Verification method, medium, server and system based on device fingerprint

Abstract

This invention provides a device fingerprint-based verification method, medium, server, and system. The device fingerprint-based verification method includes: acquiring a data packet uploaded by a device; the data packet containing information of a static fingerprint and heartbeat data; parsing the data packet to extract the static fingerprint contained in the data packet; determining whether the data packet is a valid data packet by combining the static fingerprint and heartbeat data; and updating the dynamic fingerprint according to the heartbeat data if the data packet is determined to be a valid data packet, so as to combine the updated dynamic fingerprint and the static fingerprint for verification of subsequent data packets uploaded by the device. This invention, by combining static and dynamic fingerprints, greatly improves the security and reliability of accessed device data.

Description

Technical Field

[0001] The present invention belongs to the technical field of Internet of Things devices and relates to a method for identifying device fingerprints, and in particular to a verification method, medium, server and system based on device fingerprints. Background Art

[0002] In the existing technology, IoT devices with default passwords or weak passwords may expose the business, assets, customers and their valuable information of the device users to attack threats. Many criminals design more malware that can identify vulnerable IoT devices and log in and infect them with default usernames and passwords. Many government reports require manufacturers not to sell IoT devices with default passwords, such as using common Chinese and English words as usernames and / or passwords. Based on the current situation, there are two potential problems that may hinder people from strengthening password security measures: first, users may not understand how to change the default password; second, manufacturers forcibly encode usernames and passwords into the device without giving users the ability to change them.

[0003] There are not enough updates throughout the data management phase to ensure the security of consumer data, and sometimes device-related security measures are ignored. Most of these devices and IoT products are not updated enough, while some are not updated at all. Devices that were initially thought to be secure or threat-resistant become insecure and eventually vulnerable to hackers and other security issues.

[0004] It can be seen that the current identification of IoT devices is basically based on the device's own information (such as device ID, IP address, MAC address, etc.). However, due to the openness of IP addresses and MAC (Media Access Control Address, media access control address or physical address) addresses, they are easily scanned, read and counterfeited by hackers.

[0005] Therefore, how to provide a verification method, medium, server and system based on device fingerprint to solve the defects of the existing technology that cannot accurately identify and verify the device according to the inherent attribute information of the device and the real-time updated information has become a technical problem that needs to be urgently solved by technical personnel in this field. Summary of the invention

[0006] In view of the shortcomings of the prior art described above, the purpose of the present invention is to provide a verification method, medium, server and system based on device fingerprint, which is used to solve the problem that the prior art cannot accurately identify and verify the device based on the inherent attribute information of the device and the real-time updated information.

[0007] To achieve the above-mentioned purpose and other related purposes, the present invention provides, on one hand, a verification method based on device fingerprint, wherein the device fingerprint includes a static fingerprint and a dynamic fingerprint; the verification method based on device fingerprint includes: obtaining a data packet uploaded by a device; the data packet includes information of the static fingerprint and heartbeat data; parsing the data packet to extract the static fingerprint contained in the data packet; judging whether the data packet is a valid data packet in combination with the verification of the static fingerprint and the heartbeat data; and updating the dynamic fingerprint according to the heartbeat data if it is determined to be a valid data packet, so as to combine the updated dynamic fingerprint and the static fingerprint for verification of data packets subsequently uploaded by the device.

[0008] In one embodiment of the present invention, before the step of obtaining the data packet uploaded by the device, the verification method based on the device fingerprint also includes: obtaining a fingerprint request sent by the device, and generating a static fingerprint according to the attribute information of the device; and sending the static fingerprint to the device.

[0009] In one embodiment of the present invention, the step of generating a static fingerprint based on the attribute information of the device includes: extracting attribute fields and feature data fields from the attribute information of the device; encrypting the attribute fields and feature data fields to form encrypted fields; generating a device triple from the attribute fields, feature data fields and encrypted fields, and using the device triple as the static fingerprint of the device.

[0010] In one embodiment of the present invention, the attribute field includes one or more combinations of connection method number, device type number, manufacturer number, auto-increment number and self-check code; the characteristic data field includes one or more combinations of reserved field, random code and timestamp; the encryption field is a check code field generated by an encryption algorithm.

[0011] In one embodiment of the present invention, the step of combining the verification of the static fingerprint and the heartbeat data to determine whether the data packet is a valid data packet includes: determining whether the static fingerprint is consistent with the static fingerprint sent to the device; if so, performing information verification on the data packet; if not, not processing it.

