CN106375262B - Access control method and device - Google Patents

Access control method and device Download PDF

Info

Publication number
CN106375262B
CN106375262B CN201510431928.XA CN201510431928A CN106375262B CN 106375262 B CN106375262 B CN 106375262B CN 201510431928 A CN201510431928 A CN 201510431928A CN 106375262 B CN106375262 B CN 106375262B
Authority
CN
China
Prior art keywords
access area
terminal device
access
determined
boundary
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Active
Application number
CN201510431928.XA
Other languages
Chinese (zh)
Other versions
CN106375262A (en
Inventor
笪斌
王炜
于海华
廖可
杨林举
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Ricoh Co Ltd
Original Assignee
Ricoh Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Ricoh Co Ltd filed Critical Ricoh Co Ltd
Priority to CN201510431928.XA priority Critical patent/CN106375262B/en
Priority to JP2016142483A priority patent/JP6191743B2/en
Publication of CN106375262A publication Critical patent/CN106375262A/en
Application granted granted Critical
Publication of CN106375262B publication Critical patent/CN106375262B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Images

Classifications

    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00Network architectures or network communication protocols for network security
    • H04L63/10Network architectures or network communication protocols for network security for controlling access to devices or network resources

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Hardware Design (AREA)
  • Computer Security & Cryptography (AREA)
  • Computing Systems (AREA)
  • General Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Mobile Radio Communication Systems (AREA)
  • Telephone Function (AREA)
  • Telephonic Communication Services (AREA)

Abstract

The embodiment of the invention provides an access control method and device. The access control method comprises the following steps: determining the position information of the terminal equipment according to the signal characteristic value of the terminal equipment; determining whether the terminal device passes through the boundary of the access area to enter the access area according to the position information; and allowing the terminal device to use the service in the access area when it is determined that the terminal device enters the access area, wherein a boundary of the access area is determined according to a previously obtained signal characteristic value of the reference device.

