WO2021114412A1 - 锁控系统模块间的动态加密解密方法、多重认证锁控系统、锁控方法及保险柜 - Google Patents

锁控系统模块间的动态加密解密方法、多重认证锁控系统、锁控方法及保险柜 Download PDF

Info

Publication number
WO2021114412A1
WO2021114412A1 PCT/CN2019/128961 CN2019128961W WO2021114412A1 WO 2021114412 A1 WO2021114412 A1 WO 2021114412A1 CN 2019128961 W CN2019128961 W CN 2019128961W WO 2021114412 A1 WO2021114412 A1 WO 2021114412A1
Authority
WO
WIPO (PCT)
Prior art keywords
module
biometric
unlocking
lock control
control system
Prior art date
Application number
PCT/CN2019/128961
Other languages
English (en)
French (fr)
Inventor
刘佳炎
陈文坤
王小锋
吕水根
Original Assignee
创斯达科技集团(中国)有限责任公司
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by 创斯达科技集团(中国)有限责任公司 filed Critical 创斯达科技集团(中国)有限责任公司
Priority to US17/781,620 priority Critical patent/US12063299B2/en
Publication of WO2021114412A1 publication Critical patent/WO2021114412A1/zh

Links

Images

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/08—Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords
    • H04L9/0861—Generation of secret information including derivation or calculation of cryptographic keys or passwords
    • H04L9/0866—Generation of secret information including derivation or calculation of cryptographic keys or passwords involving user or device identifiers, e.g. serial number, physical or biometrical information, DNA, hand-signature or measurable physical characteristics
    • G—PHYSICS
    • G07—CHECKING-DEVICES
    • G07C—TIME OR ATTENDANCE REGISTERS; REGISTERING OR INDICATING THE WORKING OF MACHINES; GENERATING RANDOM NUMBERS; VOTING OR LOTTERY APPARATUS; ARRANGEMENTS, SYSTEMS OR APPARATUS FOR CHECKING NOT PROVIDED FOR ELSEWHERE
    • G07C9/00—Individual registration on entry or exit
    • G07C9/00174—Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys
    • G—PHYSICS
    • G07—CHECKING-DEVICES
    • G07C—TIME OR ATTENDANCE REGISTERS; REGISTERING OR INDICATING THE WORKING OF MACHINES; GENERATING RANDOM NUMBERS; VOTING OR LOTTERY APPARATUS; ARRANGEMENTS, SYSTEMS OR APPARATUS FOR CHECKING NOT PROVIDED FOR ELSEWHERE
    • G07C9/00—Individual registration on entry or exit
    • G07C9/00174—Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys
    • G07C9/00563—Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys using personal physical data of the operator, e.g. finger prints, retinal images, voicepatterns
    • G—PHYSICS
    • G07—CHECKING-DEVICES
    • G07C—TIME OR ATTENDANCE REGISTERS; REGISTERING OR INDICATING THE WORKING OF MACHINES; GENERATING RANDOM NUMBERS; VOTING OR LOTTERY APPARATUS; ARRANGEMENTS, SYSTEMS OR APPARATUS FOR CHECKING NOT PROVIDED FOR ELSEWHERE
    • G07C9/00—Individual registration on entry or exit
    • G07C9/00174—Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys
    • G07C9/00896—Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys specially adapted for particular uses
    • G07C9/00912—Electronically operated locks; Circuits therefor; Nonmechanical keys therefor, e.g. passive or active electrical keys or other data carriers without mechanical keys specially adapted for particular uses for safes, strong-rooms, vaults or the like
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L69/00—Network arrangements, protocols or services independent of the application payload and not provided for in the other groups of this subclass
    • H04L69/26—Special purpose or proprietary protocols or architectures
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/06—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols the encryption apparatus using shift registers or memories for block-wise or stream coding, e.g. DES systems or RC4; Hash functions; Pseudorandom sequence generators
    • H04L9/065—Encryption by serially and continuously modifying data stream elements, e.g. stream cipher systems, RC4, SEAL or A5/3
    • H04L9/0656—Pseudorandom key sequence combined element-for-element with data sequence, e.g. one-time-pad [OTP] or Vernam's cipher
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/08—Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords
    • H04L9/0861—Generation of secret information including derivation or calculation of cryptographic keys or passwords
    • H04L9/0869—Generation of secret information including derivation or calculation of cryptographic keys or passwords involving random numbers or seeds
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/32—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
    • H04L9/3226—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials using a predetermined code, e.g. password, passphrase or PIN
    • H04L9/3231—Biological data, e.g. fingerprint, voice or retina

