An automatic authentication method and apparatus

Abstract

The application relates to the communication technical field, and provides an automatic authentication method and device, and controlled terminals and a control terminal access to the same network and automatically authenticate through interaction. In the authentication process, the control terminal sends a control ID of a control application to all the controlled terminals in the network through a broadcast message, the controlled terminals generate a first authentication string according to the control ID in the broadcast message and a device ID of the controlled terminals, and send an authentication request, the control terminal generates a second authentication string according to the device ID in the request and the control ID, and compares the first authentication string with the second authentication string. Since the control ID of the control application and the device ID of the controlled terminal are both unique, the first authentication string and the second authentication string should be the same on the basis of the generation rule of the authentication string agreed by both parties in advance, so that the automatic authentication of the controlled terminal by the control terminal is realized through the comparison of the first authentication string and the second authentication string, and manual participation is not needed.

Description

TECHNICAL FIELD

[0001] The present application relates to the technical field of communication, in particular to an automatic authentication method and device. BACKGROUND

[0002] With the development of virtual reality (VR) technology, in the education industry, in order to improve the perceptual and imaginative of students, VR products are promoted.

[0003] The common use of VR devices in the education industry is one-to-many immersive demonstration teaching, that is, through a controllable demonstration terminal, multiple VR devices are controlled to display the demonstration content synchronously. At present, not all VR devices can be controlled by the demonstration terminal, only the VR devices that pass the authentication can display the demonstration content synchronously according to the control.

[0004] At present, there are two ways to authenticate VR devices, one is to manually input the serial number of the controlled VR device into the control terminal, and the other is to manually input the serial number of the controlled VR device into a document, and then import the document into the control terminal. However, manual input is not only time-consuming but also prone to errors. Once the input is incorrect, the VR device will not pass the authentication, affecting normal teaching. In addition, the serial number of a general device is complex, and once the authentication fails, manual comparison is still needed, which is time-consuming and laborious. SUMMARY

[0005] The embodiments of the present application provide an automatic authentication method and device to improve the efficiency and accuracy of device authentication.

[0006] In a first aspect, the embodiments of the present application provide a control terminal, the control terminal is installed with a control application, the control terminal and at least one controlled terminal are connected to the same network, and the control terminal comprises a communication interface, a memory and a processor.

[0007] The memory stores a software control program, and the processor executes the following operations according to the software control program:

[0008] In response to a control application start operation, a broadcast message is sent through the communication interface, and the broadcast message carries a control ID of the control application;

[0009] An authentication request sent by the at least one controlled terminal is received through the communication interface, each authentication request carries a device ID and a first authentication string of the corresponding controlled terminal, and the first authentication string is generated according to the control ID and the device ID of the corresponding controlled terminal according to a preset rule after the corresponding controlled terminal receives the broadcast message;

[0010] According to the preset rule, a second authentication string corresponding to each of the at least one controlled terminal is generated according to the device ID of the controlled terminal itself and the control ID of the control application;

[0011] For each controlled terminal, if the first authentication string and the second authentication string are the same, the controlled terminal is authenticated.

[0012] In a second aspect, an embodiment of the present application provides a controlled terminal, the controlled terminal and a control terminal are connected to the same network, the control terminal is installed with a control application, and the controlled terminal comprises a communication interface, a memory and a processor.

[0013] The memory stores a software control program, and the processor executes the following operations according to the software control program:

[0014] The communication interface receives a broadcast message sent by the control terminal, the broadcast message carries a control ID of the control application, and the broadcast message is sent after the control application is started;

[0015] When it is detected that the controlled terminal is not authenticated, a first authentication string is generated according to a preset rule and according to the control ID of the control application and the device ID of the controlled terminal itself;

[0016] The communication interface sends an authentication request to the control terminal, the authentication request carries the first authentication string and the device ID of the controlled terminal itself, so that the control terminal generates a second authentication string according to the device ID of the controlled terminal and the control ID of the control application according to the preset rule, and then compares the first authentication string with the second authentication string, and if they are the same, the controlled terminal is authenticated.

