Identity authentication method, device and system

Abstract

The present invention provides an identity authentication method, device, and system, belonging to the field of Internet of Things technology. The identity authentication method, applied to an information publishing device, includes: receiving a user role and a dynamic password input by a user; performing an encryption operation based on the user role, the device code of the information publishing device, current time information, and the secret key of the information publishing device, and generating a verification password based on the result of the encryption operation; comparing the dynamic password input by the user with the verification password; if they are consistent, the verification is passed, and the functional module corresponding to the user role is displayed. The technical solution of the present invention can authenticate user identities through dynamic passwords.

Description

Technical Field

[0001] The present invention relates to the technical field of Internet of Things, and in particular to an identity authentication method, device and system. Background Art

[0002] Standalone information publishing devices, lacking network hardware or a network environment, cannot communicate with servers. Without server support, administrator authentication and permission authorization are challenges that standalone information publishing devices face and must address.

[0003] In order to solve the problem of identity authentication, the existing technology uses the following solutions:

[0004] S1: Set a fixed password when the device is activated;

[0005] S2: The device recognizes the identity by entering the fixed password.

[0006] The above-mentioned existing technical solutions have the following drawbacks: 1. Using a fixed password carries the risk of password leakage, making it unsafe. If the password is leaked, anyone can use it to log in to the device and distribute content. 2. Using a fixed password also increases the risk of password forgetting. Resetting the password requires reactivating the device or resetting the password, which is cumbersome and time-consuming. Summary of the Invention

[0007] The technical problem to be solved by the present invention is to provide an identity authentication method, device and system, which can authenticate the user identity through a dynamic password.

[0008] To solve the above technical problems, the embodiments of the present invention provide the following technical solutions:

[0009] On the one hand, an identity authentication method is provided, which is applied to an information publishing device, comprising:

[0010] Receive the user role and dynamic password input by the user;

[0011] Perform an encryption operation based on the user role, the device code of the information publishing device, the current time information, and the secret key of the information publishing device, and generate a verification password based on the result of the encryption operation;

[0012] The dynamic password input by the user is compared with the verification password. If they are consistent, the verification is passed and the function module corresponding to the user role is displayed.

[0013] In some embodiments, the user role of the user is a super administrator, and the functional modules displayed to the super administrator include an identity registration module. After displaying the functional modules corresponding to the user role, the method further includes:

[0014] receiving an identity registration instruction input by the user through the identity registration module, wherein the identity registration instruction includes a correspondence between a user identifier and a user role of another user;

[0015] Storing the correspondence between the user identifier and the user role;

[0016] The user role includes at least one of the following:

[0017] Ordinary administrators, ordinary users.

[0018] In some embodiments, before receiving the user role and dynamic password input by the user, the method further includes:

[0019] Receive the super administrator registration instruction input by the user;

[0020] Generating a device code that uniquely identifies the information publishing device using the physical address and product serial number of the information publishing device;

[0021] displaying the device code to the user;

[0022] Receive the secret key input by the user and store the user role of the super administrator of the user.

[0023] In some embodiments, after receiving the super administrator registration instruction input by the user and before displaying the device code to the user, the method further includes:

[0024] Determine whether the user role of the super administrator has been stored. If the user role of the super administrator has been stored, prompt the user that the super administrator has been registered; if the user role of the super administrator has not been stored, determine that the device code can be displayed to the user.

[0025] An embodiment of the present invention further provides an identity authentication method, applied to a user terminal, comprising:

[0026] Sending a dynamic password application request to the server, wherein the dynamic password application request includes the device code of the information publishing device and the user identifier corresponding to the user terminal;

[0027] receiving a dynamic password sent by the server, where the dynamic password is generated by the server through encryption calculation based on the user role corresponding to the user identifier, the device code of the information publishing device, the current time information, and the secret key of the information publishing device;

[0028] Inputting the dynamic password and user role into the information publishing device;

[0029] The operation is performed through the function module corresponding to the user role displayed by the information publishing device.

[0030] In some embodiments, the user role is a super administrator, the functional modules displayed by the information publishing device include an identity registration module, and the operations performed by the functional modules corresponding to the user role displayed by the information publishing device include:

[0031] Inputting an identity registration instruction into the information publishing device through the identity registration module, wherein the identity registration instruction includes a correspondence between a user identifier and a user role of another user;

[0032] Sending an identity registration request to the server, wherein the identity registration request includes a correspondence between the user identification and user role of the other user and the device code of the information publishing device;

[0033] The user role includes at least one of the following:

[0034] Ordinary administrators, ordinary users.

[0035] In some embodiments, before sending the dynamic password application request to the server, the method further includes:

[0036] Inputting a super administrator registration instruction into the information publishing device;

[0037] Obtaining a device code displayed on a display interface of the information publishing device;

[0038] Sending a super administrator registration request to the server, wherein the super administrator registration request includes the device code and a user identifier corresponding to the user terminal;

[0039] receiving the secret key of the information publishing device returned by the server;

[0040] The secret key is input into the information distributing device.

[0041] An embodiment of the present invention further provides an identity authentication method, applied to a server, comprising:

[0042] Receiving a dynamic password application request sent by a user terminal, the dynamic password application request including a device code of an information publishing device and a user identifier corresponding to the user terminal;

[0043] Verify whether there is a binding relationship between the device code and the user identifier;

[0044] After the verification is passed, an encryption operation is performed based on the user role corresponding to the user identifier, the device code, the current time information and the secret key of the information publishing device, and a dynamic password is generated based on the result of the encryption operation;

[0045] Sending the dynamic password to the user terminal;

[0046] The server pre-stores the corresponding relationship between the device code and the secret key of the information publishing device, and the corresponding relationship between the user identification and the user role.