Definitions

  • the present invention belongs to the technical field of authentication and unlocking, and specifically relates to a dynamic encryption and decryption method between modules of a lock control system, a multiple authentication lock control system, a lock control method and a safe.
  • Existing products often use an optical fingerprint module and a monocular face recognition camera, and fingerprint recognition and face recognition use a single recognition mode to unlock the lock.
  • the existing product biometric module sends a relay signal to the executive control board, and the executive control board controls the rotation of the motor to open the door.
  • the data signal transmission between the biometric control panel and the executive control panel is not encrypted.
  • the fingerprint collection principle of the optical fingerprint module determines that fake silica gel fingerprints can easily simulate fingerprint lines.
  • the fingerprint image obtained during the fingerprint collection process of the optical fingerprint module is very similar to the real fingerprint image, which leads to the misreading of the optical fingerprint module algorithm as True fingerprints, so the use of only optical fingerprint modules has the problem of low security;
  • the principle of face recognition of the monocular face recognition camera is determined.
  • the monocular face recognition camera can only compare facial features without the function of biometric recognition, that is to say, color photos of people and silicone face masks. It is easy to break the algorithm of the monocular face recognition camera, so there is also the problem of low security;
  • fingerprint recognition and face recognition can be used to open the door through individual recognition, and the security of single recognition authentication is relatively poor, and it is easy to be broken by people and open the cabinet door;
  • the biometric module sends a relay signal to the executive control board. If someone punches a hole from the outside of the cabinet and finds the wire between the biometric module and the executive control board, connect this wire and supply power, then the executive control board It will also be connected, and control the motor to open the door, which is easy to be destroyed and opened
  • the communication signal between the biometric control panel and the executive control panel is fixed. If someone prys the biometric control panel and steals the fixed communication signal between the biometric control panel and the executive control panel, then You can pass the analog fixed communication signal to the executive control board, and the executive control board will control the motor to open the door.
  • the present invention discloses a dynamic encryption and decryption method between modules of a lock control system, a multiple authentication lock control system, a lock control method and a safe.
  • the technical scheme adopted by the present invention is: a dynamic encryption and decryption method between the lock control system modules, which includes the following steps:
  • Step 1 Fill in the hardware ID data, unlocking communication protocol and mask variable to form an array according to the previously defined variable space, encrypt the array based on the mask variable to obtain an encrypted array;
  • Step 2 Decrypt the encrypted array based on the mask variable to obtain the decrypted array, divide the decrypted array according to the pre-defined variable space, and match the divided data with the previously recorded data one by one. If the match is consistent, the relevant operation will be performed according to the decrypted unlocking communication protocol content; otherwise, no operation will be performed.
  • the lock control system module includes a biometric identification module and an execution control board; the hardware ID data includes biometric identification module ID data.
  • the method further includes:
  • variable space 1 according to the length of the ID data of the biometric module, define variable space 2 according to the length of the mask variable, and define variable space 3 according to the length of the unlocking communication protocol;
  • the step 1 specifically includes:
  • S11 Fill in the ID data of the biometric module in the variable space 1, fill in the random number seed in the variable space 2, and fill in the unlocking communication protocol in the variable space 3 to form an array;
  • S12 Encrypt the array based on the random number seed to obtain an encrypted array.
  • the method further includes:
  • variable space 1 Define variable space 1 according to the length of the ID data of the biometric module and the length of the communication session number, define variable space 2 according to the length of the mask variable, and define variable space 3 according to the length of the unlocking communication protocol;
  • the step 1 specifically includes:
  • S10 Obtain the ID data of the biometric module, the communication session number, and the unlocking communication protocol, and the random number generator randomly generates a random number seed information as a mask variable;
  • S11 Fill in the ID data of the biometric module and the communication session number in the variable space 1, fill in the random number seed in the variable space 2, and fill the unlocking communication protocol in the variable space 3 to form an array;
  • S12 Encrypt the array based on the random number seed to obtain an encrypted array.
  • step 2 specifically includes:
  • S20 Decrypt the encrypted array obtained in S12 based on the random number seed to obtain the decrypted array
  • S21 Perform variable space division on the decrypted array according to the variable space defined in S00 to obtain data corresponding to variable space 1, variable space 2 and variable space 3;
  • S22 Match the data in each variable space obtained in S21 with the previously recorded data one by one. If the match is consistent, perform related operations according to the decrypted unlocking communication protocol content; otherwise, do nothing.
  • the invention also discloses a multi-authentication lock and control system, which includes a biometric identification module, an execution control board that binds a physical address with the biometric identification module, and an unlocking mechanical assembly;
  • the biometric identification module includes a plurality of identification modules, a signal generation module, and an encryption module that perform identity identification in sequence;
  • the identification module is used to perform user identity authentication
  • the signal generating module is configured to generate a fixed communication signal according to the successful recognition signal sent by the recognition module, the fixed communication signal including the ID data of the biometric panel, the unlocking communication protocol and the mask variable;
  • the encryption module has a built-in dynamic encryption and decryption method between the lock control system modules to encrypt the fixed communication signal generated by the signal generation module to obtain the dynamic communication signal;
  • the execution control board includes a decryption module, a judgment module, and a drive module that drives an unlocking mechanical component to complete an unlocking action;
  • the decryption module has a built-in dynamic encryption and decryption method between the lock control system modules, which is used to decrypt the dynamic communication signal from the biometric panel to obtain the decrypted communication signal, and record the decrypted communication signal with itself To compare the information, and send relevant commands according to the comparison results;
  • the driving module is used for receiving and sending corresponding electrical signals to the unlocking mechanical component to drive the unlocking mechanical component to complete the unlocking action according to the command from the decryption module.
  • the recognition module includes two or more of a fingerprint recognition module, a face recognition module, and a touch code pad;
  • the fingerprint recognition module includes a capacitive fingerprint collector and a recognition module with a built-in fingerprint recognition algorithm;
  • the face recognition module includes a binocular face recognition camera and a recognition module with a built-in face recognition algorithm.
  • the binocular face recognition camera is an infrared camera.
  • the unlocking mechanical assembly includes an electric push rod that is controlled by the electric signal output by the execution control board to move forward and backward, a first micro switch for controlling the door closing position, and a second micro switch for controlling the door opening position;
  • the driving end of the electric push rod is fixedly connected to the door bolt connecting plate, and the first micro switch is arranged above the electric push rod.
  • the door bolt connecting plate advances to the maximum distance, the door bolt connecting plate passes through a connecting rod. Touch the first micro switch; the second micro switch is arranged under the electric push rod and at the maximum retracted distance of the door bolt fixing plate, and the door bolt connecting plate is fixed on the door bolt fixing plate.
  • the present invention also discloses a lock control method, which is used in an intelligent lock control system.
  • the intelligent lock control system includes a biometric identification module, an execution control board, and an unlocking mechanical assembly;
  • the biometric identification module includes a fingerprint identification module, Two or more of the face recognition module and the touch code dial;
  • S2 The biometric panel performs identity authentication for the current user. If the identity authentication is successful, execute S3, otherwise the biometric panel prompts an identification error;
  • S3 Generate a fixed communication signal, and use a dynamic encryption and decryption method between lock control system modules to encrypt the fixed communication signal, generate a dynamic communication signal, and send the dynamic communication signal to the executive control board;
  • the fixed communication signal Including biometric panel ID data, unlocking communication protocol and mask variables;
  • the execution control board uses a dynamic encryption and decryption method between the lock control system modules to decrypt and match the received dynamic communication signal. If it matches, perform related operations according to the decrypted unlocking communication protocol content; otherwise, it does not Do any operation.
  • the S2 specifically includes the following sub-steps:
  • the touch code pad When the number of fingerprint recognition or face recognition failures exceeds the set value, the touch code pad is activated, and the identity authentication is performed by entering the password. If the authentication is successful, S3 is executed, otherwise the biometric module prompts that the identity authentication has failed.
  • the invention also discloses a safe, including a cabinet body and a safe door adopting a multiple authentication lock control system.
  • the biometric identification module is arranged on the safe door
  • the execution control board is arranged on the safe door.
  • the unlocking mechanical assembly is linked with the door bolt connecting plate and the door bolt fixing plate of the safe door.
  • the present invention has the following advantages:
  • the system of the present invention adopts a capacitive fingerprint collector and its fingerprint recognition algorithm.
  • the capacitive fingerprint collector can effectively distinguish non-human real fingerprints such as silicone fingerprint molds, thereby improving the security of fingerprint recognition.
  • the fingerprint recognition algorithm currently used has a false recognition rate of one in a million, and the system of the present invention uses a binocular face recognition camera and its face recognition algorithm.
  • the binocular face recognition module has infrared functions and can be used in bright light. And used in dark conditions, the face recognition algorithm used in the present invention can prevent black and white face pictures, color face pictures, liquid crystal display face pictures, and 3D silicone face mask attacks. At the same time, the face recognition algorithm used is wrong.
  • the recognition rate has reached one in a million;
  • the system of the present invention sets the mode that the fingerprint recognition and face recognition dual authentication of the same user can unlock the lock, that is, the same person must pass the fingerprint recognition first, and then the face recognition can unlock the lock.
  • This dual authentication setting improves The safety level of the product
  • the system of the present invention will register and bind the biometric module and the execution control board. After registration and binding, the execution control board will recognize the ID number of the biometric module. If the ID number is incorrect, the execution control board will not unlock , Which can prevent the biometric module from being forcibly replaced to unlock the safe or simply open the safe with a switch signal, which improves the security level of the product;
  • the communication protocol sent by the biometric identification module of the present invention to the execution control board will be encrypted by a confidential algorithm, and the encrypted communication protocol will change every time, and then the execution control board will decrypt the encrypted communication protocol and judge After the ID number of the biometric module, unlock again.
  • this way of unlocking through the communication protocol prevents someone from directly controlling the electric push rod to unlock by powering on.
  • it prevents someone from stealing the communication protocol and sending it to the executive control board through a fixed communication protocol to unlock.
  • the setting improves the safety level of the product.
  • Figure 1 is a schematic diagram of the position of the biometric panel of the present invention
  • FIG. 2 is a schematic diagram of the structure of the execution control board of the present invention.
  • Figure 3 is a schematic diagram of the mechanical part of the safe of the present invention.
  • Figure 4 is an exploded schematic diagram of Figure 3;
  • FIG. 5 is a schematic flow diagram of the encryption algorithm of the present invention.
  • Figure 6 is a schematic diagram of the decryption process of the present invention.
  • this embodiment is a method for dynamic encryption and decryption between lock control system modules.
