Terminal communication method and device

Abstract

This application relates to a terminal communication method and apparatus. Belonging to the field of terminal communication technology, the method includes: a first terminal sending handshake information to a second terminal; the second terminal performing initial identity verification on the first terminal, and generating a second array based on a first array and a second identity identifier if the verification passes; the first terminal performing initial identity verification on the second terminal based on the second array, and sending a third array back to the second terminal if the verification passes; the second terminal performing final identity verification on the first terminal, and generating a fourth array based on the third array if the verification passes; the first terminal performing final identity verification on the second terminal based on the fourth array, and establishing a communication connection with the second terminal if the verification passes. This method can achieve dual two-way authentication of the identities of the first and second terminals, effectively resisting man-in-the-middle attacks or phishing attacks, and improving the security of terminal communication.

Description

Technical Field

[0001] This application relates to the field of terminal communication technology, and in particular to a terminal communication method and apparatus. Background Technology

[0002] Wired communication remains a very common communication method. For example, traditional differential protection terminals mainly use wired optical fiber communication. The differential protection provided by the differential protection terminal is an important protection method for the normal and stable operation of the distribution network. However, due to the cost limitations of optical fiber communication construction, the application cost of differential protection terminals in the distribution network has also increased accordingly.

[0003] With the rapid development of wireless communication technology, current wireless communication has advantages such as large bandwidth, high reliability, and low latency, which can meet the communication performance requirements of most terminals. For example, differential protection terminals, based on current wireless communication technology, can meet the requirements of wireless differential protection in distribution networks.

[0004] However, the open nature of wireless communication brings many security issues and threatens the security of terminal communication. Summary of the Invention

[0005] Therefore, it is necessary to provide a terminal communication method and apparatus that can increase communication security in response to the above-mentioned technical problems.

[0006] Firstly, this application provides a terminal communication method. The method includes:

[0007] Receive handshake information sent by the first terminal; wherein the handshake information includes the first terminal's first identity identifier and a first array;

[0008] Based on the first identity identifier, the first terminal is initially verified, and if the verification passes, a second array is generated based on the first array and the second identity identifier.

[0009] The second array is sent to the first terminal so that the first terminal can perform an initial identity verification of the second terminal based on the second array, and after the verification is successful, the third array is fed back.

[0010] Based on the third array fed back by the first terminal, the identity of the first terminal is finally verified, and if the verification is successful, a fourth array is generated based on the third array.

[0011] The fourth array is sent to the first terminal so that the first terminal can perform the final identity verification of the second terminal based on the fourth array, and establish a communication connection with the second terminal after the verification is successful.

[0012] In one embodiment, a second array is generated based on the first array and the second identity identifier, including:

[0013] The target data segment is determined based on the session keys corresponding to the first array and the second terminal;

[0014] A second array is generated based on the target data segment and the auxiliary verification data segment corresponding to the second terminal, as well as the second identity identifier of the second terminal.

[0015] In one embodiment, determining the target data segment based on the first array and the session key corresponding to the first terminal includes:

[0016] Extract the cascaded fields from the first array;

[0017] Concatenate the concatenated fields with the first array to obtain a concatenated array;

[0018] The concatenated array is XORed with the session key corresponding to the first terminal to obtain the target data segment.

[0019] In one embodiment, an initial identity verification is performed on the first terminal based on a first identity identifier, including:

[0020] If a target identity matching the first identity exists in the local identity database, the initial identity verification of the first terminal will pass.

[0021] In one embodiment, based on the third array fed back by the first terminal, a final identity verification of the first terminal is performed, including:

[0022] Extract the first identity verification data segment from the third array;

[0023] Compare the first identity verification data segment with the auxiliary verification data segment corresponding to the second terminal;

[0024] If they match, the final identity verification of the first terminal is passed.

[0025] Secondly, this application also provides another terminal communication method. The method includes:

[0026] The second identity identifier of the second terminal is obtained by parsing the second array sent by the second terminal; wherein, the second array is generated by the second terminal after the first terminal passes the initial identity verification based on the first identity identifier sent by the first terminal.

[0027] Based on the second identity identifier, the second terminal is initially verified, and if the verification passes, a third array is generated according to the second array.

[0028] The third array is sent to the second terminal so that the second terminal can perform the final identity verification of the first terminal based on the third array, and after the verification is successful, the fourth array is fed back.

[0029] Based on the fourth array fed back by the second terminal, the identity of the second terminal is finally verified, and a communication connection is established with the second terminal if the verification is successful.

[0030] In one embodiment, generating a third array based on the second array includes:

[0031] Extract the auxiliary verification data segment corresponding to the second terminal from the second array;

[0032] A third array is generated based on the auxiliary verification data segment corresponding to the second terminal and the auxiliary verification data segment corresponding to the first terminal.

[0033] In one embodiment, based on the fourth array fed back by the second terminal, a final identity verification of the second terminal is performed, including:

[0034] Extract the second identity verification data segment from the fourth array;

[0035] The second identity verification data segment is compared with the auxiliary verification data segment corresponding to the first terminal;

[0036] If they match, the final identity verification of the second terminal is passed.

[0037] Thirdly, this application also provides a terminal communication device, the device comprising:

[0038] The receiving module is used to receive handshake information sent by the first terminal; wherein the handshake information includes the first identity identifier and the first array of the first terminal;

[0039] The first verification module is used to perform initial identity verification on the first terminal based on the first identity identifier, and generate a second array based on the first array and the first identity identifier if the verification is successful.

[0040] The first sending module is used to send the second array to the first terminal so that the first terminal can perform an initial identity verification of the second terminal based on the second array, and after the verification is successful, it will send back the third array.

[0041] The second verification module is used to perform final identity verification on the first terminal based on the third array fed back by the first terminal, and generate a fourth array based on the third array if the verification is successful.

[0042] The second sending module is used to send the fourth array to the first terminal so that the first terminal can perform final identity verification on the second terminal based on the fourth array, and establish a communication connection with the second terminal after the verification is successful.

[0043] Fourthly, this application also provides another terminal communication device, the device comprising:

[0044] The parsing module is used to parse the second array sent by the second terminal to obtain the second identity identifier of the second terminal; wherein, the second array is generated by the second terminal after the first terminal passes the initial identity verification of the first terminal based on the first identity identifier sent by the first terminal;

[0045] The third verification module is used to perform initial identity verification on the second terminal based on the second identity identifier, and generate a third array based on the second array if the verification passes.

[0046] The third sending module is used to send the third array to the second terminal so that the second terminal can perform the final identity verification of the first terminal based on the third array, and after the verification is successful, it will send back the fourth array.