Description

Access control method and device
Technical Field
The present invention relates to an access control method and apparatus, and more particularly, to a method and apparatus for performing access control according to location information of a terminal device.
Background
In recent years, in order to improve the efficiency of use, more and more areas such as classrooms, office spaces, activity spaces, and the like are configurable according to the needs of users. For example, when it is desired to use a specific office area such as a conference room, many enterprises allow employees to make reservation registrations, and allow the employees making reservation registrations to use the specific office area at a reservation time. When users use these areas, it is often desirable to use not only the space resources of the area, but also the service resources in the space, for example, wireless networks, printers, projectors, and the like.
It has been proposed to provide means such as infrared, near field, etc. at the entrance of a specific area to determine whether a user enters a reserved area as reservation registration is made, and to allow the user to access a regional service resource when it is determined that the user enters the reserved area. However, the infrared device, the near field device, and the like are fixed in position, and it is inconvenient to flexibly adjust the boundary of the area to be used according to the user's needs. Furthermore, installation of infrared, near field, etc. devices increases the cost of configuring the area.
Disclosure of Invention
An object of the embodiments of the present invention is to provide an access control method and apparatus, so as to solve the above problem.
An embodiment of the present invention provides an access control method, including: determining the position information of the terminal equipment according to the signal characteristic value of the terminal equipment; determining whether the terminal device passes through the boundary of the access area to enter the access area according to the position information; and allowing the terminal device to use the service in the access area when it is determined that the terminal device enters the access area, wherein a boundary of the access area is determined according to a previously obtained signal characteristic value of the reference device.
Another embodiment of the present invention provides an access control apparatus including: the position acquisition unit is configured to determine the position information of the terminal equipment according to the signal characteristic value of the terminal equipment; an area entry determination unit configured to determine whether the terminal device passes through a boundary of an access area to enter the access area according to the location information; and a service providing unit configured to allow the terminal device to use the service in the access area when it is determined that the terminal device enters the access area, wherein a boundary of the access area is determined according to a previously obtained signal characteristic value of the reference device.
In the access control method and apparatus provided according to the embodiments of the present invention described above, by determining the boundary of the access area according to the signal characteristic value of the reference device previously at the boundary and determining whether the terminal device enters the predetermined access area according to the boundary and the location information of the terminal device determined based on the signal characteristic value of the terminal device, the boundary of the access area can be flexibly accessed, and it is not necessary to set an infrared, near field, or the like at the entrance of a specific area, thereby saving expenses.
Drawings
Fig. 1 is a flow chart describing an access control method according to one embodiment of the present invention.
Fig. 2a is an explanatory diagram showing an exemplary case of setting a boundary of an access area according to an embodiment of the present invention.
Fig. 2b is an explanatory diagram showing an exemplary case of setting a boundary of an access area according to another embodiment of the present invention.
Fig. 3 is a block diagram showing an exemplary configuration of an access control apparatus according to an embodiment of the present invention.
Fig. 4 is an overall hardware block diagram showing an access control system according to an embodiment of the present invention.
Detailed Description
In order that those skilled in the art will better understand the present invention, preferred embodiments of the present invention will be described in detail with reference to the accompanying drawings. Note that in the present specification and the drawings, steps and elements having substantially the same structure are denoted by the same reference numerals, and repeated explanation of the steps and elements will be omitted.
In an embodiment according to the invention, the terminal device and the reference device may be removable devices capable of transmitting wireless signals, e.g. WIFI signals, bluetooth signals, etc. Specific forms of terminal devices and reference devices may include, but are not limited to, mobile phones, portable computers, multimedia players, cameras, game consoles, and the like. Further, the access area may be an area in which a particular room in the floor is located. Further, in the embodiment according to the present invention, it is assumed that the terminal device is a device which has made a reservation and has an authority to use a service in the access area.
Fig. 1 is a flow chart describing an access control method according to one embodiment of the present invention. Next, an access control method 100 according to an embodiment of the present invention will be described with reference to fig. 1. As shown in fig. 1, in step S101, the location information of the terminal device is determined according to the signal characteristic value of the terminal device. And in step S102, it is determined whether the terminal device passes through the boundary of the access area to enter the access area based on the location information obtained in step S101. In an embodiment according to the present invention, the boundary of the access area may be determined according to a previously obtained signal characteristic value of the reference device.
The characteristic value may be one value or an array containing a plurality of values. For example, a signal characteristic value may be generated based on the strength of the transmitted signal. According to one example of the present invention, the RSSI (received signal strength indicator) of a signal transmitted by a terminal device or a reference device may be calculated as a signal characteristic value using a signal space attenuation model. For example, the RSSI of a signal transmitted by a device may be calculated by the following equation (1):
