresponds to one smart lock terminal, and is used for information management of the user of the smart lock terminal (storing the smart lock Superuser information and authorized user information and updates), unlock verification, and recording of unlocking events;

The smart lock terminal includes a second input module, a second login module, and a lock core control module;

The second input module is configured to input a change request to change the authorized user; the change request includes the identification information and the change instruction, where the change instruction is to add an authorized user, delete the authorized user; and the change request is logged into the sub-server by the second login module. The identification information is verified. If the verification condition is met, the verification is passed, and the authorized user is added or deleted according to the change instruction; and the sub-server generates a change log, including the time and the change request; wherein the verification condition is: one or more super users are included Identification information;

The second input module is further configured to input the unlocking verification information, and include the identification information; the unlocking verification information is verified by the second login module to log in to the sub-server for unlocking, and if the verification condition is met, the verification is passed, and the sub-server sends a control information to control The lock core control module performs unlocking; at the same time, the sub-server generates an unlock log, including time and unlock verification information; wherein the verification condition is: including identification information of one or more unlocked users, and the unlocked user is an authorized user or a super user;

The first input module is configured to input a change request of the super user, including the identification information, the change instruction, and the change object (using the id of the smart lock terminal as an input), and the change request is performed by the first login module to log in to the terminal server to perform the identification information. Verification, if the verification condition is met, the verification is passed, and the superuser information in the private chain corresponding to the designated smart lock terminal is changed according to the change instruction; and the terminal server generates the change log, including the time and the change request; wherein the verification condition Is: Contains one or more identification information of the superuser corresponding to the change object.
The system according to claim 1, wherein the terminal server further stores the identification information of the administrator. When the super user changes, if the change request is from the administrator, the verification is passed, and the specified smart is determined according to the change instruction. The lock terminal corresponds to the change of the super user information in the private chain; at the same time, the terminal server generates a change log, including the time and the change request.
The system according to claim 1, wherein the identification information is one or more of biometric information, an identity ID; the biometric information includes but is not limited to a fingerprint, a facial feature, a retina; and the identity ID includes But not limited to the ID number.
The system according to claim 1, wherein the information input of the first input module and the second input module is implemented by remote input, and the remote input mode is specifically: generating the summary by using the input information, such as SHA256 ( Clearly), the summary information is encrypted by the key to generate a digest signature, and the input information + abstract (plain text) + digest signature + public key is sent to the first input module or the second input module together; the first input module or the second The input module decrypts the digest signature with the public key to obtain the original digest, compares it with the digest (plain text), and uploads the input information to the terminal server or subserver through the login module.
The system according to claim 1, wherein the terminal server and the plurality of sub-servers are located in a blockchain system, and the terminal server is located on a public chain of the blockchain system, the sub-servers being respectively located in the blockchain system On a private chain; the public and private chains package the generated logs.
The system of claim 1 further comprising a clock command in the change instruction of the change authorized user, the clock command corresponding to a valid time for the newly authorized user.
The system of claim 6 wherein the sub-server further maintains a funds account for each authorized user, and the sub-server deducts the fee from the funds account based on the effective time of the user.
The system according to claim 7, wherein the sub-server queries the fund account balance before unlocking, and when the balance is greater than the threshold, the unlocking verification step is entered.