[0012] In one embodiment of the present invention, the step of information verification of the data packet includes: performing static information verification on the data packet through the static fingerprint; when the static information verification is successful, performing dynamic information verification on the heartbeat data in the data packet through the dynamic fingerprint; if the dynamic information verification is successful, storing the data contained in the data packet uploaded by the device; if the dynamic information verification is unsuccessful, performing alarm processing.

[0013] In one embodiment of the present invention, the step of updating the dynamic fingerprint according to the heartbeat data when determining that the data packet is valid includes: obtaining the heartbeat data in multiple valid data packets; analyzing the gateway information of the device and the device heartbeat push frequency through the heartbeat data, and analyzing the area where the device is located according to the gateway information, and using the gateway information, the device heartbeat push frequency and the area where the device is located as dynamic information; if the dynamic information corresponding to multiple valid data packets is consistent, then generating a dynamic fingerprint for the first time or updating an existing dynamic fingerprint in combination with the dynamic information.

[0014] Another aspect of the present invention provides a medium on which a computer program is stored. When the computer program is executed by a processor, the verification method based on device fingerprint is implemented.

[0015] Another aspect of the present invention provides a server, comprising: a processor and a memory; the memory is used to store a computer program, and the processor is used to execute the computer program stored in the memory, so that the server executes the verification method based on device fingerprint.

[0016] The last aspect of the present invention provides a verification system based on device fingerprint, and the verification system based on device fingerprint includes: the server and at least one device; the device is used to obtain a static fingerprint fed back by the server after sending a fingerprint request to the server; and send a data packet to the server.

[0017] As described above, the device fingerprint-based verification method, medium, server, and system of the present invention have the following beneficial effects:

[0018] The present invention uniformly defines the device coding specifications of the device fingerprint system, and generates a unique device code by combining static fingerprints with dynamic fingerprints for device identification and authentication. By using device fingerprints and fingerprint identification technology, device data can be securely accessed, greatly improving reliability. The device fingerprint defined in the present invention contains more practical application information, such as the device type and the address characteristics represented by the area where the device is located, and is not easily stolen, counterfeited, or tampered with. Through the design of dynamic fingerprints, it is possible to monitor device behavior and generate corresponding alarms. BRIEF DESCRIPTION OF THE DRAWINGS

[0019] Figure 1 Shown is a principle flow chart of a verification method based on device fingerprint in one embodiment of the present invention.

[0020] Figure 2 Shown is a static fingerprint schematic diagram of a verification method based on device fingerprint in one embodiment of the present invention.

[0021] Figure 3Shown is a schematic diagram of a dynamic fingerprint in an embodiment of a verification method based on device fingerprint of the present invention.

[0022] Figure 4 Shown is a schematic diagram of the structural connection of the server of the present invention in one embodiment.

[0023] Figure 5 Shown is a system architecture diagram of a device fingerprint-based verification system in one embodiment of the present invention.

[0024] Figure 6 Shown is a system flow chart of a verification system based on device fingerprint in one embodiment of the present invention.

[0025] Component number description

[0026] 1 Server

[0027] 11 Processor

[0028] 12 Memory

[0029] 13 Communication Interface

[0030] 14 System Bus

[0031] 2 Equipment

[0032] Steps S11 to S14 DETAILED DESCRIPTION

[0033] The following describes the embodiments of the present invention by specific examples, and those skilled in the art can easily understand other advantages and effects of the present invention from the contents disclosed in this specification. The present invention can also be implemented or applied through other different specific embodiments, and the details in this specification can also be modified or changed in various ways based on different viewpoints and applications without departing from the spirit of the present invention. It should be noted that the following embodiments and features in the embodiments can be combined with each other without conflict.

[0034] It should be noted that the illustrations provided in the following embodiments are only schematic illustrations of the basic concept of the present invention, and thus the drawings only show components related to the present invention rather than being drawn according to the number, shape and size of components in actual implementation. In actual implementation, the type, quantity and proportion of each component may be changed arbitrarily, and the component layout may also be more complicated.

[0035] The device fingerprint-based verification method described in the present invention can greatly improve the security and reliability of access device data by combining static fingerprints and dynamic fingerprints.

[0036] The following will be combined Figures 1 to 6The principles and implementation methods of a verification method, medium, server, and system based on device fingerprint of the present embodiment are described in detail so that those skilled in the art can understand the verification method, medium, server, and system based on device fingerprint of the present embodiment without creative work.