  • the lock control system module includes a biometric identification module and an execution control board; specifically, it includes the following steps:
  • variable space 1 according to the length of the ID data of the biometric module, define variable space 2 according to the length of the mask variable, and define variable space 3 according to the length of the unlocking communication protocol;
  • the random number generator randomly generates a random number seed information as the mask variable
  • the execution control board decrypts the obtained encrypted array based on the random number seed to obtain the decrypted array
  • variable space the decrypted array is divided into variable space, and the data corresponding to variable space 1, variable space 2 and variable space 3 are obtained;
  • the order of the variable space can be specified in advance.
  • the order of the variable space is specified as: variable space 1, variable space 2 and variable space 3; after decryption, the data corresponding to each variable space is obtained, such as:
  • the data in variable space 1 is XXXX
  • the data in variable space 2 is XXXXX
  • the data in variable space 3 is XXX; then when matching one by one, match in order, first match the data in variable space 1, if it matches If they are consistent, the data in variable space 2 will be matched. If they are not matched, they will not be turned on, and so on.
  • the mask variable moves 1 bit to the right
  • variable c is shifted 1 bit to the left
  • variable c is shifted 1 bit to the left
  • the unlocking communication protocol of this embodiment requires the biometric module and the execution control board to reach an agreement in advance.
  • the content of the communication protocol is 001, which represents unlocking
  • the content 002 represents turning on other devices such as lights, and the content of the protocol is set in advance.
  • this embodiment also introduces a communication session number; specifically, it includes the following steps:
  • variable space 1 according to the length of the ID data of the biometric module and the length of the communication session number, define variable space 2 according to the length of the mask variable, and define variable space 3 according to the length of the unlocking communication protocol;
  • variable space the decrypted array is divided into variable space, and the data corresponding to variable space 1, variable space 2 and variable space 3 are obtained;
  • the obtained data in each variable space is matched with the previously recorded data one by one. If the match is consistent, the relevant operation will be performed according to the decrypted unlocking communication protocol content; otherwise, no operation will be performed.
  • this embodiment proposes a multi-authentication lock control system, which can be applied to a safe, specifically including a biometric panel 1, and a biometric module to perform physical address binding execution
  • the control board 2 and the unlocking mechanical components that control the opening or closing of the safe door are set on the safe door for fingerprint recognition and face recognition
  • the executive control board 2 is set on the safe door Inside, it is electrically connected to the biometric panel 1 through a TTL interface, and is used to decrypt the communication signal sent by the biometric panel 1, and determine whether to open the cabinet door according to the signal obtained by decryption.
  • the biometric identification module of this embodiment complies with the RS232 communication protocol and includes multiple identification modules, signal generation modules, and encryption modules that perform identity recognition in sequence; the identification module is used for user identity authentication; the signal generation module is used for The successful identification signal sent by the identification module generates a fixed communication signal; the encryption module has a built-in dynamic encryption and decryption method between the lock control system modules disclosed in Embodiment 1 or Embodiment 2, and the fixed communication signal generated by the signal generation module is encrypted to obtain the dynamic Communication signal; both the fixed communication signal and the dynamic communication signal include the ID data of the biometric panel.
  • the recognition module of this embodiment includes two or more of a fingerprint recognition module, a face recognition module, and a touch code pad; the fingerprint recognition module includes a capacitive fingerprint collector and a recognition module with a built-in fingerprint recognition algorithm; the face recognition module includes A binocular face recognition camera and a recognition module with a built-in face recognition algorithm.
  • the binocular face recognition camera is an infrared camera.
  • a fingerprint recognition module is used to realize user fingerprint scan recognition. When the fingerprint recognition module is successfully recognized, the face recognition module can complete the user’s face scan recognition through the camera, and the signal generation module is used as a face. After the identification module is successfully identified, it generates a fixed communication signal including the ID number of the biometric panel.
  • the encryption module converts the fixed communication signal into a dynamic communication signal. Because it is encrypted based on random numbers, the dynamic communication signal is not repeated every time. When the number of failures of fingerprint recognition or face recognition of the same user exceeds the set value, the touch code pad is activated, and the user can enter the password to complete the recognition. After the password is successfully recognized, the signal generation module will also generate one The fixed communication signal including the ID data of the biometric panel. Specifically, the fixed communication signal includes the ID data of the biometric panel, the unlocking communication protocol and the mask variable;
  • the fingerprint recognition module of this embodiment adopts a capacitive fingerprint collector and its fingerprint recognition algorithm to realize fingerprint recognition.
  • the capacitive fingerprint collector can effectively distinguish non-human real fingerprints such as silicone fingerprint molds, and the face recognition module of this embodiment adopts dual
  • the binocular face recognition camera and its face recognition algorithm realize binocular face recognition, and the binocular face recognition camera has an infrared function.
  • the execution control board of this embodiment includes a decryption module, a judgment module, and a drive module that drives the unlocking mechanical component to complete the unlocking action.
  • the decryption module has a built-in dynamic encryption between the lock control system modules disclosed in Embodiment 1 or Embodiment 2.
  • the decryption method is used to decrypt the dynamic communication signal from the biometric panel to obtain the decrypted communication signal, compare the decrypted communication signal with the information recorded by itself, and send relevant commands according to the comparison result; this
  • the driving module is used for receiving and sending corresponding electrical signals to the unlocking mechanical component to drive the unlocking mechanical component to complete the unlocking action according to the command from the decryption module.
  • the unlocking mechanical assembly of this embodiment includes an electric push rod 3 that is controlled by the electrical signal output by the execution control board to move forward and backward, and a first micro switch 4 for controlling the door to close in place. And a second micro switch 5 for controlling the door opening in place; the electric push rod 3, the first micro switch 4 and the second micro switch 5 are all arranged inside the safe door, and the driving end of the electric push rod 3 It is fixedly connected with the door bolt connecting plate 6.
  • the electric push rod 3 is controlled by the electric signal output by the execution control board 2 to move forward and backward, thereby driving the door bolt connecting plate 6 to move forward and backward.
  • the first micro switch 4 is arranged on the electric push rod Above 3, when the bolt connecting plate 6 advances to the maximum distance, the bolt connecting plate 6 touches the first micro switch 4 through a connecting rod 61, the first micro switch 4 is closed, and the current of the electric push rod 3 is cut off , The electric push rod 3 stops moving forward, and the safe door is locked; the second micro switch 5 is set under the electric push rod 3 and is located at the maximum retracted distance of the door bolt fixing plate 7.
  • the correct Fixed signal the electric push rod 3 is controlled to drive the bolt fixing plate 7 to retract.
  • the bolt fixing plate 7 touches the second micro switch 5, and the second micro switch 5 is turned off to cut off the electric
  • the electric current of the push rod 3 stops the retracting movement of the electric push rod 3, the safe door is opened, and the door bolt connecting plate 6 is fixed on the door bolt fixing plate 7.
  • the intelligent lock control system includes a biometric identification module, an execution control board, and an unlocking mechanical component;
  • the biometric identification module includes a fingerprint identification module and a face Two or more of the identification module and the touch code pad; including the following steps:
  • S2 The biometric panel authenticates the current user. If the identity authentication is successful, execute S3, otherwise the biometric panel prompts an identification error; specifically, it includes the following sub-steps:
  • the fingerprint recognition module perform fingerprint collection and recognition of the current user through the fingerprint collection module.
  • the face recognition module is activated to recognize the current user's face.
  • the face recognition execute S3; otherwise, the biometric panel prompts recognition error;
  • the touch code pad When the number of identification failures of fingerprint recognition or face recognition exceeds the set value, the touch code pad is activated, and the identity authentication is performed by entering the password. If the authentication is successful, execute S3, otherwise the biometric module prompts that the identity authentication failed;
  • S3 Generate a fixed communication signal including the ID number of the biometric panel, and use the dynamic encryption and decryption method between the lock control system modules disclosed in Embodiment 1 or Embodiment 2 to encrypt the fixed communication signal to generate dynamic communication Signal, and send the dynamic communication signal to the executive control board through the TTL interface;
  • the execution control board uses the dynamic encryption and decryption method between the lock control system modules disclosed in Embodiment 1 or Embodiment 2 to decrypt and match the received dynamic communication signal. If it matches, it will be turned on, otherwise it will not be turned on.
  • a lock control method of this embodiment is used in an intelligent lock control system.
  • the intelligent lock control system includes a biometric identification module, an execution control board, and an unlocking mechanical component;
  • the biometric identification module includes a fingerprint identification module and a face recognition module.
  • Module and touch password disk including the following steps:
  • Step 1 The physical address binding (MAC ID binding) between the biometric module and the execution control board can ensure that even if the biometric module is replaced, it cannot be unlocked;
  • Step 2 The biometric panel recognizes the fingerprint information of the current user and compares it with the registered fingerprint information in the fingerprint database. If the comparison is successful, perform step 3 for face recognition, otherwise, determine whether the number of recognition failures exceeds 3 Second, if it exceeds, the touch code pad will be activated for the user to identify the password. If the password is successfully identified, the biometric panel will generate a fixed communication signal including the ID number of the biometric panel, and the encryption algorithm will be used to perform the fixed communication signal.
  • Encryption generate an encrypted communication signal that changes every time, send the encrypted communication signal to the execution control board through the TTL interface, and go to step 4; if the password recognition fails, the biometric panel displays the recognition failure; if the number of recognition failures does not exceed 3 times, then continue to perform fingerprint recognition until the number of recognition exceeds 3 times, or the fingerprint recognition succeeds in step 3;
  • Step 3 The biometric panel recognizes the face information of the current user and compares it with the registered facial information in the face database. If the comparison is successful, the biometric panel generates a fixed line including the ID number of the biometric panel The communication signal uses an encryption algorithm to encrypt the fixed communication signal to generate an encrypted communication signal that changes every time. The encrypted communication signal is sent to the execution control board through the TTL interface. Otherwise, it is judged whether the number of identification failures exceeds 3 times. If it exceeds, Then activate the touch code pad for the user to identify the password.
  • the biometric panel will generate a fixed communication signal including the ID number of the biometric panel, and use an encryption algorithm to encrypt the fixed communication signal to generate one
  • the biometric panel displays the recognition failure; if the number of recognition failures does not exceed 3, continue Perform face recognition until the number of recognition exceeds 3 times, or the face recognition succeeds in step 4;
  • Step 4 The execution control board decrypts the received encrypted communication signal and obtains a communication signal. According to the communication signal, compare the data recorded by the execution control board itself. If they match, the execution control board controls the motor to open the cabinet door. Otherwise, the execution control panel will not open the cabinet door.
  • This embodiment discloses a safe, including a cabinet body and a safe door adopting the multi-authentication lock control system described in Embodiment 3.
  • the biometric identification module is arranged on the safe door, and the control panel is set up.
  • the unlocking mechanical assembly is linked with the bolt connecting plate of the safe door.