[0047] The fourth verification module is used to perform final identity verification on the second terminal based on the fourth array fed back by the second terminal, and to establish a communication connection with the second terminal if the verification is successful.

[0048] Fifthly, this application also provides a computer device, which includes a memory and a processor. The memory stores a computer program, and the processor executes the computer program to perform the following steps:

[0049] Receive handshake information sent by the first terminal; wherein the handshake information includes the first terminal's first identity identifier and a first array;

[0050] Based on the first identity identifier, the first terminal is initially verified, and if the verification passes, a second array is generated based on the first array and the second identity identifier.

[0051] The second array is sent to the first terminal so that the first terminal can perform an initial identity verification of the second terminal based on the second array, and after the verification is successful, the third array is fed back.

[0052] Based on the third array fed back by the first terminal, the identity of the first terminal is finally verified, and if the verification is successful, a fourth array is generated based on the third array.

[0053] The fourth array is sent to the first terminal so that the first terminal can perform the final identity verification of the second terminal based on the fourth array, and establish a communication connection with the second terminal after the verification is successful.

[0054] Sixthly, this application also provides another computer device, which includes a memory and a processor, wherein the memory stores a computer program, and the processor executes the computer program to perform the following steps:

[0055] The second identity identifier of the second terminal is obtained by parsing the second array sent by the second terminal; wherein, the second array is generated by the second terminal after the first terminal passes the initial identity verification based on the first identity identifier sent by the first terminal.

[0056] Based on the second identity identifier, the second terminal is initially verified, and if the verification passes, a third array is generated according to the second array.

[0057] The third array is sent to the second terminal so that the second terminal can perform the final identity verification of the first terminal based on the third array, and after the verification is successful, the fourth array is fed back.

[0058] Based on the fourth array fed back by the second terminal, the identity of the second terminal is finally verified, and a communication connection is established with the second terminal if the verification is successful.

[0059] Seventhly, this application also provides a computer-readable storage medium. The computer-readable storage medium stores a computer program thereon, which, when executed by a processor, performs the following steps:

[0060] Receive handshake information sent by the first terminal; wherein the handshake information includes the first terminal's first identity identifier and a first array;

[0061] Based on the first identity identifier, the first terminal is initially verified, and if the verification passes, a second array is generated based on the first array and the second identity identifier.

[0062] The second array is sent to the first terminal so that the first terminal can perform an initial identity verification of the second terminal based on the second array, and after the verification is successful, the third array is fed back.

[0063] Based on the third array fed back by the first terminal, the identity of the first terminal is finally verified, and if the verification is successful, a fourth array is generated based on the third array.

[0064] The fourth array is sent to the first terminal so that the first terminal can perform the final identity verification of the second terminal based on the fourth array, and establish a communication connection with the second terminal after the verification is successful.

[0065] Eighthly, this application also provides another computer-readable storage medium. The computer-readable storage medium stores a computer program thereon, which, when executed by a processor, performs the following steps:

[0066] The second identity identifier of the second terminal is obtained by parsing the second array sent by the second terminal; wherein, the second array is generated by the second terminal after the first terminal passes the initial identity verification based on the first identity identifier sent by the first terminal.

[0067] Based on the second identity identifier, the second terminal is initially verified, and if the verification passes, a third array is generated according to the second array.

[0068] The third array is sent to the second terminal so that the second terminal can perform the final identity verification of the first terminal based on the third array, and after the verification is successful, the fourth array is fed back.

[0069] Based on the fourth array fed back by the second terminal, the identity of the second terminal is finally verified, and a communication connection is established with the second terminal if the verification is successful.

[0070] Ninthly, this application also provides a computer program product. The computer program product includes a computer program that, when executed by a processor, performs the following steps:

[0071] Receive handshake information sent by the first terminal; wherein the handshake information includes the first terminal's first identity identifier and a first array;

[0072] Based on the first identity identifier, the first terminal is initially verified, and if the verification passes, a second array is generated based on the first array and the second identity identifier.

[0073] The second array is sent to the first terminal so that the first terminal can perform an initial identity verification of the second terminal based on the second array, and after the verification is successful, the third array is fed back.

[0074] Based on the third array fed back by the first terminal, the identity of the first terminal is finally verified, and if the verification is successful, a fourth array is generated based on the third array.

[0075] The fourth array is sent to the first terminal so that the first terminal can perform the final identity verification of the second terminal based on the fourth array, and establish a communication connection with the second terminal after the verification is successful.

[0076] In a tenth aspect, this application also provides another computer program product. The computer program product includes a computer program that, when executed by a processor, performs the following steps:

[0077] The second identity identifier of the second terminal is obtained by parsing the second array sent by the second terminal; wherein, the second array is generated by the second terminal after the first terminal passes the initial identity verification based on the first identity identifier sent by the first terminal.

[0078] Based on the second identity identifier, the second terminal is initially verified, and if the verification passes, a third array is generated according to the second array.

[0079] The third array is sent to the second terminal so that the second terminal can perform the final identity verification of the first terminal based on the third array, and after the verification is successful, the fourth array is fed back.

[0080] Based on the fourth array fed back by the second terminal, the identity of the second terminal is finally verified, and a communication connection is established with the second terminal if the verification is successful.

[0081] In the aforementioned terminal communication method and apparatus, a first terminal sends handshake information to a second terminal. The handshake information includes a first identity identifier and a first array of the first terminal. The second terminal performs an initial identity verification on the first terminal based on the first identity identifier. If the verification passes, the second terminal generates a second array based on the first array and the second identity identifier, and sends it to the first terminal. The first terminal performs a final identity verification on the second terminal based on the second array. If the verification passes, the first terminal generates a fourth array based on the third array and sends it to the first terminal. The first terminal performs a final identity verification on the second terminal based on the fourth array. If the verification passes, a communication connection is established with the second terminal. In this application, the second terminal performs initial identity verification on the first terminal based on the first identity identifier, the first terminal performs initial identity verification on the second terminal based on the second array, and after the first terminal and the second terminal complete the two-way authentication of the initial identity verification, the second terminal performs final identity verification on the first terminal based on the third array, and the first terminal performs final identity verification on the second terminal based on the fourth array. This completes the dual two-way authentication of the identities of the first terminal and the second terminal, which can effectively resist man-in-the-middle attacks or phishing attacks and improve the security of terminal communication. Attached Figure Description

[0082] Figure 1 This is an application environment diagram of a terminal communication method provided in this embodiment;