[0037] See also Figure 1 , which is a principle flow chart of a verification method based on device fingerprint in one embodiment of the present invention. Figure 1 As shown, the device fingerprint includes static fingerprint and dynamic fingerprint. It consists of two parts. Some static information of the device (connection mode, device type, manufacturer) is unchanged. Using these fixed information and static coding rules, the static fingerprint of the device is generated. Some information of the device (region, commonly used gateway, heartbeat push frequency, etc.) has specific characteristics (such as unchanged within a fixed time period), which constitutes the dynamic fingerprint of the device.

[0038] The verification method based on device fingerprint specifically includes the following steps:

[0039] S11, obtaining a data packet uploaded by a device; the data packet includes information of the static fingerprint and heartbeat data.

[0040] In this embodiment, before the device uploads a data packet, a fingerprint request sent by the device is obtained, and a static fingerprint is generated according to the attribute information of the device; the static fingerprint is sent to the device so that the device burns the static fingerprint.

[0041] See also Figure 2 , which is a schematic diagram of a static fingerprint in an embodiment of the device fingerprint verification method of the present invention. Figure 2 As shown, the static fingerprint includes the attribute field EUI (Extended unique identifier), the feature data field appsk (Application Session Key) and the encryption field nwsk (Network Session Key). The static fingerprint is generated according to the attribute information of the device, specifically including:

[0042] (1) Extracting attribute fields and feature data fields from attribute information of the device.

[0043] Specifically, the attribute field includes one or more combinations of connection mode number, device type number, manufacturer number, auto-increment number and self-check code. The characteristic data field includes one or more combinations of reserved field, random code and time stamp.

[0044] (2) The attribute field and the characteristic data field are encrypted to form an encrypted field. The encrypted field is a check code field generated by an encryption algorithm.

[0045] (3) Generate a device triplet from the attribute field, the feature data field and the encryption field, and use the device triplet as the static fingerprint of the device.

[0046] Specifically, the encoding rule of the static fingerprint is to construct a device triplet: 16-bit EUI (Extended unique identifier), appsk (Application Session Key), and nwsk (Network Session Key).

[0047] Among them, EUI contains the following information: connection method, device type, manufacturer, self-numbering, and self-check code.

[0048] The 16-bit field data of EUI is distributed as follows:

[0049] Connection method number: 1 digit, consisting of letters.

[0050] Device type number: 4 digits, consisting of hexadecimal numbers.

[0051] Manufacturer number: 4 digits, composed of hexadecimal numbers.

[0052] Self-numbering: 5 digits. Self-incrementing number, which refers to the number of the self-incrementing sequence unique to each device type, is expressed in 5-digit hexadecimal, with zeros added in front of the missing digits.

[0053] Self-check code: 2 digits. The last two digits of the 32-bit number generated by the MD5 algorithm. The format of the MD5 algorithm is: connection method number + device type number + manufacturer number + self-number + iodized salt.

[0054] If the password is hashed directly, hackers can obtain the password hash value and then look up the hash value dictionary (such as the MD5 password cracking website) to get a user's password. Adding salt (adding salt value) or iodized salt can solve this problem to a certain extent. The so-called salting method is to add some "condiments". The basic principle is: when the user provides the password for the first time (usually when registering), the system automatically sprinkles some "condiments" into the password and then hashes it. When the user logs in, the system sprinkles the same "condiments" on the code provided by the user, then hashes it, and then compares the hash values ​​to determine whether the password is correct. As a result, the password + the custom salt value is used to obtain MD5.

[0055] appsk: used to identify the device's unique information when it is used in an application, 32 bits. The first 16 bits are 0, which is used as the information reserved field (other special information can be adjusted according to needs). The last 16 bits are a 3-digit random code (numbers, letters) + a 13-digit timestamp. For example, if a manufacturer's device is a camera, you can consider adding SLA (Service Level Agreement) information to the first 16 bits of the information reserved field.

[0056] nwsk is a verification code generated based on EUI+appsk using BASE64, SHA1, 3DES (need to customize the encryption key of 3DES), and MD5 sequential encryption algorithms. The specific encryption sequence is: BASE64(MD5(3DES(SHA1(EUI+appsk)))).

