Information authentication method, system, device and readable storage medium

Abstract

This invention proposes an information authentication method, system, apparatus, and readable storage medium. The information authentication method includes: responding to an authentication signal of the information to be authenticated, generating N sub-information to be authenticated based on the information to be authenticated; authenticating the i-th sub-information to be authenticated based on a stored preset authentication key and an acquired authentication key; and authenticating the i-th sub-information to be authenticated based on successful authentication of the i-th sub-information to be authenticated. In this invention's technical solution, authentication is performed on any of the N sub-information to be authenticated, and authentication debugging is then performed on any sub-information to be authenticated that has passed authentication, ensuring that the user performing the debugging is a legitimate user and also ensuring the integrity verification of the information to be authenticated and debugged.

Description

Technical Field

[0001] The present application relates to the field of information management, and in particular, to an information authentication method, an information authentication system, an information authentication device and a readable storage medium. Background Art

[0002] In the related art, during the authentication process of a message, only the first instruction is authenticated once by a simple challenge-response protocol before debugging, which has low security. Summary of the invention

[0003] The present application aims to solve at least one of the technical problems existing in the prior art or related art.

[0004] To this end, the first aspect of the present invention proposes an information authentication method.

[0005] A second aspect of the present invention provides an information authentication system.

[0006] The third aspect of the present invention provides an information authentication device.

[0007] A fourth aspect of the present invention provides a readable storage medium.

[0008] In view of this, according to the first aspect of the present invention, an information authentication method is proposed, which includes: in response to an authentication signal of the information to be authenticated, generating N sub-information to be authenticated according to the information to be authenticated; authenticating the i-th authentication sub-information according to the stored preset authentication key and the obtained authentication key, and authenticating the i-th sub-information to be authenticated based on the authentication of the i-th sub-information to be authenticated.

[0009] In this technical solution, a preset authentication key is pre-stored. When a user inputs information to be authenticated and an authentication key, in response to an authentication signal of the information to be authenticated and obtaining the authentication key input by the user, the authentication information is further processed, and the input information to be authenticated is divided into N sub-information to be authenticated with the same number of digits, wherein the number of digits is a preset number of digits. In this way, the information to be authenticated input by the user is not directly verified, which increases the complexity of the information authentication process and improves the security of the information authentication.

[0010] The i-th sub-information to be authenticated is authenticated, and based on the authentication of the i-th information to be authenticated, the i-th sub-information to be authenticated is authenticated. That is, firstly, the current i-th sub-information to be authenticated is authenticated according to the pre-stored preset authentication key and the obtained authentication key, and after the authentication is passed, the current sub-information to be authenticated is authenticated and debugged. By authenticating each piece of sub-information to be authenticated by the authentication key input by the user and the pre-stored preset authentication key before the authentication debugging, so that the information before each authentication debugging needs to be authenticated, a process is formed in which a piece of authentication information can be randomly and multiple times authenticated after being split into N pieces of sub-information to be authenticated, thereby ensuring the security of the authentication process.

[0011] In the technical solution of the present invention, the information is divided into N sub-information to be authenticated through the above-mentioned information authentication method for information authentication and authentication debugging. Based on the authentication key preset by the system and the authentication key input by the user, any of the N sub-information to be authenticated is authenticated, and any sub-information to be authenticated that passes the authentication is then authenticated and debugged. On the one hand, it is realized that the information before each authentication debugging needs to be authenticated first, ensuring that the user performing the debugging is a legitimate user. On the other hand, it increases the complexity of the information authentication process, and also realizes the integrity verification of the authentication debugging information, ensuring the security and accuracy of the authentication debugging process.

[0012] The information authentication method provided by the present invention may also have the following additional technical features:

[0013] In the above technical solution, the step of authenticating the i-th sub-information to be authenticated specifically includes: initializing and assigning a first authentication parameter value and a second authentication parameter value; generating a first authentication code of the i-th sub-information to be authenticated according to the i-th sub-information to be authenticated, the first authentication parameter value and the authentication key; generating a second authentication code of the i-th sub-information to be authenticated according to the i-th sub-information to be authenticated, the second authentication parameter value and the authentication key; determining that the authentication of the i-th sub-information to be authenticated is passed based on the fact that the first authentication code of the i-th sub-information to be authenticated and the second authentication code of the i-th sub-information to be authenticated are the same, and updating the first authentication parameter value to the first authentication code of the i-th sub-information to be authenticated, and updating the second authentication parameter value to the second authentication code of the i-th sub-information to be authenticated; wherein N is a positive integer greater than or equal to 1, and i∈[1, N] is any positive integer.

[0014] In this technical solution, the step of authenticating the i-th sub-information to be authenticated specifically includes: first initializing and assigning values ​​to the first authentication parameter value and the second authentication parameter value, and then generating a first authentication code for the i-th sub-information to be authenticated according to the i-th authentication sub-information, the first authentication parameter value and the authentication key, generating a second authentication code for the i-th sub-information to be authenticated according to the i-th sub-information to be authenticated, the second authentication parameter value and the authentication key, and judging whether the first authentication code and the second authentication code of the i-th sub-information to be authenticated are the same. Based on the fact that the first authentication code and the second authentication code of the i-th sub-information to be authenticated are the same, it can be judged that the authentication of the i-th information to be authenticated is passed.

[0015] Further, the first authentication parameter is updated to the first authentication code of the i-th sub-information to be authenticated, and the second authentication parameter value is updated to the second authentication code of the i-th sub-information to be authenticated. After the current i-th sub-information to be authenticated is authenticated, the current i-th sub-information to be authenticated is authenticated and debugged. On the basis that the previous sub-information to be authenticated (which can be understood as the (i-1)th sub-information to be authenticated) is authenticated, the authentication debugging result in the previous authentication self-confidence authentication debugging is used to authenticate the current sub-information to be authenticated, that is, the i-th sub-information to be authenticated. Through the above-mentioned authentication debugging method, even if an illegal user has the authentication key and secret key, it is difficult to generate the correct first authentication code and second authentication code without knowing the authentication debugging process of the previous sub-information to be authenticated, thereby realizing the integrity verification of the debugged information, thereby ensuring the accuracy of the information authentication.

[0016] It can be understood that after the authentication is passed in the authentication debugging of the previous sub-information to be authenticated, the first authentication code and the second authentication code corresponding to the information will be generated. The above-mentioned first authentication code and the second authentication code are assigned to the first authentication parameter value and the second authentication parameter value respectively, and the first authentication parameter value and the second authentication parameter value are updated. The first authentication code and the second authentication code corresponding to the current sub-information to be authenticated are generated using the updated first authentication parameter value and the second authentication parameter value. By determining that the first authentication code and the second authentication code corresponding to the current sub-information to be authenticated are the same, it is determined that the authentication of the current sub-information to be authenticated is passed. On the basis that the authentication of the current sub-information to be authenticated is passed, the next piece of information to be authenticated is authenticated and authenticated, and after the authentication is passed, the first authentication parameter value and the second authentication parameter value are updated using the first authentication code and the second authentication code corresponding to the current sub-information to be authenticated, so as to perform authentication debugging on the next piece of information to be authenticated. The integrity verification of the authentication debugging information is realized, and the accuracy and security in the authentication debugging process are guaranteed.

[0017] In any of the above technical solutions, the step of generating a first authentication code for the i-th sub-information to be authenticated according to the i-th sub-information to be authenticated, the first authentication parameter value and the authentication key specifically includes: generating a first authentication plaintext for the i-th sub-information to be authenticated according to the i-th sub-information to be authenticated and the first authentication parameter value; generating a first authentication code for the i-th sub-information to be authenticated according to the first authentication plaintext for the i-th sub-information to be authenticated and the authentication key.

[0018] In this technical solution, the current i-th sub-information to be authenticated and the first authentication parameter value are padded with 0 at the end, so that the number of digits of the current i-th sub-information to be authenticated and the first authentication parameter value are both preset. At the same time, the current i-th sub-information to be authenticated and the first authentication parameter value after the 0-padded processing are bitwise XORed to generate the first authentication plaintext of the i-th sub-information to be authenticated. The generated first authentication plaintext is encrypted using the authentication key input by the user to obtain the first authentication code of the current sub-information to be authenticated.