[0017] In a third aspect, an embodiment of the present application provides an automatic authentication method, applied to a control terminal, the control terminal and at least one controlled terminal are connected to the same network, the control terminal is installed with a control application, and the method comprises:

[0018] In response to a control application starting operation, a broadcast message is sent, the broadcast message carries a control ID of the control application;

[0019] An authentication request sent by at least one controlled terminal is received, each authentication request carries a device ID of a corresponding controlled terminal and a first authentication string, the first authentication string is generated by the corresponding controlled terminal according to the control ID and the device ID of the corresponding controlled terminal itself according to a preset rule after the broadcast message is received;

[0020] According to the preset rule, the second authentication string corresponding to each of the at least one controlled terminal is generated according to the device ID of the controlled terminal itself and the control ID of the control application;

[0021] For each controlled terminal, if the first authentication string and the second authentication string are the same, the authentication of the controlled terminal is passed.

[0022] Optionally, the control ID is irreversibly encrypted, the device ID is irreversibly encrypted, the broadcast message carries an encryption public key stored by the control terminal, and the first authentication string is encrypted by the encryption public key.

[0023] After receiving the authentication request sent by the at least one controlled terminal, the method further comprises:

[0024] According to the decryption private key corresponding to the encryption public key, the first authentication string carried by the at least one authentication request is decrypted.

[0025] Optionally, for each controlled terminal whose authentication is passed, the method further comprises:

[0026] The device ID and the device name of the controlled terminal whose authentication is passed are stored in a device table, and an authentication token is generated for the controlled terminal whose authentication is passed.

[0027] An authentication message is sent to the controlled terminal whose authentication is passed, and the authentication message carries the authentication token corresponding to the controlled terminal.

[0028] Optionally, for each controlled terminal, if the first authentication string and the second authentication string are different, the method further comprises:

[0029] A prompt information of authentication failure is sent to the controlled terminal, so that the controlled terminal re-authenticates.

[0030] In a fourth aspect, an embodiment of the present application provides an automatic authentication method, applied to a controlled terminal, the controlled terminal and a control terminal being connected to the same network, the control terminal being installed with a control application, and the method comprising:

[0031] A broadcast message sent by the control terminal is received, the broadcast message carrying a control ID of the control application, and the broadcast message being sent after the control application is started;

[0032] When it is detected that the controlled terminal fails to pass the authentication, a first authentication string is generated according to a preset rule and according to the control ID of the control application and the device ID of the controlled terminal itself.

[0033] sending an authentication request to the control terminal, the authentication request carrying the first authentication string and a device ID of the controlled terminal, so that the control terminal compares the first authentication string with a second authentication string generated according to the device ID of the controlled terminal and a control ID of the control application after the control terminal generates the second authentication string according to the device ID of the controlled terminal and the control ID of the control application according to the preset rule, and if the first authentication string is the same as the second authentication string, the controlled terminal is authenticated.

[0034] Optionally, the control ID is irreversibly encrypted, the device ID is irreversibly encrypted, and the broadcast message carries an encryption public key stored by the control terminal.

[0035] After the controlled terminal generates the first authentication string, the method further includes:

[0036] encrypting the first authentication string according to the encryption public key carried in the broadcast message.

[0037] Optionally, after the authentication request is sent to the control terminal, the method further includes:

[0038] receiving an authentication message sent by the control terminal, the authentication message carrying an authentication token corresponding to the controlled terminal, the authentication token being generated by the control terminal according to the device ID and the device name of the controlled terminal after the control terminal authenticates the controlled terminal.

[0039] Optionally, when the controlled terminal is not authenticated, the method further includes:

[0040] receiving prompt information of authentication failure sent by the control terminal, so that the controlled terminal re-authenticates.

[0041] In a fifth aspect, an embodiment of the present application provides a computer readable storage medium, which stores computer executable instructions, and the computer executable instructions are used to make a computer execute the automatic authentication method provided by the embodiment of the present application.

