A time-based chaotic dynamic password generation method for multiple platforms

Abstract

The present invention relates to the field of dynamic password technology, and in particular to a time-based chaotic dynamic password generation method for multiple platforms, including using nonlinear terms tanh and cosine, adopting linear and nonlinear coupling methods to construct a 2D-TDM model; setting 2D-TDM model parameters and initial values ​​as keys, and discretizing real time; combining discrete time with the iteration and initial state of the chaotic system to obtain the number of iterations and initial state based on time; setting the number of passwords in the password output channel, iterating the 2D-TDM model in the initial state, and obtaining the password through the output value of each iteration through a password converter. The present invention solves the problem that the existing password generator is based on random seeds and cannot achieve password consistency on multiple platforms.

Description

Technical Field

[0001] The invention relates to the technical field of dynamic passwords, and in particular to a time-based chaotic dynamic password generation method for multiple platforms. Background Art

[0002] With the rapid development of digital communication technology, information security has received unprecedented attention. Discrete chaotic systems are particularly suitable for the implementation of digital hardware and practical industrial applications due to their remarkable characteristics such as fast iteration speed, low implementation cost and strong randomness. However, when reviewing the application research of some discrete chaotic systems, few people pay attention to how to use chaotic systems to alleviate the security issues of today's Internet technology.

[0003] Two-Factor Authentication (2FA) has become an important and widely used security measure in the field of Internet digital security; One-Time Password (OTP) is an authentication technology that uses cryptographic technology to share secrets between the client and the server. It is a very convenient technical means to enhance the current static password authentication; the basic authentication principle of dynamic passwords is to authenticate the shared key of both parties, also known as the seed key, and use the same key to perform cryptographic algorithm calculations on a certain event count or time value, and then compare the calculated values ​​for consistency for authentication; dynamic passwords can be made invalid after use, and the password length is usually 6-8 digits, which is easy to use. Therefore, the application of dynamic password technology is very common and can be applied to a variety of system channels.

[0004] Time-based dynamic passwords are a common method of 2FA and are widely used in areas such as online banking and financial services, social account protection, and public services.

[0005] In the Enhanced Approach To Generate One Time Password (OTP) Using Quantum True Random Number Generator (QTRNG) by Riddhi B et al., the password generator is based on a random seed; since the random algorithms used by different platforms and different programming languages ​​are not the same, the generated pseudo-random number sequences are also different, and therefore password consistency cannot be achieved on multiple platforms.

[0006] In addition, most of the existing dynamic passwords are not actually dynamic passwords. They are simply verified by passwords generated by the same algorithm, which makes the passwords have multiple possibilities and creates the illusion of being dynamic. Summary of the invention

[0007] Aiming at the shortcomings of the existing methods, the present invention designs a novel time-based chaotic dynamic password generator for multiple platforms through two-dimensional threshold discrete mapping.

[0008] The technical solution adopted by the present invention is: a time-based chaotic dynamic password generation method for multiple platforms comprises the following steps:

[0009] Step 1: Use the nonlinear terms tanh and cosine to construct a 2D-TDM model using linear and nonlinear coupling methods;

[0010] As a preferred embodiment of the present invention, the formula of the 2D-TDM model is:

[0011]

[0012] Where n is a natural number, x n and n represents the two state variables of the nth iteration, and a, b and c are the three control parameters.

[0013] Step 2: Set the 2D-TDM model parameters and initial values ​​as the key, and discretize the real time; combine the discrete time into the iteration and initial state of the chaotic system to obtain the time-based iteration number and initial state;

[0014] As a preferred embodiment of the present invention, the formula for discretization processing is:

[0015]

[0016] in, It means rounding up, τ is the input timestamp, and L is the valid time window.

[0017] As a preferred embodiment of the present invention, the formula for the number of iterations based on time is:

[0018] N=(TmodM)+m(3)

[0019] Among them, M is the maximum number of iterations and m is the minimum number of iterations.

[0020] As a preferred embodiment of the present invention, the formula of the initial state based on time is:

[0021]

[0022] Among them, (x0, y0) represents the key, ε is the reduction factor, and T is the discrete timestamp.

[0023] Step 3: Set the number of passwords in the password output channel, and iterate the 2D-TDM model in the initial state. The output value of each iteration is used to obtain the password through the password converter;

[0024] As a preferred embodiment of the present invention, the formula of the password converter is:

[0025]

[0026] in, represents rounding up, X is the output value of the 2D-TDM model iterated at the initial state, and k is the magnification factor.

[0027] As a preferred implementation of the present invention, it also includes: using the obtained password to perform mutual password authentication on the client and the server.

[0028] As a preferred embodiment of the present invention, a time-based chaotic dynamic password generation system for multiple platforms includes: a memory for storing instructions executable by a processor; a processor for executing instructions to implement a time-based chaotic dynamic password generation method for multiple platforms.

