+

WO2018006349A1 - Procédé et système de vérification de l'entrée d'un utilisateur sur la base d'un mot de passe de type image - Google Patents

Procédé et système de vérification de l'entrée d'un utilisateur sur la base d'un mot de passe de type image Download PDF

Info

Publication number
WO2018006349A1
WO2018006349A1 PCT/CN2016/089156 CN2016089156W WO2018006349A1 WO 2018006349 A1 WO2018006349 A1 WO 2018006349A1 CN 2016089156 W CN2016089156 W CN 2016089156W WO 2018006349 A1 WO2018006349 A1 WO 2018006349A1
Authority
WO
WIPO (PCT)
Prior art keywords
user
password
registration
access control
smart access
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Ceased
Application number
PCT/CN2016/089156
Other languages
English (en)
Chinese (zh)
Inventor
张哲文
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Shenzhen Corporate Management&service Co ltd
Original Assignee
Shenzhen Corporate Management&service Co ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Shenzhen Corporate Management&service Co ltd filed Critical Shenzhen Corporate Management&service Co ltd
Priority to PCT/CN2016/089156 priority Critical patent/WO2018006349A1/fr
Publication of WO2018006349A1 publication Critical patent/WO2018006349A1/fr
Anticipated expiration legal-status Critical
Ceased legal-status Critical Current

Links

Images

Classifications

    • G—PHYSICS
    • G07—CHECKING-DEVICES
    • G07C—TIME OR ATTENDANCE REGISTERS; REGISTERING OR INDICATING THE WORKING OF MACHINES; GENERATING RANDOM NUMBERS; VOTING OR LOTTERY APPARATUS; ARRANGEMENTS, SYSTEMS OR APPARATUS FOR CHECKING NOT PROVIDED FOR ELSEWHERE
    • G07C9/00—Individual registration on entry or exit