[0083] Figure 2 This is a flowchart illustrating the first terminal communication method provided in this embodiment;

[0084] Figure 3 This is a schematic diagram of the process for generating the second array provided in this embodiment;

[0085] Figure 4 This is a flowchart illustrating the process of determining the target data segment provided in this embodiment;

[0086] Figure 5 This is a schematic diagram of the final identity verification process for the first terminal provided in this embodiment;

[0087] Figure 6 This is a flowchart illustrating the second terminal communication method provided in this embodiment;

[0088] Figure 7 This is a flowchart illustrating the third terminal communication method provided in this embodiment;

[0089] Figure 8 This is a schematic diagram illustrating the interaction between the first terminal and the second terminal provided in this embodiment;

[0090] Figure 9 This is a structural block diagram of the first type of terminal communication device provided in this embodiment;

[0091] Figure 10 This is a structural block diagram of the second type of terminal communication device provided in this embodiment;

[0092] Figure 11 This is an internal structural diagram of the computer device provided in this embodiment. Detailed Implementation

[0093] In order to make the purpose, technical solutions and advantages of this application more clear, the following further describes this application in detail with reference to the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain this application and are not intended to limit this application.

[0094] The terminal communication method provided in this application embodiment can be applied to, for example... Figure 1 In the application environment shown, the first terminal 102 communicates with the second terminal 104 via a network. Specifically, the first terminal 102 sends handshake information to the second terminal 104; the handshake information includes the first terminal 102's first identity identifier and a first array; the second terminal 104 performs an initial identity verification on the first terminal 102 based on the first identity identifier, and if the verification passes, generates a second array based on the first array and the second identity identifier, and sends it to the first terminal 102; the first terminal 102 performs an initial identity verification on the second terminal 104 based on the second array, and if the verification passes, sends a third array back to the second terminal 104; the second terminal 104 performs a final identity verification on the first terminal 102 based on the third array, and if the verification passes, generates a fourth array based on the third array, and sends it to the first terminal 102; the first terminal 102 performs a final identity verification on the second terminal 104 based on the fourth array, and if the verification passes, establishes a communication connection with the second terminal 104. The first terminal 102 and the second terminal 104 can be, but are not limited to, various differential protection terminals, personal computers, laptops, smartphones, tablets, IoT devices, and portable wearable devices. IoT devices can include smart speakers, smart TVs, smart air conditioners, smart in-vehicle devices, etc. Portable wearable devices can include smartwatches, smart bracelets, head-mounted devices, etc.

[0095] In one embodiment, such as Figure 2 As shown, a terminal communication method is provided. This embodiment illustrates the application of this method to a terminal. It is understood that this method can also be applied to a server, and to a system including both a terminal and a server, and is implemented through interaction between the terminal and the server. In this embodiment, the terminal communication method mainly describes the communication method of the second terminal when the first terminal requests to establish communication with the second terminal, including the following steps:

[0096] S201, receive handshake information sent by the first terminal; wherein, the handshake information includes the first identity identifier and the first array of the first terminal.

[0097] Among them, the first terminal is the terminal that actively requests to establish a communication connection; the handshake information refers to the information that the first terminal sends to the other party for the first time when it requests to establish a communication connection with the second terminal; the first identity identifier refers to the identifier used to identify the identity of the first terminal, such as the user identity certificate UID of the first terminal; the first array refers to the array generated by the first terminal, which can be a randomly generated array or an array with a certain pattern generated according to preset rules.

[0098] S202, based on the first identity identifier, perform initial identity verification on the first terminal, and if the verification passes, generate a second array according to the first array and the second identity identifier.

[0099] Among them, initial identity verification refers to the first identity verification; second identity identifier refers to the identifier used to indicate the identity of the second terminal, such as User Identification (UID); second array refers to the array generated by the second terminal based on the first array and the second identity identifier, used by the first terminal for initial identity verification of the second terminal, and for generating the third array.

[0100] In this embodiment, one possible implementation method is: extract the first identity identifier from the handshake information and match the first identity identifier with the local identity identifier database. If there is a target identity identifier in the local identity identifier database that matches the first identity identifier, then the initial identity verification of the first terminal is passed.

[0101] Another implementation method is as follows: If the first identity identifier is the UID of the first terminal, the extracted UID of the first terminal is compared with the local UID list. If it exists, the initial identity verification of the first terminal is passed.

[0102] S203, the second array is sent to the first terminal so that the first terminal can perform an initial identity verification of the second terminal based on the second array, and after the verification is successful, the third array is fed back.

[0103] The third array refers to the array generated based on the second array after the first terminal successfully verifies the identity of the second terminal. This array is used by the second terminal to perform the final identity verification of the first terminal. The final identity verification refers to the second identity verification.

[0104] One possible implementation is as follows: the first terminal parses the second array to obtain the second identity identifier of the second terminal, and matches the second identity identifier with the local identity identifier database. If there is a target identity identifier in the local identity identifier database that matches the second identity identifier, the initial identity verification of the second terminal is passed.

[0105] Another implementation method is as follows: If the second identity identifier is the UID of the second terminal, the first terminal obtains the UID of the second terminal from the second array, compares the obtained UID of the second terminal with the local UID list, and if it exists, the initial identity verification of the second terminal passes.

[0106] S204, based on the third array fed back by the first terminal, perform final identity verification on the first terminal, and if the verification passes, generate a fourth array according to the third array.

[0107] The fourth array refers to the array generated based on the third array after the second terminal has successfully verified the identity of the first terminal, and is used for the first terminal to perform the final identity verification of the second terminal.

[0108] One possible implementation is to parse the third array, analyze the verification data segments in the parsed third array (e.g., the first few data segments or the last few data segments in the third array), and match the verification data segments with the locally stored verification data segment library. If they exist, the second terminal will finally pass the identity verification of the first terminal.

[0109] Another implementation method is to parse the third array, obtain the part of the third array that corresponds to the second array, compare the obtained part of the third array that corresponds to the second array with the second array generated by the second terminal, and if the comparison result meets the requirements, the identity of the first terminal by the second terminal is finally verified.

[0110] S205, the fourth array is sent to the first terminal so that the first terminal can perform final identity verification of the second terminal based on the fourth array, and establish a communication connection with the second terminal after the verification is successful.

[0111] One possible implementation is as follows: The first terminal parses the fourth array, analyzes the verification data segment in the parsed fourth array (e.g., the first few data segments or the last few data segments in the fourth array), and matches the verification data segment with the locally stored verification data segment library. If they exist, the first terminal finally verifies the identity of the second terminal.

