A remote login method and server based on security authentication in a KVM system
By employing biometric data-based security verification in the KVM system, the problems of easily forgotten usernames and passwords and insufficient security in remote login are solved, enabling more efficient and secure remote device login.
Patent Information
- Application Number
- CN202310406757.X
- Authority / Receiving Office
- CN · China
- Patent Type
- Patents(China)
- Current Assignee / Owner
- Filing Date
- 2023-04-12
- Publication Date
- 2026-03-06
- Estimated Expiration
- 2043-04-12
AI Technical Summary
Existing remote login methods in KVM systems suffer from problems such as easy forgetting of usernames and passwords, time-consuming operations, insufficient security, and susceptibility to interception leading to information leakage.
Security verification is performed using biometric data. The user's biometric data is collected on a local device and verified with additional data to form verification data. This data is then sent to the server for security verification. If the verification is successful, the login information is extracted, encrypted, and sent to a remote device. Otherwise, an alarm message is generated.
It improves the security of remote login, prevents unauthorized users from stealing biometric data to log in, and enhances data security and ease of operation.
Smart Images

Figure CN116633593B_ABST
Abstract
Description
Technical Field
[0001] This application relates to the field of device control technology, and in particular to a remote login method, server and local device based on security authentication in a KVM system. Background Technology
[0002] KVM stands for Keyboard Video Mouse, which allows users to access and control a computer by directly connecting a keyboard, video, or mouse to its port. KVM systems are widely used in the military, public security, judicial, and disease control fields, providing mature remote device login solutions for these sectors.
[0003] In existing solutions, logging into the host controlled by the agent system requires manually entering a username and password. This is inconvenient and time-consuming, as operators may forget their usernames and passwords. Furthermore, existing remote login methods are easily intercepted, leading to the leakage of login information. Summary of the Invention
[0004] Therefore, it is necessary to provide a remote login method, server, and local device based on security authentication in a KVM system that can improve the security of remote login, addressing the aforementioned technical issues.
[0005] Firstly, this application provides a remote login method based on security authentication in a KVM system, for use on the server side, including:
[0006] Receive verification data sent by the local device and perform security verification on the verification data;
[0007] If the security verification is passed, the biometric data is extracted from the verification data, and the biometric data is retrieved from the pre-stored mapping relationship to determine the login information corresponding to the biometric data.
[0008] The login information is converted into encrypted login data, and the login data is sent to a remote device associated with the local device for login.
[0009] The verification data is a dataset obtained by adding verification data to the user's biometric data collected by the local device.
[0010] In one embodiment, the remote device login method further includes:
[0011] If the security verification fails, the verification data is deleted.
[0012] An alarm message is generated based on the verification data, and the alarm message is sent to the local device.
[0013] In one embodiment, generating alarm information based on the verification data and sending the alarm information to the local device includes:
[0014] The suspicious environment value is obtained by reverse calculation based on the verification data;
[0015] The suspicious environmental values are sent as alarm information to the local device.
[0016] In one embodiment, converting the login information into encrypted login data and sending the login data to a remote device associated with the local device for login includes:
[0017] Extract the account data and key used for login from the login information;
[0018] The account data and key are translated to obtain the corresponding login data, the login data is encrypted, and the encrypted login data is sent to the remote device for login.
[0019] In one embodiment, before receiving the verification data sent by the local device, the method further includes:
[0020] Construct a mapping relationship that includes biometric data and login information.
[0021] Secondly, this application also provides a remote login method based on security authentication in a KVM system for use on a local device, including:
[0022] Collect users' biometric data;
[0023] Verification data is obtained by adding validation data to the biometric data;
[0024] The verification data is sent to the server for security verification. After the security verification is passed, the login information is obtained to log in to the remote device.
[0025] In one embodiment, after collecting the user's biometric data, the method further includes:
[0026] Verification data related to the biometric data is generated based on the current environmental values.
[0027] In one embodiment, the remote login method based on security authentication under the KVM system further includes:
[0028] The system receives alarm information sent by the server and extracts suspicious environmental values from the alarm information for security checks.
