Computer security verification system, method, mobile terminal and readable storage medium

Abstract

The application relates to the technical field of computer security management, in particular to a computer security verification system and method, a mobile terminal and a readable storage medium. The system comprises a computer configured to send connection authentication information encrypted by a public key; a mobile terminal configured to receive the connection authentication information encrypted by the public key, decrypt the connection authentication information by a private key, and then realize connection with the computer through the connection authentication information; the mobile terminal performs identity authentication on a user, generates identity authentication information after the identity authentication is passed, generates a digital signature by the private key, and sends the identity authentication information with the digital signature to the computer; the computer verifies the digital signature in the identity authentication information by the public key, and then obtains the identity authentication information after the digital signature verification is passed to complete the security verification. The application can realize the security verification of the computer through the mobile terminal, does not depend on a long-distance wireless network, and can encrypt interactive data.

Description

Technical Field

[0001] This invention relates to the field of computer security management technology, specifically to computer security verification systems, methods, mobile terminals, and readable storage media. Background Technology

[0002] As computers become increasingly widely used and play a more significant role in storing important information, users often prefer not to have their data accessed by anyone other than themselves. The current approach typically involves setting a login password known only to the user. However, this method has several problems: First, users generally set simple passwords, and complex passwords are difficult to remember and easily cracked, resulting in low security. Second, if the password is forgotten, there is no way to retrieve it; the only option is to reinstall the system, leading to the loss of a significant amount of important data.

[0003] Mobile terminals (smartphones), as the most widely used electronic devices, already possess mature authentication functions, such as login authentication for various social media or game accounts and identity verification for bank transfers. Therefore, applying mobile terminals to computer security authentication is an inevitable trend. For example, Chinese patent CN109325324A discloses a "Computer Power-On Verification System," which includes a cloud server, a control terminal, a wireless network module, a computer, and a handheld terminal. The cloud server is connected to the control terminal, handheld terminal, and wireless network module, while the computer is connected to the wireless network module. This existing solution, through the cooperation of the cloud server, control terminal, handheld terminal, wireless network module, and computer, facilitates power-on verification for users, preventing unauthorized computer use and improving computer security.

[0004] The computer boot verification system described in the existing solutions is also a type of computer security verification system. It sends a boot request to a cloud server when the computer boots up, and then the cloud server sends verification information (such as a verification code) to the mobile terminal. However, the prerequisite for the computer booting up in the existing solutions is a network connection between the computer and the cloud server, and a network connection between the cloud server and the mobile terminal. On the one hand, the existing solutions heavily rely on wireless networks. If the network quality is poor, it is difficult to complete the computer security verification in a timely manner, or even impossible to complete the verification. Furthermore, connecting to a cloud server generally requires a long-range wireless network, but computers often struggle to connect to long-range wireless networks before completing the boot security verification (generally requiring a user account and password), and can only connect to short-range wireless networks such as Bluetooth. Therefore, the existing solutions suffer from poor computer security verification effectiveness. On the other hand, data transmission over long-range wireless networks carries the risk of interception, and the existing solutions do not implement any data encryption measures, resulting in poor computer security verification security. Therefore, designing a system that can improve the effectiveness and security of computer security verification is a pressing technical problem that needs to be solved. Summary of the Invention

[0005] In view of the shortcomings of the prior art, the technical problem to be solved by the present invention is: how to provide a computer security verification system that can realize computer security verification through mobile terminals, while not relying on long-distance wireless networks and being able to encrypt interactive data, thereby improving the effectiveness and security of computer security verification.

[0006] To solve the above-mentioned technical problems, the present invention adopts the following technical solution:

[0007] Computer security verification system, including:

[0008] A computer is configured with a public key; this is used to send connection authentication information encrypted with the public key.

[0009] The mobile terminal is equipped with a private key that is paired with the public key; it is used to receive connection authentication information encrypted with the public key and decrypt it with the private key to obtain the connection authentication information, and then use the connection authentication information to connect with the computer.