Figure BDA0000764263930000031
where n is the path loss index, d is the distance of the device, d0Is a reference distanceA is at a reference distance d0Reference RSSI of (c).
Further, for example, when the position information determined from the signal characteristic value of the terminal device matches the boundary of the access area determined from the signal characteristic value of the reference device obtained previously, it is determined that the terminal device has passed the boundary of the access area and entered the access area.
According to an example of the present invention, the access area may include one candidate area or may include a plurality of candidate areas. In particular, the candidate regions included by the access region may be determined based on region selection input from the user. Further, the physical location desired as the boundary of each candidate region may be determined in advance, the signal characteristic value of a reference device at the determined physical location may be measured and/or calculated, and the obtained signal characteristic value at the determined physical location may be taken as the boundary of the candidate region.
After determining the candidate regions that the access region includes based on the region selection input from the user, the boundaries of the access region may be generated based on the determined boundaries of the candidate regions. For example, when it is determined that the access region includes one candidate region according to the region selection input from the user, the boundary of the candidate region may be used as the boundary of the access region. For another example, when it is determined that the access region includes a plurality of candidate regions according to the region selection input from the user, a boundary located at the periphery of the composed access region among the boundaries of the plurality of candidate regions may be used as the boundary of the access region.
Further, according to another example of the present invention, the boundary of the access area may include a plurality of boundaries corresponding to each entry of the access area. In step S102, when it is determined that the terminal device passes through at least two boundaries of the plurality of boundaries of one entry of the access area in the predetermined order based on the position information, it is determined that the terminal device enters the access area. For example, the boundaries of the access area include at least an inner boundary provided at each entrance of the access area and an outer boundary on a path leading to the entrance. And when the terminal equipment is determined to pass through the outer boundary and then the inner boundary according to the position information, determining that the terminal equipment enters the access area. According to an example of the present invention, an entry to an access area and a path to the entry are predetermined valid entries and paths, and the number of valid entries and paths is limited.
An exemplary scenario for setting the boundaries of the access area according to an embodiment of the present invention will be further explained in connection with fig. 2a and 2 b. Fig. 2a is an explanatory diagram showing an exemplary case of setting a boundary of an access area according to an embodiment of the present invention. Fig. 2b is an explanatory diagram showing an exemplary case of setting a boundary of an access area according to another embodiment of the present invention. In the example scenario shown in fig. 2a and 2b, there is a first candidate area 210 and a second candidate area 250 in the floor 200. The first candidate region 210 has one entry and three paths may lead to the entry. The first candidate region 210 has one entry and three paths may lead to the entry. The second candidate region 250 has one entry and there are two paths to the entry. The inner boundary 211 of the first candidate region 210 is previously set at the entrance of the first candidate region 210 according to the signal characteristic value of the reference device at the entrance of the first candidate region 210, and the outer boundaries 212, 213, and 214 of the first candidate region 210 are respectively set at three paths near the entrance according to the signal characteristic values of the reference device at the three paths near the entrance. The inner boundary 251 of the second candidate region 250 is previously set at the entrance of the second candidate region 250 according to the signal characteristic value of the reference device at the entrance of the second candidate region 250, and the outer boundaries 252 and 253 of the second candidate region 250 are respectively set on two paths near the entrance according to the signal characteristic values of the reference device on the two paths near the entrance.
In the example shown in fig. 2a, the access region is determined to be the first candidate region 210 according to a region selection input from the user. In this case, the inner boundary 211 and the outer boundaries 212, 213, and 214 of the first candidate area 210 may be used as the boundaries of the access area. For example, as indicated by the dashed line 220 in fig. 2a, when it is determined from the location information that the terminal device passes the outer boundary 212 first and then the inner boundary 211, it is determined that the terminal device enters the access area 210.
Also in the example shown in fig. 2b, the access regions are determined to be the first candidate region 210 and the second candidate region 250 according to the region selection input from the user. In this case, it is preferable that,
the boundaries 212, 213, and 253 of the boundaries of the first candidate region 210 and the second candidate region 250, which are located at the periphery of the composed access region, may be used as the outer boundaries of the access region, the inner boundaries of the first candidate region 210 and the second candidate region 250 may be used as the inner boundaries of the access region, and the first candidate region 210 outer boundary 214 and the first candidate region 210 outer boundary 252 located inside the access region may not be used. When it is determined that the terminal device passes through one of the outer boundaries 212, 213, and 253 and passes through one of the inner boundaries 211 and 251 according to the location information, it is determined that the terminal device enters the access area.
It should be noted that although the example shown in fig. 2 illustrates an inlet having an inner boundary and an outer boundary, the present invention is not limited thereto. For example, intermediate boundaries can be directly arranged on the inner boundary and the outer boundary to further determine the moving mode of the terminal equipment.
Returning to fig. 1, when it is determined that the terminal device enters the access area, the terminal device is allowed to use the service in the access area in step S103.