[0029] Thirdly, this application also provides a server. The computer device includes a memory and a processor, the memory storing a computer program, and the processor executing the computer program to perform the following steps:
[0030] Receive verification data sent by the local device and perform security verification on the verification data;
[0031] If the security verification is passed, the biometric data is extracted from the verification data, and the biometric data is retrieved from the pre-stored mapping relationship to determine the login information corresponding to the biometric data.
[0032] The login information is converted into encrypted login data, and the login data is sent to a remote device associated with the local device for login.
[0033] The verification data is a dataset obtained by adding verification data to the user's biometric data collected by the local device.
[0034] Fourthly, this application also provides a local device. The computer device includes a memory and a processor, the memory storing a computer program, and the processor executing the computer program to perform the following steps:
[0035] Collect users' biometric data;
[0036] Verification data is obtained by adding validation data to the biometric data;
[0037] The verification data is sent to the server for security verification. After the security verification is passed, the login information is obtained to log in to the remote device.
[0038] Fifthly, this application also provides a computer-readable storage medium. The computer-readable storage medium stores a computer program thereon, which, when executed by a processor, performs the following steps:
[0039] Receive verification data sent by the local device and perform security verification on the verification data;
[0040] If the security verification is passed, the biometric data is extracted from the verification data, and the biometric data is retrieved from the pre-stored mapping relationship to determine the login information corresponding to the biometric data.
[0041] The login information is converted into encrypted login data, and the login data is sent to a remote device associated with the local device for login.
[0042] The verification data is a dataset obtained by adding verification data to the user's biometric data collected by the local device. The steps are as follows:
[0043] Collect users' biometric data;
[0044] Verification data is obtained by adding validation data to the biometric data;
[0045] The verification data is sent to the server for security verification. After the security verification is passed, the login information is obtained to log in to the remote device.
[0046] Sixthly, this application also provides a computer program product. The computer program product includes a computer program that, when executed by a processor, performs the following steps:
[0047] Receive verification data sent by the local device and perform security verification on the verification data;
[0048] If the security verification is passed, the biometric data is extracted from the verification data, and the biometric data is retrieved from the pre-stored mapping relationship to determine the login information corresponding to the biometric data.
[0049] The login information is converted into encrypted login data, and the login data is sent to a remote device associated with the local device for login.
[0050] The verification data is a dataset obtained by adding verification data to the user's biometric data collected by the local device. The steps are as follows:
[0051] Collect users' biometric data;
[0052] Verification data is obtained by adding validation data to the biometric data;
[0053] The verification data is sent to the server for security verification. After the security verification is passed, the login information is obtained to log in to the remote device.
[0054] The aforementioned KVM system-based remote login method, device, storage medium, and computer program product, which performs security verification on the verification data, and if the security verification is successful, extracts the biometric data from the verification data to log in to the remote device. By performing the operation of verifying the validity of the user, it can effectively prevent unauthorized users from stealing biometric data to log in to the remote device, thereby improving the security of data during the remote login process. Attached Figure Description
[0055] The accompanying drawings, which are included to provide a further understanding of this application and form part of this application, illustrate exemplary embodiments and are used to explain this application, but do not constitute an undue limitation of this application. In the drawings:
[0056] Figure 1 This is an application environment diagram of a remote login method based on security authentication under a KVM system in one embodiment;
[0057] Figure 2 This is a flowchart illustrating a remote device login method on the server side in one embodiment;
[0058] Figure 3 This is a flowchart illustrating a remote device login method on the local device side in one embodiment;
[0059] Figure 4 This is a detailed flowchart illustrating a remote login method based on security authentication in a KVM system, as shown in one embodiment.
[0060] Figure 5 This is an internal structural diagram of a computer device in one embodiment. Detailed Implementation
[0061] To make the objectives, technical solutions, and advantages of this application clearer, the following detailed description is provided in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are merely illustrative and not intended to limit the scope of this application. All other embodiments obtained by those skilled in the art based on the embodiments provided in this application without inventive effort are within the scope of protection of this application.
[0062] Obviously, the accompanying drawings described below are merely some examples or embodiments of this application. Those skilled in the art can apply this application to other similar scenarios based on these drawings without any inventive effort. Furthermore, it is understood that although the efforts made in this development process may be complex and lengthy, for those skilled in the art related to the content disclosed in this application, any changes to design, manufacturing, or production based on the technical content disclosed in this application are merely conventional technical means and should not be construed as insufficient disclosure of the content of this application.
