A Remote Unlocking Method and System for a Terminal Device

Abstract

The present invention provides a remote unlocking method and system for a terminal device. An NFC chip is provided on the terminal device. The method includes: when the terminal is locked, encrypting the locking information with a preset manufacturer public key and setting it into the analog card data, and switching the terminal NFC to the analog card state; downloading the manufacturer APK through a handheld device with NFC function, approaching the terminal device with the handheld device, reading the NFC analog card ID number of the terminal device and transmitting it to the background server; the background server searches for the corresponding key according to the ID number and performs key authentication for the NFC analog card; after successful authentication, obtaining the encrypted locking information; the background server decrypts the locking information with the manufacturer private key, calculates the unlocking information, encrypts the unlocking information with the terminal public key and writes it into the NFC analog card; the terminal device decrypts it with the terminal private key to obtain the unlocking information, verifies it and executes the unlocking operation to complete remote unlocking. The present invention realizes the remote unlocking function without a wireless communication module (GSM / WIFI / Bluetooth, etc.).

Description

Technical Field

[0001] The present invention relates to the field of communication technologies, and particularly to a method and system for remotely unlocking a terminal device. Background Art

[0002] When a mobile terminal device is locked and cannot be unlocked by a customer, it is usually possible to use the wireless communication module of the mobile terminal (including GSM / WIFI / Bluetooth, etc.) to perform wireless remote unlocking to solve the problem. However, not all terminals are equipped with a wireless communication module. For example, terminals such as keyboards in public places usually do not have a wireless communication module, and such terminals cannot be remotely unlocked through the above method. Therefore, in the case of inability to unlock, the device can only be sent back to the production line for unlocking. Such an operation causes the customer to have no device to use for a period of time, resulting in low service satisfaction, and sending back the device also requires additional express delivery costs, increasing the product repair cost. Summary of the Invention

[0003] The technical problem to be solved by the present invention is to provide a method and system for remotely unlocking a terminal device, so as to solve the problem that the existing communication modules such as Bluetooth cannot be used for remote unlocking.

[0004] In a first aspect, the present invention provides a method for remotely unlocking a terminal device, where an NFC chip is provided on the terminal device, and the method includes:

[0005] Step S1: When the terminal is locked, encrypt the lock information with a pre-set manufacturer public key and set it into the analog card data, switch the terminal NFC to the analog card state, and use the serial number of the terminal device as the ID number of the analog card;

[0006] Step S2: Download the manufacturer APK through a handheld device with NFC function and establish a communication connection with the background server;

[0007] Step S3: Bring the handheld device close to the terminal device, and the manufacturer APK reads the ID number of the terminal device NFC analog card and transmits the ID number to the background server;

[0008] Step S4: The background server searches for the card key bound to the terminal device according to the ID number and performs key authentication on the NFC analog card;

[0009] Step S5: After the card key authentication is successful, obtain the encrypted lock information and upload it to the background server;

[0010] Step S6: The background server decrypts the lock information with the manufacturer private key, calculates the unlock information, encrypts the unlock information with the terminal public key and then issues it to the manufacturer APK, and the manufacturer APK writes the unlock information into the NFC analog card;

[0011] Step S7: The terminal device decrypts the simulated card unlocking information with the terminal private key. After the unlocking information is verified, the unlocking operation is performed to complete the remote unlocking.

[0012] Furthermore, before step S1, the step further includes:

[0013] Step S0: Generate a correspondence table between serial number and card key in advance, and send the serial number and the corresponding card key to the designated terminal device through the factory tool, generate a public-private key pair in the terminal device, collect the terminal public key before leaving the factory and bind it with the corresponding terminal serial number.

[0014] Furthermore, the step S4 specifically includes: the background server searches for the corresponding serial number according to the ID number, and searches for the card key pre-bound to the serial number, and sends it to the manufacturer APK in a session key encrypted manner. The manufacturer APK uses the corresponding session key to decrypt and obtain the card key, and performs key authentication of the NFC simulated card.

[0015] Furthermore, the manufacturer's public key is embedded in the terminal device program.

