Authentication method and device for terminal identification equipment, storage medium and equipment

Abstract

The application discloses a terminal identification device authentication method and device, a storage medium and equipment. The method comprises the following steps: sending an authentication request and receiving a scheduling factor and a first public key returned by an identity authentication center; performing splicing calculation on identity authentication information, determining target device information, performing hash calculation on the target device information, and determining an information digest; determining initial authentication information based on the scheduling factor and the information digest, encrypting the initial authentication information by using the first public key, and obtaining target authentication information, wherein the target authentication information is used for being sent to the identity authentication center to complete identity authentication; receiving an authentication result returned by the identity authentication center, and completing identity authentication. The application solves the technical problem that the existing authentication method and device are not unified in coding, and the authentication server has an overload risk when the number of authentication requests is large.

Description

TECHNICAL FIELD

[0001] The present application relates to the technical field of computer, in particular to a terminal identification device authentication method and device, a storage medium and equipment. BACKGROUND

[0002] Industrial Internet can enable the dialogue between things and people, things and things, and realize the interconnection of people, machines and things. The industrial Internet identification analysis system gives each entity or virtual object a unique identity code ID through identification carriers, such as bar code, two-dimensional code, radio frequency identification tag, etc., and carries related data information, realizing the positioning, connection and dialogue of entities and virtual objects.

[0003] However, different enterprises and devices may have inconsistent coding systems and non-uniform coding rules, which is not conducive to device identity authentication. Moreover, when the server encounters a large number of concurrent authentication requests, the server resources may be at risk of overload, resulting in reduced system reliability, session timeout, and affecting the authentication process of terminal devices.

[0004] At present, there is no effective solution to the above problems. SUMMARY

[0005] The embodiments of the present application provide a terminal identification device authentication method, device, storage medium and equipment to at least solve the technical problem that the existing authentication method and device have inconsistent coding and the authentication server is at risk of overload when the number of authentication requests is large.

[0006] According to an aspect of the embodiments of the present application, a terminal identification device authentication method is provided, comprising: sending an authentication request and receiving a dispatch factor and a first public key returned by an identity authentication center, wherein the authentication request comprises basic identity information, the basic identity information is used to represent the name and type of the terminal identification device, the identity authentication center is used to perform identity authentication processing on the sender of the authentication request, the dispatch factor is used to represent the number of authentication requests, and the first public key is a public key generated by the identity authentication center; performing splicing calculation on identity authentication information, determining target device information, and performing hash calculation on the target device information to determine an information digest, wherein the identity authentication information is information to be authenticated by the identity authentication center, and the information digest is used to represent whether the workload of the hash calculation meets the requirements of the dispatch factor; determining initial authentication information based on the dispatch factor and the information digest, and encrypting the initial authentication information using the first public key to obtain target authentication information, wherein the target authentication information is used to send to the identity authentication center to complete identity authentication; receiving an authentication result returned by the identity authentication center to complete identity authentication.

[0007] Optionally, before the sending of the authentication request, the method further comprises: sending a registration request, and receiving a device identity code returned by an identity resolution platform, wherein the registration request is used to prompt the identity resolution platform to generate the device identity code for a sender of the registration request; and determining the device identity code, a product serial number, hardware information, and a device random number as the identity authentication information.

[0008] Optionally, the splicing calculation of the identity authentication information, the determination of the target device information, the hash calculation of the target device information, and the determination of the information digest comprise: splicing calculation of the device identity code, the product serial number, the hardware information, and the random number to determine the target device information; and hash calculation of the target device information by using a hash algorithm to determine the information digest.

[0009] Optionally, the determination of the initial authentication information based on the scheduling factor and the information digest, and the encryption of the initial authentication information by using the first public key to obtain the target authentication information comprise: comparison processing of the information digest and the scheduling factor to obtain a comparison result; if the information digest is smaller than the scheduling factor, the information digest is determined as the initial authentication information; and encryption of the initial authentication information by using the first public key to determine the target authentication information.

[0010] Optionally, the comparison processing of the information digest and the scheduling factor to obtain a comparison result further comprises: if the information digest is greater than the scheduling factor, updating the device random number in the target device information, and regenerating the information digest until the information digest is smaller than the scheduling factor; determining the updated information digest as the initial authentication information; and encrypting the initial authentication information by using the first public key to determine the target authentication information.

[0011] According to another aspect of the embodiment of the present application, a terminal identity device authentication method is further provided, comprising: receiving an authentication request, and generating a first public-private key pair based on the authentication request, wherein the first public-private key pair is a public-private key pair corresponding to an identity authentication center, including a first public key and a first private key; determining a scheduling factor based on a request number of the authentication request at a current time; sending the first public key and the scheduling factor to a terminal identity device, wherein the terminal identity device is a sender of the authentication request; decrypting target authentication information returned by the terminal identity device by using the first private key to perform identity authentication processing, obtaining an identity authentication result, and returning the identity authentication result to the terminal identity device.

[0012] Optionally, the number of the authentication requests at the current moment is used to determine the scheduling factor, including: if the number of the authentication requests is less than a first load threshold, determining the scheduling factor as a first scheduling factor, wherein the first scheduling factor is used to control the identity authentication center to perform normal scheduling; if the number of the authentication requests is greater than the first load threshold and less than a second load threshold, determining the scheduling factor as a second scheduling factor, wherein the second scheduling factor is used to control the identity authentication center to implement a first scheduling limit; if the number of the authentication requests is greater than the second load threshold and less than a third load threshold, determining the scheduling factor as a third scheduling factor, wherein the third scheduling factor is used to control the identity authentication center to implement a second scheduling limit; if the number of the authentication requests is greater than the third load threshold, determining the scheduling factor as a fourth scheduling factor, wherein the fourth scheduling factor is used to control the identity authentication center to implement a third scheduling limit.

[0013] According to another aspect of the embodiment of the present application, an authentication device of a terminal identification device is also provided, including: a first sending module, configured to send an authentication request and receive a scheduling factor and a first public key returned by an identity authentication center, wherein the authentication request includes basic identity information, the basic identity information is used to represent a name and a type of the terminal identification device, the identity authentication center is used to perform identity authentication processing on a sender of the authentication request, the scheduling factor is used to represent a number of the authentication request, and the first public key is a public key generated by the identity authentication center; a calculation module, configured to perform splicing calculation on identity authentication information, determine target device information, perform hash calculation on the target device information, and determine an information digest, wherein the identity authentication information is information to be authenticated by the identity authentication center, and the information digest is used to represent whether an amount of work of the hash calculation meets a requirement of the scheduling factor; a processing module, configured to determine initial authentication information based on the scheduling factor and the information digest, encrypt the initial authentication information by using the first public key, and obtain target authentication information, wherein the target authentication information is used to be sent to the identity authentication center to complete identity authentication; and a receiving module, configured to receive an authentication result returned by the identity authentication center, and complete identity authentication.

