WO2018006349A1

WO2018006349A1 - Method and system for verifying user entry based on picture password

Info

Publication number: WO2018006349A1
Application number: PCT/CN2016/089156
Authority: WO
Inventors: 张哲文
Original assignee: 深圳企管加企业服务有限公司
Priority date: 2016-07-07
Filing date: 2016-07-07
Publication date: 2018-01-11

Abstract

A method for verifying user entry based on a picture password, comprising: an intelligent entrance guard receives a registration request of a user and sends the registration request to a remote monitoring server; the intelligent entrance guard prompts the user to input a first registration password comprising pictures and gesture operations and a second registration password comprising a press password after the registration request is accepted, the second registration password comprising a press password for pressing the intelligent entrance guard a preset number of presses within a preset period of time; the intelligent entrance guard receives and verifies the first registration password and the second registration password input by the user, and allows the user to enter after the verification succeeds when the user needs to unlock the intelligent entrance guard. The solution can improve the security and convenience of an intelligent entrance guard and make it convenient for a user to unlock the entrance guard when the user does not carry an entrance guard card.

Description

Method and system for verifying user entry based on picture password

Technical field

The present invention relates to the field of smart access control technologies, and in particular, to a method and system for verifying user entry based on picture passwords.

Background technique

In recent years, smart communities have developed rapidly. Many new communities are equipped with security systems. As the cost of digital system hardware has decreased, more and more communities have used digital signal-based security systems and are beginning to become popular. Unit access control and community access control are the most basic security systems in the smart community. For the resident users, the property will generally issue access cards to unlock the community access control or unit access control. The permissions of each card are different. The access card only allows unlocking the access control of the cell and unit in which it is located, and the basis for opening the door is whether the card number of the user holding the access card is legal.

In some cases, if the access control system permission table is obtained by others, the information of the permission table may be leaked. The person who obtains the permission table may burn the learned card number into the card that is forged, so that the forged card You can get permission to unlock the door. In the prior art, security is usually ensured by encrypting the card number. However, on the one hand, only the IC card can be encrypted, and other such as magnetic cards and ID cards cannot be encrypted, which has limitations. On the other hand, even if the IC card is encrypted, it is not possible to prevent the person who obtained the permission table from copying the access card according to the card number in the permission table.

Therefore, the use of the access card is less secure, and sometimes the resident may forget to carry or lose the access card. At this time, a safe and reliable method of opening the access is needed.

Summary of the invention

The technical problem to be solved by the embodiments of the present invention is to provide a method and system for verifying user entry based on a picture password. To solve the problem of poor security of smart access control.

In order to solve the above technical problem, a first aspect of the embodiments of the present invention provides a method for verifying user entry based on a picture password, including:

The smart access control receives the registration request of the user, and sends the registration request to the remote monitoring server;

The remote monitoring server displays a monitoring screen, prompting the administrator to process the registration request, and the monitoring screen is used to collect a user face image and/or a user identity image that proves that the user is a resident. The administrator confirms the identity of the user;

When the administrator chooses to process the registration request, prompting the administrator to input an administrative password for administrator identity verification, and allowing the administrator to accept or reject the registration request after the administrator authentication is passed;

After the registration request is accepted, the smart door prompts the user to select the pre-stored picture of the smart door through the touch screen. After the user selects the picture, the user is prompted to input at least one gesture operation on the selected picture, according to the user's selection. The picture and the at least one gesture operation input on the picture generate a picture password, and the picture password is used as the first registration password;

After the smart access control collects the first registration password, the user is prompted to input a second registration password, where the second registration password includes a pressing password for pressing the preset number of preset times in the smart access preset area within a preset time period;

When the smart access control needs to be turned on, the smart access control receives the first registration password input by the user and performs verification;

After the first registration password is verified, the smart door prompts the user to input a second registration password;

After the second registration password verification is passed, the user is allowed to enter.

A second aspect of the embodiments of the present invention provides a system, including:

Intelligent access control, configured to receive a registration request of the user, and send the registration request to the remote monitoring server;

The remote monitoring server is configured to display a monitoring screen, and prompt the administrator to process the registration request, where the monitoring screen is used to collect a user face image and/or a user identity image that proves that the user is a resident for the administrator to confirm User identity; when the administrator chooses to process the registration request, prompting the administrator to input an administrative password for administrator identity verification, and allowing the administrator to accept or reject the registration request after the administrator identity verification is passed;

After the registration request is accepted, the smart access control is further configured to prompt the user to select the pre-stored picture by using the touch screen, and after the user selects the picture, prompt the user to input at least one gesture operation on the selected picture, according to The picture selected by the user and the at least one gesture input on the picture generate a picture password, and the picture password is used as the first registration password; after the smart access control collects the first registration password, the user is prompted to input the second registration password. The second registration password includes a pressing password for pressing a predetermined number of preset times in the smart access preset area within a preset time; when the smart access control needs to be enabled, The smart access control receives the first registration password input by the user and performs verification; after the first registration password is verified, the smart access prompts the user to input a second registration password; after the second registration password is verified, Allow users to enter.

