A method and apparatus for remotely logging into batch server devices

Abstract

The present invention provides a method and device for remotely logging into batch server devices. The method comprises: generating several pairs of asymmetric keys based on a key pair generation program; sending the public key in the asymmetric key and the corresponding signature certificate to the server device based on a public key distribution program; wherein the key pair generation program and the public key distribution program are stored in a third-party mobile device connected to the client; initiating a connection request to the server device to be accessed, and receiving an encrypted random string returned by the server device, decrypting the encrypted random string based on the private key in the asymmetric key, and sending the decrypted string to the server device for verification, and if the verification is passed, the client accesses and logs into the server device. The method disclosed in the present invention uses key pair generation, data distribution, and encryption and decryption technology, so that the client does not need to obtain its account information when remotely accessing the server device in batches, thereby improving the confidentiality and security of the account information.

Description

Technical Field

[0001] The present invention relates to the field of information security technology, and in particular to a method and device for remotely logging into batch server devices. In addition, the present invention also relates to an electronic device and a processor-readable storage medium. Background Art

[0002] In recent years, with the rapid development of the Internet, more and more business processes are being carried out with the help of the Internet. How to ensure the security of online business is the main problem currently faced. When facing a third-party unit to conduct a security inspection, it is usually necessary to provide the third-party unit with the account information of the inspected server-side device of the unit, so that the third-party unit can obtain the operation authority of the corresponding server-side device and conduct a comprehensive inspection of the system. For example, when conducting a security inspection, when a third-party unit (such as a security service provider) uses a security scanning client such as a system vulnerability scan and a baseline check to inspect the server-side device, it often requires the inspected server-side device to provide the corresponding system-level user name, password and other important account information, so as to log in to the inspected server-side device for in-depth vulnerability scanning and configuration verification. Especially when conducting security checks on large-scale systems, such as servers (including virtual machines), storage devices, databases, network devices, security devices and other server-side devices in cloud computing centers, most of the time, the important account information of the inspected object, such as the user name and password, is handed over to a third party in plain text, and then the latter imports it into client devices such as security vulnerability scanning or security baseline configuration verification systems, and embeds the user account information into the scanning command by configuring batch commands, and then logs in to the inspected server-side device to execute the corresponding security check procedure. However, this type of inspection method, because the account information of the server-side device is stored on the client device of the third-party unit, makes it easy for the important account information of the unit, such as the IP address (segment), account name, password, etc. of the server-side device, to be obtained, stored, processed, and leaked by the third party, resulting in a series of security risks.

[0003] In order to solve the above problems, the existing technology usually installs a client plug-in on the accessed server device to obtain the corresponding remote access rights for batch inspection, but in fact most units usually do not allow the installation of such software for security reasons. In addition, there is also a key-based SSH (Secure Shell) method to log in and access the server device, but this method still exposes the IP address or address segment of the server device and does not completely avoid the problem of information leakage. Therefore, how to design a solution to achieve safe and efficient remote login to batch server devices has become an important research topic in this field. Summary of the invention

[0004] To this end, the present invention provides a method and apparatus for remotely logging into batch server devices, so as to solve the problems in the prior art that the solutions for remotely logging into batch server devices have high limitations and poor security and confidentiality.

[0005] In a first aspect, the present invention provides a method for remotely logging into a batch server device, comprising: generating a plurality of pairs of asymmetric keys based on a preset key pair generation program;

[0006] Based on a preset public key distribution program, the public key in the asymmetric key and the corresponding signature certificate are sent to the server device; wherein the key pair generation program and the public key distribution program are stored in a third-party mobile device connected to the client;

[0007] Initiate a connection request to the server device that needs to be accessed, and receive the encrypted random string returned by the server device. After decrypting the encrypted random string based on the private key in the asymmetric key, send the decrypted string to the server device for verification. If the verification is successful, the client can access and log in to the server device.

[0008] In one embodiment, the sending of the public key in the asymmetric key and the corresponding signature certificate to the server device based on a preset public key distribution program specifically includes:

[0009] Based on the pre-stored network protocol address information corresponding to the server device, the public key in the asymmetric key and the corresponding signature certificate are sent to the server device using the public key distribution program.

[0010] In one embodiment, the third-party mobile device is a mobile device having a universal serial bus interface.

[0011] In one embodiment, the method for remotely logging into batch server devices further includes: acquiring target information of the server device and the client based on a preset information collection and analysis program; wherein the target information includes network protocol address information corresponding to the server device and the client respectively.

