Terminal unlocking method, device and storage medium

Abstract

The present disclosure provides a terminal unlocking method, device and storage medium, which relates to the field of communication technology and solves the technical problem in the related technology that the unlocking method is too cumbersome after the terminal is locked. The method includes: receiving a secret call number, an encryption card identifier and an identifier of a terminal to be unlocked from a terminal identity authentication device; the secret call number is used to represent the basic information of the user, and the encryption card identifier is the unique identifier of the encryption card of the terminal; based on the secret call number, the encryption card identifier and the identifier of the terminal to be unlocked, the terminal to be unlocked is authenticated and the authentication result is determined; and the authentication result is sent to the terminal identity authentication device. The present disclosure is used in the terminal unlocking process in the terminal locking scenario.

Description

Technical Field

[0001] The present disclosure relates to the field of communication technology, and in particular to a terminal unlocking method, device and storage medium. Background Art

[0002] Currently, when a user uses a security terminal, he needs to enter the encryption card password (Personal Identification Number, PIN) to unlock the terminal. When the user enters the password incorrectly multiple times, the encryption card will be locked and the security terminal will be unusable. The user needs to bring the security terminal to the communication company's operation center to unlock it, which is too cumbersome. Summary of the invention

[0003] The present disclosure provides a terminal unlocking method, device and storage medium, which solve the problem in the related art that after the terminal is locked, the unlocking method is too complicated.

[0004] In order to achieve the above objectives, the present invention adopts the following technical solutions:

[0005] In a first aspect, a terminal unlocking method is provided, which is applied to an encryption card identity authentication server, including: receiving a secret call number, an encryption card identifier and an identifier of a terminal to be unlocked from a terminal identity authentication device; the secret call number is used to represent the basic information of the user, and the encryption card identifier is a unique identifier of the encryption card of the terminal; based on the secret call number, the encryption card identifier and the identifier of the terminal to be unlocked, the terminal to be unlocked is authenticated to determine the authentication result; and the authentication result is sent to the terminal identity authentication device.

[0006] In combination with the above-mentioned first aspect, in a possible implementation method, the terminal to be unlocked is authenticated based on the secret call number, the encryption card identifier and the identifier of the terminal to be unlocked, and the identity authentication result is determined, including: in any of the following cases, the identity authentication result is determined to be a successful authentication: there is no terminal bound to the secret call number, the secret call number and the encryption card identifier match, and the terminal to be unlocked is not bound to other secret call numbers; there is a terminal bound to the secret call number, the secret call number and the encryption card identifier match, and the secret call number and the identifier of the terminal to be unlocked match; in any of the following cases, the identity authentication result is determined to be a failed authentication: there is no terminal bound to the secret call number, and the secret call number and the encryption card identifier do not match; there is no terminal bound to the secret call number, the secret call number and the encryption card identifier match, but the terminal to be unlocked is bound to other secret call numbers; there is a terminal bound to the secret call number, the secret call number and the encryption card identifier do not match and / or the secret call number and the identifier of the terminal to be unlocked do not match.

[0007] In combination with the first aspect above, in a possible implementation, based on the secret number, the encryption card identifier and the identifier of the terminal to be unlocked, the identity authentication result is determined for the terminal to be unlocked, and the specific implementation includes: when it is determined that the identity authentication result is successful, performing secondary authentication on the terminal to be unlocked to determine the secondary authentication result; and sending the secondary authentication result to the terminal identity authentication device. In combination with the first aspect above, in a possible implementation, performing secondary authentication on the terminal to be unlocked to determine the secondary authentication result includes: determining an authentication device; sending a first verification message to the authentication device; obtaining a user's verification message input operation; the verification message input operation is used to input a second verification message; determining whether the first verification message and the second verification message are consistent; if they are consistent, determining that the secondary authentication result is a successful authentication; if they are inconsistent, determining that the secondary authentication result is an authentication failure.

[0008] In a second aspect, a terminal unlocking method is provided, which is applied to a terminal identity authentication device, including: determining a secret call number, an encryption card identifier and an identifier of a terminal to be unlocked; the secret call number is used to represent the basic information of the user, and the encryption card identifier is a unique identifier of the encryption card of the terminal; sending the secret call number, the encryption card identifier and the identifier of the terminal to be unlocked to an encryption card identity authentication server; receiving an identity authentication result from the encryption card identity authentication server; the identity authentication result is an identity authentication result determined by the encryption card identity authentication server after authenticating the terminal to be unlocked based on the secret call number, the encryption card identifier and the identifier of the terminal to be unlocked; and unlocking the terminal to be unlocked based on the identity authentication result.

[0009] In combination with the above-mentioned second aspect, in a possible implementation method, the terminal to be unlocked is unlocked according to the identity authentication result, including: when the identity authentication result is authentication success, determining to unlock the terminal to be unlocked; when the identity authentication result is authentication failure, determining not to unlock the terminal to be unlocked.

[0010] In combination with the above-mentioned second aspect, in a possible implementation method, determining the secret call number includes: determining the secret call number according to a first input operation; the first input operation is an operation in which the user inputs the secret call number; determining the encryption card identifier includes: sending a first request message to the encryption card, the first request message is used to request the encryption card identifier; receiving a first response message from the encryption card; the first response message is used to indicate the encryption card identifier; determining the identifier of the terminal to be unlocked, including: sending a second request message to the terminal to be unlocked, the second request message is used to request the identifier of the terminal to be unlocked; receiving a second response message from the identifier of the terminal to be unlocked; the second response message is used to indicate the identifier of the terminal to be unlocked.

[0011] In a third aspect, a terminal unlocking device is provided, which is applied to an encryption card identity authentication server, including: a communication unit and a processing unit; the communication unit is used to receive a secret call number, an encryption card identifier and an identifier of a terminal to be unlocked from the terminal identity authentication device; the secret call number is used to represent the basic information of the user, and the encryption card identifier is a unique identifier of the encryption card of the terminal; the processing unit is specifically used to authenticate the terminal to be unlocked based on the secret call number, the encryption card identifier and the identifier of the terminal to be unlocked, and determine the authentication result; and send the authentication result to the terminal identity authentication device.

[0012] In combination with the third aspect above, in a possible implementation method, the processing unit is specifically used to determine that the identity authentication result is a successful authentication in any of the following cases: the secret call number does not exist to be bound to a terminal, the secret call number matches the encryption card identifier, and the terminal to be unlocked is not bound to other secret call numbers; the secret call number does exist to be bound to a terminal, the secret call number matches the encryption card identifier, and the secret call number matches the identifier of the terminal to be unlocked; in any of the following cases, determine that the identity authentication result is a failed authentication: the secret call number does not exist to be bound to a terminal, the secret call number does not match the encryption card identifier; the secret call number does not exist to be bound to a terminal, the secret call number matches the encryption card identifier, but the terminal to be unlocked is bound to other secret call numbers; the secret call number does exist to be bound to a terminal, the secret call number does not match the encryption card identifier and / or the secret call number does not match the identifier of the terminal to be unlocked.

[0013] In combination with the above-mentioned third aspect, in a possible implementation method, the processing unit is specifically used to perform secondary authentication on the terminal to be unlocked and determine the secondary authentication result when it is determined that the identity authentication result is successful; the communication unit is specifically used to send the secondary authentication result to the terminal identity authentication device.

[0014] In combination with the above-mentioned third aspect, in a possible implementation method, the processing unit is specifically used to determine the authentication device; the communication unit is also specifically used to send a first verification message to the authentication device; obtain the user's verification message input operation; the verification message input operation is used to input a second verification message; the processing unit is also specifically used to determine whether the first verification message and the second verification message are consistent; if they are consistent, the secondary authentication result is determined to be authentication success; if they are inconsistent, the secondary authentication result is determined to be authentication failure.

