Device fingerprint extraction method and apparatus, and computer device

Abstract

This application relates to a device fingerprint extraction method, apparatus, computer device, storage medium, and computer program product. The method includes: acquiring a signal at a signal acquisition location at a wired connection between a master device and a slave device to obtain a master device signal; the master device signal is acquired when the master device sends a signal to the slave device alone; acquiring multiple signals at the signal acquisition location to obtain multiple mixed signals; the multiple mixed signals include a first mixed signal and a second mixed signal; the multiple mixed signals are acquired when the master device and the slave device communicate with each other; performing cepstral processing on the first mixed signal based on the master device signal to obtain a first cepstral signal; performing cepstral processing on the second mixed signal based on the master device signal to obtain a second cepstral signal; and obtaining the device fingerprint of the slave device based on the first and second cepstral signals.

Description

Technical Field

[0001] This application relates to the field of information security technology, and in particular to a method, apparatus and computer device for extracting device fingerprints. Background Technology

[0002] In wired networks, communication devices are physically connected via cables, and nodes without a direct connection cannot access the network for unauthorized activities. However, they all share common vulnerabilities, such as Internet Protocol (IP) and Media Access Control (MAC) spoofing, allowing unauthorized network devices to gain access. Device fingerprint information (DFI) is an identity information generated by the physical characteristics of the device itself and embedded in its transmitted signals. It has the characteristic of being unclonable. Both wired and wireless devices include device fingerprints in their transmitted signals, and device fingerprints can effectively solve access authentication problems.

[0003] As a typical wired network, Ethernet has seen researchers begin using device fingerprinting for identification in domestic and international research on Ethernet device authentication. Among related technologies, the paper "Gerdes, RM, Mina, et al. Physical-Layer Identification of Wired Ethernet Devices[J]" was the first to extract device fingerprints for 10M consumer Ethernet, using matched filters and adaptive thresholds based on the signal preamble to distinguish different devices. However, in Fast Ethernet at speeds of 100 Mbps and even 1 Gbps, the presence of random scrambling sequences leads to inconsistencies in the preamble waveform of the actual transmitted signal after XORing a determined preamble sequence with a random scrambling sequence and then encoding the signal. This introduces data interference into the preamble-based network card fingerprint extraction method, resulting in insufficient fingerprint precision. The patent "A Method for Extracting Device Fingerprint Information from Wired Network Card Signals" discloses a method for obtaining adaptive filter parameters as a device fingerprint of a wired network card by recovering an ideal signal. This method is applicable to half-duplex 100M wired network cards, but for full-duplex devices, such as Gigabit Ethernet and automotive 100M / Gigabit Ethernet, the full-duplex signals sent by devices on both sides of the line are mixed together, making it difficult to recover the correct ideal signal, thus resulting in unstable extracted device fingerprints.

[0004] Therefore, in order to solve the problem of device fingerprint extraction and access authentication in wired networks, a device fingerprint extraction technology is needed to effectively extract stable and identifiable device fingerprint information. Summary of the Invention

[0005] Therefore, it is necessary to provide a device fingerprint extraction method, apparatus, computer device, computer-readable storage medium, and computer program product that can effectively extract stable and identifiable device fingerprint information in response to the above-mentioned technical problems.

[0006] Firstly, this application provides a method for extracting fingerprints from a device. The method includes:

[0007] Signals are acquired at the signal acquisition location at the wired connection between the master device and the slave device to obtain the master device signal; the master device signal is acquired when the master device sends a signal to the slave device alone.

[0008] Multiple signal acquisitions are performed at the signal acquisition location to obtain multiple mixed signals; the multiple mixed signals include a first mixed signal and a second mixed signal; the multiple mixed signals are acquired when the master device and the slave device are communicating with each other.

[0009] Based on the master device signal, the first mixed signal is subjected to cepstral processing to obtain the first cepstral signal;

[0010] Based on the master device signal, the second mixed signal is subjected to cepstral processing to obtain the second cepstral signal;

[0011] The device fingerprint of the slave device is obtained based on the first cepstral signal and the second cepstral signal.

[0012] In one embodiment, the signal acquisition location includes a first acquisition location and a second acquisition location. The process of acquiring the signal at the signal acquisition location at the wired connection between the master device and the slave device to obtain the master device signal includes:

[0013] Signals are simultaneously acquired at the first acquisition position and the second acquisition position to obtain the main device signal;

[0014] Multiple signal acquisitions are performed at the signal acquisition location to obtain multiple mixed signals, including:

[0015] Multiple signal acquisitions are performed simultaneously at the first acquisition position and the second acquisition position to obtain multiple mixed signals.

[0016] In one embodiment, before performing cepstral processing on the first mixed signal based on the master device signal, the process includes:

[0017] The master device signal is frequency domain transformed to obtain the master device frequency domain signal;

[0018] The first mixed signal is subjected to frequency domain transformation to obtain a first mixed frequency domain signal;

[0019] Before performing cepstral processing on the second mixed signal based on the master device signal, the process includes:

[0020] The second mixed signal is subjected to frequency domain transformation to obtain the second mixed frequency domain signal.

[0021] In one embodiment, the step of performing cepstral processing on the first mixed frequency domain signal based on the host device frequency domain signal to obtain a first cepstral signal includes:

[0022] The first cepstral signal to be processed is obtained by calculating the frequency domain signal of the main device and the first mixed frequency domain signal according to the preset method.