[0012] In one embodiment, the method for remotely logging into a batch server device further includes: when connecting to the client, sending a corresponding feature descriptor to the client to complete the configuration with the client and achieve communication with the client.

[0013] In a second aspect, the present invention further provides a method for remotely logging into a batch server device, comprising: receiving a public key and a corresponding signature certificate sent by a third-party mobile device; wherein the third-party mobile device is connected to a client;

[0014] Verify the signature certificate, and if the verification passes, store the public key in a local authorized directory;

[0015] After receiving the connection request from the third-party mobile device, the public key carried in the connection request is matched with the public key stored in the authorization directory. If the match is successful, a corresponding random string is generated, and the random string is encrypted based on the public key, and the encrypted random string is returned to the client;

[0016] The decrypted string returned by the third-party mobile device is received, and the decrypted string is compared with the random string. If they are the same, the client connected to the third-party mobile device is allowed to access and log in.

[0017] In a third aspect, the present invention further provides an apparatus for remotely logging into a batch server device, comprising: a key pair generation control unit, configured to generate a plurality of pairs of asymmetric keys based on a preset key pair generation program;

[0018] A public key distribution control unit, used to send the public key in the asymmetric key and the corresponding signature certificate to the server device based on a preset public key distribution program; wherein the key pair generation program and the public key distribution program are stored in a third-party mobile device connected to the client;

[0019] A string sending control unit is used to initiate a connection request to the server device that needs to be accessed, and receive an encrypted random string returned by the server device. After decrypting the encrypted random string based on the private key in the asymmetric key, the decrypted string is sent to the server device for verification. If the verification is successful, the client can access and log in to the server device.

[0020] In one embodiment, the public key distribution control unit is specifically used to:

[0021] Based on the pre-stored network protocol address information corresponding to the server device, the public key in the asymmetric key and the corresponding signature certificate are sent to the server device using the public key distribution program.

[0022] In one embodiment, the third-party mobile device is a mobile device having a universal serial bus interface.

[0023] In one embodiment, the device for remotely logging into batch server devices further includes: an information collection control unit, which is used to obtain target information of the server device and the client based on a preset information collection and analysis program; wherein the target information includes network protocol address information corresponding to the server device and the client respectively.

[0024] In one embodiment, the apparatus for remotely logging into a batch server device further includes: a system configuration control unit, which is used to send a corresponding feature descriptor to the client when connected to the client, so as to complete the configuration with the client and realize communication with the client.

[0025] In a fourth aspect, the present invention further provides a device for remotely logging into a batch server device, comprising:

[0026] An information receiving unit, used to receive a public key and a corresponding signature certificate sent by a third-party mobile device; wherein the third-party mobile device is connected to the client;

[0027] A signature certificate verification unit, used to verify the signature certificate, and if the verification passes, store the public key in a local authorized directory;

[0028] a character string encryption and sending unit, configured to, upon receiving a connection request from the third-party mobile device, match the public key carried in the connection request with the public key stored in the authorization directory, and if the match succeeds, generate a corresponding random character string, encrypt the random character string based on the public key, and then transmit the encrypted random character string back to the client;

[0029] The string verification and access control unit is used to receive the decrypted string returned by the third-party mobile device and compare the decrypted string with the random string. If they are the same, the client connected to the third-party mobile device is allowed to access and log in.

[0030] In a fifth aspect, the present invention further provides an electronic device comprising: a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein when the processor executes the program, the steps of the method for remotely logging into a batch server device as described in any one of the above items are implemented.

[0031] In a sixth aspect, the present invention further provides a processor-readable storage medium, on which a computer program is stored, and when the computer program is executed by a processor, the steps of the method for remotely logging into a batch server device as described in any one of the above items are implemented.

[0032] The method for remotely logging into batch server devices described in the present invention uses key pair generation, data distribution, and encryption and decryption technology to ensure that the connected clients do not need to obtain the account information of the accessed server devices when remotely accessing the server devices in batches. That is, it can ensure that the client can remotely log in to access the server devices without obtaining, saving, or processing important information such as the IP address (segment) and account number of the accessed server devices, thereby effectively improving the confidentiality and security of the server device account information. BRIEF DESCRIPTION OF THE DRAWINGS

[0033] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the following briefly introduces the drawings required for use in the embodiments or the description of the prior art. Obviously, the drawings described below are some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0034] Figure 1 One of the flowcharts of the method for remotely logging into batch server devices provided by an embodiment of the present invention;