Definitions

  • the present invention relates to the field of smart access control technologies, and in particular, to a method and system for verifying user entry based on picture passwords.
  • the access control system permission table is obtained by others, the information of the permission table may be leaked.
  • the person who obtains the permission table may burn the learned card number into the card that is forged, so that the forged card You can get permission to unlock the door.
  • security is usually ensured by encrypting the card number.
  • only the IC card can be encrypted, and other such as magnetic cards and ID cards cannot be encrypted, which has limitations.
  • the IC card is encrypted, it is not possible to prevent the person who obtained the permission table from copying the access card according to the card number in the permission table.
  • the use of the access card is less secure, and sometimes the resident may forget to carry or lose the access card. At this time, a safe and reliable method of opening the access is needed.
  • the technical problem to be solved by the embodiments of the present invention is to provide a method and system for verifying user entry based on a picture password. To solve the problem of poor security of smart access control.
  • a first aspect of the embodiments of the present invention provides a method for verifying user entry based on a picture password, including:
  • the smart access control receives the registration request of the user, and sends the registration request to the remote monitoring server;
  • the remote monitoring server displays a monitoring screen, prompting the administrator to process the registration request, and the monitoring screen is used to collect a user face image and/or a user identity image that proves that the user is a resident.
  • the administrator confirms the identity of the user;
  • the smart door After the registration request is accepted, the smart door prompts the user to select the pre-stored picture of the smart door through the touch screen. After the user selects the picture, the user is prompted to input at least one gesture operation on the selected picture, according to the user's selection.
  • the picture and the at least one gesture operation input on the picture generate a picture password, and the picture password is used as the first registration password;
  • the user After the smart access control collects the first registration password, the user is prompted to input a second registration password, where the second registration password includes a pressing password for pressing the preset number of preset times in the smart access preset area within a preset time period;
  • the smart access control When the smart access control needs to be turned on, the smart access control receives the first registration password input by the user and performs verification;
  • the smart door After the first registration password is verified, the smart door prompts the user to input a second registration password
  • a second aspect of the embodiments of the present invention provides a system, including:
  • Intelligent access control configured to receive a registration request of the user, and send the registration request to the remote monitoring server;
  • the remote monitoring server is configured to display a monitoring screen, and prompt the administrator to process the registration request, where the monitoring screen is used to collect a user face image and/or a user identity image that proves that the user is a resident for the administrator to confirm User identity; when the administrator chooses to process the registration request, prompting the administrator to input an administrative password for administrator identity verification, and allowing the administrator to accept or reject the registration request after the administrator identity verification is passed;
  • the smart access control is further configured to prompt the user to select the pre-stored picture by using the touch screen, and after the user selects the picture, prompt the user to input at least one gesture operation on the selected picture, according to The picture selected by the user and the at least one gesture input on the picture generate a picture password, and the picture password is used as the first registration password; after the smart access control collects the first registration password, the user is prompted to input the second registration password.
  • the second registration password includes a pressing password for pressing a predetermined number of preset times in the smart access preset area within a preset time; when the smart access control needs to be enabled, The smart access control receives the first registration password input by the user and performs verification; after the first registration password is verified, the smart access prompts the user to input a second registration password; after the second registration password is verified, Allow users to enter.
  • the user By connecting the smart access control and the remote monitoring server to form a smart access control system, the user registers with the smart access control and the remote monitoring server after confirming the identity of the user, ensuring the correctness of the user identity; and then entering the first registration password including the picture and gesture operation and The second registration password including the password is pressed; the user can open the access control by verifying the password, the picture password is safe, and because the second registration password is added, the security is higher than the single password.
  • the input method of the second registration password is pressing, the privacy and the interest are strong, and the user input is extremely convenient, which is beneficial to improving the user experience.
  • FIG. 1 is a schematic flowchart of a method for verifying user entry based on a picture password according to an embodiment of the present invention
  • FIG. 2 is a schematic diagram showing the composition of a system according to an embodiment of the present invention.
  • FIG. 1 is a schematic flowchart of a method for verifying user entry based on a picture password according to an embodiment of the present invention.
  • the method includes the following steps:
  • the smart access control receives a registration request of the user, and sends the registration request to the remote monitoring. server.
  • the remote monitoring server displays a monitoring screen, and prompts the administrator to process the registration request.
  • the monitoring screen is configured to collect a user face image and/or a user identity image that proves that the user is a resident, so that the administrator confirms the identity of the user.