Further, according to another example of the present invention, for each path to an access area, the path may be partitioned according to a signal characteristic value that the reference device previously had on the path. In step S101, a current block in which the terminal device is located may be determined among the divided blocks according to the signal characteristic value of the terminal device, and the current block may be used as the location information of the terminal device. Therefore, the position information of the terminal equipment can be obtained only by determining the block where the terminal equipment is located, and the accurate position information of the terminal equipment is not needed, so that the operation required for obtaining the position information of the terminal equipment is simplified.
In some cases, it may be desirable to prohibit any device from entering the access area from a path that is never valid, for security reasons. In this case, the terminal device may be further authenticated by the trace. Specifically, the movement trajectory of the terminal device may be determined from the position information. As described above, the movement trajectory of the terminal device may be generated according to the current block in which the terminal device is located.
For example, the proximity of the terminal to each tile may be determined by matching. When the user carrying the terminal device travels and sequentially passes through each block, the sequence of characteristic values of the signal transmitted by the terminal device can be recorded, and the moving track of the terminal device, namely the block in which the terminal device appears at a specific moment, can be roughly judged through the sequence. Preferably, the signal characteristic value corresponding to each block may be an array including a plurality of values to provide higher determination accuracy.
In step S103, when it is determined that the movement trajectory matches one of the paths to the access area and the terminal device enters the access area, the terminal device is allowed to use the service in the access area. For example, when it is determined that the movement trajectory passes through all blocks on a path, it may be determined that the movement trajectory matches the path. Alternatively, when it is determined that the number of matches of the movement trajectory with the patches on one path exceeds a predetermined threshold, it may be determined that the movement trajectory matches the path.
Further, according to another example of the present invention, the method illustrated in fig. 1 may further include determining whether the terminal device leaves the access area according to the location information, and prohibiting the terminal device from reusing the service in the access area when it is determined that the terminal device leaves the access area.
In the above access control method provided according to the embodiment of the present invention, by determining the boundary of the access area according to the signal characteristic value of the reference device previously at the boundary and determining whether the terminal device enters the predetermined access area according to the boundary and the location information of the terminal device determined based on the signal characteristic value of the terminal device, the boundary of the access area can be flexibly accessed, and it is not necessary to provide infrared, near field, or the like at the entrance of a specific area, thereby saving expenses.
Next, an access control device according to an embodiment of the present invention will be described with reference to fig. 3. Fig. 3 is a block diagram illustrating an exemplary structure of an access control apparatus 300 according to an embodiment of the present invention. As shown in fig. 3, the access control device 300 of the present embodiment includes a location acquisition unit 310, an area entry determination unit 320, and a service providing unit 330. The access control device 300 may perform the various steps/functions of the access control method 100 of fig. 1 described above, respectively. Therefore, only the main components of the access control device 300 are described below, and details that have been described above in connection with fig. 1 are omitted.
Specifically, the location acquisition unit 310 determines the location information of the terminal device according to the signal characteristic value of the terminal device. And the area entry determination unit 320 determines whether the terminal device passes through the boundary of the access area to enter the access area according to the location information obtained by the location acquisition unit 310. In an embodiment according to the present invention, the boundary of the access area may be determined according to a previously obtained signal characteristic value of the reference device.
For example, the characteristic value may be one value or an array containing a plurality of values. Signal characteristic values may be generated based on the transmitted signal strength. According to one example of the present invention, the RSSI (received signal strength indicator) of a signal transmitted by a terminal device or a reference device may be calculated as a signal characteristic value using a signal space attenuation model. For another example, when the location information determined from the signal feature value of the terminal device matches the boundary of the access area determined from the signal feature value of the reference device obtained previously, the area entry determination unit 320 may determine that the terminal device passes through the boundary of the access area and enters the access area.
According to an example of the present invention, the access area may include one candidate area or may include a plurality of candidate areas. Specifically, the region entry determining unit 320 may determine a candidate region included in the access region according to a region selection input from the user. Further, the access control device 300 may determine in advance a physical location desired as a boundary of each candidate region, measure and/or calculate a signal characteristic value of a reference device at the determined physical location, and regard the obtained signal characteristic value at the determined physical location as the boundary of the candidate region.