[0035] Figure 2 A complete application diagram of a method for remotely logging into batch server devices provided by an embodiment of the present invention;

[0036] Figure 3 One of the structural schematic diagrams of the apparatus for remotely logging into batch server devices provided by an embodiment of the present invention;

[0037] Figure 4 A second flowchart of a method for remotely logging into batch server devices provided by an embodiment of the present invention;

[0038] Figure 5 A second structural diagram of the apparatus for remotely logging into batch server devices provided by an embodiment of the present invention;

[0039] Figure 6 A schematic diagram of the physical structure of an electronic device provided by an embodiment of the present invention. DETAILED DESCRIPTION

[0040] In order to make the purpose, technical solution and advantages of the embodiments of the present invention clearer, the technical solution in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0041] The present invention proposes a method and device for remotely logging into batch server-side devices. Based on key pair generation, data storage and distribution, and encryption and decryption technology of a third-party mobile device, it ensures that the access client can remotely access the server-side device without obtaining, saving, or processing important information such as the IP address (segment) and account number of the accessed server-side device, thereby ensuring both quick remote access by the client and confidentiality and security of the server-side device account information.

[0042] The following is a detailed description of an embodiment of the method for remotely logging into a batch server device according to the present invention. Figure 1 As shown, it is one of the flow charts of the method for remotely logging into batch server devices provided by an embodiment of the present invention, and the specific implementation process includes the following steps:

[0043] Step 101: Generate a number of asymmetric key pairs based on a preset key pair generation procedure.

[0044] In an embodiment of the present invention, the third-party mobile device can obtain target information of the client and server devices in advance based on a preset information collection and analysis program, wherein the target information includes the IP (Internet Protocol; a protocol for interconnecting networks) address information or address segment information corresponding to the server device, and key information of the client host connected to the third-party mobile device, such as IP address information, host name, etc.

[0045] Specifically, the third-party mobile device may refer to a mobile device with a USB (Universal Serial Bus) interface. After the USB interface of the third-party mobile device is inserted into the client host, the self-starting program is triggered, the system configuration of the client host is determined, and the corresponding feature descriptor is sent to the client. When the client obtains the feature descriptor, the configuration of the third-party mobile device is completed, and normal communication with the client host is achieved. The third-party mobile device can first run the collection and analysis program in the storage chip to collect target information of the client host and the server-side device, such as IP address, host name, etc., and save the collected data in the storage chip. It should be noted that the third-party mobile device can also use other interface methods to connect to the client host, and of course it can also use wireless methods to communicate with the client host, which is not specifically limited here.

[0046] In this step, the third-party mobile device can run the key pair generation program in the storage chip to generate several pairs of asymmetric keys as needed, and save them in the storage chip. The asymmetric keys include a public key and a private key.

[0047] Step 102: Send the public key in the asymmetric key and the corresponding signature certificate to the server device based on a preset public key distribution program, wherein the public key distribution program is stored in a storage chip in a third-party mobile device connected to the client.

[0048] Specifically, the third-party mobile device can use the public key distribution program in the storage chip to send the N public keys in the asymmetric key and the corresponding signature certificates to all server devices based on the pre-stored IP address (address segment) corresponding to the server device and related information data. The signature certificate refers to a signature certificate issued by an authoritative CA (Certificate Authority) organization or a CA / PKI (Public Key Infrastructure) system built by the organization where the server device is located, to ensure that the server device can judge the security and credibility of the received code and data based on the signature certificate.

[0049] Step 103: Initiate a connection request to the server device that needs to be accessed, and receive an encrypted random string returned by the server device. After decrypting the encrypted random string based on the private key in the asymmetric key, send the decrypted string to the server device for verification. If the verification is successful, the client can access and log in to the server device.

[0050] Specifically, the third-party mobile device simultaneously initiates connection requests to all batch server devices that need to be accessed, and receives an encrypted random string returned by the corresponding server device. The encrypted random string is obtained by encrypting the public key in the asymmetric key sent to the server device. The third-party mobile device receives the encrypted random string and can decrypt the encrypted random string based on the private key in the asymmetric key. Furthermore, the decrypted string obtained by decryption can be sent to the server device for verification. If the verification is successful, the client connected to the third-party mobile device can log in to the server device without account information access.