[0010] After connecting to the computer, the mobile terminal authenticates the user's identity and generates authentication information upon successful authentication; then, it generates a digital signature using a private key, attaches it to the authentication information, and sends it to the computer.

[0011] The computer verifies the digital signature in the identity authentication information using a public key, and then obtains the identity authentication information after the digital signature verification is successful to complete the security verification.

[0012] Preferably, the connection method between the mobile terminal and the computer includes Bluetooth network connection;

[0013] The computer uses the pairing key of the Bluetooth network connection as connection authentication information, and broadcasts the connection authentication information encrypted with the public key through the Bluetooth network.

[0014] The mobile terminal receives the connection authentication information encrypted with the public key broadcast by the computer via the Bluetooth network and decrypts it with the private key to obtain the pairing key; then it uses the pairing key to perform Bluetooth pairing to complete the Bluetooth network connection with the computer.

[0015] Preferably, the connection method between the mobile terminal and the computer includes a direct connection via a data cable;

[0016] The mobile terminal sends a connection request to the computer by inserting a data cable;

[0017] The computer uses the connection key directly connected via the data cable as connection authentication information, and transmits the connection authentication information encrypted with the public key via the data cable.

[0018] The mobile terminal receives the public-key encrypted connection authentication information transmitted by the computer via a data cable and decrypts it with the private key to obtain the connection key; then, it completes the connection authentication using the connection key to establish a direct connection with the computer via the data cable.

[0019] Preferably, when generating a digital signature, the mobile terminal first generates a digest of the identity authentication information using a hash function, then encrypts the digest of the identity authentication information using a private key and combines it with a digital signature algorithm to generate the corresponding digital signature.

[0020] This invention also discloses a computer security verification method, implemented based on the computer security verification system of this invention, specifically including the following steps:

[0021] S1: Obtain the connection authentication information encrypted with the computer's public key;

[0022] S2: Obtain the connection authentication information encrypted with the public key by decrypting with the private key, and then establish a connection with the computer through the connection authentication information;

[0023] S3: The mobile terminal authenticates the user's identity and generates authentication information after the identity authentication is successful;

[0024] S4: Generate a digital signature using the private key and attach the digital signature to the authentication information; then send the digitally signed authentication information to the computer.

[0025] Preferably, in step S2, the connection method with the computer includes Bluetooth network connection and direct data cable connection.

[0026] Preferably, in step S3, the methods for authenticating the user's identity include facial recognition authentication, password input authentication, gesture password authentication, and fingerprint recognition authentication.

[0027] Preferably, in step S4, when generating a digital signature, a digest of the identity authentication information is first generated using a hash function, and then the digest of the identity authentication information is encrypted using a private key and combined with a digital signature algorithm to generate the corresponding digital signature.

[0028] The present invention also discloses a mobile terminal for completing computer security verification using the computer security verification method of the present invention.

[0029] The present invention also discloses a readable storage medium storing a computer management program thereon, wherein the computer management program, when executed by a processor, implements the steps of the computer security verification method of the present invention.

[0030] Compared with the prior art, the computer security verification system and method of this invention have the following advantages:

[0031] In this invention, the mobile terminal connects to the computer via authentication information, authenticates the user's identity, generates authentication information, generates a digital signature using a private key, attaches it to the authentication information, and sends it to the computer. Finally, the computer verifies the digital signature using a public key to complete the security verification through the authentication information. On one hand, this invention authenticates the user and generates authentication information for the computer via the mobile terminal. The entire data interaction process does not require cloud servers or cloud data. The connection method between the mobile terminal and the computer is no longer limited to existing long-distance wireless networks, but can use wired connections and short-range wireless networks (such as Bluetooth connections and direct data cable connections). Therefore, even with poor network quality, computer security verification can be effectively completed, and it is not limited by the various limitations of connecting to long-distance wireless networks. In other words, computer security verification can be achieved through the mobile terminal without relying on long-distance wireless networks, thereby improving the effectiveness of computer security verification. On the other hand, the present invention completes the first authentication by encrypting with a public key and decrypting with a private key when the mobile terminal establishes a connection with the computer. When the mobile terminal completes identity authentication and returns the identity authentication information to the computer, it completes the second authentication by generating a digital certificate with a private key and verifying with a public key. This dual authentication method effectively ensures the security of data interaction between the mobile terminal and the computer. Even if the interaction data is intercepted, it will not cause data leakage. That is, it can encrypt the interaction data, thereby improving the security of computer security verification. Attached Figure Description

