Batch one-to-many identity authentication method and device

Abstract

The invention discloses a batch one-to-many identity authentication method and device. The method comprises the following steps of: transmitting an information list of each transmitter administered by a radio frequency identification system management center receiver and transmitting identity information of a receiver corresponding to the transmitter to the transmitter through the radio frequency identification system management center receiver; initializing a sliding window of the receiver, generating a random number for each jurisdiction emitter through the receiver according to the information list, and issuing the random number to the corresponding emitter; and performing identity authentication between the receiver and the plurality of transmitters according to the sliding window and the random number.

Description

Technical Field

[0001] The present invention relates to the field of information security technology, and more specifically, to a batch one-to-many identity authentication method and device. Background Art

[0002] In the RFID system, the openness of the network brings many security risks to RFID devices, such as access control attacks and data leakage. For RFID devices, due to their computational cost limitations, the authentication method often uses classical cryptographic authentication protocols, and even does not set up security protection mechanisms, making them vulnerable to network attacks. At the same time, traditional authentication mostly uses one-to-one device authentication, which is not efficient enough for RFID systems. Therefore, it is necessary to use authentication and encryption technologies to ensure data security, and how to achieve more efficient authentication in RFID systems is an urgent problem to be solved. Summary of the invention

[0003] In view of the deficiencies of the prior art, the present invention provides a batch one-to-many identity authentication method and device.

[0004] According to one aspect of the present invention, a batch one-to-many identity authentication method is provided, comprising:

[0005] Sending, through the RFID system management center receiver, a list of information about each transmitter under the jurisdiction of the receiver and identity information of the receiver corresponding to the transmitter to the transmitter;

[0006] Initialize the sliding window of the receiver, and generate a random number for each transmitter under the jurisdiction according to the information list through the receiver and send it to the corresponding transmitter;

[0007] The identity authentication between the receiver and multiple transmitters is performed based on a sliding window and random numbers.

[0008] Optionally, the method further includes: initializing each device in the radio frequency identification system through a radio frequency identification system management center to generate system parameters, wherein the device includes a receiver and multiple transmitters.

[0009] Optionally, it also includes: when the identity authentication is passed, performing business communication between the receiver and multiple transmitters according to system parameters.

[0010] Optionally, the receiver generates a random number for each governed transmitter according to the information list and sends it to the corresponding transmitter, including:

[0011] Generate a random number for each governed transmitter by the receiver according to the information list;

[0012] Calculate the message authentication code based on the random number and system parameters;

[0013] The random number and the message authentication code are sent by the receiver to multiple transmitters.

[0014] Optionally, identity authentication between the receiver and the plurality of transmitters is performed based on a sliding window and a random number, including:

[0015] The time of the first authentication return received by the receiver is set as the window start point. Each time the receiver completes an authentication window, the end point of the window is adjusted by one step toward the window start point.

[0016] Acquire the authentication return message event of the transmitter in real time, and determine whether the occurrence time of the authentication return message event is within the sliding window. If so, put the authentication return message event into the active window; if not, discard the authentication return message event.

[0017] Optionally, when the identity authentication is passed, service communication between the receiver and the plurality of transmitters is performed according to the system parameters, including:

[0018] When the identity authentication is passed, the receiver and the corresponding transmitter negotiate the key according to the system parameters to determine the session key;

[0019] The receiver and the corresponding transmitter perform service communication based on the session key.

[0020] According to another aspect of the present invention, there is provided a batch one-to-many identity authentication device, comprising:

[0021] A sending module, used for sending, through a radio frequency identification system management center receiver, an information list of each transmitter under the jurisdiction of the receiver and sending the identity information of the receiver corresponding to the transmitter to the transmitter;

[0022] The sending module is used to initialize the sliding window of the receiver, and generate a random number for each transmitter under the jurisdiction according to the information list through the receiver and send it to the corresponding transmitter;

[0023] The authentication module is used to perform identity authentication between a receiver and multiple transmitters based on a sliding window and a random number.

[0024] According to another aspect of the present invention, a computer-readable storage medium is provided, wherein the storage medium stores a computer program, and the computer program is used to execute the method described in any one of the above aspects of the present invention.

[0025] According to another aspect of the present invention, an electronic device is provided, comprising: a processor; a memory for storing instructions executable by the processor; the processor is configured to read the executable instructions from the memory and execute the instructions to implement the method described in any one of the above aspects of the present invention.