[0016] Furthermore, the step S2 also includes: performing TLS two-way authentication with the backend server through the manufacturer's APK.

[0017] In a second aspect, the present invention provides a remote unlocking system for a terminal device, wherein the terminal device is provided with an NFC chip, and the system comprises:

[0018] The locking module is used to encrypt the locking information with the preset manufacturer's public key and set it into the simulated card data when the terminal is locked, switch the terminal NFC to the simulated card state, and use the serial number of the terminal device as the ID number of the simulated card;

[0019] The device authentication module is used to download the manufacturer's APK through a handheld device with NFC function and establish a communication connection with the backend server;

[0020] A card reader module, used to bring the handheld device close to the terminal device, and the manufacturer APK reads the ID number of the NFC analog card of the terminal device and transmits the ID number to the background server;

[0021] A card authentication module, used for the backend server to search for the card key bound to the terminal device according to the ID number and perform key authentication of the NFC simulated card;

[0022] The lock information acquisition module is used to obtain the encrypted lock information and upload it to the backend server after the card key authentication is successful;

[0023] The unlocking information acquisition module is used for the backend server to decrypt the locking information using the manufacturer's private key, calculate the unlocking information, encrypt the unlocking information with the terminal public key and send it to the manufacturer's APK, which writes the unlocking information to the NFC simulation card; and

[0024] The unlocking operation module is used for the terminal device to decrypt the simulated card unlocking information with the terminal private key, and after the unlocking information is verified, the unlocking operation is performed to complete the remote unlocking.

[0025] Furthermore, the system also includes:

[0026] The device binding module is used to pre-generate a correspondence table between serial numbers and card keys, and send serial numbers and corresponding card keys to designated terminal devices through factory tools, generate public and private key pairs on the terminal devices, collect the terminal public key before leaving the factory and bind it to the corresponding terminal serial number.

[0027] Furthermore, the card authentication module specifically includes: a backend server is used to search for the corresponding serial number according to the ID number, and search for the card key pre-bound to the serial number, and send it to the manufacturer APK in a session key encrypted manner. The manufacturer APK uses the corresponding session key to decrypt and obtain the card key, and performs key authentication of the NFC simulated card.

[0028] Furthermore, the manufacturer's public key is embedded in the terminal device program.

[0029] Furthermore, the device authentication module also includes: performing TLS two-way authentication with the backend server through the manufacturer's APK.

[0030] One or more technical solutions provided by the present invention have at least the following technical effects or advantages: by setting the terminal device to be unlocked to the simulated card state, the terminal serial number is used as the simulated card ID to realize the simulated card one card one password function, and then the unlocking function is realized by generating a public and private key pair by the terminal, ensuring the terminal one device one password function, and using handheld devices such as NFC mobile phones to obtain terminal device information and transmit it to the background server for unlocking operations, remote unlocking is realized, the cost of returning to the factory for repair is reduced, and the customer experience is improved.

[0031] The above description is only an overview of the technical solution of the present invention. In order to more clearly understand the technical means of the present invention, it can be implemented according to the contents of the specification. In order to make the above and other purposes, features and advantages of the present invention more obvious and easy to understand, the specific implementation methods of the present invention are listed below. BRIEF DESCRIPTION OF THE DRAWINGS

[0032] The present invention will be further described below in conjunction with embodiments with reference to the accompanying drawings.

[0033] Figure 1It is the execution flowchart of a remote unlocking method for a terminal device according to the present invention;

[0034] Figure 2 It is the structural block diagram of a remote unlocking system for a terminal device according to the present invention;

[0035] Figure 3 It is the schematic diagram of device connection in a specific embodiment of the present invention.

