CN106603484A - Virtual key method and device, background system and user terminal applying the method - Google Patents

Abstract

A virtual key method, a corresponding device, a background system and a user terminal are provided. The technical scheme of the invention overcomes the defects of safety, reliability, expandability, scale, universality and flexibility of the prior art. The main design idea is that a background system generates a virtual lock cylinder corresponding to each virtual key of each access control device aiming at each access control device and stores the virtual lock cylinder in the access control device, the virtual lock cylinder can be opened and read only by the combination of the corresponding virtual key and a virtual key patch, and the virtual key patch are generated by the background system and transmitted to a user terminal of an authorized user for storage; the user terminal transmits the virtual key and the virtual key affix to the access control device in a specially designed mode to complete operations of pairing, unlocking and detailed information comparison with the virtual lock cylinder. The whole processing process has the capabilities of preventing falsification, brute force and cracking, information leakage and counterfeiting, and the flexibility and the expandability of lock control are kept.

Description

Virtual key method and device, background system and user terminal applying the method

technical field

The invention relates to a technology for operating an access control device, in particular to a technology for safely operating an intelligent access control device with a networking function, a background system and a terminal.

Background technique

The technologies currently used by existing access control devices include: physical keys, password input, ID/IC card identification, RFID card identification, magnetic card identification, two-dimensional code identification, Bluetooth identification, NFC identification, biometric identification (such as face, Fingerprint, iris, palm print, etc.) etc. In addition to biometric identification, physical keys, password input, ID/IC card identification, RFID card identification, and magnetic card identification have been used for many years, but there are management problems (especially when personnel mobility is high) and confidentiality is not strong. , easy to be cracked or copied, and not easy to be invalidated after being lost; two-dimensional codes, Bluetooth and NFC have been promoted with the popularity of smart phones in recent years, but existing smart phones use these technologies to achieve operation access The products or technologies of control devices all have deficiencies in safety, reliability, flexibility, scalability, scalability, and versatility.

In the previous patent application 201610914471.2, an object access authority management method based on virtual key and virtual key bag technology and the corresponding background system, access control device and user terminal are disclosed. However, the disclosed technical solution is only a general virtual key technology basic framework, and does not involve the security solution of the virtual key.

Contents of the invention

The first object of the present invention is to provide a safe, reliable and flexible method for operating an access control device with a virtual key to perform lock command operation, and a device for applying the method, a background system and a user terminal.

The method specifically includes:

The background system generates and saves the device public key and device private key of the access control device for the access control device, and hands the device public key to the access control device for storage, and returns and saves the project domain key at the same time;

The background system generates and saves the user's public key and private key when the user terminal registers a new user, and hands the user public key to the user terminal for storage;

The background system generates a virtual key affix in the user's virtual key bag for the access control device that needs to generate a virtual key, and the virtual key affix is encrypted by using the device public key of the corresponding access control device to encrypt the user's private key;

The virtual key bag data sent by the background system to the user terminal includes one or more (device identification, virtual key affixes) element groups;

The access control device recognizes that the user terminal is approaching from the short-distance input module and receives data related to the virtual key from the user terminal and completes the lock command operation of the virtual key. The specific steps include:

S1. The user terminal approaches the short-distance input module of the access control device, and the access control device confirms and starts to receive input;

S2. The user terminal sends the user identification to the access control device;

S3. After receiving the user ID, the access control device searches locally whether there is a key authority record of the user ID, and if not, the operation is terminated;

S4. The access control device sends data including the device identification, the project domain key, and the first timestamp to the user terminal for authentication;

S5. The user terminal receives the data required for authentication including the device identification, the project domain key, and the first timestamp data, and finds the corresponding virtual key affix and virtual key record in the user's virtual key bag, and the virtual key record adds The command type forms the first key, wherein the command type includes: unlocking, locking, and anti-locking;

S6. Return an authentication response to the access control device. The response parameters include: the virtual key affix, the first encrypted virtual key data, and the first signature data. The steps before returning the response include: Step S6-1 through the hash algorithm pair (No. A time stamp, device identification, project domain key, user identification) to calculate the first symmetric key, step S6-2 uses the first symmetric key to encrypt the first key using a symmetric encryption algorithm to obtain the first encrypted virtual key data , step S6-3 calculates the first signature;

After receiving the authentication response, the S7 access control device performs the following steps:

S7-1 verifies the first signature data, if the signature data does not match, the operation is terminated;

S7-2 uses the device private key to decrypt the user private key in the virtual key affix, and if the decryption fails, the operation is terminated;

S7-3 uses the decrypted user private key to decrypt the virtual lock cylinder data in the key authority record to obtain the first lock cylinder data, and if the decryption fails, the operation is terminated;

S7-4 calculates the first symmetric key according to data including virtual key related data;

S7-5 uses the first symmetric key to decrypt the first encrypted virtual key data to obtain the first key data, and if the decryption fails, the operation is terminated;

S7-6 checks the specific parameters in the first lock cylinder data and the first key data, and if the check is incorrect, the operation is terminated;

After S7-7 checks that all are correct, according to the command type parameter in the first key data, the corresponding lock command is sent to the electric lock control interface, if there is no command type parameter, the unlock command is sent by default.

This method is applicable to both user terminals using NFC near-field communication and Bluetooth low-power communication, as long as the corresponding communication protocol and message processing flow are used. For details, please refer to the examples in the specific implementation modes. The same method can also be used for other short-distance wireless communication networks or point-to-point wireless communication methods.

This method is not only applicable to ordinary intelligent access control access control devices, but also applicable to intelligent lock devices with networking functions. In some embodiments, the access control device can be connected and communicated with the vehicle control system to realize the control of opening and unlocking the vehicle, thereby realizing safe, flexible and convenient vehicle rental management. It is also applicable to other movable objects, such as smart lock devices on objects such as safe deposit boxes and safes. In addition, the method can also operate the access control device to perform the anti-lock function.

The design concept of this technical solution is that the background system generates a virtual lock core corresponding to each virtual key for each access control device, and stores it in the access control device. The virtual lock core can only be combined with the corresponding virtual key plus the virtual key The combination of the suffix can be opened and read, and the virtual key and the virtual key suffix are generated by the background system and transmitted to the user terminal of the authorized user for storage; the user terminal passes the virtual key and the virtual key suffix to the access control device in a specially designed way Complete the operations of pairing, unlocking, and detailed information comparison with the virtual lock cylinder. During the entire processing process, the data has the ability to prevent tampering, brute force cracking, information leakage, and forgery. At the same time, the flexibility of lock control information is maintained. In addition, when the access control device is temporarily disconnected from the network, the user terminal and the access control device can also complete the unlocking, locking or unlocking operations without being affected by the network disconnection. Moreover, the data in the access control device does not save the user's private and sensitive information, and there is no need to worry about the risks of data leakage, tampering, and forgery.