[0063] In this application, the reference to "embodiment" means that a specific feature, structure, or characteristic described in connection with an embodiment may be included in at least one embodiment of this application. The appearance of this phrase in various places in the specification does not necessarily refer to the same embodiment, nor is it a separate or alternative embodiment that is mutually exclusive with other embodiments. It will be explicitly and implicitly understood by those skilled in the art that the embodiments described in this application may be combined with other embodiments without conflict.
[0064] Unless otherwise defined, the technical or scientific terms used in this application shall have the ordinary meaning understood by one of ordinary skill in the art to which this application pertains. The terms “a,” “an,” “an,” “the,” and similar words used in this application do not indicate quantity limitation and may indicate singular or plural. The terms “comprising,” “including,” “having,” and any variations thereof used in this application are intended to cover non-exclusive inclusion; for example, a process, method, system, product, or device that includes a series of steps or modules (units) is not limited to the listed steps or units, but may also include steps or units not listed, or may include other steps or units inherent to these processes, methods, products, or devices. The terms “connected,” “linked,” “coupled,” and similar words used in this application are not limited to physical or mechanical connections, but may include electrical connections, whether direct or indirect. “Multiple” used in this application refers to two or more. “And / or” describes the relationship between related objects, indicating that three relationships may exist; for example, “A and / or B” can represent: A alone, A and B simultaneously, and B alone. The character " / " generally indicates that the preceding and following objects are in an "or" relationship. The terms "first," "second," and "third" used in this application are merely to distinguish similar objects and do not represent a specific ordering of the objects.
[0065] The method embodiments provided in this example can be executed on a terminal, computer, or similar computing device. For example, it can run on a terminal. Figure 1 This is a hardware structure block diagram of the terminal for the remote login method based on security authentication in the KVM system of this embodiment. For example... Figure 1 As shown, a terminal may include one or more ( Figure 1 Only one is shown in the diagram. A processor 102 and a memory 104 for storing data are also included. The processor 102 may be, but is not limited to, a microprocessor (MCU) or a programmable logic device (FPGA). The terminal may also include a transmission device 106 for communication functions and an input / output device 108. Those skilled in the art will understand that… Figure 1 The structure shown is for illustrative purposes only and does not limit the structure of the terminal described above. For example, the terminal may also include components that are larger than... Figure 1The more or fewer components shown, or having the same Figure 1 The different configurations shown are illustrated.
[0066] The memory 104 can be used to store computer programs, such as application software programs and modules, like the computer program corresponding to the remote login method based on security authentication in the KVM system of this embodiment. The processor 102 executes various functional applications and data processing by running the computer programs stored in the memory 104, thereby implementing the above-described method. The memory 104 may include high-speed random access memory, and may also include non-volatile memory, such as one or more magnetic storage devices, flash memory, or other non-volatile solid-state memory. In some instances, the memory 104 may further include memory remotely located relative to the processor 102, and these remote memories can be connected to the terminal via a network. Examples of such networks include, but are not limited to, the Internet, corporate intranets, local area networks, mobile communication networks, and combinations thereof.
[0067] The transmission device 106 is used to receive or send data via a network. This network includes a wireless network provided by the terminal's communication provider. In one example, the transmission device 106 includes a Network Interface Controller (NIC), which can connect to other network devices via a base station to communicate with the Internet. In another example, the transmission device 106 can be a Radio Frequency (RF) module used for wireless communication with the Internet.
[0068] This embodiment provides a remote login method based on security authentication in a KVM system, applied to the server side. Figure 2 This is a flowchart of a remote login method based on security authentication in a KVM system according to this embodiment, as follows: Figure 2 As shown, the process includes the following steps:
[0069] Step S20: Receive verification data sent by the local device and perform security verification on the verification data.
[0070] The verification data is a dataset obtained by adding validation data to the user's biometric data collected locally. The purpose of this verification data is to validate the validity of the user's identity uploaded by the local device. Only when the user's identity matches the data within the preset mapping relationship in the server is the user currently logging in considered legitimate.