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Signal Processing (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Physics & Mathematics (AREA)
  • General Physics & Mathematics (AREA)
  • General Health & Medical Sciences (AREA)
  • Biomedical Technology (AREA)
  • Biodiversity & Conservation Biology (AREA)
  • Life Sciences & Earth Sciences (AREA)
  • Health & Medical Sciences (AREA)
  • Computing Systems (AREA)
  • Lock And Its Accessories (AREA)

Abstract

本发明公开了一种锁控系统模块间的动态加密解密方法、多重认证锁控系统、锁控方法及保险柜，包括以下步骤：步骤1：根据事先定义的变量空间，将硬件ID数据、开锁通讯协议和遮罩变量填入形成数组，基于遮罩变量对该数组进行加密，得到加密数组；步骤2：基于遮罩变量对加密数组进行解密，得到解密后的数组，对解密后的数组按照事先定义的变量空间进行数据划分，并对划分后的数据与事先记录的数据进行逐一匹配，若匹配一致，则根据解密得到的开锁通讯协议内容，执行相关操作；否则不做任何操作。

Description

锁控系统模块间的动态加密解密方法、多重认证锁控系统、锁控方法及保险柜 技术领域
本发明属于认证与解锁技术领域，具体地涉及一种锁控系统模块间的动态加密解密方法、多重认证锁控系统、锁控方法及保险柜。
背景技术
现有产品往往采用了光学指纹模块和单目人脸识别摄像头，且指纹识别和人脸识别采用单个识别通过就可以开锁的模式。同时，现有产品生物识别模块通过发送继电器信号给执行控制板，执行控制板控制电机转动来开门。生物识别控制面板和执行控制板之间数据信号传递没有经过加密处理。
目前的现有技术存在的不足及原因分析如下：
1、光学指纹模块的指纹采集原理决定了，硅胶假指纹很容易模仿真指纹纹路，在光学指纹模块的指纹采集过程中获得的指纹图像和真指纹图像极为相近，导致光学指纹模块算法误读为真指纹，因此采用仅光学指纹模块存在安全性不高的问题；
2、单目人脸识别摄像头的人脸识别原理决定了，单目人脸识别摄像头只能对人脸特征进行比对，没有生物识别的功能，也就说人的彩色照片及硅胶人脸面具就很容易攻破单目人脸识别摄像头的算法，故也存在安全性不高的问题；
3、现有技术中采用指纹识别和人脸识别单独识别通过就可以开门，单个识别认证安全性比较差，容易被人攻破，打开柜门；
4、现有技术中生物识别模块通过发送继电器信号给执行控制板，如果有人从柜体外打洞，并且找到生物识别模块和执行控制板的导线，搭接这根导线并供电后，执行控制板也会被接通，并且控制电机进行开门操作，容易被人破坏开门；
5、现有技术中生物识别控制面板和执行控制板之间的通讯信号是固定的，如果有人撬开生物识别控制面板，窃取了生物识别控制面板和执行控制板之间固定的通讯信号，就可以通过把模拟固定的通讯信号传递给执行控制板，执行控制板就会控制电机进行开门操作了。
发明内容
发明目的：为解决现有技术中存在的问题，本发明公开了一种锁控系统模块间的动态加密解密方法、多重认证锁控系统、锁控方法及保险柜。
本发明所采用的技术方案是：一种锁控系统模块间的动态加密解密方法，包括以下步骤：
步骤1：根据事先定义的变量空间，将硬件ID数据、开锁通讯协议和遮罩变量填 入形成数组，基于遮罩变量对该数组进行加密，得到加密数组；
步骤2：基于遮罩变量对加密数组进行解密，得到解密后的数组，对解密后的数组按照事先定义的变量空间进行数据划分，并对划分后的数据与事先记录的数据进行逐一匹配，若匹配一致，则根据解密得到的开锁通讯协议内容，执行相关操作；否则不做任何操作。
进一步的，锁控系统模块包括生物识别模组和执行控制板；所述硬件ID数据包括生物识别模组ID数据。
进一步的，在执行所述步骤1之前还包括：
将生物识别模组与执行控制板进行生物识别模组ID数据绑定；
根据生物识别模组ID数据的长度，定义变量空间1，根据遮罩变量的长度，定义变量空间2，根据开锁通讯协议的长度，定义变量空间3；
所述步骤1具体包括：
S10：获取生物识别模组ID数据和开锁通讯协议，并由随机数生成器随机生成一随机数种子信息作为遮罩变量；
S11：在变量空间1内填入生物识别模组ID数据，在变量空间2内填入随机数种子，在变量空间3内填入开锁通讯协议，形成数组；
S12：基于随机数种子对数组进行加密，得到加密数组。
进一步的，在执行所述步骤1之前还包括：
S00：根据生物识别模组ID数据的长度和通信session号的长度，定义变量空间1，根据遮罩变量的长度，定义变量空间2，根据开锁通讯协议的长度，定义变量空间3；
所述步骤1具体包括：
S10：获取生物识别模组ID数据、通信session号和开锁通讯协议，并由随机数生成器随机生成一随机数种子信息作为遮罩变量；
S11：在变量空间1内填入生物识别模组ID数据和通信session号，在变量空间2内填入随机数种子，在变量空间3内填入开锁通讯协议，形成数组；
S12：基于随机数种子对数组进行加密，得到加密数组。
进一步的，所述步骤2具体包括：
S20：基于随机数种子对S12得到的加密数组进行解密，得到解密后的数组；
S21：根据S00中定义的变量空间对解密后的数组进行变量空间划分，得到变量空间1、变量空间2和变量空间3对应的数据；
S22：将S21得到的各变量空间内的数据与事先记录的数据进行逐一匹配，若匹配一致，则根据解密得到的开锁通讯协议内容，执行相关操作；否则不做任何操作。
本发明还公开了一种多重认证锁控系统，包括生物识别模组、与所述生物识别模组进行物理地址绑定的执行控制板和解锁机械组件；
所述生物识别模组包括多个依次进行身份识别的识别模块、信号生成模块和加密模块；
所述识别模块，用于进行用户身份认证；
所述信号生成模块，用于根据识别模块发送的成功识别信号，生成固定通讯信号，所述固定通讯信号包括生物识别面板ID数据、开锁通讯协议和遮罩变量；
所述加密模块内置一种锁控系统模块间的动态加密解密方法，对信号生成模块生成的固定通讯信号进行加密，得到动态通讯信号；
所述执行控制板包括解密模组、判断模组和驱动解锁机械组件完成解锁动作的驱动模组；
所述解密模组内置一种锁控系统模块间的动态加密解密方法，用于对来自生物识别面板的动态通讯信号进行解密，得到解密后的通讯信号，并将解密后的通讯信号与自身记录的信息进行比对，根据比对结果，发送相关命令；
所述驱动模组用于接收并根据来自解密模块的命令，向解锁机械组件发送对应的电信号驱动解锁机械组件完成解锁动作。
进一步的，所述识别模块包括指纹识别模块、人脸识别模块和触控密码盘中的两种或者多种；所述指纹识别模块包括电容指纹采集器和内置指纹识别算法的识别模块；所述人脸识别模块包括双目人脸识别摄像头和内置人脸识别算法的识别模块，所述双目人脸识别摄像头为红外摄像头。
进一步的，所述解锁机械组件包括受执行控制板输出的电信号控制进行前后运动的电动推杆、用于控制关门到位的第一微动开关和用于控制开门到位的第二微动开关；所述电动推杆的驱动端与门栓连接板固连，所述第一微动开关设置在电动推杆上方，当门栓连接板前进到最大距离时，该门栓连接板通过一连杆触碰第一微动开关；所述第二微动开关设置在电动推杆下方，并位于门栓固定板回缩的最大距离处，所述门栓连接板固定在门栓固定板上。
