CN103605918A - Iris recognition PDM rights management method and device - Google Patents

Iris recognition PDM rights management method and device Download PDF

Info

Publication number
CN103605918A
CN103605918A CN201310583137.XA CN201310583137A CN103605918A CN 103605918 A CN103605918 A CN 103605918A CN 201310583137 A CN201310583137 A CN 201310583137A CN 103605918 A CN103605918 A CN 103605918A
Authority
CN
China
Prior art keywords
iris
port
microprocessor
module
client
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Pending
Application number
CN201310583137.XA
Other languages
Chinese (zh)
Inventor
何飞
刘元宁
韩江丽
朱晓冬
张晓旭
王清旗
李猛
朱玉凤
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
CHANGCHUN QIANYUAN ZHONGYING INFORMATION TECHNOLOGY Co Ltd
Original Assignee
CHANGCHUN QIANYUAN ZHONGYING INFORMATION TECHNOLOGY Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by CHANGCHUN QIANYUAN ZHONGYING INFORMATION TECHNOLOGY Co Ltd filed Critical CHANGCHUN QIANYUAN ZHONGYING INFORMATION TECHNOLOGY Co Ltd
Priority to CN201310583137.XA priority Critical patent/CN103605918A/en
Publication of CN103605918A publication Critical patent/CN103605918A/en
Pending legal-status Critical Current

Links

Images

Classifications

    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/30Authentication, i.e. establishing the identity or authorisation of security principals
    • G06F21/31User authentication
    • G06F21/32User authentication using biometric data, e.g. fingerprints, iris scans or voiceprints

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Theoretical Computer Science (AREA)
  • Computer Hardware Design (AREA)
  • Software Systems (AREA)
  • Physics & Mathematics (AREA)
  • General Engineering & Computer Science (AREA)
  • General Physics & Mathematics (AREA)
  • Collating Specific Patterns (AREA)
  • Measurement Of The Respiration, Hearing Ability, Form, And Blood Characteristics Of Living Organisms (AREA)

Abstract

The invention discloses an iris recognition PDM rights management method and device. The method includes: a user starts a client unit, an iris collection module starts collecting user iris data, collection results are transmitted to a Vin0 interface of a microprocessor, a user identifier code is acquired from a Vout interface of a storage module, the collection results nd the user identifier code are encoded in a certain manner, results are transmitted to an interface module from a Vout3 interface of the microprocessor, the interface module transmits the results to a microprocessor of a server unit, and the microprocessor analyzes in the same manner to acquire iris data and the user identifier code. Software and hardware methods are combined, technical advantages in PDM rights management and iris recognition are fully integrated, the advantages such as convenience of using hardware and simplicity and fastness of operation are integrated effectively, PDM rights management and iris recognition are complemented, the effects are good, and security access control for different levels of information can be achieved effectively.

