CN110390746A - An implementation method of fingerprint anti-theft access control - Google Patents

Abstract

The invention discloses the implementation methods of fingerprint anti-theft gate inhibition a kind of, it is related to gate inhibition's security technology area, including fingerprint algorithm chip, main control chip and connect system and system outdoors in the door of main control chip, fingerprint algorithm chip is connect with main control chip, and it is equipped with ID authentication mechanism, authorization sequence number is transferred to the fingerprint algorithm chip of unauthorized by production tool by main control chip, arithmetic operation is carried out with unique authorization sequence number and random number, obtained root key is for the identity binding certification between main control chip and fingerprint algorithm chip, secure communication mechanism is equipped between main control chip and fingerprint algorithm module, instruction between the two is using session key and passes through SM4 encrypted transmission, session key after powering on every time is generated by different random number operation, session key is stored in RAM, in fingerprint algorithm chip power-down, The session key is lost therewith.Method of the invention enhances the reliability and anti-attack ability of access control system coded communication, improves communications security.

Description

An implementation method of fingerprint anti-theft access control

technical field

The invention relates to the field of identification circuits, in particular to a method for realizing fingerprint anti-theft access control applicable to the fields of fingerprint identification and access control.

Background technique

With the progress of society, people's awareness of security and anti-theft is gradually increasing, which provides a good development platform for the access control system. Among them, in homes, schools, companies and other places, access control systems are widely used. At the same time, people also put forward higher requirements for the humanization level and safety of the system. Therefore, fingerprint recognition technology is applied to access control systems. middle. Through such a design method, the security of the access control system is further improved, and people's requirements for the humanization of the system are met.

Contents of the invention

In order to solve the defects in the above technologies, the present invention provides a fingerprint anti-theft access control method suitable for fingerprint identification, access control and other fields.

The technical scheme adopted by the present invention to realize above-mentioned technical effect is:

A method for implementing fingerprint anti-theft access control, comprising a main control chip and an in-door system and an out-of-door system connected to the main control chip, the out-of-door system including an external keyboard module, a fingerprint identification module, an alarm, and an environmental sensor module , pressure sensor, infrared sensor module, two-phase stepper motor module, the door system includes an inner keyboard module, an LCD display, and the LCD display is used to display information such as pressure, temperature, humidity, etc., when an abnormality is detected , drive the alarm to alarm in the form of buzzing, the system inside the door is used to provide authority operations such as fingerprint addition and deletion, password modification, etc., the system outside the door is used to judge the identity of the visitor The module manages and automatically restores the fingerprint recognition module from the standby state to the working state when someone is detected.

Preferably, in the above-mentioned implementation method of fingerprint anti-theft access control, in order to ensure the security of information, when entering the in-door system, authority authentication must be completed in the form of fingerprint verification, and then enter the setting of the LCD display screen Interface, according to the need, select the authority operation items such as data recovery, fingerprint modification, fingerprint addition and deletion, and password modification through corresponding buttons on the inner keyboard module.

Preferably, in the above-mentioned implementation method of fingerprint anti-theft access control, the outside system includes a fingerprint recognition function and an infrared recognition function, wherein the fingerprint recognition function includes acquiring fingerprint information, deleting fingerprint information, verifying fingerprint information, adding For fingerprint information, the infrared identification function is used to detect people near the outside system, and the acquired data is transmitted into the fingerprint identification module to realize identification control and management of fingerprints.

Preferably, in the above-mentioned implementation method of fingerprint anti-theft access control, the fingerprint algorithm chip is connected to the main control chip, the fingerprint algorithm chip and the main control chip are provided with an identity authentication mechanism, and the main control chip The authorized serial number is transmitted to the unauthorized fingerprint algorithm chip through the mass production tool, and after the fingerprint algorithm chip receives and saves the serial number, it responds to a successful command, and if the fingerprint algorithm chip has been authorized, it responds to a failed command , that is, the fingerprint algorithm chip can only accept the authorized serial number once after leaving the factory, and use the unique authorized serial number and random number to perform operations, and the obtained root key is used for the main control chip and the fingerprint algorithm chip Identity binding authentication between.