[0057] It should be noted that the encryption sequence from the inner layer SHA1 to 3DES, MD5 and the outermost layer BASE64 is one embodiment of the present invention. Other encryption sequences of SHA1, 3DES, MD5 and BASE64 or encryption methods that adjust the encryption sequence after introducing other encryption algorithms are also within the scope of protection of the present invention. Because the characters generated after BASE64 encryption are universal in recognition, the BASE64 encryption algorithm is preferably placed in the outermost layer of encryption.

[0058] S12, parsing the data packet to extract the static fingerprint contained in the data packet.

[0059] S13, judging whether the data packet is a valid data packet by combining the verification of the static fingerprint and the heartbeat data.

[0060] In this embodiment, S13 includes:

[0061] (1) Determine whether the static fingerprint is consistent with the static fingerprint sent to the device.

[0062] (2) If yes, perform information verification on the data packet; if no, do not process it.

[0063] Specifically, static information verification is performed on the data packet through the static fingerprint.

[0064] When the static information verification succeeds, the heartbeat data in the data packet is verified through the dynamic fingerprint; if the dynamic information verification succeeds, it is determined to be a valid data packet, and the data contained in the data packet uploaded by the device is stored; if the dynamic information verification fails, an alarm is processed. Specific alarm methods include existing alarm methods such as message pop-up windows and SMS notifications, which are not limited in the present invention.

[0065] S14, when the data packet is determined to be a valid data packet, the dynamic fingerprint is updated according to the heartbeat data, so that the updated dynamic fingerprint is combined with the static fingerprint for verification of data packets subsequently uploaded by the device.

[0066] In this embodiment, S14 includes:

[0067] (1) Obtain heartbeat data from a plurality of valid data packets.

[0068] (2) Analyze the gateway information and the device heartbeat push frequency of the device through the heartbeat data, analyze the area where the device is located based on the gateway information, and use the gateway information, the device heartbeat push frequency and the area where the device is located as dynamic information.

[0069] (3) If the dynamic information corresponding to the multiple valid data packets is consistent, a dynamic fingerprint is generated for the first time or an existing dynamic fingerprint is updated in combination with the dynamic information.

[0070] Specifically, when the device uploads heartbeat data, the platform will receive and record relevant information. Based on the heartbeat data over a period of time, the platform will analyze the device's commonly used gateways and the device's heartbeat push frequency. At the same time, the device's location will be analyzed based on the gateway information. Finally, the dynamic fingerprint of the device will be formed based on the consistent information collected during this period.

[0071] See also Figure 3 , which is a schematic diagram of a dynamic fingerprint in an embodiment of the device fingerprint verification method of the present invention. Figure 3 As shown, the dynamic fingerprint includes the gateway information of the device, the device heartbeat push frequency and the area where the device is located. It should be noted that the gateway information of the device, the device heartbeat push frequency and the area where the device is located are only one embodiment of the dynamic fingerprint in the present invention, and other device dynamic information and dynamic information combinations that can identify the device are also within the scope of protection of the present invention.

[0072] The protection scope of the verification method based on device fingerprint described in the present invention is not limited to the execution order of the steps listed in this embodiment. All solutions implemented by adding, reducing or replacing steps in the prior art based on the principles of the present invention are included in the protection scope of the present invention.

[0073] This embodiment provides a computer storage medium on which a computer program is stored. When the computer program is executed by a processor, the verification method based on device fingerprint is implemented.

[0074] Those skilled in the art can understand that all or part of the steps of implementing the above-mentioned method embodiments can be completed by hardware related to the computer program. The aforementioned computer program can be stored in a computer-readable storage medium. When the program is executed, the steps of the above-mentioned method embodiments are executed; and the aforementioned computer-readable storage medium includes: ROM, RAM, magnetic disk or optical disk, etc., various computer storage media that can store program codes.

[0075] See also Figure 4 , which is a schematic diagram showing the structural connection of the server in one embodiment of the present invention. Figure 4 As shown, this embodiment provides a server 1, which serves as a management platform for devices from different manufacturers, and specifically includes: a processor 11, a memory 12, a communication interface 13 and / or a system bus 14; the memory 12 and the communication interface 13 are connected to the processor 11 through the system bus 14 and complete mutual communication, the memory 12 is used to store computer programs, the communication interface 13 is used to communicate with other devices, and the processor 11 is used to run computer programs, so that the server 1 executes each step of the verification method based on device fingerprints.