The access control device will receive a virtual key update message from the background system only when the background system has an update for the virtual key of the device, so as to maintain the consistency between the data in the device and the background system data. When the virtual key in the user's virtual key bag changes, the background system will send a virtual key update message to the corresponding access control device. The virtual key record includes: authorizer, authorized person, virtual lock cylinder data; access control device receives Update the virtual key data stored in the device after receiving the virtual key update message.

In order to strengthen the security of transferring virtual keys and virtual key affixes between user terminals and access control devices, dynamic time stamps are used in this scheme to require user terminals to use encryption and signature to ensure high-level attack prevention and information leakage prevention ability. Timestamps can also be replaced by pseudo-random numbers, with the same effect.

In order to increase the encryption strength and matching accuracy, the use of project domain keys is also designed in the technical solution. The same type of access control devices deployed in the same project domain have the same project domain description, which includes the project domain key, which is generated by the background system and sent to the access control device for storage and use. It can enhance the data security during data transmission and facilitate the user terminal to manage the virtual key bag. In different embodiments, the project field description in a specific format can also be used to indicate the use of different encryption and decryption algorithms, public-private key pair strengths, and hash algorithms, highlighting the scalability of this solution.

The present invention does not limit which asymmetric encryption and decryption algorithm and key strength to use, as long as it is an asymmetric encryption and decryption algorithm that supports public-private key pairs and meets the security and performance requirements of the application scenario. In general, RSA, ECC, SM2 can be used.

During implementation, the hash algorithm can also be selected from commonly used algorithms such as MD5, SHA1, SHA256, and SM3 according to needs. The signature algorithm can directly use the hash algorithm, or use CRC32 or even CRC16 in less demanding scenarios.

In implementation, it is recommended to use algorithms such as AES-128, AES-192 or AES-256 as symmetric encryption algorithms.

In the above step S7-6, both the first lock cylinder data and the first key data include: validity period and type, and the type includes: unlimited times, only once, and once a day within the validity period. This is where virtual key technology is more flexible, convenient and scalable than physical keys or physical cards. In implementation, more flexible and convenient authorization methods can be designed to meet the needs of users and the market, and more field data and subsequent processing can be added to enhance security.

For a virtual key that can only be used once, after the unlocking is completed, the access control device removes this record from the key authority table and sends the first notification message to the background system. The message parameters include device identification, user identification, time . The background system receives the first notification message from the access control device, records it in the log, and updates the state data of the corresponding virtual key in the user's virtual key bag, and then sends the updated virtual key data to the user as a second notification message terminal. The user terminal receives the second notification message from the background system, and updates the locally stored virtual key data.

In different embodiments, the user terminal may be a smart device with different communication modules, display methods and interaction methods, such as smart phones, tablet computers, smart watches, vehicle-mounted devices, smart glasses, and smart robots.

The second object of the present invention is to provide a method that can use a Bluetooth accessory device as a virtual key unlocking medium, as well as an access control device, a background system and a user terminal applying the method. Specific methods include:

The access control device with a low-power bluetooth module also includes an accessory permission table, which records a list of accessories that can be used for the access control device to open the electric lock. The virtual accessory lock cylinder data and the second signature data are sent to the access control device in the form of a virtual key update message received from the background system and saved; the access control device communicates with the Bluetooth accessory device close to the access control device through a Bluetooth wireless connection Obtain the bluetooth address identification of bluetooth accessory device after; For the described bluetooth address identification of receiving, check in the attachment permission table, the steps include:

B1, converting the Bluetooth address identifier into an accessory identifier;

B2. Use the attachment identifier to search whether there is a corresponding attachment authorization record in the attachment authorization table, and if not, check and terminate;

B3. Take out the second time stamp in the attachment permission record;

B4. Use the data fingerprint algorithm to calculate the device private key fingerprint;

B5. Calculate the second symmetric key using the hash algorithm pair (second timestamp, device ID, accessory ID, item domain key, and device private key fingerprint);

B6. Use the second symmetric key to decrypt the virtual accessory lock cylinder data in the accessory authority record to obtain the accessory lock cylinder data;

B7. Perform signature calculation according to (second time stamp, device identification, accessory identification, accessory lock cylinder data, project domain key, device private key fingerprint) data to obtain the second verification signature;

B8. Check the second verification signature with the second signature data in the attachment rights record, and terminate if the check does not match;

B9. Check the valid time and status in the accessory lock cylinder data, the status includes: valid, invalid;

B10. If it is within the validity period and the status is valid, then the verification is successful, and an unlock command is sent to the electric lock control interface; if the type in the accessory lock cylinder data is only one-time type, after the unlocking is completed, the access control device will set this accessory permission The record is removed from the attachment authority table and a first notification message is sent to the background system, and the message parameters include device identification, user identification, and time.

The method for the background system to generate the virtual key update message required by the accessory device is: the authorized person information in the virtual key record includes the identification information of the short-distance wireless accessory device bound by the user on the user terminal, that is, the accessory ID, and the virtual key update message It also includes the second timestamp, the virtual accessory lock cylinder data encrypted using a symmetric encryption algorithm, and the second signature data; the second timestamp is dynamically generated by the background system; the virtual accessory lock cylinder data is encrypted by the second symmetric key, The second symmetric key is calculated by the hash algorithm pair (second timestamp, access control device identifier, accessory identifier, project domain key, device private key fingerprint); the second signature data is based on (second timestamp, device ID, accessory ID, accessory lock cylinder data, project domain key, device private key fingerprint) data are calculated by signature algorithm. The device private key fingerprint is the hash calculation value of the payload data of the device private key. This algorithm solves the problem that the bluetooth accessory device cannot save and transmit the encrypted user private key, and at the same time has high security.

When the access control device receives a virtual key update message, if the authorized person of the received virtual key is the virtual key user himself, the authorized person information in the virtual key record includes the short-distance wireless accessory device bound by the user on the user terminal The identification information, that is, the accessory identification, and the virtual key update message also includes the second timestamp, the virtual accessory lock cylinder data encrypted using a symmetric encryption algorithm, and the second signature data; the access control device receives the above-mentioned type of virtual key update message , update the relevant data to the attachment permissions table.