[0023] Perform a logarithmic operation on the first cepstral signal to be processed to obtain the first cepstral signal;

[0024] The step of performing cepstral processing on the second mixed frequency domain signal based on the main device's frequency domain signal to obtain the second cepstral signal includes:

[0025] The second cepstral signal to be processed is obtained by calculating the main device frequency domain signal and the second mixed frequency domain signal according to the preset method.

[0026] The second cepstral signal is obtained by performing a logarithmic operation on the second cepstral signal.

[0027] In one embodiment, obtaining the device fingerprint of the slave device based on the first cepstral signal and the second cepstral signal includes:

[0028] The device fingerprint of the slave device is obtained by performing cross-correlation operation on the first cepstral signal and the second cepstral signal.

[0029] Secondly, this application provides a device fingerprint extraction apparatus, comprising:

[0030] The master device signal acquisition module is used to acquire signals at the signal acquisition location of the wired connection between the master device and the slave device to obtain the master device signal; the master device signal is acquired when the master device sends a signal to the slave device alone.

[0031] The mixed signal acquisition module is used to perform multiple signal acquisitions at the signal acquisition location to obtain multiple mixed signals; the multiple mixed signals include a first mixed signal and a second mixed signal; the multiple mixed signals are acquired when the master device and the slave device communicate with each other;

[0032] The first cepstral module is used to perform cepstral processing on the first mixed signal based on the master device signal to obtain a first cepstral signal;

[0033] The second cepstral module is used to perform cepstral processing on the second mixed signal based on the main device signal to obtain a second cepstral signal;

[0034] The fingerprint extraction module is used to obtain the device fingerprint of the slave device based on the first cepstral signal and the second cepstral signal.

[0035] Thirdly, this application also provides a computer device. The computer device includes a memory and a processor, the memory storing a computer program, and the processor executing the computer program to implement the steps of the methods in any of the above embodiments.

[0036] Fourthly, this application also provides a computer-readable storage medium. The computer-readable storage medium stores a computer program thereon, which, when executed by a processor, implements the steps of the methods in any of the above embodiments.

[0037] Fifthly, this application also provides a computer program product. The computer program product includes a computer program that, when executed by a processor, implements the steps of the methods in any of the above embodiments.

[0038] The aforementioned device fingerprint extraction method, apparatus, computer equipment, storage medium, and computer program product, the method comprising: acquiring a signal at a signal acquisition location at the wired connection between a master device and a slave device to obtain a master device signal; wherein the master device signal is acquired when the master device sends a signal to the slave device alone; acquiring multiple signals at the signal acquisition location to obtain multiple mixed signals; wherein the multiple mixed signals include a first mixed signal and a second mixed signal; wherein the multiple mixed signals are acquired when the master device and the slave device communicate with each other; performing cepstral processing on the first mixed signal based on the master device signal to obtain a first cepstral signal; performing cepstral processing on the second mixed signal based on the master device signal to obtain a second cepstral signal; and obtaining a device fingerprint of the slave device based on the first and second cepstral signals, wherein the device fingerprint of the slave device is independent of the data corresponding to the signal acquisition, is stable and identifiable, and can be used as the device fingerprint information of the slave device for identification or access authentication, etc. Attached Figure Description

[0039] Figure 1 This is a schematic diagram illustrating the application of the device fingerprint extraction method in one embodiment;

[0040] Figure 2 This is a schematic diagram of a device fingerprint extraction method in one embodiment;

[0041] Figure 3 The image shows the time-domain waveform and frequency-domain amplitude spectrum of the master device signal in a device fingerprint extraction method in one embodiment.

[0042] Figure 4 The image shows the time-domain waveform and frequency-domain amplitude spectrum of the mixed signal in a device fingerprint extraction method in one embodiment.

[0043] Figure 5 The image shows a waveform of the cepstral signal in a device fingerprint extraction method in one embodiment.

[0044] Figure 6 This is a flowchart illustrating a device fingerprint extraction method in one embodiment;

[0045] Figure 7 In one embodiment, the device fingerprint extraction method yields multiple device fingerprint curves obtained by performing multiple fingerprint extractions on the same slave device.

[0046] Figure 8 In one embodiment, the device fingerprint extraction method yields multiple different device fingerprint curves obtained by extracting fingerprints from different slave devices.

[0047] Figure 9 This is a structural block diagram of a device fingerprint extraction apparatus in one embodiment;

[0048] Figure 10 This is an internal structural diagram of a computer device in one embodiment. Detailed Implementation

[0049] To make the objectives, technical solutions, and advantages of this application clearer, the following detailed description is provided in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are merely illustrative and not intended to limit the scope of this application.

[0050] This application provides a device fingerprint extraction method, apparatus, and electronic device, comprising: acquiring a signal at a signal acquisition location at a wired connection between a master device and a slave device to obtain a master device signal; the master device signal is acquired when the master device sends a signal to the slave device alone; acquiring multiple signals at the signal acquisition location to obtain multiple mixed signals; the multiple mixed signals include a first mixed signal and a second mixed signal; the multiple mixed signals are acquired when the master device and the slave device communicate with each other; performing cepstral processing on the first mixed signal based on the master device signal to obtain a first cepstral signal; performing cepstral processing on the second mixed signal based on the master device signal to obtain a second cepstral signal; and obtaining a device fingerprint of the slave device based on the first and second cepstral signals. The device fingerprint of the slave device is independent of the data corresponding to the signal acquisition, is stable and identifiable, and can be used as the device fingerprint information of the slave device for identification or access authentication, etc.