[0026] Therefore, the present invention proposes a batch one-to-many identity authentication method. During the identity authentication process, a radio frequency receiver can initiate batch identity authentication between multiple radio frequency transmitters, which can improve the identity authentication efficiency of the radio frequency identification system. The present invention uses the idea of ​​a sliding window in the identity authentication method, and can dynamically adjust the waiting time of the receiver according to the number of authentication devices completed, thereby improving the authentication efficiency of the receiver and avoiding long-term waiting of the receiver. Furthermore, the identity authentication method proposed by the present invention does not require certificate management, and the calculation method of the authentication process is simple, which can effectively reduce the calculation overhead in the authentication process. BRIEF DESCRIPTION OF THE DRAWINGS

[0027] A more complete understanding of exemplary embodiments of the present invention may be obtained by referring to the following drawings:

[0028] Figure 1 It is a flowchart of a batch one-to-many identity authentication method provided by an exemplary embodiment of the present invention;

[0029] Figure 2 It is a model diagram of an efficient broadcast authentication method provided by an exemplary embodiment of the present invention;

[0030] Figure 3 It is a structural diagram of a batch one-to-many identity authentication device provided by an exemplary embodiment of the present invention;

[0031] Figure 4 This is a structure of an electronic device provided by an exemplary embodiment of the present invention. DETAILED DESCRIPTION

[0032] Below, the exemplary embodiments according to the present invention will be described in detail with reference to the accompanying drawings. Obviously, the described embodiments are only part of the embodiments of the present invention, rather than all the embodiments of the present invention, and it should be understood that the present invention is not limited to the exemplary embodiments described here.

[0033] It should be noted that the relative arrangement of components and steps, the numerical expressions and numerical values ​​set forth in these embodiments do not limit the scope of the present invention unless specifically stated otherwise.

[0034] Those skilled in the art can understand that the terms "first" and "second" in the embodiments of the present invention are only used to distinguish different steps, devices or modules, etc., and neither represent any specific technical meaning nor indicate the necessary logical order between them.

[0035] It should also be understood that, in the embodiments of the present invention, “plurality” may refer to two or more than two, and “at least one” may refer to one, two or more than two.

[0036] It should also be understood that any component, data or structure mentioned in the embodiments of the present invention can generally be understood as one or more, unless explicitly limited or otherwise indicated in the context.

[0037] In addition, the term "and / or" in the present invention is only a description of the association relationship of the associated objects, indicating that there can be three relationships. For example, A and / or B can represent: A exists alone, A and B exist at the same time, and B exists alone. In addition, the character " / " in the present invention generally indicates that the associated objects before and after are in an "or" relationship.

[0038] It should also be understood that the description of the various embodiments of the present invention focuses on the differences between the various embodiments, and the same or similar aspects thereof can be referenced to each other, and for the sake of brevity, they will not be described one by one.

[0039] At the same time, it should be understood that for the convenience of description, the sizes of the various parts shown in the drawings are not drawn according to the actual proportional relationship.

[0040] The following description of at least one exemplary embodiment is merely illustrative in nature and is in no way intended to limit the invention, its application, or uses.

[0041] Technologies, methods, and equipment known to ordinary technicians in the relevant art may not be discussed in detail, but where appropriate, the technologies, methods, and equipment should be considered part of the specification.

[0042] It should be noted that like reference numerals and letters refer to similar items in the following figures, and therefore, once an item is defined in one figure, it need not be further discussed in subsequent figures.

[0043] Embodiments of the present invention can be applied to electronic devices such as terminal devices, computer systems, servers, etc., which can operate with many other general or special computing system environments or configurations. Examples of well-known terminal devices, computing systems, environments and / or configurations suitable for use with electronic devices such as terminal devices, computer systems, servers, etc. include, but are not limited to: personal computer systems, server computer systems, thin clients, thick clients, handheld or laptop devices, microprocessor-based systems, set-top boxes, programmable consumer electronics, network personal computers, small computer systems, large computer systems, and distributed cloud computing technology environments including any of the above systems, etc.

[0044] Electronic devices such as terminal devices, computer systems, servers, etc. can be described in the general context of computer system executable instructions (such as program modules) executed by computer systems. Generally, program modules can include routines, programs, object programs, components, logic, data structures, etc., which perform specific tasks or implement specific abstract data types. Computer systems / servers can be implemented in a distributed cloud computing environment, where tasks are performed by remote processing devices linked through a communication network. In a distributed cloud computing environment, program modules can be located on local or remote computing system storage media including storage devices.