This technical solution solves the problem that the user may wear a pre-bound and authorized Bluetooth wearable device, such as a wristband, watch and other portable devices, because the user does not carry a mobile phone temporarily. But usually these Bluetooth devices cannot be reprogrammed to realize the communication method in the previous technical solution of the present invention (the method of dynamically passing the virtual key and the virtual key affixed and doing verification), as a compromise, this technical solution has selected the Bluetooth accessory A method for converting the Bluetooth address of a device into an accessory identifier and generating corresponding virtual accessory lock cylinder data for it. Although this method does not use an asymmetric encryption and decryption algorithm, the security is slightly lower, but it is simple and easy for users and the cost is low.

In specific implementation, this technical solution can also be used to bind the existing general-format NFC-compatible format ID card with the user account, but it is not recommended to do so, after all, there are problems and risks such as troublesome management and easy duplication.

Generally speaking, the present invention provides a safe, reliable, convenient, intelligent and scalable virtual key technical solution.

Description of drawings

The accompanying drawings are used to provide a further understanding of the technical solution of the present invention, and constitute a part of the description, and are used together with the embodiments of the present invention to explain the technical solution of the present invention, and do not constitute a limitation to the technical solution of the present invention.

Fig. 1 is a system block diagram of the background system in an embodiment;

Fig. 2 is a system block diagram of an access control device in an embodiment;

Fig. 3 is a system block diagram of a user terminal in an embodiment;

Fig. 4 is a schematic diagram of the process of generating a virtual lock cylinder and a virtual key affixed by the background system in an embodiment;

Fig. 5 is a schematic diagram of data processing when the unlocking operation is completed through NFC or Bluetooth communication between the access control device and the user terminal in an embodiment (note: signature verification processing is ignored);

Fig. 6 is a schematic diagram of the process of generating a complete set of second virtual lock cylinder and second signature by the background system in an embodiment;

Fig. 7 is a schematic diagram of data processing between the access control device and the user terminal to complete the unlocking operation through the Bluetooth accessory device in an embodiment;

Fig. 8 is a sequence diagram in which the user terminal completes the unlocking operation of the access control device through NFC in an embodiment;

Fig. 9 is a sequence diagram of the user terminal unlocking the access control device through Bluetooth in an embodiment.

detailed description

The following description is given to enable those skilled in the art to make and use the embodiments, and is provided in the context of a particular application and its requirements. Various modifications to the disclosed embodiments should be readily apparent to those skilled in the art, and the generic principles defined herein may be applied to other embodiments and applications without departing from the spirit and scope of the present disclosure. Thus, the present invention is not limited to the embodiments shown, but is to be accorded the widest scope consistent with the principles and features disclosed herein.

The data structures and code described in the Detailed Description section are typically stored on a computer readable storage medium, which may be any device or medium that can store code and/or data for use by a computer system. Computer-readable storage media include, but are not limited to, volatile memory, nonvolatile memory, magnetic storage devices, and optical storage devices (such as disk drives, magnetic tape, CDs (Compact Disks), DVDs (Digital Versatile Disks, or Digital Video Disks) ) or other media now known or later developed capable of storing code and/or data.

The methods and processes described in the detailed description can be implemented as code and/or data that can be stored in the computer-readable storage medium described above. When a computer system reads and executes the code and/or data stored on the computer-readable storage medium, the computer system performs the methods and processes implemented as data structures and code and stored within the computer-readable storage medium.

Furthermore, the methods and processes described herein can be embodied within hardware modules or devices. These modules or devices may include, but are not limited to, application-specific integrated circuit (ASIC) chips, field-programmable gate arrays (FPGAs), dedicated or shared processors that execute specific software modules or a piece of code at a specific time, and and/or other programmable logic devices now known or later developed. When the hardware modules or devices are activated, they perform the methods and processes contained within them.

Fig. 1 shows a background system 100 according to an embodiment. The background system 100 may correspond to servers, clusters, service programs running on virtual machines, and service programs running in cloud system containers, and each module therein may also be servers, clusters, service programs running on virtual machines, running The service program in the cloud system container. Referring to FIG. 1 , the user service module 101 processes requests from the user terminal 300 : login request processing 133 , registration request processing 132 , and virtual key related request processing 131 . When the virtual key data is updated, the message processing module 105 sends a virtual key update message to the access control device 200 , and the new virtual key data is also returned to the user terminal 300 . The user service module 101 accesses the object access authority table 125 through the global object access service 111 interface and accesses the access control device table 122 through the project domain information access service 110 interface. The user's virtual key bag and virtual key data are stored in the user key bag 126 database, while the user account database 127 only saves data related to user login; all operations for user accounts, virtual key bags, and virtual keys are recorded in Database user access log 128. The system management module 104 manages and monitors the system-wide running status of the background system 100. In particular, the system management module 104 manages the startup and operation of multiple instances of the project domain management module 102, and these instances are isolated and independent from each other. There is no interference and influence, and the databases between each instance are also isolated and independent. Each project domain manager logs into the background management 130 of the project domain through the terminal 199 used by the project domain manager to complete the entry and editing management of the object owner information 120 , object information 121 and access control device table 122 . The information in the access control device table includes: area number, device number, device hardware identifier, device type, associated device list, and device installation information. This table should be entered when the access control device is installed and configured. The global project domain information summary 136 service is used to automatically summarize data in instances of different project domain management modules 102 , and the summary results are stored in the object access authority table 125 .

The global object access service module 103 also includes a device public and private key table 129, which records the public keys and private keys of all service control devices. These public keys and private keys are generated by the background system after the device is successfully registered, and the device private key is returned. Give access control device. The global object access service 111 provides other modules of the background system with access operations including the device public and private key table 129 .

The user account 127 is also used to save the user's public key and private key. These public keys and private keys are generated by the background system when the user registers, and the user's public key is returned to the user terminal.

In the embodiment shown in FIG. 1 , the system administrator of the background system 100 uses the system administrator terminal 198 to log in to the system management module 104 to perform system-level management and maintenance.

In some embodiments, the management staff of the community property service company enters the housing information, owner information, building information, and access control equipment information of the community in the background management operation interface corresponding to the community.

In some embodiments, the management personnel of the service apartment enter the building information, floor information, and smart lock device information of the apartment in the background management operation interface corresponding to the apartment project.

In some embodiments, the management personnel of the car rental company have entered the vehicle information and the smart car lock device information in the company's corresponding background management operation interface.