[0071] It is important to note that the object of security verification in this step is the verification data extracted from the verification data, not the verification data itself.
[0072] Step S30: If the security verification is successful, extract biometric data from the verification data, retrieve the biometric data from the pre-stored mapping relationship, and determine the login information corresponding to the biometric data.
[0073] As mentioned above, the object of security verification is the validation data within the verification data. If the aforementioned verification data successfully passes security verification, biometric data representing the user's identity information for remote login can be extracted from the verification data. The server then retrieves the corresponding login information based on a preset mapping relationship. This login information serves as the login credentials for logging into the remote device.
[0074] Step S40: Convert the login information into encrypted login data and send the login data to the remote device associated with the local device for login.
[0075] Instead of directly sending the login information obtained in the previous step to the remote device, the account data and key contained in the login information are converted into login data such as keypad codes. At the same time, the obtained login data is encrypted, and finally the encrypted login information is sent to the remote device for login.
[0076] In the above method, by performing security verification on the verification data, if the security verification is successful, the biometric data in the verification data is extracted for remote device login. By performing the operation of verifying the validity of the representative user, it is possible to effectively prevent unauthorized users from stealing biometric data to log in to remote devices, thereby improving the security of data during the remote login process.
[0077] In one embodiment, the remote device login method further includes:
[0078] Step S50: If the security verification fails, delete the verification data;
[0079] Step S60: Generate alarm information to be sent to the local device based on the verification data.
[0080] In implementation, the aforementioned embodiments provide the operational procedures after the verification data passes security verification. It is worth noting that if the verification data fails security verification, it indicates an anomaly in the verification data. As the principle of verification data generation dictates, only unauthorized intrusion will cause the environmental values used to generate the verification data to change relative to a secure state. In other words, the only reason for failing security verification is unauthorized intrusion. Therefore, once an anomaly occurs indicating that the entire verification data, including biometric data and verification data, is insecure, the only solution is to delete all verification data and generate an alarm message sent to the local device, indicating that unauthorized intrusion may have occurred on the local device.
[0081] It is worth noting that step S60 includes:
[0082] Step S62: Perform reverse calculation based on the verification data to obtain the suspicious environment value.
[0083] Step S64: Send the suspicious environmental value as an alarm message to the local device.
[0084] In implementation, considering that the alarm information sent to the local device needs to clearly reflect the details of potential unauthorized intrusion, this embodiment uses verification data as the primary method for generating alarm information. Since the verification data is generated based on the local device's environmental values, a reverse calculation method is used: the verification data is used to perform reverse calculations to obtain suspicious environmental values reflecting unauthorized intrusion behavior, and these suspicious environmental values are then sent to the local device as alarm information. This allows the local device to easily obtain relevant parameters indicating an unauthorized intrusion by simply comparing the suspicious environmental values.
[0085] In one embodiment, the login information is converted into encrypted login data, and the login data is sent to a remote device associated with the local device for login. Step S40 includes:
[0086] Step S42: Extract the account data and key used for login from the login information;
[0087] Step S44: Translate the account data and key to obtain the corresponding login data, encrypt the login data, and send the encrypted login data to the remote device for login.
[0088] In implementation, the login information includes account data and keys used for login. Considering that directly transmitting account data and keys to remote devices would pose significant security risks, the obtained account data and keys are converted into login data for the login device. For example, when the login device is a keyboard, the corresponding login data is the keystroke code generated by pressing a key.
[0089] When login data, such as keystrokes, is encrypted before being transmitted to a remote device for remote login, the increased conversion and encryption of account data and keys to login data significantly improves the security of remote device login compared to the commonly used method of directly transmitting login information.
[0090] In one embodiment, before receiving the verification data sent by the local device, i.e., step S20, the method further includes:
[0091] Step S10: Construct a mapping relationship that includes biometric data and login information.
[0092] In practice, to ensure the smooth execution of step S30, step S10 needs to be executed before step S20 to establish the necessary mapping relationship. This mapping relationship represents the correspondence between each user's biometric data and the login information required by a remote device. Biometric data includes unique information that reflects the validity of each user. For security and ease of use, typical biometric data includes facial features, fingerprints, and other biometric information.
