CN103390297A - Multiple security control security system and security information processing method - Google Patents

Multiple security control security system and security information processing method Download PDF

Info

Publication number
CN103390297A
CN103390297A CN2012101395593A CN201210139559A CN103390297A CN 103390297 A CN103390297 A CN 103390297A CN 2012101395593 A CN2012101395593 A CN 2012101395593A CN 201210139559 A CN201210139559 A CN 201210139559A CN 103390297 A CN103390297 A CN 103390297A
Authority
CN
China
Prior art keywords
authentication
secure device
personnel
security
time
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Pending
Application number
CN2012101395593A
Other languages
Chinese (zh)
Inventor
李鸿生
许证渊
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
SHINSOFT CO Ltd
Original Assignee
SHINSOFT CO Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by SHINSOFT CO Ltd filed Critical SHINSOFT CO Ltd
Priority to CN2012101395593A priority Critical patent/CN103390297A/en
Publication of CN103390297A publication Critical patent/CN103390297A/en
Pending legal-status Critical Current

Links

Images

Landscapes

  • Lock And Its Accessories (AREA)

Abstract

The invention relates to a multiple security control security system and a security information processing method. The multiple security control security system is linked to a body to be protected. An embodiment is a security device with a door lock connected with a body to be protected. The security device is connected to a management center through a communication function. According to the embodiment of the invention, the security device comprises a micro-processing unit used for executing signal processing of elements in the security device, an authentication interface unit allowing personnel to execute identity authentication, an access control unit linked with the door lock, the communication unit used for connecting to the management center, and a memory unit used for storing authentication information and a dynamic password operation program. Multiple security authentication provided by the system comprises the authentication modes of an identifier produced according to an authentication device held by the personnel, and a dynamic password produced according to system information. With the security authentication, security of the body to be protected is enhanced. According to the multiple security control security system and the security information processing method, dual or multiple authentication programs are utilized, such that the security of a specific place is ensured.