[0047] In some embodiments, the method further comprises:

[0048] Receive an identity registration request sent by a super administrator user, the identity registration request including a correspondence between a user identifier and a user role of another user and a device code of the information publishing device;

[0049] storing the corresponding relationship;

[0050] The user role includes at least one of the following:

[0051] Ordinary administrators, ordinary users.

[0052] In some embodiments, before receiving the dynamic password application request sent by the user terminal, the method further includes:

[0053] receiving a super administrator registration request sent by a user terminal, wherein the super administrator registration request includes a device code of the information publishing device and a user identifier corresponding to the user terminal;

[0054] Generate a secret key for the information publishing device, and save the corresponding relationship between the secret key, the device code, and the user identifier;

[0055] The secret key is sent to the user terminal.

[0056] An embodiment of the present invention further provides an identity authentication device, which is applied to an information publishing device and includes:

[0057] A first receiving module is used to receive a user role and a dynamic password input by a user;

[0058] a first processing module, configured to perform an encryption operation based on the user role, the device code of the information publishing device, current time information, and a secret key of the information publishing device, and generate a verification password based on the result of the encryption operation;

[0059] The display module is used to compare the dynamic password input by the user with the verification password. If they are consistent, the verification is passed and the function module corresponding to the user role is displayed.

[0060] In some embodiments, the user role of the user is a super administrator, and the functional modules displayed to the super administrator include an identity registration module,

[0061] The first receiving module is further configured to receive an identity registration instruction input by the user through the identity registration module, wherein the identity registration instruction includes a correspondence between a user identifier and a user role of another user;

[0062] The first processing module is further configured to store the correspondence between the user identifier and the user role;

[0063] The user role includes at least one of the following:

[0064] Ordinary administrators, ordinary users.

[0065] In some embodiments, the first receiving module is further configured to receive a super administrator registration instruction input by a user;

[0066] The first processing module is further configured to generate a device code that uniquely identifies the information publishing device using the physical address and product serial number of the information publishing device;

[0067] The display module is further configured to display the device code to the user;

[0068] The first receiving module is further configured to receive a secret key input by the user and store the user role of the super administrator of the user.

[0069] In some embodiments, the first processing module is further used to determine whether the user role of the super administrator has been stored. If the user role of the super administrator has been stored, prompt the user that the super administrator has been registered; if the user role of the super administrator has not been stored, determine whether the device code can be displayed to the user.

[0070] An embodiment of the present invention further provides an identity authentication device, applied to a user terminal, comprising:

[0071] A first sending module is configured to send a dynamic password application request to a server, wherein the dynamic password application request includes a device code of an information publishing device and a user identifier corresponding to the user terminal;

[0072] a second receiving module, configured to receive a dynamic password sent by the server, wherein the dynamic password is generated by the server after performing an encryption operation based on the user role corresponding to the user identifier, the device code of the information publishing device, the current time information, and the secret key of the information publishing device;

[0073] An input module, configured to input the dynamic password and user role into the information publishing device;

[0074] The second processing module is configured to execute an operation through a function module corresponding to the user role displayed by the information publishing device.

[0075] In some embodiments, the user role is a super administrator, and the functional modules displayed by the information publishing device include an identity registration module,

[0076] The input module is further configured to input an identity registration instruction to the information publishing device through the identity registration module, wherein the identity registration instruction includes a correspondence between user identifiers of other users and user roles;

[0077] The first sending module is further configured to send an identity registration request to the server, wherein the identity registration request includes a correspondence between the user identification and user role of other users and the device code of the information publishing device;

[0078] The user role includes at least one of the following:

[0079] Ordinary administrators, ordinary users.

[0080] In some embodiments, the input module is further configured to input a super administrator registration instruction to the information publishing device; obtain a device code displayed on a display interface of the information publishing device;

[0081] The first sending module is further configured to send a super administrator registration request to the server, wherein the super administrator registration request includes the device code and a user identifier corresponding to the user terminal;

[0082] The second receiving module is further configured to receive the secret key of the information publishing device returned by the server;

[0083] The input module is further used to input the secret key into the information publishing device.

[0084] An embodiment of the present invention further provides an identity authentication device, applied to a server, comprising:

[0085] A third receiving module is configured to receive a dynamic password application request sent by a user terminal, wherein the dynamic password application request includes a device code of an information publishing device and a user identifier corresponding to the user terminal;

[0086] A verification module, used to verify whether there is a binding relationship between the device code and the user identification;

[0087] A third processing module is configured to, after verification, perform an encryption operation based on the user role corresponding to the user identifier, the device code, the current time information, and the secret key of the information publishing device, and generate a dynamic password based on the result of the encryption operation;

[0088] A second sending module, configured to send the dynamic password to the user terminal;

[0089] The server pre-stores the corresponding relationship between the device code and the secret key of the information publishing device, and the corresponding relationship between the user identification and the user role.

[0090] In some embodiments, the third receiving module is further configured to receive an identity registration request sent by a super administrator user, the identity registration request including a correspondence between a user identifier and a user role of another user and a device code of the information publishing device; and store the correspondence;

[0091] The user role includes at least one of the following:

[0092] Ordinary administrators, ordinary users.

[0093] In some embodiments, the third receiving module is further configured to receive a super administrator registration request sent by a user terminal, wherein the super administrator registration request includes a device code of the information publishing device and a user identifier corresponding to the user terminal;

[0094] The third processing module is further configured to generate a secret key for the information publishing device and save a corresponding relationship between the secret key, the device code, and the user identifier;

[0095] The second sending module is further configured to send the secret key to the user terminal.

[0096] An embodiment of the present invention further provides an identity authentication system, including a user terminal, an information publishing device and a server, wherein the user terminal includes the identity authentication device described above, the information publishing device includes the identity authentication device described above, and the server includes the identity authentication device described above.