[0051] In the actual implementation process, since the key information such as the IP address or address segment of the server device is stored in the third-party mobile device, after the remote access operation to the server device is completed, the third-party mobile device can be removed from the client to ensure that any account information of all server devices is not leaked. It should be noted that the third-party mobile device runs independently, is completely independent of other programs on the client, and uses a storage chip with a USB interface, which is easy to plug and unplug. Without the server device providing the corresponding account information, the client can completely independently realize remote access to the server device, ensuring the confidentiality and security of the server account information. Based on the pre-saved IP address or address segment, etc., by using the data distribution program, the self-generated public key can be transmitted to the server device, thereby realizing large-scale batch transmission of non-account information.

[0052] like Figure 2As shown, in a complete business process, after the third-party mobile device is inserted into the USB interface of the client host (i.e., the client), normal communication with the client host is achieved; basic information such as the IP address of the client host is automatically collected and saved in the storage chip of the mobile device; and the public key and signature certificate are transmitted to the server host (i.e., the server device) based on the public key distribution program. After the server device receives the public key, signature certificate and other information distributed by the device (i.e., the third-party mobile device), it first verifies the reliability of the signature certificate; after the verification is passed, the corresponding public key information is saved in the local authorization directory, and the verification information is returned; after the server device receives the connection request from the device, it searches the public keys saved in the authorization directory to see if there is a matching public key. If so, it generates a random string, encrypts it with the public key and returns the encrypted random string to the client; after the device uses the private key to decrypt the encrypted random string, it returns the decrypted string to the server; after the server receives the string sent by the device, it compares it with the previous string to determine whether they are consistent. If so, the client connected to the device is allowed to access and log in without account information; after the access operation is completed, the device is removed from the client to ensure that the account information of all server devices is not leaked.

[0053] The method for remotely logging into batch server devices described in the embodiment of the present invention is adopted, through key pair generation, data distribution and encryption and decryption technology, so that the connected client does not need to obtain the account information of the server device being accessed when remotely accessing the server device in batches, that is, it can ensure that the client can remotely log in to access the server device without obtaining, saving, and processing the IP address (segment), account number and other important information of the server device being accessed. The client does not need to collect and store the IP address or address segment information of the server device, but saves this information separately on a third-party mobile device and can take it away after use. The use of a preset key distribution program can realize the operation of automatically transmitting the public key in batches to the server device, effectively improving the confidentiality and security of the remote batch access to the server device account information.

[0054] Corresponding to the method for remotely logging into a batch server device provided above, the present invention also provides a device for remotely logging into a batch server device. Since the embodiment of the device is similar to the embodiment of the method described above, the description is relatively simple. For relevant details, please refer to the description of the embodiment of the method described above. The embodiment of the device for remotely logging into a batch server device described below is only illustrative. Please refer to Figure 3 As shown, it is one of the structural schematic diagrams of an apparatus for remotely logging into batch server devices provided by an embodiment of the present invention.

[0055] The device for remotely logging into batch server devices described in the present invention specifically includes the following parts:

[0056] A key pair generation control unit 301 is used to generate a plurality of asymmetric key pairs based on a preset key pair generation program;

[0057] A public key distribution control unit 302, configured to send the public key in the asymmetric key and the corresponding signature certificate to the server device based on a preset public key distribution program; wherein the key pair generation program and the public key distribution program are stored in a third-party mobile device connected to the client;

[0058] The string sending control unit 303 is used to initiate a connection request to the server device that needs to be accessed, and receive an encrypted random string returned by the server device. After decrypting the encrypted random string based on the private key in the asymmetric key, the decrypted string is sent to the server device for verification. If the verification is successful, the client can access and log in to the server device.

[0059] The device for remotely logging into batch server devices described in the embodiment of the present invention uses key pair generation, data distribution, and encryption and decryption technology to enable the connected client to remotely access the server devices in batches without obtaining the account information of the server devices being accessed, that is, it can ensure that the client can remotely log in to access the server devices without obtaining, saving, or processing important information such as the IP address (segment) and account number of the server devices being accessed. The client does not need to collect and store the IP address or address segment information of the server devices, but instead stores this information separately on a third-party mobile device and can take it away after use. The use of a preset key distribution program can realize the operation of automatically transmitting the public keys in batches to the server devices, effectively improving the confidentiality and security of the account information of the remote batch access to the server devices.

[0060] Correspondingly, the present invention also provides a method for remotely logging into batch server devices on the client side. Figure 4 As shown, it is a second flow chart of the method for remotely logging into batch server devices provided in an embodiment of the present invention.

[0061] Step 401: receiving a public key and a corresponding signature certificate sent by a third-party mobile device, wherein the third-party mobile device is connected to a client.