Description

Maltilevel security control safety system with save information processing method from damage
Technical field
The present invention relates to a kind of maltilevel security control safety system and save information processing method from damage, particularly being applied to specific preservation measures of saving place turnover entrance from damage, setting up a safety system with maltilevel security authentication techniques.
Background technology
Security in order to ensure specific occasion, special as bank vault, enter and exit door, known technology proposes multiple safety practice, comprises sending to appoint saving personnel from damage, with the personnel that enter of these occasions of authentication mechanism control of complexity, with the measures such as intensity that improve door mechanism, guaranteeing security.
Proof box or the national treasury of known technology as being applied to, the technology of saving from damage of this respect mainly provides one to have the lock that prevents the firm ectosome that destroys and have secret and anti-theft feature, correlation technique once had the fit structure of known technology such as Taiwan new patent M335550 disclosed cashbox coded lock antitheft mechanism and No. 158304 disclosed national treasury electronic password lock, but these are mainly the technology and the wherein design of special construction of application conventional cipher lock.
Preservation measures for proof box or national treasury, may have the measure of alarm, when improper invasion or the behavior of unlatching are arranged, can give the alarm, known technology once had the proof box of No. 148345 disclosed tool warning system of Taiwan patent, this technology is mainly to be provided with alarm circuit in proof box, can produce wireless signal after triggering, and produces alarm after being received by warning horn.
In recent years, development due to short-range radio communication, this type of communication mode with security also can be applicable in the preservation measures of specific occasion, known technology as shown in Figure 1 is that a kind of active rfid door lock is saved control structure (No. M388690th, Taiwan patent from damage, the day for announcing: 2010/09/11), wherein applied with radio-frequency (RF) identification (RFID) utilization in door lock is saved from damage.
The door lock that shows in Fig. 1 is saved control structure from damage and is comprised an active wireless radio frequency unit 10, and wherein element mainly contains the first antenna 101 and chip 103, is loaded with identifier in chip 103.When this active wireless radio frequency unit 10 started, identifier changed into signal via circuit, by means of the first antenna 101 transmission.
Door lock is saved from damage in control structure and is had a main control system 12, wherein element mainly contains the second antenna 121, receiver 123 and processor 125, corresponding with the first antenna 101 formation signals in active wireless radio frequency unit 10, the processor 125 of main control system 12 connects the keying of controlling a warning horn 16 with signal wire.
Above-mentionedly respectively hold system that element forms also to include a sensing apparatus 14 of being located at the object of protection outside, function is the sensing range of induction invader access to plant.
The means of this technology are mainly the authentication modes whether the radio RF recognition technology conduct of 12 of application active wireless radio frequency unit 10 and main control systems starts or close preservation measures.In the time of in sensing apparatus 14 has been sensed personnel's entry range, personnel should utilize the identifier that active wireless radio frequency unit 10 will be wherein contained to be sent to main control system 12, after wherein receiver 123 receives, judge and whether with registered identifier, conform to, judge whether whereby to utilize warning horn 16 to produce alarm.
Summary of the invention
The various preservation measures that propose in view of known technology still possess the defect that system itself is arranged, as easily being tampered, invading, defect on still may having safely and the doubt of security deficiency, therefore the present invention proposes in specific occasion a kind of maltilevel security measure of control of (as national treasury, turnover entrance), by multiple preservation measures arrange in pairs or groups each other, message exchange strengthens survival capability.
The present invention describes a kind of maltilevel security control safety system and saves information processing method from damage.Maltilevel security control safety system comprises that one is linked in the secure device of external management center and inner protected main body door lock, and secure device is online in administrative center with communication function, and administrative center can communicate by letter with secure device in system, and grasps operating state.
Secure device includes the internal memory of carrying out microprocessing unit, the authentication interface unit that the personnel of acceptance carry out authentication, the access control unit that is linked in the door lock of protected main body, communication unit and record authentication information that in secure device, each element signal is processed, and internal memory records the program of computing dynamic password (dynamic password).
In other words, the invention provides a kind of maltilevel security control safety system, be linked in a protected main body, described system comprises: one is online in an administrative center of this secure device, and this administrative center receives the signal of this secure device; One is linked in the secure device of this protected main body, this secure device comprises: a microprocessing unit and an authentication interface unit, microprocessing unit, carry out in this secure device that each element signal is processed, authentication interface unit, the personnel that accept carry out authentication, and this authentication interface unit is electrically connected this microprocessing unit, and this authentication interface unit is to be received from the interface that identifier that a authenticate device that these personnel hold produces and dynamic password are inputted; One access control unit, be linked in a door lock of this protected main body, and this access control unit is electrically connected this microprocessing unit, for this secure device is controlled the control circuit that this door lock opens and closes; One communication unit, this secure device borrow this communication unit online in this administrative center, and this communication unit is electrically connected this microprocessing unit; And a mnemon, this mnemon is electrically connected this microprocessing unit, in order to an authentication database of the identifier of this authenticate device of record authentication and the program of this dynamic password of computing.
According to embodiment, above-mentioned authentication interface unit is the interface that is received from identification signal (identifier) that a authenticate device that personnel hold produces and dynamic password input.Such as being a wireless receiver, the personnel that can receive utilize chip card to carry out the action of authentication, and the input interface that provides personnel to key in authentication information also can be provided.
According to embodiment, protected main body can be a national treasury, and the access control unit namely is linked in the door lock of national treasury.The dynamic password (second authentication procedure) that above-mentioned dynamic password can move according to the regular changing of time information generating of maltilevel security control safety system, the cooperation personnel utilize the first authentication procedure of chip card, can provide this national treasury or specific occasion safer preservation measures.
According to an embodiment, secure device includes one near the perception unit again, and the personnel that can sense whereby approach, then require personnel to carry out above-mentioned authentication.