  • the administrator can manually confirm the identity of the user through the monitoring screen, or the remote monitoring server can automatically match the content of the monitoring screen with the household data such as photos and identity documents stored by the resident on the remote monitoring server to confirm the identity of the user.
  • the administrator needs to perform authentication before processing the user's registration request, which can prevent the illegal personnel from arbitrarily rejecting the normal registration request of the household or the owner, and can also prevent the illegal person from agreeing to the non-resident or non-owner's illegal registration request at random, and ensuring the household's Security and benefits.
  • the smart door prompts the user to select the pre-stored picture of the smart door through the touch screen. After the user selects the picture, the user is prompted to input at least one gesture operation on the selected picture, according to the user.
  • the selected picture and at least one gesture operation input on the picture generate a picture password, and the picture password is used as the first registration password.
  • Pre-stored photos of smart access can be arranged on the display at one time for users to select and verify, reducing the time for users to find photos.
  • the picture password contains the picture selected by the user and at least one gesture operation left by the user on the picture, and the security is higher than the regular gesture password.
  • the user selects a picture with a white cloud and two trees, and the user draws a circle on the white cloud, leaving a click on the leaves of the left tree and leaving on the trunk of the right tree.
  • the sliding operation the user can click OK after the operation is completed. Then, the user needs to continue to select the picture and complete the above three gesture operations, and the sequence of the three gesture operations may be the same or different, which is not limited in the embodiment of the present invention.
  • the smart access preset area includes a touch display screen on the smart access control or an area on the smart access control where the pressure sensor is mounted.
  • a second registration password can be introduced to increase the security of the password.
  • the second registration password is a pressing password for pressing the preset number of times in the smart access preset area within a preset time, for example, pressing 3 times within 5 seconds. Pressing the smart access control as the second registration password increases the interest of password verification; and when pressed, it can be performed while continuously contacting the smart access control, which is more concealed than clicking or tapping.
  • the press must be available after the first registration password is verified, so that when the first registration password is not verified, there is no need to process the detected press, and the user may be prevented from handling the user's misoperation or unintentional operation.
  • two passwords are set, the user input is very convenient and simple. Just press the smart access control after entering the first registration password. Compared with a single password, the security of the smart access control is improved, and the complicated process is avoided. The trouble is that the user experience is better.
  • the smart access control receives the first registration password input by the user and performs verification.
  • the smart door prompts the user to input a second registration password.
  • the user is prompted to input the second registration password.
  • the second registration password is input by pressing the smart access control. High security and concealment.
  • the user may not be prompted to input the second registration password, and only the user is prompted to pass the first registration password verification, and the second registration password is input by the user within the preset time after the passage, thereby further improving. The concealment of the second registration password.
  • the user by connecting the smart access control and the remote monitoring server to form a smart access control system, the user registers with the smart access control and the remote monitoring server after confirming the identity of the user, ensuring the correctness of the user identity; and then inputting the image and gesture operations.
  • the first registration password and the second registration password including the pressing password; the user can open the access control by verifying the password, the picture password is safe, and since the second registration password is added, the security is relatively simple compared to the single password.
  • the sex is higher, and the input mode of the second registration password is pressing, the privacy and the interest are strong, and the user input is extremely convenient, which is beneficial to improving the user experience.
  • the touch screen of the smart access control is a capacitive screen.
  • the second registration password in order to prevent malicious users from maliciously trying, you can set 3 times to lose. After the entry fails, the user's request is temporarily rejected. If the user is indeed a residential unit, the administrator can contact the remote monitoring server to remotely open the access control by confirming the identity through the monitoring screen.
  • the remote monitoring server may also perform verification.
  • the remote monitoring server may be slightly slower to verify, it can further improve the security.
  • the remote monitoring server can verify the stability of the system.
  • the first registration password and the second registration password may be directly sent to the remote monitoring server for storage by the smart access control.
  • the second registration password may be appropriately processed and then sent to the remote monitoring server. The specific process is described as follows:
  • the smart access control multiplies the number of presses in the second registration password by 2 according to a preset rule, where the preset rule is sent by the remote monitoring server to the smart access control after the user's registration request is accepted. To notify the user;
  • the smart access control receives a remote monitoring server verification request input by the user, and sends the first registration password and a second registration password multiplied by 2 to the remote monitoring server;
  • the remote monitoring server controls the smart access to be enabled after the password verification is passed.