[0014] According to another aspect of the embodiments of the present application, there is also provided an authentication apparatus of a terminal identification device, comprising: a generating module configured to receive an authentication request and generate a first public-private key pair based on the authentication request, wherein the first public-private key pair is a public-private key pair corresponding to an identity authentication center, and comprises a first public key and a first private key; a determining module configured to determine a scheduling factor based on a number of requests of the authentication request at a current time; a second sending module configured to send the first public key and the scheduling factor to the terminal identification device, wherein the terminal identification device is a sender of the authentication request; and an authentication module configured to decrypt target authentication information returned by the terminal identification device using the first private key, perform identity authentication processing, obtain an identity authentication result, and return the identity authentication result to the terminal identification device.

[0015] According to another aspect of the embodiments of the present application, there is also provided a non-volatile storage medium, which stores a plurality of instructions, and the instructions are adapted to be loaded and executed by a processor to perform any of the authentication methods of the terminal identification device.

[0016] According to another aspect of the embodiments of the present application, there is also provided an electronic device, comprising a memory and a processor, wherein the memory stores a computer program, and the processor is configured to run the computer program to perform any of the authentication methods of the terminal identification device.

[0017] In the embodiment of the present application, the authentication request is sent, and the dispatch factor and the first public key returned by the identity authentication center are received, wherein the authentication request includes basic identity information, the basic identity information is used to represent the name and type of the terminal identification device, the identity authentication center is used to perform identity authentication processing on the sender of the authentication request, the dispatch factor is used to represent the number of the authentication request, and the first public key is a public key generated by the identity authentication center; identity authentication information is spliced and calculated, target device information is determined, and the target device information is subjected to hash calculation to determine an information digest, wherein the identity authentication information is information to be authenticated by the identity authentication center, and the information digest is used to represent whether the workload of the hash calculation meets the requirement of the dispatch factor; the initial authentication information is determined based on the dispatch factor and the information digest, the initial authentication information is encrypted by using the first public key to obtain target authentication information, and the target authentication information is used to be sent to the identity authentication center to complete the identity authentication; the authentication result returned by the identity authentication center is received to complete the identity authentication, so as to achieve the purpose of uniformly encoding the device information by calculating the device information and controlling the number of authentication requests based on the dispatch factor, thereby realizing the technical effects of improving the resource processing effectiveness of the authentication center and the system reliability, and further solving the technical problems that the device encoding is not unified in the existing authentication method, and the authentication server has an overload risk when the number of authentication requests is large. BRIEF DESCRIPTION OF DRAWINGS

[0018] The accompanying drawings, which are included to provide a further understanding of the application and are incorporated in and constitute a part of this application, illustrate embodiments of the application and serve to explain the principles of the application. In the drawings:

[0019] Figure 1 It is an authentication method of a terminal identification device according to an embodiment of the present application;

[0020] Figure 2 It is an optional authentication flowchart of a terminal identification device according to an embodiment of the present application;

[0021] Figure 3 It is an optional encryption flowchart of device identification identity information according to an embodiment of the present application;

[0022] Figure 4 It is an authentication method of a terminal identification device according to an embodiment of the present application;

[0023] Figure 5 It is an optional intelligent scheduling flowchart of an authentication center according to an embodiment of the present application;

[0024] Figure 6is an optional authentication center identity authentication flowchart according to an embodiment of the present application;

[0025] Figure 7 is a structure diagram of a terminal identification device authentication apparatus according to an embodiment of the present application;

[0026] Figure 8 is a structure diagram of a terminal identification device authentication apparatus according to an embodiment of the present application. DETAILED DESCRIPTION

[0027] In order to make the personnel in the technical field better understand the present application scheme, the technical scheme in the embodiments of the present application will be described clearly and completely below in combination with the drawings in the embodiments of the present application. Obviously, the described embodiments are only a part of the embodiments of the present application, but not all the embodiments. Based on the embodiments in the present application, all other embodiments obtained by the person skilled in the art without creative labor should belong to the protection scope of the present application.

[0028] It should be noted that the terms "first", "second" and the like in the specification and claims of the present application and the above-described drawings are used to distinguish similar objects, and do not have to be used to describe a specific order or sequence. It should be understood that the data thus used can be interchanged under appropriate circumstances, so that the embodiments of the present application described herein can be implemented in an order other than that illustrated or described herein. In addition, the terms "include" and "have" and any variations thereof are intended to cover non-exclusive inclusion, for example, a process, method, system, product or device including a series of steps or units does not have to be limited to those steps or units clearly listed, but can include other steps or units not clearly listed or inherent to these processes, methods, products or devices.

[0029] Term explanation:

[0030] Identification carrier device: identification carrier is a form of bearing and containing identification, which defines the function of storing and reading identification data on the "carrier" in a certain form. Identification carrier can be divided into two types, such as active identification carrier: communication module, chip, sensor, etc., or passive identification carrier: one-dimensional code, two-dimensional code, magnetic card, RFID, etc.

[0031] Identity authentication center server: a server platform for realizing trusted authentication of identification carrier device. Through the platform, the management of trusted identity identification of identification carrier device (registration authentication, cancellation, binding), the management of trusted device session key, etc. can be realized.

[0032] Cryptographic Hash Function: Hash function (or called as Hash function) is the most important cryptographic primitive mathematical function, which is widely used in many cryptographic protocols and information security applications, such as digital signature and message authentication code. Cryptographic Hash function is a single function that can convert any length of input data and generate a fixed length of output, and the output is usually called Hash value. Any slight change in the input data will greatly affect the Hash value of the output.

[0033] Asymmetric encryption algorithm: the key of asymmetric encryption algorithm is a pair of matching encryption key and decryption key, which must appear in pairs, and there is a mathematical relationship between the two keys, which restrict each other. The ciphertext encrypted by the encryption key can only be decrypted by the corresponding decryption key. The representative encryption algorithms are RSA, DSA and ECIES.

[0034] Proof of work mechanism: Proof of work (Proof-of-work) is a measurement method set by the system to achieve a certain target. The whole process of monitoring work is usually extremely inefficient, and it is a very efficient way to prove the completion of the corresponding work by authenticating the results of the work.

[0035] In the related art, Internet of Things (Internet of Things, IoT) is an infrastructure that connects things, people, systems, information resources and intelligent services, connects any object with the Internet through sensing devices according to the agreed protocol, exchanges information and communicates, and realizes intelligent identification, positioning, tracking, control, monitoring and management. At present, the development of Internet of Things still faces many challenges such as market fragmentation, non-uniform industrial standards, and imperfect security considerations. Especially in terms of security, compared with the Internet, Internet of Things applications will be more deeply involved in people's physical world life, therefore, the security problem of sensor devices, especially the reliability of access devices and the privacy of information transmission, has become an important part of the development process of Internet of Things that cannot be ignored.

[0036] In the related authentication method of terminal identification device, a corresponding device key (device private key) K' s is allocated to each device, and the identification ID and device key K' s should be able to be saved in the secure storage area of the device and cannot be tampered with and leaked. In addition, during the production stage of the device, the identity information of qualified Internet of Things devices, such as product identification ID, security information, such as product serial number, and device public key K s are synchronized to the identity authentication center server, which is used for subsequent registration, authentication and management of Internet of Things devices.