Embodiments of the present invention have the following beneficial effects:

By connecting the smart access control and the remote monitoring server to form a smart access control system, the user registers with the smart access control and the remote monitoring server after confirming the identity of the user, ensuring the correctness of the user identity; and then entering the first registration password including the picture and gesture operation and The second registration password including the password is pressed; the user can open the access control by verifying the password, the picture password is safe, and because the second registration password is added, the security is higher than the single password. The input method of the second registration password is pressing, the privacy and the interest are strong, and the user input is extremely convenient, which is beneficial to improving the user experience.

DRAWINGS

In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings to be used in the embodiments will be briefly described below. Obviously, the drawings in the following description are only some of the present invention. For the embodiments, those skilled in the art can obtain other drawings according to the drawings without any creative work.

FIG. 1 is a schematic flowchart of a method for verifying user entry based on a picture password according to an embodiment of the present invention; FIG.

2 is a schematic diagram showing the composition of a system according to an embodiment of the present invention.

detailed description

The technical solutions in the embodiments of the present invention are clearly and completely described in the following with reference to the accompanying drawings in the embodiments of the present invention. It is obvious that the described embodiments are only a part of the embodiments of the present invention, but not all embodiments. All other embodiments obtained by those skilled in the art based on the embodiments of the present invention without creative efforts are within the scope of the present invention.

FIG. 1 is a schematic flowchart of a method for verifying user entry based on a picture password according to an embodiment of the present invention. In this embodiment, the method includes the following steps:

S101. The smart access control receives a registration request of the user, and sends the registration request to the remote monitoring. server.

S102. The remote monitoring server displays a monitoring screen, and prompts the administrator to process the registration request.

The monitoring screen is configured to collect a user face image and/or a user identity image that proves that the user is a resident, so that the administrator confirms the identity of the user. The administrator can manually confirm the identity of the user through the monitoring screen, or the remote monitoring server can automatically match the content of the monitoring screen with the household data such as photos and identity documents stored by the resident on the remote monitoring server to confirm the identity of the user.

S103. When the administrator chooses to process the registration request, prompt the administrator to input an administrative password for administrator identity verification, and after the administrator identity verification passes, allow the administrator to accept or reject the registration request.

The administrator needs to perform authentication before processing the user's registration request, which can prevent the illegal personnel from arbitrarily rejecting the normal registration request of the household or the owner, and can also prevent the illegal person from agreeing to the non-resident or non-owner's illegal registration request at random, and ensuring the household's Security and benefits.

S104, after the registration request is accepted, the smart door prompts the user to select the pre-stored picture of the smart door through the touch screen. After the user selects the picture, the user is prompted to input at least one gesture operation on the selected picture, according to the user. The selected picture and at least one gesture operation input on the picture generate a picture password, and the picture password is used as the first registration password.

Pre-stored photos of smart access can be arranged on the display at one time for users to select and verify, reducing the time for users to find photos. And the picture password contains the picture selected by the user and at least one gesture operation left by the user on the picture, and the security is higher than the regular gesture password. For example, the user selects a picture with a white cloud and two trees, and the user draws a circle on the white cloud, leaving a click on the leaves of the left tree and leaving on the trunk of the right tree. The sliding operation, the user can click OK after the operation is completed. Then, the user needs to continue to select the picture and complete the above three gesture operations, and the sequence of the three gesture operations may be the same or different, which is not limited in the embodiment of the present invention.

S105, after the smart access control collects the first registration password, prompting the user to input a second registration password, where the second registration password includes a pressing password for pressing the preset number of preset times of the smart access preset area within a preset time.

The smart access preset area includes a touch display screen on the smart access control or an area on the smart access control where the pressure sensor is mounted.