[0042] In the above embodiments of the present application, the controlled terminal and the control terminal access the same network, and the two parties automatically perform authentication interaction, and the interaction information can carry the ID required for authentication. In the authentication process, the control terminal sends the control ID of the control application to all controlled terminals in the network through a broadcast message, and after receiving the broadcast message, the controlled terminal generates a first authentication string according to its own device ID and the control ID, and sends the first authentication string and its own device ID to the control terminal through an authentication request. After receiving the request, the control terminal generates a second authentication string according to the control ID of the control application and the device ID in the request. Since the control ID of the control application is unique, and the device ID of each controlled terminal is also unique, on the basis of the pre-agreed generation rule of the authentication string, the first authentication string and the second authentication string should be the same for the same controlled terminal. Therefore, by comparing the first authentication string and the second authentication string, the automatic authentication of the controlled terminal by the control terminal is realized without human intervention. BRIEF DESCRIPTION OF DRAWINGS

[0043] In order to more clearly illustrate the technical solutions in the embodiments of the present application or the prior art, the drawings needed in the embodiments or the prior art description will be briefly introduced. Obviously, the drawings in the following description are some embodiments of the present application, and other drawings can also be obtained by those skilled in the art without creative labor.

[0044] Figure 1 An application scenario provided by the embodiments of the present application is exemplarily shown;

[0045] Figure 2 A traditional controlled terminal authentication method flowchart is exemplarily shown;

[0046] Figure 3 An interface diagram for manually inputting controlled terminal authentication information is exemplarily shown;

[0047] Figure 4 A structure diagram of an authentication system provided by the embodiments of the present application is exemplarily shown;

[0048] Figure 5 Another structure diagram of an authentication system provided by the embodiments of the present application is exemplarily shown;

[0049] Figure 6 A method flowchart for automatic authentication provided by the embodiments of the present application is exemplarily shown;

[0050] Figure 7 Another method flowchart for automatic authentication provided by the embodiments of the present application is exemplarily shown;

[0051] Figure 8The asymmetric encryption public key and decryption private key provided by the embodiment of the present application are exemplified;

[0052] Figure 9 The structure diagram of the control terminal provided in the embodiment of the present application is exemplarily shown;

[0053] Figure 10 The structural diagram of the controlled terminal provided in the embodiment of the present application is exemplified. DETAILED DESCRIPTION

[0054] Figure 1 The application scenario diagram provided in the embodiment of this application is as follows: Figure 1 As shown, the control terminal 100 is installed with a control application 101. The control terminal 100 establishes a control relationship by authenticating the controlled terminal 200 (including but not limited to VR devices 201 to 203), so that the authenticated controlled terminal 200 synchronously displays the content displayed by the control application 101. The control terminal 100 can be a display device with interactive functions such as a smart TV, smart phone, tablet, personal computer, etc., and the controlled terminal 200 can be an AR glasses, VR head-mounted display device, etc.

[0055] Currently, the authentication process of controlled terminals mainly relies on manual authentication. The authentication process is as follows: Figure 2 As shown, the controlled terminal sends its own serial number to the control terminal, and the control terminal verifies it by comparing it with the serial number in the device table. If the serial number sent by the controlled terminal is in the device table, the controlled terminal passes the authentication, otherwise the authentication fails. Among them, the serial number stored in the device table is manually input, and the input method includes manually inputting the serial number of the controlled terminal into the control terminal, such as Figure 3 Alternatively, you can enter the controlled terminal's serial number into a document and import the document into the controlling terminal. Regardless of the input method, if an input error occurs, the controlled terminal will fail authentication and will not be able to recover automatically.

[0056] In view of this, embodiments of the present application provide a method and device for automatic authentication. Because the control terminal and the controlled terminal are separated before establishing a control relationship, embodiments of the present application connect the control terminal and the controlled terminal to the same network, enabling network communication between the control terminal and the controlled terminal. This allows for the transmission of the interactive information (ID) required for authentication to both parties, thereby conveniently and efficiently completing automatic authentication of the controlled terminal without the need for manual input. Furthermore, embodiments of the present application also take security issues into consideration by encrypting the interactive authentication information to prevent access by unknown devices.

[0057] The control terminal and the controlled terminal may access the same network, which may be a local area network or a wide area network.

[0058] Taking a local area network as an example, the authentication system structure provided by the embodiment of the application is shown in Figure 4 The control terminal and the controlled terminal (including but not limited to the controlled terminal 1 and the controlled terminal 2) access the same local area network through a router, the control terminal includes a control module, a message forwarding module and an authentication module. The message forwarding module, as a key module of automatic authentication, has the MQTT Broker function of the publish / subscribe type, and allows multiple controlled terminals to access with specific usernames and passwords. After the controlled terminal accesses, the control module forwards part of the public information ① to all controlled terminals in the local area network through the message forwarding module. After the controlled terminal receives the public information ①, the controlled terminal sends an authentication request ② carrying authentication information. The message forwarding module forwards the received authentication request ② to the authentication module. The authentication module authenticates the controlled terminal according to the received authentication request ②, and reports the authentication result ③ to the control module. The control model synchronously controls the controlled terminal according to the authentication result ③.

