基于二维码混合型加密技术的智能手机门禁系统安全性研究

A Security Research on Smart Phone Access Control System Based on QR Code Hybrid Encryption Technology

目前使用较为频繁的门禁系统管理不便,且容易被复制,安全性不高。针对目前门禁系统面临的问题,文章提出一种具有更高安全性、同时也更便于使用和管理的基于二维码混合型加密技术的智能手机门禁系统方案。该方案具有如下特点:1)利用注册用户的二维码作为身份标识,利用手机唯一的序列号以及规律更换的密钥作为二维码的源串;2)用户注册过程加密实现,基于用户事件驱动的"一次一码"方式以及混合型加密技术保证了二维码的时效性和安全性;3)通过摄像头扫描手机端生成的二维码,验证用户身份后驱动电控开关打开门锁;4)将访客与业主联系起来,业主自主管理访客进出,在保证安全性的同时也减少了管理的难度。

The access control system that is used frequently at present is difficult to manage and is easy to be copied. To solve these problems, this paper proposes a smart phone access control system scheme based on QR code hybrid encryption technology, which has better security, and is more convenient to use and manage. The scheme has the following characteristics： 1） The scheme uses QR code of the registered user as the identification, and uses unique sequence number of mobile phone and regularly converted key as the source of QR code. 2） The user registration process is implemented in form of encryption. One-time code based on user event driven and hybrid encryption technologies ensure the timeliness and security of the QR code. 3） QR code generated on mobile phone is scanned by camera, and the door is opened after verifying the user identity. 4） The scheme conects the visitor with the owner. Owners autonomously manage visitors in and out, which reduces the difficulty of management at the same time to ensure the security.