[0051] The device fingerprint extraction method provided in this application can be applied to full-duplex communication devices in wired networks. For example... Figure 1 As shown, in this embodiment, taking a 100base-T1 vehicle-mounted Ethernet device as an example, the communication device includes a master device M, a slave device S, and a signal acquisition device F. The master device M and the slave device S are connected by a wired communication cable, such as a 15-meter twisted pair cable. The signal acquisition device F acquires signals at the wired connection between the master device M and the slave device S. Then, the acquired signals are processed using a device fingerprint extraction method to effectively extract stable and identifiable device fingerprint information of the slave device S for identification or access authentication.

[0052] In one embodiment, such as Figure 2 As shown, a device fingerprint extraction method is provided, including the following steps:

[0053] S101. Signal acquisition is performed at the signal acquisition location at the wired connection between the master device and the slave device to obtain the master device signal; the master device signal is acquired when the master device sends a signal to the slave device alone.

[0054] Taking the 100base-T1 vehicle-mounted Ethernet device as an example, in step S101, the master device M is first powered on and starts sending signals, while the slave device S does not send signals. Then, the signal acquisition device F is used to acquire signals at the signal acquisition position at the wired connection between the master device M and the slave device S to obtain the master device signal.

[0055] In this embodiment, two signal acquisition positions are selected simultaneously at the wired connection between the master device M and the slave device S for signal acquisition. That is, the signal acquisition positions include a first acquisition position A and a second acquisition position B, and the master device signal includes the master device signal acquired simultaneously at the first acquisition position and the second acquisition position.

[0056] Specifically, step S101 may include:

[0057] Signals are acquired simultaneously at the first and second acquisition positions to obtain the main device signal.

[0058] The first acquisition position A is about 5 cm away from the master device M, and the second acquisition position B is about 5 cm away from the slave device S.

[0059] In this embodiment, the signal acquisition device F acquires the differential signal on the twisted pair at the first acquisition position A and the second acquisition position B at a preset sampling rate (e.g., 625 Msps), which is taken as the 0th signal acquisition. The number of sampling points N = 100,000. Since the symbol rate is 66.7 MHz, the signal acquisition device F performs approximately 9 times oversampling at the first acquisition position A and the second acquisition position B to obtain the master device signal acquired at the first acquisition position A and the master device signal acquired at the second acquisition position B. It should be noted that only the master device signal needs to be acquired once during the entire device fingerprint extraction process, which helps to reduce the difficulty of device fingerprint extraction.

[0060] In this embodiment, step S101 may include:

[0061] S201. Based on the master device signal acquired at the first acquisition position, obtain the master device signal acquired at the first acquisition position;

[0062] S202. Based on the master device signal acquired at the second acquisition position, obtain the master device signal acquired at the second acquisition position.

[0063] Specifically, such as Figure 3 As shown, the master device signal is represented as follows:

[0064]

[0065]

[0066] in, The signal from the main device acquired at the first acquisition location. The signal obtained from the main device at the second acquisition location is n = 0, 1, ..., N-1, where N represents the number of sampling points. f represents the master device time-domain reference transmission signal corresponding to the 0th acquisition. M (n) represents the time-domain representation of the master device fingerprint, h MA (n) represents the time-domain expression of the transfer function from the master device to the first acquisition position, h MB (n) represents the time-domain representation of the transfer function from the master device to the second acquisition position, and "*" represents a linear convolution operation. The additive noise in the time domain represents the first acquisition position corresponding to the 0th acquisition. This represents the additive noise in the time domain at the second acquisition position corresponding to the 0th acquisition.

[0067] S102. Multiple signal acquisitions are performed at the signal acquisition location to obtain multiple mixed signals; the multiple mixed signals include a first mixed signal and a second mixed signal; the multiple mixed signals are acquired when the master device and the slave device communicate with each other.

[0068] In other words, both the master device M and the slave device S are powered on, and both send signals. Then, multiple signal acquisitions are performed at the same signal acquisition location to obtain multiple mixed signals. For example, signal acquisition can be performed simultaneously at the first acquisition location A and the second acquisition location B to obtain a mixed signal acquired at the first acquisition location A and a mixed signal acquired at the second acquisition location B. Specifically, after both the master device M and the slave device S send signals, the signal acquisition device F performs multiple acquisitions of the 66.7MHz symbol rate full-duplex mixed signal at a sampling rate of 625Msps to obtain multiple mixed signals, with the number of sampling points N = 100,000. It can be understood that, unlike the master device signal in step S101, this mixed signal is a full-duplex mixed signal formed by the superposition of signals emitted by the master device M and the slave device S.

[0069] Accordingly, step S102 may include: the signal acquisition position includes a first acquisition position and a second acquisition position; signal acquisition is performed simultaneously at the first acquisition position and the second acquisition position to obtain the main device signal; and multiple signal acquisitions are performed simultaneously at the first acquisition position and the second acquisition position to obtain multiple mixed signals.

[0070] Furthermore, the first mixed signal is the mixed signal acquired in the first sampling, and the second mixed signal is the mixed signal acquired in the i-th sampling, where i ≥ 2. For example... Figure 4 As shown, the first mixed signal is represented as:

[0071]

[0072]

[0073] in, The first mixed signal acquired at the first acquisition location, The first mixed signal is obtained from the second acquisition position, where n = 0, 1, ..., N-1, and N represents the number of sampling points. This represents the master device time-domain reference transmission signal corresponding to the first acquisition. f represents the slave device time-domain reference transmission signal corresponding to the first acquisition. S (n) represents the time-domain representation of the device fingerprint, h SA (n) represents the time-domain representation of the transfer function from the device to the first acquisition location, h SB (n) represents the time-domain representation of the transfer function from the device to the second acquisition location. The additive noise in the time domain represents the first acquisition position corresponding to the first acquisition. These represent the additive time-domain noise at the second acquisition position corresponding to the first acquisition.

