WO2024060872A1

WO2024060872A1 - Access control management method, verification server, access control system and readable storage medium

Info

Publication number: WO2024060872A1
Application number: PCT/CN2023/112533
Authority: WO
Inventors: 李世野; 刘卓华; 杜洪军; 郑海涛; 王怀亮; 纪高; 李国旗; 于洪达; 李涛
Original assignee: 京东方科技集团股份有限公司
Priority date: 2022-09-20
Filing date: 2023-08-11
Publication date: 2024-03-28
Also published as: CN115578815A

Abstract

Provided in the present disclosure are an access control management method, a verification server, an access control system and a readable storage medium. The method comprises: receiving and storing pre-registration information, which is sent by a mobile terminal application of a user, wherein the pre-registration information comprises a screenshot, and the screenshot comprises at least one of the following: a health information screenshot and a travel information screenshot; receiving user identification information to be verified, which is sent by an access control system; querying whether pre-registration information stored on the current day comprises pre-registration information corresponding to said user identification information; if the pre-registration information stored on the current day comprises the pre-registration information corresponding to said user identification information, verifying whether the pre-registration information corresponding to said user identification information meets a requirement, and obtaining a verification result; and generating access control information according to the verification result, and sending the access control information to an access control device. In the present disclosure, it is not necessary to manually check health information and/or travel information in an onsite manner, and it can be ensured that the health information and/or the travel information is real and valid; in addition, the health information and/or the travel information is automatically verified on the basis of the access control system, thereby improving the access granting efficiency of the access control device.

Description

Access control management method, verification server, access control system and readable storage medium

Cross-references to related applications

This application claims priority to Chinese Patent Application No. 202211142452.4 filed in China on September 20, 2022, the entire content of which is incorporated herein by reference.

Technical field

The embodiments of the present disclosure relate to the field of computer technology, and in particular, to an access control management method, a verification server, an access control system, and a readable storage medium.

Background technique

In some scenarios, company park managers will manually check health information and/or itinerary information on-site when employees enter the park for work. There are many people during peak hours, and it is time-consuming to check health information and/or itinerary information on-site. , will cause a large number of people to gather, and the traffic efficiency is extremely low; in addition, manual on-site inspection of health information and/or itinerary information is difficult to ensure that the health information and/or itinerary information are authentic and effective.

Contents of the invention

Embodiments of the present disclosure provide an access control management method, a verification server, an access control system and a readable storage medium, which are used to solve the problem of low traffic efficiency and difficulty in ensuring the inspection by manually checking health information and/or itinerary information in certain places. Questions with real and valid results.

In order to solve the above technical problems, the present disclosure is implemented as follows:

In a first aspect, an embodiment of the present disclosure provides a door access management method, which is applied to a verification server, including:

Receive and save pre-registration information sent by the user's mobile application, where the pre-registration information includes screenshots, and the screenshots include at least one of the following: screenshots of health information and screenshots of itinerary information;

Receive user identification information to be verified sent by the access control system;

Check whether the pre-registration information saved on the day includes the pre-registration information corresponding to the user identification information to be verified;

If the pre-registration information saved on the day includes the pre-registration information corresponding to the user identification information to be verified, verify whether the pre-registration information corresponding to the user identification information to be verified meets the requirements and obtain a verification result;

Access control information is generated based on the verification results and sent to the access control device.

Optionally, the verification of whether the pre-registration information corresponding to the user identification information to be verified meets the requirements and obtaining the verification result includes:

Recognize the screenshot in the pre-registration information corresponding to the user identification information to be verified to obtain an image recognition result, and the image recognition result includes at least one of the following: health information status and itinerary information status;

Verify whether the health information status and/or itinerary information status corresponding to the user identification information to be verified meet the requirements, and obtain the verification result.

Optionally, the image recognition result further includes: user identification information;

Whether the health information status and/or itinerary information status corresponding to the user identification information to be verified meets the requirements, it also includes:

Verify whether the user identification information in the image recognition result matches the user identification information to be verified;

If the user identification information in the image recognition result matches the user identification information to be verified, then enter the step of verifying whether the health information status and/or itinerary information status corresponding to the user identification information to be verified meet the requirements;

If the user identification information in the image recognition result does not match the user identification information to be verified, a verification result containing alarm information is generated and sent to the access control device.

Optionally, the image recognition result obtained by identifying the screenshot in the pre-registration information corresponding to the user identification information to be verified includes:

Obtain a sample of health information from multiple regions;

According to the health information samples of the multiple regions, the screenshot in the pre-registration information corresponding to the user identification information to be verified is identified.

Optionally, the pre-registration information also includes user identification information;

Whether the pre-registration information saved on the day of query includes the pre-registration information corresponding to the user identification information to be verified includes:

Query whether there is user identification information matching the user identification information to be verified among the user identification information in the pre-registration information saved on the day.

In a second aspect, embodiments of the present disclosure provide an access control management method, which is applied to an access control system, including:

If the reference user information database includes reference user information that matches the access control collection information collected by the access control equipment, obtain the user identification information to be verified corresponding to the access control collection information;

The user identification information to be verified is sent to a verification server, so that the verification server verifies whether the pre-registration information corresponding to the user identification information to be verified meets the requirements; the pre-registration information includes a screenshot, and the screenshot includes At least one of the following: screenshots of health information and screenshots of itinerary information.

Optionally, the access control system includes a cloud server and at least two edge servers, each edge server corresponding to at least one of the access control devices, and the method further includes:

The cloud server sends reference user information to the edge server.