[0037] Before using the device, registration authentication needs to be performed at the identity authentication center, and authenticity and integrity are verified. The device initiates a registration authentication request to the identity authentication center, the identity authentication center issues a session public key, and requires the device to accept further device authentication requests in an asymmetric encryption manner. The device sends its product identification ID and corresponding verification information to the identity authentication center, and the identity authentication center verifies whether the device identification to be networked is compliant, the device security information and the public key part of the device authentication related key, and verifies the legality of the device identification, the authenticity of the product and the validity of the device authentication key signature. After the verification is passed, the device can be configured for security, operation permission management, etc., and then is integrated into the existing network for use.

[0038] However, different enterprises and devices may have inconsistent coding systems and non-uniform coding rules, and it is difficult to ensure the communication interconnection and data sharing between devices of different enterprises and different fields in an open Internet network. Moreover, some characteristics of industrial Internet of Things devices, such as dispersion, flow and being in an open environment, cause the device terminals to be vulnerable to physical damage, tampering, counterfeiting and information theft risks. In the authentication process, when the terminal side device sends the product identification ID and corresponding verification information to the identity authentication center, the information content is first summarized by using a Hash algorithm, and then further encrypted by using the public key of the authentication center. On the receiving side, the identity authentication center performs Hash on the original information to obtain an information digest, and then decrypts the received ciphertext by using the RSA algorithm to obtain the Hash. The consistency of the Hash results is compared; if consistent, it is considered that the received information is authentic and complete. Therefore, in order to ensure the authenticity and integrity of message transmission, the identity authentication center needs to spend a large amount of overhead to perform RSA calculation to confirm the integrity of the terminal device. Therefore, when a large number of concurrent initial access requests are encountered, the server resources may be overloaded, resulting in reduced system reliability, session timeout and affected terminal device authentication process.

[0039] According to an embodiment of the present application, an embodiment of a terminal identification device authentication method is provided. It should be noted that the steps shown in the flowchart of the accompanying drawings can be executed in a computer system such as a group of computer executable instructions, and although a logical order is shown in the flowchart, in some cases, the steps shown or described can be executed in an order different from that shown here.

[0040] Figure 1 The terminal identification device authentication method according to an embodiment of the present application, as shown in Figure 1 , the method comprises the following steps:

[0041] Step S102: Send an authentication request and receive a scheduling factor and a first public key returned by the identity authentication center. The authentication request includes basic identity information, which is used to characterize the name and type of the terminal identification device. The identity authentication center is used to perform identity authentication processing on the sender of the authentication request. The scheduling factor is used to characterize the number of authentication requests. The first public key is a public key generated by the identity authentication center.

[0042] Step S104: Concatenate and calculate the identity authentication information to determine the target device information, and perform hash calculation on the target device information to determine the information digest. The identity authentication information is the information to be authenticated by the identity authentication center, and the information digest is used to characterize whether the workload of the hash calculation meets the requirements of the scheduling factor.

[0043] Step S106: Determine initial authentication information based on the scheduling factor and the message digest, and encrypt the initial authentication information using the first public key to obtain target authentication information, wherein the target authentication information is used to send to the identity authentication center to complete identity authentication.

[0044] Step S108: Receive the authentication result returned by the aforementioned identity authentication center to complete identity authentication.

[0045] In this embodiment of the invention, the terminal identification device is the execution entity for the authentication of the terminal identification device provided in steps S102 to S108 above. During initial network access activation, the device needs to initiate a network access authentication request to the identity authentication center. After the request is sent, the device receives the scheduling factor and the first public key returned by the identity authentication center, calculates and processes the scheduling factor, and concatenates the device information to determine the authentication information. This authentication information is then sent to the identity authentication center for authentication. Finally, the device receives the authentication result returned by the identity authentication center, completing the authentication process.

[0046] It should be noted that the scheduling factor mentioned above is used to represent the number of authentication requests mentioned above, the first public key mentioned above is the public key generated by the identity authentication center mentioned above; the authentication information mentioned above is used to send to the identity authentication center to complete identity authentication, and the authentication information mentioned above is obtained by encrypting the message digest using the first public key mentioned above.

[0047] As an optional embodiment, such as Figure 2 The diagram illustrates the terminal identification device authentication process. During initial network access activation, the terminal identification device needs to initiate a network access request to the identity authentication center. The terminal identification device company registers the device identifier on the Industrial Internet Identifier Resolution Platform, obtaining a unique identifier code ID. The device itself stores device identification information (identifier code ID), as well as identity authentication information and a device authentication key pair (K).id , K' id ). The enterprise can synchronize the device identification information and identity authentication information to the identity authentication center before the device is shipped.

[0048] Optionally, as shown in Figure 2 , the authentication center will make a preliminary judgment according to the number of current network concurrent initial access requests after receiving the initial access request initiated by the identification device. If the current number of concurrent requests is large and exceeds the load threshold N, the scheduling factor T will be adjusted. If the current number of concurrent requests decreases and is lower than the load threshold N, the scheduling factor T is dynamically adjusted, and the access of the terminal identification device is not limited. The scheduling factor T will be issued to the terminal identification device together with the authentication center session public key K c (the first public key).

[0049] Optionally, after receiving the feedback of the authentication center, the terminal identification device will perform the corresponding operation according to the requirements of the authentication center. The terminal identification device performs the corresponding work proof according to the scheduling factor T, calculates the Hash hash that satisfies the information digest M0 c through the random number, and returns it to the authentication center to prove the legitimacy of its identity, so as to reduce the load of the authentication center through time consumption and realize balanced scheduling. The terminal identification device performs RSA encryption of device information (device information that needs to be registered includes but is not limited to device identification ID, product serial number, hardware information, etc.) according to the authentication center session public key K id . Finally, the device identification terminal returns the plaintext (spliced identity authentication information U0) and ciphertext (encrypted information digest E0) to the authentication center together with the second public key (device authentication public key K id ).

[0050] Optionally, after receiving the plaintext and ciphertext, the authentication center first verifies the scheduling factor T to confirm the legitimacy of the received information. Further decrypts the information using the private key (first private key) of the authentication center to confirm the authenticity and integrity of the received plaintext. Processes the content of the plaintext, which is the information of the terminal identification device itself, to confirm the legitimacy of the device information. Finally, generates a corresponding session key pair for the legal device, binds it with the device identification ID, stores the related information, and feeds back the result to the terminal identification device. During the processing, if the terminal identity is found to be abnormal, the information is missing or fake, etc., the terminal is fed back with the failure result and the corresponding reason. The terminal needs to re-initiate the initial request.

[0051] Optionally, the message returned by the identity authentication center is encrypted and sent by the device authentication public key K id , so only the terminal identification device can decrypt it through the second private key K' idDecrypt and obtain the result of authentication center verification and the key pair of the subsequent session.