[0032] To make the objectives, technical solutions, and advantages of the invention clearer, the invention will now be described in further detail with reference to the accompanying drawings, wherein:

[0033] Figure 1 Network architecture diagram of a computer security verification system;

[0034] Figure 2 This is a logic block diagram of a computer security verification method. Detailed Implementation

[0035] To make the objectives, technical solutions, and advantages of the embodiments of the present invention clearer, the technical solutions of the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some, not all, of the embodiments of the present invention. The components of the embodiments of the present invention described and shown in the accompanying drawings can generally be arranged and designed in various different configurations. Therefore, the following detailed description of the embodiments of the present invention provided in the accompanying drawings is not intended to limit the scope of the claimed invention, but only to illustrate selected embodiments of the invention. All other embodiments obtained by those skilled in the art based on the embodiments of the present invention without inventive effort are within the scope of protection of the present invention.

[0036] It should be noted that similar reference numerals and letters in the following figures indicate similar items. Therefore, once an item is defined in one figure, it does not need to be further defined and explained in subsequent figures. In the description of this invention, it should be noted that the terms "center," "upper," "lower," "left," "right," "vertical," "horizontal," "inner," and "outer," etc., indicate the orientation or positional relationship based on the orientation or positional relationship shown in the figures, or the orientation or positional relationship commonly used when the product is in use. They are only for the convenience of describing the invention and simplifying the description, and do not indicate or imply that the device or element referred to must have a specific orientation, or be constructed and operated in a specific orientation. Therefore, they should not be construed as limitations on the invention. Furthermore, the terms "first," "second," and "third," etc., are only used to distinguish descriptions and should not be construed as indicating or implying relative importance. In addition, the terms "horizontal," "vertical," etc., do not indicate that the component is required to be absolutely horizontal or suspended, but can be slightly tilted. For example, "horizontal" simply means that its direction is more horizontal than "vertical," and does not mean that the structure must be completely horizontal, but can be slightly tilted. In the description of this invention, it should also be noted that, unless otherwise explicitly specified and limited, the terms "set," "install," "connect," and "link" should be interpreted broadly. For example, they can refer to a fixed connection, a detachable connection, or an integral connection; they can refer to a mechanical connection or an electrical connection; they can refer to a direct connection or an indirect connection through an intermediate medium; and they can refer to the internal connection of two components. Those skilled in the art can understand the specific meaning of the above terms in this invention based on the specific circumstances.

[0037] The following detailed explanation illustrates the specific implementation methods:

[0038] Example 1:

[0039] This embodiment discloses a computer security verification system.

[0040] like Figure 1 As shown, the computer security verification system includes:

[0041] A computer is configured with a public key; this is used to send connection authentication information encrypted with the public key.

[0042] The mobile terminal is equipped with a private key that is paired with the public key; it is used to receive connection authentication information encrypted with the public key and decrypt it with the private key to obtain the connection authentication information, and then use the connection authentication information to connect with the computer.

[0043] In this embodiment, the public and private keys are existing public-private key pairs. The encryption algorithm can be AES, or other algorithms of equivalent security level; however, the AES key length must not be less than 128 bits.

[0044] After connecting to the computer, the mobile terminal authenticates the user's identity and generates authentication information upon successful authentication; then, it generates a digital signature using a private key, attaches it to the authentication information, and sends it to the computer.

[0045] In this embodiment, when generating a digital signature, the mobile terminal first generates a digest of the authentication information using a hash function, then encrypts the digest of the authentication information using a private key and combines it with a digital signature algorithm to generate the corresponding digital signature. The digital signature algorithm can be SHA+RSA / ECC / SM2, or other algorithms of equivalent security level. The SHA algorithm hash value must be no less than 256 bits, the RSA algorithm key length must be no less than 2048 bits, and the ECC / SM2 algorithm key length must be no less than 256 bits.