Optionally, the cloud server sends reference user information to the edge server, which also includes:

The cloud server receives the user's real-time location information sent by the user's mobile application;

The cloud server determines the target access control device closest to the user based on the user's real-time location information;

The cloud server sends the saved reference user information of the user to the edge server corresponding to the target access control device;

or

The cloud server analyzes the access control equipment that the user is expected to arrive on that day based on the access control equipment that the user has arrived at in history;

The cloud server sends the saved reference user information of the user to the edge server corresponding to the access control device where the user is expected to arrive on that day.

Optionally, the method also includes:

The cloud server analyzes the estimated time that the user is expected to arrive at the access control equipment that day based on the user's historical arrival time at the access control equipment or the company's working hours;

The cloud server sends the saved reference user information of the user to the edge server corresponding to the access control device where the user is expected to arrive on that day, including:

The cloud server sends the saved reference user information of the user to the edge server corresponding to the access control device that the user is expected to arrive at that day at the target time before the estimated time;

or

The cloud server determines the target distance between the user and the target access control device based on the user's real-time location information;

Wherein, the cloud server sends the saved reference user information of the user to the edge server corresponding to the access control device that the user is expected to arrive on that day, including:

When the target distance is less than the preset distance, the cloud server sends the saved reference user information of the user to the edge server corresponding to the access control device that the user is expected to arrive that day.

Optionally, obtaining the user identification information to be verified corresponding to the access control collection information also includes:

The edge server determines whether the reference user information database includes reference user information matching the access control collected information;

If the reference user information database of the edge server includes reference user information matching the access control collection information, enter the step of obtaining the user identification information to be verified corresponding to the access control collection information;

If the reference user information library of the edge server does not include reference user information matching the access control collection information, the access control collection information is sent to the cloud server; the cloud server determines whether the reference user information library includes Reference user information that matches the access control collection information; if the cloud server reference user information database includes reference user information that matches the access control collection information, access to obtain the user identification information to be verified corresponding to the access control collection information A step of.

In a third aspect, embodiments of the present disclosure provide a verification server, including:

The first receiving module is configured to receive and save pre-registration information sent by the user's mobile application, where the pre-registration information includes screenshots, and the screenshots include at least one of the following: screenshots of health information and screenshots of itinerary information;

The second receiving module is used to receive the user identification information to be verified sent by the access control system;

A query module, used to query whether the pre-registration information saved on the day includes pre-registration information corresponding to the user identification information to be verified;

The first verification module is used to verify whether the pre-registration information corresponding to the user identification information to be verified meets the requirements and is verified if the pre-registration information saved on the day includes the pre-registration information corresponding to the user identification information to be verified. result;

A control module, configured to generate access control information based on the verification results and send it to the access control device.

In a fourth aspect, embodiments of the present disclosure provide an access control system, including:

The first acquisition module is used to obtain the user identification information to be verified corresponding to the access control collection information if the reference user information database includes reference user information that matches the access control collection information;

A sending module, configured to send the user identification information to be verified to a verification server, so that the verification server verifies whether the pre-registration information corresponding to the user identification information to be verified meets the requirements; the pre-registration information includes screenshots , the screenshots include at least one of the following: screenshots of health information and screenshots of itinerary information.

In a fifth aspect, an embodiment of the present disclosure provides a verification server, including: a processor, a memory, and a program stored on the memory and executable on the processor. When the program is executed by the processor The steps of implementing the access control management method described in the first aspect above.

In the sixth aspect, an embodiment of the present disclosure provides an access control system, comprising: a processor, a memory, and a program stored in the memory and executable on the processor, wherein when the program is executed by the processor, the steps of the access control management method as described in the second aspect above are implemented.

In a seventh aspect, embodiments of the present disclosure provide a computer-readable storage medium. A computer program is stored on the computer-readable storage medium. When the computer program is executed by a processor, the access control as described in the first aspect is implemented. The steps of the management method; or, when the computer program is executed by the processor, the steps of the access control management method as described in the second aspect are implemented.

In this embodiment of the present disclosure, users (such as company employees) can send screenshots containing health information and/or itinerary information to the verification server through the mobile application in advance before entering a specific place with access control equipment (such as an office building, a park, etc.) Screenshot of the pre-registration information. When the user reaches the access control device, the access control system can send the user identification information to be verified to the verification server. The verification server queries whether the pre-registration information saved on the day includes the pre-registration information corresponding to the user identification information to be verified. , if included, verify whether the health information screenshots and/or itinerary information screenshots corresponding to the user identification information to be verified meet the requirements, and generate access control information based on the verification results and send it to the access control device to allow Allow or disallow users to pass through the access control device. This method does not require manual on-site inspection of health information and/or itinerary information. The verification server verifies the health information and/or itinerary information, which can ensure that the health information and/or itinerary information is authentic and valid. At the same time, it is automatically verified in combination with the access control system. Health information and/or itinerary information improves verification efficiency and access control equipment passing efficiency.