[0019] In the above method of generating the first authentication plaintext, the first authentication parameter value is related to the first authentication code of the previous sub-information to be authenticated. Therefore, the authentication of the current sub-information is based on the first authentication code in the authentication result of the previous sub-information to be authenticated, so as to ensure the integrity verification of the authentication debugging information, thereby ensuring the accuracy and security of the authentication process.

[0020] In the above technical solution, the step of generating the second authentication code of the i-th sub-information to be authenticated according to the i-th sub-information to be authenticated, the second authentication parameter value and the authentication key specifically includes: generating the second authentication plaintext of the i-th sub-information to be authenticated according to the i-th sub-information to be authenticated and the second authentication parameter value; generating the second authentication code of the i-th sub-information to be authenticated according to the second authentication plaintext of the i-th sub-information to be authenticated and the authentication key.

[0021] In this technical solution, the current sub-information to be authenticated and the second authentication parameter value are padded with 0 at the end, so that the number of digits of the current sub-information to be authenticated and the second authentication parameter value are both preset. At the same time, the current sub-information to be authenticated and the second authentication parameter value after the 0-padded processing are bitwise XORed to generate the second authentication plaintext of the current sub-information to be authenticated. The generated second authentication plaintext is encrypted using the authentication key input by the user to obtain the second authentication code of the i-th sub-information to be authenticated.

[0022] The current sub-information is authenticated by the first authentication code and the second authentication code, and the logic is simple and easy to operate. In the above-mentioned method of generating the second authentication plaintext, the second authentication parameter value is related to the second authentication code of the previous sub-information to be authenticated. Then, the authentication of the current sub-information is based on the second authentication code in the authentication result of the previous sub-information to be authenticated, so as to ensure the integrity verification of the authentication debugging information, thereby ensuring the accuracy and security of the authentication process.

[0023] In any of the above technical solutions, the information authentication method further includes: after determining that the authentication of the i-th sub-information to be authenticated is passed, storing the i-th sub-information to be authenticated after the authentication is passed.

[0024] In this technical solution, after the current sub-information passes the authentication, the authenticated current sub-information is stored, so that in the subsequent authentication debugging process, the authenticated sub-information can be called and counted.

[0025] In any of the above technical solutions, the information authentication method further includes: if the first authentication code of the i-th sub-information to be authenticated is different from the second authentication code of the i-th sub-information to be authenticated, the authentication is terminated.

[0026] In this technical solution, when it is determined that the first authentication code of the sub-information to be authenticated is different from the second authentication code of the sub-information to be authenticated, it means that the authentication of the current sub-information fails, and the entire authentication debugging process is terminated, and the information authentication program is re-entered. In the above manner, the authentication debugging function is stopped immediately after the input error information is recognized, which ensures that the user can automatically stop the entire authentication and authentication process when the error information is recognized without turning off the authentication debugging function, thereby ensuring the reliability and security of the entire information authentication process.

[0027] In any of the above technical solutions, the information authentication method further includes: when the number of stored authenticated sub-information to be authenticated is N, integrating and analyzing the stored N authenticated sub-information to be authenticated to generate authenticated information.

[0028] In this technical solution, the number of the stored authenticated sub-information to be authenticated is counted. When the number is N, it means that all the N authenticated sub-information to be authenticated have passed the authentication, that is, the entire authenticated information has passed the authentication. After the above-mentioned N authenticated sub-information to be authenticated is integrated and analyzed, the authenticated information is generated, and the authenticated information is sent. In this way, the sending and use of the authenticated information is realized.

[0029] In any of the above technical solutions, the step of authenticating the i-th sub-information to be authenticated according to the stored preset authentication key and the obtained authentication key specifically includes: generating a first authentication value of the i-th sub-information to be authenticated in response to obtaining the authentication key signal; generating a second authentication value of the i-th sub-information to be authenticated according to the preset authentication key and the first authentication value of the i-th sub-information to be authenticated; generating a third authentication value of the i-th sub-information to be authenticated according to the authentication key and the second authentication value of the i-th sub-information to be authenticated; and authenticating the i-th sub-information to be authenticated based on the first authentication value of the i-th sub-information to be authenticated and the third authentication value of the i-th sub-information to be authenticated.

[0030] In this technical solution, during the process of authenticating the sub-information to be authenticated, the authentication key signal input by the user is obtained to obtain the authentication key. At the same time, a first authentication value is randomly generated. The randomly generated first authentication value is encrypted according to the pre-stored authentication key to obtain a second authentication value. The second authentication value is then decrypted according to the authentication key input by the user to obtain a third authentication value.

[0031] The first authentication value and the third authentication value obtained above are used to authenticate the sub-information to be authenticated, thereby ensuring the accuracy of the authentication process of the information to be authenticated, thereby ensuring the accuracy of the entire information authentication process.

[0032] In any of the above technical solutions, the step of authenticating the i-th sub-information to be authenticated based on the first authentication value of the i-th sub-information to be authenticated and the third authentication value of the i-th sub-information to be authenticated specifically includes: based on the first authentication value of the i-th sub-information to be authenticated and the third authentication value of the i-th sub-information to be authenticated being equal, the authentication of the i-th sub-information to be authenticated is passed; based on the first authentication value of the i-th sub-information to be authenticated and the third authentication value of the i-th sub-information to be authenticated being unequal, the authentication of the i-th sub-information to be authenticated is failed.

[0033] In this technical solution, if the first authentication value and the third authentication value are the same, it means that the authentication key input by the user is correct, that is, the identity of the user is legal, and the authentication debugging procedure for the current information to be authenticated can be performed. If the first authentication value and the third authentication value are different, it means that the authentication key input by the user is incorrect, that is, the current operating user is not a legal user, and the authentication debugging of the current information to be authenticated is not performed.

[0034] Through the above authentication method, the legitimacy of the operating user is authenticated, ensuring the rationality and security of the authentication and debugging process.

[0035] In any of the above technical solutions, the step of initializing and assigning the first authentication parameter value and the second authentication parameter value specifically includes: using the third authentication value of the first sub-information to be authenticated as the first authentication parameter value; using the first authentication value of the first sub-information to be authenticated as the second authentication parameter value.

[0036] In this technical solution, when the authentication process of the information to be authenticated begins, the first sub-information to be authenticated is authenticated first. During the authentication process, a first authentication value of the first sub-information to be authenticated is randomly generated, and a third authentication value is obtained after encryption and decryption based on the first authentication value. The third authentication value is used as the initial first authentication parameter value and the first authentication value is used as the initial second authentication parameter value.

[0037] The manner of determining the initial first authentication parameter value and the initial second authentication parameter value through the above-mentioned initialization assignment ensures the reliability and rationality of the initialization assignment, and also ensures the feasibility and reliability of the entire authentication debugging process.

[0038] According to a second aspect of the present invention, an information authentication system is proposed, which includes: a receiving unit, used to receive information to be authenticated and generate an authentication signal for the information to be authenticated; a conversion unit, used to respond to the authentication signal of the information to be authenticated and generate N sub-information to be authenticated according to the information to be authenticated; an authentication unit, used to authenticate the i-th sub-information to be authenticated according to a stored preset authentication key and an acquired authentication key; and an authentication unit, used to authenticate the i-th sub-information to be authenticated when the authentication of the i-th sub-information to be authenticated is passed.

[0039] In the technical solution, the information authentication system includes a receiving unit, a conversion unit, an authentication unit and an authentication unit, wherein the receiving unit is used to receive the information to be authenticated, and generate an authentication signal corresponding to the information to be authenticated according to the information to be authenticated. The conversion unit responds to the authentication signal of the information to be authenticated sent by the receiving unit, and converts the information to be authenticated to generate N sub-information to be authenticated. The authentication unit is used to authenticate the i-th sub-information to be authenticated among the N sub-information to be authenticated according to the stored preset authentication key and the acquired authentication key, and the authentication unit is used to authenticate the i-th sub-information to be authenticated after the authentication unit verifies and passes the i-th sub-information to be authenticated.