[0052] Optionally, the terminal identification device maps to the device identification ID code after receiving the feedback of the identity authentication center and the allocated session key pair, and saves it.

[0053] In the embodiment of the present application, in the case that the terminal codes of different devices and different enterprises may not be unified, the present application allocates a globally unique identification code ID for each device based on the industrial internet identification application platform, stores the key information of the device, and realizes the network communication and interaction between devices and servers through the identification carrier. The key pair of the terminal device is generated and saved by the identity authentication center, and the key pair can be updated in the future. Even if the previous key is leaked, the session key pair can be reacquired in the process of resetting the initial key, so the security can be further improved. By combining the Hash hash calculation information digest and the proof of work that meets the scheduling factor T, according to the number of initial access requests of the current network concurrency, the server resource capacity and the current load capacity, the devices accessing the server resources can be scheduled and controlled to avoid congestion and overload of the server resources. The intelligent scheduling algorithm adopts a hierarchical Level A / B / C gradient (first scheduling limit, second scheduling limit, third scheduling limit) method, which can support the length of the full 0 bit of the scheduling factor T to be adjusted to realize flexible adjustment of the workload of the terminal device (the longer the full 0 bit, the greater the required calculation amount). In the actual application process, the server capacity and the registration access scene can be flexibly set and adjusted. Moreover, in the authentication process, the terminal identification device side needs to do a certain amount of work to obtain a result, and the authentication center side can check whether the client has completed the corresponding work through the result, which can further verify the legality of the terminal side sending device, and resist denial of service attacks and abuse of resources of the identity authentication request server.

[0054] In an optional embodiment, before the above-mentioned sending of the authentication request to the identity authentication center, the above-mentioned method further comprises: sending a registration request and receiving a device identification code returned by an identification analysis platform, wherein the registration request is used to prompt the identification analysis platform to generate the device identification code for the sender of the registration request; and storing the device identification code, product serial number, hardware information and random number as the identity authentication information in the local.

[0055] In the embodiment of the present application, the terminal device enterprise registers the device identification of the Internet of Things device on the industrial internet identification analysis platform, and allocates a unique device identification code ID (U id ). The device identification information of the device itself, the identity authentication information and the initial identity authentication key pair (K id , K′id ) before the device is shipped. The terminal device needs to send a network access request U1 to the identity authentication center when it is initially connected to the network, which can include: U1=(U id ID||id basic ); where U id ID is the globally unique identification code of the terminal device, and id basic is the basic information of the device, such as device name and device type. In addition, the network access request U1 can also include product serial number, hardware information and other device-related information.

[0056] In an optional embodiment, the above identity authentication information is spliced and calculated to determine the target device information, and the target device information is hashed and calculated to determine the information digest, including: splicing and calculating the device identification code, the product serial number, the hardware information and the random number to determine the target device information; and using a hash algorithm to calculate the target device information to determine the information digest.

[0057] In the embodiment of the application, as shown in the device identification identity information encryption process diagram, Figure 3 after the device receives the public key K c and the scheduling factor T sent by the authentication center, the identity authentication information is spliced and encrypted. The identity authentication information to be sent includes but is not limited to the device identification ID code U id , the product serial number U series , the hardware information U hw , and the 32-bit random number RAND. The clear text information to be sent is spliced into the authentication information, i.e. the target device information U0, and the specific formula is as follows:

[0058] U0=(U id ||U series ||U hw ||RAND)

[0059] Optionally, the information content is first hashed and calculated using the Hash MD256 algorithm to obtain the information digest M0, and the specific formula is as follows:

[0060] M0=HASH 256 (U0)

[0061] In the embodiment of the application, the calculated information digest M0 and the scheduling factor T issued by the authentication center are compared to confirm whether the current terminal device needs to prove the identity of the proof of work to prove the legality.

[0062] In an alternative embodiment, the initial authentication information is determined based on the dispatch factor and the information digest, and the initial authentication information is encrypted by the first public key to obtain the target authentication information, including: comparing the information digest and the dispatch factor to obtain a comparison result; if the information digest is less than the dispatch factor, the information digest is determined as the initial authentication information; and the initial authentication information is encrypted by the first public key to determine the target authentication information.

[0063] It should be noted that if the information digest is greater than the dispatch factor, the device random number in the target device information is updated and the information digest is regenerated until the information digest is less than the dispatch factor, for example: the device random number is regenerated; the updated information digest is determined as the initial authentication information; and the initial authentication information is encrypted by the first public key to determine the target authentication information.

[0064] Optionally, if the current issued T=T0 is 256bit full 1, it means that there is no dispatch restriction, and the currently calculated M0 must satisfy the condition M0<=T, then the public key of the authentication center is used for encryption to obtain the ciphertext E0. Wherein, T0 is the first dispatch factor.

[0065] Optionally, if the current issued T=T A , the high 8 bits of T0 are set to all 0 to perform Level A dispatch restriction. The currently calculated M0 and T need to be compared. If M0<=T is satisfied, the public key of the authentication center is used for encryption to obtain the ciphertext E0; if not, RAND needs to be added, the authentication information U0 is regenerated, and a new Hash hash is calculated. Wherein, T A is the second dispatch factor.

[0066] It should be noted that the SHA256 hash function is uniformly distributed, so the probability of 0 and 1 appearing on each bit of the corresponding hash value should be the same. For T=T A , the high 8 bits are set to all 0, the solution space must exist, but the probability that each generated Hash hash M0 can satisfy the condition is 1 / 2^8, that is, the terminal needs to calculate 2^8 times on average to find the correct answer, and the calculation time is: PerSHA256Time*2^8.

[0067] Optionally, if the current issued T=T B, set all 0 in high 16 bit, and perform Level B scheduling restriction. The current calculated M0 and T need to be compared. If M0<=T is satisfied, the public key of the authentication center is used for encryption to obtain ciphertext E0; if it is not satisfied, RAND needs to be added by one, the authentication information U0 is regenerated, and a new Hash hash is calculated. Wherein, T B is the third scheduling factor.

[0068] Optionally, for T=T B , set all 0 in high 16 bit, the solution space must exist, but the probability of each time generating Hash hash M0 to meet the condition is 1 / 2^16, that is, the terminal needs to calculate 2^16 times on average to find the correct answer, and the operation time is: PerSHA256Time*2^16.

[0069] Optionally, if the current issued T=T C , set all 0 in high 32 bit, and perform Level C scheduling restriction. The current calculated M0 and T need to be compared. If M0<=T is satisfied, the public key of the authentication center is used for encryption to obtain ciphertext E0; if it is not satisfied, RAND needs to be added by one, the authentication information U0 is regenerated, and a new Hash hash is calculated. Wherein, T C is the fourth scheduling factor.