[0045] Exemplary Methods

[0046] Figure 1 FIG. 1 is a flow chart of a batch one-to-many identity authentication method provided by an exemplary embodiment of the present invention. This embodiment can be applied to electronic devices, such as Figure 1 As shown, the batch one-to-many identity authentication method 100 includes the following steps:

[0047] Step 101, sending, through the radio frequency identification system management center receiver, an information list of each transmitter under the receiver's jurisdiction and sending the identity information of the receiver corresponding to the transmitter to the transmitter;

[0048] Step 102, initialize the sliding window of the receiver, and generate a random number for each transmitter under the jurisdiction according to the information list through the receiver and send it to the corresponding transmitter;

[0049] Step 103: Perform identity authentication between the receiver and multiple transmitters based on the sliding window and the random number.

[0050] Specifically, the purpose of the present invention is to provide a batch one-to-many identity authentication method based on a sliding window, which can complete a one-to-many broadcast identity authentication between a radio frequency receiver and multiple radio frequency transmitters. The algorithm is based on the SM9 concept. During the authentication process, the radio frequency device does not need to maintain certificate information. At the same time, the sliding window concept is used, and the waiting time of the receiver can be dynamically adjusted according to the number of completed authentications, thereby improving the receiver authentication efficiency and ultimately solving the information privacy problem in the radio frequency identification system at a low computing cost. The present invention designs a batch one-to-many identity authentication method based on a sliding window. The present invention mainly includes two entities: 1 radio frequency receiver and n radio frequency transmitters.

[0051] During the system initialization phase, the RFID system management center generates system parameters for the device, calls the SM9 algorithm, assigns identity IDs to the receiver and transmitter, generates private keys, and sends a list of ID information of all transmitters under its jurisdiction to the receiver, and sends the receiver's identity information to all transmitters;

[0052] During the device initialization phase, the receiver generates a random number for the transmitter and sends it securely using the SM9 algorithm; the receiver sets an initial sliding window.

[0053] During the authentication phase, the receiver and n transmitters send verification information to each other and perform identity authentication. The receiver sets the time when the first authentication return message is received as the start point of the window. Each time an authentication is completed, the end point of the window is adjusted by 1 step toward the start point. While continuing to obtain the transmitter authentication return message event in real time, determine whether the event occurs within the window. If so, put the event into the sliding window. If the event occurs at a time that exceeds the maximum allowed reception time within the window, the authentication message is discarded and the transmitter fails authentication. After successful authentication, the receiver and transmitter each calculate the session key and store it securely for later use.

[0054] During the service communication phase, the receiver and transmitter communicate securely using the negotiated session key.

[0055] In one embodiment of the present invention, Figure 2 The attached figure is a model diagram of an efficient broadcast authentication method for a radio frequency identification system provided by the present invention. The system of the present invention is mainly composed of two main bodies: 1 radio frequency receiver and n radio frequency transmitters. The system has 4 main processes: In the system initialization stage, ① the radio frequency identification system management center generates system parameters for the device, calls the SM9 algorithm, assigns identity IDs to the receiver and transmitter, generates private keys, and sends a list of ID information of all transmitters under its jurisdiction to the receiver, and sends the receiver's identity information to all transmitters. In the device initialization stage, ② the receiver generates a random number for the transmitter and uses the SM9 algorithm to issue it securely; the receiver sets an initial sliding window. In the identity authentication stage, ③ the receiver and n transmitters send verification information to each other and perform identity authentication; in the business communication stage, ④ the receiver and the transmitter use the negotiated session key for secure communication.

[0056] In one embodiment of the present invention, a batch one-to-many identity authentication method is proposed to address the efficiency requirements and security risks of radio frequency identification system device authentication. The implementation process includes three parts: system initialization, device initialization, and identity authentication.