[0015] In a fourth aspect, a terminal unlocking device is provided, which is applied to a terminal identity authentication device, and includes: a communication unit and a processing unit; the processing unit is used to determine the secret call number, the encryption card identifier and the identifier of the terminal to be unlocked; the secret call number is used to represent the basic information of the user, and the encryption card identifier is the unique identifier of the encryption card of the terminal; the communication unit is used to send the secret call number, the encryption card identifier and the identifier of the terminal to be unlocked to the encryption card identity authentication server; the communication unit is also used to receive an identity authentication result from the encryption card identity authentication server; the identity authentication result is the identity authentication result determined by the encryption card identity authentication server after authenticating the terminal to be unlocked based on the secret call number, the encryption card identifier and the identifier of the terminal to be unlocked; the processing unit is also used to unlock the terminal to be unlocked based on the identity authentication result.

[0016] In combination with the fourth aspect, in a possible implementation, the processing unit is specifically used to: when the identity authentication result is authentication success, determine to unlock the terminal to be unlocked; when the identity authentication result is authentication failure, determine not to unlock the terminal to be unlocked.

[0017] In combination with the above-mentioned fourth aspect, in a possible implementation method, the processing unit is specifically used to: determine the secret call number according to a first input operation; the first input operation is an operation in which the user inputs the secret call number; the communication unit is also used to send a first request message to the encryption card, and the first request message is used to request the encryption card identification; the communication unit is also used to receive a first response message from the encryption card; the first response message is used to indicate the encryption card identification; the communication unit is also used to send a second request message to the terminal to be unlocked, and the second request message is used to request the identification of the terminal to be unlocked; the communication unit is also used to receive a second response message from the identification of the terminal to be unlocked; the second response message is used to indicate the identification of the terminal to be unlocked.

[0018] In a fifth aspect, a terminal unlocking device is provided, comprising: a processor and a memory; wherein the memory is used to store computer execution instructions, and when the terminal unlocking device is running, the processor executes the computer execution instructions stored in the memory to enable the terminal unlocking device to perform the terminal unlocking method recorded in the first aspect and any possible implementation thereof, or to enable the terminal unlocking device to perform the terminal unlocking method recorded in the second aspect and any possible implementation thereof.

[0019] In a sixth aspect, a computer-readable storage medium is provided, in which instructions are stored. When the instructions in the computer-readable storage medium are executed by a processor of a terminal unlocking device, the terminal unlocking device executes the terminal unlocking method as described in the first aspect and any possible implementation thereof, or the terminal unlocking device executes the terminal unlocking method as described in the second aspect and any possible implementation thereof.

[0020] In the present disclosure, the name of the terminal unlocking device does not limit the device or functional module itself. In actual implementation, these devices or functional modules may appear with other names. As long as the functions of each device or functional module are similar to those of the present disclosure, they belong to the scope of the present disclosure and its equivalent technologies.

[0021] These and other aspects of the present disclosure will become more apparent from the following description.

[0022] The technical solution provided by the present disclosure brings at least the following beneficial effects: when it is necessary to unlock the terminal, the terminal identity authentication device sends the secret call number, the encryption card identifier and the identifier of the terminal to be unlocked to the encryption card identity authentication server for identity authentication; the encryption card identity authentication server can determine whether the unlocking is performed by the user to which the terminal belongs based on whether there is a correlation between the secret call number, the encryption card identifier and the identifier of the terminal to be unlocked, thereby ensuring the security of the unlocking and realizing remote unlocking of the terminal. BRIEF DESCRIPTION OF THE DRAWINGS

[0023] In order to more clearly illustrate the embodiments of the present disclosure or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art are briefly introduced below.

[0024] Figure 1 A schematic diagram of the hardware structure of a terminal unlocking device provided in an embodiment of the present disclosure;

[0025] Figure 2 A schematic diagram of an identity authentication system for a terminal locking scenario provided by an embodiment of the present disclosure;

[0026] Figure 3 A schematic diagram of a process of unlocking a terminal provided by an embodiment of the present disclosure;

[0027] Figure 4 A flowchart of another terminal unlocking method provided by an embodiment of the present disclosure;

[0028] Figure 5 A flowchart of another terminal unlocking method provided by an embodiment of the present disclosure;

[0029] Figure 6 A flowchart of another terminal unlocking method provided by an embodiment of the present disclosure;

[0030] Figure 7 A flowchart of another terminal unlocking method provided by an embodiment of the present disclosure;

[0031] Figure 8 A flowchart of another terminal unlocking method provided by an embodiment of the present disclosure;

[0032] Fig. 9 A flowchart of another terminal unlocking method provided by an embodiment of the present disclosure;

[0033] Fig.10 A flowchart of another terminal unlocking method provided by an embodiment of the present disclosure;

[0034] Fig.11 A schematic diagram of the structure of a terminal unlocking device provided in an embodiment of the present disclosure;

[0035] Fig.12 A schematic diagram of the structure of another terminal unlocking device provided in an embodiment of the present disclosure. DETAILED DESCRIPTION

[0036] A terminal unlocking method, device and storage medium provided by an embodiment of the present disclosure are described in detail below with reference to the accompanying drawings.

[0037] The term "and / or" in this article is merely a description of the association relationship of associated objects, indicating that three relationships may exist. For example, A and / or B can mean: A exists alone, A and B exist at the same time, and B exists alone.

[0038] The terms “first”, “second” and the like in the specification and drawings of the present disclosure are used to distinguish different objects, or to distinguish different processing of the same object, rather than to describe a specific order of objects.

[0039] In addition, the terms "including" and "having" and any variations thereof mentioned in the description of the present disclosure are intended to cover non-exclusive inclusions. For example, a process, method, system, product or device that includes a series of steps or units is not limited to the listed steps or units, but may optionally include other steps or units that are not listed, or may optionally include other steps or units that are inherent to these processes, methods, products or devices.

[0040] It should be noted that, in the embodiments of the present disclosure, words such as "exemplary" or "for example" are used to indicate examples, illustrations or descriptions. Any embodiment or design described as "exemplary" or "for example" in the embodiments of the present disclosure should not be interpreted as being more preferred or more advantageous than other embodiments or designs. Specifically, the use of words such as "exemplary" or "for example" is intended to present related concepts in a specific way.

[0041] In the description of the present disclosure, unless otherwise specified, “plurality” means two or more.

[0042] Figure 1The hardware structure diagram of a terminal unlocking device provided in the embodiment of the present disclosure is shown in FIG. 1 . The terminal unlocking device 100 may be a terminal identity authentication device or an encryption card identity authentication server described in the embodiment of the present disclosure, or a chip or processing unit thereof, which is not limited in the present disclosure. Figure 1 As shown, the terminal unlocking device 100 includes at least one processor 101, a communication line 102, and at least one communication interface 104, and may also include a memory 103. The processor 101, the memory 103 and the communication interface 104 may be connected via the communication line 102.

[0043] The processor 101 may be a central processing unit (CPU), an application specific integrated circuit (ASIC), or one or more integrated circuits configured to implement the embodiments of the present disclosure, such as one or more digital signal processors (DSP), or one or more field programmable gate arrays (FPGA).

[0044] The communication link 102 may include a pathway for transmitting information between the above-mentioned components.

[0045] The communication interface 104 is used to communicate with other devices or communication networks, and can use any transceiver-like device, such as Ethernet, radio access network (RAN), wireless local area network (WLAN), etc.