In some embodiments, the project domain management module also implements device, manager monitoring 137 . Each project domain manager logs into the background management 130 of the project domain through the project domain manager's terminal 199 to complete the entry and editing management of the manager's identification information 123 and object partition number list 124 . This information will also be automatically aggregated into the object access rights table 125 .

In some embodiments, the management staff of the community property service company also enters the property service personnel information, building zoning information, and property service personnel zoning service information of the community in the background management operation interface corresponding to the community.

In some embodiments, the management staff of the service apartment enters the management and service personnel information, partition authority and other information of the apartment in the background management operation interface corresponding to the apartment project.

In some embodiments, the virtual key record includes: authorizer, authorized person, authorization validity period, authorization type, and access control device information for authorized access. According to the embodiments of different application scenarios, richer virtual key record information can be designed to meet the requirements of the application scenarios. For example, in some embodiments, a single access control device can manage and control a group of multiple safe deposit boxes. In this case, as long as the number of the sub-box is added to the virtual key record for checking, the access control of the specific child safe deposit box can be controlled. open.

Fig. 2 shows an access control device 200 according to an embodiment. The access control device 200 can be implemented as various access control devices, various smart locks, and various entry and exit gates. Referring to FIG. 2 , the central processing unit 212 is responsible for controlling and managing the work of all processing units of the processor 201 . The network module 204 is used for the access control device 200 to connect to the background system 100. After logging in to the background system 100 through the login registration processing unit 204, the service of the background system 100 can be accessed and the virtual key update message from the background system 100 can be received. If a virtual key update message from the background system 100 is received, the message processing unit 213 will hand over the message to the virtual key processing unit 210 for processing, and the virtual key processing unit 210 will first verify the message, and update it to the local memory of the device after the verification is successful 202 encryption in the virtual key vault. The input module 203 receives the virtual key-related data from the user terminal 300, and the received virtual key-related data is handed over to the input recognition processing unit 211 for processing. After the recognition and processing are completed, the virtual key processing unit 210 performs further verification and processing. If the received data related to the virtual key passes the verification, the central processing unit 212 sends a lock command to the electric lock control interface 205, and drives the electric lock 299 to perform the lock command operation.

In some embodiments, the input module includes: an NFC near field communication unit, a Bluetooth low energy communication unit, and a two-dimensional code scanning unit.

Fig. 3 shows a user terminal 300 according to an embodiment. The user terminal 300 may be various mobile terminals, smart phones, tablet computers, notebook computers, smart watches, smart glasses, vehicle-mounted computers, and the like. Referring to FIG. 3 , the central processing unit 313 is responsible for controlling and managing the work of all processing units of the processor 301 . The network module 303 is used for the user terminal 300 to connect to the background system 100. After completing the login to the background system 100 through the login registration processing unit 316, the service of the background system 100 can be accessed and the virtual key update message from the background system 100 can be received. If a virtual key update message from the background system 100 is received, the message processing unit 314 will hand over the message to the virtual key processing unit 311 for processing, and the virtual key processing unit 311 will first verify the message, and update it to the local memory of the device after the verification is successful 302 encrypted storage in the virtual key vault. The input module 305 receives the user's operation input, and the output module 304 outputs feedback to the user. The user interaction processing unit 315 completes the interaction with the user through the input module 305 and the output module 304, such as the selection and viewing of the virtual key bag, member management, virtual After interactive operations such as key management and adding authorization, the virtual key request is sent to the background system 100 via the virtual key processing unit 311 , virtual key request unit 312 , network connection processing unit 317 , and network module 303 . After logging into the background system 100, decrypt the stored virtual key package data from the local memory 302, if not found, send a request to the background system 100 to acquire the virtual key package. Through the short-distance communication module 306, the virtual key data can be sent to the access control device 200 for lock command operation.

In some embodiments, the short-range communication module 306 includes an NFC near-field communication unit and a Bluetooth low-power communication unit. The short-distance communication processing unit 319 is responsible for processing the connection and communication of these short-distance communication.

In some embodiments, the binding with the short-distance wireless accessory device 399 can be completed through the user interaction processing unit 315, the accessory processing unit 310 and the short-distance communication module 306, and then through the virtual key unit 311 and the virtual key request unit 312 to the background The system 100 sends a request to add a virtual key to authorize the short-range wireless accessory device to perform virtual key unlocking operations.

In some embodiments, the virtual key can be output to the display screen in the form of a two-dimensional code via the output module 304 for recognition by the two-dimensional code recognition unit of the access control device 200 or after being photographed by the camera unit.

Fig. 4 is a schematic diagram illustrating the process of generating a virtual lock cylinder and a virtual key ring by a background system according to an embodiment.

Firstly, for the existing virtual key record, take out the items used for checking and checking, these items include (validity period, type), and form the first lock cylinder (step 400). Then use the authorized person information in the virtual key record to search in the user account 127 database to obtain the user public key and user private key of the user authorized to use the virtual key (step 402 ). Then use the newly obtained user public key as a key, and use an asymmetric encryption algorithm to encrypt the data of the first lock cylinder (step 404 ). The encrypted result forms a virtual lock cylinder (step 406).

Continue, use the device information in the virtual key record, call the global object access service 111 (step 410), and obtain the device public key (step 412). Using the device public key just obtained as a key, the user private key obtained in step 402 is encrypted with an asymmetric encryption algorithm (step 414 ). The encrypted result forms a virtual keychain (step 416).

Every time there is a change in the virtual key record in the background system, the virtual lock cylinder and virtual key affixes need to be regenerated (if the device information changes). The updated virtual lock cylinder data is sent to the access control device 200 by the background system 100 in the form of a virtual key update message. The virtual key affix is generally used as a part of the user's virtual key bag, and is returned to the user terminal 300 when the user terminal 300 sends a request to the background system 100 to obtain the virtual key bag.