[0057] Assume that the receiver of the RFID system is Server, and the n transmitters are T1, T2, ..., T n , when the receiver Server wants to communicate with n transmitters T i When (i∈[1,n]) communicates, identity authentication is required. The specific process is as follows:

[0058] The first step, system initialization:

[0059] Select a security parameter k, and the radio frequency identification system management center generates system parameters params = {G1, G2, e: G1×G1→G2, g, hid, hash}, where groups G1 and G2 represent multiplicative cyclic groups of order large prime number N, g is the generator of G1, e represents the bilinear mapping from G1 to G2, hash is the hash function, and hid is the function identifier. Based on the SM9 algorithm, the management center assigns identity IDs to receivers and transmitters. Let ID_i be the identity information of the i-th transmitter, and ID_s be the identity information of the receiver. The management center calls the SM9 algorithm to generate private keys sk_s and sk_i for the receiver and the i-th transmitter respectively. The management center calculates hashP = hash(ID_1||ID_2||…||ID_n), and the management center pre-distributes lightweight symmetric keys key and hashP to receivers and transmitters, sends a list of ID information of all transmitters under its jurisdiction to the receiver, and sends the receiver's identity information ID_s to all transmitters;

[0060] The second step is device initialization:

[0061] (1) The receiver Server generates an initial random number Random_i, encrypts Random_i using the SM9 algorithm, and sends it to the transmitter T i ;

[0062] (2) The transmitter decrypts the received ciphertext information and stores it securely;

[0063] (3) The receiver sets the initial sliding window to m, where m is the maximum receiving time allowed for this authentication.

[0064] Step 3: Identity Authentication:

[0065] The receiver generates a random number Nonce, calculates HMAC(SM3(ID_s||Nonce||hashP||key), encrypts Nonce and HMAC with the key key, and broadcasts them to n transmitters. Where || is a cascade operation;

[0066] (2) The transmitter uses the key key to decrypt the received ciphertext message, obtain Nonce and HMAC, calculate HMAC (SM3 (ID_s||Nonce||hashP||key), and verify whether it is equal to the received HMAC;

[0067] (3) The transmitter generates a random number Nonce_i, calculates HMAC_i(SM3(Random_i||Nonce||Nonce_i||key||ID_i), and encrypts Nonce_i, ID_i and HMAC_i using the SM9 algorithm and sends it to the receiver;

[0068] (4) The receiver decrypts to obtain Nonce_i, ID_i and HMAC_i, calculates HMAC_i(SM3(Random_i||Nonce||Nonce_i||key||ID_i), and verifies whether it is equal to the received HMAC_i; if both parties pass the verification, the identity authentication is completed;

[0069] (5) Define an authentication behavior as an event, and perform identity authentication within the sliding window. The receiver records the time when the first authentication return message is received as time1, and sets time1 as the starting point of the window. Each time an authentication is completed, the end point of the window is adjusted by 1 step toward the starting point. While continuing to obtain the transmitter's authentication return message event in real time, determine whether the occurrence time of the event is within the window. If so, put the event into the sliding window. If the occurrence time of the event has exceeded the maximum allowed receiving time in the window, the authentication message is discarded and the transmitter fails authentication.

[0070] (6) After the authentication is completed, the receiver and the transmitter each calculate Random_i=SM3(Random_i), negotiate the session key sessionkey_i=Random_i and store it securely.

[0071] Step 4: Business Communications:

[0072] Receiver Server and transmitter T i Use the session key sessionkey_i for secure communication.

[0073] Therefore, the present invention proposes a batch one-to-many identity authentication method. During the identity authentication process, a radio frequency receiver can initiate batch identity authentication between multiple radio frequency transmitters, which can improve the identity authentication efficiency of the radio frequency identification system. The present invention uses the idea of ​​a sliding window in the identity authentication method, and can dynamically adjust the waiting time of the receiver according to the number of authentication devices completed, thereby improving the authentication efficiency of the receiver and avoiding long-term waiting of the receiver. Furthermore, the identity authentication method proposed by the present invention does not require certificate management, and the calculation method of the authentication process is simple, which can effectively reduce the calculation overhead in the authentication process.

[0074] Exemplary Devices

[0075] Figure 3 FIG. 1 is a schematic diagram of the structure of a batch one-to-many identity authentication device provided by an exemplary embodiment of the present invention. Figure 3 As shown, the device 300 includes:

[0076] The sending module 310 is used to send the information list of each transmitter under the jurisdiction of the receiver through the radio frequency identification system management center receiver and send the identity information of the receiver corresponding to the transmitter to the transmitter;

[0077] The sending module 320 is used to initialize the sliding window of the receiver, and generate a random number for each transmitter under the jurisdiction according to the information list through the receiver and send it to the corresponding transmitter;

[0078] The authentication module 330 is used to perform identity authentication between the receiver and multiple transmitters according to the sliding window and the random number.