[0046] The memory 103 may be a read-only memory (ROM) or other types of static storage devices that can store static information and instructions, a random access memory (RAM) or other types of dynamic storage devices that can store information and instructions, or an electrically erasable programmable read-only memory (EEPROM), a compact disc read-only memory (CD-ROM) or other optical disc storage, an optical disc storage (including a compressed optical disc, a laser disc, an optical disc, a digital versatile disc, a Blu-ray disc, etc.), a magnetic disk storage medium or other magnetic storage device, or any other medium that can be used to include or store desired program code in the form of instructions or data structures and can be accessed by a computer, but is not limited thereto.

[0047] In one possible design, the memory 103 can exist independently of the processor 101, that is, the memory 103 can be a memory outside the processor 101. In this case, the memory 103 can be connected to the processor 101 through the communication line 102, and is used to store execution instructions or application code, and the processor 101 controls the execution to implement the network quality determination method provided in the following embodiment of the present disclosure. In another possible design, the memory 103 can also be integrated with the processor 101, that is, the memory 103 can be the internal memory of the processor 101, for example, the memory 103 is a high-speed cache, which can be used to temporarily store some data and instruction information, etc.

[0048] As an implementation method, the processor 101 may include one or more CPUs, for example Figure 1 As another possible implementation, the terminal unlocking device 100 may include multiple processors, such as Figure 1 As another implementation, the terminal unlocking device 100 may further include an output device 105 and an input device 106.

[0049] Through the description of the above implementation methods, technicians in the relevant field can clearly understand that for the convenience and simplicity of description, only the division of the above functional modules is used as an example. In actual applications, the above functions can be assigned to different functional modules as needed, that is, the internal structure of the network node is divided into different functional modules to complete all or part of the functions described above. The specific working process of the system, module and network node described above can refer to the corresponding process in the aforementioned method embodiment, and will not be repeated here.

[0050] The following explains the terms involved in the embodiments of the present disclosure to facilitate readers' understanding.

[0051] 1. Secure Terminal

[0052] A security terminal refers to a terminal device with information security protection function launched by an enterprise or organization with confidentiality requirements to ensure the core data security and communication security of the enterprise or organization. The security terminal includes two sets of usage systems and encryption cards. Users use non-security systems in their daily lives to ensure the convenience of daily use of the terminal. Users use the security system of the intranet at work. The security system includes various security office applications, security management applications, encrypted communications and other functions to ensure information security. The encryption card provides data encryption and identity authentication services for the intranet security system. When a user receives a mobile phone, the organization's device administrator will generate an encryption card identifier, the user's digital certificate, key and other information used for identity authentication and encryption and decryption services, and write them into the encryption card. Each user's digital certificate and key are different, which are used to limit users to only use their own encryption cards for data encryption and decryption services.

[0053] To ensure the data security and ease of use of the security terminal, users need to enter a PIN code to unlock the terminal when using the security terminal. When the user enters the wrong PIN code multiple times, the encryption card will be locked, causing the security terminal to be locked and unusable. At this time, the user needs to bring the security terminal to the communications company's operation center to unlock it, which is too cumbersome.

[0054] 2. Terminal identity authentication

[0055] Terminal identity authentication refers to the authentication of the identity of the user using the terminal in order to ensure the security of terminal data. Currently, common terminal identity authentication methods include password authentication, SMS verification code verification and biometric verification.

[0056] Among them, password authentication is to authenticate the user's identity by verifying the preset password or preset graphic password entered by the user.

[0057] However, in the scenario where the security terminal is locked, the security terminal is locked due to multiple incorrect password inputs, so the password authentication method is not applicable to the scenario where the security terminal is locked.

[0058] SMS verification code authentication is a process in which the user requests the communication platform to send a verification code to the user's reserved mobile phone number, and the verification code entered by the user is verified to authenticate the user's identity.

[0059] Because the SMS verification code will be sent to the security terminal, the SMS verification code cannot be used as a credential for identity authentication, that is, the SMS verification code cannot authenticate the user's identity.

[0060] Biometric authentication is a close combination of computers with high-tech means such as optics, acoustics, biosensors and biostatistics principles, which uses the inherent physiological characteristics of the human body (such as fingerprints, facial images, irises, etc.) and behavioral characteristics (such as handwriting, voice, gait, etc.) to authenticate the user's identity.

[0061] The biometric authentication method requires that the ID card information be reserved in the system, but groups or individuals with higher security requirements will not reserve the ID card information in the system. Therefore, in the scenario where the security terminal is locked, the user identity cannot be authenticated through the biometric authentication method.

[0062] In order to solve the technical problems existing in the related art, the present disclosure provides an identity authentication system 20 in a terminal locking scenario. Figure 2 As shown, the system 20 mainly includes four parts: an encryption card identity authentication server 201, a terminal identity authentication device 202, an encryption card 203 and a terminal 204 to be unlocked.

[0063] Among them, the encryption card authentication server 201 stores the user's encryption card identification, secret number and terminal binding information, and can perform the first identity authentication based on the user's encryption card identification, secret number and terminal binding information. The user needs to register the secret number to represent the user's basic information. After the first identity authentication is successful, a second identity authentication can be performed to ensure the credibility of the user's identity when unlocking the terminal to be unlocked 204.

[0064] The terminal identity authentication device 202 is used to exchange information with the user and determine whether to unlock the terminal according to the authentication result of the encryption card identity authentication server 201.

[0065] The encryption card 203 is used to provide an encryption card identification, which is transmitted to the encryption card identification server 201 for identification authentication by the terminal identification device 202. The encryption card identification is written into the encryption card 203 when the card is made, and will not be changed if the card is not re-made.

[0066] The terminal to be unlocked 204 includes a storage unit, which can provide the identification of the terminal to be unlocked 204 during identity authentication, and the terminal identity authentication device 202 transmits it to the encryption card identity authentication server 201 for identity authentication. The identification of the terminal to be unlocked 204 is written into the storage unit of the mobile phone when the mobile phone leaves the factory, and cannot be modified after writing.

[0067] When unlocking the terminal, the terminal identity authentication device 202 first obtains the secret number input by the user, the terminal identity authentication device 202 requests the encryption card 203 to send the encryption card identification and receives the encryption card identification, the terminal identity authentication device 202 requests the storage unit of the terminal to be unlocked 204 to send the identification of the terminal to be unlocked 204 and receives the identification of the terminal to be unlocked 204, and then sends the secret number, the encryption card identification and the identification of the terminal to be unlocked 204 to the encryption card identity authentication server 201 for identity authentication and receives the identity authentication result.

[0068] Currently, when a user uses a security terminal, he needs to enter a PIN code to unlock the terminal. When the user enters an incorrect PIN code multiple times, the encryption card 203 will be locked, causing the security terminal to be locked and unusable. At this time, the user needs to bring the security terminal to the communication company's operation center to unlock it, which is too cumbersome.

[0069] In order to solve the technical problems existing in the related technologies, the present disclosure provides an identity authentication method in a terminal locking scenario. When the terminal needs to be unlocked, the terminal identity authentication device sends the secret call number, the encryption card identifier and the identifier of the terminal to be unlocked to the encryption card identity authentication server for identity authentication; the encryption card identity authentication server can determine whether the unlocking is performed by the user to which the terminal belongs based on whether there is a correlation between the secret call number, the encryption card identifier and the identifier of the terminal to be unlocked, thereby ensuring the security of the unlocking and realizing remote unlocking of the terminal.

[0070] like Figure 3 As shown, Figure 3 The identity authentication method in the terminal locking scenario provided by the embodiment of the present disclosure can be applied to the following Figure 1 In the terminal unlocking device shown or as Figure 2 In the terminal identity authentication system shown, the method includes the following S301-S305.

[0071] S301. The terminal identity authentication device determines the secret call number, the encryption card identifier, and the identifier of the terminal to be unlocked.