[0112] Another implementation method is as follows: The first terminal parses the fourth array, obtains the part of the fourth array that corresponds to the third array, compares the obtained part of the fourth array that corresponds to the third array with the third array generated by the first terminal, and if the comparison result meets the requirements, the second terminal finally verifies the identity of the first terminal.

[0113] The method provided in this application embodiment involves sending handshake information from a first terminal to a second terminal. The handshake information includes a first identity identifier and a first array of the first terminal. The second terminal performs an initial identity verification on the first terminal based on the first identity identifier. If the verification passes, the second terminal generates a second array based on the first array and the second identity identifier, and sends it to the first terminal. The first terminal performs an initial identity verification on the second terminal based on the second array. If the verification passes, the first terminal sends a third array back to the second terminal. The second terminal performs a final identity verification on the first terminal based on the third array. If the verification passes, the second terminal generates a fourth array based on the third array and sends it to the first terminal. The first terminal performs a final identity verification on the second terminal based on the fourth array. If the verification passes, a communication connection is established with the second terminal. In this application, the second terminal performs initial identity verification on the first terminal based on the first identity identifier, the first terminal performs initial identity verification on the second terminal based on the second array, and after the first terminal and the second terminal complete the two-way authentication of the initial identity verification, the second terminal performs final identity verification on the first terminal based on the third array, and the first terminal performs final identity verification on the second terminal based on the fourth array, thereby completing the two-way authentication of the final identity verification of the first terminal and the second terminal. This can effectively resist man-in-the-middle attacks or phishing attacks and improve the security of terminal communication.

[0114] In one embodiment, such as Figure 3 As shown, in S202, the second terminal generates a second array based on the first array and the second identity identifier, including:

[0115] S301, determine the target data segment based on the session keys corresponding to the first array and the second terminal.

[0116] The session key is a key pre-configured on the second terminal; the target data segment is a data segment obtained by processing the session keys corresponding to the first array and the second terminal according to preset rules.

[0117] One possible implementation is to concatenate the first array with the session key corresponding to the second terminal to obtain the target data segment.

[0118] S302, generate a second array based on the target data segment and the auxiliary verification data segment corresponding to the second terminal, as well as the second identity identifier of the second terminal.

[0119] The auxiliary verification data is verification data that is randomly generated by the second terminal or generated according to certain rules.

[0120] One possible implementation is to concatenate the target data segment, the auxiliary verification data segment corresponding to the second terminal, and the second identity identifier of the second terminal in sequence to obtain a second array.

[0121] Based on the above embodiments, such as Figure 4 As shown, in S301, the target data segment is determined based on the first array and the session key corresponding to the first terminal, including:

[0122] S401, extract the cascaded field from the first array.

[0123] Among them, the cascading field is the field in the first array that is used to cascade with the first array.

[0124] Optionally, the first or last few fields of the first array can be extracted as cascading fields.

[0125] S402, concatenate the cascaded field with the first array to obtain the cascaded array.

[0126] S403, perform an XOR operation between the concatenated array and the session key corresponding to the first terminal to obtain the target data segment.

[0127] In this embodiment, both the cascaded array and the session key are binary strings, and the XOR operation refers to the binary operation rules.

[0128] One possible implementation is as follows: set the number of bits to be extracted, extract a concatenated field of a set number of bits from the first array, and perform an XOR operation between the concatenated array and the session key corresponding to the first terminal to obtain the target data segment; wherein, the number of bits to be extracted is equal to the number of bits of the session key minus the number of bits of the first array.

[0129] This application not only increases the security of communication by composing the second array, but also serves as a final authentication method for the second terminal against the first terminal and ensures the integrity of the communication data.

[0130] Based on the above embodiments, such as Figure 5 As shown, based on the third array fed back by the first terminal, the final identity verification of the first terminal is performed, including:

[0131] S501, extract the first identity verification data segment from the third array.

[0132] The first authentication data segment is the data segment in the third array used for the final verification of the first terminal's identity.

[0133] S502, compare the first identity verification data segment with the auxiliary verification data segment corresponding to the second terminal;

[0134] S503 If they match, the final identity verification of the first terminal is passed.

[0135] In this application, the second terminal performs the final verification of the identity of the first terminal through the first identity verification data segment and the auxiliary verification data segment corresponding to the second terminal, while also verifying whether the integrity of the data has been compromised, thereby improving the credibility of identity verification and the accuracy of communication data.

[0136] Optionally, based on the above embodiments, such as Figure 6 As shown in the figure, this embodiment provides an optional implementation of a terminal communication method, including the following steps:

[0137] S601, receive handshake information sent by the first terminal; wherein, the handshake information includes the first identity identifier and the first array of the first terminal.

[0138] S602, if a target identity that matches the first identity exists in the local identity database, the initial identity verification of the first terminal is passed.

[0139] S603, if the verification passes, generate a second array based on the first array and the second identity identifier;

[0140] Optionally, a concatenation field is extracted from the first array; the concatenation field is concatenated with the first array to obtain a concatenation array; the concatenation array is XORed with the session key corresponding to the first terminal to obtain the target data segment; and a second array is generated based on the target data segment and the auxiliary verification data segment corresponding to the second terminal, as well as the second identity identifier of the second terminal.

[0141] S604, the second array is sent to the first terminal so that the first terminal can perform an initial identity verification of the second terminal based on the second array, and after the verification is successful, the third array is fed back.

[0142] S605: Based on the third array fed back by the first terminal, perform final identity verification on the first terminal, and if the verification is successful, generate a fourth array based on the third array.

[0143] Optionally, the first identity verification data segment is extracted from the third array; the first identity verification data segment is compared with the auxiliary verification data segment corresponding to the second terminal; if they match, the first terminal passes the final identity verification.

[0144] S606, the fourth array is sent to the first terminal so that the first terminal can perform final identity verification of the second terminal based on the fourth array, and establish a communication connection with the second terminal after the verification is successful.

[0145] In this application, the second terminal performs initial identity verification on the first terminal based on the first identity identifier, the first terminal performs initial identity verification on the second terminal based on the second array, and after the first terminal and the second terminal complete the two-way authentication of the initial identity verification, the second terminal performs final identity verification on the first terminal based on the third array, and the first terminal performs final identity verification on the second terminal based on the fourth array, thereby completing the two-way authentication of the final identity verification of the first terminal and the second terminal. This can effectively resist man-in-the-middle attacks or phishing attacks and improve the security of terminal communication.