According to the embodiment that saves information processing method from damage that is applied to above-mentioned maltilevel security control safety system, method comprises the twice authentication procedure at least, wherein the first authentication procedure starts during near secure device in personnel, system will the person of asking for help be carried out authentication for the first time, such as the authentication interface that utilizes nearly this secure device of an induction chip clamping, after authenticated success, start the second authentication procedure, require these personnel to carry out authentication for the second time.In other words, the present invention also provides a kind of information processing method of saving from damage that is applied to a maltilevel security control safety system, wherein this maltilevel security control safety system comprises a secure device that is linked in a protected main body, described method comprises: in personnel during near this secure device, start a first authentication procedure, require these personnel to carry out authentication for the first time; If authentification failure for the first time, send an information warning for the first time, or re-execute this first authentication procedure; , if authentication success, start a second authentication procedure for the first time, require these personnel to carry out authentication for the second time; If authentification failure for the second time, send an information warning for the second time, or re-execute this second authentication procedure or this first authentication procedure; , if authentication success for the second time, complete the authentication procedure of this maltilevel security control safety system, open the door lock of this protected main body.
According to embodiment, this second authentication procedure is such as passed to personnel's dynamic password by Dynamic Generation after the secure device computing, then by personnel, inputs this password; after comparison; authentication success for the second time, also complete the authentication procedure of maltilevel security control safety system, opens the door lock of protected main body.
The maltilevel security control safety system that the present invention describes and two or the multiple authentication procedure of saving information processing method from damage and utilized different shape are guaranteed the security of particular place.
To be secure device produce according to the data in authentication procedure for the first time the dynamic password of above-mentioned Dynamic Generation, also can comprise the temporal information of system, is prompted to personnel, by personnel's input, completes authentication.
Description of drawings
Fig. 1 is that known technology active rfid door lock is saved the control structure schematic diagram from damage;
Fig. 2 is the use embodiment schematic diagram of maltilevel security control safety system of the present invention;
Flow process shown in Figure 3 is described the present invention and is saved the step of the embodiment one of information processing method from damage;
Fig. 4 is the embodiment schematic diagram of maltilevel security control safety system of the present invention;
Flow process shown in Figure 5 is described the present invention and is saved the step of the embodiment two of information processing method from damage;
Fig. 6 is another embodiment schematic diagram of system of the present invention;
Flow process shown in Figure 7 is described the operation steps of dynamic password of the present invention.
[main element description of reference numerals]
Active wireless radio frequency unit 10 first antennas 101
Chip 103 sensing apparatus 14
Main control system 12 receivers 123
The second antenna 121 processors 125
Warning horn 16
Personnel's 22 secure devices 20
Wireless senser 203 input interfaces 204
National treasury 2 gateways 201
Induction card 205
Maltilevel security control safety system 40
The protected main body 42 of administrative center 4
Authenticate device 43 passwords 44
Microprocessor 401 authentication interfaces 403
Communication module 405 access control unit 407
Door lock 409 internal memories 402
The protected main body 64 of administrative center 62
Microprocessing unit 601 communication units 602
Display unit 603 authentication interface unit 604
Mnemon 605 access control unit 606
Dynamic password processing unit 607 power management unit 608
Near perception unit 609 secure devices 60
Display 631 induction interfaces 641
Input interface 642 sensors 691
Battery 681 power supplys 682
System time 71 induction installation information 72
Phone 73 voucher devices 74
Step S301 ~ S313 saves one of message processing flow from damage
Step S501 ~ S513 saves two of message processing flow from damage
Step S701 ~ S707 dynamic password treatment scheme
Embodiment
In order to provide security better safety system, the present invention proposes a kind of in conjunction with the multiple preservation measures that authenticates in a flow process, and the maltilevel security control safety system embodiment that wherein discloses can be with reference to use embodiment schematic diagram shown in Figure 2.
Be presented in Fig. 2 in a place (as national treasury 2) and be provided with a secure device 20, disclosed maltilevel security control safety system is introduced in place in special safety-sensitive, be connected in by secure device 20 wherein the gateway 20 that enters and exits this place, particularly connect door lock, just entered after multiple authentication.
In this example, the secure device 20 of being located at national treasury 2 gateways 201 provides twice authentication procedure at least, and secure device 20 electrically is linked in controls the door lock that gateway 201 is opened or closed, and outer member includes a wireless senser 203 and input interface 204.
The hand-held induction card 205 of personnel 22 is arranged in Fig. 2, such as being the IC-card that uses REID (RFID), induction card 205 is loaded with identifier, warp is responded to the wireless senser 203 on secure device 20, can read wherein identifier (needing deciphering), identify whereby possessor's identity, this is one of authentication mode of the present invention, not is used for limiting enforcement of the present invention.
In addition, input interface 204 on secure device 20 can be the numeric keypad of a link internal circuit or has particular letter and the keyboard of symbol, personnel 22 respond to card 205 authentications except utilizing to on-the-spot, more need input password, by twice authentication procedure at least, complete the authentication that has more security.
In above-mentioned authentication mode, induction card that personnel 22 hold 205 is because be loaded with the identifier that system has been logined, so everyone's 22 holds are exclusive card, personnel, leaves office or during unusual fluctuation, should upgrade authentication database in system.
In other embodiments of the invention, do not get rid of the technology (as face, fingerprint, vein image, iris, vocal print etc.) of utilizing biological identification (biometric recognition) and authenticate.
In another embodiment, secure device 20 can pass through network on-line telemanagement center, the signal (as alarm, power state, error message etc.) that administrative center sends except receiving secure device 20, but the online secure device of remote access is with change inner setting (as password, enter and exit personnel's authority), and running information (as infringement, fault, power state) that can long-range acquisition device, administrative center more can carry out remote update to the data in secure device 20, comprises wherein database, password and program updates etc.
Fig. 3 shows that then describing the present invention is applied to the flow process of the embodiment that saves information processing method from damage of maltilevel security control safety system, this saves information processing method from damage and particularly is applied to specific preservation measures of saving place turnover entrance from damage, sets up a safety system with maltilevel security authentication techniques.
In this embodiment, maltilevel security control safety system comprises the secure device that is linked in protected main body, and this flow process i.e. the step of secure device in system for this reason.Beginning is as described in step S301, flow process starts the first authentication procedure during near this secure device in personnel, the requirement personnel carry out authentication for the first time, authentication for the first time can be selected one in numerous authentication modes, such as the induction card by holding in personnel's hand utilizes wireless communication technology (as RFID, NFC), with the secure device exchange message, with this, authenticate personnel identity.
Then as step S303, whether flow process judgement authentication for the first time successful? if authentification failure (no), send information warning (as utilizing the mode of cresset, information, the sound) for the first time, or re-execute the first authentication procedure, as step S305 for the first time; , if authentication success (being), will start the second authentication procedure for the first time, require personnel to carry out authentication for the second time, as step S307.
The second authentication procedure can be the step that is different from the first authentication procedure, such as requiring personnel's key feeding cipher, password comprises the static password (can be recorded in the authentication database in secure device) of memory and by hand-held device executive routine Dynamic Generation or the dynamic password of reception, the program of password confirming is the second authentication procedure for this reason.Other are not also got rid of can biological characteristic, the identification mode of gesture etc. replaces the second authentication procedure.