[0072] The secret number is used to indicate the basic information of the user, and the encryption card identifier is the unique identifier of the encryption card of the terminal.

[0073] S302: The terminal identity authentication device sends the secret number, the encryption card identification and the identification of the terminal to be unlocked to the encryption card identification server. Correspondingly, the encryption card identification server receives the secret number, the encryption card identification and the identification of the terminal to be unlocked from the terminal identity authentication device.

[0074] S303: The encryption card identity authentication server performs identity authentication on the terminal to be unlocked based on the secret call number, the encryption card identifier and the identifier of the terminal to be unlocked, and determines an identity authentication result.

[0075] Optionally, to ensure the legitimacy of the user's identity and data security, when the user uses the terminal for the first time, the encryption card identity authentication server will bind the encryption card ID, secret call number, and terminal device ID, and save the binding information. Therefore, the encryption card identity authentication server can authenticate the terminal to be unlocked by verifying the matching of the secret call number and the terminal ID to be unlocked, and the matching of the secret call number and the encryption card ID.

[0076] After receiving the secret number, the encryption card identification and the identification of the terminal to be unlocked, the encryption card authentication server queries whether there is an association relationship among the secret number, the encryption card identification and the identification of the terminal to be unlocked received this time in its own stored association relationship.

[0077] If yes, the result of identity authentication is determined to be identity authentication success. If no, the result of identity authentication is determined to be identity authentication failure.

[0078] S304: The encryption card identity authentication server sends the identity authentication result to the terminal identity authentication device. Correspondingly, the terminal identity authentication device receives the identity authentication result from the encryption card identity authentication server.

[0079] S305: The terminal identity authentication device unlocks the terminal to be unlocked according to the identity authentication result.

[0080] In a possible implementation, the terminal identity authentication device may unlock the terminal according to the result of successful identity authentication sent by the encryption card identity authentication server.

[0081] The technical solution provided by the above embodiment can at least bring the following beneficial effects: when the terminal needs to be unlocked, the terminal identity authentication device sends the secret call number, the encryption card identifier and the identifier of the terminal to be unlocked to the encryption card identity authentication server for identity authentication; the encryption card identity authentication server can determine whether the unlocking is performed by the user to which the terminal belongs based on whether there is an association between the secret call number, the encryption card identifier and the identifier of the terminal to be unlocked, thereby ensuring the security of the solution and realizing remote unlocking of the terminal.

[0082] In one possible implementation, combining Figure 3 ,like Figure 4 As shown, in the above S305, the terminal identity authentication device unlocks the terminal to be unlocked according to the identity authentication result, which can be specifically implemented through the following S401-S402, which is described in detail below.

[0083] S401. When the identity authentication result is successful, the terminal identity authentication device determines to unlock the terminal to be unlocked.

[0084] It is understandable that if the terminal authentication device receives a successful authentication result from the encryption card authentication server, it can be determined that the unlocking operation is performed by the owner himself to unlock the terminal to be unlocked. At this time, the terminal authentication device can determine to unlock the terminal to be unlocked.

[0085] In a possible implementation, the encryption card identity authentication server sends a successful identity authentication result to the terminal identity authentication device, and the terminal identity authentication device determines to unlock the terminal to be unlocked according to the identity authentication result.

[0086] S402: When the identity authentication result is an authentication failure, the terminal identity authentication device determines not to unlock the terminal to be unlocked.

[0087] It is understandable that if the terminal authentication device receives an authentication result of failed authentication from the encryption card authentication server, it cannot be determined that the unlocking operation is performed by the owner himself to unlock the terminal to be unlocked. At this time, the terminal authentication device does not unlock the terminal to be unlocked.

[0088] In a possible implementation, the encryption card identity authentication server sends the identity authentication failure result to the terminal identity authentication device, and the terminal identity authentication device determines not to unlock the terminal to be unlocked according to the identity authentication result.

[0089] The technical solution provided by the above embodiment can at least bring the following beneficial effects: the terminal identity authentication device receives the identity authentication result from the encryption card identity authentication server, determines whether to unlock the terminal to be unlocked based on whether the identity authentication result is successful, and restricts the terminal to be unlocked to be unlocked only by the owner himself, thereby ensuring the security of self-unlocking the terminal.

[0090] In one possible implementation, combining Figure 3 ,like Figure 5 As shown, in the above S301, the terminal identity authentication device determines the secret call number, the encryption card identifier and the identifier of the terminal to be unlocked, which can be specifically implemented through the following S501-S505, which is described in detail below.

[0091] S501. The terminal identity authentication device determines a secret call number according to a first input operation.

[0092] The first input operation is an operation in which the user inputs a secret number.

[0093] In a possible implementation, when unlocking the terminal to be unlocked, the user inputs a secret number to the terminal identity authentication device. The terminal identity authentication device determines the secret number as the secret number to be sent to the encryption card identity authentication server for identity authentication based on the secret number input by the user.

[0094] S502: The terminal identity authentication device sends a first request message to the encryption card. The encryption card receives the first request message from the terminal identity authentication device.

[0095] The first request information is used to request an encrypted card identifier.

[0096] In a possible implementation, when a user unlocks a terminal to be unlocked, the terminal identity authentication device sends a first request message to the encryption card to request to obtain the encryption card identifier.

[0097] S503: The encryption card sends a first response message to the terminal identity authentication device. Correspondingly, the terminal identity authentication device receives the first response message from the encryption card and determines the encryption card identifier.

[0098] The first response information is used to indicate the encrypted card identifier.

[0099] In one possible implementation, after receiving the first request information from the terminal authentication device, the encryption card sends a first response information to the terminal authentication device. The terminal authentication device determines the encryption card identifier to be sent to the encryption card authentication server for authentication based on the encryption card identifier in the first response information.

[0100] S504: The terminal identity authentication device sends a second request message to the terminal to be unlocked. The corresponding terminal to be unlocked receives the second request message from the terminal identity authentication device.

[0101] The second request information is used to request the identifier of the terminal to be unlocked.

[0102] In a possible implementation, when the user unlocks the terminal to be unlocked, the terminal identity authentication device sends second request information to the terminal to be unlocked, requesting to obtain the identifier of the terminal to be unlocked.

[0103] S505: The terminal to be unlocked sends a second response message to the terminal identity authentication device. Correspondingly, the terminal identity authentication device receives the second response message from the identifier of the terminal to be unlocked and determines the identifier of the terminal to be unlocked.

[0104] The second response information is used to indicate the identifier of the terminal to be unlocked.

[0105] In one possible implementation, the terminal to be unlocked sends a second response message to the terminal identity authentication device after receiving the second request information from the terminal identity authentication device, and determines, based on the terminal identifier to be unlocked in the second response information, that the terminal identifier to be unlocked is the terminal identifier to be unlocked that is sent to the encryption card identity authentication server for identity authentication.

[0106] The technical solution provided by the above embodiment can at least bring about the following beneficial effects: the terminal identity authentication device determines the secret phone number, encryption card identifier and terminal identifier to be unlocked, which are sent to the encryption card identity authentication server for identity authentication based on the secret phone number input by the user, the encryption card identifier provided by the encryption card and the terminal identifier to be unlocked provided by the terminal to be unlocked.

[0107] In one possible implementation, combining Figure 3 ,like Figure 6 As shown, in the above S301, the terminal identity authentication device determines the secret call number, the encryption card identifier and the identifier of the terminal to be unlocked, which can be specifically implemented through the following S601-S602, which is described in detail below.

[0108] S601. According to any of the following situations, the encryption card identity authentication server determines that the identity authentication result is successful.