[0040] In the technical solution of the present invention, the information is divided into N sub-information to be authenticated through the above-mentioned information authentication method for information authentication and authentication debugging. The authentication unit authenticates any of the N sub-information to be authenticated based on the authentication key preset by the system and the authentication key input by the user. The authentication unit then performs authentication debugging on any sub-information to be authenticated that has passed the authentication. On the one hand, it is realized that the information before each authentication debugging needs to be authenticated first, ensuring that the user performing the debugging is a legitimate user. On the other hand, it increases the complexity of the authentication debugging process, and also realizes the integrity verification of the authentication debugging information, ensuring the security and accuracy of the authentication debugging process.

[0041] According to a third aspect of the present invention, an information authentication device is proposed, which includes: a memory; a processor, the processor is connected to the memory, the processor includes an authentication component, a debugging component and a debugging transmission component, wherein the authentication component is connected to the debugging component, and the debugging component is connected to the debugging transmission component; the authentication component, the debugging component and the debugging transmission component are each provided with one or more communication interfaces, a communication connection is established according to the communication interface, a computer program that can be run on the processor is stored in the memory, and when the processor executes the computer program, the steps of the information authentication method in any of the above technical solutions are implemented.

[0042] In the technical solution, the information authentication device is provided with a memory and a processor. The processor includes an authentication component, a debugging component and a debugging transmission component, wherein the authentication component is connected with the debugging component, the debugging component is connected with the debugging transmission component, and the authentication component, the debugging component and the debugging transmission component are all provided with one or more communication interfaces, thereby establishing a communication connection and performing the information authentication process.

[0043] The information authentication device provided by the present invention includes: a memory storing a program or instruction; a processor, and when the processor executes the program or instruction, the information authentication method in any technical solution of the first aspect is implemented. Therefore, the information authentication device includes all the beneficial effects of the information authentication method in any technical solution above, which will not be repeated here.

[0044] In the above technical solution, the debugging component includes: a data exchange register, which is set to be readable and writable, and is connected to the authentication component; an authentication status register, which is set to be readable, and is connected to the authentication component; an authentication permission register, which is set to be readable, and is connected to the authentication component; and a debugging transmission component includes: an extension register, which is connected to the debugging transmission component, and the debugging transmission component is used to read and write data in the debugging component and the extension register.

[0045] In this technical solution, the debugging component is provided with a data exchange register, an authentication status register, and an authentication permission register, and the debugging transmission component includes an extension register.

[0046] Furthermore, the authentication permission register and the authentication status register are both set to be readable for reading the data of the authentication component. The data exchange register is set to be readable and writable for reading and writing the data of the authentication component.

[0047] Furthermore, the extended register is connected to the debug transmission component so that the debug transmission component reads and writes data in the debug component and the extended register.

[0048] According to a fourth aspect of the present invention, a readable storage medium is provided, on which a program or instruction is stored, and the program or instruction is executed by a processor to implement an information authentication method as in any of the above technical solutions.

[0049] The readable storage medium provided by the present invention implements the steps of the information authentication method in any of the above-mentioned technical solutions when the processor executes instructions or programs. Therefore, the readable storage medium includes all the beneficial effects of the information authentication method in any of the above-mentioned technical solutions.

[0050] Additional aspects and advantages of the present invention will become apparent from the following description or may be learned by practice of the present invention. BRIEF DESCRIPTION OF THE DRAWINGS

[0051] The above and / or additional aspects and advantages of the present invention will become apparent and easily understood from the description of the embodiments in conjunction with the following drawings, in which:

[0052] Figure 1 A schematic diagram showing a flow chart of an information authentication method according to an embodiment of the present invention is shown;

[0053] Figure 2 A schematic diagram showing a flow chart of an information authentication method according to an embodiment of the present invention is shown;

[0054] Figure 3 A schematic diagram showing a flow chart of an information authentication method according to an embodiment of the present invention is shown;

[0055] Figure 4 A schematic diagram showing a flow chart of an information authentication method according to an embodiment of the present invention is shown;

[0056] Figure 5 A schematic diagram showing a flow chart of an information authentication method according to an embodiment of the present invention is shown;

[0057] Figure 6 A schematic diagram of the structure of an information authentication device according to an embodiment of the present invention is shown;

[0058] Figure 7 A schematic flow chart of an information authentication method according to an embodiment of the present invention is shown.

[0059] in, Figure 6 The corresponding relationship between the reference numerals and the component names is as follows:

[0060] 40 memory, 50 processor, 52 authentication component, 54 debug component, 56 debug transmission component, 546 data exchange register, 542 authentication status register, 544 authentication permission register, 562 extension register, 58 extension register bus, 60 encryption layer, 62 debug translation layer, 64 debug layer. DETAILED DESCRIPTION

[0061] In order to more clearly understand the above-mentioned purpose, features and advantages of the present invention, the present invention is further described in detail below in conjunction with the accompanying drawings and specific embodiments. It should be noted that the embodiments of the present application and the features in the embodiments can be combined with each other without conflict.

[0062] In the following description, many specific details are set forth to facilitate a full understanding of the present invention. However, the present invention may also be implemented in other ways different from those described herein. Therefore, the protection scope of the present invention is not limited to the specific embodiments disclosed below.

[0063] Refer to the following Figures 1 to 7 , an information authentication method, an information authentication system, an information authentication device and a readable storage medium of some embodiments of the present invention are described in detail.

[0064] Embodiment 1:

[0065] like Figure 1 As shown, according to an embodiment of the first aspect of the present invention, an information authentication method is proposed, and the information authentication method includes:

[0066] Step 102, in response to the authentication signal of the information to be authenticated, generating N sub-information to be authenticated according to the information to be authenticated;

[0067] Step 104, authenticate the i-th sub-information to be authenticated according to the stored preset authentication key and the obtained authentication key, and determine whether the authentication is passed. If not, proceed to step 102, and if yes, proceed to step 106;

[0068] Step 106: Based on the authentication of the i-th sub-information to be authenticated, authentication of the i-th sub-information to be authenticated begins.

[0069] In this embodiment, a preset authentication key is pre-stored. When the user inputs the information to be authenticated and the authentication key, in response to the authentication signal of the information to be authenticated and the authentication key input by the user, the authentication information is further processed, and the input information to be authenticated is divided into N sub-information to be authenticated with the same number of digits, wherein the number of digits is the preset number of digits. In this way, the information to be authenticated input by the user is not directly verified, which increases the complexity of the information authentication process and improves the security of the information authentication.

[0070] The i-th sub-information to be authenticated is authenticated, and based on the authentication of the i-th sub-information to be authenticated, the i-th sub-information to be authenticated is authenticated. That is, firstly, the current i-th sub-information to be authenticated is authenticated according to the pre-stored preset authentication key and the obtained authentication key, and after the authentication is passed, the current sub-information to be authenticated is authenticated and debugged. Through the above process of authenticating each sub-information to be authenticated before authentication debugging, the set of information is authenticated by the authentication key input by the user and the pre-stored preset authentication key, so that the information before each authentication debugging needs to be authenticated, forming a process in which one piece of authentication information can be randomly and multiple times authenticated after being split into N sub-information to be authenticated, thereby ensuring the security of the authentication process.

[0071] In this embodiment, through the above-mentioned information authentication method for information authentication and authentication debugging, the information is divided into N sub-information to be authenticated, and any of the N sub-information to be authenticated is authenticated based on the authentication key preset by the system and the authentication key input by the user, and authentication debugging is performed for any sub-information to be authenticated that passes the authentication. On the one hand, it is realized that the information before each authentication debugging needs to be authenticated first, ensuring that the user performing the debugging is a legitimate user. On the other hand, the complexity of the information authentication process is increased, and the integrity verification of the authentication debugging information is also realized, ensuring the security and accuracy of the authentication debugging process.