Description

A kind of method and apparatus of iris recognition PDM rights management
Technical field
The present invention discloses a kind of method of PDM rights management of iris recognition, and the device that is applicable to the method is provided simultaneously, belongs to electronic information security technical field.
Background technology
The PDM(Product Data Management the present invention relates to) be product data management, it is one and is used for managing all and product related information (comprising parts information, configuration, document, cad file, structure, authority information etc.) and technology all and product correlated process (comprising procedure definition and management).The present invention relates to " PDM rights management " and refer to safety rule or the security strategy arranging according to system, user can access and can only access own authorized resource.
The potential safety hazards such as at present conventional " PDM rights management " system generally adopts the form of digital signature to use software to realize, and this mode exists easy loss, easily distorts, uniqueness is not strong, also cannot realize the information of different brackets is carried out to safe access control.
Compare with existing other PDM rights managements, iris recognition technology has been merged in the present invention, and the mode that has adopted software and hardware to combine realizes, therefore it is fast to have speed, simple to operate, the advantages such as data are difficult for being revealed, efficient and safety.
Summary of the invention
The invention discloses a kind of method of iris recognition PDM rights management, the method, based on role and flow tasks, has effectively met the needs of workflow to authority, adds role to facilitate mandate, has improved efficiency.
The invention discloses a kind of device of PDM rights management, PDM rights management is solidificated in to the device on hardware, realized the separation of data, guaranteed the high efficiency of rights management, security.
the method of a kind of iris recognition PDM rights management provided by the invention, its technical solution is as follows:
1) user starts client's part device, and the MNNI-18100 iris recognition instrument collection by iris capturing module is also obtained its iris data, obtains user identification code simultaneously from memory module;
2) client's part device, by the above-mentioned user identification code acquiring and iris data, sends server component device to according to " user identification code/n/r/n/r iris data " form.
3) server component device splits the data that transmitted by client's part device according to above-mentioned same format, obtains user identification code and iris data, and wherein user identification code sends to memory module, and iris data sends to iris recognition module; Whether checking afterwards there is this user identification code, and if there is no, " failure " information that sends, to client's part device, is pointed out " not having this user ", and refusal login; Otherwise, if existed, go to step 4);
4) iris feature of the iris data that contrast is obtained by above-mentioned fractionation and the iris feature of having stored, if do not mated, " failure " information that sends, to client's part device, is pointed out " not having this user ", and refusal login; Otherwise, if existed, go to 5);
5) starting authority management module, is user assignment authority, and sends corresponding permission grant information to client's part device, and user successfully logins PDM system.
a kind of iris recognition PDM rights management device disclosed by the invention, is characterized in that:
Comprise client's part device and server part device two parts;
Wherein, client's part device is comprised of microprocessor, iris capturing module, communication module, memory module and interface module, the Vin0 port of microprocessor is connected with the Vout port of iris capturing module, for obtaining iris capturing module, collects client iris data; The Vout2 port of microprocessor is connected with the VCC port of communication module, for communicating by letter of microprocessor and service end part device; The Vin1 port of microprocessor is connected with the Vout port of memory module, and the Vout1 port of microprocessor is connected with the Vin port of memory module, the authority information returning for obtaining user identification code and server part device; The Vout3 port of microprocessor is connected with the VCC port of interface module, for being responsible for transmitting data;
Server component device is comprised of microprocessor, iris recognition module, communication module, memory module, interface module and authority management module, the Vin2 port of microprocessor is connected with the Vout port of iris recognition module, for obtaining the client iris data of client's part device transmission and carrying out feature extraction, and contrast with the iris feature in iris database; The Vout2 port of microprocessor is connected with the VCC port of communication module, for being responsible for and the communicating by letter of client terminal device; The Vin1 port of microprocessor is connected with the Vout port of memory module, and the Vout1 port of microprocessor is connected with the Vin port of memory module, for storing all users' iris feature and user's right assignment situation; The Vout2 of microprocessor is connected with the VCC of interface module, for being responsible for transmitting data; The Vin3 port of microprocessor is connected with the Vout port of authority management module, is used to user's granted rights.
the course of work of the present invention is as follows:
First user starts client's part device, iris capturing module starts to gather client iris data, collection result is sent to the Vin0 interface of microprocessor by Vout interface, from the Vout interface of memory module, obtain user identification code simultaneously, the data based certain mode of above-mentioned two parts is encoded, the result obtaining sends to interface module by the Vout3 interface of microprocessor, by interface module, sent to subsequently the microprocessor of server component device, microprocessor is resolved according to above-mentioned same way, obtains iris data and user identification code.
The user identification code that parsing is obtained sends to memory module by the Vin1 interface of microprocessor, and with the user profile contrast of having stored, the result obtaining sends to microprocessor by Vin interface.If result does not exist, microprocessor sends " failure " information to communication module by Vout2, sends to client's part device more afterwards by interface module, prompting " not having this user ", and refusal login; Otherwise if existed, the iris feature of the iris data parsing being obtained sends to iris recognition module by the Vin2 of microprocessor, the iris feature contrast with having stored, obtains result and sends to microprocessor by Vout interface.If do not mated, microprocessor sends " failure " information to communication module by Vout2, sends to client's part device more afterwards by interface module, prompting " not having this user ", and refusal login; Otherwise if coupling, authority management module sends corresponding permission grant information by Vout interface, user successfully logins PDM system.