[0109] The situations where the identity authentication result is determined to be successful include:

[0110] The secret number does not have a terminal bound to it, the secret number matches the encryption card ID, and the terminal to be unlocked is not bound to other secret numbers;

[0111] The terminal bound to the secret number exists, the secret number matches the encryption card ID, and the secret number matches the ID of the terminal to be unlocked.

[0112] In one possible implementation, the encryption card identity authentication server determines, based on the binding information of the encryption card identifier, the secret call number, and the terminal device identifier, that there is no terminal bound to the secret call number, the secret call number matches the encryption card identifier, and the terminal to be unlocked is not bound to other secret call numbers. In this case, it can be determined that the operation of unlocking the terminal to be unlocked was performed by the owner himself. At this time, the encryption card identity authentication server determines that the authentication result is successful.

[0113] In one possible implementation, the encryption card identity authentication server determines, based on the binding information of the encryption card identifier, the secret call number, and the terminal device identifier, that the secret call number is bound to a terminal, that the secret call number matches the encryption card identifier, and that the secret call number matches the identifier of the terminal to be unlocked. It can then be determined that the operation of unlocking the terminal to be unlocked was performed by the owner himself. At this time, the encryption card identity authentication server determines that the authentication result is a successful authentication.

[0114] S602: In any of the following situations, the encryption card authentication server determines that the authentication result is authentication failure.

[0115] The situations where the identity authentication result is determined to be authentication failure include:

[0116] The terminal bound to the secret number does not exist, and the secret number does not match the encryption card ID;

[0117] The terminal bound to the secret number does not exist; the secret number matches the encryption card ID, but the terminal to be unlocked is bound to another secret number;

[0118] The terminal bound to the secret number exists, the secret number does not match the encryption card ID, and / or the secret number does not match the ID of the terminal to be unlocked.

[0119] In one possible implementation, the encryption card identity authentication server determines, based on the binding information of the encryption card identifier, the secret call number, and the terminal device identifier, that there is no terminal bound to the secret call number and that the secret call number does not match the encryption card identifier. In this case, it cannot be determined that the operation of unlocking the terminal to be unlocked was performed by the owner himself. At this time, the encryption card identity authentication server determines that the authentication result is an authentication failure.

[0120] In one possible implementation, the encryption card identity authentication server determines, based on the binding information of the encryption card identifier, the secret call number, and the terminal device identifier, that there is no terminal bound to the secret call number, the secret call number matches the encryption card identifier, but the terminal to be unlocked is bound to another secret call number. In this case, it cannot be determined that the operation of unlocking the terminal to be unlocked was performed by the owner himself. At this time, the encryption card identity authentication server determines that the authentication result is an authentication failure.

[0121] In one possible implementation, the encryption card identity authentication server determines, based on the binding information of the encryption card identifier, the secret call number, and the terminal device identifier, that the secret call number is bound to a terminal, the secret call number does not match the encryption card identifier, and / or the secret call number does not match the identifier of the terminal to be unlocked. In this case, it cannot be determined that the operation of unlocking the terminal to be unlocked was performed by the owner himself. At this time, the encryption card identity authentication server determines that the authentication result is an authentication failure.

[0122] The technical solution provided by the above embodiment can at least bring the following beneficial effects: the encryption card identity authentication server performs identity authentication on the terminal to be unlocked based on the binding information of the secret call number, the encryption card identifier, and the identifier of the terminal to be unlocked, and determines the identity authentication result, which is used to instruct the terminal identity authentication device to determine whether to unlock the terminal to be unlocked.

[0123] In one possible implementation, combining Figure 3 ,like Figure 7As shown, in the above S303, the encryption card authentication server authenticates the terminal to be unlocked based on the secret number, the encryption card identifier, and the identifier of the terminal to be unlocked, and determines the authentication result. Specifically, it may also include the following S701-S702, which are described in detail below.

[0124] S701. When the encryption card authentication server determines that the authentication result is successful, a secondary authentication is performed on the terminal to be unlocked to determine the secondary authentication result.

[0125] It is understandable that when the encryption card authentication server determines that the authentication result is successful, a secondary authentication may be performed on the terminal to be unlocked to improve the security of self-unlocking the terminal to be unlocked.

[0126] S702: The encryption card identity authentication server sends a secondary authentication result to the terminal identity authentication device.

[0127] The secondary authentication result is used to instruct the terminal identity authentication device to determine whether to unlock the terminal to be unlocked.

[0128] In a possible implementation, the encryption card identity authentication server sends a secondary authentication result to the terminal identity authentication device indicating that the authentication failed, and the terminal identity authentication device determines not to unlock the terminal to be unlocked.

[0129] In a possible implementation, the encryption card identity authentication server sends a secondary authentication result to the terminal identity authentication device indicating that the authentication is successful, and the terminal identity authentication device determines to unlock the terminal to be unlocked.

[0130] The technical solution provided by the above embodiment can at least bring the following beneficial effects: after the encryption card identity authentication server determines that the identity authentication result is successful, it performs secondary authentication on the terminal to be unlocked, thereby improving the security of self-unlocking the terminal to be unlocked.

[0131] In one possible implementation, combining Figure 7 ,like Figure 8 As shown, in the above S701, the terminal to be unlocked is subjected to secondary authentication to determine the secondary authentication result. This can be specifically implemented through the following S801-S806, which are described in detail below.

[0132] S801. The encryption card identity authentication server determines the emergency number according to the second input operation.

[0133] Among them, the second input operation is the operation of the user entering the emergency number, and the emergency number is the mobile phone number reserved by the user when opening an account.

[0134] S802: When the emergency number and the secret number match, the encryption card identity authentication server generates a first verification code according to the emergency number and the secret number.

[0135] S803: The encryption card identity authentication server sends a first verification code to the emergency number.

[0136] In one possible implementation, the encryption card identity authentication server sends the first verification code to the SMS platform, and the SMS platform receives the first verification code and sends the first verification code to the emergency number.

[0137] S804: The encryption card identity authentication server determines the third input operation.

[0138] The third input operation is an operation in which the user inputs the second verification code.

[0139] It is understandable that the user can input the verification code into the identity authentication server according to the first verification code received by the emergency number, and the verification code input by the user is recorded as the second verification code.

[0140] S805: When the first verification code and the second verification code are consistent, the identity authentication server determines that the secondary authentication result is successful.

[0141] It is understandable that if the first verification code and the second verification code are consistent, it can be determined that the operation of unlocking the terminal to be unlocked is performed by the owner himself, so that the secondary authentication result is determined to be successful.

[0142] S806: When the first verification code and the second verification code are inconsistent, the identity authentication server determines that the secondary authentication result is an authentication failure.

[0143] It is understandable that if the first verification code and the second verification code are inconsistent, it cannot be determined that the operation of unlocking the terminal to be unlocked is performed by the owner himself, and thus the secondary authentication result is determined to be authentication failure.

[0144] The technical solution provided by the above embodiment can at least bring the following beneficial effects: after the encryption card identity authentication server determines that the identity authentication result is successful, a secondary authentication is performed on the terminal to be unlocked based on the matching relationship between the emergency number and the secret call number, thereby improving the security of the user unlocking the terminal to be unlocked by himself.

[0145] In one possible implementation, combining Figure 7 ,like Fig. 9 As shown, in the above S701, the terminal to be unlocked is subjected to secondary authentication to determine the secondary authentication result. This can be specifically implemented through the following S901-S906, which are described in detail below.

[0146] S901. The encryption card identity authentication server determines a mailbox according to a fourth input operation.

[0147] Among them, the fourth input operation is an operation for the user to input an email address, and the email address is the email address reserved by the user when opening an account.

[0148] S902: When the mailbox and the secret number match, the encryption card identity authentication server generates a third verification code according to the mailbox and the secret number.

[0149] S903: The encryption card identity authentication server sends a third verification code to the mailbox.