[0146] In one embodiment, such as Figure 7 As shown in the embodiments of this application, another terminal communication method is also provided, which mainly describes the communication method of the first terminal when the first terminal requests to establish a communication connection with the second terminal, including the following steps:

[0147] S701, based on the second array sent by the second terminal, the second identity identifier of the second terminal is parsed to obtain the second identity identifier of the second terminal; wherein, the second array is generated by the second terminal after the first terminal passes the initial identity verification of the first terminal based on the first identity identifier sent by the first terminal.

[0148] The second terminal is a terminal that passively establishes a communication connection based on the active request of the first terminal.

[0149] S702 performs initial identity verification on the second terminal based on the second identity identifier, and generates a third array according to the second array if the verification passes.

[0150] It should be noted that the process of initial identity verification of the second terminal based on the second identity identifier has been described in detail in the above embodiments, and will not be repeated here.

[0151] Optionally, the second array is parsed, the auxiliary verification data segment corresponding to the second terminal in the second array is extracted, and the third array is generated based on the auxiliary verification data segment corresponding to the second terminal.

[0152] Specifically, the auxiliary verification data segment corresponding to the second terminal is extracted from the second array. Based on the auxiliary verification data segment corresponding to the second terminal and the auxiliary verification data segment corresponding to the first terminal, a third array is generated.

[0153] Among them, the auxiliary verification data segment corresponding to the first terminal is a data segment generated or allocated by the first terminal, which is used for the final authentication of the second terminal by the first terminal.

[0154] It should be noted that the process of generating the second array has been described in detail in the above embodiments, and will not be repeated here.

[0155] S703, the third array is sent to the second terminal so that the second terminal can perform the final identity verification of the first terminal based on the third array, and after the verification is successful, the fourth array is fed back.

[0156] It should be noted that the process of sending the third array to the second terminal so that the second terminal can perform the final identity verification of the first terminal based on the third array has been described in detail in the above embodiments and will not be repeated here.

[0157] Optionally, the second terminal extracts the auxiliary verification data segment corresponding to the first terminal and the auxiliary verification data segment corresponding to the second terminal from the third array, selects a concatenated data segment from the front or back of the auxiliary verification data segment corresponding to the second terminal, concatenates the concatenated data segment with the auxiliary verification data segment corresponding to the second terminal to obtain a concatenated array, performs an XOR operation on the concatenated array and the session key corresponding to the second terminal to obtain a new data segment, and concatenates the new data segment with the auxiliary verification data segment corresponding to the first terminal to obtain a fourth array.

[0158] The concatenated array and the session key are binary strings of the same length.

[0159] S704 performs final identity verification on the second terminal based on the fourth array fed back by the second terminal, and establishes a communication connection with the second terminal if the verification is successful.

[0160] Optionally, based on the fourth array fed back by the second terminal, the final identity verification of the second terminal is performed, including: extracting the second identity verification data segment from the fourth array; comparing the second identity verification data segment with the auxiliary verification data segment corresponding to the first terminal; if they match, the final identity verification of the second terminal is passed.

[0161] In this application, the first terminal sends handshake information to actively establish communication. After the initial identity verification is passed, the second terminal sends back a second array. The second terminal performs initial identity verification based on the second array and sends back a third array. The first terminal performs final identity verification based on the third array. After the final identity verification is passed, the first terminal sends back a fourth array. The first terminal performs final identity verification based on the fourth array. This communication method not only realizes dual two-way identity verification, but also verifies the accuracy of data during communication.

[0162] In one embodiment, Figure 8 This is a schematic diagram of the terminal interaction process in one embodiment, mainly introducing a method for the first terminal and the second terminal to cooperate with each other to perform dual two-way authentication and establish a communication connection, including the following steps:

[0163] S801, the first terminal sends handshake information to the second terminal, wherein the handshake information includes the first terminal's first identity identifier and a first array.

[0164] S802, the second terminal receives the handshake information sent by the first terminal.

[0165] S803, if the second terminal determines that there is a target identity in the local identity database that matches the first identity, then the first terminal passes the initial identity verification, and generates a second array based on the first array and the second identity, and sends it to the first terminal.

[0166] Optionally, a concatenation field is extracted from the first array, and the concatenation field is concatenated with the first array to obtain a concatenation array. The concatenation array is then XORed with the session key corresponding to the first terminal to obtain the target data segment. Based on the target data segment and the auxiliary verification data segment corresponding to the second terminal, as well as the second identity identifier of the second terminal, a second array is generated.

[0167] S804, the first terminal parses the second array sent by the second terminal to obtain the second identity identifier of the second terminal.

[0168] S805, the first terminal performs initial identity verification on the second terminal based on the second identity identifier, and if the verification is successful, generates a third array according to the second array and sends the third array to the first terminal.

[0169] Optionally, the first terminal parses the second array to obtain the second identity identifier of the second terminal, and matches the second identity identifier with the local identity identifier database. If there is a target identity identifier in the local identity identifier database that matches the second identity identifier, the initial identity verification of the second terminal is passed.

[0170] Optionally, the first terminal extracts the auxiliary verification data segment corresponding to the second terminal from the second array. A third array is generated based on the auxiliary verification data segment corresponding to the second terminal and the auxiliary verification data segment corresponding to the first terminal.

[0171] S806, the second terminal performs final identity verification on the first terminal based on the third array fed back by the first terminal, and if the verification is successful, generates a fourth array based on the third array and sends the fourth array to the first terminal.

[0172] Optionally, the first identity verification data segment is extracted from the third array; the first identity verification data segment is compared with the auxiliary verification data segment corresponding to the second terminal; if they match, the first terminal passes the final identity verification.

[0173] Optionally, the second terminal extracts the auxiliary verification data segment corresponding to the first terminal and the auxiliary verification data segment corresponding to the second terminal from the third array, selects a concatenated data segment from the front or back of the auxiliary verification data segment corresponding to the second terminal, concatenates the concatenated data segment with the auxiliary verification data segment corresponding to the second terminal to obtain a concatenated array, performs an XOR operation on the concatenated array and the session key corresponding to the second terminal to obtain a new data segment, and concatenates the new data segment with the auxiliary verification data segment corresponding to the first terminal to obtain a fourth array.

[0174] S807, the first terminal performs final identity verification on the second terminal based on the fourth array, and establishes a communication connection with the second terminal after the verification is successful.

[0175] Extract the second identity verification data segment from the fourth array; compare the second identity verification data segment with the auxiliary verification data segment corresponding to the first terminal; if they match, the second terminal passes the final identity verification.