Then as step S309, do you judge whether the second authentication procedure successful? if authentification failure (no) for the second time, device will send information warning (as utilizing the mode of cresset, information, the sound) for the second time, or re-execute this second authentication procedure, more or can again get back to the first authentication procedure, as shown in dotted arrow in Fig. 3, as step S311; , if authentication success (being) for the second time, namely complete the authentication procedure of maltilevel security control safety system,, as step S313, open the door lock of protected main body.
Fig. 4 is the embodiment schematic diagram of maltilevel security control safety system of the present invention.
Each element function in one maltilevel security control safety system 40 is wherein described, arithmetic core is a microprocessor 401 for each circuit component signal processing of execution, other are the communication module 405 that is electrically connected of microprocessor 401 therewith,, in order to connect external management center 4, can be connected by network especially; The authentication interface 403 that provides personnel to authenticate is provided, if the function that authentication interface 403 provides as near-end communication technologys such as RFID, NFC, the hand-holdable authenticate device just like the induction chip card 43 of user approaches authentication interface 403, interacts and exchange message; In addition, authentication interface 403 also can be the interface that can input data, comprises the keyboard of touch-control and entity, and personnel can input password 44 and authenticate; System 40 includes the access control unit 407 of door lock 409 on the protected main body 42 of link again; access control unit 407 is protected main body 42 interface between safety system therewith; can transmit the signal that allows opening door lock 409 because of authentication success whereby, the information whether same door lock 409 closes also can pass to safety system through this element 407.The internal memory 402 that more can comprise contents such as recording verify data, system program, password generating routine in system 40.
Through the maltilevel security method of control of twice authentication procedure shown in Figure 3, Fig. 5 shows that then the present invention saves information processing method from damage and utilizes the step of the embodiment two of identification and dynamic password.
When having personnel to enter the occasion of the specific secure device that is provided with maltilevel security control function, as step S501, personnel can utilize the identity recognition device of holding to carry out the first authentication, as using chip card, radio transceiver (dongle) or by the recognition device on device, carrying out biological identification.If take chip card as example, can use and swipe the card or the technology of wireless card reading, be provided with card reader and internal memory in secure device, utilize the recognition data in internal memory to authenticate.Connect to and be located at long-range authentication database while separately being not precluded within authentication, carry out remote authentication.
Afterwards as step S503, secure device will judge whether successfully to identify, if recognition failures (no), according to the rule of setting (such as allowing the frequency of failure, the time interval etc.), secure device can produce alarm or carry out step S501 again and again identify the action of identity, as step S505.
In case success identity (being), namely enter the second authenticating step as step S507, this example is reminded personnel's key feeding cipher for secure device by modes such as voice, display or cressets.According to embodiment, password can be a kind of static password of setting (still may regularly upgrade) by personnel remembered or tabled look-up, and the input interface that provides by secure device in scene (as keyboard, contact panel) is keyed in should input password instantly; Separately having embodiment not get rid of in another mode that is different from the first authentication procedure authenticates, such as utilizing the image identification technology to judge personnel identity, judging whether the gesture password is correct, maybe can use the other biological recognition method, more can authenticate by the second password.
In this example, as step S509, the second authentication procedure is for being utilized the password of a kind of Dynamic Generation of specific support reception channel by personnel, this dynamic password is for to offer this personnel according to virtual condition, by the dynamic password input of personnel according to the Dynamic Generation of indication, after system receives this dynamic password, just must judge whether by the second authentication procedure.
The authentication mode of above-mentioned dynamic password be mainly personnel wear or hand-held device on show that password with systems compliant, this type of technology are mainly the synchronous condition of with the mistiming, as system (can be provided with password and produce the server of function) and turnover personnel, being held the password generator on device.In the needs authentication, just utilize the password generator to produce a dynamic password, should input password in secure device in the time restriction that sets, otherwise this group password lost efficacy namely, authentication next time must be used another group dynamic password of new generation, has tight security.
For instance, enter in personnel's hand of this particular place and hold a kind of carrier, can be the dynamic password generator of a kind of Token of being called, top has display, (be not excluded in the first authentication procedure and namely use this positive mode) after entering the second authentication procedure, can be by Surveillance center, or online arbitrary authentication center transmits dynamic password, and be shown in display on this Token device, then by personnel, input to secure device; Separately can be performed calculations according to the information that internal information (as system time information or password generator) or personnel authenticate for the first time by secure device, and then by personnel's device on hand, show dynamic password, personnel input according to this and carry out authentication; Separately there is embodiment to utilize short message mode (simple message service by remote monitoring center, SMS) transmit dynamic password to the mobile phone of holding in personnel's hand, personnel can input, and as step S511, it is correct whether secure device has the mechanism of synchronous this information to judge to input.
In the above-mentioned mode that is produced the moving password of one group of changing by the specific cryptosystem algorithm, mainly can avoid the non-former people who holds chip card to swarm into without authorization, though may pass through the first authentication procedure, may, because do not hold another device as Token, still be difficult to by the second authentication procedure.This type of dynamic password is produced after completing the first authentication procedure voluntarily by personnel's hand-held device, and wherein information will be synchronizeed with secure device, therefore can obtain authentication.
Then as shown in the S513 step, will authentication procedure judge whether success identity? if this second authentication procedure failure (no), namely perform step S515, system produces alarm or the requirement of any pattern and re-enters password, step still can be got back in the first authenticating step,, as step S501, re-execute authentication; If but be required to re-enter another time password, can produce one group of new dynamic password as the producing method of above-mentioned password equally.
The authentication number of times of dynamic password can be determined according to system, and step can be proceeded by the first authentication procedure again, or again again obtains another dynamic password.(be) that namely as described in step S517, safety system is with allowing to enter protected main body, such as driving opening door lock after the second authentication success.