Description of drawings

Various other advantages and benefits will become apparent to those of ordinary skill in the art upon reading the following detailed description of the preferred embodiments. The drawings are for the purpose of illustrating preferred embodiments only and are not to be considered limiting of the disclosure. Also throughout the drawings, the same reference characters are used to designate the same components. In the attached picture:

Figure 1 is one of the schematic flow diagrams of the access control management method according to an embodiment of the present disclosure;

Figure 2 is a schematic flowchart of a mobile application obtaining and sending screenshots of health information and/or itinerary information according to an embodiment of the present disclosure;

Figure 3 is a schematic flowchart of a mobile application obtaining and sending screenshots of health information and/or itinerary information according to another embodiment of the present disclosure;

Figure 4 is one of the overall flow diagrams of the system applied in the embodiment of the present disclosure;

Figure 5 is the second schematic diagram of the overall flow of the system applied in the embodiment of the present disclosure;

Figure 6 is a schematic diagram of a health information sample management method according to an embodiment of the present disclosure;

Figure 7 is a schematic diagram of transmitting pre-registration information in an encrypted manner according to an embodiment of the present disclosure;

Figure 8 is a schematic diagram of the format of an encrypted message according to an embodiment of the present disclosure;

Figure 9 is a second schematic flowchart of the access control management method according to the embodiment of the present disclosure;

Figure 10 is a schematic structural diagram of an access control management system according to an embodiment of the present disclosure;

Figure 11 is a schematic diagram of an input method of reference user information according to an embodiment of the present disclosure;

Figure 12 is a schematic flowchart of a distribution strategy for reference user information according to an embodiment of the present disclosure;

Figure 13 is a schematic flowchart of a distribution strategy for reference user information according to another embodiment of the present disclosure;

Figure 14 is a schematic flowchart of a distribution strategy for reference user information according to yet another embodiment of the present disclosure;

Figure 15 is one of the structural schematic diagrams of the verification server according to an embodiment of the present disclosure;

Figure 16 is one of the structural schematic diagrams of the access control system according to the embodiment of the present disclosure;

Figure 17 is the second structural schematic diagram of the verification server according to the embodiment of the present disclosure;

Figure 18 is the second structural schematic diagram of the access control system according to the embodiment of the present disclosure.

Detailed ways

The technical solutions in the embodiments of the present disclosure will be clearly and completely described below with reference to the accompanying drawings in the embodiments of the present disclosure. Obviously, the described embodiments are part of the embodiments of the present disclosure, rather than all of the embodiments. Based on the embodiments in this disclosure, all other embodiments obtained by those of ordinary skill in the art without making creative efforts fall within the scope of protection of this disclosure.

In the existing technology, for safety reasons, different parks have different entry and exit regulations. Park access requires manual verification of employee epidemic prevention information and other information to see whether they are compliant, resulting in a large amount of duplication of work and low efficiency.

Please refer to Figure 1. An embodiment of the present disclosure provides an access control management method, which is applied to a verification server, including:

Step 11: Receive and save the pre-registration information sent by the user's mobile application. The pre-registration information includes screenshots, and the screenshots include at least one of the following: screenshots of health information and screenshots of itinerary information;

In this disclosed embodiment, please refer to Figure 2. If a user (such as a company employee, etc.) needs to enter a specific place (such as an office building, a park, etc.), he or she can use a mobile application (such as a mobile APP) in advance (such as on the way to work that day). It can also be called a mobile APP or mobile APP) screenshots the health information and/or itinerary information, and sends the pre-registration information containing the screenshots of the health information and/or the itinerary information to the verification server through the mobile application. The example of health information shown in Figure 2 is health information that needs to be scanned and registered. It should be understood that some health information does not need to be scanned and registered. Just click on the confirmation command to take a screenshot.

In this disclosed embodiment, a mobile application is used to directly take screenshots of health information and/or itinerary information and upload them to the verification server. There is no entrance to modify the screenshots, which can reduce human intervention and ensure that screenshots of health information and/or itinerary information are not tampered with.

Of course, in some other embodiments of the present disclosure, please refer to Figure 3. The user can also use other application software (such as the system screenshot command of the mobile phone) to take a screenshot of the health information and/or itinerary information, and upload it to the mobile application. The mobile application is uploaded to the verification server. The IoT platform in Figure 3 is the above-mentioned verification server.

Step 12: Receive the user identification information to be verified sent by the access control system;

The user identification information to be verified includes, for example, the user's name, job number, and/or mobile phone number.

Please refer to Figure 4 and Figure 5. When the user reaches the access control device (which can also be called the access control gate device), after the access control device detects the access control collection information (such as face or access card information, etc.), it can directly identify the access control collection information (such as Face recognition) and compare the access control collection information with the pre-saved reference user information, or send the access control collection information to the access control system for identification and comparison. When the access control system identifies and compares, the access control system can determine the reference Whether the user information database includes reference user information that matches the access control collection information. If so, it means that the user is a legal user, and then the user identification information to be verified corresponding to the access control collection information (such as the user's name, job title, etc.) is obtained. and/or mobile phone number, etc., i.e., the employee information in the figure), and sent to the verification server (i.e., the Internet of Things (IoT) platform in the figure) to verify whether the user's health information and/or itinerary information meets the requirements. If the reference user information database does not include reference user information that matches the access control collection information, it means that the user is not a legal user and can directly send alarm information to the access control device.

In the embodiment of the present disclosure, the access control device and the access control system can be integrated in the same device, or they can be set up separately. The access control equipment mainly performs the function of collecting access control information (such as collecting faces and collecting access card information). The access control equipment can also identify the collected access control information. Of course, it can also be identified by the access control system. The access control system also performs the following tasks based on the identification: The access control collects information and determines the role of the user identification information to be verified.

Step 13: Check whether the pre-registration information saved on the day includes the pre-registration information corresponding to the user identification information to be verified;

If the pre-registration information saved on the day does not include the pre-registration information corresponding to the user identification information to be verified, it means that the user has not uploaded his pre-registration information. At this time, the verification server can send alarm information to the access control system.

Since both health information and itinerary information require real-time performance, pre-registration information is uploaded on the same day and can be deleted at a designated time, for example, at 24:00 on the same day.