[0059] In some embodiments, the message forwarding module can be independent of the control terminal and integrated in other terminals (such as a central server in the network). As shown in Figure 5 The control terminal and the controlled terminal (including but not limited to the controlled terminal 1 and the controlled terminal 2) access the same wide area network through a router. In the case of knowing the IP of the central server, the controlled terminal accesses the message forwarding module with specific usernames and passwords, and the control terminal also accesses the message forwarding module. In the authentication process, the control module in the control terminal forwards part of the public information ① to all controlled terminals in the wide area network through the message forwarding module. After the controlled terminal receives the public information ①, the controlled terminal sends an authentication request ② carrying authentication information. The message forwarding module forwards the received authentication request ② to the authentication module. The authentication module authenticates the controlled terminal according to the received authentication request ②, and reports the authentication result ③ to the control module. The control model synchronously controls the controlled terminal according to the authentication result ③.

[0060] In the authentication architecture in Figure 4 and Figure 5 , the controlled terminal in the network can be one or multiple. Taking one controlled terminal as an example, Figure 6 an example of the method flowchart of automatic authentication after access provided by the embodiment of the application is shown in Figure 6 The flow mainly includes the following steps:

[0061] S601: The control terminal sends a broadcast message in response to a control application start operation.

[0062] In the embodiments of the present application, the control terminal is installed with a control application, and the control application has a unique control ID. In S601, after the control application is started, the control terminal sends a broadcast message in the access network, and the broadcast message carries the control ID of the control application. All controlled terminals in the network can receive the broadcast message.

[0063] S602: After the controlled terminal receives the broadcast message sent by the control terminal, it is detected whether the controlled terminal is authenticated. If yes, the content of the control application is displayed synchronously according to the control of the control terminal. Otherwise, S603 is executed.

[0064] In an optional implementation, when the controlled terminal is authenticated, the authentication token of the authentication is saved in the local system. Within the validity period of the authentication token, the controlled terminal does not need to be re-authenticated, and can directly access the control application based on the authentication token, and display the content of the control application synchronously according to the control instruction. Therefore, in S602, after the controlled terminal receives the broadcast message, it is detected whether the authentication token is saved in the local system. If not, authentication is needed. If yes, it is detected whether the authentication token is within the validity period. If yes, authentication is not needed. Otherwise, re-authentication is needed.

[0065] S603: The controlled terminal generates a first authentication string according to the control ID of the control application and the device ID of the controlled terminal according to a preset rule.

[0066] In the embodiments of the present application, each controlled terminal has a unique identifier, such as a device ID. The controlled terminal generates a first authentication string according to the device ID of the controlled terminal and the control ID of the control application in the broadcast message according to a rule agreed with the control terminal in advance.

[0067] For example, assuming that the control ID of the control application is c123, and the device ID of the controlled terminal is d123456, the generated first authentication string is "d123456:c123".

[0068] S604: The controlled terminal sends an authentication request to the control terminal.

[0069] In the embodiments of the present application, the control terminal needs to know which controlled terminal currently requests authentication. Therefore, in S604, the device ID for indicating the identity of the controlled terminal is carried in the authentication request and sent to the control terminal. At the same time, the first authentication string representing the control relationship between the controlled terminal and the control terminal is carried in the authentication request and sent to the control terminal, so that the control terminal can automatically authenticate the controlled terminal.

[0070] S605: The control terminal receives the authentication request sent by the controlled terminal, and generates a second authentication string corresponding to the controlled terminal according to the device ID in the authentication request and the control ID of the control application according to a preset rule.

[0071] In S605, after receiving the authentication request, the control terminal generates a second authentication string according to the control ID of the control application and the device ID carried in the authentication request according to the rule agreed with the controlled terminal in advance.

[0072] S606: The control terminal determines whether the first authentication string and the second authentication string are the same. If yes, S607 is executed; otherwise, S608 is executed.