When carrying out authentication procedure, according to system, the different modes that start each authentication procedure can be arranged, according to embodiment one, when above-noted persons enter the occasion of the specific secure device that is provided with maltilevel security control function, if these personnel hold or are wearing and can respond to the article that maltilevel security control safety system starts, as use an induction chip card, online with a radio-frequency (RF) identification communication means between induction chip and secure device.When holding this induction chip (comprising the device or the carrier that are loaded with this chip) near secure device, can at once start the first authentication procedure.In this example, the first authentication procedure comprises that secure device receives the identification identifier that transmits from the induction chip card, in order to compare the authentication database that secure device is built-in or company obtains outward, to confirm that whether identification identifier is as safe list.At this moment,, if identification identifier not is safe list, as above-mentioned step S503, be judged as authentification failure for the first time; If identification identifier is safe list, authentication success for the first time.
Fig. 6 is another embodiment schematic diagram of system of the present invention.
In this embodiment; be provided with the secure device 60 that is linked in protected main body 64 in maltilevel security control safety system; include and carry out the microprocessing unit 601 that in secure device 60, each element signal is processed according to circuit function in secure device 60; secure device 60 includes communication unit 602; whereby can be online in administrative center 62; communication unit 602 is electrically connected microprocessing unit 601; microprocessing unit 601 will be processed the signal of communication that produces from communication unit 602, and administrative center 62 is namely received the signal of secure device 60 by communication unit 602.Protected main body 64 as a national treasury.
Also include the authentication interface unit 604 that the personnel of acceptance carry out authentication in secure device 60, authentication interface unit 604 is electrically connected microprocessing unit 601, process by microprocessing unit 601 authentication signal that various authentication interfaces unit 604 produces, comprise encryption and decryption, identification, the action of ratio equity of signal, and start relevant authentication procedure.The identification signal (identifier) that authentication interface unit 604 produces in order to the authenticate device that is received from personnel and holds and the interface of dynamic password input, such as the reader device etc. that is a contact panel, keyboard, contactless (as using the near-field communication technology such as RFID) or contact (swiping the card), can connect in this example and be located at outside induction interface 641, as a touch area, or can read the reader of chip signal, separately can connect input interface 642, provide personnel to input data.
Secure device 60 has mnemon 605, utilizes wherein memory storage verify data, comprises the static data that store, and authenticates the authentication database of the identifier of above-mentioned authenticate device as record; Also can comprise the program of computing dynamic password, after starting the dynamic cipher verification program, above-mentioned microprocessing unit 601 will load the related operation program, and the Dynamic Generation password can be synchronizeed with the external authentication device.
in embodiments of the present invention, maltilevel security control safety system particularly is designed for the turnover entrance of protection particular place, secure device 60 will be arranged on protected main body 64, and can be linked on the door lock of protected main body 64, be provided with access control unit 606 in device 60, access control unit 606 is electrically connected microprocessing unit 601, be linked in door lock (as the door lock of national treasury), for secure device 60 is controlled the control circuit that door lock opens and closes, to open and close door lock according to microprocessing unit 601 produces after authentication signal driver, door lock is such as being a kind of electromagnetic door lock that opens and closes according to electric signal.
If maltilevel security control safety system is for carrying out dynamic cipher verification, secure device 60 comprises dynamic password processing unit 607, dynamic password processing unit 607 is electrically connected microprocessing unit 601, the authentication procedure performed according to microprocessing unit 601, system can be carried out the dynamic password program by this dynamic password processing unit 607 with arithmetic capability, and can be according to information (as temporal information) the Dynamic Generation dynamic password of maltilevel security control safety system.These verify data majorities of being managed by dynamic password processing unit 607 are the password of random fluctuation; to change along with time fluctuation; carry out synchronously with relative authenticate device, the personnel that therefore enter this protected main body 64 need to hold corresponding password generation device and could correctly carry out authentication.
Secure device 60 is outer can not connect the display 631 of with personnel, linking up, inside has the display unit 603 that is electrically connected microprocessing unit 601, and in order to the processes and displays signal, display can be used to the display reminding personnel and carries out each step action, or the demonstration authentication result, comprise the warning content.
For guaranteeing the security of maltilevel security control safety system, the electric power supply of secure device 60 can comprise the direct current power that alternating electromotive force (as power supply 682) that Utilities Electric Co. provides and internal cell 681 provide simultaneously.Have a power management unit 608 in device 60,, in order to the electrical arrangement in management devices, comprise the state of supervising device running electric power, guarantee that device 60 steadily operates.
Secure device 60 provides the function of induction near object, as wherein have be electrically connected microprocessing unit 601 near perception unit 609, the outside sensor 691 that connects, utilize optics, wireless signal induction, image sensing, temperature sensing or other to judge whether that the induction mode sensing personnel of object proximity approach, and make system further require to carry out authentication near personnel according to environmental change.
If the embodiment of carrying out authentication take above-mentioned dynamic password, as example, can be consulted flow process shown in Figure 7.
When starting the dynamic password program in first authentication procedure or second authentication procedure, as step S701, will be according to the system information computing in corresponding secure device, with one group of dynamic password of Dynamic Generation, as step S703, in this embodiment, system information can comprise the temporal information 71 of system, or the information 72 of another induction installation of being sensed by secure device, produce password by these information.
Then, the dynamic password that display prompts personnel on the password generator that secure device can pass through to hold (as the voucher device 75 of the class of Token) are correlated with, as step S705, but do not get rid of other prompting modes, can receive a note by the phone 74 of holding as the related personnel, in note, record this time authenticates the dynamic password of use.
Personnel receive dynamic password number, and system will authenticate in setting-up time, and personnel should complete input within this time limit, as step S707.
According to the embodiment of the present invention, maltilevel security control safety system is mainly to utilize the control of multiple authentication mode to enter and exit personnel, guarantee the security of particular place, in preferred embodiment, order is carried out twice authentication procedure at least, be preferably the authentication mode of different embodiment, as requiring personnel to carry out a cipher in the first authentication procedure, utilize again biological identification mode (as voice, action, fingerprint, palmmprint, vocal print, iris, retina, vein identification, face recognition etc.) in another road authentication procedure, or dynamic password etc. is carried out authentication.When the event of wrong authentication produces, can notify administrative center, warning, or require identity validation for the second time.
Therefore, the maltilevel security control safety system described of the present invention and two or the multiple authentication procedure of saving information processing method from damage and utilized different shape are guaranteed the security of particular place.
But the foregoing is only better possible embodiments of the present invention, non-so namely limit to of the present inventionly,, therefore the equivalent structure that all utilizations instructions of the present invention and accompanying drawing content are done changes, all in like manner be contained in protection scope of the present invention explanation hereby.