本发明还公开了一种锁控方法，用于智能锁控系统上，所述智能锁控系统包括生物识别模组、执行控制板和解锁机械组件；所述生物识别模组包括指纹识别模块、人脸识别模块和触控密码盘中的两种或者多种；
包括以下步骤：
S1：将生物识别模组与执行控制板进行生物识别模组ID数据绑定，生物识别模组与执行控制板达成开锁通讯协议；
S2：生物识别面板对当前用户进行身份认证，若身份认证成功，则执行S3，否则生物识别面板提示识别错误；
S3：生成一条固定通讯信号，并采用一种锁控系统模块间的动态加密解密方法对该固定通讯信号进行加密，生成动态通讯信号，并向执行控制板发送该动态通讯信号；该固定通讯信号包括生物识别面板ID数据、开锁通讯协议和遮罩变量；
S4：执行控制板采用一种锁控系统模块间的动态加密解密方法对接收到的动态通讯信号进行解密和匹配判断，若匹配，则根据解密得到的开锁通讯协议内容，执行相关操作；否则不做任何操作。
进一步的，所述S2具体包括以下子步骤：
通过指纹采集模块对当前用户进行指纹采集识别，当指纹识别模块识别成功后，激活人脸识别模块对当前用户进行人脸识别，当人脸识别成功后，执行S3；
当指纹识别或人脸识别的识别失败次数超过设定值时，激活触控密码盘，通过输入密码进行身份认证，若认证成功，则执行S3，否则生物识别模组提示身份认证失败。
本发明还公开了一种保险柜，包括柜体和采用一种多重认证锁控系统的保险柜柜门，所述生物识别模组设置在保险柜柜门上，所述执行控制板设置在保险柜柜门内，所述解锁机械组件与保险柜柜门的门栓连接板和门栓固定板联动。
有益效果：本发明具有以下优点：
1、本发明系统采用电容指纹采集器及其指纹识别算法，电容指纹采集器能够有效判别硅胶指纹模等非人体真指纹，提高了指纹识别安全性。目前使用的指纹识别算法的误识率达到了百万分之一，且本发明系统采用双目人脸识别摄像头及其人脸识别算法，该双目人脸识别模块具备红外功能，可以在亮光及暗光条件下使用，本发明使用的人脸识别算法，可以防止黑白人脸图片、彩色人脸图片、液晶显示人脸图片，3D硅胶人脸面具的攻击，同时使用的人脸识别算法误识率达到了百万分之一；
2、本发明系统设定了同一用户的指纹识别、人脸识别双认证才可以开锁的模式，也就是必须是同一个人先通过指纹识别，再通过人脸识别才能开锁，这样的双认证设置提高了产品的安全等级；
3、本发明系统通过将生物识别模块和执行控制板会进行注册绑定，注册绑定后，执行控制板会识别生物识别模块的ID号，如果ID号不正确，执行控制板不会进行开锁，可避免生物识别模组被强行更换后解锁保险柜或者简单的开关信号开启保险柜，提高产品的安全等级；
4、本发明的生物识别模块发给执行控制板的通讯协议会经过机密算法来加密，且加密后的通讯协议每次都是变化的，然后执行控制板对加密的通讯协议进行解密，并判 断生物识别模块ID号后，再进行开锁。首先这样通过通讯协议开锁的方式，避免了有人直接通过通电来控制电动推杆进行开锁，其次这样就避免了有人窃取通讯协议后，通过固定的通讯协议发送给执行控制板来进行开锁，这样的设置提高了产品的安全等级。
附图说明：
图1为本发明的生物识别面板位置示意图；
图2为本发明的执行控制板结构示意图；
图3为本发明的保险柜机械部分示意图；
图4为图3的爆炸示意图；
图5为本发明的加密算法流程示意图；
图6为本发明的解密流程示意图。
具体实施方式
为使本发明的目的、技术方案和优点更加清楚，下面结合具体实施方式，进一步阐明本发明。
实施例1：
如图5和图6所示，本实施例为一种锁控系统模块间的动态加密解密方法，具体的，该锁控系统模块包括生物识别模组和执行控制板；具体包括以下步骤：
根据生物识别模组ID数据的长度，定义变量空间1，根据遮罩变量的长度，定义变量空间2，根据开锁通讯协议的长度，定义变量空间3；
获取生物识别模组ID数据和开锁通讯协议，并由随机数生成器随机生成一随机数种子信息作为遮罩变量；
在变量空间1内填入生物识别模组ID数据，在变量空间2内填入随机数种子，在变量空间3内填入开锁通讯协议，形成数组；
基于随机数种子对数组进行加密，得到加密数组；
执行控制板基于随机数种子对得到的加密数组进行解密，得到解密后的数组；
根据事先定义的变量空间对解密后的数组进行变量空间划分，并得到变量空间1、变量空间2和变量空间3对应的数据；
将各变量空间内的数据与事先记录的数据进行逐一匹配，若匹配一致，则根据解密得到的开锁通讯协议内容，执行相关操作；否则不做任何操作。
在本实施例中，变量空间的顺序可事先进行规定，例如：规定变量空间顺序依次为：变量空间1、变量空间2和变量空间3；在解密后，得到各个变量空间对应的数据，如：变量空间1中数据为XXXX，变量空间2中的数据为XXXXX，变量空间3中的数据为XXX；那么进行逐一匹配时，按照顺序进行匹配，先对变量空间1中的数据进行匹配， 若匹配一致，则对变量空间2中的数据进行匹配，若不匹配，则不开启，以此类推。
为方便理解，现提供本实施例的方法的伪代码说明：
加密函数：
定义变量空间1
定义变量空间2
定义变量空间3
令遮罩变量＝80h
循环8次，进行处理
如果开锁通讯协议与遮罩变量的与运算值是非0值
目标地址的i/4取整的下标变量内容向左移位1位
目标地址的i/4取整的下标变量内容与1h进行与运算结果仍然保留在目标处
目标地址的i/4取整的下标变量内容向左移位1位结果仍然保留在目标处
目标地址的i/4取整的下标变量内容与1h进行或运算结果仍然保留在目标处
如果开锁通讯协议与遮罩变量的与运算值是0值
目标地址的i/4取整的下标变量内容向左移位1位结果仍然保留在目标处
目标地址的i/4取整的下标变量内容与1h进行或运算结果仍然保留在目标处
目标地址的i/4取整的下标变量内容向左移位1位结果仍然保留在目标处
目标地址的i/4取整的下标变量内容与1h进行与运算结果仍然保留在目标处
遮罩变量向右移动1位
加密值内部解开函数：
定义变量空间
如果数据源地址的i/4取整的下标变量内容与80h进行与运算结果是非0
变量c向左移动1位
变量内容与1h进行与运算结果仍然保留在目标处
变量c向左移动1位
变量内容与1h进行或运算结果仍然保留在目标处
数据源地址的i/4取整的下标变量内容向左移动2位
返回C中的运算结果。
本实施例的开锁通讯协议需生物识别模组和执行控制板事先达成一致，例如通讯协议内容为001，代表进行开锁，内容002代表打开其他设备比如灯光，协议内容事先进行设定。
实施例2：
本实施例与实施例1的区别在于，本实施例还引入通信session号；具体包括以下步骤：
根据生物识别模组ID数据的长度和通信session号的长度，定义变量空间1，根据遮罩变量的长度，定义变量空间2，根据开锁通讯协议的长度，定义变量空间3；
获取生物识别模组ID数据、通信session号和开锁通讯协议，并由随机数生成器随机生成一随机数种子信息作为遮罩变量；
在变量空间1内填入生物识别模组ID数据和通信session号，在变量空间2内填入随机数种子，在变量空间3内填入开锁通讯协议，形成数组；
基于随机数种子对数组进行加密，得到加密数组；
基于随机数种子对得到的加密数组进行解密，得到解密后的数组；
根据定义的变量空间对解密后的数组进行变量空间划分，得到变量空间1、变量空间2和变量空间3对应的数据；
将得到的各变量空间内的数据与事先记录的数据进行逐一匹配，若匹配一致，则根据解密得到的开锁通讯协议内容，执行相关操作；否则不做任何操作。