Step 14: If the pre-registration information saved on the day includes the pre-registration information corresponding to the user identification information to be verified, verify whether the pre-registration information corresponding to the user identification information to be verified meets the requirements and obtain the verification result;

Whether the health information and/or itinerary information meets the requirements in the embodiment of the present invention may refer to whether the health information status and/or the itinerary information status meets the regulations of a specific place (such as a park).

Step 15: Generate access control information based on the verification results and send it to the access control device.

For example, if the pre-registration information corresponding to the user identification information to be verified is normal, the first access control information can be generated to control the access control device to open the door. If the pre-registration information corresponding to the user identification information to be verified is not normal , then the second access control information can be generated to control the alarm of the access control equipment.

In this embodiment of the present disclosure, users (such as company employees) can send screenshots containing health information and/or itinerary information to the verification server through the mobile application in advance before entering a specific place with access control equipment (such as an office building, a park, etc.) Screenshot of the pre-registration information. When the user reaches the access control device, the access control system can send the user identification information to be verified to the verification server. The verification server queries whether the pre-registration information saved on the day includes the pre-registration information corresponding to the user identification information to be verified. , if included, verify whether the health information screenshots and/or itinerary information screenshots corresponding to the user identification information to be verified meet the requirements, and generate access control information based on the verification results and send it to the access control device to allow or disallow the user to pass through the access control device. This method does not require manual on-site inspection of health information and/or itinerary information. The verification server verifies the health information and/or itinerary information, which can ensure that the health information and/or itinerary information is authentic and valid. At the same time, it is automatically verified in combination with the access control system. Health information and/or itinerary information improves the verification efficiency and the passage efficiency of access control equipment.

In this disclosed embodiment, optionally, verifying whether the pre-registration information corresponding to the user identification information to be verified meets the requirements and obtaining the verification result includes:

Step 141: Recognize the screenshot in the pre-registration information corresponding to the user identification information to be verified to obtain an image recognition result. The image recognition result includes at least one of the following: health information status and itinerary information status;

In this disclosed embodiment, please refer to Figures 4 and 5. An OCR (Optical Character Recognition, optical character recognition) recognition system (or OCR system) can be used to identify the screenshots in the pre-registration information and obtain the image recognition result. , for example, when the screenshot is a screenshot of health information, the health information status may include at least one of the following: the color of the health information, update time, health detection results, etc. When the screenshot is a screenshot of itinerary information, the itinerary information status can include at least one of the following: update time, location reached or passed within 7 days, etc.

In the embodiment of the present disclosure, optionally, the OCR recognition system can be installed on the verification server, or can be set up separately.

Step 142: Verify whether the health information status and/or itinerary information status corresponding to the user identification information to be verified meet the requirements, and obtain the verification result.

In this embodiment of the present disclosure, optionally, the image recognition result also includes: user identification information; for example, when the screenshot is a screenshot of health information, the user identification information in the image recognition result may include: user name, etc. When the screenshot is a screenshot of itinerary information, the user identification information in the image recognition result may include: the last four digits of the user's mobile phone, etc.

Optionally, verifying whether the health information status and/or itinerary information status corresponding to the user identification information to be verified meets the requirements also includes:

That is to say, first verify whether the user identification information (user name, mobile phone number, etc.) in the recognized image recognition result matches the user identification information to be verified (user name, mobile phone number, etc.). If they match, it means that the health Information screenshots and/or itinerary information screenshots are screenshots of the user to be verified to verify whether the user's health information status and/or itinerary information status meets the requirements.

In this embodiment of the present disclosure, optionally, the image recognition result obtained by identifying the screenshot in the pre-registration information corresponding to the user identification information to be verified includes:

Step 1411: Obtain health information samples from multiple regions;

Step 1412: Identify the screenshots in the pre-registration information corresponding to the user identification information to be verified based on the health information samples of the multiple regions.

In other words, please refer to Figure 6. Health information samples from multiple regions can be stored in advance. Screenshots in the pre-registration information can be identified based on the pre-stored health information samples from multiple regions, thus supporting cross-regional personnel health information. Verification to solve the problem of cross-regional health information not being synchronized. In the embodiment of the present disclosure, health information samples can be managed through the server management system WEB, such as adding, deleting, updating, etc.

In this disclosed embodiment, optionally, please refer to Figure 3. The pre-registration information also includes user identification information (i.e. employee information in Figure 3, such as work number, mobile phone number, etc.); for example, the user's mobile terminal can Send the pre-saved or user-entered user identification information (such as work number, mobile phone number, etc.) and screenshots to the verification server; the verification server establishes an associated index of the user identification information and screenshots, and saves the user identification information and screenshots.

At this time, optionally, the query whether the pre-registration information saved on the day includes the pre-registration information corresponding to the user identification information to be verified includes: querying whether the user identification information in the pre-registration information saved on the day contains the same The user identification information to be verified matches the user identification information. That is to say, when querying whether the pre-registration information saved on the day includes the pre-registration information corresponding to the user identification information to be verified, the user identification information can be used to query.

Of course, it is not excluded that in other embodiments, the mobile application may not report user identification information, but only report screenshots. In this case, the verification server may identify the screenshots in advance and obtain the user identification information in the screenshots, thereby facilitating query .

In the embodiments of the present disclosure, optionally, when the user reports the pre-registration information through the mobile application, the user may also report the expected arrival time at the same time, that is, the expected arrival time at the preset place. The verification server saves the expected arrival time. When receiving the user identification information to be verified sent by the access control system, it can first determine whether the reception time of the user identification information to be verified sent by the access control system is within the expected arrival time. If it is within the preset arrival time, execute the subsequent steps (that is, query whether the pre-registration information saved on the day includes the pre-registration information corresponding to the user identification information to be verified), otherwise an alarm message will be sent to the access control system.