[0097] The embodiments of the present invention have the following beneficial effects:

[0098] In this solution, without requiring the information distribution device to connect to a server, the user terminal can obtain a dynamic password from the server and enter it into the information distribution device. The information distribution device then uses the dynamic password to authenticate and authorize the user. Dynamic passwords are easy to obtain and more secure than conventional fixed passwords, eliminating the risk of password forgetting or leaking. BRIEF DESCRIPTION OF THE DRAWINGS

[0099] Figure 1 This is a flow chart of an identity authentication method for an information publishing device according to an embodiment of the present invention;

[0100] Figure 2 Schematic diagram of the process of user terminal side identity authentication method according to an embodiment of the present invention;

[0101] Figure 3Schematic diagram of the process of the server-side identity authentication method according to an embodiment of the present invention;

[0102] Figure 4 Schematic diagram of the process of the identity authentication method according to an embodiment of the present invention. DETAILED DESCRIPTION

[0103] In order to make the technical problems, technical solutions and advantages to be solved by the embodiments of the present invention clearer, they will be described in detail below with reference to the accompanying drawings and specific embodiments.

[0104] The embodiments of the present invention provide an identity authentication method, device and system, which can authenticate user identity through a dynamic password.

[0105] The embodiment of the present invention provides an identity authentication method, which is applied to an information publishing device, such as Figure 1 As shown, including:

[0106] Step 101: Receive the user role and dynamic password input by the user;

[0107] In this embodiment, the information publishing device can be an advertising machine or other device, and the information publishing device does not need to be connected to the server. Options such as super administrator, ordinary administrator, and ordinary user can be displayed on the display interface of the information publishing device, and the user can select the user role corresponding to the user from the options;

[0108] Step 102: performing an encryption operation based on the user role, the device code of the information publishing device, the current time information, and the secret key of the information publishing device, and generating a verification password based on the result of the encryption operation;

[0109] The current time information can be the current date. Of course, the current time information is not limited to the current date and can also be the current month, etc. When the current time information is the current date, the dynamic password is valid for one day. When the current time information is the current month, the dynamic password is valid for one month. When the current time information is the current date, the dynamic password is valid for one day. The dynamic password can be reused within the same day and is valid. A new dynamic password must be applied for the next day. This design avoids the trouble of repeatedly applying for a dynamic password for repeated logins on the same day, and the dynamic password expires the next day to ensure security.

[0110] Specifically, the user role, the device code of the information publishing device, the current time information and the secret key of the information publishing device can be used to perform MD5 encryption operation, and the result value of the operation, for example 3be754427292776b, can be taken as the verification password 3be754.

[0111] Step 103: Compare the dynamic password input by the user with the verification password. If they are consistent, the verification is passed and the function module corresponding to the user role is displayed.

[0112] For example, when the user role is a super administrator, the function modules displayed to the user include the identity registration module, content editing module, and progress adjustment module; when the user role is a general administrator, the function modules displayed to the user include the content editing module and progress adjustment module; when the user role is a general user, the function modules displayed to the user include the progress adjustment module. The user can perform corresponding operations based on the displayed function modules.

[0113] In this embodiment, while verifying the dynamic password, the user role is authenticated. If the dynamic password verification passes, the current user's level of authority is determined. The information publishing device can choose to display or hide certain functions based on the user's level of authority. In this embodiment, users can be users of all authority levels, including but not limited to super administrators, ordinary administrators, and ordinary users.

[0114] In some embodiments, the user role of the user is a super administrator, and the functional modules displayed to the super administrator include an identity registration module. After displaying the functional modules corresponding to the user role, the method further includes:

[0115] receiving an identity registration instruction input by the user through the identity registration module, wherein the identity registration instruction includes a correspondence between a user identifier and a user role of another user;

[0116] Storing the correspondence between the user identifier and the user role;

[0117] The user role includes at least one of the following:

[0118] Ordinary administrators, ordinary users.

[0119] In this embodiment, the super administrator can add other management users to the information publishing device through the user terminal and assign them level permissions. After the addition is successful, the added management users can also directly apply for the dynamic password of the information publishing device through the user terminal, without the need for other administrators to register users on the information publishing device.

[0120] In some embodiments, before receiving the user role and dynamic password input by the user, the method further includes:

[0121] Receive the super administrator registration instruction input by the user;

[0122] Generating a device code that uniquely identifies the information publishing device using the physical address and product serial number of the information publishing device;

[0123] displaying the device code to the user;

[0124] Receive the secret key input by the user and store the user role of the super administrator of the user.

[0125] In this embodiment, when the information publishing device is activated, the user can register as a super administrator. Generally, only the first user can register as a super administrator.

[0126] In some embodiments, after receiving the super administrator registration instruction input by the user and before displaying the device code to the user, the method further includes:

[0127] The system checks whether the super administrator role is stored. If so, it notifies the user that the super administrator role has been registered. If not, it determines that the device code can be displayed to the user. This prevents other users from registering as super administrators if the super administrator role has already been registered, thus ensuring the information security of the information publishing device.

[0128] The embodiment of the present invention also provides an identity authentication method, which is applied to a user terminal, such as Figure 2 Shown, including:

[0129] Step 201: Send a dynamic password application request to the server, the dynamic password application request including the device code of the information publishing device and the user identifier corresponding to the user terminal;

[0130] The server pre-stores the corresponding relationship between the device code and the secret key of the information publishing device, and the corresponding relationship between the user identification and the user role.