Preferably, in the above-mentioned implementation method of fingerprint anti-theft access control, each time the system is powered on after leaving the factory, the main control chip and the fingerprint algorithm chip first need to perform mutual identity binding authentication, only when the identity binding authentication Only after success can proceed to the next step.

Preferably, in the above implementation method of fingerprint anti-theft access control, the identity binding authentication process is to compare the authentication data generated by the main control chip with the root key in the fingerprint algorithm chip, and the authentication can only be completed if the comparison is successful. , making the fingerprint algorithm chip and the main control chip perform unique identity binding authentication with each other, thereby eliminating the possibility that an illegal user obtains the data of the main control chip by replacing the fingerprint algorithm chip.

Preferably, in the above-mentioned implementation method of fingerprint anti-theft access control, a secure communication mechanism is provided between the main control chip and the fingerprint algorithm module, and the secure communication mechanism includes the steps of:

S1. Send a random number, the main control chip sends a 16Byte random number RN1 to the fingerprint algorithm

Chip, the fingerprint algorithm chip sends 16Byte random number RN2 to the main control chip;

S2. Obtain authentication data. The fingerprint algorithm chip uses the random number RN1 and the root key to perform an XOR operation as a key, and performs an SM4 encryption operation on the root key to obtain authentication data. After that, the fingerprint algorithm chip will The authentication data is sent to the main control chip for verification and comparison. The main control chip uses the value obtained by XOR operation of the random number RN2 and the root key as the key, and performs SM4 encryption operation on the root key to obtain the authentication data. , and then the main control chip sends the authentication data to the fingerprint algorithm chip for verification and comparison;

S3. Comparing the authentication data, both the main control chip and the fingerprint algorithm chip compare the authentication data calculated by themselves with the received authentication data, if they are the same, the authentication will pass, if they are different, the authentication will fail, and the session will be generated after the authentication is passed The key is used for communication between the main control chip and the fingerprint algorithm chip;

S4. Session key generation. Both the fingerprint algorithm chip and the main control chip use the value obtained by XOR operation of random number RN1 and random number RN2 as a key, and perform SM4 encryption operation on random number RN2 to obtain a session key.

Preferably, in the above-mentioned implementation method of fingerprint anti-theft access control, the instructions between the main control chip and the fingerprint algorithm chip use a session key and are encrypted and transmitted through SM4, and the session key after each power-on is determined by Different random number operations are generated.

Preferably, in the above-mentioned implementation method of fingerprint anti-theft access control, the session key is stored in RAM, and when the fingerprint algorithm chip is powered off, the session key is lost, and is used to maximize This reduces the possibility of communication instructions being intercepted and cracked by illegal users.

Preferably, in the above implementation method of fingerprint anti-theft access control, the model of the main control chip is STM32F103, and the model of the fingerprint algorithm chip is BRD501.

The beneficial effects of the present invention are: the realization method of the fingerprint anti-theft access control of the present invention is provided with an identity authentication mechanism on the fingerprint algorithm chip and the main control chip, so that the fingerprint algorithm chip and the main control chip perform unique identity binding authentication each other, thereby The possibility of illegal users obtaining the data of the main control chip by replacing the fingerprint algorithm chip is eliminated, and the identity authentication mechanism is greatly improved. In addition, by adding a secure communication mechanism between the fingerprint algorithm chip and the main control chip, the communication between the two is encrypted to ensure data security. The session key is stored in RAM. When the fingerprint algorithm chip is powered off, the session key will be lost, so the possibility of communication commands being intercepted and cracked by illegal users is reduced to the greatest extent, and the reliability and reliability of encrypted communication are enhanced. The ability to resist attacks improves communication security. It can give full play to the role of fingerprint identification technology, improve the overall performance of the access control system, and thus protect the safety of users' property.

Description of drawings

Fig. 1 is a module block diagram of the present invention;

Fig. 2 is a schematic diagram of the secure communication mechanism of the present invention.