  • the remote monitoring server may perform an inverse operation on the second registration password multiplied by 2 and match the saved second registration password. In this way, compared to the high security of the local authentication of the smart access control, even if the password needs to be transmitted through the network, there is no need to worry about being intercepted and leaking the second registration password.
  • the second registration password is processed, so that when the access control is normal, the user only needs to press the number of times in the second registration password when the user registers and uses normally, and when the smart access control is damaged by the remote monitoring server, the second The registration password has changed, and this change can further enhance the security of smart access control.
  • the smart access control when the smart access control is damaged or needs to be updated, the smart access control needs to be replaced.
  • the smart access control sends the first registration password and the second registration password to the remote monitoring server for saving;
  • the remote monitoring server sends the saved password data to the replaced smart access control.
  • the smart access control receives the call request of the user after successfully verifying the first registration password input by the user;
  • the remote monitoring server After the administrator confirms the identity of the user through the monitoring screen, the remote monitoring server receives the remote opening instruction of the administrator, and opens the smart access control.
  • the system includes: a remote monitoring server 200 and at least one smart access 100.
  • the smart access 100 includes a camera for providing a monitoring screen for the remote monitoring server 200, a touch screen for inputting a picture password, a sensor for sensing pressure, and a verification module for verifying a password.
  • the remote monitoring server 200 includes a display and a server for storing data.
  • the smart access 100 is configured to receive a registration request of the user, and send the registration request to the remote monitoring server;
  • the remote monitoring server 200 is configured to display a monitoring screen, and prompt the administrator to process the registration request, where the monitoring screen is used to collect a user face image and/or a user identity image that proves that the user is a resident for the administrator Confirming the identity of the user; when the administrator chooses to process the registration request, prompting the administrator to input an administrative password for administrator authentication, and allowing the administrator to accept or reject the registration request after the administrator authentication is passed;
  • the smart access 100 is further configured to prompt the user to select the pre-stored picture by using the touch screen. After the user selects the picture, the user is prompted to input at least one gesture operation on the selected picture. Generating a picture password according to the picture selected by the user and the at least one gesture operation input on the picture, using the picture password as the first registration password; after the smart access control collects the first registration password, prompting the user to input the second registration password
  • the second registration password includes a pressing password for pressing a predetermined number of preset times in the smart access preset area within a preset time; when the smart door needs to be opened When the time is disabled, the smart access control receives the first registration password input by the user and performs verification; after the first registration password is verified, the smart access prompts the user to input a second registration password; when the second registration password is verified After passing, the user is allowed to enter.
  • the smart access 100 is further configured to:
  • Multiplying the number of presses in the second registration password by 2 according to a preset rule wherein the preset rule is sent by the remote monitoring server 200 to the smart door 100 after the user's registration request is accepted to notify Sending the first registration password and the second registration password to the remote monitoring server 200; if the smart door 100 is forbidden to perform password verification, prompting the user to select the remote monitoring server 200 for password verification Receiving a remote monitoring server verification request input by the user, sending the first registration password and the second registration password multiplied by 2 to the remote monitoring server 200;
  • the remote monitoring server 200 is further configured to control the smart access opening after the password verification is passed.
  • the smart access 100 is further configured to:
  • the remote monitoring server 200 is further configured to:
  • the remote monitoring server 200 transmits the saved password data to the replaced smart door.
  • the smart access 100 is further configured to: after the first registration password input by the user is successfully verified, receive a call request of the user; send the call request to the Remotely monitoring the server 200, or sending the call request to the administrator's mobile phone by short message or by telephone;
  • the remote monitoring server 200 is further configured to receive the remote start command of the administrator to enable the smart access.
  • the smart access preset area includes a touch display screen on the smart access control or an area on the smart access control where the pressure sensor is mounted.
  • the touch screen of the smart access control is a capacitive screen.
  • the present invention has the following advantages:
  • the user By connecting the smart access control and the remote monitoring server to form a smart access control system, the user registers with the smart access control and the remote monitoring server after confirming the identity of the user, ensuring the correctness of the user identity; and then entering the first registration password including the picture and gesture operation and The second registration password including the password is pressed; the user can open the access control by verifying the password, the picture password is safe, and because the second registration password is added, the security is higher than the single password.
  • the input method of the second registration password is pressing, the privacy and the interest are strong, and the user input is extremely convenient, which is beneficial to improving the user experience.
  • the storage medium may be a magnetic disk, an optical disk, a read-only memory (ROM), or a random access memory (RAM).