Fig. 5 shows a schematic diagram for illustrating the data processing when the unlocking operation is completed through NFC or Bluetooth communication between the access control device and the user terminal according to an embodiment (note: signature verification processing is ignored, because in fact, when NFC and Bluetooth communication It has a checksum itself, and it is enough to calculate a simple checksum value with the common CRC16 or CRC32 algorithm during implementation, which can save the response time of the user terminal to the NFC command). Referring to Figure 5:

Step S1, the user terminal approaches the short-distance input module of the access control device, and the access control device confirms and starts to receive input;

Step S2, the user terminal sends the user identification to the access control device;

Step S3, after receiving the user ID, the access control device searches locally whether there is a key authority record of the user ID, and if not, the operation is terminated;

Step S4, the access control device sends data including device identification, item domain key, and first time stamp to the user terminal for authentication;

Step S5, the user terminal receives the data required for authentication including the device identification, the project domain key, and the first time stamp, and finds the corresponding virtual key affix and virtual key record in the user's virtual key bag, and the virtual key record adds The above command type forms the first key, wherein the command type includes: unlock, lock, and reverse lock;

Step S6, return the authentication response to the access control device, the response parameters include: the virtual key prefix, the first encrypted virtual key data, and the first signature data, wherein the steps before returning the response include: Step S6-1 through the hash algorithm to ( First time stamp, device identification, project domain key, user identification) to calculate the first symmetric key, step S6-2 use the first symmetric key to encrypt the first key using a symmetric encryption algorithm to obtain the first encrypted virtual key data; Step S6-3 calculates the first signature;

Step S7. After receiving the authentication response, the access control device performs the following steps:

Step S7-1, verifying the first signature data, if the signature data does not match, the operation is terminated (this step is not shown in the figure);

Step S7-2, using the device private key to decrypt the user private key in the virtual key affix, and if the decryption fails, the operation is terminated;

Step S7-3, using the decrypted user private key to decrypt the virtual lock cylinder data in the key authority record to obtain the first lock cylinder data, if the decryption fails, the operation is terminated;

Step S7-4, calculating the first symmetric key according to the data including the data related to the virtual key;

Step S7-5. Use the first symmetric key to decrypt the first encrypted virtual key data to obtain the first key data. If the decryption fails, the operation is terminated;

Step S7-6, check the specific parameters in the first lock cylinder data and the first key data, and if the check is incorrect, the operation is terminated;

Step S7-7: After checking that all are correct, send the corresponding lock command to the electric lock control interface according to the command type parameter in the first key data, and send the unlock command by default if there is no command type parameter.

In some embodiments, no command type can be added to the first key in step S5, so that only the unlocking operation can be performed. In some embodiments, the interactive operation interface on the user terminal 300 can specify whether to unlock, lock or unlock when the user terminal 300 approaches the access control device 200 in the next step.

Fig. 6 is a schematic diagram for illustrating the process of generating a virtual accessory key cylinder and a second signature for a Bluetooth accessory device by the background system according to an embodiment.

First, for the existing virtual key record, take out the items used for verification and checking, these items include (validity period, type), and form an accessory lock cylinder (step 600). A second timestamp is then generated (step 602). Next, the fingerprint of the device private key is calculated using the data fingerprint algorithm to obtain the fingerprint of the device private key (step 604 ). Then in step 606, calculate the hash value of (the second time stamp, the device ID, the accessory ID item domain key, and the fingerprint of the device private key), where the accessory ID is obtained from the authorized person information in the virtual key. The calculation result of step 606 is the second symmetric key (step 608). Using the second symmetric key as a key, use a symmetric encryption algorithm to encrypt the data of the lock cylinder of the accessory (step 610). The encrypted result forms a virtual accessory lock cylinder (step 612). Then the signature data is calculated. In step 614, signature calculation is performed on (second time stamp, device ID, accessory ID, accessory lock cylinder, project domain key, device private key fingerprint). A second signature is obtained as a result of the calculation (step 616).

Fig. 7 is a schematic diagram for illustrating an access control device according to an embodiment, which receives a user's unlocking operation using a Bluetooth accessory device. First, the access control device finds that there is a Bluetooth accessory device approaching, and when it enters a certain distance range, the access control device performs the following processing steps:

B1, converting the Bluetooth address identifier of the Bluetooth accessory device into an accessory identifier;

B2. Use the attachment identifier to search whether there is a corresponding attachment authorization record in the attachment authorization table, and if not, check and terminate;

B3. Take out the second time stamp in the attachment permission record;

B4. Use the data fingerprint algorithm to calculate the device private key fingerprint;

B5. Calculate the second symmetric key using the hash algorithm pair (second timestamp, device ID, accessory ID, item domain key, and device private key fingerprint);

B6. Use the second symmetric key to decrypt the virtual accessory lock cylinder data in the accessory authority record to obtain the accessory lock cylinder data;

B7. Perform signature calculation according to (second time stamp, device identification, accessory identification, accessory lock cylinder data, project domain key, device private key fingerprint) data to obtain the second verification signature;

B8. Check the second verification signature with the second signature data in the corresponding record, and terminate if the check does not match;

B9. Check the valid time and status in the accessory lock cylinder data, the status includes: valid, invalid;

B10. If it is within the validity period and the status is valid, then the verification is successful, and an unlock command is sent to the electric lock control interface; if the type in the accessory lock cylinder data is only one time type, after the unlocking is completed, the device will record this record from The attachment permission table is removed and the first notification message is sent to the background system, and the message parameters include device identification, user identification, and time.

Fig. 8 is a schematic diagram for illustrating the processing of an access control device and a user terminal performing an unlocking operation through NFC communication according to an embodiment. Referring to FIG. 8 , the steps therein can be compared with those in FIG. 5 . The main difference is that Fig. 5 is the processing flow based on the data structure, while Fig. 8 is the processing flow when NFC communication is used specifically.

First of all, after the access control device 200 is started, the input recognition unit 211 finds that there is an NFC communication unit in the input module 203, and then enables the card reader mode of the NFC HCE mode, waiting for the identification of the user terminal 300 that has emulated the NFC card to approach. When it is found that the user terminal 300 emulated by the NFC card approaches the access control device 200 , an NFC command of SELECTFILE APDU is sent to the user terminal 300 . Note: For related NFC APDU commands, please refer to the ISO-IEC-7816-4 specification, and for the NFC HCE mode, please refer to the ISO 14443-4 specification.

On the side of the user terminal 300 , there is an NFC card emulation processing program in the short-distance communication processing unit 319 , which processes the NFC commands received from the NFC communication unit in the short-distance communication module 306 . In an embodiment, only the SELECT FILE and INTERNAL AUTHENTICATE commands from the access control terminal 200 are processed.

After the user terminal 300 completes step S6, the access control terminal 200 starts each sub-step of step S7.

Fig. 9 is a schematic diagram for illustrating the processing of an unlocking operation performed by an access control device and a user terminal through Bluetooth communication according to an embodiment. Referring to FIG. 9 , the steps therein can be compared with those in FIG. 5 . The main difference is that Fig. 5 is the processing flow based on the data structure, while Fig. 9 is the processing flow when Bluetooth communication is used.