[0093] Because biometric data has high anti-counterfeiting properties, using biometric data to obtain login information on the server side can provide a more secure login environment compared to the existing technology of directly logging into devices using usernames and passwords.
[0094] Secondly, this application also provides a remote login method based on security authentication in a KVM system, for use on the local device side, such as... Figure 3 As shown, it includes:
[0095] Step S70: Collect the user's biometric data.
[0096] Here, biometric data serves as the unique information that reflects the validity of each user. For security and ease of use considerations, typical biometric data includes facial features, fingerprints, and other biological information.
[0097] Step S80: Add verification data to the biometric data to obtain verification data.
[0098] In order to obtain the verification data sent to the server, it is necessary to add verification data representing the current environmental value of the local device to the existing biometric data. Since unauthorized intrusion will cause a significant change in the current environmental value compared to the state without unauthorized intrusion, the verification data can serve as an indicator of whether an unauthorized intrusion has occurred.
[0099] Step S90: Send the verification data to the server for security verification. After passing the security verification, obtain the login information to log in to the remote device.
[0100] Once the verification data with added validation information is obtained, it is sent to the server. The server will then perform security verification on the verification data and handle subsequent operations such as remote device login.
[0101] In one embodiment, after collecting the user's biometric data, i.e., step S70, the method further includes:
[0102] Step S72: Generate verification data related to biometric data based on the environmental values at the current time.
[0103] In practice, the basis for generating verification data is environmental values, specifically the environmental values of the local device at the moment the verification data is generated. These environmental values include parameters such as time, IP address, and the MAC address of the local device. The algorithm for generating verification data based on these parameters can be calculated using methods including weighted summation, which will not be elaborated upon here.
[0104] In one embodiment, it further includes:
[0105] Step S92: Receive alarm information sent by the server, extract suspicious environmental values from the alarm information and perform security checks.
[0106] In practice, if the verification data fails the security verification, the local device will receive an alarm message from the server. At this time, step S92 needs to be executed to extract suspicious environmental values from the alarm message so as to analyze the suspicious environmental values to determine the details of the illegal intrusion.
[0107] The present embodiment will now be described and illustrated through preferred embodiments.
[0108] Figure 4 This is a detailed flowchart of the remote login method based on security authentication in the KVM system of this preferred embodiment.
[0109] Step S301: Collect the user's biometric data.
[0110] Step S302: Generate verification data related to biometric data based on the environmental values at the current time.
[0111] Step S303: Add verification data to the biometric data to obtain verification data.
[0112] Step S304: Send the verification data to the server for security verification.
[0113] Step S305: Receive verification data sent by the local device and perform security verification on the verification data.
[0114] Step S306: If the security verification is successful, extract biometric data from the verification data, retrieve the biometric data from the pre-stored mapping relationship, and determine the login information corresponding to the biometric data.
[0115] Step S307: Convert the login information into encrypted login data and send the login data to the remote device associated with the local device for login.
[0116] In step S308, if the security verification fails, the verification data is deleted, and an alarm message is generated and sent to the local device based on the verification data.
[0117] Step S309: Receive alarm information sent by the server, extract suspicious environmental values from the alarm information and perform security checks.
[0118] By performing security verification on the verification data, and if the verification passes, the biometric data in the verification data is extracted for remote device login. By performing the operation of verifying the validity of the user, it is possible to effectively prevent unauthorized users from stealing biometric data to log in to remote devices, thereby improving the security of data during the remote login process.
[0119] It should be noted that in the above steps S301 to S309, the local device executes S301-S304 and S309; the server executes S305-S308. Because multiple execution entities are involved, this is specifically combined... Figure 4 Please provide an explanation.
[0120] It should be understood that although the steps in the flowcharts of the embodiments described above are shown sequentially according to the arrows, these steps are not necessarily executed in the order indicated by the arrows. Unless explicitly stated herein, there is no strict order restriction on the execution of these steps, and they can be executed in other orders. Moreover, at least some steps in the flowcharts of the embodiments described above may include multiple steps or multiple stages. These steps or stages are not necessarily completed at the same time, but can be executed at different times. The execution order of these steps or stages is not necessarily sequential, but can be performed alternately or in turn with other steps or at least some of the steps or stages of other steps.