If a single picture password is considered to be less secure, a second registration password can be introduced to increase the security of the password. The second registration password is a pressing password for pressing the preset number of times in the smart access preset area within a preset time, for example, pressing 3 times within 5 seconds. Pressing the smart access control as the second registration password increases the interest of password verification; and when pressed, it can be performed while continuously contacting the smart access control, which is more concealed than clicking or tapping. The press must be available after the first registration password is verified, so that when the first registration password is not verified, there is no need to process the detected press, and the user may be prevented from handling the user's misoperation or unintentional operation. Although two passwords are set, the user input is very convenient and simple. Just press the smart access control after entering the first registration password. Compared with a single password, the security of the smart access control is improved, and the complicated process is avoided. The trouble is that the user experience is better.

S106. When the smart access is required to be enabled, the smart access control receives the first registration password input by the user and performs verification.

S107. After the first registration password is verified, the smart door prompts the user to input a second registration password.

It should be noted that, in this embodiment, after the first registration password is verified, the user is prompted to input the second registration password. For a non-local resident, it may be difficult to think that the second registration password is input by pressing the smart access control. High security and concealment. In addition, after the first registration password is verified, the user may not be prompted to input the second registration password, and only the user is prompted to pass the first registration password verification, and the second registration password is input by the user within the preset time after the passage, thereby further improving. The concealment of the second registration password.

S108: After the second registration password verification is passed, the user is allowed to enter.

In this embodiment, by connecting the smart access control and the remote monitoring server to form a smart access control system, the user registers with the smart access control and the remote monitoring server after confirming the identity of the user, ensuring the correctness of the user identity; and then inputting the image and gesture operations. The first registration password and the second registration password including the pressing password; the user can open the access control by verifying the password, the picture password is safe, and since the second registration password is added, the security is relatively simple compared to the single password. The sex is higher, and the input mode of the second registration password is pressing, the privacy and the interest are strong, and the user input is extremely convenient, which is beneficial to improving the user experience.

Optionally, the touch screen of the smart access control is a capacitive screen.

In view of the second registration password being pressed, in order to prevent malicious users from maliciously trying, you can set 3 times to lose. After the entry fails, the user's request is temporarily rejected. If the user is indeed a residential unit, the administrator can contact the remote monitoring server to remotely open the access control by confirming the identity through the monitoring screen.

Optionally, in addition to the smart access control locally saving the first registration password and the second registration password for verification, the remote monitoring server may also perform verification. Although the remote monitoring server may be slightly slower to verify, it can further improve the security. Especially when the smart access control fails to be verified, the remote monitoring server can verify the stability of the system.

When the remote monitoring server is used for verification, the first registration password and the second registration password may be directly sent to the remote monitoring server for storage by the smart access control. Of course, in order to further improve the security and concealment of the second registration password, the second registration password may be appropriately processed and then sent to the remote monitoring server. The specific process is described as follows:

The smart access control multiplies the number of presses in the second registration password by 2 according to a preset rule, where the preset rule is sent by the remote monitoring server to the smart access control after the user's registration request is accepted. To notify the user;

Sending the first registration password and the second registration password to the remote monitoring server for saving;

If the smart access control is unable to perform password verification, prompting the user to select the remote monitoring server for password verification;

Of course, you can also do not prompt here, the user chooses the remote monitoring server to verify.

The smart access control receives a remote monitoring server verification request input by the user, and sends the first registration password and a second registration password multiplied by 2 to the remote monitoring server;

The remote monitoring server controls the smart access to be enabled after the password verification is passed.

Specifically, during verification, the remote monitoring server may perform an inverse operation on the second registration password multiplied by 2 and match the saved second registration password. In this way, compared to the high security of the local authentication of the smart access control, even if the password needs to be transmitted through the network, there is no need to worry about being intercepted and leaking the second registration password.

In the above manner, the second registration password is processed, so that when the access control is normal, the user only needs to press the number of times in the second registration password when the user registers and uses normally, and when the smart access control is damaged by the remote monitoring server, the second The registration password has changed, and this change can further enhance the security of smart access control.

Optionally, when the smart access control is damaged or needs to be updated, the smart access control needs to be replaced. The smart access control sends the first registration password and the second registration password to the remote monitoring server for saving;

When the smart access control is replaced, the remote monitoring server sends the saved password data to the replaced smart access control.

This ensures the integrity and security of user data before and after replacement.

If the user forgets the second registration password, the smart access control receives the call request of the user after successfully verifying the first registration password input by the user;

Sending the call request to the remote monitoring server, or sending the call request to the administrator's mobile phone by short message or telephone;

After the administrator confirms the identity of the user through the monitoring screen, the remote monitoring server receives the remote opening instruction of the administrator, and opens the smart access control.