Firstly, after the access control device 200 is started, the input identification unit 211 finds that there is a Bluetooth low energy communication unit in the input module 203, and then activates the Bluetooth peripheral mode and waits for the user terminal 300 that also uses Bluetooth communication to approach and connect. After the user gets close to the access control device 200, he turns on the user terminal 300, and starts unlocking via Bluetooth through an interactive operation. The Bluetooth processing program in the short-distance communication processing unit 319 in the user terminal 300 first searches whether there is a specified type of Bluetooth peripheral (carried by the access control device 200) in the vicinity, and then inquires whether there is a custom Bluetooth virtual key unlocking service ( Step S1), if there is, the connection is successful. The custom bluetooth virtual key unlocking service here is a bluetooth service defined by the embodiment itself, which provides a series of read/write services of custom attributes. Then, the user terminal 300 sends a command to write user identification attributes (step S2). After receiving the user ID, the access control device 200 checks whether there is a record of the user ID (step S3), if not, returns an error response, otherwise returns a success response. After the user terminal 300 receives a successful response, it sends the command to read the attributes of the authentication credential to the access control device 200 (step S4); the access control device 200 then calculates the time stamp and returns the attribute data requested by the user terminal 300 (device identification, item field key, time stamp); the subsequent steps are basically the same as the processing flow in Figure 5, except that the communication is realized by using the bluetooth method of writing attributes.

Those skilled in the art should understand that the various components of the device provided by the above-mentioned embodiments of the present invention, as well as the various steps in the method, they can be concentrated on a single computing device, or distributed in multiple computing devices. online. Alternatively, they may be implemented in program code executable by a computing device. Therefore, they can be stored in a storage device to be executed by a computing device, or they can be fabricated into individual integrated circuit modules, or multiple modules or steps can be fabricated into a single integrated circuit module for implementation. As such, the present invention is not limited to any specific combination of hardware and software.

The above are only preferred embodiments of the present invention, but they do not limit the implementation scope of the present invention, that is, equivalent changes and modifications made without departing from the claims of the present invention should still belong to the protection scope of the present invention.

Claims (29)

1. a kind of management method of virtual key, makes virtual key be used for the lock command operation of access control apparatus, it is characterized in that,

It is the device public key and device private key that access control apparatus generated and preserved access control apparatus by background system, and will dress Put public key give access control apparatus preservation, while return and preserve also include item domains describe, item domains describe include Project domain key；

The public key and private key of user are generated and preserved by background systems when user terminal registers new user, and client public key is handed over Preserve to user terminal；

Background system is to need the access control apparatus for generating virtual key to generate virtual key in the virtual key case of user Sew, virtual key sew by using correspondence access control apparatus device public key to private key for user encryption form；

Background system passes to the virtual key bag data of user terminal includes one or more（Device identification, virtual key are sewed） Element group；

Access control apparatus from short distance input module recognize user terminal near and receive come user terminal virtual key Spoon related data carries out the lock command operation of virtual key.

2. method according to claim 1, wherein, user terminal carries out the lock order of virtual key near access control apparatus The step of operation, includes：

The short distance input module of S1, user terminal near access control apparatus, access control apparatus confirm and start to receive defeated Enter；

S2, user terminal send ID to access control apparatus；

Whether S3, access control apparatus have the key authority records of the ID in local retrieval after receiving ID, such as Then operation does not terminate fruit；

S4, access control apparatus are sent to user terminal includes device identification, project domain key, very first time stamp data, to enter Row certification；

S5, user terminal receive needed for certification including device identification, project domain key, the very first time stamp data, user's Find corresponding virtual key to sew and virtual key record in virtual key case, the virtual key record is plus command type shape Into the first key, wherein command type includes：Unlock, lock, lock；

S6, respond to access control apparatus return authentication, response parameter includes：Virtual key is sewed, the first encrypted virtual key Data, the first signed data, wherein the step returned before response includes:Step S6-1 passes through hashing algorithm pair（The very first time Stamp, device identification, project domain key, ID）Calculate the first symmetric key, step S6-2 is with the first symmetric key pair First key encrypts the first encrypted virtual key data using symmetric encipherment algorithm, and step S6-3 calculates first and signs；

After S7 access control apparatus receive authentication response, following steps are performed：

S7-1 verifies the first signed data, if signed data is not inconsistent, operation terminates；

S7-2 use device private keys decrypt the private key for user during virtual key is sewed, and the operation if decryption failure terminates；

S7-3 obtains the first lock core number using the virtual lock core data in the private key for user decryption key authority records for decrypting According to the operation if decryption failure terminates；

S7-4 calculates the first symmetric key according to including the data including virtual key related data；

S7-5 uses first symmetric key decryption the first encrypted virtual key data, obtains the first key data, if decryption is lost Lose then operation to terminate；

S7-6 is checked to the first lock core data and the design parameter in the first key data, is operated if verification is incorrect Terminate；

After S7-7 verifications are all correct, send corresponding to electric lock control interface according to the command type parameter in the first key data Lock order, if no command type parameter acquiescence send unlock order.

3. method according to claim 2, wherein, the method for calibration in step S7-6 is：To described to the first lock core number It is compared and verifies according to effect duration in first key data and type；In first lock core data and the first key data All include：Effect duration, type, type include：Do not limit number of times, only limit once, in effect duration once a day.

4. method according to claim 3, wherein, if the type in the first lock core data is only to limit one in step S7-7 After the completion of secondary type is then unlocked, this record is removed from key authority list and sends the first notification message to rear by described device Platform system, message parameter include device identification, ID, time.

5. method according to claim 1, wherein, short-distance wireless communication mode includes low-power consumption bluetooth communication, NFC near fields Communication.

6. according to claim 1 or 2 or 3 or 4 or 5 methods describeds, wherein, void of the background system in the virtual key case of user When plan key is changed, virtual key new information can be sent to correspondence access control apparatus, message parameter include virtual key The authorized person of spoon, grantee, virtual lock core data；Access control apparatus are received after virtual key new information to being stored in dress Virtual key data in putting is updated.

7. method according to claim 6, wherein, when authorized person is virtual key user, virtual key record In grantee's information include the identification information of short-distance wireless accessories apparatus that user is bound in user terminal, i.e. adnexa mark Know, while the virtual adnexa lock core for also including the second timestamp, being encrypted using symmetric encipherment algorithm in virtual key new information Data, the second signed data；When access control apparatus receive the virtual key new information of the above-mentioned type, related data is updated To adnexa authority list.