Claims (10)

1. a maltilevel security control safety system, be linked in a protected main body, it is characterized in that, described system comprises:
One is online in an administrative center of this secure device, and this administrative center receives the signal of this secure device;
One is linked in the secure device of this protected main body, and this secure device comprises:
One microprocessing unit, carry out in this secure device that each element signal is processed;
One authentication interface unit, the personnel that accept carry out authentication, and this authentication interface unit is electrically connected this microprocessing unit, and this authentication interface unit is to be received from the identifier of the authenticate device generation that these personnel hold and the interface that dynamic password is inputted;
One access control unit, be linked in a door lock of this protected main body, and this access control unit is electrically connected this microprocessing unit, for this secure device is controlled the control circuit that this door lock opens and closes;
One communication unit, this secure device borrow this communication unit online in this administrative center, and this communication unit is electrically connected this microprocessing unit; And
One mnemon, this mnemon is electrically connected this microprocessing unit, in order to an authentication database of the identifier of this authenticate device of record authentication and the program of this dynamic password of computing.
2. maltilevel security control safety system as claimed in claim 1, it is characterized in that, described secure device also comprises the program of carrying out this dynamic password, and according to a dynamic password processing unit of this dynamic password of time information generating of this maltilevel security control safety system, this dynamic password processing unit is electrically connected this microprocessing unit.
3. maltilevel security control safety system as claimed in claim 1, is characterized in that, described protected main body is a national treasury, and this access control cellular chain is connected to the door lock of this national treasury.
4. maltilevel security control safety system as claimed in claim 1, it is characterized in that, described secure device also comprise be electrically connected this microprocessing unit one near the perception unit, wherein after this approaches to these personnel near the perception unit senses, require these personnel to carry out authentication.
5. information processing method of saving from damage that is applied to a maltilevel security control safety system, wherein this maltilevel security control safety system comprises a secure device that is linked in a protected main body, it is characterized in that, described method comprises:
During near this secure device, start a first authentication procedure in personnel, require this personnel to carry out authentication for the first time;
If authentification failure for the first time, send an information warning for the first time, or re-execute this first authentication procedure;
, if authentication success, start a second authentication procedure for the first time, require these personnel to carry out authentication for the second time;
If authentification failure for the second time, send an information warning for the second time, or re-execute this second authentication procedure or this first authentication procedure;
, if authentication success for the second time, complete the authentication procedure of this maltilevel security control safety system, open the door lock of this protected main body.
6. the information processing method of saving from damage as claimed in claim 5, is characterized in that, when nearly this secure device of described librarian use one induction chip clamping, starts this first authentication procedure, and this first authentication procedure comprises:
This secure device receives the identifier that this induction chip card transmits; And
Compare the authentication database in this secure device, confirm whether this identifier is safe list;
Be safe list if this identifier is non-, authentification failure for the first time;
If this identifier is safe list, authentication success for the first time.
7. the information processing method of saving from damage as claimed in claim 6, is characterized in that, and is online with a radio-frequency (RF) identification communication means between described induction chip card and this secure device.
8. the information processing method of saving from damage as claimed in claim 5, is characterized in that,, in described authentication success for the first time, starts this second authentication procedure, and this second authentication procedure comprises:
Require these personnel to input a password;
This secure device receives this password, through this secure device, confirms whether this password is correct;
If this password bad, authentification failure for the second time; And
If this password is correct, authentication success for the second time.
9. the information processing method of saving from damage as claimed in claim 8, is characterized in that, described password is the dynamic password of a Dynamic Generation, by these personnel, according to the dynamic password of this Dynamic Generation of indication, inputted.
10. the information processing method of saving from damage as claimed in claim 9, is characterized in that, the dynamic password of described Dynamic Generation is that this secure device produces according to the time data of this maltilevel security control safety system, and points out in these personnel; The program of one this dynamic password of mnemon record computing of this secure device.
CN2012101395593A 2012-05-08 2012-05-08 Multiple security control security system and security information processing method Pending CN103390297A (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN2012101395593A CN103390297A (en) 2012-05-08 2012-05-08 Multiple security control security system and security information processing method