[0072] Embodiment 2:

[0073] like Figure 2 As shown, according to an embodiment of the present invention, on the basis of the above embodiment, further, the information authentication method includes:

[0074] Step 202, in response to the authentication signal of the information to be authenticated, generating N sub-information to be authenticated according to the information to be authenticated;

[0075] Step 204, authenticate the i-th sub-information to be authenticated according to the stored preset authentication key and the obtained authentication key, and determine whether the authentication is passed. If not, proceed to step 202, and if yes, proceed to step 206;

[0076] Step 206, based on the authentication of the i-th sub-information to be authenticated, authentication of the i-th sub-information to be authenticated begins;

[0077] Step 208, initializing and assigning the first authentication parameter value and the second authentication parameter value;

[0078] Step 210, generating a first authentication code for the i-th sub-information to be authenticated according to the i-th sub-information to be authenticated, the first authentication parameter value and the authentication key;

[0079] Step 212, generating a second authentication code for the i-th sub-information to be authenticated according to the i-th sub-information to be authenticated, the second authentication parameter value and the authentication key;

[0080] Step 214, based on the fact that the first authentication code of the i-th sub-information to be authenticated is the same as the second authentication code of the i-th sub-information to be authenticated, it is determined that the authentication of the i-th sub-information to be authenticated is passed, and the first authentication parameter value is updated to the first authentication code of the i-th sub-information to be authenticated, and the second authentication parameter value is updated to the second authentication code of the i-th sub-information to be authenticated.

[0081] In this embodiment, the step of authenticating the i-th sub-information to be authenticated specifically includes: first initializing and assigning values ​​to the first authentication parameter value and the second authentication parameter value, and then generating a first authentication code for the i-th sub-information to be authenticated according to the i-th authentication sub-information, the first authentication parameter value and the authentication key, generating a second authentication code for the i-th sub-information to be authenticated according to the i-th sub-information to be authenticated, the second authentication parameter value and the authentication key, and judging whether the first authentication code and the second authentication code of the i-th sub-information to be authenticated are the same. Based on the fact that the first authentication code and the second authentication code of the i-th sub-information to be authenticated are the same, it can be judged that the authentication of the i-th sub-information to be authenticated is passed.

[0082] Further, the first authentication parameter is updated to the first authentication code of the i-th sub-information to be authenticated, and the second authentication parameter value is updated to the second authentication code of the i-th sub-information to be authenticated. After the current i-th sub-information to be authenticated is authenticated, the current i-th sub-information to be authenticated is authenticated and debugged. On the basis that the previous sub-information to be authenticated (which can be understood as the (i-1)th sub-information to be authenticated) is authenticated, the authentication debugging result in the previous authentication self-confidence authentication debugging is used to authenticate the current sub-information to be authenticated, that is, the i-th sub-information to be authenticated. Through the above-mentioned authentication debugging method, even if an illegal user has the authentication key and secret key, it is difficult to generate the correct first authentication code and second authentication code without knowing the authentication debugging process of the previous sub-information to be authenticated, thereby realizing the integrity verification of the debugged information, thereby ensuring the accuracy of the information authentication.

[0083] It can be understood that after the authentication is passed in the authentication debugging of the previous sub-information to be authenticated, the first authentication code and the second authentication code corresponding to the information will be generated. The above-mentioned first authentication code and the second authentication code are assigned to the first authentication parameter value and the second authentication parameter value respectively, and the first authentication parameter value and the second authentication parameter value are updated. The first authentication code and the second authentication code corresponding to the current sub-information to be authenticated are generated using the updated first authentication parameter value and the second authentication parameter value. By determining that the first authentication code and the second authentication code corresponding to the current sub-information to be authenticated are the same, it is determined that the authentication of the current sub-information to be authenticated is passed. On the basis that the authentication of the current sub-information to be authenticated is passed, the next piece of information to be authenticated is authenticated and authenticated, and after the authentication is passed, the first authentication parameter value and the second authentication parameter value are updated using the first authentication code and the second authentication code corresponding to the current sub-information to be authenticated, so as to perform authentication debugging on the next piece of information to be authenticated. The integrity verification of the authentication debugging information is realized, and the accuracy and security in the authentication debugging process are guaranteed.

[0084] It should be noted that N is a positive integer greater than or equal to 1, i∈[1, N] is any positive integer, and the above i-th sub-information to be authenticated is any sub-information to be authenticated among the N sub-information to be authenticated.

[0085] On the basis of the above embodiment, specifically, the step of generating a first authentication code of the i-th sub-information to be authenticated according to the i-th sub-information to be authenticated, the first authentication parameter value and the authentication key specifically includes: generating a first authentication plaintext of the i-th sub-information to be authenticated according to the i-th sub-information to be authenticated and the first authentication parameter value; generating a first authentication code of the i-th sub-information to be authenticated according to the first authentication plaintext of the i-th sub-information to be authenticated and the authentication key.

[0086] In this embodiment, the current i-th sub-information to be authenticated and the first authentication parameter value are padded with 0 at the end, so that the number of digits of the current i-th sub-information to be authenticated and the first authentication parameter value are both preset. At the same time, the current i-th sub-information to be authenticated and the first authentication parameter value after the 0-padded processing are bitwise XORed to generate the first authentication plaintext of the i-th sub-information to be authenticated. The generated first authentication plaintext is encrypted using the authentication key input by the user to obtain the first authentication code of the current sub-information to be authenticated.

[0087] In the above method of generating the first authentication plaintext, the first authentication parameter value is related to the first authentication code of the previous sub-information to be authenticated. Therefore, the authentication of the current sub-information is based on the first authentication code in the authentication result of the previous sub-information to be authenticated, so as to ensure the integrity verification of the authentication debugging information, thereby ensuring the accuracy and security of the authentication process.

[0088] On the basis of the above embodiment, specifically, the step of generating a second authentication code for the i-th sub-information to be authenticated according to the i-th sub-information to be authenticated, the second authentication parameter value and the authentication key specifically includes: generating a second authentication plaintext of the i-th sub-information to be authenticated according to the i-th sub-information to be authenticated and the second authentication parameter value; generating a second authentication code for the i-th sub-information to be authenticated according to the second authentication plaintext of the i-th sub-information to be authenticated and the authentication key.

[0089] In this embodiment, the current sub-information to be authenticated and the second authentication parameter value are padded with 0 at the end, so that the number of digits of the current sub-information to be authenticated and the second authentication parameter value are both preset. At the same time, the current sub-information to be authenticated and the second authentication parameter value after the 0-padded processing are bitwise XORed to generate the second authentication plaintext of the current sub-information to be authenticated. The generated second authentication plaintext is encrypted using the authentication key input by the user to obtain the second authentication code of the i-th sub-information to be authenticated.

[0090] The current sub-information is authenticated by the first authentication code and the second authentication code, and the logic is simple and easy to operate. In the above-mentioned method of generating the second authentication plaintext, the second authentication parameter value is related to the second authentication code of the previous sub-information to be authenticated. Then, the authentication of the current sub-information is based on the second authentication code in the authentication result of the previous sub-information to be authenticated, so as to ensure the integrity verification of the authentication debugging information, thereby ensuring the accuracy and security of the authentication process.

[0091] Embodiment 3:

[0092] like Figure 3 As shown, according to an embodiment of the present invention, on the basis of the above embodiment, further, the information authentication method includes:

[0093] Step 302, in response to the authentication signal of the information to be authenticated, generating N sub-information to be authenticated according to the information to be authenticated;

[0094] Step 304: authenticate the i-th sub-information to be authenticated according to the stored preset authentication key and the obtained authentication key, and determine whether the authentication is passed. If not, proceed to step 302; if yes, proceed to step 306;

[0095] Step 306, based on the authentication of the i-th sub-information to be authenticated, start authenticating the i-th sub-information to be authenticated;

[0096] Step 308, initializing and assigning the first authentication parameter value and the second authentication parameter value;

[0097] Step 310, generating a first authentication code for the i-th sub-information to be authenticated according to the i-th sub-information to be authenticated, the first authentication parameter value and the authentication key;

[0098] Step 312, generating a second authentication code for the i-th sub-information to be authenticated according to the i-th sub-information to be authenticated, the second authentication parameter value and the authentication key;

[0099] Step 314: based on the fact that the first authentication code of the i-th sub-information to be authenticated is the same as the second authentication code of the i-th sub-information to be authenticated, determine that the authentication of the i-th sub-information to be authenticated is passed, and update the first authentication parameter value to the first authentication code of the i-th sub-information to be authenticated, and update the second authentication parameter value to the second authentication code of the i-th sub-information to be authenticated;

[0100] Step 316: store the i-th sub-information to be authenticated after the authentication is passed.