[0046] The computer verifies the digital signature in the identity authentication information using a public key, and then obtains the identity authentication information after the digital signature verification is successful to complete the security verification.

[0047] In this invention, the mobile terminal connects to the computer via authentication information, authenticates the user's identity, generates authentication information, generates a digital signature using a private key, attaches it to the authentication information, and sends it to the computer. Finally, the computer verifies the digital signature using a public key to complete the security verification through the authentication information. On one hand, this invention authenticates the user and generates authentication information for the computer via the mobile terminal. The entire data interaction process does not require cloud servers or cloud data. The connection method between the mobile terminal and the computer is no longer limited to existing long-distance wireless networks, but can use wired connections and short-range wireless networks (such as Bluetooth connections and direct data cable connections). Therefore, even with poor network quality, computer security verification can be effectively completed, and it is not limited by the various limitations of connecting to long-distance wireless networks. In other words, computer security verification can be achieved through the mobile terminal without relying on long-distance wireless networks, thereby improving the effectiveness of computer security verification. On the other hand, the present invention completes the first authentication by encrypting with a public key and decrypting with a private key when the mobile terminal establishes a connection with the computer. When the mobile terminal completes identity authentication and returns the identity authentication information to the computer, it completes the second authentication by generating a digital certificate with a private key and verifying with a public key. This dual authentication method effectively ensures the security of data interaction between the mobile terminal and the computer. Even if the interaction data is intercepted, it will not cause data leakage. That is, it can encrypt the interaction data, thereby improving the security of computer security verification.

[0048] In practice, the connection methods between the mobile terminal and the computer include Bluetooth network connection and direct data cable connection.

[0049] 1) Bluetooth network connection

[0050] The computer uses the pairing key of the Bluetooth network connection as connection authentication information, and broadcasts the connection authentication information encrypted with the public key through the Bluetooth network.

[0051] The mobile terminal receives the connection authentication information encrypted with the public key broadcast by the computer via the Bluetooth network and decrypts it with the private key to obtain the pairing key; then it uses the pairing key to perform Bluetooth pairing to complete the Bluetooth network connection with the computer.

[0052] 2) Connect the data cable directly.

[0053] The mobile terminal sends a connection request to the computer by inserting a data cable;

[0054] The computer uses the connection key directly connected via the data cable as connection authentication information, and transmits the connection authentication information encrypted with the public key via the data cable.

[0055] The mobile terminal receives the public-key encrypted connection authentication information transmitted by the computer via a data cable and decrypts it with the private key to obtain the connection key; then, it completes the connection authentication using the connection key to establish a direct connection with the computer via the data cable.

[0056] In this invention, the connection methods between the mobile terminal and the computer include Bluetooth network connection and direct data cable connection, and are no longer limited to existing long-distance wireless networks. Even if the network quality is poor, the computer security verification can be effectively completed. It is not limited by various restrictions of connecting to long-distance wireless networks. That is, the computer security verification can be achieved through the mobile terminal without relying on long-distance wireless networks, thereby further improving the effectiveness of computer security verification.

[0057] Example 2:

[0058] This embodiment discloses a computer security verification method, which is implemented based on the computer security verification system in Embodiment 1.

[0059] like Figure 2 As shown, the computer security verification method includes the following steps:

[0060] S1: Obtain the connection authentication information encrypted with the computer's public key;

[0061] S2: Obtain the connection authentication information encrypted with the public key by decrypting with the private key, and then establish a connection with the computer through the connection authentication information;

[0062] In this embodiment, the public and private keys are existing public-private key pairs. The encryption algorithm can be AES, or other algorithms of equivalent security level; however, the AES key length must not be less than 128 bits.

[0063] S3: The mobile terminal authenticates the user's identity and generates authentication information after the identity authentication is successful;

[0064] In this embodiment, the methods for authenticating user identity include facial recognition authentication, password input authentication, gesture password authentication, and fingerprint recognition authentication.