[0150] S904: The encryption card identity authentication server determines the fifth input operation.

[0151] The fifth input operation is an operation in which the user inputs a fourth verification code.

[0152] It is understandable that the user can input the third verification code received in the mailbox into the identity authentication server, and the verification code input by the user is recorded as the fourth verification code.

[0153] S905: When the third verification code and the fourth verification code are consistent, the encryption card identity authentication server determines that the secondary authentication result is successful.

[0154] It is understandable that if the third verification code and the fourth verification code are consistent, it can be determined that the operation of unlocking the terminal to be unlocked is performed by the owner himself, thereby determining that the secondary authentication result is successful.

[0155] S906: When the third verification code and the fourth verification code are inconsistent, the encryption card identity authentication server determines that the secondary authentication result is an authentication failure.

[0156] It is understandable that if the third verification code and the fourth verification code are inconsistent, it cannot be determined that the operation of unlocking the terminal to be unlocked is performed by the owner himself, and thus the secondary authentication result is determined to be authentication failure.

[0157] The technical solution provided by the above embodiment can at least bring the following beneficial effects: after the encryption card identity authentication server determines that the identity authentication result is successful, a secondary authentication is performed on the terminal to be unlocked based on the matching relationship between the mailbox and the secret call number, thereby improving the security of the user unlocking the terminal to be unlocked by himself.

[0158] In one possible implementation, combining Figure 7 ,like Fig.10 As shown, in the above S701, the terminal to be unlocked is subjected to secondary authentication to determine the secondary authentication result, which can be specifically implemented through the following S1001-S1006, which is described in detail below.

[0159] S1001. The encryption card identity authentication server determines the friend's secret call number according to the sixth input operation.

[0160] The sixth input operation is an operation in which the user inputs a friend's secret call number, and the friend's encrypted number is a plurality of secret call numbers that have a friend relationship with the user's secret call number.

[0161] S1002: When the friend's secret number matches the secret number, the encryption card identity authentication server generates a fifth verification code according to the friend's encryption number and the secret number.

[0162] S1003. The encryption card identity authentication server sends a fifth verification code to the friend's secret phone number.

[0163] In one possible implementation, the encryption card identity authentication server sends the fifth verification code to the SMS platform, and the SMS platform receives the fifth verification code and sends the fifth verification code to the friend's secret phone number.

[0164] S1004: The encryption card identity authentication server determines the seventh input operation.

[0165] The seventh input operation is an operation in which the user inputs a sixth verification code.

[0166] It is understandable that the user can input the fifth verification code received from the emergency number into the identity authentication server, and the verification code input by the user is recorded as the sixth verification code.

[0167] S1005: When the fifth verification code and the sixth verification code are consistent, the identity authentication server determines that the secondary authentication result is successful.

[0168] In one possible implementation, multiple friends' secret numbers can be authenticated, thereby improving the security of the secondary authentication.

[0169] It is understandable that if the fifth verification code and the sixth verification code are consistent, it can be determined that the operation of unlocking the terminal to be unlocked is performed by the owner himself, thereby determining that the secondary authentication result is successful authentication.

[0170] S1006: When the fifth verification code and the sixth verification code are inconsistent, the identity authentication server determines that the secondary authentication result is an authentication failure.

[0171] It is understandable that if the fifth verification code and the sixth verification code are inconsistent, it cannot be determined that the operation of unlocking the terminal to be unlocked is performed by the owner himself, and thus the secondary authentication result is determined to be authentication failure.

[0172] The technical solution provided by the above embodiment can at least bring the following beneficial effects: after the encryption card identity authentication server determines that the identity authentication result is successful, a secondary authentication is performed on the terminal to be unlocked based on the matching relationship between the mailbox and the secret call number, thereby improving the security of the user unlocking the terminal to be unlocked by himself.

[0173] The terminal unlocking method involved in the embodiment of the present disclosure is described above in detail.

[0174] It can be seen that the above mainly introduces the technical solution provided by the embodiment of the present disclosure from the perspective of the method. In order to achieve the above functions, it includes hardware structures and / or software modules corresponding to the execution of each function. Those skilled in the art should easily realize that, in combination with the modules and algorithm steps of each example described in the embodiment disclosed herein, the embodiment of the present disclosure can be implemented in the form of hardware or a combination of hardware and computer software. Whether a function is executed in the form of hardware or computer software driving hardware depends on the specific application and design constraints of the technical solution. Professional and technical personnel can use different methods to implement the described functions for each specific application, but such implementation should not be considered to exceed the scope of the present disclosure.

[0175] The disclosed embodiment can divide the terminal unlocking device into functional modules according to the above method example. For example, each functional module can be divided according to each function, or two or more functions can be integrated into one processing module. The above integrated module can be implemented in the form of hardware or in the form of software functional modules. Optionally, the division of modules in the disclosed embodiment is schematic and is only a logical functional division. There may be other division methods in actual implementation.

[0176] like Fig.11 , which is a schematic diagram of the structure of a terminal unlocking device 1100 applied to an encryption card identity authentication server provided by an embodiment of the present disclosure.

[0177] The terminal unlocking device 1100 includes: a communication unit 1101 and a processing unit 1102; the communication unit 1101 is used to receive a secret call number, an encryption card identifier and an identifier of a terminal to be unlocked from a terminal identity authentication device; the secret call number is used to represent basic information of the user, and the encryption card identifier is a unique identifier of the encryption card of the terminal; the processing unit 1102 is specifically used to authenticate the terminal to be unlocked based on the secret call number, the encryption card identifier and the identifier of the terminal to be unlocked, and determine the authentication result; the communication unit 1101 is also used to send the authentication result to the terminal identity authentication device.

[0178] In one possible implementation, the processing unit 1102 is specifically used to determine that the identity authentication result is a successful authentication in any of the following cases: the secret call number does not exist to be bound to a terminal, the secret call number matches the encryption card identifier, and the terminal to be unlocked is not bound to other secret call numbers; the secret call number does exist to be bound to a terminal, the secret call number matches the encryption card identifier, and the secret call number matches the identifier of the terminal to be unlocked; in any of the following cases, determine that the identity authentication result is a failed authentication: the secret call number does not exist to be bound to a terminal, the secret call number does not match the encryption card identifier; the secret call number does not exist to be bound to a terminal, the secret call number matches the encryption card identifier, but the terminal to be unlocked is bound to other secret call numbers; the secret call number does exist to be bound to a terminal, the secret call number does not match the encryption card identifier and / or the secret call number does not match the identifier of the terminal to be unlocked.

[0179] In a possible implementation, the processing unit 1102 is further configured to, when determining that the identity authentication result is successful, perform secondary authentication on the terminal to be unlocked, determine the secondary authentication result and send the secondary authentication result to the terminal identity authentication device.

[0180] In one possible implementation, processing unit 1102 is specifically used to determine the emergency number based on a second input operation; the second input operation is an operation in which a user inputs an emergency number; the emergency number is a mobile phone number reserved by a user when opening an account; when the emergency number matches the secret phone number, a first verification code is generated based on the emergency number and the secret phone number; communication unit 1101 is specifically used to send a first verification code to the emergency number; processing unit 1102 is also specifically used to determine a third input operation, the third input operation is an operation in which a user inputs a second verification code; when the first verification code and the second verification code are consistent, determining that the secondary authentication result is a successful authentication; when the first verification code and the second verification code are inconsistent, determining that the secondary authentication result is a failed authentication.