[0074] The second mixed signal is represented as:

[0075]

[0076]

[0077] in, The second mixed signal is obtained from the first acquisition position. The second mixed signal is obtained from the second acquisition position, where n = 0, 1, ..., N-1, and N represents the number of sampling points. This represents the master device time-domain reference transmission signal corresponding to the i-th acquisition. This represents the slave device's time-domain reference transmission signal corresponding to the i-th acquisition. The additive noise in the time domain at the first acquisition position corresponding to the i-th acquisition is represented by . This represents the additive noise in the time domain at the second acquisition position corresponding to the i-th acquisition.

[0078] It should be noted that the signal acquisition process in steps S101 and S102 above can be divided into a training phase and a testing phase. In the training phase, the master device is powered on while the slave device is not powered on, and the master device signal is acquired simultaneously at the first acquisition position and the second acquisition position (e.g., the 0th acquisition). Then, both the master device and the slave device are powered on, and the first mixed signal is acquired simultaneously at the first acquisition position and the second acquisition position (e.g., the 1st acquisition). In the testing phase, both the master device and the slave device are powered on, and the second mixed signal is acquired simultaneously at the first acquisition position and the second acquisition position (e.g., the i-th acquisition).

[0079] S103. Perform cepstral processing on the first mixed signal based on the master device signal to obtain the first cepstral signal.

[0080] Since both the master device signal and the first mixed signal are time-domain signals, in order to process the first mixed signal to obtain a cepstral signal, in this embodiment, the master device signal and the first mixed signal need to be transformed into frequency-domain signals first, and then cepstral processing is performed on the transformed frequency-domain signals to obtain the cepstral signal.

[0081] Specifically, step S103 may include:

[0082] S301. Perform frequency domain transformation on the main device signal to obtain the main device frequency domain signal;

[0083] S302. Perform frequency domain transformation on the first mixed signal to obtain the first mixed frequency domain signal;

[0084] S303. Based on the frequency domain signal of the master device, the first mixed frequency domain signal is subjected to cepstral processing to obtain the first cepstral signal.

[0085] In this embodiment, frequency domain transformation includes, but is not limited to, discrete Fourier transform, discrete cosine transform, etc.

[0086] Specifically, the frequency domain signal of the master device is represented as:

[0087]

[0088]

[0089] And satisfy

[0090]

[0091]

[0092] in, This refers to the master device frequency domain signal obtained by performing frequency domain transformation on the master device signal acquired at the first acquisition location. To obtain the master device frequency domain signal by performing frequency domain transformation on the master device signal acquired at the second acquisition location, FT N (.) represents the N-point frequency domain transform, where k = 0, 1, ..., N-1. F represents the frequency domain representation of the master device reference transmitted signal corresponding to the 0th acquisition. M (k) represents the frequency domain representation of the master device fingerprint, H MA (k) represents the frequency domain expression of the transfer function from the master device to the first acquisition position, H MB (k) represents the frequency domain expression of the transfer function from the master device to the second acquisition position. The frequency domain additive noise represents the first acquisition position corresponding to the 0th acquisition. This represents the frequency-domain additive noise at the second acquisition position corresponding to the 0th acquisition.

[0093] For example, in step S301, the master device signal... and Perform an N-point discrete cosine transform to obtain the frequency domain signal of the main device. and The frequency domain signal of the master device is then represented as:

[0094]

[0095]

[0096] In other words, FT N (.) represents the N-point discrete cosine transform of the master device signal.

[0097] And / or, the first mixed frequency domain signal is represented as:

[0098]

[0099]

[0100] And satisfy

[0101]

[0102]

[0103] in, The first mixed frequency domain signal is obtained by performing a frequency domain transformation on the first mixed signal acquired at the first acquisition location. To obtain the first mixed frequency domain signal by performing a frequency domain transformation on the first mixed signal acquired at the second acquisition location, FT... N (.) represents the N-point frequency domain transform, where k = 0, 1, ..., N-1. This represents the frequency domain representation of the master device reference transmitted signal corresponding to the first acquisition. F represents the frequency domain representation of the slave device signal corresponding to the first acquisition. S (k) represents the frequency domain representation of the device fingerprint, H SA (k) represents the frequency domain expression of the transfer function from the device to the first acquisition position, H SB (k) represents the frequency domain expression of the transfer function from the device to the second acquisition location. The frequency domain additive noise represents the first acquisition position corresponding to the first acquisition. This represents the frequency-domain additive noise at the second acquisition position corresponding to the first acquisition.

[0104] Accordingly, in step S302, the first mixed signal is... and Perform an N-point discrete cosine transform to obtain the first mixed frequency domain signal. and The first mixed frequency domain signal is then represented as:

[0105]

[0106]

[0107] That is, FT N (.) represents the N-point discrete cosine transform of the first mixed signal.

[0108] Step 103 includes: calculating the main device frequency domain signal and the first mixed frequency domain signal according to a preset method to obtain the first cepstral signal to be processed; performing a logarithmic operation on the first cepstral signal to be processed to obtain the first cepstral signal.

[0109] The preset method refers to the method of pre-setting the calculation of the first cepstral signal to be processed by the main device frequency domain signal and the first mixed frequency domain signal.