After determining a candidate region included in the access region according to a region selection input from the user, the region entry determining unit 320 may generate a boundary of the access region according to the determined boundary of the candidate region. For example, when it is determined that the access region includes one candidate region according to the region selection input from the user, the region entry determining unit 320 may take the boundary of the candidate region as the boundary of the access region. For another example, when it is determined that the access region includes a plurality of candidate regions according to the region selection input from the user, the region entry determining unit 320 may set, as the boundary of the access region, a boundary located at the periphery of the composed access region among the boundaries of the plurality of candidate regions.
Further, according to another example of the present invention, the boundary of the access area may include a plurality of boundaries corresponding to each entry of the access area. The area entry determining unit 320 may determine that the terminal device enters the access area when it is determined that the terminal device passes through at least two boundaries of the plurality of boundaries of one entry of the access area in a predetermined order based on the location information. For example, the boundaries of the access area include at least an inner boundary provided at each entrance of the access area and an outer boundary on a path leading to the entrance. When it is determined that the terminal device passes through the outer boundary and then passes through the inner boundary according to the location information, the area entry determining unit 320 determines that the terminal device enters the access area. According to an example of the present invention, an entry to an access area and a path to the entry are predetermined valid entries and paths, and the number of valid entries and paths is limited.
When it is determined that the terminal device enters the access area, the service providing unit 330 allows the terminal device to use the service in the access area.
Further, according to another example of the present invention, the access control device 300 may further include an area division unit. For each path to the access area, the area dividing unit may block the path according to a signal characteristic value of the reference device previously on the path. The location obtaining unit 310 may determine, from the signal feature value of the terminal device, a current block in which the terminal device is located in the divided blocks, and use the current block as the location information of the terminal device. Therefore, the location obtaining unit 310 can obtain the location information of the terminal device only by determining the block where the terminal device is located, and does not need to obtain the accurate location of the terminal device, thereby simplifying the operation required for obtaining the location information of the terminal device.
In some cases, it may be desirable to prohibit any device from entering the access area from a path that is never valid, for security reasons. In this case, the terminal device may be further authenticated by the trace. Specifically, the access control apparatus 300 may further include a trajectory determination unit to determine a movement trajectory of the terminal device according to the location information. As described above, the trajectory determination unit may generate the movement trajectory of the terminal device according to the current block in which the terminal device is located.
For example, the trajectory determination unit may determine the proximity of the terminal to each tile through matching. When the user carrying the terminal device travels and sequentially passes through the respective blocks, the trajectory determination unit may record a sequence of characteristic values regarding the signal transmitted by the terminal device, and roughly determine, from the sequence, a movement trajectory of the terminal device, i.e., at which block the terminal device appears at a specific time. Preferably, the signal characteristic value corresponding to each block may be an array including a plurality of values to provide higher determination accuracy.
The service providing unit 330 allows the terminal device to use the service in the access area only when it is determined that the movement trajectory matches one of the paths to the access area and the terminal device enters the access area. For example, the service providing unit may determine that the movement trace matches a path when determining that the movement trace passes through all blocks on the path. Alternatively, when it is determined that the number of the movement trajectory matching the patches on one path exceeds a predetermined threshold, the service providing unit may determine that the movement trajectory matches the path.
Further, according to another example of the present invention, the area entry determination unit 320 may also determine whether the terminal device leaves the access area according to the location information, and the service providing unit 330 prohibits the terminal device from reusing the service in the access area when it is determined that the terminal device leaves the access area.
In the access control apparatus provided above according to the embodiment of the present invention, by determining the boundary of the access area from the signal characteristic value of the reference device previously at the boundary and determining whether the terminal device enters the predetermined access area from the boundary and the location information of the terminal device determined based on the signal characteristic value of the terminal device, the boundary of the access area can be flexibly accessed, and it is not necessary to provide infrared, near field, or the like at the entrance of a specific area, thereby saving expenses.
Furthermore, in accordance with another embodiment of the present invention, the present invention may also be implemented by an access control hardware system. Fig. 4 is an overall hardware block diagram illustrating an access control system 400 according to an embodiment of the present invention. As shown in fig. 4, the access control system 400 may include: an input device 410 for inputting relevant images or information from the outside, such as a region selection input from a user, etc., and the specific form of the input device 410 may include, but is not limited to, a keyboard, a mouse, and a communication network and a remote input device connected thereto, etc.; a processing device 420 for implementing the above-mentioned access control method according to the embodiment of the present invention, wherein the specific form of the processing device 420 may include, but is not limited to, a central processor of a computer or other chip with processing capability, and the like, and furthermore, the processing device 420 may be connected to a network (not shown) such as the internet, and may transmit the processed image to a remote location according to the requirement of the processing procedure; an output device 430 for outputting the result of implementing the control information method to the outside, which may include, for example, a display, a printer, a communication network, a remote output device connected thereto, and the like; and a storage device 440 for storing, in a volatile or non-volatile manner, for example: the signal characteristic values, set boundaries, divided blocks, reservation information, and the like of the reference device and the terminal device may include various volatile or nonvolatile memories such as a Random Access Memory (RAM), a Read Only Memory (ROM), a hard disk, or a semiconductor memory.
