A multi-person authentication and authorization method, device and medium based on near field communication

Abstract

The present application discloses a multi-person authentication and authorization method, device, and medium based on near-field communication. The method includes receiving an authentication request sent by a near-field communication device to be authenticated, and sending the authentication request to multiple authentication and authorization devices; receiving authentication results fed back by at least a portion of the multiple authentication and authorization devices; statistically analyzing the authentication results based on smart contracts, and if the number of authentication results that pass the authentication is greater than a preset threshold, then generating authentication success information, and sending the authentication success information to multiple other near-field communication devices for verification; receiving the verification results fed back by multiple other near-field communication devices, and if all the verification results pass, then identifying the near-field communication device to be authenticated as an authenticated near-field communication device. The multi-person authorization method based on near-field communication disclosed in the present application can solve the device authentication and authorization and permission issuance in security-required scenarios, and it is more convenient and safe to use multi-person authorization.

Description

Technical Field

[0001] The present application relates to the field of near field communication application technology, and in particular to a multi-person authentication and authorization method, device, and medium based on near field communication. Background Art

[0002] At present, there are many scenarios that require multiple entities to jointly conduct authentication and authorization. For example, when multiple applicants jointly apply for patents to be transferred, licensed, etc., multiple applicants need to agree unanimously. The current multi-person authorization method has certain security risks, such as impersonation; at the same time, if a certain entity is not convenient to participate, it will be difficult to successfully authorize, which is inconvenient.

[0003] Therefore, it is now necessary to develop a new type of multi-person authentication and authorization method, device, and medium based on near-field communication to overcome and improve one or more shortcomings of the above-mentioned prior art, or at least propose an effective optional method to solve the above-mentioned problems. Summary of the invention

[0004] The embodiments of this specification provide a multi-person authentication and authorization method, device, and medium based on near field communication, which are used to solve the following technical problems in the prior art: solving the problem of authority authentication, authorization, and issuance of authority in security-required scenarios.

[0005] The embodiments of this specification adopt the following technical solutions:

[0006] A multi-person authentication and authorization method based on near field communication, comprising:

[0007] Receiving an authentication request sent by a near field communication device to be authenticated, and sending the authentication request to a plurality of authentication authorization devices;

[0008] Receiving authentication results fed back by at least a part of the authentication authority devices among the plurality of authentication authority devices, wherein the authentication results at least include a signature of the authentication authority device that feeds back the authentication results;

[0009] Based on the statistics of the authentication results of the smart contract, if the number of authentication results that pass the authentication is greater than the first preset threshold,

[0010] then generating authentication success information, and sending the authentication success information to a plurality of other near field communication devices for verification, wherein the authentication success information at least includes a signature of the authentication authority device that feeds back the authentication result;

[0011] receiving verification results fed back by the plurality of other near field communication devices, wherein the verification results are obtained by the other near field communication devices verifying the signature using the public key of the authentication authority device,

[0012] If all the verification results are passed, the near field communication device to be authenticated is identified as an authenticated near field communication device.

[0013] Optionally, the method further comprises:

[0014] The near field communication device to be authenticated generates a public key and a private key;

[0015] Acquire the public key of the near field communication device to be authenticated, and send the public key to multiple authentication and authorization devices.

[0016] Furthermore, the authentication request is encrypted by the near field communication device to be authenticated using its private key; and the authentication result is obtained by the authentication authority decrypting the authentication request using the public key of the near field communication device to be authenticated and then authenticating it.

[0017] Optionally, the method further comprises:

[0018] The near field communication device also generates an authorization code.

[0019] Furthermore, the authentication request includes an authorization code of the near field communication device to be authenticated;

[0020] If all the verification results are passed, the authorization code is marked as successfully authenticated.

[0021] Optionally, the method further comprises:

[0022] Receiving an authorization request sent by the near field communication device to be authenticated, and sending the authorization request to the plurality of authenticated near field communication devices, wherein the authorization request at least includes a private key signature of the authentication authorization device;

[0023] Receiving audit results fed back by at least a portion of the plurality of authenticated near field communication devices, the audit results at least including a signature of the authenticated near field communication device that audits the authorization request;

[0024] Based on the statistics of the audit results by the smart contract, if the number of audited results is greater than the second preset threshold,

[0025] The corresponding permissions are granted.