[0110] Optionally, the preset method may be to multiply the corresponding terms of the main device frequency domain signal and the first mixed frequency domain signal and then take the difference. For example, the first cepstral signal to be processed obtained according to the preset method can be expressed as:

[0111]

[0112] After obtaining the first cepstral signal to be processed, a logarithmic operation is performed on the first cepstral signal to obtain the first cepstral signal. For example, the first cepstral signal can be represented as:

[0113]

[0114] In other embodiments, the first cepstral signal can be obtained by performing square root operations or exponential operations on the first cepstral signal to be processed.

[0115] In one embodiment, the first cepstral signal is the cepstral signal corresponding to the first acquired full-duplex mixed signal, wherein, as shown in the example... Figure 5 As shown, the first cepstral signal is represented as:

[0116]

[0117] Where Cep1 is the first cepstral signal, and log(·) is the logarithmic value of each element in the sequence.

[0118] Optionally, the noise term in the first cepstral signal can be ignored. The noise term in the first cepstral signal includes... Therefore, the first cepstral signal can be represented as:

[0119]

[0120] Where k = 0, 1, ..., 99999, ΔH(k) = H SA (k)H MB (k)-H SB (k)H MA (k) represents the specific line characteristics between collection points A and B.

[0121] S104. Perform cepstral processing on the second mixed signal based on the master device signal to obtain the second cepstral signal.

[0122] Referring to step S103 above, since both the main device signal and the second mixed signal are time-domain signals, in order to process the second mixed signal to obtain a cepstral signal, in this embodiment, the second mixed signal needs to be transformed into a frequency-domain signal first, and then the transformed frequency-domain signal is subjected to cepstral processing to obtain a cepstral signal.

[0123] Specifically, step S104 may include:

[0124] S401. Perform frequency domain transformation on the second mixed signal to obtain the second mixed frequency domain signal;

[0125] S402. Perform cepstral processing on the second mixed frequency domain signal based on the master device frequency domain signal to obtain the second cepstral signal.

[0126] Specifically, the second hybrid frequency domain signal is represented as:

[0127]

[0128]

[0129] And satisfy

[0130]

[0131]

[0132] in, To obtain the second mixed frequency domain signal by performing a frequency domain transformation on the second mixed signal acquired at the first acquisition location, Y i B To obtain the second mixed frequency domain signal by performing a frequency domain transformation on the second mixed signal acquired at the second acquisition location, FT... N (.) represents the N-point frequency domain transform, where k = 0, 1, ..., N-1. This represents the frequency domain representation of the master device reference transmitted signal corresponding to the i-th acquisition. This represents the frequency domain representation of the slave device signal corresponding to the i-th acquisition. V represents the additive noise in the frequency domain at the first acquisition position corresponding to the i-th acquisition. i B (k) represents the frequency domain additive noise at the second acquisition position corresponding to the i-th acquisition.

[0133] Accordingly, in step S401, the second mixed signal is... and Perform an N-point discrete cosine transform to obtain the second mixed frequency domain signal. and Y i BThe second mixed frequency domain signal is represented as:

[0134]

[0135]

[0136] That is, FT N (.) represents the N-point discrete cosine transform of the second mixed signal.

[0137] Referring to step S103 above, step S402 includes: calculating the main device frequency domain signal and the second mixed frequency domain signal according to a preset method to obtain the second cepstral signal to be processed; performing logarithmic operation on the second cepstral signal to be processed to obtain the second cepstral signal.

[0138] The specific processing steps can be found in step 103 above, and will not be repeated here.

[0139] In one embodiment, the second cepstral signal is the cepstral signal corresponding to the full-duplex mixed signal acquired in the i-th acquisition, wherein the second cepstral signal is represented as:

[0140]

[0141]

[0142] Among them, Cep i For the second cepstral signal, log(·) is the logarithmic value of each element in the sequence.

[0143] Optionally, the noise term in the second cepstral signal can be ignored. The noise term in the second cepstral signal includes... V i B (k), therefore the second cepstral signal can be expressed as:

[0144]

[0145] Where k = 0, 1, ..., 99999, ΔH(k) = H SA (k)H MB (k)-H SB (k)H MA (k) represents the specific line characteristics between collection points A and B.

[0146] For example, taking i = 2, 3, 4, 5…11 as an example, a total of 10 second cepstral signals are obtained, namely Cep i Represented as Cep2~Cep 11That is, if i = 2, then the second cep2 signal corresponding to the full-duplex mixed signal acquired in the second acquisition is Cep2; if i = 3, then the second cep3 signal corresponding to the full-duplex mixed signal acquired in the third acquisition is Cep3, and so on.

[0147] S105. Based on the first cepstral signal and the second cepstral signal, obtain the device fingerprint of the device.

[0148] In this embodiment, the device fingerprint of the slave device is independent of the data corresponding to the signal acquisition, is stable and identifiable, and can be used as the device fingerprint information of the slave device for identification or access authentication, etc. For example, the device fingerprint of the slave device can be obtained by processing the first cepstral signal and the second cepstral signal using a cross-correlation algorithm.

[0149] Specifically, step S105 may include:

[0150] S501. Perform cross-correlation operation on the first cepstral signal and the second cepstral signal to obtain the device fingerprint of the slave device;

[0151] Specifically, in step S501, the device fingerprint of device S is represented as follows:

[0152]

[0153] Among them, DF i To obtain the device fingerprint from the device, k = 0, 1, ..., 99999, Represents interrelated operations.