[0101] In this embodiment, after the current sub-information passes the authentication, the authenticated current sub-information is stored, so that in the subsequent authentication debugging process, the authenticated sub-information can be called and counted.

[0102] Embodiment 4:

[0103] like Figure 4 As shown, according to an embodiment of the present invention, on the basis of the above embodiment, further, the information authentication method includes:

[0104] Step 402, in response to the authentication signal of the information to be authenticated, generating N sub-information to be authenticated according to the information to be authenticated;

[0105] Step 404: Authenticate the i-th sub-information to be authenticated according to the stored preset authentication key and the obtained authentication key, and determine whether the authentication is passed. If not, proceed to step 402; if yes, proceed to step 406;

[0106] Step 406, based on the authentication of the i-th sub-information to be authenticated being passed, authentication of the i-th sub-information to be authenticated is started;

[0107] Step 408, initializing and assigning the first authentication parameter value and the second authentication parameter value;

[0108] Step 410, generating a first authentication code for the i-th sub-information to be authenticated according to the i-th sub-information to be authenticated, the first authentication parameter value and the authentication key;

[0109] Step 412, generating a second authentication code for the i-th sub-information to be authenticated according to the i-th sub-information to be authenticated, the second authentication parameter value and the authentication key;

[0110] Step 414: based on the fact that the first authentication code of the i-th sub-information to be authenticated is the same as the second authentication code of the i-th sub-information to be authenticated, determine that the authentication of the i-th sub-information to be authenticated is passed, and update the first authentication parameter value to the first authentication code of the i-th sub-information to be authenticated, and update the second authentication parameter value to the second authentication code of the i-th sub-information to be authenticated;

[0111] Step 416, storing the i-th sub-information to be authenticated after authentication is passed;

[0112] Step 418: When the number of the stored authenticated sub-information to be authenticated is N, the stored N authenticated sub-information to be authenticated is integrated and analyzed to generate authenticated information.

[0113] In this embodiment, the number of the stored authenticated sub-information to be authenticated is counted. When the number is N, it means that all the N authenticated sub-information to be authenticated have passed the authentication, that is, the entire authenticated information has passed the authentication. After the above-mentioned N authenticated sub-information to be authenticated is integrated and analyzed, the authenticated information is generated, and the authenticated information is sent. In the above manner, the sending and use of the authenticated information is realized.

[0114] On the basis of any of the above embodiments, specifically, the step of authenticating the i-th sub-information to be authenticated according to the stored preset authentication key and the obtained authentication key specifically includes: generating a first authentication value of the i-th sub-information to be authenticated in response to obtaining an authentication key signal; generating a second authentication value of the i-th sub-information to be authenticated according to the preset authentication key and the first authentication value of the i-th sub-information to be authenticated; generating a third authentication value of the i-th sub-information to be authenticated according to the authentication key and the second authentication value of the i-th sub-information to be authenticated; and authenticating the i-th sub-information to be authenticated based on the first authentication value of the i-th sub-information to be authenticated and the third authentication value of the i-th sub-information to be authenticated.

[0115] In this embodiment, during the process of authenticating the sub-information to be authenticated, the authentication key signal input by the user is obtained to obtain the authentication key. At the same time, a first authentication value is randomly generated. The randomly generated first authentication value is encrypted according to the pre-stored authentication key to obtain a second authentication value. The second authentication value is then decrypted according to the authentication key input by the user to obtain a third authentication value.

[0116] The first authentication value and the third authentication value obtained above are used to authenticate the sub-information to be authenticated, thereby ensuring the accuracy of the authentication process of the information to be authenticated, thereby ensuring the accuracy of the entire information authentication process.

[0117] On the basis of any of the above embodiments, specifically, the step of authenticating the i-th sub-information to be authenticated based on the first authentication value of the i-th sub-information to be authenticated and the third authentication value of the i-th sub-information to be authenticated specifically includes: based on the first authentication value of the i-th sub-information to be authenticated and the third authentication value of the i-th sub-information to be authenticated being equal, the authentication of the i-th sub-information to be authenticated is passed; based on the first authentication value of the i-th sub-information to be authenticated and the third authentication value of the i-th sub-information to be authenticated being not equal, the authentication of the i-th sub-information to be authenticated is failed.

[0118] In this embodiment, if the first authentication value and the third authentication value are the same, it means that the authentication key input by the user is correct, that is, the identity of the user is legal, and the authentication debugging procedure for the current information to be authenticated can be performed. If the first authentication value and the third authentication value are different, it means that the authentication key input by the user is incorrect, that is, the current operating user is not a legal user, and the authentication debugging of the current information to be authenticated is not performed.

[0119] Through the above authentication method, the legitimacy of the operating user is authenticated, ensuring the rationality and security of the authentication and debugging process.

[0120] Based on any of the above embodiments, specifically, the step of initializing and assigning the first authentication parameter value and the second authentication parameter value specifically includes: using the third authentication value of the first sub-information to be authenticated as the first authentication parameter value; using the first authentication value of the first sub-information to be authenticated as the second authentication parameter value.

[0121] In this embodiment, when the authentication process of the information to be authenticated begins, the first sub-information to be authenticated is authenticated first. During the authentication process, a first authentication value of the first sub-information to be authenticated is randomly generated, and a third authentication value is obtained after encryption and decryption based on the first authentication value. The third authentication value is used as the initial first authentication parameter value and the first authentication value is used as the initial second authentication parameter value.

[0122] The manner of determining the initial first authentication parameter value and the initial second authentication parameter value through the above-mentioned initialization assignment ensures the reliability and rationality of the initialization assignment, and also ensures the feasibility and reliability of the entire authentication debugging process.

[0123] Embodiment 5:

[0124] like Figure 5 As shown, according to an embodiment of the present invention, on the basis of the above embodiment, further, the information authentication method includes:

[0125] Step 502, in response to the authentication signal of the information to be authenticated, generating N sub-information to be authenticated according to the information to be authenticated;

[0126] Step 504: authenticate the i-th sub-information to be authenticated according to the stored preset authentication key and the obtained authentication key, and determine whether the authentication is passed. If not, proceed to step 502; if yes, proceed to step 506;

[0127] Step 506, based on the authentication of the i-th sub-information to be authenticated being passed, the i-th sub-information to be authenticated is authenticated;

[0128] Step 508, initializing and assigning the first authentication parameter value and the second authentication parameter value;

[0129] Step 510, generating a first authentication code for the i-th sub-information to be authenticated according to the i-th sub-information to be authenticated, the first authentication parameter value and the authentication key;

[0130] Step 512, generating a second authentication code for the i-th sub-information to be authenticated according to the i-th sub-information to be authenticated, the second authentication parameter value and the authentication key;

[0131] Step 514, determining whether the first authentication code of the i-th sub-information to be authenticated is the same as the second authentication code of the i-th sub-information to be authenticated, if yes, proceeding to step 516, if no, proceeding to step 518;

[0132] Step 516, based on the authentication of the i-th sub-information to be authenticated, the first authentication parameter value is updated to the first authentication code of the i-th sub-information to be authenticated, and the second authentication parameter value is updated to the second authentication code of the i-th sub-information to be authenticated;

[0133] Step 518: Based on the fact that the first authentication code of the i-th sub-information to be authenticated and the second authentication code of the i-th sub-information to be authenticated are different, the authentication is terminated.

[0134] In this embodiment, when it is determined that the first authentication code of the sub-information to be authenticated is different from the second authentication code of the sub-information to be authenticated, it means that the authentication of the current sub-information fails, and the authentication and authentication debugging process of the entire information is terminated. In the above manner, the authentication debugging function is stopped immediately after the input error information is recognized, which ensures that the user can automatically stop the entire authentication and authentication process when the error information is recognized without turning off the authentication debugging function, thereby ensuring the reliability and security of the entire information authentication process.