[0026] Furthermore, the authorization request includes an authorization code of the near field communication device to be authenticated;

[0027] If the corresponding permission is granted, the authorization code includes the corresponding permission.

[0028] Optionally, the authentication result further includes feature data of the near field communication device to be authenticated, and the smart contract-based statistics of the authentication result includes:

[0029] Based on the smart contract, the authentication result is queried and counted using the characteristic data of the near field communication device to be authenticated as a key.

[0030] The characteristic data of the near field communication device to be authenticated includes at least one of the ID of the near field communication device to be authenticated and the authorization code of the near field communication device to be authenticated.

[0031] Optionally, the audit result further includes feature data of the near field communication device to be authenticated, and the smart contract-based statistics of the audit result includes:

[0032] Based on the smart contract, the audit results are queried and counted using the characteristic data of the near field communication device to be authenticated as a key.

[0033] The characteristic data of the near field communication device to be authenticated includes at least one of the ID of the near field communication device to be authenticated and the authorization code of the near field communication device to be authenticated.

[0034] A multi-person authentication and authorization device based on near field communication, comprising:

[0035] at least one processor; and,

[0036] a memory communicatively connected to the at least one processor; wherein,

[0037] The memory stores instructions executable by the at least one processor, the instructions being executed by the at least one processor to enable the at least one processor to:

[0038] Receiving an authentication request sent by a near field communication device to be authenticated, and sending the authentication request to a plurality of authentication authorization devices;

[0039] Receiving authentication results fed back by at least a part of the authentication authority devices among the plurality of authentication authority devices, wherein the authentication results at least include a signature of the authentication authority device that feeds back the authentication results;

[0040] Based on the statistics of the authentication results of the smart contract, if the number of authentication results that pass the authentication is greater than the preset threshold,

[0041] then generating authentication success information, and sending the authentication success information to a plurality of other near field communication devices for verification, wherein the authentication success information at least includes a signature of the authentication authority device that feeds back the authentication result;

[0042] receiving verification results fed back by the plurality of other near field communication devices, wherein the verification results are obtained by the other near field communication devices verifying the signature using the public key of the authentication authority device,

[0043] If all the verification results are passed, the near field communication device to be authenticated is identified as an authenticated near field communication device.

[0044] A non-volatile computer storage medium for multi-person authentication and authorization based on near field communication, storing computer executable instructions, wherein the computer executable instructions are configured as follows:

[0045] Receiving an authentication request sent by a near field communication device to be authenticated, and sending the authentication request to a plurality of authentication authorization devices;

[0046] Receiving authentication results fed back by at least a part of the authentication authority devices among the plurality of authentication authority devices, wherein the authentication results at least include a signature of the authentication authority device that feeds back the authentication results;

[0047] Based on the statistics of the authentication results of the smart contract, if the number of authentication results that pass the authentication is greater than the preset threshold,

[0048] then generating authentication success information, and sending the authentication success information to a plurality of other near field communication devices for verification, wherein the authentication success information at least includes a signature of the authentication authority device that feeds back the authentication result;

[0049] receiving verification results fed back by the plurality of other near field communication devices, wherein the verification results are obtained by the other near field communication devices verifying the signature using the public key of the authentication authority device,

[0050] If all the verification results are passed, the near field communication device to be authenticated is identified as an authenticated near field communication device.