[0154] because and If they are unrelated, then and They are unrelated, that is and These are irrelevant terms; similarly, because... and If they are all unrelated, then and They are all unrelated, that is and All are irrelevant; similarly, it can be concluded that... With log(F) M (k)F S (k)ΔH(k)) are all irrelevant terms. Therefore, the device fingerprint of a device can be represented as:

[0155]

[0156] because F M (k), FS There is no correlation between ΔH(k) and ΔH(k), therefore, log(F M (k)), log(F) S The values ​​(k) and log(ΔH(k)) are also uncorrelated. Therefore, the device fingerprint of the device is ultimately represented as:

[0157]

[0158] Where i = 2, 3, ..., 11, and ACF(·) represents the autocorrelation function. As can be seen from the above formula, the device fingerprint of the slave device obtained in the end is independent of the data corresponding to the i-th signal acquisition. It is stable and identifiable and can be used as the device fingerprint information of the slave device for identity recognition or access authentication, etc.

[0159] In summary, as Figure 6 As shown, the process of the device fingerprint extraction method provided in this embodiment is as follows:

[0160] S1. Connect two wired network full-duplex communication devices, one as the master device and the other as the slave device from which the fingerprint of the device to be extracted is extracted.

[0161] S2. Power on the master device and power off the slave device. That is, the master device sends a signal and the slave device does not send a signal. Select two signal acquisition points at the wired connection between the master device and the slave device to acquire the master device signal at the same time.

[0162] S3. Power on both the master device and the slave device, that is, both the master device and the slave device send signals, and perform the first full-duplex mixed signal acquisition at the same location to obtain the first mixed signal.

[0163] S4. At the same location, perform the i-th full-duplex mixed signal acquisition to obtain the second mixed signal;

[0164] S5. Perform cepstral processing on the first mixed signal according to the master device signal to obtain a first cepstral signal, and perform cepstral processing on the second mixed signal according to the master device signal to obtain a second cepstral signal;

[0165] S6. Perform cross-correlation operation on the first cepstral signal and the second cepstral signal to obtain the device fingerprint of the slave device.

[0166] It is understood that in the method of this embodiment, the first cepstral signal and the corresponding second cepstral signals acquired from multiple signal acquisitions are used, such as 10 second cepstral signals Cep2 to Cep2. 11 By performing cross-correlation operations on each device, multiple device fingerprints can be obtained, and the curves of these multiple device fingerprints are basically consistent, such as... Figure 7As shown, it can therefore be used for identity recognition or access authentication. When other slave devices are replaced, repeating the above device fingerprint extraction method can yield device fingerprints for different devices, such as... Figure 8 As shown, this is a diagram illustrating multiple device fingerprints obtained by extracting fingerprints from multiple devices, such as device 1, device 2, and device 3. Figure 7 It can be seen that different devices have different fingerprint curves.

[0167] In summary, the device fingerprint extraction method provided in this embodiment acquires signals at the signal acquisition location at the wired connection between the master device and the slave device to obtain the master device signal; the master device signal is acquired when the master device sends a signal to the slave device alone; multiple signal acquisitions are performed at the signal acquisition location to obtain multiple mixed signals; the multiple mixed signals include a first mixed signal and a second mixed signal; the multiple mixed signals are acquired when the master device and the slave device communicate with each other; cepstral processing is performed on the first mixed signal based on the master device signal to obtain a first cepstral signal; cepstral processing is performed on the second mixed signal based on the master device signal to obtain a second cepstral signal; based on the first cepstral signal and the second cepstral signal, the device fingerprint of the slave device is obtained. This device fingerprint of the slave device is independent of the data corresponding to the signal acquisition, is stable and identifiable, and can be used as the device fingerprint information of the slave device for identity recognition or access authentication, etc.

[0168] It should be understood that although the steps in the flowcharts of the above embodiments are shown sequentially according to the arrows, these steps are not necessarily executed in the order indicated by the arrows. Unless explicitly stated herein, there is no strict order restriction on the execution of these steps, and they can be executed in other orders. Moreover, at least some steps in the flowcharts of the above embodiments may include multiple steps or multiple stages. These steps or stages are not necessarily completed at the same time, but can be executed at different times. The execution order of these steps or stages is not necessarily sequential, but can be performed alternately or in turn with other steps or at least some of the steps or stages of other steps.

[0169] Based on the same inventive concept, this application also provides a device fingerprint extraction apparatus for implementing the device fingerprint extraction method described above. The solution provided by this apparatus is similar to the implementation described in the above method; therefore, the specific limitations in one or more device fingerprint extraction apparatus embodiments provided below can be found in the limitations of the device fingerprint extraction method described above, and will not be repeated here.

[0170] In one embodiment, such as Figure 9As shown, a device fingerprint extraction device 100 is provided, including a main device signal acquisition module 110, a mixed signal acquisition module 120, a first cepstral module 130, a second cepstral module 140, and a fingerprint extraction module 150, wherein:

[0171] The master device signal acquisition module 110 is used to acquire signals at the signal acquisition location at the wired connection between the master device and the slave device to obtain the master device signal; the master device signal is acquired when the master device sends a signal to the slave device alone.

[0172] The mixed signal acquisition module 120 is used to perform multiple signal acquisitions at the signal acquisition location to obtain multiple mixed signals; the multiple mixed signals include a first mixed signal and a second mixed signal; the multiple mixed signals are acquired when the master device and the slave device communicate with each other.

[0173] The first cepstral module 130 is used to perform cepstral processing on the first mixed signal based on the master device signal to obtain the first cepstral signal.