[0135] It should be noted that, based on the authentication of the i-th sub-information to be authenticated, and after the first authentication parameter value is updated to the first authentication code of the i-th sub-information to be authenticated, and the second authentication parameter value is updated to the second authentication code of the i-th sub-information to be authenticated, the authentication and authorization of the (i+1)-th sub-information to be authenticated is performed.

[0136] Embodiment 6:

[0137] According to an embodiment of the second aspect of the present invention, an information authentication system is proposed, which includes: a receiving unit, used to receive information to be authenticated and generate an authentication signal for the information to be authenticated; a conversion unit, used to respond to the authentication signal of the information to be authenticated and generate N sub-information to be authenticated based on the information to be authenticated; an authentication unit, used to authenticate the i-th sub-information to be authenticated based on a stored preset authentication key and an acquired authentication key; and an authentication unit, used to authenticate the i-th sub-information to be authenticated when the authentication of the i-th sub-information to be authenticated is passed.

[0138] In this embodiment, the information authentication system includes a receiving unit, a conversion unit, an authentication unit and an authentication unit, wherein the receiving unit is used to receive the information to be authenticated, and generate an authentication signal corresponding to the information to be authenticated according to the information to be authenticated. The conversion unit responds to the authentication signal of the information to be authenticated sent by the receiving unit, and converts the authentication information to generate N sub-information to be authenticated. The authentication unit is used to authenticate the i-th sub-information to be authenticated among the N sub-information to be authenticated according to the stored preset authentication key and the acquired authentication key, and the authentication unit is used to authenticate the i-th sub-information to be authenticated after the authentication unit verifies and passes the i-th sub-information to be authenticated.

[0139] In this embodiment, through the above-mentioned information authentication method for information authentication and authentication debugging, the information is divided into N sub-information to be authenticated, and the authentication unit authenticates any of the N sub-information to be authenticated based on the authentication key preset by the system and the authentication key input by the user, and the authentication unit performs authentication debugging on any sub-information to be authenticated that passes the authentication. On the one hand, it is realized that the information before each authentication debugging needs to be authenticated first, ensuring that the user performing the debugging is a legitimate user. On the other hand, the complexity of the authentication debugging process is increased, and the integrity verification of the authentication debugging information is also realized, ensuring the security and accuracy of the authentication debugging process.

[0140] Embodiment 7:

[0141] like Figure 6As shown, according to an embodiment of the third aspect of the present invention, an information authentication device is proposed, the information authentication device includes: a memory 40; a processor 50, the processor 50 is connected to the memory 40, the processor 50 includes an authentication component 52, a debugging component 54 and a debugging transmission component 56, wherein the authentication component 52 is connected to the debugging component 54, and the debugging component 54 is connected to the debugging transmission component 56; the authentication component 52, the debugging component 54 and the debugging transmission component 56 are each provided with one or more communication interfaces, a communication connection is established according to the communication interface, the memory 40 stores a computer program that can be run on the processor 50, and when the processor 50 executes the computer program, the steps of the information authentication method in any of the above embodiments are implemented.

[0142] In this embodiment, the information authentication device is provided with a memory 40 and a processor 50. The processor 50 includes an authentication component 52, a debugging component 54 and a debugging transmission component 56, wherein the authentication component 52 is connected to the debugging component 54, and the debugging component 54 is connected to the debugging transmission component 56, and the authentication component 52, the debugging component 54 and the debugging transmission component 56 are all provided with one or more communication interfaces, so as to establish a communication connection and perform the information authentication process.

[0143] The information authentication device provided in this embodiment includes: a memory 40 storing a program or instruction; a processor 50, and when the processor 50 executes the program or instruction, the information authentication method in any embodiment of the first aspect is implemented. Therefore, the information authentication device includes all the beneficial effects of the information authentication method in any of the above embodiments, which will not be repeated here.

[0144] On the basis of any of the above embodiments, further, the debugging component 54 includes: a data exchange register 546, the data exchange register 546 is set to be readable and writable, and the data exchange register 546 is connected to the authentication component 52; an authentication status register 542, the authentication status register 542 is set to be readable, and the authentication status register 542 is connected to the authentication component 52; an authentication permission register 544, the authentication permission register 544 is set to be readable, and the authentication permission register 544 is connected to the authentication component 52; the debugging transmission component 56 includes: an extension register 562, the extension register 562 is connected to the debugging transmission component 56, and the debugging transmission component 56 is used to read and write data in the debugging component 54 and the extension register 562.

[0145] In this embodiment, the debugging component 54 is provided with a data exchange register 546 , an authentication status register 542 , and an authentication permission register 544 , and the debugging transmission component 56 includes an extension register 562 .

[0146] Furthermore, the authentication permission register 544 and the authentication status register 542 are both set to be readable, for reading the data of the authentication component 52. The data exchange register 546 is set to be readable and writable, for reading the data of the authentication component 52 and writing the data to the authentication component 52.

[0147] Furthermore, the extended register 562 is connected to the debug transmission component 56 so that the debug transmission component 56 can read and write data in the debug component 54 and the extended register 562 .

[0148] Embodiment 8:

[0149] The debugging interface of the processor can be used to control and observe the running of the program. In order to avoid the problem that the debugging interface is maliciously used by attackers, which may lead to the theft of system data or the destruction of program execution. After the production of the high-security performance security processor chip for the application, the software of the processor chip is written and debugged, the debugging interface is closed by fuse technology, and then the authentication debugging method is adopted to solve the above problem. Specifically, the above authentication debugging method locks the debugging function, and requires the user to perform identity authentication when using the debugging function. Only users with authorized passwords can pass the authentication and use the authentication debugging function.

[0150] At present, the authentication method adopted is: first verify through an authentication process based on a symmetric cryptographic algorithm. Once the authentication is passed, the subsequent authentication and debugging operations are completely unmonitored until the use is completed and the user actively resets the authentication permission register. And the authentication method adopted is a simple challenge and response protocol. Although this authentication method has a certain degree of security, it still has the following problems: First, the authentication process is implemented by software, which has low security and may be attacked in the authentication link; second, if a legitimate user passes the authentication and unlocks the debugging function, forgets to lock the authentication and debugging function in time, or an illegal user interferes with the locking operation, the debugging function is always in an unlocked state, and any user can use it at will until the system is powered on or reset; third, in applications such as the Internet of Things, the processor may need to perform remote authentication and debugging. During the communication process, the attacker may hijack the channel and use man-in-the-middle attacks, replay attacks, etc. to crack the challenge-response mechanism, or change the authentication and debugging requests sent by legitimate users to achieve illegal purposes.

[0151] In view of the above-mentioned drawbacks, this embodiment proposes an information authentication method and an information authentication device that ensures that each authentication and debugging operation is initiated by a legitimate user and verifies the integrity of the authentication information. The authentication process in the information authentication method is implemented based on a hardware circuit. Figure 7 As shown, the information authentication method includes:

[0152] Step 702, obtaining a pre-stored authentication key K;

[0153] Step 704, randomly generate a first authentication value IV;

[0154] Step 706, encrypting the first authentication value IV according to the authentication key K to generate a second authentication value IVe;

[0155] Step 708, receiving the authentication key K' input by the user;

[0156] Step 710, decrypt the second authentication value IVe according to the authentication key K' to generate a third authentication value IV';

[0157] Step 712, judging whether the first authentication value IV and the third authentication value IV' are equal, if yes, proceeding to step 714, if no, proceeding to step 702;

[0158] Step 714, using the third authentication value IV' as the first authentication parameter value, and using the first authentication value IV as the second authentication parameter value;

[0159] Step 716, i=1;

[0160] Step 718, sending the i-th sub-information to be authenticated m(i) to the debugging component;

[0161] Step 720, performing a bitwise XOR operation on the i-th sub-information to be authenticated m(i) and the first authentication parameter value to generate a first authentication plaintext of the i-th sub-information to be authenticated m(i);

[0162] Step 722, encrypt the first authentication plaintext of the i-th sub-information to be authenticated m(i) according to the authentication key K' to generate a first authentication code Y'(i) of the i-th sub-information to be authenticated m(i);

[0163] Step 724, performing a bitwise XOR operation on the i-th sub-information to be authenticated m(i) and the second authentication parameter value to generate a second authentication plaintext of the i-th sub-information to be authenticated m(i);

[0164] Step 726, encrypt the second authentication plaintext of the i-th sub-information to be authenticated m(i) according to the authentication key K to generate a second authentication code Y(i) of the i-th sub-information to be authenticated m(i);

[0165] Step 728, determining whether the first authentication code Y'(i) of the ith sub-information to be authenticated m(i) is the same as the second authentication code Y(i) of the ith sub-information to be authenticated m(i), if yes, proceeding to step 730, if no, proceeding to step 702;

[0166] Step 730: store the i-th sub-information to be authenticated m(i), and update the first authentication parameter value and the second authentication parameter value, using the first authentication code Y'(i) of the i-th sub-information to be authenticated m(i) as the first authentication parameter value, and using the second authentication code Y'(i) of the i-th sub-information to be authenticated m(i) as the second authentication parameter value;

[0167] Step 732, i=i+1, determine whether i is less than N, if yes, go to step 718, if no, end.