good effect of the present invention is:
The mode that adopts software and hardware to combine, both fully integrated PDM rights management and iris recognition technology advantage, also effectively combine hardware easy to use, the advantage such as simple to operate and quick, therefore realized mutually making up between the two, and there is good effect, can effectively realize the safe access control to the information of different brackets.The present invention supports the rights management of the PDM system control that can effectively conduct interviews, and dynamically changes user right, and the mandate of providing convenience/cancellation mechanism and operation validity checking mechanism; Iris recognition technology is that in current biological identification technology, application is the most convenient and a kind of accurately simultaneously, has the advantages such as pinpoint accuracy, stability, uniqueness.
Accompanying drawing explanation
Fig. 1 is structural drawing of the present invention;
In Fig. 1,1-client's part device, 2-server component device, 101-microprocessor, 102-iris capturing module, 103 and 203-communication module, 104 and 204-memory module, 105 and 205-interface module, 202-iris recognition module, 206-authority management module.
Fig. 2 is the circuit diagram of client's part device.
Fig. 3 is the circuit diagram of server component device.
Fig. 4 is logi function chart of the present invention.
specific implementation
embodiment 1
As shown in Fig. 1 structure drawing of device, the present invention includes client's part device 1 and server part device 2, client's part device 1 is connected by interface module with server part device 2, carries out data communication;
Wherein, client's part device 1 is by microprocessor 101, iris capturing module 102, communication module 103, memory module 104 and interface module 105 form, the Vin0 port of microprocessor 101 is connected with the Vout port of iris capturing module 102, for obtaining iris capturing module 102, collects client iris data; The Vout2 port of microprocessor 101 is connected with the VCC port of communication module 103, for communicating by letter of microprocessor 101 and service end part device 2; The Vin1 port of microprocessor 101 is connected with the Vout port of memory module 104, and the Vout1 port of microprocessor 101 is connected with the Vin port of memory module 104, the authority information returning for obtaining user identification code and server part device 2; The Vout3 port of microprocessor 101 is connected with the VCC port of interface module 105, for being responsible for transmitting data;
Server component device 2 is by microprocessor 201, iris recognition module 202, and communication module 203, memory module 204, interface module 205 and authority management module 206 form.The Vin2 port of microprocessor 201 is connected with the Vout port of iris recognition module 202, for obtaining the client iris data of client's part device 1 transmission and carrying out feature extraction, and contrasts with the iris feature in iris database; The Vout2 port of microprocessor 201 is connected with the VCC port of communication module 203, for being responsible for and the communicating by letter of client terminal device; The Vin1 port of microprocessor 201 is connected with the Vout port of memory module 204, and the Vout1 port of microprocessor 201 is connected with the Vin port of memory module 204, for storing all users' iris feature and user's right assignment situation; The Vout2 of microprocessor 201 is connected with the VCC of interface module 205, for being responsible for transmitting data; The Vin3 port of microprocessor 201 is connected with the Vout port of authority management module 206, is used to user's granted rights.
embodiment 2
As shown in Fig. 2 client's part device 1 circuit theory diagrams, the Vin0 port of microprocessor 101 is connected with the Vout port of iris capturing module 102; The Vin1 port of microprocessor 101 is connected with the Vout port of memory module 104; The Vout1 port of microprocessor 101 is connected with the Vin port of memory module 104; The Vout2 port of microprocessor 101 is connected with the VCC port of communication module 103; The Vout3 port of microprocessor 101 is connected with the VCC port of interface module 105.Wherein microprocessor 101 is the STC12C5A60S2 single-chip microcomputers that use macrocrystalline scientific & technical corporation to produce, and carries A/D change-over circuit; Iris capturing module 102 is used MNNI-18100 iris capturing instrument, and iris of both eyes image automatically gathers within the scope of 16-20CM; Communication module 103 is used 32 bit arithmetic parts; The memory capacity of memory module 104 is 16G; Interface module 105 is used the transmission of USB2.0 Interface realization data.
As shown in Fig. 3 server component device 2 circuit theory diagrams, the Vin2 port of microprocessor 201 is connected with the Vout port of iris recognition module 202; The Vout2 port of microprocessor 201 is connected with the VCC port of communication module 203; The Vin1 port of microprocessor 201 is connected with the Vout port of memory module 204, and the Vout1 port of microprocessor 201 is connected with the Vin port of memory module 204; The Vout2 of microprocessor 201 is connected with the VCC of interface module 205; The Vin3 port of microprocessor 201 is connected with the Vout port of authority management module 206.Wherein microprocessor 201 is the STC12C5A60S2 single-chip microcomputers that use macrocrystalline scientific & technical corporation to produce, and carries A/D change-over circuit; Iris recognition module 202 and authority management module 206 are all the Algorithm of Iris Recognition that are solidificated on single-chip microcomputer; Communication module 203 is used 32 bit arithmetic parts; The memory capacity of memory module 204 is 16G; Interface module 205 is used the transmission of USB2.0 Interface realization data.
As shown in Fig. 4 logi function chart, after starting iris recognition instrument, the iris capturing module 102 in client's part device 1 gathers this user's iris data; In memory module 104, obtain user identification code.The iris data getting and user identification code are passed through to communication module 103, by interface module 105, send to server component device 2;
After server component device 2 receives, corresponding module is resolved and be sent to two parts Data Division being acquired, and wherein splits the user data obtaining and send memory module 204 to, and iris data is sent to iris recognition module 202.Memory module 204 differentiates whether there is user identification code subsequently, if there is no, sends failure information to communication module 203; On the contrary, if exist, whether the iris feature by iris recognition module 202 these users of checking mates.Now, if checking has two kinds of results---iris feature coupling, by authority management module 206, distribute corresponding authority to send communication module 203 to; On the contrary, if do not mate, directly send failure information to communication module 203.Finally, by communication module 203, by interface module 205, corresponding information is sent to client's part device 1, prompting user corresponding operating.