[0131] Step 202: Receive a dynamic password sent by the server, where the dynamic password is generated by the server through encryption calculation based on the user role corresponding to the user identifier, the device code of the information publishing device, the current time information, and the secret key of the information publishing device;

[0132] Specifically, the user role, the device code of the information publishing device, the current time information and the secret key of the information publishing device can be used to perform MD5 encryption operation, and the result value of the operation, for example 3be754427292776b, can be taken as the verification password 3be754.

[0133] Step 203: inputting the dynamic password and user role into the information publishing device;

[0134] The display interface of the information publishing device may display options such as super administrator, ordinary administrator, and ordinary user, and the user may select the user role corresponding to the user from the options.

[0135] Step 204: Execute an operation through the function module corresponding to the user role displayed by the information publishing device.

[0136] For example, when the user role is a super administrator, the functional modules displayed to the user include an identity registration module, a content editing module, a progress adjustment module, etc., through which the user can register identity, edit content, adjust progress, etc.; when the user role is an ordinary administrator, the functional modules displayed to the user include a content editing module, a progress adjustment module, etc., through which the user can edit content, adjust progress, etc.; when the user role is an ordinary user, the functional modules displayed to the user include a progress adjustment module, through which the user can adjust the progress and the progress of the playing commercials.

[0137] In some embodiments, the user role is a super administrator, the functional modules displayed by the information publishing device include an identity registration module, and the operations performed by the functional modules corresponding to the user role displayed by the information publishing device include:

[0138] Inputting an identity registration instruction into the information publishing device through the identity registration module, wherein the identity registration instruction includes a correspondence between a user identifier and a user role of another user;

[0139] Sending an identity registration request to the server, wherein the identity registration request includes a correspondence between the user identification and user role of the other user and the device code of the information publishing device;

[0140] The user role includes at least one of the following:

[0141] Ordinary administrators, ordinary users.

[0142] In this embodiment, the super administrator can add other management users to the information publishing device through the user terminal and assign them level permissions. After the addition is successful, the added management users can also directly apply for the dynamic password of the information publishing device through the user terminal, without the need for other administrators to register users on the information publishing device.

[0143] In some embodiments, before sending the dynamic password application request to the server, the method further includes:

[0144] Inputting a super administrator registration instruction into the information publishing device;

[0145] Obtaining a device code displayed on a display interface of the information publishing device;

[0146] Sending a super administrator registration request to the server, wherein the super administrator registration request includes the device code and a user identifier corresponding to the user terminal;

[0147] receiving the secret key of the information publishing device returned by the server;

[0148] The secret key is input into the information distributing device.

[0149] In this embodiment, when the information publishing device is activated, the user can register as a super administrator. Generally, only the first user can register as a super administrator.

[0150] The embodiment of the present invention also provides an identity authentication method, which is applied to a server, such as Figure 3 As shown, including:

[0151] Step 301: Receive a dynamic password application request sent by a user terminal, wherein the dynamic password application request includes a device code of an information publishing device and a user identifier corresponding to the user terminal;

[0152] The server pre-stores the corresponding relationship between the device code and the secret key of the information publishing device, and the corresponding relationship between the user identification and the user role.

[0153] Step 302: Verify whether there is a binding relationship between the device code and the user identifier;

[0154] The server determines whether the device code in the dynamic password application request is bound to the user ID based on the binding relationship between the device code of the information issuing device and the user ID in advance. If so, the verification is passed; if not, the verification fails.

[0155] Step 303: After the verification is passed, an encryption operation is performed based on the user role corresponding to the user identifier, the device code, the current time information, and the secret key of the information publishing device, and a dynamic password is generated based on the result of the encryption operation;

[0156] Specifically, the user role, the device code of the information publishing device, the current time information and the secret key of the information publishing device can be used to perform MD5 encryption operation, and the result value of the operation, for example 3be754427292776b, can be taken as the verification password 3be754.

[0157] Step 304: Send the dynamic password to the user terminal.

[0158] In some embodiments, the method further comprises:

[0159] Receive an identity registration request sent by a super administrator user, the identity registration request including a correspondence between a user identifier and a user role of another user and a device code of the information publishing device;

[0160] storing the corresponding relationship;

[0161] The user role includes at least one of the following:

[0162] Ordinary administrators, ordinary users.

[0163] In this embodiment, the super administrator can add other management users to the information publishing device through the user terminal and assign them level permissions. After the addition is successful, the added management users can also directly apply for the dynamic password of the information publishing device through the user terminal, without the need for other administrators to register users on the information publishing device.

[0164] In some embodiments, before receiving the dynamic password application request sent by the user terminal, the method further includes:

[0165] receiving a super administrator registration request sent by a user terminal, wherein the super administrator registration request includes a device code of the information publishing device and a user identifier corresponding to the user terminal;

[0166] Generate a secret key for the information publishing device, and save the corresponding relationship between the secret key, the device code, and the user identifier;

[0167] The secret key is sent to the user terminal.

[0168] The identity authentication method of this embodiment is applied between a server, a user terminal and an information publishing device. In a specific embodiment, Figure 4 As shown, the identity authentication method of this embodiment includes the following steps:

[0169] Step 1: The user terminal sends a super administrator registration instruction to the information publishing device;

[0170] After initialization and activation, information publishing devices such as advertising machines can directly register super administrators on the information publishing device. Super administrators are equivalent to root permissions at the system level and have the highest permissions. After the user clicks the Register Super Administrator button displayed on the display interface of the information publishing device, the information publishing device will determine whether it has been registered and activated. If so, the user will be prompted that the super administrator has been registered. If the super administrator has not yet been registered, the user can continue the registration process.

[0171] Step 2: The information publishing device generates a device QR code;

[0172] Registering as a super administrator requires the device code of the information publishing device. In this embodiment, the device code is a combination of the physical address of the information publishing device and its serial number (e.g., the operating system's serial number) to create a unique identification code for the information publishing device. The information publishing device then uses the device code as a parameter to create content, such as mac=c8:5b:76:83:df:cd&sn=324998328. This content is then converted into a QR code and displayed on the information publishing device's interface.