In this disclosed embodiment, optionally, please refer to Figure 7. The pre-registration information received by the verification server may be pre-registration information uploaded by the mobile application in an encrypted manner, thereby ensuring that the data cannot be tampered with and the integrity of the data is ensured.

Please refer to Figure 8. Figure 8 is a schematic diagram of the format of an encrypted message message sent by a mobile application in an embodiment of the present disclosure. The message message includes 5 parts. The first part may be 1 byte (byte) and is used to indicate Encryption method, the second part can be 1 byte, used to indicate the encryption version, the third part is 6 bytes, reserved bytes, the fourth part is 4 bytes, used to indicate the length of the message message, the fifth part is The part is N bytes and is used to carry the encrypted message body.

Please refer to Table 1, which describes each part of the encrypted message.

Table 1

Referring to Figure 9, an embodiment of the present disclosure also provides an access control management method, which is applied to the access control system. The method includes:

Step 91: If the reference user information database includes reference user information that matches the access control collection information, obtain the user identification information to be verified corresponding to the access control collection information;

Step 92: Send the user identification information to be verified to the verification server, so that the verification server verifies whether the pre-registration information corresponding to the user identification information to be verified meets the requirements; the pre-registration information includes screenshots, so The screenshots include at least one of the following: screenshots of health information and screenshots of itinerary information.

In the embodiment of the present disclosure, the reference user information database is used to store pre-entered reference user information.

In this disclosed embodiment, the access control collection information may be face or access control card information, etc. If the information collected by the access control is a face, the reference user information database includes the pre-entered face information of the user.

In this disclosed embodiment, optionally, if the reference user information database includes reference user information that matches the access control collection information, obtaining the user identification information to be verified corresponding to the access control collection information also includes:

Step 901: Obtain the access control collection information sent by the access control device;

Step 902: Determine whether the reference user information database includes reference user information that matches the access control collection information.

In the embodiment of the present disclosure, the access control device and the access control system can be integrated in the same device, or they can be set up separately. The access control equipment mainly performs the function of collecting access control information (such as collecting faces and collecting access card information). In this disclosed embodiment, the access control device sends the collected access control collection information to the access control system, and the access control system determines whether the reference user information database includes the access control collection information. Reference user information matching the information. Of course, in some other embodiments of the present disclosure, the access control device may also determine whether the reference user information database includes reference user information that matches the access control collection information.

For some large specific places, such as company campuses, there are usually multiple entrances, and access control equipment can be set up at each entrance. The reference user information database is generally stored in the cloud server, and the communication path between the access control equipment and the remote cloud server is long. , reducing the recognition speed.

To solve the above problems, in an embodiment of the present disclosure, please refer to Figure 10. Optionally, the access control system includes a cloud server and at least two edge servers, each of the edge servers corresponds to at least one access control device, and the edge server can be set at a location close to the access control device, or integrated with the access control device in one device.

The method further includes: the cloud server sending reference user information to the edge server. In other words, please refer to Figure 11. The cloud server obtains the reference user information (such as face information) and sends the reference user information to the edge server, so that the edge server can directly compare the reference user information and the access control collection information. The access control device does not If you need to communicate with the cloud server, you can communicate directly with the edge server. The communication path is shortened, the communication speed is improved, the recognition speed is improved, and the pressure on the cloud server is relieved. That is to say, the above steps 901 and 902, and steps 91 and 92 can all be executed by the edge server.

The specifications of cloud servers (boxes) used in access control systems in the existing technology are: CPU with 8 cores and 16 threads, memory of more than 8G, and hard disk of more than 500G. Cloud servers (boxes) that meet this type of requirements are relatively expensive. In this disclosed embodiment, an edge server is placed near the access control device. The edge server is a physical machine deployed physically close to the access control device and can be regarded as a server directly connected to the access control device. When a user (such as a company employee) enters the house for face recognition (or fingerprint recognition or card swiping recognition), the access control device performs face comparison (or fingerprint comparison or card information comparison) through the edge server. If it does not exist in the edge server The corresponding face (or fingerprint or card information) will then go to the cloud server for face comparison (or fingerprint comparison or card information comparison). The database data in the edge server is small and can be updated regularly, such as daily. Update, the edge server is close to the access control device, which can improve the speed of face recognition; at the same time, the storage specifications required for the edge server are not high, which can reduce costs.

In this disclosed embodiment, the cloud server can deliver the user's reference user information to the corresponding edge server based on a variety of policies. Examples are given below to illustrate.

In some embodiments of the present disclosure, optionally, please refer to Figures 10 and 12. The cloud server sends reference user information to the edge server, which also includes:

The cloud server receives the user's real-time location information sent by the user's mobile application (APP);

The cloud server sends the saved reference user information of the user to the edge server corresponding to the target access control device.

In some embodiments of the present disclosure, optionally, the cloud server sends reference user information to the edge server, before which the following steps are also included:

The cloud server sends the saved reference user information of the user to the edge server corresponding to the access control device that the user is expected to arrive on that day.

In some embodiments of the present disclosure, optionally, please refer to Figure 13. The access control management method also includes: the cloud server analyzes the user's expected arrival time at the access control device on the day based on the user's historical arrival time at the access control device. time;

The cloud server sends the saved reference user information of the user to the edge server corresponding to the access control device that the user is expected to arrive at that day at the target time (for example, 10 minutes) before the estimated time.