Landscapes

  • Physics & Mathematics (AREA)
  • General Physics & Mathematics (AREA)
  • Telephonic Communication Services (AREA)

Abstract

La présente invention concerne un procédé de vérification de l'entrée d'un utilisateur sur la base d'un mot de passe de type image, consistant : à recevoir, par un dispositif de protection d'entrée intelligent, une demande d'enregistrement d'un utilisateur et à envoyer la demande d'enregistrement à un serveur de surveillance à distance ; à inviter l'utilisateur, par le dispositif de protection d'entrée intelligent, à entrer un premier mot de passe d'enregistrement comprenant des images et des opérations gestuelles et un second mot de passe d'enregistrement comprenant un mot de passe de type appui après acceptation de la demande d'enregistrement, le second mot de passe d'enregistrement comprenant un mot de passe de type appui pour appuyer sur le dispositif de protection d'entrée intelligent un nombre prédéterminé de pressions pendant une période prédéterminée ; à recevoir et à vérifier, par le dispositif de protection d'entrée intelligent, le premier mot de passe d'enregistrement et le second mot de passe d'enregistrement entrés par l'utilisateur, et à autoriser l'utilisateur à entrer après réussite de la vérification lorsque l'utilisateur a besoin de déverrouiller le dispositif de protection d'entrée intelligent. La solution peut améliorer la sécurité et l'aspect pratique d'un dispositif de protection d'entrée intelligent et permettre à un utilisateur de déverrouiller le dispositif de protection d'entrée avec plus de facilité lorsqu'il ne porte pas de carte de protection d'entrée.
PCT/CN2016/089156 2016-07-07 2016-07-07 Procédé et système de vérification de l'entrée d'un utilisateur sur la base d'un mot de passe de type image Ceased WO2018006349A1 (fr)

Priority Applications (1)

Application Number Priority Date Filing Date Title
PCT/CN2016/089156 WO2018006349A1 (fr) 2016-07-07 2016-07-07 Procédé et système de vérification de l'entrée d'un utilisateur sur la base d'un mot de passe de type image

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
PCT/CN2016/089156 WO2018006349A1 (fr) 2016-07-07 2016-07-07 Procédé et système de vérification de l'entrée d'un utilisateur sur la base d'un mot de passe de type image

Publications (1)

Publication Number Publication Date
WO2018006349A1 true WO2018006349A1 (fr) 2018-01-11

Family

ID=60901456

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2016/089156 Ceased WO2018006349A1 (fr) 2016-07-07 2016-07-07 Procédé et système de vérification de l'entrée d'un utilisateur sur la base d'un mot de passe de type image

Country Status (1)

Country Link
WO (1) WO2018006349A1 (fr)

Cited By (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN108512850A (zh) * 2018-04-02 2018-09-07 广东能龙教育股份有限公司 一种基于问答题目的智能验证码的处理方法
CN109118621A (zh) * 2018-07-24 2019-01-01 石数字技术成都有限公司 一种人脸识别门禁的人脸注册系统和在门禁控制的应用
CN114863592A (zh) * 2021-04-30 2022-08-05 江阴邦融微电子有限公司 一种wifi智能门锁远程开锁方法

Citations (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101626417A (zh) * 2008-07-08 2010-01-13 鸿富锦精密工业（深圳）有限公司 移动终端身份认证的方法
CN103886658A (zh) * 2014-01-28 2014-06-25 北京中科虹霸科技有限公司 基于多模态生物识别的分布式物联网锁设备及其开锁方法
US20140349618A1 (en) * 2013-05-21 2014-11-27 Yung-Chien Che System for Actively Notifying Instant Messages and Locations in a Certain Area and Method Therefor
CN105096423A (zh) * 2015-04-28 2015-11-25 武汉理工大学 一种基于二维码的学生公寓智能门禁系统及控制方法
CN105869255A (zh) * 2016-06-12 2016-08-17 深圳益强信息科技有限公司 一种基于移动终端的智能门禁控制方法及系统
CN106097500A (zh) * 2016-06-12 2016-11-09 深圳益强信息科技有限公司 一种响应用户进入的方法及系统

Patent Citations (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101626417A (zh) * 2008-07-08 2010-01-13 鸿富锦精密工业（深圳）有限公司 移动终端身份认证的方法
US20140349618A1 (en) * 2013-05-21 2014-11-27 Yung-Chien Che System for Actively Notifying Instant Messages and Locations in a Certain Area and Method Therefor
CN103886658A (zh) * 2014-01-28 2014-06-25 北京中科虹霸科技有限公司 基于多模态生物识别的分布式物联网锁设备及其开锁方法
CN105096423A (zh) * 2015-04-28 2015-11-25 武汉理工大学 一种基于二维码的学生公寓智能门禁系统及控制方法
CN105869255A (zh) * 2016-06-12 2016-08-17 深圳益强信息科技有限公司 一种基于移动终端的智能门禁控制方法及系统
CN106097500A (zh) * 2016-06-12 2016-11-09 深圳益强信息科技有限公司 一种响应用户进入的方法及系统