[0173] Step 3: The user terminal obtains the device code;

[0174] The user can scan this QR code through the user terminal and parse the QR code content, which is the device code.

[0175] Step 4: The user terminal sends a super administrator registration request to the server;

[0176] The user terminal submits the device code together with the user ID of the user currently logged in to the server, requesting to register a super administrator.

[0177] Step 5: The server sends the secret key of the information publishing device to the user terminal;

[0178] After receiving the super administrator registration request, the server generates a UUID, which serves as the secret key for the information publishing device. The server stores the correspondence between the device code, user ID, and the secret key for the information publishing device. This correspondence is a one-to-one relationship, and the user is also marked as the super administrator for the information publishing device. The server returns this secret key to the user terminal, which can then communicate with the server through a WeChat mini-program or official account, or using a mobile client developed by the device manufacturer.

[0179] Step 6: The user terminal sends the secret key to the information publishing device.

[0180] The user terminal inputs the secret key of the information publishing device responded by the server into the information publishing device. The secret key will be permanently stored on the information publishing device, and the registration of the super administrator is completed.

[0181] After the super administrator successfully registers, the super administrator can use the dynamic password to log in to the information publishing device. The information publishing device will parse the dynamic password of the user terminal to authenticate and authorize the user. Obtaining a dynamic password is very simple. The user terminal only needs to send a dynamic password application request to the server, and it will immediately receive a valid dynamic password for use. The specific steps are as follows:

[0182] Step 7: The user terminal sends a dynamic password application request to the server;

[0183] The user terminal sends a dynamic password application request to the server, where the dynamic password application request includes the user identification of the current user and the device code of the information publishing device being applied for.

[0184] Step 8: The server sends a dynamic password to the user terminal;

[0185] The server pre-stores the binding relationship between the user identification and the device code, the corresponding relationship between the device code and the secret key of the information publishing device, and the corresponding relationship between the user identification and the user role.

[0186] After receiving a dynamic password request, the server verifies the binding between the user ID and the device code, verifying their legitimacy. Once verified, the server determines the user role associated with the user ID and performs an MD5 encryption operation based on the user role, device code, current date, and the secret key of the information-issuing device. The resulting value (for example, 3be754427292776b) is then encrypted with the first six digits as the dynamic password 3be754.

[0187] Step 9: The user terminal sends a dynamic password to the information publishing device.

[0188] After receiving the dynamic password through the user terminal, the user can enter the dynamic password and user role on the information publishing device. The information publishing device verifies the correctness of the dynamic password. Specifically, it performs an MD5 encryption operation based on the entered user role, device code, current date, and the information publishing device's secret key. The first 6 digits of the result are used as the verification password. The verification password is compared with the entered dynamic password. If they are the same, the dynamic password is correct and the user's identity is legitimate.

[0189] Because the signature algorithm used to generate the verification password uses the user role, users must select their role when entering the dynamic password. This not only verifies the user's legitimacy but also confirms their role. The information publishing device can then decide whether to display or hide related functional modules based on the user's role.

[0190] The dynamic password is calculated from the user role, device code, current date, and the information publishing device's secret key. After the user selects an information publishing device, the device code is a fixed value. The user role is determined by the current user's user ID. A user can only have one role on an information publishing device, such as super administrator. The user role can be retrieved by the server through a backend query using the user ID submitted by the user. The current date could be, for example, 20220502. The information publishing device's secret key is bound to the device code one-to-one and can be directly obtained by the server. The encryption formula can be md5(mac+sn+roleId+date+uuid). The first 6 digits of the result obtained from this formula are the dynamic password applied for this time. The information publishing device uses the same algorithm to compare the result as the verification password with the dynamic password entered by the user.

[0191] The signature algorithm of the dynamic password uses the current date as one of its parameters, so the validity period of the dynamic password applied for is one day by default. The dynamic password can be reused within one day and needs to be re-applied the next day. It is both safe and flexible.

[0192] When the server generates a dynamic password, it needs the user role, which is stored directly on the server. The current user role is directly matched based on the current user and the information publishing device. When the information publishing device generates the verification password, the user role is selected by the user on the information publishing device interface.

[0193] For security and flexibility, when adding additional administrator accounts, users do not need to scan a QR code to register. Instead, the super administrator can directly specify the user role of each user on the information publishing device from the user terminal and submit an identity registration request to the server. Upon receiving the identity registration request, the server binds the corresponding user to the information publishing device. During the initial activation of the information publishing device, only the super administrator scans the QR code to register and bind. Regular administrators and regular users are bound and assigned roles directly by the super administrator on the user terminal.

[0194] The information publishing device of this embodiment can authenticate and authorize the user's identity by parsing the dynamic password input by the user in the absence of a server side, thereby solving the problem that the existing stand-alone device that is not connected to the Internet can only use fixed passwords, resulting in password leakage and forgotten passwords, and also solving the problem that the use of fixed passwords cannot distinguish between users of different levels. In this embodiment, the registration of the super administrator of the information publishing device can be realized. When the information publishing device is activated in the initial state, it is bound to the super administrator. The information publishing device will no longer be in an unmanaged state. Each information publishing device can only register one super administrator. The registration of other administrators can be directly added by the super administrator on the user terminal, and multiple users can be added. Whether it is a super administrator, an ordinary administrator or an ordinary user, a dynamic password can be directly obtained through the user terminal. The dynamic password can be composed of 6 letters or numbers. The operation is simple and convenient. The user directly inputs the 6-digit password obtained by the user terminal into the information publishing device. The information publishing device can complete the authentication of the legitimacy of the password by parsing the dynamic password. In addition, this embodiment incorporates user level authentication during the process of verifying the legitimacy of the dynamic password. This identity authentication method can be used by users of different levels of authority, authenticating not only the legitimacy of the current user but also their authority. Through the technical solution of this embodiment, even when a stand-alone information publishing device is disconnected from the Internet, all users can obtain dynamic passwords in real time on their terminals, eliminating the need for fixed passwords. This improves security and convenience.