[0076] The system bus 14 mentioned above can be a Peripheral Component Interconnect (PCI) bus or an Extended Industry Standard Architecture (EISA) bus, etc. The system bus can be divided into an address bus, a data bus, a control bus, etc. The communication interface 13 is used to realize the communication between the database access device and other devices (such as a client, a read-write library, and a read-only library). The memory 12 may include a random access memory (RAM), and may also include a non-volatile memory, such as at least one disk storage.

[0077] The above-mentioned processor 11 can be a general-purpose processor, including a central processing unit (CPU), a network processor (NP), etc.; it can also be a digital signal processor (DSP), an application-specific integrated circuit (ASIC), a field programmable gate array (FPGA) or other programmable logic devices, discrete gates or transistor logic devices, discrete hardware components.

[0078] See also Figure 5 , which is a system architecture diagram of a device fingerprint-based verification system in one embodiment of the present invention. Figure 5 As shown, the device fingerprint-based verification system of the present invention comprises: a server 1 for implementing the device fingerprint-based verification method described above and at least one device 2. Figure 5 In the figure, three devices are taken as an example to show the connection diagram between the server and the three devices. Server 1 is connected to device a, device b, and device c respectively. Server 1 generates static fingerprints of device a, device b, and device c respectively and sends them to the corresponding devices. Device a, device b, and device c burn their static fingerprints into the devices and provide heartbeat data to server 1 so that server 1 can generate corresponding dynamic fingerprints of device a, device b, and device c.

[0079] The device 2 is used to obtain a static fingerprint fed back by the server 1 after sending a fingerprint request to the server 1; and to send a data packet to the server 1.

[0080] See also Figure 6 , which is a system flow chart of a verification system based on device fingerprints in one embodiment of the present invention. Figure 6 As shown, the server serves as a management platform for devices from different manufacturers, providing a platform operation interface for interaction to manufacturers and other users. Manufacturers apply for and obtain static fingerprints by logging into the platform, and devices from different manufacturers transmit data to the platform.

[0081] Figure 6 It shows the application closed-loop process of the entire system when the platform and manufacturer equipment are involved:

[0082] First, burn the manufacturer's static fingerprint.

[0083] Manufacturers use static fingerprints to uniquely identify devices. Specifically, users (manufacturers) log in to the platform system and apply for the static fingerprint to be produced. The platform generates a fingerprint key, i.e., a static fingerprint, based on known static information about the device, and returns it to the user after encryption. The user burns the encrypted static fingerprint into the device to produce the device.

[0084] Then, the data uploaded by the device is received and verified.

[0085] Use static fingerprints for information verification. When the device is operating normally, it transmits data to the platform. After the platform receives the data, it first decrypts and self-checks the data to verify that the fingerprint is sent by the platform. Then use the static fingerprint for information verification to determine whether the data transmission conflicts with the static information (connection method, device type, manufacturer) contained in the fingerprint. If there is a conflict, handle it accordingly. The corresponding processing here refers to alarm processing or other processing measures for verification errors.

[0086] Use dynamic fingerprints for information verification. When the device is operating normally, it transmits data to the platform. The platform verifies the information based on the dynamic fingerprint previously generated by the device to determine whether the recent data transmission conflicts with the saved dynamic fingerprint information (common gateway, region, heartbeat frequency). If there is a conflict, the corresponding processing is carried out. The corresponding processing here refers to alarm processing or other processing measures for verification errors.

[0087] Furthermore, after the dynamic fingerprint verification is successful, if multiple received dynamic fingerprints are consistent within a preset time period or within a preset number of dynamic fingerprint reception times, the dynamic fingerprint is updated to the dynamic fingerprints received the most recently.

[0088] As a result, a unique static fingerprint encoding rule is formed in the entire system process. Each manufacturer logs in to the platform to apply for a fingerprint, and then burns the static fingerprint into the produced equipment. Every time the platform receives data, it verifies the static fingerprint contained in the data. At the same time, every time the platform receives data, it compares it with the dynamic fingerprint of the device to handle conflicts in data transmission.

[0089] The device fingerprint-based verification system described in the present invention can implement the device fingerprint-based verification method described in the present invention, but the implementation device of the device fingerprint-based verification method described in the present invention includes but is not limited to the structure of the device fingerprint-based verification system listed in this embodiment. All structural deformations and replacements of the prior art made according to the principles of the present invention are included in the protection scope of the present invention.