8. method according to claim 1, wherein, the access control apparatus with low-power consumption bluetooth module are also weighed including adnexa Limit table, record can be used for the accessories list of access control apparatus unlocking, and every recorded content includes：Accessory identification, the second time Stamp, the virtual adnexa lock core data using symmetric encipherment algorithm encryption, the second signed data, receive the void that background system is sent Intend key new information mode to be sent to access control apparatus and preserve；Access control apparatus are wirelessly connected and are close to by bluetooth The Bluetooth address mark of bluetooth accessory device is obtained after the bluetooth accessory device communication of the access control apparatus；For what is received The Bluetooth address mark, is checked in adnexa authority list, and step includes：

B1, Bluetooth address mark be converted to accessory identification；

B2, retrieve whether there are corresponding adnexa authority records in adnexa authority list with accessory identification, the verification if not terminates；

B3, the second timestamp taken out in adnexa authority records；

B4, device private key fingerprint is calculated with data fingerprint algorithm；

B5, using hashing algorithm pair（Second timestamp, described device mark, the accessory identification, project domain key, device are private Key fingerprint）Calculate the second symmetric key；

B6, using the second symmetric key to adnexa authority records in virtual adnexa lock core data be decrypted, obtain adnexa lock Core data；

B7, basis（Second timestamp, device identification, accessory identification, adnexa lock core data, project domain key, device private key refer to Stricture of vagina）Data carry out signature calculation, the second signature verification for obtaining；

The second signed data in B8, the second signature verification and adnexa authority records is checked, and is terminated if verification is not inconsistent；

Time effect duration and state in B9, verification adnexa lock core data, state includes：Effectively, fail；

If B10, before the deadline and state is effective, check successfully, order of unlocking is sent to electric lock control interface；If After the completion of type in adnexa lock core data is for only type of limit is then unlocked, described device is by this record from adnexa authority list Middle removal simultaneously sends the first notification message to background system, and message parameter includes device identification, ID, time.

9. according to claim 2 or 8 methods describeds, wherein, the very first time stamp and the second timestamp can be with dynamic generations Pseudo random number replace, effect equivalent.

10. a kind of device with access control function, is characterized in that, including：

Described device is generated and returned by background system by network after background system registration the device private key of described device；

Key authority list, records the corresponding virtual lock core of virtual key that described device can be used for unlocking, every recorded content Including：ID, the virtual lock core data encrypted using client public key；

Input module, for receiving the virtual key related data for carrying out user terminal, the virtual key related data includes： ID, virtual key are sewed（The private key for user of described device public key encryption is used by background system）, the first encrypted virtual key Spoon data（The virtual key data encrypted using symmetric encipherment algorithm by user terminal）, the first signed data；

Processor, carries out the verification of virtual key and virtual lock core after being configured to receive virtual key related data；

After electric lock control interface, virtual key and virtual lock core audit process success, electric lock is controlled if receiving order of unlocking Unlock, electric lock is controlled if receiving order of locking and locked, controlled electric lock and lock if receiving and locking order；

Processor is additionally configured to process the virtual key new information from background system, updates key power according to message parameter Limit table.

11. devices according to claim 10, wherein, the checking step of virtual key and virtual lock core includes：

1. whether there are the key authority records of corresponding ID in key authority list, if not then terminate verification；

2. the first signed data is verified, terminates verification if verification failure；

3. virtual key is sewed to be decrypted using described device private key and draws private key for user, terminate core if decryption failure It is right；

4. the virtual lock core data in being decrypted by key authority records using the private key for user for decrypting, obtain the first lock core number According to the termination verification if decryption failure；

5. the first symmetric key is calculated according to including the data including virtual key related data, and be used for decrypting the first encryption Virtual key data, obtains the first key data, if decryption failure terminates verification；

6. the first lock core data and the design parameter in the first key data are checked, terminates core if verification is incorrect It is right, corresponding lock order is sent to electric lock control interface according to the command type parameter in the first key data after verification success, Transmission unlocking order is given tacit consent to if no command type parameter.

12. according to claim 11 described device, wherein, input module includes short-distance wireless communication unit, the short distance Wireless telecommunications include low-power consumption bluetooth communication, NFC.

13. according to claim 11 described device, wherein, after background system succeeds in registration, also receive from background system described The item domains of device are described and are saved, and all devices for being deployed in same project domain with described device have identical item domains Description, the item domains description include project domain key.

14. according to claim 11 described device, wherein, all include in the first lock core data and the first key data：Have Effect phase, type, type include：Do not limit number of times, only limit once, in effect duration once a day；To the first lock core number when being checked It is compared and verifies according to effect duration in the first key data and type.

15. according to claim 14 described device, wherein, if verification passes through and the type in the first lock core data is only to limit one After the completion of secondary type is then unlocked, this record is removed from key authority list and sends the first notification message to rear by described device Platform system, message parameter include device identification, ID, time.

16. devices according to claim 10, wherein, receive after the virtual key new information of background system, first root Judge if the virtual key new information of adnexa just updates adnexa authority list according to message parameter.

17. according to claim 11 or 12 or 13 or 14 or 15 described devices, wherein, the short-distance wireless communication unit is During NFC unit, NFC unit is sensed using the user terminal of nfc card copying after, is sent First APDU orders are to user terminal；Then receive the ID of user terminal return；If ID is in key authority In table, continue to send the 2nd APDU orders to user terminal, command parameter includes：Device identification, project domain key, first when Between stab；Then the response message of user terminal return is received, response message includes：Virtual key is sewed, the first encrypted virtual key Spoon data, the first signed data, wherein the first encrypted virtual key data can use symmetric encipherment algorithm by the first symmetric key Decrypt, the first symmetric key passes through hashing algorithm pair（Very first time stamp, device identification, project domain key, ID） Calculate；After receiving response message, perform claim requires the step of 2. step starts in method described in 11.