[0168] In this embodiment, the authentication permission register 544 of the debugging component 54 is reset, that is, the authentication permission register 544 is 0, and the authentication component 52 loads the built-in authentication key K. The authentication component 52 randomly generates a first authentication value IV, and encrypts the first authentication value IV according to the authentication key K to generate a second authentication value IVe, and writes the second authentication value IVe into the data exchange register 546. The debugging component 54 reads the second authentication value IVe of the data exchange register 546. The authentication key K' input by the user is received, and the second authentication value IVe is decrypted according to the authentication key K' to generate a third authentication value IV'. The third authentication value IV' is written into the data exchange register 546 through the debugging transmission component 56.

[0169] Further, the third authentication value IV' stored in the data exchange register 546 is read by the authentication component 52. At the same time, the authentication component 52 determines whether the first authentication value IV and the third authentication value IV' are equal. If they are equal, authentication is performed; if they are not equal, re-authentication is performed. The authentication permission register 544 is set to 1, the authentication status register 542 is set to 0, the third authentication value IV' is used as the first authentication parameter value, and the first authentication value IV is used as the second authentication parameter value. Each sub-information to be authenticated is authenticated in sequence. If one of the sub-information to be authenticated fails the authentication, re-authentication is performed. If the authentication is always passed, then after N authentications, when the authentication is still passed, it means that the entire authentication process is completed, where N is the number of sub-information to be authenticated.

[0170] The processor includes an authentication component 52, a debugging component 54 and a debugging transmission component 56. The debugging component 54 is provided with a data exchange register 546, an authentication status register 542, an authentication permission register 544 and an extension register 562.

[0171] Specifically, the entire debugging function involves the following system components: Figure 6As shown, it includes a hardware part and a software part, wherein the hardware part includes: an authentication component 52, a debugging component 54, a debugging transmission component 56, and an extended register 562; the software part includes: a debugging layer 64, a debugging translation layer 62, and an encryption layer 60. The authentication component 52 is implemented by a hardware circuit, and its function is to perform an authentication code verification operation based on the received data exchange register 546, and return the result of whether the authentication is passed.

[0172] Specifically, in addition to the debugging functions specified in the standard, the debugging component 54 of this embodiment also maintains the data and status of the debugging authentication, and contains three groups of registers, namely, the data exchange register 546, the authentication status register 542 and the authentication permission register 544. It provides interfaces for the debugging transmission component 56 to access the data exchange register 546 and the authentication component 52 to access the data exchange register 546, the reset function of the authentication permission register 544 and the interface for the debugging transmission component 56 to read the authentication status register 542 signal; the debugging component 54 also includes an instruction cache register for temporarily storing the debugging instructions to be executed, which is readable by the authentication component 52. The debugging transmission component 56 is a hardware JTAG (Joint Test Action Group) interface, which is used to realize the communication between the debugging component 54 and the debugger. The register inside the debugging transmission component 56 is expanded to a 96-bit data register, named as the extended register 562, of which 32 bits are used to store the data and instructions exchanged with the debugging component 54, and the other 64 bits are used to store the MAC (Media Access Control) field.

[0173] The debug layer 64 and the debug translation layer 62 together constitute the software part of the host side (hereinafter collectively referred to as the host). They are software running in the upper computer. The debug layer 64 is controlled by the debugging user and communicates with the debug translation layer 62. The debug translation layer 62 communicates with the underlying hardware interface.

[0174] In this embodiment, the debugging translation layer 62 needs to add an encryption layer 60 on the basis of the traditional debugging translation layer 62 software. The encryption layer 60 is located at the bottom of the software above the hardware driver layer. Its function is to receive the instructions sent by the upper debugging layer 64 and generate MAC for the sent instructions, and then complete the sending and receiving of corresponding information according to the following authentication protocol process. During this period, it requires the user to input the key in a timely manner according to the process. The encryption layer 60 is transparent to the feedback debugging results (read data) and directly forwards them to the upper debugging layer 64. The host-side operations of the following authentication process are mainly completed by the encryption layer 60.

[0175] When the authentication permission register 544 is reset, the debug component 54 cannot interact with the rest of the platform, nor can it expose any details of the hardware thread connected to the debug component 54. Except for the authentication permission register 544, the authentication status register 542 is readable, and the data exchange register 546 is readable and writable. Other registers in the debug component 54 are not writable and can only return 0. The data exchange register 546 is a 64-bit register in the debug component 54. It is a bidirectional port between the debug component 54 and the authentication component 52. When the authentication status register 542 is reset, the debugger can communicate with the authentication component 52 by reading and writing the data exchange register 546. The debug transmission component 56 reads and writes the debug component 54 through the extended register bus 58. The debug transmission component 56 is the master device of the extended register bus 58, and the debug component 54 is the slave device of the extended register bus 58. The data bit width of the extended register bus 58 is 64 bits. The authentication status register 542 is controlled by the authentication component 52 module, and the debugger reads their status through the debug component 54. The debugging component 54 can reset the authentication permission register 544 , and the authentication component 52 can rewrite the authentication permission register 544 .

[0176] Embodiment 9:

[0177] According to an embodiment of the fourth aspect of the present invention, a readable storage medium is proposed, on which a program or instruction is stored, and the program or instruction is executed by a processor to implement the information authentication method in any of the above technical solutions.

[0178] The readable storage medium provided in this embodiment implements the steps of the information authentication method in any of the above-mentioned technical solutions when the processor executes instructions or programs. Therefore, the readable storage medium includes all the beneficial effects of the information authentication method in any of the above-mentioned technical solutions.

[0179] Additional aspects and advantages of the present invention will become apparent from the following description or may be learned by practice of the present invention.

[0180] In the description of this specification, the terms "first" and "second" are used for descriptive purposes only and cannot be understood as indicating or implying relative importance unless otherwise clearly specified and limited; the terms "connection", "installation", "fixation" and the like should be understood in a broad sense, for example, "connection" can be a fixed connection, a detachable connection, or an integral connection; it can be directly connected or indirectly connected through an intermediate medium. For ordinary technicians in this field, the specific meanings of the above terms in the present invention can be understood according to specific circumstances.

[0181] In the description of this specification, the description of the terms "one embodiment", "some embodiments", "specific embodiments", etc. means that the specific features, structures, materials or characteristics described in conjunction with the embodiment or example are included in at least one embodiment or example of the present invention. In this specification, the schematic representation of the above terms does not necessarily refer to the same embodiment or example. Moreover, the specific features, structures, materials or characteristics described can be combined in any one or more embodiments or examples in a suitable manner.

[0182] The above are only preferred embodiments of the present invention and are not intended to limit the present invention. For those skilled in the art, the present invention may have various modifications and variations. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present invention shall be included in the protection scope of the present invention.