[0062] Step 402: Verify the signature certificate. If the verification is successful, store the public key in a local authorization directory.

[0063] Step 403: After receiving the connection request from the third-party mobile device, the public key carried in the connection request is matched with the public key stored in the authorization directory. If the match is successful, a corresponding random string is generated, and after the random string is encrypted based on the public key, the encrypted random string is returned to the client.

[0064] Specifically, after receiving the public key and other information distributed by the third-party mobile device, the server device first verifies the reliability of the signature certificate. If the verification is successful, that is, the authenticity and reliability of the distribution program and the transmitted information are proved, the corresponding public key information is saved in the local authorization directory.

[0065] Step 404: Receive the decrypted string returned by the third-party mobile device, and compare the decrypted string with the random string. If they are the same, allow the client connected to the third-party mobile device to access and log in.

[0066] Specifically, after the server device receives the decrypted string sent by the third-party mobile device, it compares it with the previous random string. If they are consistent, the client connected to the third-party mobile device is allowed to access and log in without account information, and the required operation permissions are opened. If the decrypted string obtained by the server device is inconsistent with the random string previously stored locally or the access has timed out, the subsequent access and login will not be allowed.

[0067] Corresponding to the method for remotely logging into a batch server device provided above, the present invention also provides a device for remotely logging into a batch server device. Since the embodiment of the device is similar to the embodiment of the method described above, the description is relatively simple. For relevant details, please refer to the description of the embodiment of the method described above. The embodiment of the device for remotely logging into a batch server device described below is only illustrative. Please refer to Figure 5 As shown, it is a second structural schematic diagram of an apparatus for remotely logging into batch server devices provided by an embodiment of the present invention.

[0068] The information receiving unit 501 is used to receive the public key and the corresponding signature certificate sent by the third-party mobile device; wherein the third-party mobile device is connected to the client;

[0069] The signature certificate verification unit 502 is used to verify the signature certificate, and if the verification is successful, store the public key in a local authorized directory;

[0070] The character string encryption and sending unit 503 is used to match the public key carried in the connection request with the public key stored in the authorization directory after receiving the connection request from the third-party mobile device, and if the match is successful, generate a corresponding random character string, encrypt the random character string based on the public key, and then return the encrypted random character string to the client;

[0071] The string verification and access control unit 504 is used to receive the decrypted string returned by the third-party mobile device and compare the decrypted string with the random string. If they are the same, the client connected to the third-party mobile device is allowed to access and log in.

[0072] By adopting the method and device for remotely logging into batch server devices described in the embodiments of the present invention, by utilizing the key pair generation, data storage, data distribution and encryption and decryption technology of a third-party mobile device, remote login access by the client can be achieved without sending important information such as IP address (segment) and account number to the remote access client, thereby effectively improving the confidentiality and security of its own account information.

[0073] Corresponding to the method for remotely logging into batch server devices provided above, the present invention also provides an electronic device. Since the embodiment of the electronic device is similar to the embodiment of the method above, the description is relatively simple. For the relevant parts, please refer to the description of the embodiment of the method above. The electronic device described below is only for illustration. Figure 6As shown, it is a schematic diagram of the physical structure of an electronic device disclosed in an embodiment of the present invention. The electronic device may include: a processor 601, a memory 602 and a communication bus 603, wherein the processor 601 and the memory 602 complete mutual communication through the communication bus 603, and communicate with the outside through the communication interface 604. The processor 601 can call the logic instructions in the memory 602 to execute a method for remotely logging into batch server devices, the method comprising: generating several pairs of asymmetric keys based on a preset key pair generation program; sending the public key in the asymmetric key and the corresponding signature certificate to the server device based on a preset public key distribution program; wherein the key pair generation program and the public key distribution program are stored in a third-party mobile device connected to the client; initiating a connection request to the server device to be accessed, and receiving the encrypted random string returned by the server device, after decrypting the encrypted random string based on the private key in the asymmetric key, sending the decrypted string to the server device for verification, if the verification is passed, the client accesses and logs into the server device. Alternatively, it includes: receiving a public key and a corresponding signature certificate sent by a third-party mobile device; wherein the third-party mobile device is connected to a client; verifying the signature certificate, and if the verification is successful, storing the public key in a local authorization directory; after receiving a connection request from the third-party mobile device, matching the public key carried in the connection request with the public key stored in the authorization directory, and if the match is successful, generating a corresponding random string, encrypting the random string based on the public key, and returning the encrypted random string to the client; receiving a decrypted string returned by the third-party mobile device, and comparing the decrypted string with the random string, and if they are the same, allowing the client connected to the third-party mobile device to access and log in.