18. according to claim 11 or 12 or 13 or 14 or 15 described devices, wherein, the short-distance wireless communication unit is low During power consumption bluetooth communication unit, low-power consumption bluetooth communication unit provides self-defining Bluetooth virtual key unlocking service；The company of receiving The user for writing ID attribute command, obtaining user terminal that the user terminal of Bluetooth virtual key unlocking service is sent is met Mark；If ID in key authority list, does not return errored response, success response is otherwise returned；Send successfully After response, the reading Service Ticket attribute command that user terminal is sent is received, calculate very first time stamp, return tunnel ＆drop shaft, including： Device identification, project domain key, timestamp；Receive that user terminal sends writes return tunnel ＆drop shaft order, obtain returning with Card data, Credential data include：Virtual key is sewed, the first encrypted virtual key data, the first signed data, wherein first adds Close virtual key data can be decrypted using symmetric encipherment algorithm by the first symmetric key, and the first symmetric key is calculated by hashing Method pair（Very first time stamp, device identification, project domain key, ID）Calculate, after obtaining the Credential data for returning, hold The step of 2. step starts in row claim 11 methods described.

19. according to claim 12 or 13 or 14 or 15 or 16 described devices, wherein, the short-distance wireless communication unit is low During power consumption bluetooth communication unit, also including adnexa authority list, record can be used for the accessories list that described device opens electric lock, per bar Recorded content includes：Accessory identification, the second timestamp, using symmetric encipherment algorithm encrypt virtual adnexa lock core data, second Signed data, is sent to access control apparatus with third notice message mode and is preserved by background system；The low-power consumption bluetooth Module, wirelessly can obtain bluetooth accessory device after connection is communicated with the bluetooth accessory device for being close to described device by bluetooth Bluetooth address is identified；For the Bluetooth address mark for receiving, checked in adnexa authority list, checking step is according to power During profit requires 8 methods describeds, step B1 ~ B10 is carried out.

20. according to claim 17 or 18 described devices, wherein, the very first time stamp can use what described device dynamic was generated Pseudo random number replaces, effect equivalent.

A kind of 21. background systems that network service is provided for access control apparatus and user terminal, is characterized in that, take including user Business module, item domains management module；Item domains management module, be disparity items domain service, include back-stage management interface for Access control apparatus mounting arrangements information in management personnel's typing item domains, for the access control apparatus registered generate the dress Special device public key and device private key are put, is preserved in data base, and device private key is returned to access control apparatus；User takes Business module, processes the request for carrying out user terminal, including：

User's registration is asked, and after succeeding in registration, is that user generates the special client public key of the user and private key for user, is stored in number According to storehouse, and client public key is returned to into user terminal；

Virtual key case request of data is obtained, the whole of logged-in user is returned according to required parameter or virtual key case number is specified According to virtual key bag data includes one or more（Device identification, virtual key are sewed）Element group, device identification are according to void Intend the device identification of key package informatin access control apparatus of access control apparatus table matching in item domains management module, virtually It is private key for user to be encrypted using the device public key of the access control apparatus of corresponding intrument mark to form that key is sewed.

22. according to claim 21 background system, wherein, background system after access control apparatus succeed in registration, to visit Ask that control device returns item domains description, there are the same device in same project domain identical item domains to describe, item domains description Include project domain key.

23. according to claim 21 or 22 background system, wherein, also including messaging interface, for processing message Receive and send；When virtual key in the virtual key case of user is changed, can send empty to correspondence access control apparatus Intend key new information, virtual key record includes：Authorized person, grantee, authorize effect duration, authorization type, authorize into The access control apparatus information for entering.

24. according to claim 23 background system, wherein, also process the first notification message from access control apparatus, Record in daily record, and update the status data of the virtual key of correspondence in the virtual key case of user, then by the void after renewal Intend key data and the user terminal related to this virtual key is sent to second notification message.

25. according to claim 23 background system, wherein, when authorized person is virtual key user, virtual key Grantee's information in spoon record includes the identification information of the short-distance wireless accessories apparatus that user is bound in user terminal, i.e., Accessory identification, at the same also include in virtual key new information the second timestamp, using symmetric encipherment algorithm encrypt it is virtual attached Part lock core data, the second signed data；Second timestamp is generated by background system dynamic；Virtual adnexa lock core data are by second pair Claim key to be encrypted adnexa lock core to form, the second symmetric key is by hashing algorithm pair（Second timestamp, access control apparatus The device private key fingerprint of mark, the accessory identification, project domain key, access control apparatus）Calculate；Second signed data According to（Second timestamp, access control apparatus marks, accessory identification, adnexa lock core, project domain key, access control apparatus Device private key fingerprint）Data carry out signature algorithm and calculate.

A kind of 26. portable user terminals, is characterized in that, including processor, processor is configured to process：

Register user request is sent to background system, after succeeding in registration, the returned data for receiving includes that the user of user is public Key；

Send to background system and obtain virtual key case request of data, ask the virtual key bag data for returning include one or It is multiple（Device identification, virtual key are sewed）Element group, it is encrypted using the device public key of corresponding intrument mark that virtual key is sewed Private key for user.

27. user terminals according to claim 26, wherein, also including NFC module, processor is configured to process：

User terminal is emulated into into nfc card, so that the NFC unit of access control apparatus is capable of identify that and leads to therewith News；

The APDU orders that access control apparatus are sent are received, and ID are returned to access control apparatus；

The 2nd APDU orders that access control apparatus are sent are received, command parameter includes：Device identification, project domain key, One timestamp, finds corresponding virtual key record in the virtual key case of user according to device identification, returns Credential data, Credential data includes：Virtual key is sewed, the first encrypted virtual key data, the first signed data, wherein the first encrypted virtual Key data is formed using symmetric encipherment algorithm encryption by the first symmetric key, and the first symmetric key passes through hashing algorithm pair（The One timestamp, device identification, project domain key, ID）Calculate.

28. user terminals according to claim 26, wherein, also including low-power consumption bluetooth module, processor is configured to Process：

It was found that and being connected to the self-defined Bluetooth virtual key unlocking service that access control apparatus are provided；

Bluetooth is sent to access control apparatus and writes ID attribute command, command parameter includes ID；

Bluetooth is sent to access control apparatus and reads Service Ticket attribute command, the parameter obtained after success includes：Device identification, item Mesh domain key, very first time stamp, find corresponding virtual key record in the virtual key case of user according to device identification；

Bluetooth is sent to access control apparatus and writes return tunnel ＆drop shaft order, command parameter includes：Virtual key is sewed, first adds Close virtual key data, the first signed data, wherein the first encrypted virtual key data can be by the first symmetric key using symmetrical AES is decrypted, and the first symmetric key passes through hashing algorithm pair（Very first time stamp, device identification, project domain key, use Family identifies）Calculate.

29. user terminals according to claim 26, wherein, processor is additionally configured to process：Receive from backstage The second notification message of system, updates locally stored virtual key data.