[0090] In summary, the verification method, medium, server and system based on device fingerprint described in the present invention can unify the definition of the device coding specification of the device fingerprint system, and generate a unique device code by combining static fingerprint and dynamic fingerprint for device identification and authentication. By using device fingerprint and fingerprint identification technology, device data can be securely accessed, greatly improving reliability. The device fingerprint defined in the present invention contains more practical application information and is not easily stolen, counterfeited or tampered with. Through the design of dynamic fingerprint, it is possible to monitor device behavior and generate corresponding alarms. The present invention effectively overcomes the various shortcomings of the prior art and has a high industrial utilization value.

[0091] The above embodiments are merely illustrative of the principles and effects of the present invention, and are not intended to limit the present invention. Anyone familiar with the art may modify or alter the above embodiments without departing from the spirit and scope of the present invention. Therefore, all equivalent modifications or alterations made by a person of ordinary skill in the art without departing from the spirit and technical concept disclosed by the present invention shall still be covered by the claims of the present invention.

Claims

1. A verification method based on device fingerprint, characterized in that: The device fingerprint includes a static fingerprint and a dynamic fingerprint; The verification method based on device fingerprint includes: Acquire a data packet uploaded by a device; the data packet contains information of the static fingerprint and heartbeat data; the static fingerprint includes an attribute field, a feature data field and an encryption field; Parsing the data packet to extract the static fingerprint contained in the data packet; Determine whether the data packet is a valid data packet by combining the verification of the static fingerprint and the heartbeat data; If the data packet is determined to be valid, the dynamic fingerprint is updated according to the heartbeat data, so that the updated dynamic fingerprint and the static fingerprint are combined for verification of the data packets subsequently uploaded by the device; the dynamic fingerprint includes the gateway information of the device, the frequency of the device heartbeat push and the area where the device is located; The step of updating the dynamic fingerprint according to the heartbeat data when determining that it is a valid data packet includes: obtaining the heartbeat data in multiple valid data packets; analyzing the gateway information of the device and the device heartbeat push frequency through the heartbeat data, and analyzing the area where the device is located according to the gateway information, and using the gateway information, the device heartbeat push frequency and the area where the device is located as dynamic information; if the dynamic information corresponding to multiple valid data packets is consistent, then generating a dynamic fingerprint for the first time or updating an existing dynamic fingerprint in combination with the dynamic information.

2. The verification method based on device fingerprint according to claim 1, characterized in that: Before the step of obtaining the data packet uploaded by the device, the verification method based on device fingerprint further includes: Obtaining a fingerprint request sent by the device, and generating a static fingerprint according to attribute information of the device; The static fingerprint is sent to the device.

3. The verification method based on device fingerprint according to claim 2, characterized in that: The step of generating a static fingerprint according to the attribute information of the device includes: Extracting attribute fields and feature data fields from attribute information of the device; Encrypting the attribute field and the characteristic data field to form an encrypted field; A device triplet is generated from the attribute field, the characteristic data field and the encryption field, and the device triplet is used as a static fingerprint of the device.

4. The verification method based on device fingerprint according to claim 3 is characterized in that: The attribute field includes one or more combinations of connection mode number, device type number, manufacturer number, auto-increment number and self-check code; The characteristic data field includes one or more combinations of a reserved field, a random code and a timestamp; The encryption field is a verification code field generated by an encryption algorithm.

5. The verification method based on device fingerprint according to claim 2, characterized in that: The step of combining the verification of the static fingerprint and the heartbeat data to determine whether the data packet is a valid data packet comprises: Determining whether the static fingerprint is consistent with the static fingerprint sent to the device; If yes, perform information verification on the data packet; if no, do not process it.

6. The verification method based on device fingerprint according to claim 5, characterized in that: The step of information verification of the data packet comprises: Performing static information verification on the data packet using the static fingerprint; When the static information verification is successful, the heartbeat data in the data packet is subjected to dynamic information verification through the dynamic fingerprint; if the dynamic information verification is successful, the data contained in the data packet uploaded by the device is stored; if the dynamic information verification is unsuccessful, an alarm is processed.

7. A medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the verification method based on device fingerprint described in any one of claims 1 to 6 is implemented.

8. A server, characterized in that: include: Processor and memory; The memory is used to store a computer program, and the processor is used to execute the computer program stored in the memory, so that the server performs the verification method based on device fingerprint as described in any one of claims 1 to 6.

9. A verification system based on device fingerprint, characterized in that: The verification system based on device fingerprint comprises: the server as claimed in claim 8 and at least one device; The device is used to obtain a static fingerprint fed back by the server after sending a fingerprint request to the server; and send a data packet to the server.

Images