[0036] Figure 4 It is the execution flowchart in a specific embodiment of the present invention. Detailed implementation manners Embodiment 1

[0037] This embodiment provides a remote unlocking method for a terminal device. As shown in Figure 1 、 Figure 3 and Figure 4 , an NFC chip is provided on the terminal device. The method includes:

[0038] Step S1: When the terminal is locked, the locking information is encrypted with the preset manufacturer public key and set into the analog card data at the same time. The terminal NFC is switched to the analog card state, and the serial number of the terminal device is used as the ID number of the analog card;

[0039] Step S2: Download the manufacturer APK through a handheld device with NFC function, and establish a communication connection with the background server; this handheld device can be a handheld device such as a mobile phone, and can establish a wireless connection with the background server; the main function of the APK is to transmit the information of the terminal device to the background server and transmit the data of the background server to the terminal device.

[0040] Step S3: Bring the handheld device close to the terminal device. The manufacturer APK reads the ID number of the terminal device NFC analog card and transmits the ID number to the background server;

[0041] Step S4: The background server searches for the card key bound to the terminal device according to the ID number and performs the key authentication of the NFC analog card;

[0042] Step S5: After the card key authentication is successful, obtain the encrypted locking information and upload it to the background server;

[0043] Step S6: The background server decrypts the locking information with the manufacturer private key, calculates the unlocking information, encrypts the unlocking information with the terminal public key and then issues it to the manufacturer APK. The manufacturer APK writes the unlocking information into the NFC analog card;

[0044] Step S7: The terminal device decrypts the unlocking information of the analog card with the terminal private key. After the unlocking information is verified, perform the unlocking operation to complete the remote unlocking.

[0045] Preferably, before step S1, the step further includes:

[0046] Step S0: Generate a correspondence table between serial number and card key in advance, and send the serial number and the corresponding card key to the designated terminal device through the factory tool, generate a public-private key pair in the terminal device, collect the terminal public key before leaving the factory and bind it with the corresponding terminal serial number.

[0047] Preferably, step S4 specifically includes: the background server searches for the corresponding serial number according to the ID number, and searches for the card key pre-bound to the serial number, and sends it to the manufacturer APK in a session key encrypted manner. The manufacturer APK uses the corresponding session key to decrypt and obtain the card key, and performs key authentication of the NFC simulated card.

[0048] Preferably, the manufacturer's public key is embedded in the terminal device program.

[0049] Preferably, the step S2 further includes: performing TLS two-way authentication with the backend server through the manufacturer's APK.

[0050] Based on the same inventive concept, the present application also provides a system corresponding to the method in Example 1, see Example 2 for details. Embodiment 2

[0051] In this embodiment, a remote unlocking system for a terminal device is provided. Figures 2 to 4 As shown, the terminal device is provided with an NFC chip, and the system includes:

[0052] The locking module is used to encrypt the locking information with the preset manufacturer's public key and set it into the simulated card data when the terminal is locked, switch the terminal NFC to the simulated card state, and use the serial number of the terminal device as the ID number of the simulated card;

[0053] The device authentication module is used to download the manufacturer's APK through a handheld device with NFC function and establish a communication connection with the background server; the handheld device can be a handheld device such as a mobile phone, which can establish a wireless connection with the background server; the main function of the APK is to transmit the information of the terminal device to the background server, and transmit the data of the background server to the terminal device.

[0054] The card reader module is used to bring the handheld device close to the terminal device, and the manufacturer APK reads the ID number of the NFC analog card of the terminal device and transmits the ID number to the backend server; the manufacturer APK is provided with a user login module, an NFC card reading and writing module, and a communication module for communicating with the backend server;

[0055] A card authentication module, used for the backend server to search for the card key bound to the terminal device according to the ID number and perform key authentication of the NFC simulated card;

[0056] The lock information acquisition module is used to obtain the encrypted lock information and upload it to the backend server after the card key authentication is successful;

[0057] The unlocking information acquisition module is used for the backend server to decrypt the locking information using the manufacturer's private key, calculate the unlocking information, encrypt the unlocking information with the terminal public key and send it to the manufacturer's APK, which writes the unlocking information to the NFC simulation card; and

[0058] The unlocking operation module is used for the terminal device to decrypt the simulated card unlocking information with the terminal private key, and after the unlocking information is verified, the unlocking operation is performed to complete the remote unlocking.