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN2012101395593A CN103390297A (en) 2012-05-08 2012-05-08 Multiple security control security system and security information processing method

Publications (1)

Publication Number Publication Date
CN103390297A true CN103390297A (en) 2013-11-13

Family

ID=49534553

Family Applications (1)

Application Number Title Priority Date Filing Date
CN2012101395593A Pending CN103390297A (en) 2012-05-08 2012-05-08 Multiple security control security system and security information processing method

Country Status (1)

Country Link
CN (1) CN103390297A (en)

Cited By (18)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN103761782A (en) * 2013-12-24 2014-04-30 朱佩芬 Electronic password safe box equipment
CN103903318A (en) * 2013-11-29 2014-07-02 广州中大电讯科技有限公司 Identity authentication system and identity authentication method in home care based on gesture recognition
CN104063925A (en) * 2014-03-13 2014-09-24 苏州天鸣信息科技有限公司 Electronic password lock based on touchscreen for inputting text
CN105427413A (en) * 2015-11-02 2016-03-23 北京奇虎科技有限公司 Intelligent unlocking method and intelligent lock
CN105513183A (en) * 2015-12-09 2016-04-20 苏州市职业大学 Fingerprint and palm print, voice and weight combined recognition access control system based on FPGA (Field Programmable Gate Array)
CN105828025A (en) * 2015-01-26 2016-08-03 霍尼韦尔国际公司 Anonymous disarm detect with built-in camera
CN106384407A (en) * 2016-08-31 2017-02-08 四川金投金融电子服务股份有限公司 Precious metal storehouse access personnel identity high-precision confirmation system
CN106504384A (en) * 2016-11-02 2017-03-15 深圳坚朗海贝斯智能科技有限公司 A kind of intelligent electronic lock system and its control method
CN107168122A (en) * 2017-06-06 2017-09-15 冯星语 A kind of power equipment case centralized control system and method
CN107393073A (en) * 2017-07-20 2017-11-24 克立司帝控制***(上海)有限公司 Gate inhibition's monitoring control system and method based on image recognition technology
CN108091001A (en) * 2016-11-20 2018-05-29 青海沃爱思智能科技有限公司 A kind of method for realizing the adjustable multi-mode information identification intelligent clearance device of rank
CN108806025A (en) * 2017-05-03 2018-11-13 腾讯科技(深圳)有限公司 Realize the entrance guard authorization method and device of visitor's temporary visit
CN109325325A (en) * 2017-08-01 2019-02-12 群光电能科技股份有限公司 digital authentication system
CN109472910A (en) * 2019-01-11 2019-03-15 广东飞皇新能源有限公司 A kind of quantum cryptography chip intelligent lock
CN109830023A (en) * 2019-03-02 2019-05-31 浙江弘电智能科技有限公司 A kind of intelligent building access control system
CN109872420A (en) * 2018-12-26 2019-06-11 国网浙江建德市供电有限公司 A kind of intelligent lock control system and control method for power domain
CN110276858A (en) * 2018-03-13 2019-09-24 新谊整合科技股份有限公司 Save setting device, safety system and method from damage
CN111479976A (en) * 2017-12-14 2020-07-31 松下知识产权经营株式会社 Determination system, electronic lock control system, door with electronic lock, determination method, and program

Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
TW551412U (en) * 2002-05-08 2003-09-01 Shian-Tsai Wu Intellectual type communication door controlling devices
CN101630422A (en) * 2009-08-31 2010-01-20 天津工业大学 Intelligent electronic access control system
CN101923660A (en) * 2010-09-07 2010-12-22 谈剑锋 Dynamic password identity authorization system and method based on RFID
CN201859491U (en) * 2010-08-19 2011-06-08 中兴保全股份有限公司 Device for setting and unlocking security system and access control management through mobile phone
CN201965625U (en) * 2011-01-17 2011-09-07 上海众人网络安全技术有限公司 Entrance guard recognition device with dynamic password identity authentication function

Patent Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
TW551412U (en) * 2002-05-08 2003-09-01 Shian-Tsai Wu Intellectual type communication door controlling devices
CN101630422A (en) * 2009-08-31 2010-01-20 天津工业大学 Intelligent electronic access control system
CN201859491U (en) * 2010-08-19 2011-06-08 中兴保全股份有限公司 Device for setting and unlocking security system and access control management through mobile phone
CN101923660A (en) * 2010-09-07 2010-12-22 谈剑锋 Dynamic password identity authorization system and method based on RFID
CN201965625U (en) * 2011-01-17 2011-09-07 上海众人网络安全技术有限公司 Entrance guard recognition device with dynamic password identity authentication function