[0074] It should be noted that the electronic device may refer to a third-party mobile device or a server device. When the electronic device is a third-party mobile device for inserting into a client, the memory 602 is a storage chip.

[0075] In addition, the logic instructions in the above-mentioned memory 602 can be implemented in the form of software functional units and can be stored in a computer-readable storage medium when sold or used as an independent product. Based on such an understanding, the technical solution of the present invention, in essence, or the part that contributes to the prior art or the part of the technical solution, can be embodied in the form of a software product, and the computer software product is stored in a storage medium, including several instructions for a computer device (which can be a personal computer, a server, or a network device, etc.) to perform all or part of the steps of the method described in each embodiment of the present invention. The aforementioned storage medium includes: a storage chip, a U disk, a mobile hard disk, a read-only memory (ROM, Read-Only Memory), a random access memory (RAM, Random Access Memory), a disk or an optical disk, and other media that can store program codes.

[0076] On the other hand, an embodiment of the present invention further provides a computer program product, which includes a computer program stored on a processor-readable storage medium, and the computer program includes program instructions. When the program instructions are executed by a computer, the computer can execute the method for remotely logging into batch server devices provided by the above-mentioned method embodiments, the method including: generating several pairs of asymmetric keys based on a preset key pair generation program; sending the public key in the asymmetric key and the corresponding signature certificate to the server device based on a preset public key distribution program; wherein the key pair generation program and the public key distribution program are stored in a third-party mobile device connected to the client; initiating a connection request to the server device that needs to be accessed, and receiving an encrypted random string returned by the server device, decrypting the encrypted random string based on the private key in the asymmetric key, and sending the decrypted string to the server device for verification. If the verification passes, the client can access and log in to the server device. Alternatively, it includes: receiving a public key and a corresponding signature certificate sent by a third-party mobile device; wherein the third-party mobile device is connected to a client; verifying the signature certificate, and if the verification is successful, storing the public key in a local authorization directory; after receiving a connection request from the third-party mobile device, matching the public key carried in the connection request with the public key stored in the authorization directory, and if the match is successful, generating a corresponding random string, encrypting the random string based on the public key, and returning the encrypted random string to the client; receiving a decrypted string returned by the third-party mobile device, and comparing the decrypted string with the random string, and if they are the same, allowing the client connected to the third-party mobile device to access and log in.

[0077] On the other hand, an embodiment of the present invention further provides a processor-readable storage medium, on which a computer program is stored. When the computer program is executed by the processor, it is implemented to execute the method of remotely logging into batch server devices provided by the above-mentioned embodiments, the method comprising: generating several pairs of asymmetric keys based on a preset key pair generation program; sending the public key in the asymmetric key and the corresponding signature certificate to the server device based on a preset public key distribution program; wherein the key pair generation program and the public key distribution program are stored in a third-party mobile device connected to the client; initiating a connection request to the server device that needs to be accessed, and receiving an encrypted random string returned by the server device, decrypting the encrypted random string based on the private key in the asymmetric key, and sending the decrypted string to the server device for verification. If the verification passes, the client accesses and logs in to the server device. Alternatively, it includes: receiving a public key and a corresponding signature certificate sent by a third-party mobile device; wherein the third-party mobile device is connected to a client; verifying the signature certificate, and if the verification is successful, storing the public key in a local authorization directory; after receiving a connection request from the third-party mobile device, matching the public key carried in the connection request with the public key stored in the authorization directory, and if the match is successful, generating a corresponding random string, encrypting the random string based on the public key, and returning the encrypted random string to the client; receiving a decrypted string returned by the third-party mobile device, and comparing the decrypted string with the random string, and if they are the same, allowing the client connected to the third-party mobile device to access and log in.

[0078] The processor-readable storage medium can be any available medium or data storage device that can be accessed by the processor, including but not limited to magnetic storage (such as floppy disks, hard disks, magnetic tapes, magneto-optical disks (MO), etc.), optical storage (such as CD, DVD, BD, HVD, etc.), and semiconductor storage (such as ROM, EPROM, EEPROM, non-volatile memory (NANDFLASH), solid-state drive (SSD)), etc.

[0079] The device embodiments described above are merely illustrative, wherein the units described as separate components may or may not be physically separated, and the components displayed as units may or may not be physical units, that is, they may be located in one place, or they may be distributed on multiple network units. Some or all of the modules may be selected according to actual needs to achieve the purpose of the scheme of this embodiment. Ordinary technicians in this field can understand and implement it without paying creative labor.