[0070] It should be noted that the SHA256 hash function is uniformly distributed, so the probability of 0 and 1 appearing on each bit of the corresponding hash value should be the same. For T=T C , set all 0 in high 32 bit, the solution space must exist, but the probability of each time generating Hash hash M0 to meet the condition is 1 / 2^32, that is, the terminal needs to calculate 2^32 times on average to find the correct answer, and the operation time is: PerSHA256Time*2^32.

[0071] Therefore, it can be seen that for different values of the scheduling factor T, the time overhead of the work required by the terminal side is increased level by level, and satisfies a certain probability distribution, thereby realizing intelligent shunting of the current load of the authentication center. At the same time, the terminal side needs to do a certain difficult work to obtain a result, and the authentication center side can easily check whether the client has done the corresponding work through the result, which can further verify the legitimacy of the terminal side sending device. Optionally, the public key of the authentication center is used for encryption to obtain ciphertext E0, and the specific formula is as follows:

[0072] E0=K c (M0)

[0073] Wherein, K cM0 is the Hashed digest of the identity authentication information of the terminal identification device.

[0074] Optionally, the ciphertext E0 and the plaintext U0, and the device authentication public key K id are sent to the authentication center together.

[0075] Figure 4 The authentication method of a terminal identification device according to an embodiment of the present application includes the following steps as shown in the figure: Figure 4

[0076] Step S402, receiving an authentication request and generating a first public-private key pair based on the authentication request, wherein the first public-private key pair is a public-private key pair corresponding to the identity authentication center, including a first public key and a first private key;

[0077] Step S404, determining a scheduling factor based on the number of requests of the authentication request at the current time;

[0078] Step S406, sending the first public key and the scheduling factor to the terminal identification device, wherein the terminal identification device is the sender of the authentication request;

[0079] Step S408, decrypting the target authentication information returned by the terminal identification device using the first private key, performing identity authentication processing to obtain an identity authentication result, and returning the identity authentication result to the terminal identification device.

[0080] In the embodiment of the present application, the execution subject of the authentication method of the terminal identification device provided in steps S402 to S408 is an identity authentication center server. The identity authentication center receives an authentication request of a terminal identification device, generates a scheduling factor based on the number of requests Nir, sends the scheduling factor and the first public key to the terminal identification device, and after receiving the plaintext and the ciphertext, first verifies the scheduling factor T to confirm the legality of the received information. Further decrypts the information using the private key private to the authentication center to confirm the authenticity and integrity of the received plaintext. Processes the content of the plaintext, i.e. the information of the terminal identification device itself, to confirm the legality of the device information. Finally, generates a corresponding session key pair for the legal device, binds the device identification ID, stores the related information, and feeds back the result to the terminal identification device. In the processing process, if the terminal identity is found to be abnormal, information is missing or fake, etc., the terminal is fed back with a failure result and the corresponding reason. The terminal needs to re-initiate the initial request.

[0081] It should be noted that the returned message is encrypted and sent by the device authentication public key K id Therefore, only the device can obtain the result of the authentication center verification and the subsequent session key pair. ​

[0082] In an alternative embodiment, the above-mentioned determining the scheduling factor based on the number of requests at the current time for the authentication request comprises: if the number of requests is less than a first load threshold, determining the scheduling factor as a first scheduling factor, wherein the first scheduling factor is used to control the identity authentication center to perform normal scheduling; if the number of requests is greater than the first load threshold and less than a second load threshold, determining the scheduling factor as a second scheduling factor, wherein the second scheduling factor is used to control the identity authentication center to implement a first scheduling limit; if the number of requests is greater than the second load threshold and less than a third load threshold, determining the scheduling factor as a third scheduling factor, wherein the third scheduling factor is used to control the identity authentication center to implement a second scheduling limit; if the number of requests is greater than the third load threshold, determining the scheduling factor as a fourth scheduling factor, wherein the fourth scheduling factor is used to control the identity authentication center to implement a third scheduling limit.

[0083] In the embodiment of the present application, as shown in the intelligent scheduling flowchart of the authentication center, the authentication center starts to receive the initial access request initiated by the identification device and the device identification code ID, and stores and audits the same. Then, according to the number of current network concurrent initial access requests, the server resource capacity and the current load capacity, the corresponding access request load threshold level Level A / B / C is set, and the corresponding scheduling factor T is updated. Figure 5

[0084] Optionally, if the number of current concurrent requests is small, the number of requests N ir < Load threshold N levelA , the scheduling is normally performed, no limit is made to the scheduling factor, and the first scheduling factor T0 is 256 bits of all 1.

[0085] Optionally, if the number of current concurrent requests increases, the number of requests N ir > Load threshold N levelA , and N ir < Load threshold N levelB , the Level A layer limit is made to the scheduling factor, and the second scheduling factor T A = T0 high 8 bits are all 0.

[0086] Optionally, if the number of current concurrent requests increases, the number of requests N ir > Load threshold N levelB , and N ir < Load threshold N levelC , the Level B layer limit is made to the scheduling factor, and the third scheduling factor T B = T0 high 16 bits are all 0.

[0087] Optionally, if the number of current concurrent requests increases, the number of requests N​ir >Load threshold N levelC At that time, Level C level constraints are applied to the scheduling factor, and the fourth scheduling factor T C = Set the high 32 bits of T0 to all 0.

[0088] Optionally, the authentication center returns the session public key K to the terminal identification device authentication center. c And the scheduling factor T.

[0089] As an optional embodiment, such as Figure 6 The diagram illustrates the authentication process of the authentication center. The authentication center first verifies the received plaintext, calculating the first verification digest M′0 using the Hash MD256 hash method. The specific formula is as follows:

[0090] M′0=HASH 256 (U0)

[0091] Wherein, U0 is the plaintext received by the certification center, including but not limited to the device identifier ID code U. id Product serial number U series Hardware information U hw And a 32-bit random number RAND.

[0092] Optionally, verify whether the terminal device completes the proof-of-work based on the scheduling factor T. If M′0 <= T, then process the received ciphertext E0 using the private key K′ of the authentication center. c Decryption will proceed; otherwise, the terminal device has not authenticated its identity and there is a possibility of malicious attack on the server's computing resources. The result will be: Failure, scheduling requirements not met.

[0093] Optionally, the received ciphertext E0 can be processed using the private key K′ of the certification authority. c Decryption yields a 256-bit hash second verification digest M1, as shown in the following formula:

[0094] M1=K′ c (E0)

[0095] Optionally, if the hashes obtained by hashing the plaintext and decrypting the ciphertext are equal, then the formula is satisfied:

[0096] M′0=M1

[0097] This indicates that the plaintext received by the certification center is authentic and complete.

[0098] Optionally, after confirming the authenticity and completeness of the plaintext received by the authentication center, the information spliced ​​from the plaintext content is further deconstructed to obtain the device identification ID code U. idProduct serial number U series Hardware information U hw Information such as the device's factory-synchronized information is verified against the information in the certification center's database to confirm the authenticity and validity of the terminal device. If the verification passes, the received ciphertext E0 is processed using the certification center's private key K′. c Decryption will be performed; if the verification fails, the product is considered counterfeit and the result will be returned: Failure, identity authentication failed.