实施例3：
在实施例1或实施例2的基础上，本实施例提出了一种多重认证锁控系统，可应用在保险柜上，具体包括生物识别面板1、与生物识别模组进行物理地址绑定的执行控制板2和控制保险柜柜门开启或关闭的解锁机械组件；该生物识别面板设置1在保险柜柜门上，用于进行指纹识别和人脸识别，执行控制板2设置在保险柜柜门内部，与生物识别面板1通过TTL接口电连接，用于对生物识别面板1发出的通讯信号进行解密，并根据解密得到的信号判断是否开启柜门。
具体的，本实施例的生物识别模组遵循RS232通讯协议包括多个依次进行身份识别的识别模块、信号生成模块和加密模块；识别模块，用于进行用户身份认证；信号生成模块，用于根据识别模块发送的成功识别信号，生成固定通讯信号；加密模块内置实施例1或实施例2公开的锁控系统模块间的动态加密解密方法，对信号生成模块生成的固定通讯信号进行加密，得到动态通讯信号；该固定通讯信号和动态通讯信号中均包括生物识别面板的ID数据。
本实施例的识别模块包括指纹识别模块、人脸识别模块和触控密码盘中的两种或者多种；指纹识别模块包括电容指纹采集器和内置指纹识别算法的识别模块；人脸识别模块包括双目人脸识别摄像头和内置人脸识别算法的识别模块，双目人脸识别摄像头为红外摄像头。本实施例采用指纹识别模组用于实现用户指纹扫描识别，人脸识别模组当指 纹识别模组识别成功后，可通过摄像头完成用户的人脸扫描识别，信号生成模组用于当人脸识别模组识别成功后，生成包括生物识别面板ID号的固定通讯信号，该加密模组将固定通讯信号转化成动态通讯信号，由于基于随机数进行加密，故每次的动态通讯信号不重复，当同一用户指纹识别或人脸识别的识别失败次数超过设定值时，触控密码盘被激活，用户可采用输入密码来完成识别，采用密码被识别成功后，信号生成模组也会生成一条包括生物识别面板ID数据的固定通讯信号，具体的，该固定通讯信号包括生物识别面板ID数据、开锁通讯协议和遮罩变量；
本实施例的指纹识别模组采用电容指纹采集器及其指纹识别算法实现指纹识别，电容指纹采集器能够有效判别硅胶指纹模等非人体真指纹，且本实施例的人脸识别模组采用双目人脸识别摄像头及其人脸识别算法实现双目人脸识别，该双目人脸识别摄像头具备红外功能。
本实施例的执行控制板包括解密模组、判断模组和驱动解锁机械组件完成解锁动作的驱动模组，该解密模组内置实施例1或实施例2公开的锁控系统模块间的动态加密解密方法，用于对来自生物识别面板的动态通讯信号进行解密，得到解密后的通讯信号，并将解密后的通讯信号与自身记录的信息进行比对，根据比对结果，发送相关命令；该驱动模组用于接收并根据来自解密模块的命令，向解锁机械组件发送对应的电信号驱动解锁机械组件完成解锁动作。
如图1、图2和图3所示，本实施例的解锁机械组件包括受执行控制板输出的电信号控制进行前后运动的电动推杆3、用于控制关门到位的第一微动开关4和用于控制开门到位的第二微动开关5；该电动推杆3、第一微动开关4和第二微动开关5均设置在保险柜柜门内侧，该电动推杆3的驱动端与门栓连接板6固连，该电动推杆3由执行控制板2输出的电信号控制进行前后运动，从而带动门栓连接板6进行前后运动，第一微动开关4设置在电动推杆3上方，当门栓连接板6前进到最大距离时，该门栓连接板6通过一连杆61触碰第一微动开关4，第一微动开关4关闭，切断电动推杆3的电流，电动推杆3停止前进，保险柜柜门锁住；第二微动开关5设置在电动推杆3下方且位于门栓固定板7回缩的最大距离处，当执行控制板2解密得到正确固定信号，则电动推杆3受控制驱动门栓固定板7进行缩回，在缩回过程中门栓固定板7触碰到第二微动开关5，第二微动开关5关闭，切断电动推杆3的电流，电动推杆3停止缩回运动，保险柜柜门打开，门栓连接板6固定在门栓固定板7上。
实施例4：
本实施例公开了一种锁控方法，用于智能锁控系统上，该智能锁控系统包括生物识别模组、执行控制板和解锁机械组件；该生物识别模组包括指纹识别模块、人脸识别模 块和触控密码盘中的两种或者多种；包括以下步骤：
S1：将生物识别模组与执行控制板进行ID号绑定，可确保即使生物识别模组被替换后也无法实现解锁；生物识别模组与执行控制板达成开锁通讯协议；
S2：生物识别面板对当前用户进行身份认证，若身份认证成功，则执行S3，否则生物识别面板提示识别错误；具体包括以下子步骤：
通过指纹采集模块对当前用户进行指纹采集识别，当指纹识别模块识别成功后，激活人脸识别模块对当前用户进行人脸识别，当人脸识别成功后，执行S3；否则，生物识别面板提示识别错误；
当指纹识别或人脸识别的识别失败次数超过设定值时，激活触控密码盘，通过输入密码进行身份认证，若认证成功，则执行S3，否则生物识别模组提示身份认证失败；
S3：生成一条包括有生物识别面板ID号的固定通讯信号，并采用实施例1或实施例2公开的一种锁控系统模块间的动态加密解密方法对该固定通讯信号进行加密，生成动态通讯信号，并通过TTL接口向执行控制板发送该动态通讯信号；
S4：执行控制板采用实施例1或实施例2公开的一种锁控系统模块间的动态加密解密方法对接收到的动态通讯信号进行解密和匹配判断，若匹配，则开启，否则不开启。
实施例5：
本实施例的一种锁控方法，用于智能锁控系统上，该智能锁控系统包括生物识别模组、执行控制板和解锁机械组件；该生物识别模组包括指纹识别模块、人脸识别模块和触控密码盘，包括以下步骤：
步骤1：生物识别模组与执行控制板进行物理地址的绑定(MAC ID绑定)，可确保即使生物识别模组被替换后也无法实现解锁；
步骤2：生物识别面板识别当前用户的指纹信息，并与指纹数据库中的已注册指纹信息进行比对，若比对成功，则执行步骤3进行人脸识别，否则，判断识别失败次数是否超过3次，若超过，则激活触控密码盘，供用户进行密码识别，若密码识别成功后，则生物识别面板生成一条包括有生物识别面板ID号的固定通信信号，采用加密算法对固定通信信号进行加密，生成一条每次都变化的加密通讯信号，通过TTL接口向执行控制板发送该加密通信信号，执行步骤4；若密码识别失败后，则生物识别面板显示识别失败；若识别失败次数不超过3次，则继续进行指纹识别，直至识别次数超过3次，或指纹识别成功执行步骤3；
步骤3：生物识别面板识别当前用户的人脸信息，并与人脸数据库中的已注册人脸信息进行比对，若比对成功，则生物识别面板生成一条包括有生物识别面板ID号的固定通信信号，采用加密算法对固定通信信号进行加密，生成一条每次都变化的加密通讯 信号，通过TTL接口向执行控制板发送该加密通信信号，否则判断识别失败次数是否超过3次，若超过，则激活触控密码盘，供用户进行密码识别，若密码识别成功后，则生物识别面板生成一条包括有生物识别面板ID号的固定通信信号，采用加密算法对固定通信信号进行加密，生成一条每次都变化的加密通讯信号，通过TTL接口向执行控制板发送该加密通信信号，执行步骤4；若密码识别失败后，则生物识别面板显示识别失败；若识别失败次数不超过3次，则继续进行人脸识别，直至识别次数超过3次，或人脸识别成功执行步骤4；
步骤4：执行控制板对接收到的加密通讯信号进行解密，得到一条通讯信号，根据该通讯信号与执行控制板自身记录的数据进行比对，若吻合，则执行控制板控制电机打开柜门，否则，执行控制板不会进行开柜门操作。
在本实施例中，若在进行人脸识别时，识别时间超过5s后仍识别不出时，进行密码识别。
实施例6：
本实施例公开了一种保险柜，包括柜体和采用实施例3所述的一种多重认证锁控系统的保险柜柜门，生物识别模组设置在保险柜柜门上，执行控制板设置在保险柜柜门内，所述解锁机械组件与保险柜柜门的门栓连接板联动。