[0176] It should be understood that although the steps in the flowcharts of the above embodiments are shown sequentially according to the arrows, these steps are not necessarily executed in the order indicated by the arrows. Unless explicitly stated herein, there is no strict order restriction on the execution of these steps, and they can be executed in other orders. Moreover, at least some steps in the flowcharts of the above embodiments may include multiple steps or multiple stages. These steps or stages are not necessarily completed at the same time, but can be executed at different times. The execution order of these steps or stages is not necessarily sequential, but can be performed alternately or in turn with other steps or at least some of the steps or stages of other steps.

[0177] Based on the same inventive concept, this application also provides a terminal communication device for implementing the terminal communication method described above. The solution provided by this device is similar to the implementation described in the communication method of the second terminal described above. Therefore, the specific limitations in the terminal communication device embodiment provided below can be found in the limitations of the terminal communication method above, and will not be repeated here.

[0178] In one embodiment, such as Figure 9 As shown, a terminal communication device 1 is provided, the device comprising:

[0179] The receiving module 10 is used to receive handshake information sent by the first terminal; wherein the handshake information includes the first identity identifier and the first array of the first terminal;

[0180] The first verification module 11 is used to perform initial identity verification on the first terminal based on the first identity identifier, and generate a second array based on the first array and the first identity identifier if the verification is successful.

[0181] The first sending module 12 is used to send the second array to the first terminal so that the first terminal can perform an initial identity verification of the second terminal based on the second array, and after the verification is successful, it will send back the third array.

[0182] The second verification module 13 is used to perform final identity verification on the first terminal based on the third array fed back by the first terminal, and generate a fourth array based on the third array if the verification is successful.

[0183] The second sending module 14 is used to send the fourth array to the first terminal so that the first terminal can perform final identity verification on the second terminal based on the fourth array, and establish a communication connection with the second terminal after the verification is successful.

[0184] In one embodiment, in order to perform initial identity verification of the second terminal by the first terminal, the above... Figure 9 The first verification module 11 further includes:

[0185] The target data segment generation submodule is used to determine the target data segment based on the session keys corresponding to the first array and the second terminal.

[0186] The second array generation submodule is used to generate a second array based on the target data segment and the auxiliary verification data segment corresponding to the second terminal, as well as the second identity identifier of the second terminal.

[0187] In one embodiment, the target data segment generation submodule further includes:

[0188] A cascading field generation unit is used to extract cascading fields from the first array;

[0189] The cascade array generation unit is used to cascade the cascaded fields with the first array to obtain a cascaded array;

[0190] The arithmetic unit is used to perform an XOR operation between the concatenated array and the session key corresponding to the first terminal to obtain the target data segment.

[0191] In one embodiment, such as Figure 9 As shown, the first verification module 11 is also used for:

[0192] If a target identity matching the first identity exists in the local identity database, the initial identity verification of the first terminal will pass.

[0193] In one embodiment, the upper Figure 9 The upper part of the middle Figure 9 The second verification module 13 further includes:

[0194] The first extraction submodule is used to extract the first identity verification data segment from the third array;

[0195] The first comparison submodule is used to compare the first identity verification data segment with the auxiliary verification data segment corresponding to the second terminal;

[0196] If the comparison results match, the first determination submodule will perform the final identity verification on the first terminal.

[0197] Each module in the aforementioned terminal communication device can be implemented entirely or partially through software, hardware, or a combination thereof. These modules can be embedded in the processor of a computer device in hardware form or independent of it, or stored in the memory of a computer device in software form, so that the processor can call and execute the operations corresponding to each module.

[0198] Based on the same inventive concept, this application also provides a terminal communication device for implementing the terminal communication method described above. The solution provided by this device is similar to the implementation described in the communication method of the first terminal described above. Therefore, the specific limitations in the following embodiment of the terminal communication device can be found in the limitations of the terminal communication method described above, and will not be repeated here.

[0199] In one embodiment, such as Figure 10 As shown, this embodiment provides another terminal communication device 2, which includes:

[0200] The parsing module 20 is used to parse the second array sent by the second terminal to obtain the second identity identifier of the second terminal; wherein, the second array is generated by the second terminal after the first terminal passes the initial identity verification based on the first identity identifier sent by the first terminal;

[0201] The third verification module 21 is used to perform initial identity verification on the second terminal based on the second identity identifier, and generate a third array based on the second array if the verification is successful.

[0202] The third sending module 22 is used to send the third array to the second terminal so that the second terminal can perform the final identity verification of the first terminal based on the third array, and after the verification is successful, it will send back the fourth array.

[0203] The fourth verification module 23 is used to perform final identity verification on the second terminal based on the fourth array fed back by the second terminal, and to establish a communication connection with the second terminal if the verification is successful.

[0204] In one embodiment, in order to generate a third array for final authentication of the first terminal, the third verification module further includes:

[0205] The second extraction submodule is used to extract the auxiliary verification data segment corresponding to the second terminal from the second array;

[0206] The generation submodule is used to generate a third array based on the auxiliary verification data segment corresponding to the second terminal and the auxiliary verification data segment corresponding to the first terminal.

[0207] In one embodiment, the fourth verification module 23 further includes:

[0208] The third extraction submodule is used to extract the second identity verification data segment from the fourth array;

[0209] The second comparison submodule is used to compare the second identity verification data segment with the auxiliary verification data segment corresponding to the first terminal;

[0210] If the comparison results match, the second judgment submodule will perform a final identity verification on the second terminal.

[0211] Each module in the aforementioned terminal communication device can be implemented entirely or partially through software, hardware, or a combination thereof. These modules can be embedded in the processor of a computer device in hardware form or independent of it, or stored in the memory of a computer device in software form, so that the processor can call and execute the operations corresponding to each module.

[0212] In one embodiment, a computer device is provided, which may be a server, and its internal structure diagram may be as follows: Figure 11 As shown, this computer device includes a processor, memory, input / output (I / O) interfaces, and a communication interface. The processor, memory, and I / O interfaces are connected via a system bus, and the communication interface is also connected to the system bus via the I / O interfaces. The processor provides computational and control capabilities. The memory includes non-volatile storage media and internal memory. The non-volatile storage media stores the operating system, computer programs, and a database. The internal memory provides the environment for the operation of the operating system and computer programs stored in the non-volatile storage media. The database stores spectral characteristic data. The I / O interfaces are used for exchanging information between the processor and external devices. The communication interface is used for communicating with external terminals via a network connection. When the computer program is executed by the processor, it implements a terminal communication method.