Claims (2)

1. a method for iris recognition PDM rights management, comprises the following steps:
1) user starts client's part device, and the MNNI-18100 iris recognition instrument collection by iris capturing module is also obtained its iris data, obtains user identification code simultaneously from memory module;
2) client's part device, by the above-mentioned user identification code acquiring and iris data, sends server component device to according to " user identification code/n/r/n/r iris data " form;
3) server component device splits the data that transmitted by client's part device according to above-mentioned same format, obtains user identification code and iris data, and wherein user identification code sends to memory module, and iris data sends to iris recognition module; Whether checking afterwards there is this user identification code, and if there is no, " failure " information that sends, to client's part device, is pointed out " not having this user ", and refusal login; Otherwise, if existed, go to step 4);
4) iris feature of the iris data that contrast is obtained by above-mentioned fractionation and the iris feature of having stored, if do not mated, " failure " information that sends, to client's part device, is pointed out " not having this user ", and refusal login; Otherwise, if existed, go to 5);
5) starting authority management module, is user assignment authority, and sends corresponding permission grant information to client's part device, and user successfully logins PDM system.
2. an iris recognition PDM rights management device, is characterized in that: comprise client's part device and server part device two parts;
Wherein, client's part device is comprised of microprocessor, iris capturing module, communication module, memory module and interface module, the Vin0 port of microprocessor is connected with the Vout port of iris capturing module, for obtaining iris capturing module, collects client iris data; The Vout2 port of microprocessor is connected with the VCC port of communication module, for communicating by letter of microprocessor and service end part device; The Vin1 port of microprocessor is connected with the Vout port of memory module, and the Vout1 port of microprocessor is connected with the Vin port of memory module, the authority information returning for obtaining user identification code and server part device; The Vout3 port of microprocessor is connected with the VCC port of interface module, for being responsible for transmitting data;
Server component device is comprised of microprocessor, iris recognition module, communication module, memory module, interface module and authority management module, the Vin2 port of microprocessor is connected with the Vout port of iris recognition module, for obtaining the client iris data of client's part device transmission and carrying out feature extraction, and contrast with the iris feature in iris database; The Vout2 port of microprocessor is connected with the VCC port of communication module, for being responsible for and the communicating by letter of client terminal device; The Vin1 port of microprocessor is connected with the Vout port of memory module, and the Vout1 port of microprocessor is connected with the Vin port of memory module, for storing all users' iris feature and user's right assignment situation; The Vout2 of microprocessor is connected with the VCC of interface module, for being responsible for transmitting data; The Vin3 port of microprocessor is connected with the Vout port of authority management module, is used to user's granted rights.
CN201310583137.XA 2013-11-20 2013-11-20 Iris recognition PDM rights management method and device Pending CN103605918A (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN201310583137.XA CN103605918A (en) 2013-11-20 2013-11-20 Iris recognition PDM rights management method and device