Cited By (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN108512850A (zh) * 2018-04-02 2018-09-07 广东能龙教育股份有限公司 一种基于问答题目的智能验证码的处理方法
CN109118621A (zh) * 2018-07-24 2019-01-01 石数字技术成都有限公司 一种人脸识别门禁的人脸注册系统和在门禁控制的应用
CN114863592A (zh) * 2021-04-30 2022-08-05 江阴邦融微电子有限公司 一种wifi智能门锁远程开锁方法
CN114863592B (zh) * 2021-04-30 2024-02-27 江阴邦融微电子有限公司 一种wifi智能门锁远程开锁方法

Similar Documents

Publication Publication Date Title
CA2798071C (fr) Methodes et systemes pour augmenter la securite des transactions sur reseau
CN106453874B (zh) 手机控制方法及系统
US20160366588A1 (en) User mode control method and system based on iris recognition technology for mobile terminal
WO2016114841A1 (fr) Jeton d'authentification forte à multiples utilisateurs
WO2018006332A1 (fr) Procédé et système de gestion d'un dispositif de sécurité d'entrée intelligent basés sur un terminal mobile
US10282532B2 (en) Secure storage of fingerprint related elements
CN111131202A (zh) 基于多重信息认证的身份认证方法及系统
CN105703909A (zh) 一种认证方法及电子设备
WO2017166689A1 (fr) Procédé et dispositif de protection de la confidentialité
US20150047019A1 (en) Information processing method and electronic device
EP3443501B1 (fr) Accès à un compte
WO2018006318A1 (fr) Procédé et système d'utilisation d'un protecteur d'accès intelligent à partir d'un terminal mobile
WO2018006349A1 (fr) Procédé et système de vérification de l'entrée d'un utilisateur sur la base d'un mot de passe de type image
WO2018006326A1 (fr) Procédé et système de vérification basés sur un dispositif de sécurité d'entrée intelligent au moyen d'un terminal mobile et d'un mot de passe de type image
WO2018006322A1 (fr) Procédé et système d'alarme basés sur un terminal mobile
WO2018006353A1 (fr) Procédé et système d'utilisation d'un dispositif de sécurité d'entrée intelligent basés sur un terminal mobile et un mot de passe image
WO2018006325A1 (fr) Procédé et système de vérification d'entrée d'un utilisateur
WO2018006344A1 (fr) Procédé et système d'exploitation à base d'ultrasons destinés à une commande d'accès intelligente
WO2018006328A1 (fr) Procédé de gestion de protection d'entrée intelligente et système de protection d'entrée intelligente
WO2018006338A1 (fr) Procédé et système de fonctionnement basé sur des communications optiques pour une commande d'accès intelligente
WO2018006345A1 (fr) Procédé et système de vérification de sentinelle intelligente à base d'onde ultrasonique
WO2018006330A1 (fr) Procédé et système pour déverrouiller une protection d'entrée intelligente sur la base d'une carte d'identité
WO2018006339A1 (fr) Procédé et système de vérification de protection d'entrée intelligente basés sur une communication optique
WO2018006343A1 (fr) Procédé et système de gestion de sentinelle intelligente à base d'onde ultrasonique
WO2018006352A1 (fr) Procédé et système de gestion d'un dispositif de sécurité d'entrée intelligent basés sur un terminal mobile

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 16907854

Country of ref document: EP

Kind code of ref document: A1

NENP Non-entry into the national phase

Ref country code: DE

122 Ep: pct application non-entry in european phase

Ref document number: 16907854

Country of ref document: EP

Kind code of ref document: A1

点击 这是indexloc提供的php浏览器服务，不要输入任何密码和下载