[0174] The second cepstral module 140 is used to perform cepstral processing on the second mixed signal based on the master device signal to obtain the second cepstral signal;

[0175] The fingerprint extraction module 150 is used to obtain the device fingerprint of the device based on the first cepstral signal and the second cepstral signal.

[0176] In one embodiment, the signal acquisition location includes a first acquisition location and a second acquisition location, and the aforementioned main device signal acquisition module 110 includes:

[0177] The first acquisition unit is used to simultaneously acquire signals at the first acquisition position and the second acquisition position to obtain the main device signal.

[0178] In one embodiment, the above-mentioned mixed signal acquisition module 120 includes:

[0179] The second acquisition unit is used to simultaneously acquire signals at the first acquisition position and the second acquisition position to obtain multiple mixed signals.

[0180] In one embodiment, the above-mentioned apparatus further includes:

[0181] The main frequency domain transformation module is used to perform frequency domain transformation on the main device signal to obtain the main device frequency domain signal.

[0182] The first hybrid frequency domain transformation module is used to perform frequency domain transformation on the first hybrid signal to obtain the first hybrid frequency domain signal.

[0183] In one embodiment, the above-described apparatus further includes:

[0184] The second hybrid frequency domain transformation module is used to perform frequency domain transformation on the second hybrid signal to obtain the second hybrid frequency domain signal.

[0185] In one embodiment, the first cepstral module 130 includes:

[0186] The first processing unit is used to calculate the main device frequency domain signal and the first mixed frequency domain signal according to a preset method to obtain the first cepstral signal to be processed.

[0187] The first logarithmic operation unit is used to perform logarithmic operations on the first cepstral signal to be processed to obtain the first cepstral signal.

[0188] In one embodiment, the second cepstral module 140 includes:

[0189] The second processing unit is used to calculate the main device frequency domain signal and the second mixed frequency domain signal according to a preset method to obtain the second cepstral signal to be processed.

[0190] The second logarithmic operation unit performs logarithmic operations on the second cepstral signal to be processed, and obtains the second cepstral signal.

[0191] In one embodiment, the fingerprint extraction module 150 includes:

[0192] The cross-correlation unit is used to perform cross-correlation operations on the first cepstral signal and the second cepstral signal to obtain the device fingerprint of the slave device.

[0193] Each module in the fingerprint extraction device 100 described above can be implemented entirely or partially through software, hardware, or a combination thereof. These modules can be embedded in or independent of the processor in a computer device, or stored in the memory of a computer device as software, so that the processor can call and execute the operations corresponding to each module.

[0194] In one embodiment, a computer device is provided, which may be a wired network full-duplex communication device, and its internal structure diagram may be as follows. Figure 10 As shown, the computer device includes a processor, memory, and network interface connected via a system bus. The processor provides computing and control capabilities. The memory includes non-volatile storage media and internal memory. The non-volatile storage media stores the operating system, computer programs, and a database. The internal memory provides an environment for the operation of the operating system and computer programs stored in the non-volatile storage media. Multiple full-duplex communication devices are connected via a wired network. When the computer program is executed by the processor, it implements a device fingerprinting method.

[0195] Those skilled in the art will understand that Figure 10The structure shown is merely a block diagram of a portion of the structure related to the present application and does not constitute a limitation on the computer device to which the present application is applied. Specific computer devices may include more or fewer components than those shown in the figure, or combine certain components, or have different component arrangements.

[0196] In one embodiment, a computer device is also provided, including a memory and a processor, wherein the memory stores a computer program, and the processor executes the computer program to implement the steps in the above method embodiments.

[0197] In one embodiment, a computer-readable storage medium is provided having a computer program stored thereon that, when executed by a processor, implements the steps in the above method embodiments.

[0198] In one embodiment, a computer program product is provided, including a computer program that, when executed by a processor, implements the steps in the above method embodiments.

[0199] Those skilled in the art will understand that all or part of the processes in the methods of the above embodiments can be implemented by a computer program instructing related hardware. The computer program can be stored in a non-volatile computer-readable storage medium, and when executed, it can include the processes of the embodiments of the above methods. Any references to memory, databases, or other media used in the embodiments provided in this application can include at least one of non-volatile and volatile memory. Non-volatile memory can include read-only memory (ROM), magnetic tape, floppy disk, flash memory, optical memory, high-density embedded non-volatile memory, resistive random access memory (ReRAM), magnetic random access memory (MRAM), ferroelectric random access memory (FRAM), phase change memory (PCM), graphene memory, etc. Volatile memory can include random access memory (RAM) or external cache memory, etc. By way of illustration and not limitation, RAM can take many forms, such as Static Random Access Memory (SRAM) or Dynamic Random Access Memory (DRAM). The databases involved in the embodiments provided in this application may include at least one type of relational database and non-relational database. Non-relational databases may include, but are not limited to, blockchain-based distributed databases. The processors involved in the embodiments provided in this application may be general-purpose processors, central processing units, graphics processing units, digital signal processors, programmable logic devices, quantum computing-based data processing logic devices, etc., and are not limited to these.

[0200] The technical features of the above embodiments can be combined in any way. For the sake of brevity, not all possible combinations of the technical features in the above embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this specification.

[0201] The embodiments described above are merely illustrative of several implementation methods of this application, and while the descriptions are specific and detailed, they should not be construed as limiting the scope of this patent application. It should be noted that those skilled in the art can make various modifications and improvements without departing from the concept of this application, and these all fall within the protection scope of this application. Therefore, the protection scope of this application should be determined by the appended claims.