Claims

1. An information authentication method, characterized in that: The information authentication method comprises: In response to the authentication signal of the information to be authenticated, generating N sub-information to be authenticated according to the information to be authenticated; Authenticate the i-th sub-information to be authenticated according to the stored preset authentication key and the obtained authentication key; Based on the authentication of the i-th sub-information to be authenticated being passed, authenticating the i-th sub-information to be authenticated; The step of authenticating the i-th sub-information to be authenticated specifically includes: Initialize and assign the first authentication parameter value and the second authentication parameter value; Generate a first authentication code for the i-th sub-information to be authenticated according to the i-th sub-information to be authenticated, the first authentication parameter value and the authentication key; Generate a second authentication code for the i-th sub-information to be authenticated according to the i-th sub-information to be authenticated, the second authentication parameter value and the authentication key; Based on the fact that the first authentication code of the i-th sub-information to be authenticated and the second authentication code of the i-th sub-information to be authenticated are the same, determining that the authentication of the i-th sub-information to be authenticated is passed, and updating the first authentication parameter value to the first authentication code of the i-th sub-information to be authenticated, and updating the second authentication parameter value to the second authentication code of the i-th sub-information to be authenticated; Wherein, N is a positive integer greater than or equal to 1, i∈[1, N] is any positive integer; The step of authenticating the i-th sub-information to be authenticated according to the stored preset authentication key and the obtained authentication key specifically includes: In response to obtaining the authentication key signal, generating a first authentication value of the i-th sub-information to be authenticated; Generate a second authentication value of the i-th sub-information to be authenticated according to the preset authentication key and the first authentication value of the i-th sub-information to be authenticated; generating a third authentication value of the i-th sub-information to be authenticated according to the authentication key and the second authentication value of the i-th sub-information to be authenticated; authenticating the i-th sub-information to be authenticated based on the first authentication value of the i-th sub-information to be authenticated and the third authentication value of the i-th sub-information to be authenticated; The step of authenticating the i-th sub-information to be authenticated based on the first authentication value of the i-th sub-information to be authenticated and the third authentication value of the i-th sub-information to be authenticated specifically includes: Based on the first authentication value of the i-th sub-information to be authenticated being equal to the third authentication value of the i-th sub-information to be authenticated, authentication of the i-th sub-information to be authenticated is passed; Based on the fact that the first authentication value of the i-th sub-information to be authenticated is not equal to the third authentication value of the i-th sub-information to be authenticated, authentication of the i-th sub-information to be authenticated fails.

2. The information authentication method according to claim 1, characterized in that: The step of generating a first authentication code for the i-th sub-information to be authenticated according to the i-th sub-information to be authenticated, the first authentication parameter value and the authentication key specifically comprises: Generate a first authentication plaintext of the i-th sub-information to be authenticated according to the i-th sub-information to be authenticated and the first authentication parameter value; The first authentication code of the i-th sub-information to be authenticated is generated according to the first authentication plaintext of the i-th sub-information to be authenticated and the authentication key.

3. The information authentication method according to claim 1 or 2, characterized in that: The step of generating the second authentication code of the i-th sub-information to be authenticated according to the i-th sub-information to be authenticated, the second authentication parameter value and the authentication key specifically includes: generating a second authentication plaintext of the i-th sub-information to be authenticated according to the i-th sub-information to be authenticated and the second authentication parameter value; The second authentication code of the i-th sub-information to be authenticated is generated according to the second authentication plaintext of the i-th sub-information to be authenticated and the authentication key.

4. The information authentication method according to claim 1 or 2, characterized in that: The information authentication method further includes: After determining that the authentication of the i-th sub-information to be authenticated is passed, the i-th sub-information to be authenticated after the authentication is passed is stored.

5. The information authentication method according to claim 1 or 2, characterized in that: The information authentication method further includes: terminating the authentication based on that the first authentication code of the i-th sub-information to be authenticated and the second authentication code of the i-th sub-information to be authenticated are different.

6. The information authentication method according to claim 4, characterized in that: The information authentication method further includes: When the number of the sub-information to be authenticated that has been stored and has passed authentication is N, the N sub-information to be authenticated that has been stored and has passed authentication is integrated and analyzed to generate authenticated information.

7. The information authentication method according to claim 1, characterized in that: The step of initializing and assigning the first authentication parameter value and the second authentication parameter value specifically includes: Using the third authentication value of the first sub-information to be authenticated as the first authentication parameter value; The first authentication value of the first sub-information to be authenticated is used as the second authentication parameter value.

8. An information authentication system, characterized in that: include: A receiving unit, used to receive the information to be authenticated and generate an authentication signal for the information to be authenticated; A conversion unit, configured to respond to the authentication signal of the information to be authenticated and generate N sub-information to be authenticated according to the information to be authenticated; An authentication unit, used to authenticate the i-th sub-information to be authenticated according to the stored preset authentication key and the obtained authentication key; an authentication unit, configured to authenticate the i-th sub-information to be authenticated when the authentication of the i-th sub-information to be authenticated is passed; The step of authenticating the i-th sub-information to be authenticated specifically includes: Initialize and assign the first authentication parameter value and the second authentication parameter value; Generate a first authentication code for the i-th sub-information to be authenticated according to the i-th sub-information to be authenticated, the first authentication parameter value and the authentication key; Generate a second authentication code for the i-th sub-information to be authenticated according to the i-th sub-information to be authenticated, the second authentication parameter value and the authentication key; Based on the fact that the first authentication code of the i-th sub-information to be authenticated and the second authentication code of the i-th sub-information to be authenticated are the same, determining that the authentication of the i-th sub-information to be authenticated is passed, and updating the first authentication parameter value to the first authentication code of the i-th sub-information to be authenticated, and updating the second authentication parameter value to the second authentication code of the i-th sub-information to be authenticated; Wherein, N is a positive integer greater than or equal to 1, i∈[1, N] is any positive integer; The step of authenticating the i-th sub-information to be authenticated according to the stored preset authentication key and the obtained authentication key specifically includes: In response to obtaining the authentication key signal, generating a first authentication value of the i-th sub-information to be authenticated; Generate a second authentication value of the i-th sub-information to be authenticated according to the preset authentication key and the first authentication value of the i-th sub-information to be authenticated; generating a third authentication value of the i-th sub-information to be authenticated according to the authentication key and the second authentication value of the i-th sub-information to be authenticated; authenticating the i-th sub-information to be authenticated based on the first authentication value of the i-th sub-information to be authenticated and the third authentication value of the i-th sub-information to be authenticated; The step of authenticating the i-th sub-information to be authenticated based on the first authentication value of the i-th sub-information to be authenticated and the third authentication value of the i-th sub-information to be authenticated specifically includes: Based on the first authentication value of the i-th sub-information to be authenticated being equal to the third authentication value of the i-th sub-information to be authenticated, authentication of the i-th sub-information to be authenticated is passed; Based on the fact that the first authentication value of the i-th sub-information to be authenticated is not equal to the third authentication value of the i-th sub-information to be authenticated, authentication of the i-th sub-information to be authenticated fails.

9. An information authentication device, characterized in that: The information authentication device comprises: Memory; A processor, the processor is connected to the memory, the processor comprises an authentication component, a debugging component and a debugging transmission component, wherein the authentication component is connected to the debugging component, and the debugging component is connected to the debugging transmission component; The authentication component, the debugging component and the debugging transmission component are each provided with one or more communication interfaces, a communication connection is established according to the communication interface, the memory stores a computer program that can be run on the processor, and the processor implements the steps of the information authentication method as described in any one of claims 1 to 7 when executing the computer program.

10. The information authentication device according to claim 9, characterized in that: The debugging component includes: A data exchange register, the data exchange register is set to be readable and writable, and the data exchange register is connected to the authentication component; An authentication status register, the authentication status register is set to be readable, and the authentication status register is connected to the authentication component; An authentication permission register, the authentication permission register is set to be readable, and the authentication permission register is connected to the authentication component; The debug transmission component includes: An extended register, wherein the extended register is connected to the debug transmission component, and the debug transmission component is used to read and write data in the debug component and the extended register.

11. A readable storage medium having a program or instruction stored thereon, characterized in that: When the program or instruction is executed by a processor, the information authentication method described in any one of claims 1 to 7 is implemented.

Images