[0029] As a preferred embodiment of the present invention, a computer readable medium stores computer program codes, and when the computer program codes are executed by a processor, a time-based chaotic dynamic password generation method for multiple platforms is implemented.

[0030] Beneficial effects of the present invention:

[0031] 1. Compared with the traditional authentication scheme, the time-based dynamic password in the method of the present invention adds an extra layer of security in the authentication process and is only valid for a short period of time; and the dynamic password can work offline without a network connection, which has strong scalability and security;

[0032] 2. The two-dimensional threshold discrete mapping of the present invention has highly complex dynamic characteristics and is suitable for the application of chaotic password generators. As a low-dimensional chaotic system with a threshold, it has high complexity and security in network security applications and can achieve the same effect of protecting information security as a high-dimensional chaotic system.

[0033] 3. The present invention has reliable randomness and can maintain the consistency of passwords on multiple platforms, which helps to promote the widespread application of discrete chaotic systems in the fields of confidential communications, signal processing, etc., reduce the threat of digital security to individuals and organizations, and ensure trust in Internet security. BRIEF DESCRIPTION OF THE DRAWINGS

[0034] Figure 1 The chaotic dynamics behavior generated by the chaotic system under the typical parameters of the present invention;

[0035] Figure 2 It is a detailed structural diagram of the time-based chaotic dynamic password generator of the present invention;

[0036] Figure 3 The present invention realizes the interactive process of dynamic password authentication between the client and the server on the STM32 hardware prototype. DETAILED DESCRIPTION

[0037] The present invention is further described below in conjunction with the accompanying drawings and embodiments. This figure is a simplified schematic diagram, which only illustrates the basic structure of the present invention in a schematic manner, and therefore it only shows the components related to the present invention.

[0038] like Figure 2 As shown, the time-based chaotic dynamic password generation method for multiple platforms includes the following steps:

[0039] Step 1: Using the threshold nonlinear terms tanh and cosine commonly used to activate linear units, a two-dimensional threshold discrete hyperchaotic mapping model is constructed by linear and nonlinear coupling;

[0040] Tanh is a threshold nonlinear term and is often used as an activation function to activate linear units. Based on two tanh terms, a two-dimensional discrete mapping model is constructed by utilizing linear and nonlinear coupling, which is mathematically described as:

[0041]

[0042] Where n is a natural number, x n and n represents the two state variables of the nth iteration, and a, b and c are the three control parameters.

[0043] Since both the hyperbolic tangent and the cosine are nonlinear functions with a threshold of 1, the discrete system described by equation (1) is called a two-dimensional threshold discrete hyperchaotic mapping model, namely, a 2D-TDM model.

[0044] Chaotic systems are often used in the development of pseudo-random numbers due to their inherent ergodicity, initial value sensitivity and unpredictability. When designing a pseudo-random number generator, a simple algorithm can be used to easily convert the iterative sequence generated by the chaotic system into a pseudo-random number. By drawing on the construction principle of a chaotic pseudo-random number generator, a chaotic system can be used to construct a time-based chaotic dynamic password generator (referred to as a chaotic dynamic password generator), and the iterative sequence generated by the chaotic system can be converted into a chaotic password.

[0045] Specify parameters (a, b, c) = (4.0, 3.0, 2.0) and select the source sequence from the x dimension of the 2D-TDM model. Figure 1The chaotic dynamic behaviors generated by the chaotic system under typical parameters are displayed through phase trajectory diagrams and timing waveform diagrams respectively.

[0046] Step 2: Set the 2D-TDM model parameters and initial values ​​as the key, obtain the real-time time in hardware and software and discretize it, combine the discrete time into the 2D-TDM model, design a time-based key generation algorithm, and obtain the key of the password generator.

[0047] Unlike traditional random seed password generators, the random algorithms used on different platforms and different programming languages ​​are not the same, resulting in different pseudo-random number sequences being generated, and therefore password consistency on multiple platforms cannot be achieved; the chaotic password dynamic generator solution of the present invention is characterized in that the same chaotic system is used on multiple platforms to generate consistent iterative state values, thereby achieving password consistency.

[0048] In addition, a time-based chaotic dynamic password generator scheme and a time-based key generation algorithm are used to achieve password synchronization.

[0049] Figure 2 The detailed structural diagram of the time-based chaotic dynamic password generator is shown in Figure 2. The designed time-based chaotic password generator includes:

[0050] First, the real-time is discretized and the implementation algorithm is as follows:

[0051]

[0052] in, It means rounding up, τ is the input timestamp, L is the effective time window, T is the discrete timestamp, and the parameter L=30.

[0053] By incorporating discrete time into the iteration and initial state of the chaotic system, the time-based iteration number N and the initial state (X0, Y0) are obtained; the time-based iteration number can be described as:

[0054] N=(TmodM)+m(3)

[0055] Among them, M is the maximum number of iterations and m is the minimum number of iterations.