[0051] At least one of the above technical solutions adopted in the embodiments of this specification can achieve the following beneficial effects:

[0052] The multi-person authentication and authorization method based on near field communication illustrated in the embodiments of this specification can solve the device authentication and authorization and permission issuance in security-required scenarios, and the use of multi-person authorization is more convenient and secure. BRIEF DESCRIPTION OF THE DRAWINGS

[0053] The drawings described herein are used to provide a further understanding of the present application and constitute a part of the present application. The illustrative embodiments of the present application and their descriptions are used to explain the present application and do not constitute an improper limitation on the present application. In the drawings:

[0054] Figure 1A schematic diagram of a flow chart of a multi-person authentication and authorization method based on near field communication provided in an embodiment of this specification. DETAILED DESCRIPTION

[0055] In order to make the purpose, technical solutions and advantages of this specification more clear, the technical solutions of this application will be clearly and completely described below in combination with the specific embodiments of this specification and the corresponding drawings. Obviously, the described embodiments are only part of the embodiments of this application, not all of them. Based on the embodiments in the specification, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of this application.

[0056] The technical solutions provided by various embodiments of the present application are described in detail below in conjunction with the accompanying drawings. Figure 1 A schematic diagram of a flow chart of a multi-person authentication and authorization method based on near field communication provided in an embodiment of this specification.

[0057] like Figure 1 As shown, a multi-person authentication and authorization method based on near field communication includes receiving an authentication request sent by a near field communication device to be authenticated, and sending the authentication request to multiple authentication authorization devices; receiving authentication results fed back by at least a part of the multiple authentication authorization devices, wherein the authentication result at least includes the signature of the authentication authorization device that feeds back the authentication result; counting the authentication results based on a smart contract, if the number of authentication passes in the authentication result is greater than a first preset threshold, then generating authentication success information, and sending the authentication success information to multiple other near field communication devices for verification, wherein the authentication success information at least includes the signature of the authentication authorization device that feeds back the authentication result; receiving verification results fed back by multiple other near field communication devices, wherein the verification result is obtained by other near field communication devices verifying the signature using the public key of the authentication authorization device, and if all the verification results pass, the near field communication device to be authenticated is identified as an authenticated near field communication device.

[0058] In this embodiment, the multi-person authentication and authorization method based on near field communication further includes the near field communication device to be authenticated generating a public key and a private key; obtaining the public key of the near field communication device to be authenticated, and sending the public key to multiple authentication and authorization devices.

[0059] Furthermore, the authentication request is encrypted by the near field communication device to be authenticated using its private key; the authentication result is obtained by the authentication authority decrypting the authentication request using the public key of the near field communication device to be authenticated and then authenticating it.

[0060] In this embodiment, the multi-person authentication and authorization method based on near field communication further includes the near field communication device generating an authorization code.

[0061] Furthermore, the authentication request includes an authorization code of the near field communication device to be authenticated; if all the verification results are passed, the authorization code is marked as authentication success.

[0062] In this embodiment, the multi-person authentication and authorization method based on near-field communication also includes: receiving an authorization request sent by a near-field communication device to be authenticated, and sending the authorization request to multiple authenticated near-field communication devices, wherein the authorization request at least includes the private key signature of the authentication authorization device; receiving audit results fed back by at least a part of the multiple authenticated near-field communication devices, the audit results at least include the signature of the authenticated near-field communication device that audited the authorization request; and statistically analyzing the audit results based on the smart contract, and if the number of audited devices in the audit results is greater than a second preset threshold, granting the corresponding permission.

[0063] Furthermore, the authorization request includes an authorization code of the near field communication device to be authenticated; if the corresponding authority is granted, the authorization code includes the corresponding authority.

[0064] In this embodiment, the authentication result also includes characteristic data of the near field communication device to be authenticated, and counting the authentication result based on the smart contract includes querying and counting the authentication result based on the smart contract using the characteristic data of the near field communication device to be authenticated as a key. The characteristic data of the near field communication device to be authenticated may include, for example, one of the ID of the near field communication device to be authenticated and the authorization code of the near field communication device to be authenticated.

[0065] In this embodiment, the audit result also includes characteristic data of the near field communication device to be authenticated, and counting the audit result based on the smart contract includes querying and counting the audit result based on the smart contract using the characteristic data of the near field communication device to be authenticated as a key. The characteristic data of the near field communication device to be authenticated may include, for example, one of the ID of the near field communication device to be authenticated and the authorization code of the near field communication device to be authenticated.