[0213] Those skilled in the art will understand that Figure 11The structure shown is merely a block diagram of a portion of the structure related to the present application and does not constitute a limitation on the computer device to which the present application is applied. Specific computer devices may include more or fewer components than those shown in the figure, or combine certain components, or have different component arrangements.

[0214] In one embodiment, a computer device is provided, including a memory and a processor, wherein the memory stores a computer program, and the processor executes the computer program to perform the following steps:

[0215] Receive handshake information sent by the first terminal; wherein the handshake information includes the first terminal's first identity identifier and a first array;

[0216] Based on the first identity identifier, the first terminal is initially verified, and if the verification passes, a second array is generated based on the first array and the second identity identifier.

[0217] The second array is sent to the first terminal so that the first terminal can perform an initial identity verification of the second terminal based on the second array, and after the verification is successful, the third array is fed back.

[0218] Based on the third array fed back by the first terminal, the identity of the first terminal is finally verified, and if the verification is successful, a fourth array is generated based on the third array.

[0219] The fourth array is sent to the first terminal so that the first terminal can perform the final identity verification of the second terminal based on the fourth array, and establish a communication connection with the second terminal after the verification is successful.

[0220] In one embodiment, another computer device is also provided, including a memory and a processor, wherein the memory stores a computer program, and the processor executes the computer program to perform the following steps:

[0221] The second identity identifier of the second terminal is obtained by parsing the second array sent by the second terminal; wherein, the second array is generated by the second terminal after the first terminal passes the initial identity verification based on the first identity identifier sent by the first terminal.

[0222] Based on the second identity identifier, the second terminal is initially verified, and if the verification passes, a third array is generated according to the second array.

[0223] The third array is sent to the second terminal so that the second terminal can perform the final identity verification of the first terminal based on the third array, and after the verification is successful, the fourth array is fed back.

[0224] Based on the fourth array fed back by the second terminal, the identity of the second terminal is finally verified, and a communication connection is established with the second terminal if the verification is successful.

[0225] In one embodiment, a computer-readable storage medium is provided having a computer program stored thereon, the computer program performing the following steps when executed by a processor:

[0226] Receive handshake information sent by the first terminal; wherein the handshake information includes the first terminal's first identity identifier and a first array;

[0227] Based on the first identity identifier, the first terminal is initially verified, and if the verification passes, a second array is generated based on the first array and the second identity identifier.

[0228] The second array is sent to the first terminal so that the first terminal can perform an initial identity verification of the second terminal based on the second array, and after the verification is successful, the third array is fed back.

[0229] Based on the third array fed back by the first terminal, the identity of the first terminal is finally verified, and if the verification is successful, a fourth array is generated based on the third array.

[0230] The fourth array is sent to the first terminal so that the first terminal can perform the final identity verification of the second terminal based on the fourth array, and establish a communication connection with the second terminal after the verification is successful.

[0231] In one embodiment, another computer-readable storage medium is also provided, on which a computer program is stored, which, when executed by a processor, performs the following steps:

[0232] The second identity identifier of the second terminal is obtained by parsing the second array sent by the second terminal; wherein, the second array is generated by the second terminal after the first terminal passes the initial identity verification based on the first identity identifier sent by the first terminal.

[0233] Based on the second identity identifier, the second terminal is initially verified, and if the verification passes, a third array is generated according to the second array.

[0234] The third array is sent to the second terminal so that the second terminal can perform the final identity verification of the first terminal based on the third array, and after the verification is successful, the fourth array is fed back.

[0235] Based on the fourth array fed back by the second terminal, the identity of the second terminal is finally verified, and a communication connection is established with the second terminal if the verification is successful.

[0236] In one embodiment, a computer program product is provided, including a computer program that, when executed by a processor, performs the following steps:

[0237] Receive handshake information sent by the first terminal; wherein the handshake information includes the first terminal's first identity identifier and a first array;

[0238] Based on the first identity identifier, the first terminal is initially verified, and if the verification passes, a second array is generated based on the first array and the second identity identifier.

[0239] The second array is sent to the first terminal so that the first terminal can perform an initial identity verification of the second terminal based on the second array, and after the verification is successful, the third array is fed back.

[0240] Based on the third array fed back by the first terminal, the identity of the first terminal is finally verified, and if the verification is successful, a fourth array is generated based on the third array.

[0241] The fourth array is sent to the first terminal so that the first terminal can perform the final identity verification of the second terminal based on the fourth array, and establish a communication connection with the second terminal after the verification is successful.

[0242] In one embodiment, another computer program product is also provided, including a computer program that, when executed by a processor, performs the following steps:

[0243] The second identity identifier of the second terminal is obtained by parsing the second array sent by the second terminal; wherein, the second array is generated by the second terminal after the first terminal passes the initial identity verification based on the first identity identifier sent by the first terminal.

[0244] Based on the second identity identifier, the second terminal is initially verified, and if the verification passes, a third array is generated according to the second array.

[0245] The third array is sent to the second terminal so that the second terminal can perform the final identity verification of the first terminal based on the third array, and after the verification is successful, the fourth array is fed back.

[0246] Based on the fourth array fed back by the second terminal, the identity of the second terminal is finally verified, and a communication connection is established with the second terminal if the verification is successful.

[0247] Those skilled in the art will appreciate that all or part of the processes in the above-mentioned embodiments can be implemented by instructing the relevant hardware through a computer program. The computer program can be stored in a non-volatile computer-readable storage medium. When the computer program is executed, it can include the processes of the above-mentioned embodiments. In particular, any reference to memory, database, or other media used in the embodiments provided in this application can include at least one of non-volatile and volatile memory. Non-volatile memory can include read-only memory (ROM), magnetic tape, floppy disk, flash memory, optical memory, high-density embedded non-volatile memory, resistive random access memory (ReRAM), magnetic random access memory (MRAM), ferroelectric random access memory (FRAM), phase change memory (PCM), graphene memory, etc. Volatile memory can include random access memory (RAM) or external cache memory, etc. By way of illustration and not limitation, RAM can take many forms, such as Static Random Access Memory (SRAM) or Dynamic Random Access Memory (DRAM). The databases involved in the embodiments provided in this application may include at least one type of relational database and non-relational database. Non-relational databases may include, but are not limited to, blockchain-based distributed databases. The processors involved in the embodiments provided in this application may be general-purpose processors, central processing units, graphics processing units, digital signal processors, programmable logic devices, quantum computing-based data processing logic devices, etc., and are not limited to these.

[0248] The technical features of the above embodiments can be combined in any way. For the sake of brevity, not all possible combinations of the technical features in the above embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this specification.