[0099] Optionally, a session key pair (K) can be generated for the terminal device. s , K′ s This is then mapped to the device's unique identifier ID code, and the database is updated. The verification result is returned, indicating success or failure. If successful, encrypted information E is returned. s For example, in the formula:

[0100] E s =K id (K s , K′ s )

[0101] Among them, K id The identifier is encrypted using the terminal identifier device authentication public key, (K s , K′ s ) is the session key pair generated by the certification authority for the terminal device.

[0102] As an optional implementation, if the terminal receives an authentication failure message, it re-initiates the authentication request. If the device receives an authentication success message, it uses its local device authentication private key K′. id Decrypting Ciphertext E s Obtain the session key pair of the terminal identification device, map it to the device identification ID encoding, and save it.

[0103] Through the above steps, it is possible to combine Hash hash calculation of information digest and proof-of-work that satisfies the scheduling factor T. Based on the number of initial access requests in the current network, server resource capacity, and current load capacity, it is possible to schedule and manage devices accessing server resources, thereby avoiding server resource congestion and overload.

[0104] According to an embodiment of the present invention, an apparatus embodiment for implementing the authentication method of the terminal identification device described above is also provided. Figure 7 This is a schematic diagram of the structure of an authentication device for a terminal identification device according to an embodiment of the present invention, as shown below. Figure 7 As shown, the above-mentioned device includes: a first transmitting module 70, a calculating module 72, a processing module 74, and a receiving module 76, wherein:

[0105] The first sending module 70 is configured to send an authentication request and receive a scheduling factor and a first public key returned by the identity authentication center, wherein the authentication request comprises basic identity information, the basic identity information is used to represent the name and type of the terminal identification device, the identity authentication center is configured to perform identity authentication processing on the sender of the authentication request, the scheduling factor is used to represent the number of the authentication request, and the first public key is a public key generated by the identity authentication center;

[0106] The computing module 72 is configured to perform splicing calculation on identity authentication information, determine target device information, perform hash calculation on the target device information, and determine an information digest, wherein the identity authentication information is information to be authenticated by the identity authentication center, and the information digest is used to represent whether the workload of the hash calculation meets the requirement of the scheduling factor;

[0107] The processing module 74 is configured to determine initial authentication information based on the scheduling factor and the information digest, and encrypt the initial authentication information by using the first public key to obtain target authentication information, wherein the target authentication information is used to be sent to the identity authentication center to complete identity authentication.

[0108] The receiving module 76 is configured to receive an authentication result returned by the identity authentication center to complete identity authentication.

[0109] It should be noted that the first sending module 70, the computing module 72, the processing module 74 and the receiving module 76 correspond to steps S102 to S108 in Embodiment 1, and the four modules have the same instances and application scenarios as the corresponding steps, but are not limited to the contents disclosed in the above embodiments.

[0110] According to the embodiment of the present application, a device for implementing the authentication method of the terminal identification device is also provided, Figure 8 is a structural schematic diagram of an authentication device of a terminal identification device according to an embodiment of the present application, as Figure 8 shown, the device comprises a generating module 80, a determining module 82, a second sending module 84 and an authentication module 86, wherein:

[0111] The generating module 80 is configured to receive an authentication request and generate a first public-private key pair based on the authentication request, wherein the first public-private key pair is a public-private key pair corresponding to the identity authentication center, comprising a first public key and a first private key.

[0112] The determining module 82 is configured to determine a scheduling factor based on the number of requests of the authentication request at the current time.

[0113] The second sending module 84 is configured to send the first public key and the scheduling factor to a terminal identification device, where the terminal identification device is a sender of the authentication request.

[0114] The authentication module 86 is configured to decrypt the target authentication information returned by the terminal identification device by using the first private key, perform identity authentication processing, obtain an identity authentication result, and return the identity authentication result to the terminal identification device.

[0115] It should be noted that the generation module 80, the determination module 82, the second sending module 84, and the authentication module 86 correspond to steps S402 to S408 in the embodiment, and the four modules have the same instances and application scenarios as the corresponding steps, but are not limited to the contents disclosed in the above embodiment.

[0116] It should be noted that the preferred embodiments of the present embodiment can refer to the related descriptions in the embodiment, which will not be repeated here.

[0117] According to the embodiment of the present application, an embodiment of a computer readable storage medium is also provided. Optionally, in the present embodiment, the computer readable storage medium can be used to save the program code executed by the authentication method of the terminal identification device provided in the above embodiment.

[0118] Optionally, in the present embodiment, the computer readable storage medium can be located in any one of the computer terminals in the computer terminal group in the computer network, or in any one of the mobile terminals in the mobile terminal group.

[0119] Optionally, in the present embodiment, the computer readable storage medium is configured to store program code for performing the following steps: sending an authentication request, and receiving a scheduling factor and a first public key returned by an identity authentication center, where the authentication request includes basic identity information, the basic identity information is used to represent the name and type of the terminal identification device, the identity authentication center is used to perform identity authentication processing on the sender of the authentication request, the scheduling factor is used to represent the number of the authentication request, and the first public key is a public key generated by the identity authentication center; performing splicing calculation on identity authentication information, determining target device information, and performing hash calculation on the target device information to determine an information digest, where the identity authentication information is information to be authenticated by the identity authentication center, and the information digest is used to represent whether the workload of the hash calculation meets the requirement of the scheduling factor; determining initial authentication information based on the scheduling factor and the information digest, and encrypting the initial authentication information by using the first public key to obtain target authentication information, where the target authentication information is used to be sent to the identity authentication center to complete identity authentication; and receiving an authentication result returned by the identity authentication center to complete identity authentication.

[0120] Optionally, the computer readable storage medium is configured to store program codes for performing the following steps: sending a registration request to the identity resolution platform in response to a registration instruction of the terminal identification device; receiving the device identification code returned by the identity resolution platform; and determining that the device identification code, the product serial number, the hardware information and the device random number are the identity authentication information.

[0121] Optionally, the computer readable storage medium is configured to store program codes for performing the following steps: splicing the device information by using a pre-designed calculation formula to determine the information digest, wherein the information digest includes the device identification code, the product serial number, the hardware information and the random number; comparing the information digest with the dispatch factor to obtain a comparison result; if the information digest is less than the dispatch factor, solving the dispatch factor to determine a solution; and encrypting the solution and the information digest by using the first public key to determine the authentication information.

[0122] Optionally, the computer readable storage medium is configured to store program codes for performing the following steps: if the information digest is greater than the dispatch factor, updating the device random number in the target device information and regenerating the information digest until the information digest is less than the dispatch factor; determining the updated information digest as the initial authentication information; and encrypting the initial authentication information by using the first public key to determine the target authentication information.