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN201310583137.XA CN103605918A (en) 2013-11-20 2013-11-20 Iris recognition PDM rights management method and device

Publications (1)

Publication Number Publication Date
CN103605918A true CN103605918A (en) 2014-02-26

Family

ID=50124139

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201310583137.XA Pending CN103605918A (en) 2013-11-20 2013-11-20 Iris recognition PDM rights management method and device

Country Status (1)

Country Link
CN (1) CN103605918A (en)

Cited By (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN107704843A (en) * 2017-10-26 2018-02-16 上海爱优威软件开发有限公司 A kind of simple eye iris verification method and system
CN108121901A (en) * 2017-12-13 2018-06-05 北京无线电计量测试研究所 A kind of operating right managing and control system based on iris recognition

Citations (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101833697A (en) * 2009-03-13 2010-09-15 新奥特硅谷视频技术有限责任公司 Monitoring system based on iris identification
CN103049850A (en) * 2013-01-05 2013-04-17 深圳市中兴移动通信有限公司 Mobile payment terminal, system and payment method thereof based on NFC (Near Field Communication)

Patent Citations (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101833697A (en) * 2009-03-13 2010-09-15 新奥特硅谷视频技术有限责任公司 Monitoring system based on iris identification
CN103049850A (en) * 2013-01-05 2013-04-17 深圳市中兴移动通信有限公司 Mobile payment terminal, system and payment method thereof based on NFC (Near Field Communication)

Cited By (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN107704843A (en) * 2017-10-26 2018-02-16 上海爱优威软件开发有限公司 A kind of simple eye iris verification method and system
CN108121901A (en) * 2017-12-13 2018-06-05 北京无线电计量测试研究所 A kind of operating right managing and control system based on iris recognition

Similar Documents

Publication Publication Date Title
CN104038476A (en) Method, apparatus and system used for login management
CN103297392A (en) Fingerprint identity authentication system and authentication method
CN103077561A (en) School office fingerprint access control management system
CN105117633A (en) Face recognition login validation system for Windows system
US20140337655A1 (en) Integrated interface system for power-system monitoring and control system
CN103605918A (en) Iris recognition PDM rights management method and device
CN103578070A (en) Method and system for electronic medical record management based on mobile communication terminal
CN103186487A (en) Method for real-time recognition of USB device hot plugging
EP2760161A1 (en) Policy processing method and device
DE112017002723T5 (en) Modular service delivery techniques for electrical equipment
CN201838002U (en) Remote logging human figure authentication device based on human figure biological identification technology
CN103841107A (en) Method and device for identity authentication of security gateway administrator
CN104992098A (en) Office management apparatus based on face recognition and using method
CN113038192A (en) Video processing method and device, electronic equipment and storage medium
US20170024625A1 (en) Server, network system, and personal authentication method
CN204480269U (en) Based on the Examinee identity verification system referring to vein identification technology
CN104202422A (en) Wireless connecting system and wireless connecting method supporting internet-of-things access
JP2010277232A (en) System, method and device for biometrics authentication
CN108989306A (en) A kind of mobile terminal safety managing and control system and implementation method
CN103501265B (en) Method and device for acquiring user information
CN103366108A (en) Iris login authentication method of computer operating system
US20180211026A1 (en) Interacting with a Computing Device via Identity-Bearing Peripheral Devices
CN109885815B (en) Electronic protocol acquisition method, system and server
CN113114755A (en) Method and device for smooth switching between devices, electronic device and storage medium
CN202563514U (en) Mobile electronic equipment with multimedia authentication encryption protection function

Legal Events

Date Code Title Description
C06 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
C02 Deemed withdrawal of patent application after publication (patent law 2001)
WD01 Invention patent application deemed withdrawn after publication

Application publication date: 20140226