[0066] For ease of understanding, the specific contents of the above multi-person authentication and authorization method based on near field communication are further described below:

[0067] This embodiment provides a multi-person authentication and authorization method based on near field communication, which is dedicated to solving the problems of authentication, authorization and permission issuance in security-required scenarios.

[0068] The steps include:

[0069] 1. The NFC device generates a private key and authorization code, and imports its related public key into the authentication and authorization device.

[0070] 2. Send the data to be authenticated to the NFC device and use the authentication authority to verify the signature of the information.

[0071] S1: If valid, the number of successful simultaneous authentications is detected. If the number of authentications reaches the authorization standard, authorization is performed, a transaction including an authorization code of the successfully authenticated device is generated, and the transaction is returned to multiple near-field communication devices.

[0072] S2: Multiple near-field communication devices use the public key of the authentication and authorization device to verify the transaction, and if all verifications are correct, the authorization is confirmed.

[0073] For example: A near-field communication device uses a private key to encrypt the authorization code and authentication data and sends them to the authentication authorization device group;

[0074] Multiple authentication and authorization devices use the public key to decrypt the data, review the data and generate a transaction with A's specific identification (such as the user's ID) as the key;

[0075] The chain code queries the historical transactions with a specific identifier A, obtains the number of successful authentications, passes if the criteria are met, generates a transaction and returns it.

[0076] A sends authentication data to B, C, and D. B, C, and D check the authentication data and generate transactions respectively. Then the chain code queries the number of successful authentications of these transactions to determine the authentication results. If successful, the authorization code and binding authentication are successful.

[0077] 3. The device applying for permission generates a private key and authorization code, and sends the application data to the authentication and authorization device; the authentication and authorization device signs its application data with its private key and sends it to the authorized device; the authorized person votes on the application data for authorization, and after the authorization criteria are met, the authentication and authorization device enters the public key in its application data.

[0078] For example: A near-field communication device uses a private key to encrypt the authorization code and the permission application data and sends them to the authentication and authorization device group;

[0079] The authentication and authorization device uses the public key to decrypt the data, and then reviews the data to generate a transaction with A's authorization code as the key;

[0080] The chain code queries the historical transactions with authorization code A, obtains the number of successful authentications, and passes if the criteria are met, generates a transaction and returns it.

[0081] A sends permission application data to B, C, and D. B, C, and D check the permission application data and generate transactions respectively. Then the chain code queries the number of successful authentications of these transactions to determine the authentication results. If successful, the authorization code represents the requested permissions.

[0082] This embodiment also provides a multi-person authentication and authorization device based on near field communication, including:

[0083] at least one processor; and,

[0084] a memory communicatively connected to the at least one processor; wherein,

[0085] The memory stores instructions executable by the at least one processor, the instructions being executed by the at least one processor to enable the at least one processor to:

[0086] Receiving an authentication request sent by a near field communication device to be authenticated, and sending the authentication request to a plurality of authentication authorization devices;

[0087] Receiving authentication results fed back by at least a part of the authentication authority devices among the plurality of authentication authority devices, wherein the authentication results at least include a signature of the authentication authority device that feeds back the authentication results;

[0088] Based on the statistics of the authentication results of the smart contract, if the number of authentication results that pass the authentication is greater than the preset threshold,

[0089] then generating authentication success information, and sending the authentication success information to a plurality of other near field communication devices for verification, wherein the authentication success information at least includes a signature of the authentication authority device that feeds back the authentication result;

[0090] receiving verification results fed back by the plurality of other near field communication devices, wherein the verification results are obtained by the other near field communication devices verifying the signature using the public key of the authentication authority device,

[0091] If all the verification results are passed, the near field communication device to be authenticated is identified as an authenticated near field communication device.