[0181] In one possible implementation, the processing unit 1102 is further specifically used to determine an email address based on a third input operation; the third input operation is an operation in which a user inputs an email address; the email address is an email address reserved when a user opens an account; when the email address and the secret call number match, a third verification code is generated based on the email address and the secret call number; the communication unit 1101 is further specifically used to send the third verification code to the email address; the processing unit 1102 is further specifically used to determine a fourth input operation, the fourth input operation is an operation in which a user inputs a fourth verification code; when the third verification code and the fourth verification code are consistent, the secondary authentication result is determined to be authentication success; when the third verification code and the fourth verification code are inconsistent, the secondary authentication result is determined to be authentication failure.

[0182] In a possible implementation, the processing unit 1102 is further specifically used to determine the friend's secret call number according to the fifth input operation; the fifth input operation is an operation in which the user inputs the friend's secret call number; the friend's secret call number is multiple secret call numbers that have a friend relationship with the user's secret call number; when the secret call numbers of multiple secret call friends match the user's secret call number, a fifth verification code is generated according to the friend's secret call number and the user's secret call number; the communication unit 1101 is further specifically used to send the fifth verification code to the terminal corresponding to the friend's secret call number; the processing unit 1102 is further specifically used to determine the sixth input operation, the sixth input operation is an operation in which the user inputs the sixth verification code; when the fifth verification code and the sixth verification code are consistent, the secondary authentication result is determined to be authentication success; when the fifth verification code and the sixth verification code are inconsistent, the secondary authentication result is determined to be authentication failure.

[0183] like Fig.12 , which is a schematic diagram of the structure of a terminal unlocking device 1200 applied to a terminal identity authentication device provided by an embodiment of the present disclosure.

[0184] The terminal unlocking device includes: a communication unit 1201 and a processing unit 1202. The processing unit 1202 is specifically used to determine the secret call number, the encryption card identifier and the identifier of the terminal to be unlocked; the secret call number is used to represent the basic information of the user, and the encryption card identifier is the unique identifier of the encryption card of the terminal; the communication unit 1201 is specifically used to send the secret call number, the encryption card identifier and the identifier of the terminal to be unlocked to the encryption card identity authentication server; the communication unit 1201 is also specifically used to receive the identity authentication result from the encryption card identity authentication server; the identity authentication result is the identity authentication result determined by the encryption card identity authentication server after authenticating the terminal to be unlocked according to the secret call number, the encryption card identifier and the identifier of the terminal to be unlocked; the processing unit 1202 is also specifically used to unlock the terminal to be unlocked according to the identity authentication result.

[0185] In a possible implementation, the processing unit 1202 is specifically configured to determine to unlock the terminal to be unlocked when the identity authentication result is authentication success; the processing unit 1202 is also specifically configured to determine not to unlock the terminal to be unlocked when the identity authentication result is authentication failure.

[0186] In one possible implementation, the processing unit 1202 is further used to determine the secret call number according to the first input operation; the first input operation is an operation in which the user inputs the secret call number; the processing unit 1202 is further used to send a first request message to the encryption card, and the first request message is used to request the encryption card identification; the communication unit 1201 is further used to receive a first response message from the encryption card; the first response message is used to indicate the encryption card identification; the communication unit 1201 is further used to send a second request message to the terminal to be unlocked, and the second request message is used to request the identification of the terminal to be unlocked; the communication unit 1201 is further used to receive a second response message from the identification of the terminal to be unlocked; the second response message is used to indicate the identification of the terminal to be unlocked.

[0187] The embodiment of the present disclosure also provides a terminal unlocking device, which includes a processor and a memory; wherein the memory is used to store computer-executable instructions, and when the terminal unlocking device is running, the processor executes the computer-executable instructions stored in the memory, so that the terminal unlocking device executes the terminal unlocking method recorded in the embodiment of the present disclosure.

[0188] The embodiment of the present disclosure also provides a computer-readable storage medium, in which instructions are stored. When the instructions in the computer-readable storage medium are executed by a processor of a terminal unlocking device, the terminal unlocking device executes the terminal unlocking method described in the embodiment of the present disclosure.

[0189] An embodiment of the present disclosure provides a computer program product including instructions. When the instructions are executed on a computer, the computer is enabled to execute the terminal unlocking method in the above method embodiment.

[0190] An embodiment of the present disclosure provides a chip, which includes a processor and a communication interface, wherein the communication interface and the processor are coupled, and the processor is used to run a computer program or instruction to implement a terminal unlocking method as in the above method embodiment.

[0191] Among them, the computer-readable storage medium can be, for example, but not limited to, an electrical, magnetic, optical, electromagnetic, infrared, or semiconductor system, device or device, or any combination of the above. More specific examples of computer-readable storage media (a non-exhaustive list) include: an electrical connection with one or more wires, a portable computer disk, and a hard disk. Random Access Memory (RAM), Read-Only Memory (ROM), Erasable Programmable Read Only Memory (EPROM), registers, hard disks, optical fibers, portable compact disk read-only memory (CD-ROM), optical storage devices, magnetic storage devices, or any other form of computer-readable storage medium in a suitable combination of the above, or numerical values ​​in the art. An exemplary storage medium is coupled to a processor so that the processor can read information from the storage medium and write information to the storage medium. Of course, the storage medium can also be a component of the processor. The processor and the storage medium can be located in an Application Specific Integ rated Circuit (ASIC). In the embodiments of the present disclosure, computer-readable storage media may be any tangible media that contains or stores a program that may be used by or in conjunction with an instruction execution system, apparatus, or device.

[0192] Since the apparatus, device, computer-readable storage medium, and computer program product in the embodiments of the present disclosure can be applied to the above-mentioned method, the technical effects that can be obtained can also refer to the above-mentioned method embodiments, and the embodiments of the present disclosure will not be repeated here.

[0193] The above is only a specific implementation of the present disclosure, but the protection scope of the present disclosure is not limited thereto. Any changes or substitutions within the technical scope disclosed in the present disclosure should be included in the protection scope of the present disclosure. Therefore, the protection scope of the present disclosure should be based on the protection scope of the claims.

Claims

1. A terminal unlocking method, applied to an encryption card identity authentication server, characterized in that: include: Receiving the secret number, the encryption card identification and the identification of the terminal to be unlocked determined by the terminal identity authentication device; The secret number is used to represent the basic information of the user; the terminal to be unlocked is a security terminal, which includes two sets of usage systems and encryption cards. The non-security system is used in daily life. When the user uses the terminal to be unlocked for the first time, the encryption card identity authentication server will bind the encryption card identifier, the secret number, and the terminal device identifier, and save the binding information; the encryption card is used to provide data encryption and identity authentication services for the intranet security system; the encryption card identifier is written into the encryption card when the card is made, and the user can only use his own encryption card for data encryption and decryption; the intranet security system is a security system used by the user at work, which is used to ensure the user's information security; Performing identity authentication on the terminal to be unlocked based on the secret call number, the encryption card identifier, and the identifier of the terminal to be unlocked, and determining an identity authentication result; Sending the identity authentication result to the terminal identity authentication device; The identity authentication result is used to: if the identity authentication result is authentication success, instruct the terminal identity authentication device to unlock the terminal to be unlocked; if the identity authentication result is authentication failure, instruct the terminal identity authentication device not to unlock the terminal to be unlocked; The performing identity authentication on the terminal to be unlocked based on the secret call number, the encryption card identifier, and the identifier of the terminal to be unlocked, and determining the identity authentication result includes: When the encryption card authentication server receives the secret number, encryption card identifier and identifier of the terminal to be unlocked, it queries its own stored associations to see whether there is an association between the secret number, encryption card identifier and identifier of the terminal to be unlocked received this time. If so, the authentication result is determined to be a successful authentication. If not, the authentication result is determined to be a failed authentication.