[0195] An embodiment of the present invention further provides an identity authentication device, which is applied to an information publishing device and includes:

[0196] A first receiving module is used to receive a user role and a dynamic password input by a user;

[0197] a first processing module, configured to perform an encryption operation based on the user role, the device code of the information publishing device, current time information, and a secret key of the information publishing device, and generate a verification password based on the result of the encryption operation;

[0198] The display module is used to compare the dynamic password input by the user with the verification password. If they are consistent, the verification is passed and the function module corresponding to the user role is displayed.

[0199] In this embodiment, without requiring the information distribution device to connect to a server, the user terminal can obtain a dynamic password from the server and enter it into the information distribution device. The information distribution device then uses the dynamic password to authenticate and authorize the user. Dynamic passwords are easy to obtain and more secure than conventional fixed passwords, eliminating the risk of password forgetting or password leakage.

[0200] In some embodiments, the user role of the user is a super administrator, and the functional modules displayed to the super administrator include an identity registration module,

[0201] The first receiving module is further configured to receive an identity registration instruction input by the user through the identity registration module, wherein the identity registration instruction includes a correspondence between a user identifier and a user role of another user;

[0202] The first processing module is further configured to store the correspondence between the user identifier and the user role;

[0203] The user role includes at least one of the following:

[0204] Ordinary administrators, ordinary users.

[0205] In some embodiments, the first receiving module is further configured to receive a super administrator registration instruction input by a user;

[0206] The first processing module is further configured to generate a device code that uniquely identifies the information publishing device using the physical address and product serial number of the information publishing device;

[0207] The display module is further configured to display the device code to the user;

[0208] The first receiving module is further configured to receive a secret key input by the user and store the user role of the super administrator of the user.

[0209] In some embodiments, the first processing module is further used to determine whether the user role of the super administrator has been stored. If the user role of the super administrator has been stored, prompt the user that the super administrator has been registered; if the user role of the super administrator has not been stored, determine whether the device code can be displayed to the user.

[0210] An embodiment of the present invention further provides an identity authentication device, applied to a user terminal, comprising:

[0211] A first sending module is configured to send a dynamic password application request to a server, wherein the dynamic password application request includes a device code of an information publishing device and a user identifier corresponding to the user terminal;

[0212] a second receiving module, configured to receive a dynamic password sent by the server, wherein the dynamic password is generated by the server after performing an encryption operation based on the user role corresponding to the user identifier, the device code of the information publishing device, the current time information, and the secret key of the information publishing device;

[0213] An input module, configured to input the dynamic password and user role into the information publishing device;

[0214] The second processing module is configured to execute an operation through a function module corresponding to the user role displayed by the information publishing device.

[0215] In some embodiments, the user role is a super administrator, and the functional modules displayed by the information publishing device include an identity registration module,

[0216] The input module is further configured to input an identity registration instruction to the information publishing device through the identity registration module, wherein the identity registration instruction includes a correspondence between user identifiers of other users and user roles;

[0217] The first sending module is further configured to send an identity registration request to the server, wherein the identity registration request includes a correspondence between the user identification and user role of other users and the device code of the information publishing device;

[0218] The user role includes at least one of the following:

[0219] Ordinary administrators, ordinary users.

[0220] In some embodiments, the input module is further configured to input a super administrator registration instruction to the information publishing device; obtain a device code displayed on a display interface of the information publishing device;

[0221] The first sending module is further configured to send a super administrator registration request to the server, wherein the super administrator registration request includes the device code and a user identifier corresponding to the user terminal;

[0222] The second receiving module is further configured to receive the secret key of the information publishing device returned by the server;

[0223] The input module is further used to input the secret key into the information publishing device.

[0224] An embodiment of the present invention further provides an identity authentication device, applied to a server, comprising:

[0225] A third receiving module is configured to receive a dynamic password application request sent by a user terminal, wherein the dynamic password application request includes a device code of an information publishing device and a user identifier corresponding to the user terminal;

[0226] A verification module, used to verify whether there is a binding relationship between the device code and the user identification;

[0227] A third processing module is configured to, after verification, perform an encryption operation based on the user role corresponding to the user identifier, the device code, the current time information, and the secret key of the information publishing device, and generate a dynamic password based on the result of the encryption operation;

[0228] A second sending module, configured to send the dynamic password to the user terminal;

[0229] The server pre-stores the corresponding relationship between the device code and the secret key of the information publishing device, and the corresponding relationship between the user identification and the user role.

[0230] In some embodiments, the third receiving module is further configured to receive an identity registration request sent by a super administrator user, the identity registration request including a correspondence between a user identifier and a user role of another user and a device code of the information publishing device; and store the correspondence;

[0231] The user role includes at least one of the following:

[0232] Ordinary administrators, ordinary users.

[0233] In some embodiments, the third receiving module is further configured to receive a super administrator registration request sent by a user terminal, wherein the super administrator registration request includes a device code of the information publishing device and a user identifier corresponding to the user terminal;

[0234] The third processing module is further configured to generate a secret key for the information publishing device and save a corresponding relationship between the secret key, the device code, and the user identifier;

[0235] The second sending module is further configured to send the secret key to the user terminal.

[0236] An embodiment of the present invention further provides an identity authentication system, including a user terminal, an information publishing device and a server, wherein the user terminal includes the identity authentication device described above, the information publishing device includes the identity authentication device described above, and the server includes the identity authentication device described above.