[0092] This embodiment also provides a non-volatile computer storage medium for multi-person authentication and authorization based on near field communication, storing computer executable instructions, wherein the computer executable instructions are configured as follows:

[0093] Receiving an authentication request sent by a near field communication device to be authenticated, and sending the authentication request to a plurality of authentication authorization devices;

[0094] Receiving authentication results fed back by at least a part of the authentication authority devices among the plurality of authentication authority devices, wherein the authentication results at least include a signature of the authentication authority device that feeds back the authentication results;

[0095] Based on the statistics of the authentication results of the smart contract, if the number of authentication results that pass the authentication is greater than the preset threshold,

[0096] then generating authentication success information, and sending the authentication success information to a plurality of other near field communication devices for verification, wherein the authentication success information at least includes a signature of the authentication authority device that feeds back the authentication result;

[0097] receiving verification results fed back by the plurality of other near field communication devices, wherein the verification results are obtained by the other near field communication devices verifying the signature using the public key of the authentication authority device,

[0098] If all the verification results are passed, the near field communication device to be authenticated is identified as an authenticated near field communication device.

[0099] Each embodiment in this application is described in a progressive manner, and the same or similar parts between the embodiments can be referred to each other, and each embodiment focuses on the differences from other embodiments. In particular, for the device and medium embodiments, since they are basically similar to the method embodiments, the description is relatively simple, and the relevant parts can be referred to the partial description of the method embodiments.

[0100] The devices and media provided in the embodiments of the present application correspond one-to-one to the methods. Therefore, the devices and media also have similar beneficial technical effects as the corresponding methods. Since the beneficial technical effects of the methods have been described in detail above, the beneficial technical effects of the devices and media will not be repeated here.

[0101] Those skilled in the art will appreciate that embodiments of the present invention may be provided as methods, systems, or computer program products. Therefore, the present invention may take the form of a complete hardware embodiment, a complete software embodiment, or an embodiment combining software and hardware. Moreover, the present invention may take the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.

[0102] The present invention is a method, device (system), and computer program product according to an embodiment of the present invention.

[0103] The flowcharts and / or block diagrams of the products are described. It should be understood that each process and / or block in the flowcharts and / or block diagrams, as well as the combination of processes and / or blocks in the flowcharts and / or block diagrams, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing device to produce a machine, so that the instructions executed by the processor of the computer or other programmable data processing device generate instructions for implementing the processes in the flowcharts. Figure 1 A process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0104] These computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing device to operate in a specific manner, so that the instructions stored in the computer-readable memory produce an article of manufacture comprising an instruction device, which implements the process Figure 1 A process or multiple processes and / or boxes Figure 1 A function specified in one or more boxes.

[0105] These computer program instructions can also be loaded onto a computer or other programmable data processing device so that a series of operating steps are executed on the computer or other programmable device to produce a computer-implemented process, thereby providing instructions for implementing the process. Figure 1 A process or multiple processes and / or boxes Figure 1 The steps for the functions specified in one or more boxes.

[0106] In a typical configuration, a computing device includes one or more processors (CPU), input / output interfaces, network interfaces, and memory.

[0107] The memory may include non-permanent storage in a computer-readable medium, random access memory (RAM) and / or non-volatile memory in the form of read-only memory (ROM) or flash RAM. The memory is an example of a computer-readable medium.

[0108] Computer readable media include permanent and non-permanent, removable and non-removable media that can be implemented by any method or technology to store information. Information can be computer readable instructions, data structures, program modules or other data. Examples of computer storage media include, but are not limited to, phase change memory (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), other types of random access memory (RAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), flash memory or other memory technology, compact disk read-only memory (CD-ROM), digital versatile disk (DVD) or other optical storage, magnetic cassettes, magnetic tape magnetic disk storage or other magnetic storage devices or any other non-transmission media that can be used to store information that can be accessed by a computing device. As defined herein, computer readable media does not include temporary computer readable media (transit media), such as modulated data signals and carrier waves.

[0109] It should also be noted that the terms "include", "comprises" or any other variations thereof are intended to cover non-exclusive inclusion, so that a process, method, commodity or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, commodity or device. In the absence of more restrictions, the elements defined by the sentence "comprises a ..." do not exclude the existence of other identical elements in the process, method, commodity or device including the elements.