Detailed ways

In order to make the present invention be further understood, the present invention will be further described below with reference to accompanying drawing and specific embodiment of description:

As shown in Figures 1 and 2, the present invention discloses a method for implementing fingerprint anti-theft access control, including a main control chip and an in-door system and an out-of-door system connected to the main control chip. The out-of-door system includes an external keyboard module, a fingerprint identification Modules, alarms, environmental sensor modules, pressure sensors, infrared sensor modules, two-phase stepper motor modules. The door system includes an internal keyboard module and an LCD display. The LCD display is used to display information such as pressure, temperature, and humidity. When an abnormality is detected, the alarm will be driven to give an alarm in the form of a buzzer. The in-door system is used to provide permission operations such as adding and deleting fingerprints and changing passwords.

Specifically, the permission operation includes:

1. Restore data: If the user chooses this option, the access control system will automatically enter the link of restoring factory settings, and the password will also be automatically reset, and the recovery will become the default password "222222", and the fingerprint information saved in the system will also be deleted;

2. Modifying fingerprints: modifying fingerprints in the access control system includes two functions, namely, deleting fingerprints and adding fingerprints. The former will delete all fingerprint information stored in the system, so users should operate with caution; adding fingerprints in the latter will enter a system Fingerprints that are not in , need to complete authority authentication before proceeding. In the process of entering fingerprints, the same fingerprint needs to be entered three times, and after the comparison is correct, it will be added to the fingerprint database of the system;

3. Modify password: To modify the password, the user needs to output the old password to verify the identity, then input the new password, and click the # key on the keyboard to complete the modification. Then, if the modification is successful, the M access control system will give a prompt of "modification successful", otherwise it will give a prompt of "modification failure".

The outside system is used to judge the identity of the visitor, and at the same time manage the infrared sensor module in the outside system, and automatically restore the fingerprint recognition module from the standby state to the working state when someone is detected. When the password is entered incorrectly and exceeds 3 times, the system outside the door will trigger an alarm, and then the door can be opened and closed only after the password verification and fingerprint verification are successful.

In order to ensure the safety of information, when entering the door system, the authority authentication must be completed by means of fingerprint verification, and then enter the setting interface of the LCD display screen, and select data recovery and fingerprint modification by pressing the corresponding buttons on the inner keyboard module as required , fingerprint addition and deletion, password modification and other permission operation items.

Further, the outside system includes fingerprint recognition function and infrared recognition function, wherein, the fingerprint recognition function includes acquiring fingerprint information, deleting fingerprint information, verifying fingerprint information, adding fingerprint information, and the infrared recognition function is used to detect people near the outside system , and transmit the acquired data into the fingerprint identification module to realize the identification control and management of the fingerprint.

In order to further increase security, the fingerprint algorithm chip is connected to the main control chip, and the fingerprint algorithm chip and the main control chip are provided with an identity authentication mechanism. Every time the system is powered on after leaving the factory, the main control chip and the fingerprint algorithm chip first need to perform mutual identity binding authentication. Only after the identity binding authentication is successful can the next step be entered. The identity binding authentication process is to compare the authentication data generated by the main control chip and the root key in the fingerprint algorithm chip. Only when the comparison is successful can the authentication be completed, so that the fingerprint algorithm chip and the main control chip can perform unique identity binding authentication with each other, thus eliminating It is possible for illegal users to obtain the data of the main control chip by replacing the fingerprint algorithm chip.

The main control chip transmits the authorized serial number to the unauthorized fingerprint algorithm chip through the mass production tool, and the fingerprint algorithm chip responds to the successful command after receiving and saving the serial number. If the fingerprint algorithm chip has been authorized, it will respond to the failure command, that is, the fingerprint algorithm chip can only accept the authorized serial number once after leaving the factory. The unique authorization serial number and the random number are used for operation, and the obtained root key is used for identity binding authentication between the main control chip and the fingerprint algorithm chip.