[0123] Optionally, the computer readable storage medium is configured to store program codes for performing the following steps: generating a first public-private key pair in response to an authentication request sent by a terminal identification device, wherein the first public-private key pair is a public-private key pair corresponding to an identity authentication center, including a first public key and a first private key; determining a dispatch factor based on the number of requests of the authentication request at the current time; sending the first public key and the dispatch factor to the terminal identification device; and decrypting the authentication information returned by the terminal identification device by using the first private key to perform authentication processing to obtain an authentication result, and returning the identity authentication result to the terminal identification device.

[0124] Optionally, the computer readable storage medium is configured to store program code for performing the following steps: if the number of requests is less than the first load threshold, determining the scheduling factor as a first scheduling factor, wherein the first scheduling factor is used to control the identity authentication center to perform normal scheduling; if the number of requests is greater than the first load threshold and less than a second load threshold, determining the scheduling factor as a second scheduling factor, wherein the second scheduling factor is used to control the identity authentication center to implement a first scheduling limit; if the number of requests is greater than the second load threshold and less than a third load threshold, determining the scheduling factor as a third scheduling factor, wherein the third scheduling factor is used to control the identity authentication center to implement a second scheduling limit; and if the number of requests is greater than the third load threshold, determining the scheduling factor as a fourth scheduling factor, wherein the fourth scheduling factor is used to control the identity authentication center to implement a third scheduling limit.

[0125] According to an embodiment of the present application, a processor is also provided. Optionally, in this embodiment, the computer readable storage medium can be used to save the program code executed by the authentication method of the terminal identification device provided in the above embodiment 1.

[0126] The present application provides an electronic device, which comprises a processor, a memory, and a program stored in the memory and executable on the processor. When the processor executes the program, the following steps are implemented: sending an authentication request, and receiving a scheduling factor and a first public key returned by an identity authentication center, wherein the authentication request comprises basic identity information, the basic identity information is used to represent the name and type of a terminal identification device, the identity authentication center is used to perform identity authentication processing on the sender of the authentication request, the scheduling factor is used to represent the number of authentication requests, and the first public key is a public key generated by the identity authentication center; performing splicing calculation on identity authentication information, determining target device information, performing hash calculation on the target device information, and determining an information digest, wherein the identity authentication information is information to be authenticated by the identity authentication center, and the information digest is used to represent whether the workload of the hash calculation meets the requirements of the scheduling factor; determining initial authentication information based on the scheduling factor and the information digest, encrypting the initial authentication information by using the first public key to obtain target authentication information, wherein the target authentication information is used to be sent to the identity authentication center to complete identity authentication; and receiving an authentication result returned by the identity authentication center to complete identity authentication.

[0127] An electronic device is provided. The device includes a processor, a memory, and a program stored in the memory and executable on the processor. When the processor executes the program, the following steps are implemented: receiving an authentication request, and generating a first public-private key pair based on the authentication request, wherein the first public-private key pair is a public-private key pair corresponding to an identity authentication center, including a first public key and a first private key; determining a scheduling factor based on a number of requests of the authentication request at a current time; sending the first public key and the scheduling factor to a terminal identification device, wherein the terminal identification device is a sender of the authentication request; decrypting target authentication information returned by the terminal identification device using the first private key, performing identity authentication processing, obtaining an identity authentication result, and returning the identity authentication result to the terminal identification device.

[0128] The application also provides a computer program product, when executed on a data processing device, is adapted to execute a program initialized with the following method steps: sending an authentication request, and receiving a scheduling factor and a first public key returned by an identity authentication center, wherein the authentication request includes basic identity information, the basic identity information is used to represent the name and type of a terminal identification device, the identity authentication center is used to perform identity authentication processing on the sender of the authentication request, the scheduling factor is used to represent the number of authentication requests, and the first public key is a public key generated by the identity authentication center; performing splicing calculation on identity authentication information, determining target device information, and performing hash calculation on the target device information to determine an information digest, wherein the identity authentication information is information to be authenticated by the identity authentication center, and the information digest is used to represent whether the workload of the hash calculation meets the requirements of the scheduling factor; determining initial authentication information based on the scheduling factor and the information digest, and encrypting the initial authentication information using the first public key to obtain target authentication information, wherein the target authentication information is used to be sent to the identity authentication center to complete identity authentication; receiving an authentication result returned by the identity authentication center to complete identity authentication.

[0129] The application also provides a computer program product, when executed on a data processing device, is adapted to execute a program initialized with the following method steps: receiving an authentication request, and generating a first public-private key pair based on the authentication request, wherein the first public-private key pair is a public-private key pair corresponding to an identity authentication center, including a first public key and a first private key; determining a scheduling factor based on a number of requests of the authentication request at a current time; sending the first public key and the scheduling factor to a terminal identification device, wherein the terminal identification device is a sender of the authentication request; decrypting target authentication information returned by the terminal identification device using the first private key, performing identity authentication processing, obtaining an identity authentication result, and returning the identity authentication result to the terminal identification device.

[0130] The above-mentioned serial numbers of the embodiments of the present application are only for description, and do not represent the advantages and disadvantages of the embodiments.

[0131] In the above-mentioned embodiments of the present application, the description of each embodiment has its own focus, and the parts not described in detail in a certain embodiment can be referred to the relevant description of other embodiments.

[0132] In several embodiments provided in the present application, it should be understood that the disclosed technical contents can be implemented by other ways. Among them, the above-mentioned device embodiments are only schematic, for example, the division of the units can be a logical function division, and actual implementation can have another division way, for example, a plurality of units or components can be combined or integrated into another system, or some features can be ignored or not executed. In addition, the coupling or direct coupling or communication connection between the units or modules shown or discussed can be indirect coupling or communication connection through some interfaces, units or modules, which can be electrical or other forms.

[0133] The units described as separate components can or can not be physically separate, and the components shown as units can or can not be physical units, that is, they can be located in one place or distributed to multiple units. Part or all of the units can be selected according to actual needs to achieve the purpose of the embodiment scheme.

[0134] In addition, each functional unit in each embodiment of the present application can be integrated in one processing unit, or each unit can exist physically, or two or more units can be integrated in one unit. The above-mentioned integrated unit can be realized in the form of hardware or in the form of software functional unit.

[0135] The integrated unit, if realized in the form of software functional unit and sold or used as an independent product, can be stored in a computer readable storage medium. Based on such understanding, the technical solutions of the present application or the whole or part of the technical solutions which essentially contribute to the prior art can be embodied in the form of software product, which is stored in a storage medium and includes a plurality of instructions for making a computer device (which can be a personal computer, a server or a network device, etc.) execute all or part of the steps of the method described in each embodiment of the present application. The above-mentioned storage medium includes: U disk, read-only memory (ROM, Read-Only Memory), random access memory (RAM, Random Access Memory), mobile hard disk, magnetic disk or optical disk and various program code storage media.

[0136] The above merely describes the preferred embodiments of the present application, and it should be pointed out that, for those skilled in the art, several improvements and refinements can be made without departing from the principles of the present application, and these improvements and refinements should also be considered as falling within the protection scope of the present application.