[0080] Through the description of the above implementation methods, those skilled in the art can clearly understand that each implementation method can be implemented by means of software plus a necessary general hardware platform, and of course, it can also be implemented by hardware. Based on this understanding, the above technical solution is essentially or the part that contributes to the prior art can be embodied in the form of a software product, and the computer software product can be stored in a computer-readable storage medium, such as ROM / RAM, a disk, an optical disk, etc., including a number of instructions for a computer device (which can be a personal computer, a server, or a network device, etc.) to execute the methods described in each embodiment or some parts of the embodiments.

[0081] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention, rather than to limit it. Although the present invention has been described in detail with reference to the aforementioned embodiments, those skilled in the art should understand that they can still modify the technical solutions described in the aforementioned embodiments, or make equivalent replacements for some of the technical features therein. However, these modifications or replacements do not deviate the essence of the corresponding technical solutions from the spirit and scope of the technical solutions of the embodiments of the present invention.

Claims

1. A method for remotely logging into batch server devices, characterized in that: include: The third-party mobile device generates a plurality of asymmetric key pairs based on a preset key pair generation procedure; After the universal serial bus interface of the third-party mobile device is inserted into the client, the self-starting program is triggered to determine the system configuration of the client and send the corresponding feature descriptor to the client. When the client obtains the feature descriptor, the configuration of the third-party mobile device is completed and normal communication with the client is achieved. The third-party mobile device can first run the collection and analysis program in the storage chip to collect target information of the client and server devices and store the collected data in the storage chip; The third-party mobile device sends the public key in the asymmetric key and the corresponding signature certificate to the server device based on a preset public key distribution program; wherein the key pair generation program and the public key distribution program are stored in the third-party mobile device connected to the client; the third-party mobile device uses the public key distribution program in the storage chip to send the N public keys in the asymmetric key and the corresponding signature certificates to all server devices based on the pre-stored IP address corresponding to the server device and related information data; The third-party mobile device initiates a connection request to the server device that needs to be accessed, and receives an encrypted random string returned by the server device. After receiving the encrypted random string, the third-party mobile device can decrypt the encrypted random string based on the private key in the asymmetric key. After decrypting the encrypted random string based on the private key in the asymmetric key, the decrypted string is sent to the server device for verification. If the verification is successful, the client can access and log in to the server device without account information. The encrypted random string is obtained by encrypting the random string based on the public key in the asymmetric key sent to the server device.

2. The method for remotely logging into batch server devices according to claim 1, characterized in that: The method of sending the public key in the asymmetric key and the corresponding signature certificate to the server device based on the preset public key distribution program specifically includes: Based on the pre-stored network protocol address information corresponding to the server device, the public key in the asymmetric key and the corresponding signature certificate are sent to the server device using the public key distribution program.

3. The method for remotely logging into batch server devices according to claim 1, characterized in that: The third-party mobile device is a mobile device having a universal serial bus interface.

4. The method for remotely logging into batch server devices according to claim 1, characterized in that: Also includes: The target information of the server-side device and the client is obtained based on a preset information collection and analysis program; wherein the target information includes network protocol address information corresponding to the server-side device and the client respectively.

5. The method for remotely logging into batch server devices according to claim 1, characterized in that: Also includes: When connecting with the client, the corresponding feature descriptor is sent to the client to complete the configuration with the client and realize the communication with the client.

6. A method for remotely logging into batch server devices, characterized in that: include: The server device receives the public key and the corresponding signature certificate sent by the third-party mobile device; wherein the third-party mobile device is connected to the client; after the universal serial bus interface of the third-party mobile device is inserted into the client, the self-starting program is triggered, the system configuration of the client is determined, and the corresponding feature descriptor is sent to the client. When the client obtains the feature descriptor, the configuration of the third-party mobile device is completed, and normal communication with the client is achieved. The third-party mobile device can first run the collection and analysis program in the storage chip to collect the target information of the client and the server device and save the collected data in the storage chip; based on the pre-stored IP address corresponding to the server device and the related information data, the third-party mobile device uses the public key distribution program in the storage chip to send N public keys in the asymmetric key and the corresponding signature certificates to all server devices; The server device verifies the signature certificate, and if the verification is successful, stores the public key in a local authorization directory; After receiving the connection request from the third-party mobile device, the server device matches the public key carried in the connection request with the public key stored in the authorization directory. If the match is successful, a corresponding random string is generated, and the random string is encrypted based on the public key, and the encrypted random string is returned to the client; the encrypted random string is obtained by encrypting the random string based on the public key in the asymmetric key sent to the server device; The server-side device receives the decrypted string returned by the third-party mobile device, and compares the decrypted string with the random string. If they are the same, the client connected to the third-party mobile device is allowed to access and log in. After the server-side device obtains the decrypted string sent by the third-party mobile device, it compares it with the previous random string. If they are consistent, the client connected to the third-party mobile device is allowed to access and log in without account information, and the subsequent required operation permissions are opened. If the decrypted string obtained by the server-side device is inconsistent with the random string previously stored locally or the access has timed out, subsequent access and login will not be allowed.