There is a secure communication mechanism between the main control chip and the fingerprint algorithm module, and the secure communication mechanism includes steps:

S1. Send random numbers, the main control chip sends 16Byte random number RN1 to the fingerprint algorithm chip, and the fingerprint algorithm chip sends 16Byte random number RN2 to the main control chip;

S2. Obtain the authentication data. The fingerprint algorithm chip uses the random number RN1 and the value obtained by XOR operation with the root key as the key, performs SM4 encryption operation on the root key to obtain the authentication data, and then the fingerprint algorithm chip sends the authentication data to The main control chip performs verification and comparison. The main control chip uses the random number RN2 and the value obtained by XOR operation with the root key as the key, performs SM4 encryption operation on the root key to obtain the authentication data, and then the main control chip uses the authentication data Send to the fingerprint algorithm chip for verification and comparison;

S3. Comparing the authentication data, both the main control chip and the fingerprint algorithm chip compare the authentication data calculated by themselves with the received authentication data. If they are the same, the authentication will pass, and if they are different, the authentication will fail. Communication between the main control chip and the fingerprint algorithm chip;

S4. Session key generation. Both the fingerprint algorithm chip and the main control chip use the value obtained by XOR operation of random number RN1 and random number RN2 as a key, and perform SM4 encryption operation on random number RN2 to obtain a session key.

Specifically, in a preferred embodiment of the present invention, the instructions between the main control chip and the fingerprint algorithm chip use a session key and are encrypted and transmitted through SM4, and the session key after each power-on is generated by different random number operations. The session key is stored in the RAM, and when the fingerprint algorithm chip is powered off, the session key is lost, so as to reduce the possibility that the communication instruction is intercepted and cracked by an illegal user to the greatest extent. The model of the main control chip is STM32F103, and the model of the fingerprint algorithm chip is BRD501.

In summary, the implementation method of the fingerprint anti-theft access control of the present invention is provided with an identity authentication mechanism on the fingerprint algorithm chip and the main control chip, so that the fingerprint algorithm chip and the main control chip perform unique identity binding authentication with each other, thereby eliminating The possibility for illegal users to obtain the data of the main control chip by replacing the fingerprint algorithm chip greatly improves the identity authentication mechanism. In addition, by adding a secure communication mechanism between the fingerprint algorithm chip and the main control chip, the communication between the two is encrypted to ensure data security. The session key is stored in RAM. When the fingerprint algorithm chip is powered off, the session key will be lost, so the possibility of communication commands being intercepted and cracked by illegal users is reduced to the greatest extent, and the reliability and reliability of encrypted communication are enhanced. The ability to resist attacks improves communication security. It can give full play to the role of fingerprint identification technology, improve the overall performance of the access control system, and thus protect the safety of users' property.

The basic principles, main features and advantages of the present invention have been shown and described above. Those skilled in the art should understand that the present invention is not limited by the above-mentioned embodiments. What are described in the above-mentioned embodiments and the description are only the principles of the present invention. Changes and improvements, these changes and improvements all fall within the scope of the claimed invention, and the protection scope of the present invention is defined by the appended claims and their equivalents.

Claims (10)

1. a kind of implementation method of fingerprint anti-theft gate inhibition, which is characterized in that including main control chip and connect the main control chip System and system, the system outdoors include outer Keysheet module, fingerprint identification module, alarm, environmental sensor outdoors in door Mould group, pressure sensor, infrared sensor module, two-phase stepping motor module, in the door system include internal key disk module, LCD display screen, LCD display screen is for showing the information such as pressure, temperature, humidity, when monitoring abnormal, driving report Alert device alarm in the form of buzzing, and system is operated for providing the permissions such as fingerprint additions and deletions, password modification in the door, it is described outdoors System is for the judgement to visitor's identity, while the infrared sensor module in external system is managed on the door, is being detected Fingerprint identification module is restored to working condition by standby mode automatically when someone.

2. the implementation method of branch fingerprint anti-theft gate inhibition according to claim 1, which is characterized in that for the safety for guaranteeing information Property, when entering system in the door, purview certification must be completed in a manner of fingerprint authentication, subsequently into the LCD display screen Set interface, as needed, on interior Keysheet module by respective keys select restore data, fingerprint modification, fingerprint additions and deletions, The permissions action-items such as password modification.