As will be appreciated by one skilled in the art, the present invention may be embodied as a system, apparatus, method or computer program product. Thus, the present invention may be embodied in the form of: may be entirely hardware, entirely software (including firmware, resident software, micro-code, etc.) and in any combination of hardware and software, and may be referred to herein generally as a "component," module, "" device "or" system. Furthermore, in some embodiments, the invention may also be embodied in the form of a computer program product in one or more computer-readable media having computer-readable program code embodied in the medium.
Any combination of one or more computer-readable media may be employed. The computer readable medium may be a computer readable signal medium or a computer readable storage medium. A computer readable storage medium may be, for example, but not limited to, an electronic, magnetic, optical, electromagnetic, infrared, or semiconductor system, apparatus, or device, or any combination of the foregoing. More specific examples (a non-exhaustive list) of the computer readable storage medium would include the following: an electrical connection having one or more wires, a portable computer diskette, a hard disk, a Random Access Memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disc read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the foregoing. In the context of this document, a computer readable storage medium may be any tangible medium that can contain, or store a program for use by or in connection with an instruction execution system, apparatus, or device.
A computer readable signal medium may include a propagated data signal with computer readable program code embodied therein, for example, in baseband or as part of a carrier wave. Such a propagated data signal may take many forms, including, but not limited to, electro-magnetic, optical, or any suitable combination thereof. A computer readable signal medium may also be any computer readable medium that is not a computer readable storage medium and that can communicate, propagate, or transport a program for use by or in connection with an instruction execution system, apparatus, or device.
Program code embodied on a computer readable medium may be transmitted using any appropriate medium, including but not limited to wireless, wireline, optical fiber cable, RF, etc., or any suitable combination of the foregoing.
Computer program code for carrying out operations for aspects of the present invention may be written in any combination of one or more programming languages, including an object oriented programming language such as Java, Smalltalk, C + + or the like and conventional procedural programming languages, such as the "C" programming language or similar programming languages. The program code may execute entirely on the user's computer, partly on the user's computer, as a stand-alone software package, partly on the user's computer and partly on a remote computer or entirely on the remote computer or server. In the case of a remote computer, the remote computer may be connected to the user's computer through any type of network, including a Local Area Network (LAN) or a Wide Area Network (WAN), or the connection may be made to an external computer (for example, through the Internet using an Internet service provider).
The present invention is described above with reference to flowchart illustrations and/or block diagrams of methods, apparatus (systems) and computer program products according to embodiments of the invention. It will be understood that each block of the flowchart illustrations and/or block diagrams, and combinations of blocks in the flowchart illustrations and/or block diagrams, can be implemented by computer program instructions. These computer program instructions may be provided to a processor of a general purpose computer, special purpose computer, or other programmable data processing apparatus to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing apparatus, create means for implementing the functions/acts specified in the flowchart and/or block diagram block or blocks.
These computer program instructions may also be stored in a computer-readable medium that can direct a computer or other programmable data processing apparatus to function in a particular manner, such that the instructions stored in the computer-readable medium produce an article of manufacture including instruction means (instructions) which implement the function/act specified in the flowchart and/or block diagram block or blocks.
The computer program instructions may also be loaded onto a computer, other programmable data processing apparatus, or other devices to cause a series of operational steps to be performed on the computer, other programmable apparatus or other devices to produce a computer implemented process such that the instructions which execute on the computer or other programmable apparatus provide processes for implementing the functions/acts specified in the flowchart and/or block diagram block or blocks.
The flowchart and block diagrams in the figures illustrate the architecture, functionality, and operation of possible implementations of systems, methods and computer program products according to various embodiments of the present invention. In this regard, each block in the flowchart or block diagrams may represent a module, segment, or portion of code, which comprises one or more executable instructions for implementing the specified logical function(s). It will also be noted that each block of the block diagrams and/or flowchart illustration, and combinations of blocks in the block diagrams and/or flowchart illustration, can be implemented by special purpose hardware-based systems which perform the specified functions or acts, or combinations of special purpose hardware and computer instructions.
Having described embodiments of the present invention, the foregoing description is intended to be exemplary, not exhaustive, and not limited to the embodiments disclosed. Many modifications and variations will be apparent to those of ordinary skill in the art without departing from the scope and spirit of the described embodiments. The terminology used herein is chosen in order to best explain the principles of the embodiments, the practical application, or improvements made to the technology in the marketplace, or to enable others of ordinary skill in the art to understand the embodiments disclosed herein.