[0059] Preferably, the system further comprises:

[0060] The device binding module is used to pre-generate a correspondence table between serial numbers and card keys, and send serial numbers and corresponding card keys to designated terminal devices through factory tools, generate public and private key pairs on the terminal devices, collect the terminal public key before leaving the factory and bind it to the corresponding terminal serial number.

[0061] Preferably, the card authentication module specifically includes: a backend server is used to search for the corresponding serial number according to the ID number, and search for the card key pre-bound to the serial number, and send it to the manufacturer's APK in a session key encrypted manner. The manufacturer's APK uses the corresponding session key to decrypt and obtain the card key, and performs key authentication of the NFC simulated card.

[0062] Preferably, the manufacturer's public key is embedded in the terminal device program.

[0063] Preferably, the device authentication module further includes: performing TLS two-way authentication with a backend server via the manufacturer's APK.

[0064] Since the system introduced in the second embodiment of the present invention is a system used to implement the method of the first embodiment of the present invention, those skilled in the art can understand the specific structure and deformation of the system based on the method introduced in the first embodiment of the present invention, so it is not described in detail here. All devices used in the method of the first embodiment of the present invention belong to the scope of protection of the present invention.

[0065] The technical solutions provided in the embodiments of this application have at least the following technical effects or advantages: The method and system provided in the embodiments of this application achieve the remote unlocking function without a wireless communication module (including GSM / WIFI / bluetooth, etc.). By switching the device to be unlocked to an analog card and setting the analog card as the device serial number, reading the card number by another device with NFC function and sending it to the background server, the background server realizes card authentication by issuing a pre-bound card key, then reads the lock information corresponding to the analog card, and after decrypting it through the background server, forwards it to the terminal to be unlocked by the device with NFC function, realizing remote decryption. This method does not require a dedicated common communication module to achieve remote unlocking, and only needs to utilize the original NFC function of the terminal device to achieve remote unlocking of the device, solving the unnecessary trouble of the existing need for factory repair, reducing the maintenance cost, and improving customer satisfaction.

[0066] Those skilled in the art should understand that the embodiments of the present invention can be provided as a method, a system, or a computer program product. Therefore, the present invention can be implemented in the form of a complete hardware embodiment, a complete software embodiment, or an embodiment combining software and hardware aspects. Moreover, the present invention can be implemented in the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.

[0067] The present invention is described with reference to the flowcharts and / or block diagrams of methods, devices (systems), and computer program products according to the embodiments of the present invention. It should be understood that each process and / or block in the flowchart and / or block diagram can be implemented by computer program instructions, and the combination of the processes and / or blocks in the flowchart and / or block diagram can also be implemented by computer program instructions. These computer program instructions can be provided to the processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing devices to generate a machine, so that the instructions executed by the processor of the computer or other programmable data processing devices generate a device for realizing the functions specified in Figure 1 one process or multiple processes and / or blocks Figure 1 one block or multiple blocks.

[0068] These computer program instructions can also be stored in a computer-readable memory that can direct a computer or other programmable data processing device to work in a specific manner, so that the instructions stored in the computer-readable memory generate a manufactured article including an instruction device, and the instruction device realizes the functions specified in Figure 1 one process or multiple processes and / or blocks Figure 1 one block or multiple blocks.

[0069] These computer program instructions can also be loaded onto a computer or other programmable data processing apparatus, so that a series of operation steps are performed on the computer or other programmable apparatus to generate a computer-implemented process, and thus the instructions executed on the computer or other programmable apparatus provide steps for implementing the functions specified in one process or a plurality of processes and / or boxes Figure 1 one process or a plurality of processes and / or boxes Figure 1 steps for implementing the functions specified in one box or a plurality of boxes.

[0070] Although the specific embodiments of the present invention have been described above, those skilled in the art of this technology should understand that the specific embodiments we described are illustrative rather than limiting the scope of the present invention. Equivalent modifications and variations made by those skilled in the art in accordance with the spirit of the present invention should be covered by the scope of protection of the claims of the present invention.