[0121] In one embodiment, a computer device is provided, which may be a server, and its internal structure diagram may be as follows: Figure 5As shown, the computer device includes a processor, memory, and a network interface connected via a system bus. The processor provides computing and control capabilities. The memory includes non-volatile storage media and internal memory. The non-volatile storage media stores the operating system, computer programs, and a database. The internal memory provides the environment for the operation of the operating system and computer programs stored in the non-volatile storage media. The database stores biometric data, verification data, and authentication data. The network interface is used to communicate with external terminals via a network connection. When executed by the processor, the computer program implements a remote login method based on security authentication under a KVM system.
[0122] Those skilled in the art will understand that Figure 5 The structure shown is merely a block diagram of a portion of the structure related to the present application and does not constitute a limitation on the computer device to which the present application is applied. Specific computer devices may include more or fewer components than those shown in the figure, or combine certain components, or have different component arrangements.
[0123] In one embodiment, a server is provided, including a memory and a processor, the memory storing a computer program, the processor executing the computer program to perform the following steps:
[0124] Step S20: Receive verification data sent by the local device and perform security verification on the verification data.
[0125] Step S30: If the security verification is successful, extract biometric data from the verification data, retrieve the biometric data from the pre-stored mapping relationship, and determine the login information corresponding to the biometric data.
[0126] Step S40: Convert the login information into encrypted login data, and send the login data to a remote device associated with the local device for login.
[0127] In one embodiment, a local device is provided, including a memory and a processor, the memory storing a computer program, the processor executing the computer program to perform the following steps:
[0128] Step S70: Collect the user's biometric data;
[0129] Step S80: Add verification data to the biometric data to obtain verification data;
[0130] Step S90: Send the verification data to the server for security verification. After passing the security verification, obtain login information to log in to the remote device.
[0131] In one embodiment, a computer-readable storage medium is provided having a computer program stored thereon, the computer program performing the following steps when executed by a processor:
[0132] Step S20: Receive verification data sent by the local device and perform security verification on the verification data.
[0133] Step S30: If the security verification is successful, extract biometric data from the verification data, retrieve the biometric data from the pre-stored mapping relationship, and determine the login information corresponding to the biometric data.
[0134] Step S40: Convert the login information into encrypted login data, and send the login data to the remote device associated with the local device for login. And the following steps:
[0135] Step S70: Receive verification data sent by the local device and perform security verification on the verification data.
[0136] Step S80: If the security verification is successful, extract biometric data from the verification data, retrieve the biometric data from the pre-stored mapping relationship, and determine the login information corresponding to the biometric data.
[0137] Step S90: Send the login information to the remote device associated with the local device so that the remote device can log in based on the login information.
[0138] In one embodiment, a computer program product is provided, including a computer program that, when executed by a processor, performs the following steps:
[0139] Step S20: Receive verification data sent by the local device and perform security verification on the verification data.
[0140] Step S30: If the security verification is successful, extract biometric data from the verification data, retrieve the biometric data from the pre-stored mapping relationship, and determine the login information corresponding to the biometric data.
[0141] Step S40: Convert the login information into encrypted login data, and send the login data to the remote device associated with the local device for login. And the following steps:
[0142] Step S70: Receive verification data sent by the local device and perform security verification on the verification data.
[0143] Step S80: If the security verification is successful, extract biometric data from the verification data, retrieve the biometric data from the pre-stored mapping relationship, and determine the login information corresponding to the biometric data.
[0144] Step S90: Send the login information to the remote device associated with the local device so that the remote device can log in based on the login information.
[0145] It should be noted that the user information (including but not limited to user device information, user personal information, etc.) and data (including but not limited to data used for analysis, data stored, data displayed, etc.) involved in this application are all information and data authorized by the user or fully authorized by all parties.