2 is a schematic diagram of a system configuration of a system according to an embodiment of the present invention. In this embodiment, the system includes: a remote monitoring server 200 and at least one smart access 100. The smart access 100 includes a camera for providing a monitoring screen for the remote monitoring server 200, a touch screen for inputting a picture password, a sensor for sensing pressure, and a verification module for verifying a password. The remote monitoring server 200 includes a display and a server for storing data.

Specifically, the smart access 100 is configured to receive a registration request of the user, and send the registration request to the remote monitoring server;

The remote monitoring server 200 is configured to display a monitoring screen, and prompt the administrator to process the registration request, where the monitoring screen is used to collect a user face image and/or a user identity image that proves that the user is a resident for the administrator Confirming the identity of the user; when the administrator chooses to process the registration request, prompting the administrator to input an administrative password for administrator authentication, and allowing the administrator to accept or reject the registration request after the administrator authentication is passed;

After the registration request is accepted, the smart access 100 is further configured to prompt the user to select the pre-stored picture by using the touch screen. After the user selects the picture, the user is prompted to input at least one gesture operation on the selected picture. Generating a picture password according to the picture selected by the user and the at least one gesture operation input on the picture, using the picture password as the first registration password; after the smart access control collects the first registration password, prompting the user to input the second registration password The second registration password includes a pressing password for pressing a predetermined number of preset times in the smart access preset area within a preset time; when the smart door needs to be opened When the time is disabled, the smart access control receives the first registration password input by the user and performs verification; after the first registration password is verified, the smart access prompts the user to input a second registration password; when the second registration password is verified After passing, the user is allowed to enter.

Optionally, the smart access 100 is further configured to:

Multiplying the number of presses in the second registration password by 2 according to a preset rule, wherein the preset rule is sent by the remote monitoring server 200 to the smart door 100 after the user's registration request is accepted to notify Sending the first registration password and the second registration password to the remote monitoring server 200; if the smart door 100 is forbidden to perform password verification, prompting the user to select the remote monitoring server 200 for password verification Receiving a remote monitoring server verification request input by the user, sending the first registration password and the second registration password multiplied by 2 to the remote monitoring server 200;

The remote monitoring server 200 is further configured to control the smart access opening after the password verification is passed.

Optionally, the smart access 100 is further configured to:

Sending the first registration password and the second registration password to the remote monitoring server 200 for saving;

The remote monitoring server 200 is further configured to:

When the smart door 100 is replaced, the remote monitoring server 200 transmits the saved password data to the replaced smart door.

Optionally, if the user forgets the second registration password, the smart access 100 is further configured to: after the first registration password input by the user is successfully verified, receive a call request of the user; send the call request to the Remotely monitoring the server 200, or sending the call request to the administrator's mobile phone by short message or by telephone;

After the administrator confirms the identity of the user through the monitoring screen, the remote monitoring server 200 is further configured to receive the remote start command of the administrator to enable the smart access.

The touch screen of the smart access control is a capacitive screen.

It should be noted that each embodiment in this specification is described in a progressive manner, each of which is The embodiments are mainly described as being different from the other embodiments, and the same similar parts between the respective embodiments can be referred to each other. For the device embodiment, since it is basically similar to the method embodiment, the description is relatively simple, and the relevant parts can be referred to the description of the method embodiment.

Through the description of the above embodiments, the present invention has the following advantages:

One of ordinary skill in the art can understand that all or part of the process of implementing the foregoing embodiments can be completed by a computer program to instruct related hardware, and the program can be stored in a computer readable storage medium. When executed, the flow of an embodiment of the methods as described above may be included. The storage medium may be a magnetic disk, an optical disk, a read-only memory (ROM), or a random access memory (RAM).

The above is only the preferred embodiment of the present invention, and the scope of the present invention is not limited thereto, and thus equivalent changes made in the claims of the present invention are still within the scope of the present invention.