Claims (7)

1. An access control method comprising:
determining the position information of the terminal equipment according to the signal characteristic value of the terminal equipment;
determining whether the terminal device passes through the boundary of the access area to enter the access area according to the position information; and
allowing the terminal device to use the service in the access area when it is determined that the terminal device enters the access area, wherein
The boundary of the access area is determined according to the previously obtained signal characteristic value of the reference device;
the method further comprises the following steps:
determining the movement track of the terminal equipment according to the position information, wherein
The allowing the terminal device to use the service in the access area when it is determined that the terminal device enters the access area includes: when it is determined that the movement trajectory matches one of the paths to the access area and the terminal device enters the access area, allowing the terminal device to use the service in the access area;
wherein the boundary of the access region includes a plurality of boundaries corresponding to each entry of the access region;
the determining whether the terminal device passes through the boundary of the access area to enter the access area according to the location information includes:
when it is determined that the terminal device passes through at least two boundaries of a plurality of boundaries of an entry of the access area in a predetermined order based on the location information, it is determined that the terminal device enters the access area.
2. The method of claim 1, wherein
Generating the signal characteristic value according to the transmitted signal strength.
3. The method of claim 1 or 2, wherein
For each path leading to the access area, partitioning the path according to the signal characteristic value of the reference device on the path previously;
the determining the position information of the terminal device according to the signal characteristic value of the terminal device includes:
determining a current block in which the terminal equipment is located in the divided blocks according to the signal characteristic value of the terminal equipment; and
and taking the current block as the position information of the terminal equipment.
4. The method of claim 1 or 2, wherein
Accessing a region comprises determining one or more candidate regions based on a region selection input from a user;
each candidate region has a boundary of the candidate region determined according to a previously obtained signal feature value of the reference device; and
the boundaries of the access region are generated based on the determined boundaries of the one or more candidate regions.
5. The method of claim 1 or 2, further comprising:
determining whether the terminal equipment leaves the access area or not according to the position information; and
when it is determined that the terminal device leaves the access area, the terminal device is prohibited from using the service in the access area.
6. An access control device comprising:
the position acquisition unit is configured to determine the position information of the terminal equipment according to the signal characteristic value of the terminal equipment;
an area entry determination unit configured to determine whether the terminal device passes through a boundary of an access area to enter the access area according to the location information; and
a service providing unit configured to allow the terminal device to use the service in the access area when it is determined that the terminal device enters the access area, wherein
The boundary of the access area is determined according to the previously obtained signal characteristic value of the reference device;
the device further comprises: a trajectory determination unit configured to determine a movement trajectory of the terminal device according to the position information, wherein
The service providing unit allows the terminal device to use the service in the access area when it is determined that the movement trajectory matches one of the paths to the access area and the terminal device enters the access area;
wherein the boundary of the access area includes a plurality of boundaries corresponding to each entry of the access area,
the area entry determining unit determines that the terminal device enters the access area when determining that the terminal device passes through at least two boundaries of a plurality of boundaries of one entry of the access area in a predetermined order based on the position information.
7. The apparatus of claim 6, further comprising:
a region dividing unit configured to, for each path leading to the access region, block-divide the path according to a signal characteristic value of a reference device previously on the path, wherein
And the position acquisition unit determines a current block in which the terminal equipment is positioned in the divided blocks according to the signal characteristic value of the terminal equipment, and takes the current block as the position information of the terminal equipment.
CN201510431928.XA 2015-07-21 2015-07-21 Access control method and device Active CN106375262B (en)