[0073] Since the first authentication string and the second authentication string have the same composition factors and consistent combination rules, automatic authentication can be performed by comparing the first authentication string and the second authentication string. In S606, the control terminal compares the first authentication string carried in the authentication request and the second authentication string generated by itself, and determines whether to pass the authentication according to the comparison result.

[0074] S607: The control terminal passes the authentication of the controlled terminal.

[0075] For example, the first authentication string is "d123456:c123", and the second authentication string is "d123456:c123". It is indicated that the controlled terminal accesses the control application and passes the authentication of the controlled terminal.

[0076] S608: The control terminal rejects the authentication of the controlled terminal.

[0077] For example, the first authentication string is "d123456:c123", and the second authentication string is "d123456:c124". It is indicated that the controlled terminal is a device out of the control range and is not controlled by the control terminal, and the authentication of the controlled terminal is rejected.

[0078] In some embodiments, after the control terminal passes the authentication of the controlled terminal, the device ID and the device name of the controlled terminal that passes the authentication can also be stored in a device table, so that the control terminal sends a control instruction to the controlled terminal according to the device table, thereby realizing synchronous control of the controlled terminal; and the control terminal can also generate an authentication token for the controlled terminal that passes the authentication, and send the authentication token to the controlled terminal that passes the authentication in an authentication message. The controlled terminal that passes the authentication receives the authentication token and stores it. Within the validity period of the authentication token, the controlled terminal that passes the authentication can directly access the control application according to the authentication token to synchronously display the content of the control application, without re-authentication.

[0079] In some embodiments, when the control terminal rejects the authentication of the controlled terminal, the control terminal sends a prompt message of authentication failure to the controlled terminal, the prompt message including the reason of authentication failure, without manual troubleshooting, the controlled terminal re-performs the authentication after taking corresponding remedial measures according to the prompt message.

[0080] In the embodiments of the present application, the controlled terminal and the control terminal are connected to the same network, and the both automatically perform the authentication interaction, and the interaction information of the both can carry the ID required for authentication. Since the control ID of the control application is unique, and the device ID of the controlled terminal is also unique, on the basis of the pre-agreed generation rule of the authentication string, the first authentication string generated by the controlled terminal according to the control ID and the device ID should be the same as the second authentication string generated by the control terminal according to the control ID and the device ID, and thus the automatic authentication of the controlled terminal by the control terminal can be realized by comparing the first authentication string and the second authentication string.

[0081] In some embodiments, considering the security of the authentication interaction of the both, the authentication information in the interaction information can also be encrypted, and the specific authentication process is described in Figure 7 , which mainly includes the following steps:

[0082] S701: The control terminal encrypts the control ID of the control application in response to the control application starting operation.

[0083] In S701, the control terminal irreversibly encrypts the control ID of the control application, and one optional way is MD5 encryption.

[0084] For example, assuming that the control ID of the control application is c123, after the control ID is MD5 encrypted, the encrypted control ID is 94f3b3a16d8ce064c808b16bee5003c5.

[0085] S702: The control terminal sends a broadcast message, and the broadcast message carries the encrypted control ID and the stored encryption public key.

[0086] In S702, the control terminal discloses the control ID of the control application to all the controlled terminals in the same network through the broadcast message, and since the control ID is irreversibly encrypted, the controlled terminal will not know the real ID of the control application, preventing the occurrence of unsafe network behaviors such as ID tampering. At the same time, the control terminal discloses the encryption public key stored by itself to all the controlled terminals in the same network through the broadcast message, so that the controlled terminals use the disclosed encryption public key for encryption.

[0087] In the embodiments of the present application, the control terminal stores not only the encryption public key, but also the decryption private key, as described in Figure 8As shown, the 801 area is an encryption public key, and the 802 area is a decryption private key.

[0088] S703: After the controlled terminal receives the broadcast message sent by the control terminal, it is detected whether the controlled terminal is authenticated. If yes, the content of the control application is displayed according to the control of the control terminal, otherwise, S704 is executed.

[0089] The detailed description of this step is referred to S602, which is not repeated here.

[0090] S704: The controlled terminal encrypts its own device ID.

[0091] In S704, the controlled terminal irreversibly encrypts its own device ID.

[0092] For example, assuming that the device ID of the controlled terminal itself is d123456, after the device ID is irreversibly MD5 encrypted, the encrypted device ID is adf00707a1c0154a9ad8edb57c8646f4.