[0237] An embodiment of the present invention further provides an identity authentication device, comprising a processor and a memory, wherein the memory stores a program or instruction that can be run on the processor, and the program or instruction, when executed by the processor, implements the steps of the above method.

[0238] In the various method embodiments of the present invention, the serial numbers of the steps cannot be used to limit the order of the steps. For ordinary technicians in this field, without paying any creative work, changes to the order of the steps are also within the scope of protection of the present invention.

[0239] It should be noted that, in this article, the terms "comprise", "include" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device comprising a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or device. In the absence of further restrictions, an element defined by the statement "comprises a ..." does not exclude the presence of other identical elements in the process, method, article or device comprising the element. In addition, it should be noted that the scope of the methods and devices in the embodiments of the present application is not limited to performing functions in the order shown or discussed, and may also include performing functions in a substantially simultaneous manner or in the opposite order according to the functions involved. For example, the described method may be performed in an order different from that described, and various steps may also be added, omitted, or combined. In addition, the features described with reference to certain examples may be combined in other examples.

[0240] Through the description of the above implementation methods, those skilled in the art can clearly understand that the above-mentioned embodiment methods can be implemented by means of software plus the necessary general hardware platform, and of course can also be implemented by hardware, but in many cases the former is a better implementation method. Based on this understanding, the technical solution of the present application, or the part that contributes to the prior art, can be embodied in the form of a computer software product, which is stored in a storage medium (such as ROM / RAM, magnetic disk, optical disk), and includes a number of instructions for enabling a terminal (which can be a mobile phone, computer, server, air conditioner, or network device, etc.) to execute the methods described in each embodiment of the present application.

[0241] The embodiments of the present application are described above in conjunction with the accompanying drawings, but the present application is not limited to the above-mentioned specific implementation methods. The above-mentioned specific implementation methods are merely illustrative and not restrictive. Under the guidance of this application, ordinary technicians in this field can also make many forms without departing from the purpose of this application and the scope of protection of the claims, all of which are within the protection of this application.

Claims

1. An identity authentication method, characterized in that: Applicable to information publishing equipment, including: Receiving a user role and a dynamic password input by a user, wherein the dynamic password is generated by the server after the user terminal sends a dynamic password application request including the device code of the information publishing device and the user identification corresponding to the user terminal, and the server performs an encryption operation based on the user role corresponding to the user identification, the device code of the information publishing device, the current time information, and the secret key of the information publishing device; Perform an encryption operation based on the user role, the device code of the information publishing device, the current time information, and the secret key of the information publishing device, and generate a verification password based on the result of the encryption operation; Compare the dynamic password entered by the user with the verification password. If they are consistent, the verification is passed and the function module corresponding to the user role is displayed; Before receiving the user role and dynamic password input by the user, the method further includes: Receive the super administrator registration instruction input by the user; Generating a device code that uniquely identifies the information publishing device using the physical address and product serial number of the information publishing device; displaying the device code to the user; Receive the secret key input by the user and store the user role of the super administrator of the user.

2. The method according to claim 1, characterized in that The user role of the user is a super administrator, and the functional modules displayed to the super administrator include an identity registration module. After displaying the functional modules corresponding to the user role, the method further includes: receiving an identity registration instruction input by the user through the identity registration module, wherein the identity registration instruction includes a correspondence between a user identifier and a user role of another user; Storing the correspondence between the user identifier and the user role; The user role includes at least one of the following: Ordinary administrators, ordinary users.

3. The method according to claim 1, characterized in that After receiving the super administrator registration instruction input by the user and before displaying the device code to the user, the method further includes: Determine whether the user role of the super administrator has been stored. If the user role of the super administrator has been stored, prompt the user that the super administrator has been registered; if the user role of the super administrator has not been stored, determine that the device code can be displayed to the user.

4. An identity authentication method, characterized in that: Applied to user terminals, including: Sending a dynamic password application request to the server, wherein the dynamic password application request includes the device code of the information publishing device and the user identifier corresponding to the user terminal; receiving a dynamic password sent by the server, where the dynamic password is generated by the server through encryption calculation based on the user role corresponding to the user identifier, the device code of the information publishing device, the current time information, and the secret key of the information publishing device; Inputting the dynamic password and user role into the information publishing device; Executing an operation through a function module corresponding to the user role displayed by the information publishing device; Before sending the dynamic password application request to the server, the method further includes: Inputting a super administrator registration instruction into the information publishing device; Obtaining a device code displayed on a display interface of the information publishing device; Sending a super administrator registration request to the server, wherein the super administrator registration request includes the device code and a user identifier corresponding to the user terminal; receiving the secret key of the information publishing device returned by the server; The secret key is input into the information distributing device.

5. The method according to claim 4, characterized in that The user role is a super administrator, the functional modules displayed by the information publishing device include an identity registration module, and the operations performed by the functional modules corresponding to the user role displayed by the information publishing device include: Inputting an identity registration instruction into the information publishing device through the identity registration module, wherein the identity registration instruction includes a correspondence between a user identifier and a user role of another user; Sending an identity registration request to the server, wherein the identity registration request includes a correspondence between the user identification and user role of the other user and the device code of the information publishing device; The user role includes at least one of the following: Ordinary administrators, ordinary users.