[0056] For the time-based initial state, it can be described as:

[0057]

[0058] Where (x0, y0) represents the key, ε is the reduction factor; set the parameter M = 10 3 , m = 10 3 , ε=10 -3, x0=0.1, y0=0.1.

[0059] Then, the 2D-TDM model iterates N times with the initial state (X0, Y0) to obtain the key (X N ,Y N );

[0060] Step 3: Design a password conversion algorithm and implement the password generator on software and hardware platforms.

[0061] Design of password generator: Set the number of passwords i in the password output channel, and the 2D-TDM model is in the initial state (X N ,Y N ) is iterated i times; the password P is obtained by formula (5) for each iteration X.

[0062] The password converter is represented as:

[0063]

[0064] in, Indicates rounding up, then modulo 10, and setting parameter k = 10 9 As the magnification factor and i=6 as the output bit number, the designed chaotic password generator can output 6 digits as a time-based dynamic password.

[0065] like Figure 3 The process of mutual authentication of dynamic passwords between the client and the server;

[0066] Time-based dynamic password is a method of generating a temporary password based on the current timestamp; when the dynamic password is enabled, the server generates a key and associates it with the key data; then, the server generates a dynamic password valid for a certain time window based on the time; the user needs this dynamic password during the authentication process; if the password entered by the user matches and falls within the valid time window, the authentication is successful.

[0067] Compared with traditional authentication schemes, time-based dynamic passwords add an extra layer of security to the authentication process and are only valid for a short period of time; it is worth noting that dynamic passwords can work offline without a network connection and are extremely scalable and secure.

[0068] On the hardware platform, the algorithm of the chaotic password generator is implemented in C language, and the code is preloaded into STM32; on the hardware prototype, the STM32F407VET6 microcontroller is integrated with the DS1302 real-time clock module and the SSD1309 OLED display module to realize the hardware password generator.

[0069] The time-based chaotic dynamic password generator implemented on the software platform is also easy to implement in this scheme; the algorithm can be implemented in software using a variety of programming languages. The difference from the STM32 hardware implementation is that the acquisition of time can be implemented in different ways, such as the built-in time system can be used on the computer platform; Golang is a programming language known for its ability to seamlessly compile binary programs across platforms. Consistent with the parameter settings in the hardware implementation, the time-based chaotic dynamic password generator is implemented in software using the Golang language and then displayed in a standard desktop application.

[0070] In security authentication, the server requests a dynamic password from the client, and the client obtains the dynamic password through STM32 and feeds it back to the server; the server uses the same scheme to compare with the password provided by the client to complete the authentication; Figure 3 The process of mutual authentication of dynamic passwords between the client and the server is realized; the time-based chaotic dynamic password generator realized by the hardware platform and the software platform displays the same 6-digit password every 30 seconds.

[0071] Based on the above ideal embodiments of the present invention, the relevant staff can make various changes and modifications without departing from the technical concept of the present invention through the above description. The technical scope of the present invention is not limited to the contents of the specification, and its technical scope must be determined according to the scope of the claims.

Claims

1. A time-based chaotic dynamic password generation method for multiple platforms, characterized in that: The following steps are involved: Step 1: Use the nonlinear terms tanh and cosine to construct a 2D-TDM model using linear and nonlinear coupling methods; The formula for the 2D-TDM model is: Where n is a natural number, x n and n represents the two state variables of the nth iteration, and a, b and c are the three control parameters; Step 2: Set the 2D-TDM model parameters and initial values ​​as the key, and discretize the real time; combine the discrete time into the iteration and initial state of the chaotic system to obtain the time-based iteration number and initial state; The formula for discretization is: in, It means rounding up, τ is the input timestamp, L is the effective time window, and T is the discrete timestamp; The formula for the number of time-based iterations is: N=(TmodM)+m (3) Among them, M is the maximum number of iterations, and m is the minimum number of iterations; The formula for the time-based initial state is: Among them, (x0,y0) represents the key, ε is the reduction factor; Step 3: Set the number of passwords in the password output channel. The 2D-TDM model is iterated in the initial state. The output value of each iteration is used to obtain the password through the password converter.

2. The time-based chaotic dynamic password generation method for multiple platforms according to claim 1 is characterized in that: The formula for the password converter is: in, represents rounding up, X is the output value of the 2D-TDM model iterated at the initial state, and k is the magnification factor.

3. The time-based chaotic dynamic password generation method for multiple platforms according to claim 2 is characterized in that: The obtained password is used to perform mutual password authentication between the client and the server.

4. A time-based chaotic dynamic password generation system for multiple platforms, characterized by: include: a memory for storing instructions executable by a processor; A processor, used for executing instructions to implement the multi-platform time-based chaotic dynamic password generation method as described in any one of claims 1-3.

5. A computer readable medium storing a computer program code, characterized in that: When the computer program code is executed by a processor, the computer program code implements the multi-platform time-based chaotic dynamic password generation method as described in any one of claims 1 to 3.

Images