[0093] S705: The controlled terminal generates a first authentication string according to the encrypted control ID and the encrypted device ID according to a preset rule.

[0094] In an optional embodiment, the preset rule is agreed by the controlled terminal and the control terminal in advance and is unknown to the third party.

[0095] For example, the first authentication string generated by the encrypted device ID and the encrypted control ID is adf00707a1c0154a9ad8edb57c8646f4:94f3b3a16d8ce064c808b16bee5003c5.

[0096] S706: The controlled terminal encrypts the generated first authentication string according to the encryption public key carried by the broadcast message.

[0097] In S706, the first authentication string is encrypted according to the public key disclosed by the control terminal, so that the control terminal can be decrypted by the corresponding private key.

[0098] For example, the first authentication string is encrypted by the RSA asymmetric public key as shown in Figure 8 The obtained 64-bit code string is:

[0099] XKmTCpBpEdCTRpqLelMgjGyhpA2H1BM3vGVYMPFn3DEsFj6ByR73T5CxjWD5 / aLypYm2QFCARJ1zGKAwXNFEP5g6H+yh3whTE0QZ7hMVOebu1ylp0qUu0PkEepAbQ9KcHBWjM2K7sQLoB3bwpSwrrwzgtl0o9FW1WKgqkDHr8oY=.

[0100] S707: The controlled terminal sends an authentication request to the control terminal, and the authentication request carries the encrypted device ID and the encrypted first authentication string.

[0101] In S707, the control terminal needs to know which controlled terminal is currently requesting authentication, therefore, the controlled terminal carries the encrypted device ID in the authentication request sent to the control terminal, and carries the encrypted first authentication string in the authentication request sent to the control terminal, so that the control terminal can automatically authenticate the controlled terminal.

[0102] S708: The control terminal receives the authentication request sent by the controlled terminal, and decrypts the first authentication string according to the stored decryption private key.

[0103] In the embodiment of the present application, since the first authentication string is encrypted by the controlled terminal according to the public key disclosed by the control terminal, the control terminal can decrypt the first authentication string by using the stored decryption private key (such as shown in the 802 area in FIG. 8). Figure 8

[0104] S709: The control terminal generates the second authentication string corresponding to the controlled terminal according to the encrypted device ID and the encrypted control ID according to a preset rule.

[0105] In the embodiment of the present application, since the device ID of the controlled terminal is irreversibly encrypted in the automatic authentication process, the control terminal will not know the real ID of the controlled terminal, which ensures the network security of the controlled terminal in the authentication signaling interaction process.

[0106] In S709, the generation mode of the second authentication string is the same as that of the first authentication string, which should be the same in theory, therefore, whether to pass the authentication can be determined according to the comparison result of the first authentication string and the second authentication string.

[0107] S710: The control terminal determines whether the first authentication string and the second authentication string are the same, if yes, S711 is executed, otherwise, S713 is executed.

[0108] The detailed description of this step is referred to S606, which is not repeated here.​

[0109] S711: The control terminal stores the device ID and the device name of the controlled terminal into the device table, and generates an authentication token for the controlled terminal.

[0110] In S711, since the device table stores the device ID and the device name of the controlled terminal that has passed the authentication, the subsequent control terminal can control the synchronous display of the controlled device according to the device table.

[0111] S712: The control terminal sends an authentication message to the controlled terminal, and the authentication message carries the authentication token.

[0112] In the embodiments of the present application, the device name and the device ID in the authentication token can be used as the username and the password of the controlled terminal to access the control application, and no re-authentication is needed within the validity period of the authentication token.

[0113] S713: The control terminal sends prompt information of authentication failure to the controlled terminal.

[0114] It should be noted that, Figure 7 The encryption and decryption method in the above embodiment is only an example, for example, symmetric key encryption and decryption can also be used; for another example, the encryption and decryption key is stored in the center server, and the controlled terminal and the control terminal obtain the encryption and decryption key from the center server.

[0115] In the above embodiments, the ID of the interaction parties is irreversibly encrypted in the authentication process, which will not be exposed to the third party, thereby improving the security of the authentication, and in the case that the control terminal and the controlled terminal do not know the real ID of the other party, the real authentication relationship can still be established through the interaction.