6. An identity authentication method, characterized in that: Applicable to servers, including: Receiving a dynamic password application request sent by a user terminal, the dynamic password application request including a device code of an information publishing device and a user identifier corresponding to the user terminal; Verify whether there is a binding relationship between the device code and the user identifier; After the verification is passed, an encryption operation is performed based on the user role corresponding to the user identifier, the device code, the current time information and the secret key of the information publishing device, and a dynamic password is generated based on the result of the encryption operation; Sending the dynamic password to the user terminal; The server pre-stores the corresponding relationship between the device code and the secret key of the information publishing device, and the corresponding relationship between the user identification and the user role; Before receiving the dynamic password application request sent by the user terminal, the method further includes: receiving a super administrator registration request sent by a user terminal, wherein the super administrator registration request includes a device code of the information publishing device and a user identifier corresponding to the user terminal; Generate a secret key for the information publishing device, and save the corresponding relationship between the secret key, the device code, and the user identifier; The secret key is sent to the user terminal.

7. The method according to claim 6, characterized in that The method further comprises: Receive an identity registration request sent by a super administrator user, the identity registration request including a correspondence between a user identifier and a user role of another user and a device code of the information publishing device; storing the corresponding relationship; The user role includes at least one of the following: Ordinary administrators, ordinary users.

8. An identity authentication device, characterized in that: Applicable to information publishing equipment, including: A first receiving module is configured to receive a user role and a dynamic password input by a user, wherein the dynamic password is generated by the server after a user terminal sends a dynamic password application request including a device code of an information publishing device and a user identifier corresponding to the user terminal to a server, and the server performs an encryption operation based on the user role corresponding to the user identifier, the device code of the information publishing device, current time information, and a secret key of the information publishing device; a first processing module, configured to perform an encryption operation based on the user role, the device code of the information publishing device, current time information, and a secret key of the information publishing device, and generate a verification password based on the result of the encryption operation; A display module is used to compare the dynamic password input by the user with the verification password. If they are consistent, the verification is passed and the function module corresponding to the user role is displayed; The first receiving module is further configured to receive a super administrator registration instruction input by a user; The first processing module is further configured to generate a device code that uniquely identifies the information publishing device using the physical address and product serial number of the information publishing device; The display module is further configured to display the device code to the user; The first receiving module is further configured to receive a secret key input by the user and store the user role of the super administrator of the user.

9. The device according to claim 8, characterized in that The user role of the user is a super administrator, and the function modules displayed to the super administrator include an identity registration module, The first receiving module is further configured to receive an identity registration instruction input by the user through the identity registration module, wherein the identity registration instruction includes a correspondence between a user identifier and a user role of another user; The first processing module is further configured to store the correspondence between the user identifier and the user role; The user role includes at least one of the following: Ordinary administrators, ordinary users.

10. The device according to claim 8, characterized in that The first processing module is further configured to determine whether the super administrator's user role has been stored, and if so, to prompt the user that the super administrator has been registered; and if not, to determine whether the device code can be displayed to the user.

11. An identity authentication device, characterized in that: Applied to user terminals, including: A first sending module is configured to send a dynamic password application request to a server, wherein the dynamic password application request includes a device code of an information publishing device and a user identifier corresponding to the user terminal; a second receiving module, configured to receive a dynamic password sent by the server, wherein the dynamic password is generated by the server after performing an encryption operation based on the user role corresponding to the user identifier, the device code of the information publishing device, the current time information, and the secret key of the information publishing device; An input module, configured to input the dynamic password and user role into the information publishing device; A second processing module, configured to execute an operation through a function module corresponding to the user role displayed by the information publishing device; The input module is further used to input a super administrator registration instruction to the information publishing device; obtain a device code displayed on a display interface of the information publishing device; The first sending module is further configured to send a super administrator registration request to the server, wherein the super administrator registration request includes the device code and a user identifier corresponding to the user terminal; The second receiving module is further configured to receive the secret key of the information publishing device returned by the server; The input module is further used to input the secret key into the information publishing device.

12. The device according to claim 11, characterized in that The user role is a super administrator, and the functional modules displayed by the information publishing device include an identity registration module, The input module is further configured to input an identity registration instruction to the information publishing device through the identity registration module, wherein the identity registration instruction includes a correspondence between user identifiers of other users and user roles; The first sending module is further configured to send an identity registration request to the server, wherein the identity registration request includes a correspondence between the user identification and user role of other users and the device code of the information publishing device; The user role includes at least one of the following: Ordinary administrators, ordinary users.

13. An identity authentication device, characterized in that: Applicable to servers, including: A third receiving module is configured to receive a dynamic password application request sent by a user terminal, wherein the dynamic password application request includes a device code of an information publishing device and a user identifier corresponding to the user terminal; A verification module, used to verify whether there is a binding relationship between the device code and the user identification; A third processing module is configured to, after verification, perform an encryption operation based on the user role corresponding to the user identifier, the device code, the current time information, and the secret key of the information publishing device, and generate a dynamic password based on the result of the encryption operation; A second sending module, configured to send the dynamic password to the user terminal; The server pre-stores the corresponding relationship between the device code and the secret key of the information publishing device, and the corresponding relationship between the user identification and the user role; The third receiving module is further configured to receive a super administrator registration request sent by a user terminal, wherein the super administrator registration request includes a device code of the information publishing device and a user identifier corresponding to the user terminal; The third processing module is further configured to generate a secret key for the information publishing device and save a corresponding relationship between the secret key, the device code, and the user identifier; The second sending module is further configured to send the secret key to the user terminal.

14. The device according to claim 13, characterized in that The third receiving module is further configured to receive an identity registration request sent by a super administrator user, the identity registration request including a correspondence between a user identifier of another user, a user role, and a device code of the information publishing device; and store the correspondence; The user role includes at least one of the following: Ordinary administrators, ordinary users.

15. An identity authentication system, characterized in that: It includes a user terminal, an information publishing device and a server, the user terminal includes the identity authentication device according to any one of claims 11-12, the information publishing device includes the identity authentication device according to any one of claims 8-10, and the server includes the identity authentication device according to any one of claims 13-14.

Images