[0065] S4: Generate a digital signature using the private key and attach it to the authentication information; then send the digitally signed authentication information to the computer, enabling the computer to verify the digital signature in the authentication information using the public key. Upon successful verification of the digital signature, the computer obtains the authentication information to complete the security verification.

[0066] In this embodiment, when generating a digital signature, a digest of the authentication information is first generated using a hash function. Then, the digest of the authentication information is encrypted using a private key and combined with a digital signature algorithm to generate the corresponding digital signature. The digital signature algorithm can be SHA+RSA / ECC / SM2, or other algorithms of equivalent security. The SHA algorithm hash value must be at least 256 bits, the RSA algorithm key length must be at least 2048 bits, and the ECC / SM2 algorithm key length must be at least 256 bits.

[0067] It should be noted that the computer security verification method in this invention can generate corresponding software code or software services through program programming, and thus be able to run and be implemented on servers and computers.

[0068] The present invention can complete the above steps on a mobile terminal.

[0069] The mobile terminal connects to the computer via authentication information, authenticates the user, generates authentication information, and then generates a digital signature using a private key, attaching it to the authentication information and sending it to the computer. Finally, the computer verifies the digital signature using a public key to complete the security verification process. On one hand, this invention authenticates the user and generates authentication information for the computer via the mobile terminal. The entire data interaction process does not require cloud servers or cloud data. The connection method between the mobile terminal and the computer is no longer limited to existing long-distance wireless networks, but can use wired connections and short-range wireless networks (such as Bluetooth connections and direct data cable connections). Therefore, even with poor network quality, computer security verification can be effectively completed, and it is not limited by the various limitations of connecting to long-distance wireless networks. In other words, computer security verification can be achieved through the mobile terminal without relying on long-distance wireless networks, thereby improving the effectiveness of computer security verification. On the other hand, the present invention completes the first authentication by encrypting with a public key and decrypting with a private key when the mobile terminal establishes a connection with the computer. When the mobile terminal completes identity authentication and returns the identity authentication information to the computer, it completes the second authentication by generating a digital certificate with a private key and verifying with a public key. This dual authentication method effectively ensures the security of data interaction between the mobile terminal and the computer. Even if the interaction data is intercepted, it will not cause data leakage. That is, it can encrypt the interaction data, thereby improving the security of computer security verification.

[0070] In practice, the connection methods with the computer include Bluetooth network connection and direct data cable connection.

[0071] 1) Bluetooth network connection

[0072] The computer uses the pairing key of the Bluetooth network connection as connection authentication information, and broadcasts the connection authentication information encrypted with the public key through the Bluetooth network.

[0073] The mobile terminal receives the connection authentication information encrypted with the public key broadcast by the computer via the Bluetooth network and decrypts it with the private key to obtain the pairing key; then it uses the pairing key to perform Bluetooth pairing to complete the Bluetooth network connection with the computer.

[0074] 2) Connect the data cable directly.

[0075] The mobile terminal sends a connection request to the computer by inserting a data cable;

[0076] The computer uses the connection key directly connected via the data cable as connection authentication information, and transmits the connection authentication information encrypted with the public key via the data cable.

[0077] The mobile terminal receives the public-key encrypted connection authentication information transmitted by the computer via a data cable and decrypts it with the private key to obtain the connection key; then, it completes the connection authentication using the connection key to establish a direct connection with the computer via the data cable.

[0078] In this invention, the connection methods between the mobile terminal and the computer include Bluetooth network connection and direct data cable connection, and are no longer limited to existing long-distance wireless networks. Even if the network quality is poor, the computer security verification can be effectively completed. It is not limited by various restrictions of connecting to long-distance wireless networks. That is, the computer security verification can be achieved through the mobile terminal without relying on long-distance wireless networks, thereby further improving the effectiveness of computer security verification.

[0079] Example 3:

[0080] This embodiment discloses a mobile terminal.

[0081] A mobile terminal is provided for performing computer security verification using the computer security verification method of the present invention. The mobile terminal may be a smartphone or tablet computer, or other device capable of installing and executing corresponding programs or software.