Claims

1. A method for extracting fingerprints from a device, characterized in that, The method includes: Signals are acquired at the signal acquisition location at the wired connection between the master device and the slave device to obtain the master device signal; the master device signal is acquired when the master device sends a signal to the slave device alone. Multiple signal acquisitions are performed at the signal acquisition location to obtain multiple mixed signals; the multiple mixed signals include a first mixed signal and a second mixed signal; the multiple mixed signals are acquired when the master device and the slave device are communicating with each other. Based on the master device signal, the first mixed signal is subjected to cepstral processing to obtain the first cepstral signal; Based on the master device signal, the second mixed signal is subjected to cepstral processing to obtain the second cepstral signal; Based on the first cepstral signal and the second cepstral signal, the device fingerprint of the slave device is obtained; The process of obtaining the device fingerprint of the slave device based on the first cepstral signal and the second cepstral signal includes: The device fingerprint of the slave device is obtained by performing cross-correlation operation on the first cepstral signal and the second cepstral signal.

2. The method according to claim 1, characterized in that, The signal acquisition locations include a first acquisition location and a second acquisition location. The signal acquisition at the signal acquisition location at the wired connection between the master device and the slave device to obtain the master device signal includes: Signals are simultaneously acquired at the first acquisition position and the second acquisition position to obtain the main device signal; The process involves multiple signal acquisitions at the signal acquisition location to obtain multiple mixed signals, including: Multiple signal acquisitions are performed simultaneously at the first acquisition position and the second acquisition position to obtain multiple mixed signals.

3. The method according to claim 1, characterized in that, Before performing cepstral processing on the first mixed signal based on the master device signal, the process includes: The master device signal is frequency domain transformed to obtain the master device frequency domain signal; The first mixed signal is subjected to frequency domain transformation to obtain a first mixed frequency domain signal; Before performing cepstral processing on the second mixed signal based on the master device signal, the process includes: The second mixed signal is subjected to frequency domain transformation to obtain the second mixed frequency domain signal.

4. The method according to claim 1, characterized in that, The step of performing cepstral processing on the first mixed frequency domain signal based on the main device's frequency domain signal to obtain a first cepstral signal includes: The first cepstral signal to be processed is obtained by calculating the frequency domain signal of the main device and the first mixed frequency domain signal according to the preset method. Perform a logarithmic operation on the first cepstral signal to be processed to obtain the first cepstral signal; The step of performing cepstral processing on the second mixed frequency domain signal based on the main device's frequency domain signal to obtain the second cepstral signal includes: The second cepstral signal to be processed is obtained by calculating the main device frequency domain signal and the second mixed frequency domain signal according to the preset method. The second cepstral signal is obtained by performing a logarithmic operation on the second cepstral signal.

5. A device for extracting fingerprints, characterized in that, include: The master device signal acquisition module is used to acquire signals at the signal acquisition location at the wired connection between the master device and the slave device to obtain the master device signal. The master device signal is acquired when the master device sends a signal to the slave device alone. A mixed signal acquisition module is used to perform multiple signal acquisitions at the signal acquisition location to obtain multiple mixed signals; the multiple mixed signals include a first mixed signal and a second mixed signal. The multiple mixed signals are acquired when the master device and the slave device communicate with each other; The first cepstral module is used to perform cepstral processing on the first mixed signal based on the main device signal to obtain a first cepstral signal; The second cepstral module is used to perform cepstral processing on the second mixed signal based on the main device signal to obtain a second cepstral signal; A fingerprint extraction module is used to obtain the device fingerprint of the slave device based on the first cepstral signal and the second cepstral signal; The fingerprint extraction module is further configured to perform cross-correlation operations on the first cepstral signal and the second cepstral signal to obtain the device fingerprint of the slave device.

6. The apparatus according to claim 5, characterized in that, The signal acquisition locations include a first acquisition location and a second acquisition location; The main device signal acquisition module includes: The first acquisition unit is used to simultaneously acquire signals at the first acquisition position and the second acquisition position to obtain the main device signal; The hybrid signal acquisition module includes: The second acquisition unit is used to simultaneously acquire signals at the first acquisition position and the second acquisition position to obtain multiple mixed signals.

7. The apparatus according to claim 6, characterized in that, The device further includes: The main frequency domain transformation module performs frequency domain transformation on the main device signal to obtain the main device frequency domain signal; The first mixed signal is subjected to frequency domain transformation to obtain a first mixed frequency domain signal; The second hybrid frequency domain transformation module is used to perform frequency domain transformation on the second hybrid signal to obtain the second hybrid frequency domain signal.

8. The apparatus according to claim 5, characterized in that, The first cepstral module includes: The first processing unit is used to calculate the frequency domain signal of the main device and the first mixed frequency domain signal according to a preset method to obtain the first cepstral signal to be processed. The first logarithmic operation unit is used to perform logarithmic operations on the first cepstral signal to be processed to obtain the first cepstral signal. The second cepstral module includes: The second processing unit is used to calculate the main device frequency domain signal and the second mixed frequency domain signal according to the preset method to obtain the second cepstral signal to be processed. The second logarithmic operation unit is used to perform logarithmic operations on the second cepstral signal to be processed, so as to obtain the second cepstral signal.

9. A computer device comprising a memory and a processor, wherein the memory stores a computer program, characterized in that, When the processor executes the computer program, it implements the steps of the method according to any one of claims 1 to 4.

10. A computer-readable storage medium having a computer program stored thereon, characterized in that, When the computer program is executed by a processor, it implements the steps of the method according to any one of claims 1 to 4.

Images