[0146] Those skilled in the art will understand that all or part of the processes in the methods of the above embodiments can be implemented by a computer program instructing related hardware. The computer program can be stored in a non-volatile computer-readable storage medium, and when executed, it can include the processes of the embodiments of the above methods. Any references to memory, databases, or other media used in the embodiments provided in this application can include at least one of non-volatile and volatile memory. Non-volatile memory can include read-only memory (ROM), magnetic tape, floppy disk, flash memory, optical memory, high-density embedded non-volatile memory, resistive random access memory (ReRAM), magnetic random access memory (MRAM), ferroelectric random access memory (FRAM), phase change memory (PCM), graphene memory, etc. Volatile memory can include random access memory (RAM) or external cache memory, etc. By way of illustration and not limitation, RAM can take many forms, such as Static Random Access Memory (SRAM) or Dynamic Random Access Memory (DRAM). The databases involved in the embodiments provided in this application may include at least one type of relational database and non-relational database. Non-relational databases may include, but are not limited to, blockchain-based distributed databases. The processors involved in the embodiments provided in this application may be general-purpose processors, central processing units, graphics processing units, digital signal processors, programmable logic devices, quantum computing-based data processing logic devices, etc., and are not limited to these.
[0147] The technical features of the above embodiments can be combined in any way. For the sake of brevity, not all possible combinations of the technical features in the above embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this specification.
[0148] The embodiments described above are merely illustrative of several implementation methods of this application, and while the descriptions are specific and detailed, they should not be construed as limiting the scope of this patent application. It should be noted that those skilled in the art can make various modifications and improvements without departing from the concept of this application, and these all fall within the protection scope of this application. Therefore, the protection scope of this application should be determined by the appended claims.
Claims
1. A method for remote login based on security verification in a KVM system, used in a server end, characterized in that, A remote device login method, comprising: receiving authentication data sent by a local device, and performing security verification on check data in the authentication data; if the security verification is passed, extracting biometric data from the authentication data, searching for login information corresponding to the biometric data in a pre-stored mapping relationship, and determining the login information; converting the login information into encrypted login data, and sending the login data to a remote device associated with the local device for login; comprising: extracting account data and a key for login from the login information; translating the account data and the key to obtain corresponding login data, encrypting the login data, and sending the encrypted login data to the remote device for login; the login data is a KVM device command; wherein the authentication data is a data set obtained by adding check data to biometric data of a user collected by the local device, and the check data is data related to the biometric data generated based on an environmental value at the current time.
2. The method of claim 1, wherein the KVM system is based on security verification. The remote device login method further comprises: if the security verification is not passed, deleting the authentication data; generating an alarm information based on the check data, and sending the alarm information to the local device.
3. The method of claim 2, wherein the KVM system is further configured to: The generating of the alarm information based on the check data and the sending of the alarm information to the local device comprise: performing reverse calculation based on the check data to obtain a suspicious environmental value; sending the suspicious environmental value as the alarm information to the local device.
4. The method of claim 1, wherein the KVM system is based on security verification. Before the receiving of the authentication data sent by the local device, the method further comprises: constructing a mapping relationship containing biometric data and login information.
5. A method for remote login based on security verification in a KVM system, used in a local device end, characterized in that, A remote device login method, comprising: collecting biometric data of a user, and generating check data related to the biometric data based on an environmental value at the current time; adding the check data to the biometric data to obtain authentication data; sending the authentication data to a server for security verification, and obtaining login information to realize login of a remote device after the check data in the authentication data passes the security verification at the server; wherein the login information is encrypted login information; the process of obtaining the encrypted login information comprises: the server extracts biometric data from the authentication data, searches for login information corresponding to the biometric data in a pre-stored mapping relationship, and determines the login information; extracts account data and a key for login from the login information corresponding to the biometric data; translates the account data and the key to obtain corresponding login data, and encrypts the corresponding login data; the login data is a KVM device command.
6. The method of claim 5, wherein the KVM system is further configured to: The remote login method based on security verification under the KVM system further comprises: receiving alarm information sent by the server, and performing security check on a suspicious environmental value extracted from the alarm information.
7. A server comprising a memory and a processor, the memory storing a computer program, characterized in that, The processor implements the steps of the remote login method based on security verification under the KVM system according to any one of claims 1 to 4 when executing the computer program.
8. A local device comprising a memory and a processor, said memory storing a computer program, characterized in that, The processor implements the steps of the remote login method based on security verification of the KVM system in any one of claims 5 to 6 when executing the computer program.
Citation Information
Patent Citations
WLAN access authentication method and server
CN111182541A
Threshold-based homomorphic encryption privacy protection device and method
CN113935057A