In the embodiment of the present disclosure, the estimated time that the user is expected to arrive at the access control device that day can be calculated, for example, in the following way:
The estimated time the user is expected to arrive at the access control device on the day = Y*10%+(M1+M2)/2*20%+
(W1+W2+W3)/3*30%+(D1+D2+D3+D4+D5+D6+D7)/7*70%.

Among them, Y is the time to arrive at the access control equipment on the same day last year, M1 and M2 are the time to arrive at the access control equipment on the same day in the last two months respectively, W1, W2, and W3 are respectively the time to arrive at the access control equipment on the same day of the week in the last three weeks, D1 ,D2,D3,D4,D5,D6,D7 are respectively the time to arrive at the access control equipment in the previous seven days.

The above 10%, 20%, 30%, and 70% are weights, and their values can be set as needed.

Of course, the method for calculating the estimated time of arrival of the user at the access control device on the day is not limited thereto, and for example, it may be calculated based only on the time of arrival at the access control device seven days before.

In some embodiments of the present disclosure, optionally, please refer to Figure 14. The access control management method also includes: the cloud server analyzes the user's expected time of the day based on the user's historical arrival time at the access control device or the company's working hours. Estimated time of arrival at the access control device;

In some embodiments of the present disclosure, optionally, please refer to Figure 12. The access control management method further includes: the cloud server determines the target distance between the user and the target access control device based on the user's real-time location information. ;

When the target distance is less than a preset distance (such as 100 meters), the cloud server sends the saved reference user information of the user to the edge server corresponding to the access control device that the user is expected to arrive that day.

The above delivery strategies can reduce the operating pressure of edge services and cloud servers, improve the recognition utilization rate of edge servers, and increase the recognition speed.

In the embodiment of the present disclosure, optionally, before obtaining the user identification information to be verified corresponding to the access control collection information, the step also includes:

The edge server determines whether the reference user information database includes reference user information that matches the access control collection information;

If the reference user information database of the edge server includes the reference user information that matches the access control collection information, the step of obtaining the user identification information to be verified corresponding to the access control collection information is entered;

If the edge server's reference user information database does not include information that matches the access control collection information The reference user information, and the access control collection information is sent to the cloud server; the cloud server determines whether the reference user information library includes reference user information that matches the access control collection information; if the cloud server refers to the user information The library includes reference user information that matches the access control collection information, and enters the step of obtaining the user identification information to be verified corresponding to the access control collection information.

In the above-mentioned embodiments of the present application, by adding an edge server to the access control device side and using the preset delivery policy cloud server to deliver reference user information, the operation of comparing user information can basically be performed on the edge server, reducing the cost of the cloud server. pressure, reducing the length of the communication link between the access control device and the server, and improving the recognition response speed.

Please refer to Figure 15. This embodiment of the present disclosure also provides a verification server 150, including:

The first receiving module 151 is used to receive and save pre-registration information sent by the user's mobile application. The pre-registration information includes screenshots, and the screenshots include at least one of the following: health information screenshots and itinerary information screenshots;

The second receiving module 152 is used to receive the user identification information to be verified sent by the access control system;

The query module 153 is used to query whether the pre-registration information saved on the day includes the pre-registration information corresponding to the user identification information to be verified;

The first verification module 154 is used to verify whether the pre-registration information corresponding to the user identification information to be verified meets the requirements if the pre-registration information saved on the day includes the pre-registration information corresponding to the user identification information to be verified, and obtain Validation results;

The control module 155 is used to generate access control information according to the verification result and send it to the access control device.

Optionally, the first verification module 154 is used to identify the screenshot in the pre-registration information corresponding to the user identification information to be verified to obtain an image recognition result, where the image recognition result includes at least one of the following: health Information status and itinerary information status; verify whether the health information status and/or itinerary information status corresponding to the user identification information to be verified meet the requirements, and obtain the verification result.

The verification server 150 also includes:

The second verification module is used to verify whether the user identification information in the image recognition result matches the user identification information to be verified; if the user identification information in the image recognition result matches the user identification information to be verified, If the user identification information to be verified matches, then enter the step of verifying whether the health information status and/or itinerary information status corresponding to the user identification information to be verified meet the requirements; if the user identification information in the image recognition result matches the user identification information to be verified, If the user identification information to be verified does not match, a verification result containing alarm information is generated and sent to the access control device.

Optionally, the first verification module 154 is used to obtain health information samples from multiple regions; and based on the health information samples from multiple regions, verify the pre-registration information corresponding to the user identification information to be verified. Screenshot for identification.

The query module 153 is used to query whether the user identification information in the pre-registration information saved on the day has user identification information that matches the user identification information to be verified.

Referring to Figure 16, an embodiment of the present disclosure also provides an access control system 160, including:

The first acquisition module 161 is configured to obtain the user identification information to be verified corresponding to the access control collection information if the reference user information database includes reference user information that matches the access control collection information;

The sending module 162 is used to send the user identification information to be verified to the verification server, so that the verification server verifies whether the pre-registration information corresponding to the user identification information to be verified meets the requirements; the pre-registration information includes Screenshots, including at least one of the following: screenshots of health information and screenshots of itinerary information.

Optionally, the access control system 160 includes a cloud server and at least two edge servers, each of the edge servers corresponding to at least one of the access control devices;

Optionally, the above-mentioned first obtaining module 161 and sending module 162 may be provided in the meta-server.

Optionally, the edge server is configured to receive the reference user information sent by the cloud server and save it in the reference user information database.