2. The method according to claim 1, characterized in that The terminal identity authentication device determines the secret number, the encryption card identification and the identification of the terminal to be unlocked, including: In any of the following cases, the identity authentication result is determined to be successful: There is no terminal bound to the secret call number, the secret call number matches the encryption card identifier, and the terminal to be unlocked is not bound to any other secret call number except the secret call number; The terminal bound to the secret call number exists, the secret call number matches the encryption card identifier, and the secret call number matches the identifier of the terminal to be unlocked; In any of the following cases, the identity authentication result is determined to be an authentication failure: The terminal bound to the secret call number does not exist, and the secret call number does not match the encryption card identifier; The secret call number does not have a terminal bound to it, the secret call number matches the encryption card identifier, but the terminal to be unlocked is bound to another secret call number except the secret call number; The cipher number is bound to a terminal, the cipher number does not match the encryption card identifier, and / or the cipher number does not match the identifier of the terminal to be unlocked.

3. The method according to claim 1 or 2, characterized in that: When the identity authentication result is successful, the method further includes: Performing secondary authentication on the terminal to be unlocked, and determining a secondary authentication result; The secondary authentication result is sent to the terminal identity authentication device.

4. The method according to claim 3, characterized in that: The performing secondary authentication on the terminal to be unlocked and determining the secondary authentication result includes: Identify authentication equipment; Sending a first verification message to the authentication device; Obtaining a verification message input operation of a user; the verification message input operation is used to input a second verification message; Determining whether the first verification message and the second verification message are consistent; If they are consistent, the secondary authentication result is determined to be successful; If they are inconsistent, the secondary authentication result is determined to be authentication failure.

5. A terminal unlocking method, applied to a terminal identity authentication device, characterized in that: include: Determine the secret number, encryption card ID, and ID of the terminal to be unlocked; The secret number is used to represent the basic information of the user; the terminal to be unlocked is a security terminal, which includes two sets of usage systems and encryption cards. The non-security system is used in daily life. When the user uses the terminal to be unlocked for the first time, the encryption card identity authentication server will bind the encryption card identifier, the secret number, and the terminal device identifier, and save the binding information; the encryption card is used to provide data encryption and identity authentication services for the intranet security system; the encryption card identifier is written into the encryption card when the card is made, and the user can only use his own encryption card for data encryption and decryption; the intranet security system is a security system used by the user at work, which is used to ensure the user's information security; Sending the secret call number, the encryption card identifier and the identifier of the terminal to be unlocked to the encryption card identity authentication server; after receiving the secret call number, the encryption card identifier and the identifier of the terminal to be unlocked, the encryption card identity authentication server queries whether there is an association relationship between the secret call number, the encryption card identifier and the identifier of the terminal to be unlocked received this time in the association relationship stored in itself, and if so, determining that the identity authentication result is a successful identity authentication, and if not, determining that the identity authentication result is a failed identity authentication; receiving an identity authentication result from the encryption card identity authentication server; the identity authentication result is an identity authentication result determined by the encryption card identity authentication server after authenticating the terminal to be unlocked according to the secret call number, the encryption card identifier and the identifier of the terminal to be unlocked; If the identity authentication result is successful, determine to unlock the terminal to be unlocked; When the identity authentication result is authentication failure, it is determined not to unlock the terminal to be unlocked.

6. The method according to claim 5, characterized in that The step of determining the secret call number includes: Determining the secret call number according to a first input operation; the first input operation is an operation in which a user inputs the secret call number; Determining the encryption card identifier includes: Sending a first request message to the encryption card, wherein the first request message is used to request the encryption card identifier; Receiving first response information from the encryption card; the first response information is used to indicate the encryption card identification; Determining the identifier of the terminal to be unlocked includes: Sending second request information to the terminal to be unlocked, where the second request information is used to request an identifier of the terminal to be unlocked; A second response message from the identifier of the terminal to be unlocked is received; the second response message is used to indicate the identifier of the terminal to be unlocked.

7. A terminal unlocking device, used for an encryption card identity authentication server, characterized in that: include: a communication unit and a processing unit; The communication unit is used to receive the secret call number, encryption card identification and identification of the terminal to be unlocked determined by the terminal identity authentication device; the secret call number is used to represent the basic information of the user; the terminal to be unlocked is a security terminal, which includes two sets of usage systems and encryption cards. The non-security system is used in daily life. When the user uses the terminal to be unlocked for the first time, the encryption card identity authentication server will bind the encryption card identification, secret call number and terminal device identification, and save the binding information; the encryption card is used to provide data encryption and identity authentication services for the intranet security system; the encryption card identification is written into the encryption card when the card is made, and the user can only use his own encryption card for data encryption and decryption; the intranet security system is a security system used by the user at work to ensure the user's information security; The processing unit is used to perform identity authentication on the terminal to be unlocked based on the secret call number, the encryption card identifier and the identifier of the terminal to be unlocked, and determine an identity authentication result; The communication unit is further used to send the identity authentication result to the terminal identity authentication device; the identity authentication result is used to: if the identity authentication result is authentication success, instruct the terminal identity authentication device to unlock the terminal to be unlocked; if the identity authentication result is authentication failure, instruct the terminal identity authentication device not to unlock the terminal to be unlocked; The processing unit is specifically used to query whether there is an association relationship between the secret call number, encryption card identifier and the identifier of the terminal to be unlocked received this time in the association relationship stored in itself after the encryption card identity authentication server receives the secret call number, encryption card identifier and the identifier of the terminal to be unlocked. If so, the identity authentication result is determined to be a successful identity authentication; if not, the identity authentication result is determined to be a failed identity authentication.

8. A terminal unlocking device, used for a terminal identity authentication device, characterized in that: include: a communication unit and a processing unit; The processing unit is used to determine the secret call number, the encryption card identifier and the identifier of the terminal to be unlocked; the secret call number is used to represent the basic information of the user; the terminal to be unlocked is a security terminal, which includes two sets of usage systems and encryption cards. The non-security system is used in daily life. When the user uses the terminal to be unlocked for the first time, the encryption card identity authentication server will bind the encryption card identifier, the secret call number and the terminal device identifier, and save the binding information; the encryption card is used to provide data encryption and identity authentication services for the intranet security system; the encryption card identifier is written into the encryption card when the card is made, and the user can only use his own encryption card for data encryption and decryption; the intranet security system is a security system used by the user at work, which is used to ensure the information security of the user; The communication unit is used to send the secret call number, the encryption card identifier and the identifier of the terminal to be unlocked to the encryption card identity authentication server; when the encryption card identity authentication server receives the secret call number, the encryption card identifier and the identifier of the terminal to be unlocked, it queries whether there is an association relationship between the secret call number, the encryption card identifier and the identifier of the terminal to be unlocked received this time in the association relationship stored in itself, and if so, determines that the identity authentication result is a successful identity authentication, and if not, determines that the identity authentication result is a failed identity authentication; The communication unit is further used to receive an identity authentication result from the encryption card identity authentication server; the identity authentication result is an identity authentication result determined by the encryption card identity authentication server after authenticating the terminal to be unlocked according to the secret call number, the encryption card identifier and the identifier of the terminal to be unlocked; The processing unit is further configured to determine to unlock the terminal to be unlocked if the identity authentication result is successful authentication; The processing unit is further configured to determine not to unlock the terminal to be unlocked when the identity authentication result is authentication failure.

9. A terminal unlocking device, characterized in that: include: A processor and a memory; wherein the memory is used to store computer-executable instructions, and when the terminal unlocking device is running, the processor executes the computer-executable instructions stored in the memory, so that the terminal unlocking device executes the terminal unlocking method according to any one of claims 1 to 6.

10. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores instructions. When the instructions in the computer-readable storage medium are executed by a processor of the terminal unlocking device, the terminal unlocking device executes the terminal unlocking method according to any one of claims 1 to 6.

Images