[0082] Example 4:

[0083] This embodiment discloses a readable storage medium.

[0084] A readable storage medium stores a computer management program thereon, which, when executed by a processor, implements the steps of the computer security verification method of the present invention. The readable storage medium may be a device with readable storage capabilities, such as a USB flash drive or a computer.

[0085] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention and not to limit the technical solutions. Those skilled in the art should understand that any modifications or equivalent substitutions to the technical solutions of the present invention without departing from the spirit and scope of the present invention should be covered within the scope of the claims of the present invention.

Claims

1. A computer security verification system, characterized in that, include: The computer is configured with a public key. Used to send connection authentication information encrypted with a public key; The mobile terminal is equipped with a private key that is set in pair with the public key; It is used to receive connection authentication information encrypted with the public key and decrypt it with the private key to obtain the connection authentication information, and then use the connection authentication information to establish a connection with the computer. After connecting to the computer, the mobile terminal authenticates the user's identity and generates authentication information upon successful authentication; then, it generates a digital signature using a private key, attaches it to the authentication information, and sends it to the computer. Methods for authenticating user identity include facial recognition authentication, password input authentication, gesture password authentication, and fingerprint recognition authentication; The computer verifies the digital signature in the identity authentication information using a public key, and then obtains the identity authentication information after the digital signature verification is successful to complete the security verification. When generating a digital signature, the mobile terminal first generates a digest of the identity authentication information using a hash function, then encrypts the digest of the identity authentication information using a private key and combines it with a digital signature algorithm to generate the corresponding digital signature. The security of data interaction between mobile terminals and computers is ensured through dual authentication. Mobile terminals can connect to computers via Bluetooth network connections. The computer uses the pairing key of the Bluetooth network connection as connection authentication information, and broadcasts the connection authentication information encrypted with the public key through the Bluetooth network. The mobile terminal receives the connection authentication information encrypted with the public key broadcast by the computer via the Bluetooth network and decrypts it with the private key to obtain the pairing key; then it uses the pairing key to perform Bluetooth pairing to complete the Bluetooth network connection with the computer.

2. The computer security verification system as described in claim 1, characterized in that: The connection methods between mobile terminals and computers include direct connection via data cable; The mobile terminal sends a connection request to the computer by inserting a data cable; The computer uses the connection key directly connected via the data cable as connection authentication information, and transmits the connection authentication information encrypted with the public key via the data cable. The mobile terminal receives the public-key encrypted connection authentication information transmitted by the computer via a data cable and decrypts it with the private key to obtain the connection key; then, it completes the connection authentication using the connection key to establish a direct connection with the computer via the data cable.

3. A computer security verification method, characterized in that: The implementation of the computer security verification system according to claim 1 specifically includes the following steps: S1: Obtain the connection authentication information encrypted with the computer's public key; S2: Obtain the connection authentication information encrypted with the public key by decrypting with the private key, and then establish a connection with the computer through the connection authentication information; S3: The mobile terminal authenticates the user's identity and generates authentication information after the identity authentication is successful; S4: Generate a digital signature using the private key and attach the digital signature to the authentication information; then send the digitally signed authentication information to the computer.

4. The computer security verification method as described in claim 3, characterized in that: In step S2, the connection to the computer can be via Bluetooth network connection or direct connection via data cable.

5. The computer security verification method as described in claim 3, characterized in that: In step S3, the methods for authenticating the user's identity include facial recognition authentication, password input authentication, gesture password authentication, and fingerprint recognition authentication.

6. The computer security verification method as described in claim 3, characterized in that: In step S4, when generating a digital signature, a digest of the identity authentication information is first generated using a hash function, and then the digest of the identity authentication information is encrypted using a private key and combined with a digital signature algorithm to generate the corresponding digital signature.

7. A mobile terminal, characterized in that: Used to perform computer security verification using the computer security verification method according to any one of claims 3-6.

8. A readable storage medium, characterized in that, It stores a computer management program, which, when executed by a processor, implements the steps of the computer security verification method as described in any one of claims 3-6.

Images