Claims (11)

  1. 一种锁控系统模块间的动态加密解密方法，其特征在于：包括以下步骤：
    步骤1：根据事先定义的变量空间，将硬件ID数据、开锁通讯协议和遮罩变量填入形成数组，基于遮罩变量对该数组进行加密，得到加密数组；
    步骤2：基于遮罩变量对加密数组进行解密，得到解密后的数组，对解密后的数组按照事先定义的变量空间进行数据划分，并对划分后的数据与事先记录的数据进行逐一匹配，若匹配一致，则根据解密得到的开锁通讯协议内容，执行相关操作；否则不做任何操作。
  2. 根据权利要求1所述的一种锁控系统模块间的动态加密解密方法，其特征在于：锁控系统模块包括生物识别模组和执行控制板；所述硬件ID数据包括生物识别模组ID数据。
  3. 根据权利要求2所述的一种锁控系统模块间的动态加密解密方法，其特征在于：在执行所述步骤1之前还包括：
    将生物识别模组与执行控制板进行生物识别模组ID数据绑定；
    根据生物识别模组ID数据的长度，定义变量空间1，根据遮罩变量的长度，定义变量空间2，根据开锁通讯协议的长度，定义变量空间3；
    所述步骤1具体包括：
    S10：获取生物识别模组ID数据和开锁通讯协议，并由随机数生成器随机生成一随机数种子信息作为遮罩变量；
    S11：在变量空间1内填入生物识别模组ID数据，在变量空间2内填入随机数种子，在变量空间3内填入开锁通讯协议，形成数组；
    S12：基于随机数种子对数组进行加密，得到加密数组。
  4. 根据权利要求2所述的一种锁控系统模块间的动态加密解密方法，其特征在于：在执行所述步骤1之前还包括：
    S00：根据生物识别模组ID数据的长度和通信session号的长度，定义变量空间1，根据遮罩变量的长度，定义变量空间2，根据开锁通讯协议的长度，定义变量空间3；
    所述步骤1具体包括：
    S10：获取生物识别模组ID数据、通信session号和开锁通讯协议，并由随机数生成器随机生成一随机数种子信息作为遮罩变量；
    S11：在变量空间1内填入生物识别模组ID数据和通信session号，在变量空间2内填入随机数种子，在变量空间3内填入开锁通讯协议，形成数组；
    S12：基于随机数种子对数组进行加密，得到加密数组。
  5. 根据权利要求3或4所述的一种锁控系统模块间的动态加密解密方法，其特征 在于：所述步骤2具体包括：
    S20：基于随机数种子对S12得到的加密数组进行解密，得到解密后的数组；
    S21：根据S00中定义的变量空间对解密后的数组进行变量空间划分，得到变量空间1、变量空间2和变量空间3对应的数据；
    S22：将S21得到的各变量空间内的数据与事先记录的数据进行逐一匹配，若匹配一致，则根据解密得到的开锁通讯协议内容，执行相关操作；否则不做任何操作。
  6. 一种多重认证锁控系统，其特征在于：包括生物识别模组、与所述生物识别模组进行物理地址绑定的执行控制板和解锁机械组件；
    所述生物识别模组包括多个依次进行身份识别的识别模块、信号生成模块和加密模块；
    所述识别模块，用于进行用户身份认证；
    所述信号生成模块，用于根据识别模块发送的成功识别信号，生成固定通讯信号，所述固定通讯信号包括生物识别面板ID数据、开锁通讯协议和遮罩变量；
    所述加密模块内置权利要求1至5任意一项所述的一种锁控系统模块间的动态加密解密方法，对信号生成模块生成的固定通讯信号进行加密，得到动态通讯信号；
    所述执行控制板包括解密模组、判断模组和驱动解锁机械组件完成解锁动作的驱动模组；
    所述解密模组内置权利要求1至5任意一项所述的一种锁控系统模块间的动态加密解密方法，用于对来自生物识别面板的动态通讯信号进行解密，得到解密后的通讯信号，并将解密后的通讯信号与自身记录的信息进行比对，根据比对结果，发送相关命令；
    所述驱动模组用于接收并根据来自解密模块的命令，向解锁机械组件发送对应的电信号驱动解锁机械组件完成解锁动作。
  7. 根据权利要求6所述的一种多重认证锁控系统，其特征在于：所述识别模块包括指纹识别模块、人脸识别模块和触控密码盘中的两种或者多种；所述指纹识别模块包括电容指纹采集器和内置指纹识别算法的识别模块；所述人脸识别模块包括双目人脸识别摄像头和内置人脸识别算法的识别模块，所述双目人脸识别摄像头为红外摄像头。
  8. 根据权利要求6所述的一种多重认证锁控系统，其特征在于：所述解锁机械组件包括受执行控制板输出的电信号控制进行前后运动的电动推杆、用于控制关门到位的第一微动开关和用于控制开门到位的第二微动开关；所述电动推杆的驱动端与门栓连接板固连，所述第一微动开关设置在电动推杆上方，当门栓连接板前进到最大距离时，该门栓连接板通过一连杆触碰第一微动开关；所述第二微动开关设置在电动推杆下方，并位于门栓固定板回缩的最大距离处，所述门栓连接板固定在门栓固定板上。
  9. 一种锁控方法，其特征在于：用于智能锁控系统上，所述智能锁控系统包括生物识别模组、执行控制板和解锁机械组件；所述生物识别模组包括指纹识别模块、人脸识别模块和触控密码盘中的两种或者多种；
    包括以下步骤：
    S1：将生物识别模组与执行控制板进行生物识别模组ID数据绑定，生物识别模组与执行控制板达成开锁通讯协议；
    S2：生物识别面板对当前用户进行身份认证，若身份认证成功，则执行S3，否则生物识别面板提示识别错误；
    S3：生成一条固定通讯信号，并采用权利要求1至5所述的一种锁控系统模块间的动态加密解密方法对该固定通讯信号进行加密，生成动态通讯信号，并向执行控制板发送该动态通讯信号；该固定通讯信号包括生物识别面板ID数据、开锁通讯协议和遮罩变量；
    S4：执行控制板采用权利要求1至5所述的一种锁控系统模块间的动态加密解密方法对接收到的动态通讯信号进行解密和匹配判断，若匹配，则根据解密得到的开锁通讯协议内容，执行相关操作；否则不做任何操作。
  10. 根据权利要求9所述的一种锁控方法，其特征在于：所述S2具体包括以下子步骤：
    通过指纹采集模块对当前用户进行指纹采集识别，当指纹识别模块识别成功后，激活人脸识别模块对当前用户进行人脸识别，当人脸识别成功后，执行S3；
    当指纹识别或人脸识别的识别失败次数超过设定值时，激活触控密码盘，通过输入密码进行身份认证，若认证成功，则执行S3，否则生物识别模组提示身份认证失败。
  11. 一种保险柜，其特征在于：包括柜体和采用权利要求6所述的一种多重认证锁控系统的保险柜柜门，所述生物识别模组设置在保险柜柜门上，所述执行控制板设置在保险柜柜门内，所述解锁机械组件与保险柜柜门的门栓连接板和门栓固定板联动。
PCT/CN2019/128961 2019-12-12 2019-12-27 锁控系统模块间的动态加密解密方法、多重认证锁控系统、锁控方法及保险柜 WO2021114412A1 (zh)