3. the implementation method of branch fingerprint anti-theft gate inhibition according to claim 1, which is characterized in that the system outdoors includes Fingerprint identification function and infrared identification function, wherein the fingerprint identification function includes obtaining finger print information, deleting fingerprint letter Breath, verifying finger print information, addition finger print information, the infrared identification function are used to carry out the people of the arrangement adjacent outdoors Detection, the data that will acquire are by transmission, into fingerprint identification module, realize identification control and the management to fingerprint.

4. the implementation method of branch fingerprint anti-theft gate inhibition according to claim 1, which is characterized in that further include fingerprint algorithm core Piece, the fingerprint algorithm chip are connected with the main control chip, and the fingerprint algorithm chip and the main control chip are equipped with identity Authorization sequence number is transferred to the fingerprint algorithm chip of unauthorized by production tool by authentication mechanism, the main control chip, After the fingerprint algorithm chip receives and saves sequence number, response is successfully instructed, such as the fingerprint algorithm chip oneself through awarding Power, then answer failed instructs, i.e., the described fingerprint algorithm chip can only receive an authorization sequence number after factory, unique with this Authorization sequence number and random number carry out arithmetic operation, obtained root key is for the main control chip and the fingerprint algorithm core Identity binding certification between piece.

5. the implementation method of branch fingerprint anti-theft gate inhibition according to claim 4, which is characterized in that every subsystem after factory It powers on, the main control chip and the fingerprint algorithm chip are firstly the need of mutual identity binding certification is carried out, only when identity is tied up It just can enter after authenticating successfully calmly in next step.

6. the implementation method of branch fingerprint anti-theft gate inhibition according to claim 5, which is characterized in that the identity binding certification Process is that the authentication data for generating the main control chip with root key in the fingerprint algorithm chip compares, and is compared successfully Certification could be completed, the fingerprint algorithm chip and the main control chip is made mutually to carry out unique identity binding certification, thus Illegal user is eliminated by replacing a possibility that fingerprint algorithm chip obtains the main control chip data.

7. the implementation method of branch fingerprint anti-theft gate inhibition according to claim 6, which is characterized in that the main control chip and institute State between fingerprint algorithm module be equipped with secure communication mechanism, the secure communication mechanism comprising steps of

S1, random number is sent, the main control chip sends 16Byte random number R N1 to the fingerprint algorithm

Chip, the fingerprint algorithm chip send 16Byte random number R N2 to the main control chip；

S2, authentication data is obtained, random number R N1 and root key are carried out what XOR operation operated by the fingerprint algorithm chip Numerical value carries out SM4 cryptographic calculation to root key and obtains authentication data, the fingerprint algorithm chip will authenticate number later as key Verification comparison is carried out according to the main control chip is sent to, random number R N2 and root key are carried out XOR operation by the main control chip Obtained numerical value is operated as key, SM4 cryptographic calculation is carried out to root key and obtains authentication data, the main control chip will later Authentication data is sent to the fingerprint algorithm chip and carries out verification comparison；

S3, comparative certification data, the main control chip and the fingerprint algorithm chip to itself calculated authentication data with The authentication data received compares, identical, and certification passes through, different then authentification failure, and certification starts generation session after passing through close Key is used for the communication of the main control chip and the fingerprint algorithm chip chamber；

S4, session key generate, the fingerprint algorithm chip and the main control chip all by random number R N1 and random number R N2 into The numerical value that row XOR operation operates carries out SM4 cryptographic calculation as key, to random number R N2 again and obtains session key.

8. the implementation method of branch fingerprint anti-theft gate inhibition according to claim 7, which is characterized in that the main control chip and institute The instruction of fingerprint algorithm chip chamber is stated using session key and passes through SM4 encrypted transmission, the session key after powering on every time by Different random number operation generates.

9. the implementation method of branch fingerprint anti-theft gate inhibition according to claim 7 or 8, which is characterized in that the session key It is stored in RAM, in the fingerprint algorithm chip power-down, which loses therewith, for the full extent Reduce a possibility that communication instruction is intercepted and cracked by illegal user.

10. the implementation method of branch fingerprint anti-theft gate inhibition according to claim 1, which is characterized in that the main control chip Model STM32F103, the model BRD501 of the fingerprint algorithm chip.