Priority Applications (2)

Application Number Priority Date Filing Date Title
CN201510431928.XA CN106375262B (en) 2015-07-21 2015-07-21 Access control method and device
JP2016142483A JP6191743B2 (en) 2015-07-21 2016-07-20 Access control method and apparatus

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN201510431928.XA CN106375262B (en) 2015-07-21 2015-07-21 Access control method and device

Publications (2)

Publication Number Publication Date
CN106375262A CN106375262A (en) 2017-02-01
CN106375262B true CN106375262B (en) 2020-03-13

Family

ID=57879869

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201510431928.XA Active CN106375262B (en) 2015-07-21 2015-07-21 Access control method and device

Country Status (2)

Country Link
JP (1) JP6191743B2 (en)
CN (1) CN106375262B (en)

Families Citing this family (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN107426698A (en) * 2017-07-28 2017-12-01 北京囡宝科技有限公司 A kind of region declaration device and wireless device regional determination method
CN109922298A (en) * 2019-02-02 2019-06-21 阿里巴巴集团控股有限公司 Meeting room monitoring method and device

Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN103905979A (en) * 2012-12-27 2014-07-02 环达电脑(上海)有限公司 Wireless network connection system and network authority obtaining method thereof
CN104301437A (en) * 2014-11-05 2015-01-21 成都逸动无限网络科技有限公司 Private cloud platform based on multipoint transmission
CN104717062A (en) * 2013-12-11 2015-06-17 杭州华三通信技术有限公司 Method and device for quick visitor access based on BYOD management system

Family Cites Families (7)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP2004153736A (en) * 2002-11-01 2004-05-27 Hitachi Ltd Access control method for radio terminal and system therefor
JP2004287991A (en) * 2003-03-24 2004-10-14 Mitsubishi Electric Building Techno Service Co Ltd Access management system
US8743782B1 (en) * 2010-11-18 2014-06-03 Cellco Partnership Automated method to determine position of Wi-Fi access point to enable location based services
JP5812910B2 (en) * 2012-03-22 2015-11-17 富士通エフ・アイ・ピー株式会社 Authentication apparatus and authentication method
JP6024257B2 (en) * 2012-07-25 2016-11-16 富士通株式会社 Area detection program, area detection device, and area detection method
US9170112B2 (en) * 2013-02-08 2015-10-27 Google Inc. Mobile device position and orientation from multiple unsurveyed magnetic sources
JP5697696B2 (en) * 2013-02-18 2015-04-08 ヤフー株式会社 Information providing system, information providing apparatus, and information providing method

Patent Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN103905979A (en) * 2012-12-27 2014-07-02 环达电脑(上海)有限公司 Wireless network connection system and network authority obtaining method thereof
CN104717062A (en) * 2013-12-11 2015-06-17 杭州华三通信技术有限公司 Method and device for quick visitor access based on BYOD management system
CN104301437A (en) * 2014-11-05 2015-01-21 成都逸动无限网络科技有限公司 Private cloud platform based on multipoint transmission

Also Published As

Publication number Publication date
JP6191743B2 (en) 2017-09-06
JP2017028697A (en) 2017-02-02
CN106375262A (en) 2017-02-01

Similar Documents

Publication Publication Date Title
US10841741B2 (en) Systems and methods for providing error correction and management in a mobile-based crowdsourcing platform
US10148635B2 (en) Systems, apparatuses, methods, and non-transitory computer readable media for authenticating user using history of user
US9883447B2 (en) Communication method and apparatus supporting selective communication services
WO2017020654A1 (en) Wireless network access method and device
US11601429B2 (en) Network service control for access to wireless radio networks
US9635129B2 (en) Automatic application discovery, download, integration and launch
US11228653B2 (en) Terminal, cloud apparatus, driving method of terminal, method for processing cooperative data, computer readable recording medium
CN104516783A (en) Authority control method and device
US9380516B2 (en) Local wireless data communication system, and method and apparatus for automatically setting information in the system
US9645914B1 (en) Apps store with integrated test support
CN106484848B (en) Application recommendation method and device
US20160072918A1 (en) System and Method for Acquisition, Management and Distribution of User-Generated Digital Media Content
CN110909373A (en) Access control method, device, system and storage medium
CN109672908A (en) A kind of method for protecting privacy, device and mobile terminal
CN106375262B (en) Access control method and device
CN110213800A (en) The processing method and processing device of network slice business
US20160004845A1 (en) Access allocation for a shared media output device
US20180146417A1 (en) Managing wireless network connection
KR101338001B1 (en) Terminal device and access point access method of the terminal device
US11122437B2 (en) Detection of GPS spoofing using wireless network visibility to mobile devices
CN111988733A (en) Method and equipment for realizing positioning based on wireless hotspot
CN113132906A (en) Virtual positioning identification method and device, storage medium and electronic equipment
CN104394059B (en) Based on establishing method and the system of social activity application
US20170099383A1 (en) Method and system for mediating uses of smart devices of group users by utilizing location-based virtual self-control space
JP2011166690A (en) Radio communication system, radio link terminating device, server, method for determining correctness of installation place of radio link terminating device, program for radio link terminating device, and program for server

Legal Events

Date Code Title Description
C06 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
GR01 Patent grant