Priority Applications (1)

Application Number Priority Date Filing Date Title
US17/781,620 US12063299B2 (en) 2019-12-12 2019-12-27 Dynamic encryption and decryption method among lock control system modules, multiple authentication lock control system, lock control method and strongbox

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN201911271705.6 2019-12-12
CN201911271705.6A CN110930558B (zh) 2019-12-12 2019-12-12 锁控系统模块间的动态加密解密方法、多重认证锁控系统、锁控方法及保险柜

Publications (1)

Publication Number Publication Date
WO2021114412A1 true WO2021114412A1 (zh) 2021-06-17

Family

ID=69859017

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2019/128961 WO2021114412A1 (zh) 2019-12-12 2019-12-27 锁控系统模块间的动态加密解密方法、多重认证锁控系统、锁控方法及保险柜

Country Status (3)

Country Link
US (1) US12063299B2 (zh)
CN (1) CN110930558B (zh)
WO (1) WO2021114412A1 (zh)

Cited By (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN115035644A (zh) * 2022-05-24 2022-09-09 淮阴工学院 基于树莓派与rfid的多模态识别门禁系统
CN117292466A (zh) * 2023-10-17 2023-12-26 江苏新巢天诚智能技术有限公司 基于多模态计算机视觉与生物识别物联网解锁方法

Families Citing this family (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN111915774B (zh) * 2020-08-12 2023-04-07 永安行科技股份有限公司 一种远程智能协助开锁方法和装置

Citations (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
EP0872976A1 (en) * 1993-06-30 1998-10-21 UNITED TECHNOLOGIES AUTOMOTIVE, Inc. Method for quickly generating successive pseudorandom numbers
CN101294463B (zh) * 2008-06-18 2011-05-18 大连交通大学 基于电子密码锁的动态加密和开启方法
CN103106714A (zh) * 2012-12-31 2013-05-15 闵浩 基于手持终端设备pda和指纹识别技术的开锁方法及系统
CN105430015A (zh) * 2015-12-30 2016-03-23 桂林市逸仙中学 一种动态密码锁
CN109525391A (zh) * 2018-10-14 2019-03-26 浙江鸿利锁业有限公司 一种服务器与锁具信息安全同步的方法
US10325430B2 (en) * 2016-11-04 2019-06-18 Gilbert Eid Methods and systems for operating door locks using mobile devices

Family Cites Families (10)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US10873454B2 (en) * 2014-04-04 2020-12-22 Zettaset, Inc. Cloud storage encryption with variable block sizes
CN105827576B (zh) * 2015-01-05 2019-07-26 珠海汇金科技股份有限公司 基于动态密码锁的开锁方法和系统
EP3284235A1 (en) * 2015-04-13 2018-02-21 Telefonaktiebolaget LM Ericsson (publ) Code encryption
CN108400870A (zh) * 2018-01-30 2018-08-14 浙江易云物联科技有限公司 动态双密钥算法
FR3079653B1 (fr) * 2018-03-29 2022-12-30 Airtag Procede de verification d'une authentification biometrique
TWM562879U (zh) * 2018-03-29 2018-07-01 陳澤興 無線門鎖裝置及具有該無線門鎖裝置之生物辨識門鎖控制系統
US10963546B2 (en) * 2018-04-09 2021-03-30 Sunasic Technologies, Inc. Biometric security device
TWM574279U (zh) * 2018-09-21 2019-02-11 廖禮士 生物辨識智慧電鎖系統
TWI689840B (zh) * 2018-12-18 2020-04-01 華東科技股份有限公司 資料保管裝置
US11275820B2 (en) * 2019-03-08 2022-03-15 Master Lock Company Llc Locking device biometric access

Patent Citations (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
EP0872976A1 (en) * 1993-06-30 1998-10-21 UNITED TECHNOLOGIES AUTOMOTIVE, Inc. Method for quickly generating successive pseudorandom numbers
CN101294463B (zh) * 2008-06-18 2011-05-18 大连交通大学 基于电子密码锁的动态加密和开启方法
CN103106714A (zh) * 2012-12-31 2013-05-15 闵浩 基于手持终端设备pda和指纹识别技术的开锁方法及系统
CN105430015A (zh) * 2015-12-30 2016-03-23 桂林市逸仙中学 一种动态密码锁
US10325430B2 (en) * 2016-11-04 2019-06-18 Gilbert Eid Methods and systems for operating door locks using mobile devices
CN109525391A (zh) * 2018-10-14 2019-03-26 浙江鸿利锁业有限公司 一种服务器与锁具信息安全同步的方法

Cited By (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN115035644A (zh) * 2022-05-24 2022-09-09 淮阴工学院 基于树莓派与rfid的多模态识别门禁系统
CN117292466A (zh) * 2023-10-17 2023-12-26 江苏新巢天诚智能技术有限公司 基于多模态计算机视觉与生物识别物联网解锁方法
CN117292466B (zh) * 2023-10-17 2024-05-17 江苏新巢天诚智能技术有限公司 基于多模态计算机视觉与生物识别物联网解锁方法

Also Published As

Publication number Publication date
US20230006822A1 (en) 2023-01-05
CN110930558B (zh) 2021-05-07
US12063299B2 (en) 2024-08-13
CN110930558A (zh) 2020-03-27

Similar Documents

Publication Publication Date Title
WO2021114412A1 (zh) 锁控系统模块间的动态加密解密方法、多重认证锁控系统、锁控方法及保险柜
US10965468B2 (en) Authenticated external biometric reader and verification device
WO2021114411A1 (zh) 一种基于通讯模块的锁控系统、保险柜及锁控方法
US8511552B2 (en) Card credential method and system
JP3222110B2 (ja) 個人識別フォブ
EP2434462B1 (en) Biometric key
US20110084799A1 (en) Lock system including an electronic key and a passive lock
KR20160147553A (ko) 전자 키를 이용한 전자식 잠금장치 이중 인증 시스템
CN106056713B (zh) 一种密码锁的远程授权方法
CN106789024B (zh) 一种远程解锁方法、装置和系统
CN110322600B (zh) 电子锁的控制方法和电子锁
CN108460862A (zh) 用掌纹认证和手机控制锁具的方法及电子锁具、锁具系统
CN105701896A (zh) 一种指纹授权开锁的方法、装置及终端
CN110189457A (zh) 一种基于生物特征识别的智能门锁控制方法及系统
CN109979043A (zh) 一种锁具工作方法、锁具及锁匙系统
WO2010048350A1 (en) Card credential method and system
KR20170026920A (ko) 스마트 기기를 이용한 지웨이브 기반의 도어락 제어 시스템 및 제어 방법
KR101837063B1 (ko) 일회용 비밀번호 생성 장치, 전자적 개폐 장치 및 방법
CN208272988U (zh) 一种密码锁系统及装置
CN111243134A (zh) 电子钥匙及其控制方法、电子钥匙装置
CN109345665A (zh) 一种分离式新型智能门锁系统及其工作方法
US20220407867A1 (en) Proof of authority based access to devices on a network with local token acquisition
CN109272729B (zh) 防窃码遥控器识别方法及装置
CN107454352A (zh) 遥控器
EP4364346A1 (en) Systems and methods for a secure keyless system

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 19956141

Country of ref document: EP

Kind code of ref document: A1

NENP Non-entry into the national phase

Ref country code: DE

122 Ep: pct application non-entry in european phase

Ref document number: 19956141

Country of ref document: EP

Kind code of ref document: A1