Claims

1. A terminal identification device authentication method characterized by comprising: The method comprises the following steps: sending an authentication request and receiving a scheduling factor and a first public key returned by an identity authentication center, wherein the authentication request comprises basic identity information used to represent the name and type of a terminal identification device, the identity authentication center is used to perform identity authentication processing on the sender of the authentication request, the scheduling factor is used to represent the number of the authentication request, and the first public key is a public key generated by the identity authentication center; performing splicing calculation on identity authentication information, determining target device information, performing hash calculation on the target device information, and determining an information digest, wherein the identity authentication information is information to be authenticated by the identity authentication center, and the information digest is used to represent whether the workload of the hash calculation meets the requirement of the scheduling factor; determining initial authentication information based on the scheduling factor and the information digest, encrypting the initial authentication information by using the first public key, and obtaining target authentication information, wherein the target authentication information is used to be sent to the identity authentication center to complete identity authentication; receiving an authentication result returned by the identity authentication center to complete identity authentication.

2. The method of claim 1, wherein, Before the step of sending the authentication request, the method further comprises the following steps: sending a registration request and receiving a device identification code returned by an identification resolution platform, wherein the registration request is used to prompt the identification resolution platform to generate the device identification code for the sender of the registration request; determining the device identification code, a product serial number, hardware information and a device random number as the identity authentication information.

3. The method of claim 2, wherein, The step of performing splicing calculation on the identity authentication information, determining target device information, and performing hash calculation on the target device information to determine an information digest comprises the following steps: performing splicing calculation on the device identification code, the product serial number, the hardware information and the random number to determine the target device information; calculating the target device information by using a hash algorithm to determine an information digest.

4. The method of claim 2, wherein, The step of determining initial authentication information based on the scheduling factor and the information digest, and encrypting the initial authentication information by using the first public key to obtain target authentication information comprises the following steps: performing comparison processing on the information digest and the scheduling factor to obtain a comparison result; if the information digest is smaller than the scheduling factor, determining the information digest as the initial authentication information; encrypting the initial authentication information by using the first public key to determine the target authentication information.

5. The method of claim 4, wherein, The step of performing comparison processing on the information digest and the scheduling factor to obtain a comparison result further comprises the following steps: if the information digest is greater than the scheduling factor, updating the device random number in the target device information and regenerating the information digest until the information digest is smaller than the scheduling factor; determining the updated information digest as the initial authentication information; encrypting the initial authentication information by using the first public key to determine the target authentication information.

6. An authentication method of a terminal identification device, characterized by, The method comprises the following steps: receive an authentication request and generate a first public-private key pair based on the authentication request, wherein the first public-private key pair is a public-private key pair corresponding to an identity authentication center, including a first public key and a first private key, wherein the authentication request includes basic identity information, and the basic identity information is used to represent the name and type of a terminal identification device; determine a scheduling factor based on the number of authentication requests at the current time; send the first public key and the scheduling factor to the terminal identification device, wherein the terminal identification device is the sender of the authentication request; decrypt target authentication information returned by the terminal identification device using the first private key, perform identity authentication processing, obtain an identity authentication result, and return the identity authentication result to the terminal identification device, wherein the target authentication information is determined based on the scheduling factor and an information digest, and the initial authentication information is encrypted using the first public key to obtain the target authentication information; the terminal identification device is configured to perform splicing calculation on identity authentication information, determine target device information, and perform hash calculation on the target device information to determine an information digest, wherein the identity authentication information is information to be authenticated by the identity authentication center, and the information digest is used to represent whether the workload of the hash calculation meets the requirements of the scheduling factor.

7. The method of claim 6, wherein, The determination of the scheduling factor based on the number of authentication requests at the current time includes: if the number of requests is less than a first load threshold, the scheduling factor is determined to be a first scheduling factor, wherein the first scheduling factor is used to control the identity authentication center to perform normal scheduling; if the number of requests is greater than the first load threshold and less than a second load threshold, the scheduling factor is determined to be a second scheduling factor, wherein the second scheduling factor is used to control the identity authentication center to implement a first scheduling restriction; if the number of requests is greater than the second load threshold and less than a third load threshold, the scheduling factor is determined to be a third scheduling factor, wherein the third scheduling factor is used to control the identity authentication center to implement a second scheduling restriction; if the number of requests is greater than the third load threshold, the scheduling factor is determined to be a fourth scheduling factor, wherein the fourth scheduling factor is used to control the identity authentication center to implement a third scheduling restriction.

8. An authentication apparatus of a terminal identification device, characterized by comprising: includes: a first sending module configured to send an authentication request and receive a scheduling factor and a first public key returned by an identity authentication center, wherein the authentication request includes basic identity information, the basic identity information is used to represent the name and type of a terminal identification device, the identity authentication center is configured to perform identity authentication processing on the sender of the authentication request, the scheduling factor is used to represent the number of authentication requests, and the first public key is a public key generated by the identity authentication center; The computing module is configured to splice and compute identity authentication information, determine target device information, and perform hash calculation on the target device information to determine an information digest, wherein the identity authentication information is information to be authenticated by the identity authentication center, and the information digest is used to indicate whether the workload of the hash calculation meets the requirement of the scheduling factor. The processing module is configured to determine initial authentication information based on the scheduling factor and the information digest, and encrypt the initial authentication information by using the first public key to obtain target authentication information, wherein the target authentication information is used to be sent to the identity authentication center to complete identity authentication. The receiving module is configured to receive an authentication result returned by the identity authentication center to complete identity authentication.

9. An authentication apparatus of a terminal identification device, characterized by comprising: The generating module is configured to receive an authentication request and generate a first public-private key pair based on the authentication request, wherein the first public-private key pair is a public-private key pair corresponding to the identity authentication center, including a first public key and a first private key, wherein the authentication request includes basic identity information, and the basic identity information is used to indicate the name and type of a terminal identification device. The determining module is configured to determine a scheduling factor based on the number of requests of the authentication request at a current time. The second sending module is configured to send the first public key and the scheduling factor to a terminal identification device, wherein the terminal identification device is a sender of the authentication request. The authentication module is configured to decrypt target authentication information returned by the terminal identification device by using the first private key, perform identity authentication processing to obtain an identity authentication result, and return the identity authentication result to the terminal identification device. The terminal identification device is configured to splice and compute identity authentication information, determine target device information, and perform hash calculation on the target device information to determine an information digest, wherein the identity authentication information is information to be authenticated by the identity authentication center, and the information digest is used to indicate whether the workload of the hash calculation meets the requirement of the scheduling factor; determine initial authentication information based on the scheduling factor and the information digest, and encrypt the initial authentication information by using the first public key to obtain target authentication information. The non-volatile storage medium stores a plurality of instructions, and the instructions are adapted to be loaded and executed by the processor to perform the authentication method of the terminal identification device in any one of claims 1 to 7.

10. A non-volatile storage medium, comprising: The memory stores a computer program, and the processor is configured to run the computer program to perform the authentication method of the terminal identification device in any one of claims 1 to 7.

11. An electronic device comprising a memory and a processor, characterized in that ​

Images