[0116] It should be noted that in the automatic authentication process, the ID of the interaction parties is irreversibly encrypted, but after the control relationship is established through the authentication, the real ID of the interaction parties can be exchanged in the control process, so as to ensure the accuracy of the control.

[0117] Based on the same technical concept, the embodiments of the present application provide a control terminal, which can execute the process of the control terminal side in the automatic authentication method provided by the embodiments of the present application, and can achieve the same technical effects, which will not be repeated here.

[0118] Referring to Figure 9 , the control terminal comprises a processor 901, a memory 902, and a communication interface 903, the communication interface 903 and the memory 902 are connected with the processor 901 through a bus 904; the communication interface 903 is configured to communicate with at least one controlled terminal; the memory 902 stores computer program instructions, and the processor 901 implements the method of the control terminal in the above embodiments by executing the computer program instructions.

[0119] It should be noted that, Figure 9 Only the necessary hardware required to achieve automatic authentication, in addition to the control terminal contains some general hardware, such as display 905.

[0120] Based on the same technical concept, the embodiment of the present application provides a controlled terminal which can execute the process of the controlled terminal side in the automatic authentication method provided by the embodiment of the present application and achieve the same technical effect, which is not repeated here.

[0121] Referring to Figure 10 The controlled terminal includes a processor 1001, a memory 1002, a communication interface 1003, the communication interface 1003 and the memory 1002 are connected with the processor 1001 through a bus 1004; the communication interface 1003 is used for communicating with the control terminal; the memory 1002 stores computer program instructions, and the processor 1001 realizes the method of the controlled terminal in the above-mentioned embodiment by executing the computer program instructions.

[0122] It should be noted that, Figure 10 Only the necessary hardware required to achieve automatic authentication, in addition to the control terminal contains some general hardware, such as display 1005.

[0123] The embodiment of the present application also provides a computer readable storage medium for storing some instructions, which can complete the method of the above-mentioned embodiment when executed.

[0124] The embodiment of the present application also provides a computer program product for storing a computer program, which is used for executing the method of the above-mentioned embodiment.

[0125] Finally, it should be noted that: the above embodiments are only used to illustrate the technical solutions of the present application, and not to limit them; although the present application has been described in detail with reference to the above-mentioned embodiments, those skilled in the art should understand that: it can still modify the technical solutions recorded in the above-mentioned embodiments, or make equivalent replacement for part or all of the technical features; and these modifications or replacements do not make the essence of the corresponding technical solutions deviate from the scope of the technical solutions of the embodiments of the present application.

[0126] In order to facilitate explanation, the above description has been combined with specific embodiments. However, the above exemplary discussion is not intended to exhaust or limit the embodiments to the specific forms disclosed above. According to the above-mentioned teaching, various modifications and variations can be obtained. The selection and description of the above-mentioned embodiments are to better explain the principles and practical applications, so that those skilled in the art can better use the embodiments and various different modified embodiments suitable for specific use considerations.

Claims

1. A control terminal, characterized in that: The control terminal is installed with a control application, the control terminal and at least one controlled terminal are connected to the same network, and the control terminal includes a communication interface, a memory, and a processor: The memory stores a software control program, and the processor performs the following operations according to the software control program: In response to a control application startup operation, sending a broadcast message through the communication interface, the broadcast message carrying a control ID of the control application, the control ID being irreversibly encrypted; receiving, via the communication interface, an authentication request sent by the at least one controlled terminal, each authentication request carrying a device ID of a corresponding controlled terminal and a first authentication string, the first authentication string being generated by the corresponding controlled terminal according to a preset rule based on the control ID and its own device ID after receiving the broadcast message; The device ID is irreversibly encrypted; Generating, according to the preset rule, a second authentication string corresponding to each of the at least one controlled terminal and the device ID of the at least one controlled terminal and the control ID of the control application; For each controlled terminal, if the first authentication string and the second authentication string are the same, the authentication of the controlled terminal is passed.

2. The control terminal according to claim 1, wherein: The broadcast message carries the encryption public key stored by the control terminal, the first authentication string is encrypted using the encryption public key, and after receiving the authentication request sent by at least one controlled terminal, the processor further executes: Decrypt the first authentication string carried in the at least one authentication request according to the decryption private key corresponding to the encryption public key.