Claims

1. A remote unlocking method for a terminal device, Features: The terminal device is provided with an NFC chip, and the method comprises: Step S1, when the terminal is locked, the locking information is encrypted with the preset manufacturer's public key and set into the simulated card data, the terminal NFC is switched to the simulated card state, and the serial number of the terminal device is used as the ID number of the simulated card; Step S2: Download the manufacturer's APK through a handheld device with NFC function and establish a communication connection with the background server; Step S3, by bringing the handheld device close to the terminal device, the manufacturer APK reads the NFC analog card ID number of the terminal device and transmits the ID number to the background server; Step S4, the backend server searches for the card key bound to the terminal device according to the ID number, and performs key authentication of the NFC simulated card; the step S4 specifically includes: the backend server searches for the corresponding serial number according to the ID number, and searches for the card key pre-bound to the serial number, and sends it to the manufacturer APK in a session key encrypted manner, and the manufacturer APK decrypts the corresponding session key to obtain the card key, and performs key authentication of the NFC simulated card; Step S5: After the card key authentication is successful, the encrypted locking information is obtained and uploaded to the backend server; Step S6: The backend server uses the manufacturer's private key to decrypt the locking information, calculates the unlocking information, encrypts the unlocking information with the terminal public key, and sends it to the manufacturer's APK, which writes the unlocking information to the NFC analog card; Step S7: The terminal device decrypts the simulated card unlocking information with the terminal private key, and after the unlocking information is verified, the unlocking operation is performed to complete the remote unlocking; Before step S1, the following steps are also included: Step S0: Generate a correspondence table between serial number and card key in advance, and send the serial number and the corresponding card key to the designated terminal device through the factory tool, generate a public-private key pair in the terminal device, collect the terminal public key before leaving the factory and bind it with the corresponding terminal serial number.

2. The method according to claim 1, Features: The manufacturer's public key is embedded in the terminal device program.

3. The method according to claim 1, Features: The step S2 also includes: performing TLS two-way authentication with the backend server through the manufacturer's APK.

4. A remote unlocking system for a terminal device, Features: The terminal device is provided with an NFC chip, and the system comprises: The locking module is used to encrypt the locking information with the preset manufacturer's public key and set it into the simulated card data when the terminal is locked, switch the terminal NFC to the simulated card state, and use the serial number of the terminal device as the ID number of the simulated card; The device authentication module is used to download the manufacturer's APK through a handheld device with NFC function and establish a communication connection with the backend server; A card reader module, used to bring the handheld device close to the terminal device, and the manufacturer APK reads the ID number of the NFC analog card of the terminal device and transmits the ID number to the background server; A card authentication module, used for the backend server to search for the card key bound to the terminal device according to the ID number, and perform key authentication of the NFC simulated card; the card authentication module specifically includes: using the backend server to search for the corresponding serial number according to the ID number, and search for the card key pre-bound to the serial number, and send it to the manufacturer APK in a session key encrypted manner, and the manufacturer APK uses the corresponding session key to decrypt and obtain the card key, and perform key authentication of the NFC simulated card; The lock information acquisition module is used to obtain the encrypted lock information and upload it to the backend server after the card key authentication is successful; The unlocking information acquisition module is used for the backend server to decrypt the locking information using the manufacturer's private key, calculate the unlocking information, encrypt the unlocking information with the terminal public key and send it to the manufacturer's APK, which writes the unlocking information to the NFC simulation card; and The unlocking operation module is used for the terminal device to decrypt the simulated card unlocking information with the terminal private key, and after the unlocking information is verified, the unlocking operation is performed to complete the remote unlocking; The system further comprises: The device binding module is used to pre-generate a correspondence table between serial numbers and card keys, and send serial numbers and corresponding card keys to designated terminal devices through factory tools, generate public and private key pairs on the terminal devices, collect the terminal public key before leaving the factory and bind it to the corresponding terminal serial number.

5. The system according to claim 4, Features: The manufacturer's public key is embedded in the terminal device program.

6. The system according to claim 4, Features: The device authentication module also includes performing TLS two-way authentication with the backend server through the manufacturer's APK.

Images