Cited By (18)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN103903318A (en) * 2013-11-29 2014-07-02 广州中大电讯科技有限公司 Identity authentication system and identity authentication method in home care based on gesture recognition
CN103761782A (en) * 2013-12-24 2014-04-30 朱佩芬 Electronic password safe box equipment
CN104063925A (en) * 2014-03-13 2014-09-24 苏州天鸣信息科技有限公司 Electronic password lock based on touchscreen for inputting text
CN105828025A (en) * 2015-01-26 2016-08-03 霍尼韦尔国际公司 Anonymous disarm detect with built-in camera
CN105427413A (en) * 2015-11-02 2016-03-23 北京奇虎科技有限公司 Intelligent unlocking method and intelligent lock
CN105513183A (en) * 2015-12-09 2016-04-20 苏州市职业大学 Fingerprint and palm print, voice and weight combined recognition access control system based on FPGA (Field Programmable Gate Array)
CN106384407A (en) * 2016-08-31 2017-02-08 四川金投金融电子服务股份有限公司 Precious metal storehouse access personnel identity high-precision confirmation system
CN106504384A (en) * 2016-11-02 2017-03-15 深圳坚朗海贝斯智能科技有限公司 A kind of intelligent electronic lock system and its control method
CN108091001A (en) * 2016-11-20 2018-05-29 青海沃爱思智能科技有限公司 A kind of method for realizing the adjustable multi-mode information identification intelligent clearance device of rank
CN108806025A (en) * 2017-05-03 2018-11-13 腾讯科技(深圳)有限公司 Realize the entrance guard authorization method and device of visitor's temporary visit
CN107168122A (en) * 2017-06-06 2017-09-15 冯星语 A kind of power equipment case centralized control system and method
CN107393073A (en) * 2017-07-20 2017-11-24 克立司帝控制***(上海)有限公司 Gate inhibition's monitoring control system and method based on image recognition technology
CN109325325A (en) * 2017-08-01 2019-02-12 群光电能科技股份有限公司 digital authentication system
CN111479976A (en) * 2017-12-14 2020-07-31 松下知识产权经营株式会社 Determination system, electronic lock control system, door with electronic lock, determination method, and program
CN110276858A (en) * 2018-03-13 2019-09-24 新谊整合科技股份有限公司 Save setting device, safety system and method from damage
CN109872420A (en) * 2018-12-26 2019-06-11 国网浙江建德市供电有限公司 A kind of intelligent lock control system and control method for power domain
CN109472910A (en) * 2019-01-11 2019-03-15 广东飞皇新能源有限公司 A kind of quantum cryptography chip intelligent lock
CN109830023A (en) * 2019-03-02 2019-05-31 浙江弘电智能科技有限公司 A kind of intelligent building access control system

Similar Documents

Publication Publication Date Title
CN103390297A (en) Multiple security control security system and security information processing method
US10943000B2 (en) System and method for supplying security information
CN104778765B (en) mobile access control system and method
CN109204227A (en) Vehicle shared system and vehicle sharing method
US20190066415A1 (en) Mobile-based access control system
US20080148059A1 (en) Universal, Biometric, Self-Authenticating Identity Computer Having Multiple Communication Ports
US20130076482A1 (en) Secure access system employing biometric identification
KR102367791B1 (en) Anti-Attack Biometric Authentication Device
WO2018231703A1 (en) Securitization of temporal digital communications via authentication and validation for wireless user and access devices
US20110107405A1 (en) Method for the temporary personalization of a communication device
JP5359848B2 (en) IC card authentication system and IC card authentication method
JP4739924B2 (en) Electronic key system
CN202939674U (en) Multiple safety management security device and system
KR20110096576A (en) Access identification and control device
Govindraj et al. Smart door using biometric NFC band and OTP based methods
TWM439229U (en) Security apparatus with mulitple safety controls and system using the same
CN107026735A (en) Method and managed devices that a kind of password is automatically entered
KR101230369B1 (en) The door-lock apparatus available to prevent hacking and method for authenticating smart-keys using the same
TWI452204B (en) Security system with mulitple safety controls and method for processing the security signals
CN110223420A (en) A kind of fingerprint unlocking system
JP7389692B2 (en) Vehicle rental system
US10645070B2 (en) Securitization of temporal digital communications via authentication and validation for wireless user and access devices
Balaji et al. Biometric-based Smart Door Locking System using Biometric and OTP
JPWO2012131930A1 (en) Entrance / exit management device
CN107026732A (en) A kind of system that Password Input number of times is reduced by wearable device

Legal Events

Date Code Title Description
C06 Publication
PB01 Publication
C10 Entry into substantive examination
SE01 Entry into force of request for substantive examination
C02 Deemed withdrawal of patent application after publication (patent law 2001)
WD01 Invention patent application deemed withdrawn after publication

Application publication date: 20131113