[0110] The above is only an embodiment of the present application and is not intended to limit the present application. For those skilled in the art, the present application may have various changes and variations. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present application should be included in the scope of the claims of the present application.

Claims

1. A multi-person authentication and authorization method based on near field communication, characterized in that: include: The near field communication device to be authenticated generates an authorization code; Receiving an authentication request sent by a near field communication device to be authenticated, and sending the authentication request to a plurality of authentication authorization devices; The authentication request includes an authorization code of the near field communication device to be authenticated; Receiving authentication results fed back by at least a part of the authentication authority devices among the plurality of authentication authority devices, wherein the authentication results at least include a signature of the authentication authority device that feeds back the authentication results; Counting the authentication results based on the smart contract, if the number of authentication passes in the authentication results is greater than a first preset threshold, generating authentication success information, and sending the authentication success information to multiple other near field communication devices for verification, wherein the authentication success information at least includes a signature of the authentication authority device that feeds back the authentication result; Receiving verification results fed back by the multiple other near field communication devices, wherein the verification results are obtained by the other near field communication devices verifying the signature using the public key of the authentication authority device; If all the verification results are passed, the near field communication device to be authenticated is identified as an authenticated near field communication device, and the authorization code of the near field communication device to be authenticated is identified as successfully authenticated.

2. The multi-person authentication and authorization method based on near field communication according to claim 1, characterized in that: The method further comprises: The near field communication device to be authenticated generates a public key and a private key; Acquire the public key of the near field communication device to be authenticated, and send the public key to multiple authentication and authorization devices.

3. The multi-person authentication and authorization method based on near field communication according to claim 2 is characterized in that: The authentication request is obtained by encrypting the near field communication device to be authenticated using its private key; The authentication result is obtained by the authentication authority decrypting the authentication request using the public key of the near field communication device to be authenticated.

4. The multi-person authentication and authorization method based on near field communication according to claim 1, characterized in that: The method further comprises: Receiving an authorization request sent by the near field communication device to be authenticated, and sending the authorization request to the plurality of authenticated near field communication devices, wherein the authorization request at least includes a private key signature of the authentication authorization device; Receiving audit results fed back by at least a portion of the plurality of authenticated near field communication devices, the audit results at least including a signature of the authenticated near field communication device that audits the authorization request; The audit results are counted based on the smart contract, and if the number of audited results is greater than a second preset threshold, the corresponding permission is granted.

5. The multi-person authentication and authorization method based on near field communication according to claim 4 is characterized in that: The authorization request includes the authorization code of the near field communication device to be authenticated; If the corresponding permission is granted, the authorization code includes the corresponding permission.

6. The multi-person authentication and authorization method based on near field communication according to claim 1 is characterized in that: The authentication result also includes characteristic data of the near-field communication device to be authenticated, and the counting of the authentication results based on the smart contract includes: querying and counting the authentication results based on the smart contract using the characteristic data of the near-field communication device to be authenticated as a key, wherein the characteristic data of the near-field communication device to be authenticated includes at least one of the ID of the near-field communication device to be authenticated and the authorization code of the near-field communication device to be authenticated.

7. The multi-person authentication and authorization method based on near field communication according to claim 4 is characterized in that: The audit result also includes characteristic data of the near-field communication device to be authenticated, and the statistics of the audit result based on the smart contract includes: querying and counting the audit result based on the smart contract with the characteristic data of the near-field communication device to be authenticated as a key, wherein the characteristic data of the near-field communication device to be authenticated includes at least one of the ID of the near-field communication device to be authenticated and the authorization code of the near-field communication device to be authenticated.

8. A multi-person authentication and authorization device based on near field communication, characterized in that: include: at least one processor; as well as, a memory communicatively connected to the at least one processor; wherein, The memory stores instructions that can be executed by the at least one processor, and the instructions are executed by the at least one processor to enable the at least one processor to perform the method according to any one of claims 1 to 7.

9. A non-volatile computer storage medium for multi-person authentication and authorization based on near field communication, storing computer executable instructions, characterized in that: The computer executable instructions are configured to perform the method of any one of claims 1-7.

Images