Optionally, the cloud server is configured to receive the user's real-time location information sent by the user's mobile application; determine the target access control device closest to the user based on the user's real-time location information; and store the user's Send the reference user information to the edge server corresponding to the target access control device;

or

Optionally, the cloud server is used to analyze the access control devices that the user has visited in history. The access control device where the user is expected to arrive on that day; and sending the saved reference user information of the user to the edge server corresponding to the access control device where the user is expected to arrive on that day.

Optionally, the cloud server is used to analyze the estimated time that the user is expected to arrive at the access control equipment that day based on the user's historical arrival time at the access control equipment or the company's working hours; at the target time before the estimated time, the The saved reference user information of the user is sent to the edge server corresponding to the access control device that the user is expected to arrive on that day;

or

Optionally, the cloud server is configured to determine the target distance between the user and the target access control device based on the user's real-time location information; when the target distance is less than a preset distance, the saved user The reference user information is sent to the edge server corresponding to the access control device that the user is expected to arrive on that day.

Optionally, the edge server is used to determine whether the reference user information library includes reference user information that matches the access control collection information; if the reference user information library of the edge server includes reference user information that matches the access control collection information. Referring to the user information, enter the step of obtaining the user identification information to be verified corresponding to the access control collection information; if the reference user information database of the edge server does not include reference user information matching the access control collection information, the The access control collection information is sent to the cloud server; the cloud server determines whether the reference user information library includes reference user information that matches the access control collection information; if the cloud server reference user information library includes reference user information that matches the access control collection information, If the information matches the reference user information, enter the step of obtaining the user identification information to be verified corresponding to the access control collection information.

Please refer to Figure 17. This embodiment of the present disclosure also provides a verification server 170, which includes a processor 171, a memory 172, and a computer program stored on the memory 172 and executable on the processor 171. The computer program is processed by the processor 171. When 171 is executed, each process of the above-mentioned embodiment of the access control management method applied to the verification server is implemented, and the same technical effect can be achieved. To avoid duplication, it will not be described again here.

Please refer to Figure 18. The embodiment of the present disclosure also provides an access control system 180, which includes a processor 181, a memory 182, and a computer program stored on the memory 182 and executable on the processor 181. The computer program is processed by the processor 181. 181 realizes each process of the above embodiment of the access control management method applied to the access control system when executed, and can achieve the same technical effect. To avoid duplication, it will not be repeated here. Repeat.

Embodiments of the present disclosure also provide a computer-readable storage medium. A computer program is stored on the computer-readable storage medium. When the computer program is executed by a processor, each process of the above-mentioned access control management method embodiment is implemented, and the same can be achieved. The technical effects will not be repeated here to avoid repetition. Among them, the computer-readable storage medium is such as read-only memory (Read-Only Memory, ROM), random access memory (Random Access Memory, RAM), magnetic disk or optical disk, etc.

It should be noted that, in this document, the terms "comprising", "comprises" or any other variations thereof are intended to cover a non-exclusive inclusion, such that a process, method, article or device that includes a series of elements not only includes those elements, It also includes other elements not expressly listed or inherent in the process, method, article or apparatus. Without further limitation, an element defined by the statement "comprises a..." does not exclude the presence of additional identical elements in a process, method, article or apparatus that includes that element.

Through the above description of the embodiments, those skilled in the art can clearly understand that the methods of the above embodiments can be implemented by means of software plus the necessary general hardware platform. Of course, it can also be implemented by hardware, but in many cases the former is better. implementation. Based on this understanding, the technical solution of the present disclosure can be embodied in the form of a software product in essence or that contributes to the existing technology. The computer software product is stored in a storage medium (such as ROM/RAM, disk, CD), including several instructions to cause a terminal (which can be a mobile phone, computer, server, air conditioner, or network device, etc.) to execute the methods described in various embodiments of the present disclosure.

The embodiments of the present disclosure have been described above in conjunction with the accompanying drawings. However, the present disclosure is not limited to the above-mentioned specific implementations. The above-mentioned specific implementations are only illustrative and not restrictive. Those of ordinary skill in the art will Inspired by this disclosure, many forms can be made without departing from the purpose of this disclosure and the scope protected by the claims, all of which fall within the protection of this disclosure.

Claims

An access control management method, applied to a verification server, is characterized by including:

Receive and save pre-registration information sent by the user's mobile application, where the pre-registration information includes screenshots, and the screenshots include at least one of the following: screenshots of health information and screenshots of itinerary information;

Receive user identification information to be verified sent by the access control system;

Check whether the pre-registration information saved on the day includes the pre-registration information corresponding to the user identification information to be verified;

If the pre-registration information saved on the day includes the pre-registration information corresponding to the user identification information to be verified, verify whether the pre-registration information corresponding to the user identification information to be verified meets the requirements and obtain the verification result;

Access control information is generated based on the verification results and sent to the access control device.
The method according to claim 1, characterized in that, verifying whether the pre-registration information corresponding to the user identification information to be verified meets the requirements and obtaining the verification result includes:

Recognize the screenshot in the pre-registration information corresponding to the user identification information to be verified to obtain an image recognition result, and the image recognition result includes at least one of the following: health information status and itinerary information status;

Verify whether the health information status and/or itinerary information status corresponding to the user identification information to be verified meet the requirements, and obtain the verification result.
The method according to claim 2, characterized in that

The image recognition result also includes: user identification information;

Verify whether the health information status and/or itinerary information status corresponding to the user identification information to be verified meets the requirements, which also includes:

Verify whether the user identification information in the image recognition result matches the user identification information to be verified;

If the user identification information in the image recognition result matches the user identification information to be verified, then enter the step of verifying whether the health information status and/or itinerary information status corresponding to the user identification information to be verified meet the requirements;

If the user identification information in the image recognition result is different from the user identification information to be verified, Match, generate a verification result containing alarm information and send it to the access control device.
The method according to claim 2, wherein the image recognition result obtained by identifying the screenshot in the pre-registration information corresponding to the user identification information to be verified includes:

Obtain a sample of health information from multiple regions;

According to the health information samples of the multiple regions, the screenshot in the pre-registration information corresponding to the user identification information to be verified is identified.
The method according to claim 1, characterized in that:

The pre-registration information also includes user identification information;

The query of whether the pre-registration information saved on the day includes the pre-registration information corresponding to the user identification information to be verified includes:

Query whether there is user identification information matching the user identification information to be verified among the user identification information in the pre-registration information saved on the day.
An access control management method, applied to an access control system, is characterized by including:

If the reference user information database includes reference user information that matches the access control collection information collected by the access control equipment, obtain the user identification information to be verified corresponding to the access control collection information;

The user identification information to be verified is sent to the verification server, so that the verification server verifies whether the pre-registration information corresponding to the user identification information to be verified meets the requirements; the pre-registration information includes a screenshot, and the screenshot includes At least one of the following: screenshots of health information and screenshots of itinerary information.
The method of claim 6, wherein the access control system includes a cloud server and at least two edge servers, each edge server corresponding to at least one access control device, and the method further includes:

The cloud server sends reference user information to the edge server.
The method according to claim 7, characterized in that, before the cloud server sends reference user information to the edge server, it also includes:

The cloud server receives the user's real-time location information sent by the user's mobile application;

The cloud server determines the target access control device closest to the user based on the user's real-time location information;

The cloud server sends the saved reference user information of the user to the target access control The edge server corresponding to the device;

or

The cloud server analyzes the access control equipment that the user is expected to arrive on that day based on the access control equipment that the user has arrived at in history;

The cloud server sends the saved reference user information of the user to the edge server corresponding to the access control device that the user is expected to arrive on that day.
The method according to claim 8, characterized in that

The method also includes:

The cloud server analyzes the estimated time the user is expected to arrive at the access control equipment that day based on the user's historical arrival time at the access control equipment or the company's working hours;

Wherein, the cloud server sends the saved reference user information of the user to the edge server corresponding to the access control device that the user is expected to arrive on that day, including: the cloud server sends the saved reference user information at the target time before the expected time. The user's reference user information is sent to the edge server corresponding to the access control device that the user is expected to arrive that day;

or

The method also includes:

The cloud server determines the target distance between the user and the target access control device based on the user's real-time location information;

Wherein, the cloud server sends the saved reference user information of the user to the edge server corresponding to the access control device that the user is expected to arrive on that day, including:

When the target distance is less than the preset distance, the cloud server sends the saved reference user information of the user to the edge server corresponding to the access control device that the user is expected to arrive that day.
The method according to claim 7, characterized in that said obtaining the user identification information to be verified corresponding to the access control collection information further includes:

The edge server determines whether the reference user information database includes reference user information that matches the access control collection information;

If the reference user information database of the edge server includes reference user information matching the access control collection information, enter the step of obtaining the user identification information to be verified corresponding to the access control collection information;

If the reference user information library of the edge server does not include reference user information matching the access control collection information, the access control collection information is sent to the cloud server; the cloud server determines whether the reference user information library includes Reference user information that matches the access control collection information; if the cloud server reference user information database includes reference user information that matches the access control collection information, access to obtain the user identification information to be verified corresponding to the access control collection information A step of.
A verification server, characterized by including:

The first receiving module is configured to receive and save pre-registration information sent by the user's mobile application, where the pre-registration information includes screenshots, and the screenshots include at least one of the following: screenshots of health information and screenshots of itinerary information;

The second receiving module is used to receive the user identification information to be verified sent by the access control system;

A query module, used to query whether the pre-registration information saved on the day includes pre-registration information corresponding to the user identification information to be verified;

The first verification module is used to verify whether the pre-registration information corresponding to the user identification information to be verified meets the requirements and is verified if the pre-registration information saved on the day includes the pre-registration information corresponding to the user identification information to be verified. result;

A control module, configured to generate access control information based on the verification results and send it to the access control device.
An access control system, characterized by including:

The first acquisition module is used to obtain the user identification information to be verified corresponding to the access control collection information if the reference user information database includes reference user information that matches the access control collection information;

A sending module, configured to send the user identification information to be verified to a verification server, so that the verification server verifies whether the pre-registration information corresponding to the user identification information to be verified meets the requirements; the pre-registration information includes screenshots , the screenshots include at least one of the following: screenshots of health information and screenshots of itinerary information.
A verification server, characterized in that it includes: a processor, a memory, and a program stored in the memory and executable on the processor, wherein when the program is executed by the processor, the steps of the access control management method as described in any one of claims 1 to 5 are implemented.
An access control system, characterized in that it includes: a processor, a memory, and a program stored on the memory and executable on the processor. When the program is executed by the processor, it implements claims 6 to The steps of the access control management method described in any one of 10.
A computer-readable storage medium, characterized in that a computer program is stored on the computer-readable storage medium, and when the computer program is executed by a processor, the steps of the access control management method as described in any one of claims 1 to 5 are implemented; or, when the computer program is executed by a processor, the steps of the access control management method as described in any one of claims 6 to 10 are implemented.