[0249] The above-described embodiments merely represent several implementation methods of the present application. While the descriptions are relatively specific and detailed, they should not be construed as limiting the scope of the present application. It should be noted that a person of ordinary skill in the art may make various modifications and improvements without departing from the spirit of the present application, and these modifications and improvements fall within the scope of protection of the present application. Therefore, the scope of protection of the present application shall be determined by the appended claims.

Claims

1. A terminal communication method, characterized in that, The method includes: Receive handshake information sent by a first terminal; wherein the handshake information includes a first identity identifier and a first array of the first terminal; Based on the first identity identifier, the first terminal undergoes initial identity verification. If the verification passes, a target data segment is determined according to the first array and the session key corresponding to the second terminal. A second array is generated based on the target data segment, the auxiliary verification data segment corresponding to the second terminal, and the second identity identifier of the second terminal. The second array is used to generate a third array. The second array is sent to the first terminal so that the first terminal can perform an initial identity verification of the second terminal based on the second array, and after the verification is successful, the third array is fed back. Extract the first identity verification data segment from the third array; The first identity verification data segment is compared with the auxiliary verification data segment corresponding to the second terminal; If they match, the final identity verification of the first terminal is passed; If the verification passes, a fourth array is generated based on the third array; The fourth array is sent to the first terminal so that the first terminal can perform a final identity verification on the second terminal based on the fourth array, and establish a communication connection with the second terminal after the verification is successful. The first terminal performs a final identity verification on the second terminal based on the fourth array, which includes: extracting a second identity verification data segment from the fourth array; comparing the second identity verification data segment with the auxiliary verification data segment corresponding to the first terminal; if they match, the final identity verification of the second terminal passes.

2. The method according to claim 1, characterized in that, The session key is a key pre-configured on the second terminal.

3. The method according to claim 1, characterized in that, The step of determining the target data segment based on the first array and the session key corresponding to the first terminal includes: Extract the cascaded fields from the first array; The cascaded field is concatenated with the first array to obtain a cascaded array; The concatenated array is XORed with the session key corresponding to the first terminal to obtain the target data segment.

4. The method according to claim 1, characterized in that, The initial identity verification of the first terminal based on the first identity identifier includes: If a target identity matching the first identity exists in the local identity database, the initial identity verification of the first terminal passes.

5. The method according to claim 1, characterized in that, The target data segment is a data segment obtained by processing the session keys corresponding to the first array and the second terminal according to preset rules.

6. A terminal communication method, characterized in that, The method includes: The second identity identifier of the second terminal is obtained by parsing the second array sent by the second terminal; wherein, the second array is generated by the second terminal based on the first identity identifier sent by the first terminal, after the first terminal passes the initial identity verification, and based on the target data segment and the auxiliary verification data segment corresponding to the second terminal, as well as the second identity identifier of the second terminal; the target data segment is determined based on the first array and the session key corresponding to the second terminal; the first array is sent by the first terminal; Based on the second identity identifier, the second terminal is initially verified, and if the verification passes, a third array is generated according to the second array; The third array is sent to the second terminal so that the second terminal can perform a final identity verification on the first terminal based on the first identity verification data segment in the third array and the auxiliary verification data segment corresponding to the second terminal, and after the verification is successful, a fourth array is fed back; the fourth array refers to the array generated by the second terminal based on the third array after the final identity verification of the first terminal is successful. Extract the second identity verification data segment from the fourth array; The second identity verification data segment is compared with the auxiliary verification data segment corresponding to the first terminal; If they match, the identity of the second terminal is finally verified, and a communication connection is established with the second terminal if the verification is successful.

7. The method according to claim 6, characterized in that, The step of generating a third array based on the second array includes: Extract the auxiliary verification data segment corresponding to the second terminal from the second array; A third array is generated based on the auxiliary verification data segment corresponding to the second terminal and the auxiliary verification data segment corresponding to the first terminal.

8. The method according to claim 6, characterized in that, The auxiliary verification data is verification data randomly generated by the second terminal or generated according to certain rules.

9. A terminal communication device, characterized in that, include: A receiving module is configured to receive handshake information sent by a first terminal; wherein the handshake information includes a first identity identifier and a first array of the first terminal; The first verification module is used to perform initial identity verification on the first terminal based on the first identity identifier, and if the verification is successful, determine the target data segment according to the first array and the session key corresponding to the second terminal; generate a second array according to the target data segment and the auxiliary verification data segment corresponding to the second terminal, and the second identity identifier of the second terminal; the second array is used to generate a third array. The first sending module is used to send the second array to the first terminal so that the first terminal can perform an initial identity verification of the second terminal based on the second array, and after the verification is successful, it will send back the third array. The second verification module is used to extract a first identity verification data segment from the third array; compare the first identity verification data segment with the auxiliary verification data segment corresponding to the second terminal; if they match, the first terminal passes the final identity verification, and if the verification passes, a fourth array is generated based on the third array. The second sending module is used to send the fourth array to the first terminal so that the first terminal can perform a final identity verification of the second terminal based on the fourth array, and establish a communication connection with the second terminal after the verification is successful. The first terminal performs a final identity verification on the second terminal based on the fourth array, which includes: extracting a second identity verification data segment from the fourth array; comparing the second identity verification data segment with the auxiliary verification data segment corresponding to the first terminal; if they match, the final identity verification of the second terminal passes.

10. A terminal communication device, characterized in that, include: The parsing module is used to parse a second array sent by the second terminal to obtain a second identity identifier of the second terminal; wherein, the second array is generated by the second terminal based on a first identity identifier sent by the first terminal, after the first terminal passes the initial identity verification, and according to a target data segment and an auxiliary verification data segment corresponding to the second terminal, as well as the second identity identifier of the second terminal; the target data segment is determined based on the first array and the session key corresponding to the second terminal; the first array is sent by the first terminal; The third verification module is used to perform initial identity verification on the second terminal based on the second identity identifier, and generate a third array based on the second array if the verification is successful. The third sending module is used to send the third array to the second terminal, so that the second terminal can perform a final identity verification on the first terminal based on the first identity verification data segment in the third array and the auxiliary verification data segment corresponding to the second terminal, and after the verification is successful, it will feed back a fourth array; the fourth array refers to the array generated by the second terminal based on the third array after the final identity verification of the first terminal is successful. The fourth verification module is used to extract a second identity verification data segment from the fourth array; compare the second identity verification data segment with the auxiliary verification data segment corresponding to the first terminal; if they match, the second terminal will pass the final identity verification, and a communication connection will be established with the second terminal if the verification passes.

Images