Claims

A method for verifying user entry based on a picture password, comprising:

The smart access control receives the registration request of the user, and sends the registration request to the remote monitoring server;

The remote monitoring server displays a monitoring screen, prompting the administrator to process the registration request, and the monitoring screen is configured to collect a user face image and/or a user identity image that proves that the user is a resident, so that the administrator confirms the user identity;

When the administrator chooses to process the registration request, prompting the administrator to input an administrative password for administrator identity verification, and allowing the administrator to accept or reject the registration request after the administrator authentication is passed;

After the registration request is accepted, the smart door prompts the user to select the pre-stored picture of the smart door through the touch screen. After the user selects the picture, the user is prompted to input at least one gesture operation on the selected picture, according to the user's selection. The picture and the at least one gesture operation input on the picture generate a picture password, and the picture password is used as the first registration password;

After the smart access control collects the first registration password, the user is prompted to input a second registration password, where the second registration password includes a pressing password for pressing the preset number of preset times in the smart access preset area within a preset time period;

When the smart access control needs to be turned on, the smart access control receives the first registration password input by the user and performs verification;

After the first registration password is verified, the smart door prompts the user to input a second registration password;

After the second registration password verification is passed, the user is allowed to enter.
The method of claim 1 further comprising:

The smart access control multiplies the number of presses in the second registration password by 2 according to a preset rule, where the preset rule is sent by the remote monitoring server to the smart access control after the user's registration request is accepted. To notify the user;

Sending the first registration password and the second registration password to the remote monitoring server for saving;

If the smart access control is unable to perform password verification, prompting the user to select the remote monitoring server for password verification;

The smart access control receives a remote monitoring server verification request input by the user, and sends the first registration password and a second registration password multiplied by 2 to the remote monitoring server;

The remote monitoring server controls the smart access to be enabled after the password verification is passed.
The method of claim 1 further comprising:

The smart access control sends the first registration password and the second registration password to the remote monitoring server for saving;

When the smart access control is replaced, the remote monitoring server sends the saved password data to the replaced smart access control.
The method according to claim 1, wherein if the user forgets the second registration password, the smart access control receives the call request of the user after the first registration password input by the user is successfully verified;

Sending the call request to the remote monitoring server, or sending the call request to the administrator's mobile phone by short message or telephone;

After the administrator confirms the identity of the user through the monitoring screen, the remote monitoring server receives the remote opening instruction of the administrator, and opens the smart access control.
The method according to any one of claims 1 to 4, wherein the touch screen of the smart access control is a capacitive screen.
A system, comprising:

Intelligent access control, configured to receive a registration request of the user, and send the registration request to the remote monitoring server;

The remote monitoring server is configured to display a monitoring screen, and prompt the administrator to process the registration request, where the monitoring screen is used to collect a user face image and/or a user identity image that proves that the user is a resident for the administrator to confirm User identity; when the administrator chooses to process the registration request, prompting the administrator to input an administrative password for administrator identity verification, and allowing the administrator to accept or reject the registration request after the administrator identity verification is passed;

After the registration request is accepted, the smart access control is further configured to prompt the user to select the pre-stored picture by using the touch screen, and after the user selects the picture, prompt the user to input at least one gesture operation on the selected picture, according to The picture selected by the user and the at least one gesture input on the picture generate a picture password, and the picture password is used as the first registration password; after the smart access control collects the first registration password, the user is prompted to input the second registration password. The second registration password includes a pressing password for pressing the smart access control preset area a preset number of times within a preset time; when the smart access control needs to be enabled, the smart access control receives the first registration password input by the user and performs verification; After the first registration password is verified, the smart door prompts the user to input a second registration password; after the second registration password is verified, the user is allowed to enter.
The system of claim 6 wherein said smart access control is further for:

Multiplying the number of presses in the second registration password by 2 according to a preset rule, wherein the preset rule is sent by the remote monitoring server to the smart door to notify the user after the user's registration request is accepted; Sending the first registration password and the second registration password to the remote monitoring server for saving; if the smart access control is unable to perform password verification, prompting the user to select the remote monitoring server for password verification; receiving the remote input by the user Monitoring the server verification request, sending the first registration password and the second registration password after multiplying by 2 to the remote monitoring server;

The remote monitoring server is further configured to control the smart access opening after the password verification is passed.
The system of claim 6 wherein said smart access control is further for:

Sending the first registration password and the second registration password to the remote monitoring server for saving;

The remote monitoring server is also used to:

When the smart access control is replaced, the remote monitoring server sends the saved password data to the replaced smart access control.
The system according to claim 6, wherein if the user forgets the second registration password, the smart access control is further configured to receive a call request of the user after the first registration password input by the user is successfully verified; The call request is sent to the remote monitoring server or the call is made Request to send to the administrator's mobile phone by short message or by phone;

After the administrator confirms the identity of the user through the monitoring screen, the remote monitoring server is further configured to receive the remote start command of the administrator to enable the smart access control.
The system of any of claims 6-9, wherein the touch screen of the smart access control is a capacitive screen.