3. The control terminal according to claim 1 or 2, characterized in that: For each controlled terminal that passes the authentication, the processor further executes: The device ID and device name of the authenticated controlled terminal are stored in the device table, and an authentication token is generated for the authenticated controlled terminal; An authentication message is sent to the controlled terminal that has passed the authentication, where the authentication message carries the authentication token corresponding to the controlled terminal.

4. The control terminal according to claim 1 or 2, characterized in that: For each controlled terminal, if the first authentication string and the second authentication string are different, the processor further executes: Sending a prompt message indicating that the authentication failed to the controlled terminal so that the controlled terminal can re-authenticate.

5. A controlled terminal, characterized in that: The controlled terminal and the control terminal are connected to the same network, the control terminal is installed with a control application, and the controlled terminal includes a communication interface, a memory, and a processor: The memory stores a software control program, and the processor performs the following operations according to the software control program: receiving, via the communication interface, a broadcast message sent by the control terminal, the broadcast message carrying a control ID of the control application, the control ID being irreversibly encrypted, and the broadcast message being sent after the control application is started; When it is detected that the controlled terminal fails to pass the authentication, a first authentication string is generated according to a preset rule based on the control ID of the control application and the device ID thereof, wherein the device ID is irreversibly encrypted; An authentication request is sent to the control terminal through the communication interface, where the authentication request carries the first authentication string and the device ID of the controlled terminal itself, so that the control terminal generates a second authentication string according to the preset rules, based on the device ID of the controlled terminal and the control ID of the control application, and then compares the first authentication string and the second authentication string. If they are the same, the authentication of the controlled terminal is passed.

6. The controlled terminal according to claim 5, wherein: The broadcast message carries the encrypted public key stored by the control terminal; After the controlled terminal generates the first authentication string, the processor further executes: The first authentication character string is encrypted according to the encryption public key carried in the broadcast message.

7. The controlled terminal according to claim 5 or 6, characterized in that: After sending the authentication request to the control terminal, the processor further executes: The authentication message sent by the control terminal is received through the communication interface. The authentication message carries the authentication token corresponding to the controlled terminal. The authentication token is generated by the control terminal according to the device ID and device name of the controlled terminal after the control terminal passes the authentication of the controlled terminal.

8. The controlled terminal according to claim 5 or 6, characterized in that: When the controlled terminal fails to pass the authentication, the processor further executes: The authentication failure prompt information sent by the control terminal is received through the communication interface, so that the controlled terminal re-authenticates.

9. An automatic authentication method, characterized in that: Applied to a control terminal, the control terminal and at least one controlled terminal are connected to the same network, and the control terminal is installed with a control application, the method comprising: In response to a control application startup operation, sending a broadcast message, wherein the broadcast message carries a control ID of the control application, and the control ID is irreversibly encrypted; receiving an authentication request sent by at least one controlled terminal, each authentication request carrying a device ID of a corresponding controlled terminal and a first authentication string, wherein the first authentication string is generated by the corresponding controlled terminal according to a preset rule based on the control ID and its own device ID after receiving the broadcast message, and the device ID is irreversibly encrypted; Generating, according to the preset rule, a second authentication string corresponding to each of the at least one controlled terminal and the device ID of the at least one controlled terminal and the control ID of the control application; For each controlled terminal, if the first authentication string and the second authentication string are the same, the authentication of the controlled terminal is passed.

10. An automatic authentication method, characterized in that: Applied to a controlled terminal, the controlled terminal and the control terminal are connected to the same network, and the control terminal is installed with a control application, the method comprising: receiving a broadcast message sent by the control terminal, the broadcast message carrying a control ID of the control application, the control ID being irreversibly encrypted, and the broadcast message being sent after the control application is started; When it is detected that the controlled terminal fails authentication, generating a first authentication string according to a preset rule based on the control ID of the control application and the device ID of the controlled terminal itself, wherein the device ID is irreversibly encrypted; An authentication request is sent to the control terminal, where the authentication request carries the first authentication string and the device ID of the controlled terminal itself, so that the control terminal generates a second authentication string according to the preset rules, based on the device ID of the controlled terminal and the control ID of the control application, and then compares the first authentication string and the second authentication string. If they are the same, the authentication of the controlled terminal is passed.

Images