7. A device for remotely logging into batch server devices, characterized in that: include: A key pair generation control unit, used for a third-party mobile device to generate a plurality of asymmetric key pairs based on a preset key pair generation procedure; After the universal serial bus interface of the third-party mobile device is inserted into the client, the self-starting program is triggered to determine the system configuration of the client and send the corresponding feature descriptor to the client. When the client obtains the feature descriptor, the configuration of the third-party mobile device is completed and normal communication with the client is achieved. The third-party mobile device can first run the collection and analysis program in the storage chip to collect target information of the client and server devices and store the collected data in the storage chip; A public key distribution control unit, used for a third-party mobile device to send the public key in the asymmetric key and the corresponding signature certificate to a server device based on a preset public key distribution program; wherein the key pair generation program and the public key distribution program are stored in a third-party mobile device connected to a client; the third-party mobile device, based on the pre-stored IP address corresponding to the server device and related information data, uses the public key distribution program in the storage chip to send N public keys in the asymmetric key and the corresponding signature certificates to all server devices; A string sending control unit is used for a third-party mobile device to initiate a connection request to the server device that needs to be accessed, and receive an encrypted random string returned by the server device. The third-party mobile device receives the encrypted random string and can decrypt the encrypted random string based on the private key in the asymmetric key. After decrypting the encrypted random string based on the private key in the asymmetric key, the decrypted string is sent to the server device for verification. If the verification is successful, the client can access and log in to the server device without account information. The encrypted random string is obtained by encrypting the random string based on the public key in the asymmetric key sent to the server device.

8. A device for remotely logging into batch server devices, characterized in that: include: An information receiving unit is used for a server device to receive a public key and a corresponding signature certificate sent by a third-party mobile device; wherein the third-party mobile device is connected to a client; after the universal serial bus interface of the third-party mobile device is inserted into the client, a self-starting program is triggered to determine the system configuration of the client and send a corresponding feature descriptor to the client. When the client obtains the feature descriptor, the configuration of the third-party mobile device is completed and normal communication with the client is achieved. The third-party mobile device can first run a collection and analysis program in a storage chip to collect target information of the client and server devices and store the collected data in the storage chip; based on the pre-stored IP address corresponding to the server device and related information data, the third-party mobile device uses a public key distribution program in the storage chip to send N public keys in the asymmetric key and the corresponding signature certificates to all server devices; The signature certificate verification unit is used for the server device to verify the signature certificate. If the verification is successful, the public key is stored in the local authorization directory; a character string encryption and sending unit, which is used for matching the public key carried in the connection request with the public key stored in the authorization directory after the server device receives the connection request of the third-party mobile device; if the match is successful, generating a corresponding random character string, encrypting the random character string based on the public key, and then transmitting the encrypted random character string back to the client; the encrypted random character string is obtained by encrypting the random character string based on the public key in the asymmetric key sent to the server device; The string verification and access control unit is used for the server device to receive the decrypted string returned by the third-party mobile device, and compare the decrypted string with the random string. If they are the same, the client connected to the third-party mobile device is allowed to access and log in; after the server device obtains the decrypted string sent by the third-party mobile device, it compares it with the previous random string. If they are consistent, the client connected to the third-party mobile device is allowed to access and log in without account information, and the subsequent required operation permissions are opened; if the decrypted string obtained by the server device is inconsistent with the random string previously stored locally or the access times out, the subsequent access and login will not be allowed.

9. An electronic device comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, characterized in that: When the processor executes the program, the steps of the method for remotely logging into a batch server device as described in any one of claims 1 to 6 are implemented.

10. A processor-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the steps of the method for remotely logging into a batch server device as described in any one of claims 1 to 6 are implemented.

Images