[0079] Optionally, the apparatus 300 further includes: a generating module, configured to initialize each device in the radio frequency identification system through the radio frequency identification system management center to generate system parameters, wherein the device includes a receiver and a plurality of transmitters.

[0080] Optionally, the apparatus 300 further includes: a communication module, configured to perform service communication between the receiver and the plurality of transmitters according to system parameters when the identity authentication is passed.

[0081] Optionally, in the sending module 320, a receiver generates a random number for each transmitter under jurisdiction according to the information list and sends it to the corresponding transmitter, including:

[0082] A generating submodule, for generating a random number for each governed transmitter according to the information list through the receiver;

[0083] A calculation submodule, used to calculate a message authentication code according to a random number and system parameters;

[0084] The sending submodule is used to send the random number and the message authentication code to multiple transmitters through the receiver.

[0085] Optionally, the authentication module 330 includes:

[0086] An adjustment submodule is used to set the time of the first authentication return received by the receiver as the window starting point, and the receiver adjusts the window end point towards the window starting point by one step each time the authentication window is completed;

[0087] The judgment submodule is used to obtain the authentication return message event of the transmitter in real time, and judge whether the occurrence time of the authentication return message event is within the sliding window. If so, the authentication return message event is placed in the active window; if not, the authentication return message event is discarded.

[0088] Optionally, the communication module includes:

[0089] The determination submodule is used to determine the session key by performing key negotiation between the receiver and the corresponding transmitter according to the system parameters when the identity authentication is passed;

[0090] The communication submodule is used for the receiver and the corresponding transmitter to perform business communications based on the session key.

[0091] Exemplary Electronic Devices

[0092] Figure 4 This is a structure of an electronic device provided by an exemplary embodiment of the present invention. Figure 4 As shown, the electronic device 40 includes one or more processors 41 and a memory 42 .

[0093] The processor 41 may be a central processing unit (CPU) or other forms of processing units having data processing capabilities and / or instruction execution capabilities, and may control other components in the electronic device to perform desired functions.

[0094] The memory 42 may include one or more computer program products, which may include various forms of computer-readable storage media, such as volatile memory and / or non-volatile memory. The volatile memory may include, for example, random access memory (RAM) and / or cache memory (cache), etc. The non-volatile memory may include, for example, read-only memory (ROM), hard disk, flash memory, etc. One or more computer program instructions may be stored on the computer-readable storage medium, and the processor 41 may run the program instructions to implement the methods of the software programs of the various embodiments of the present invention described above and / or other desired functions. In one example, the electronic device may also include: an input device 43 and an output device 44, which are interconnected via a bus system and / or other forms of connection mechanisms (not shown).

[0095] In addition, the input device 43 may also include, for example, a keyboard, a mouse, etc.

[0096] The output device 44 can output various information to the outside, and can include, for example, a display, a speaker, a printer, a communication network and a remote output device connected thereto.

[0097] Of course, to simplify, Figure 4 Only some of the components related to the present invention in the electronic device are shown, and components such as a bus, an input / output interface, etc. are omitted. In addition, the electronic device may further include any other appropriate components according to specific application conditions.

[0098] Exemplary computer program products and computer-readable storage media

[0099] In addition to the above-mentioned methods and devices, an embodiment of the present invention may also be a computer program product, which includes computer program instructions, which, when executed by a processor, enable the processor to execute the steps of the method according to various embodiments of the present invention described in the above-mentioned "Exemplary Method" section of this specification.

[0100] The computer program product may be written in any combination of one or more programming languages ​​to write program code for performing the operations of the embodiments of the present invention, including object-oriented programming languages ​​such as Java, C++, etc., and conventional procedural programming languages ​​such as "C" or similar programming languages. The program code may be executed entirely on the user computing device, partially on the user device, as a separate software package, partially on the user computing device and partially on a remote computing device, or entirely on a remote computing device or server.

[0101] In addition, an embodiment of the present invention may also be a computer-readable storage medium having computer program instructions stored thereon, which, when executed by a processor, enable the processor to execute the steps of the method according to various embodiments of the present invention described in the above “Exemplary Method” section of this specification.

[0102] The computer readable storage medium can adopt any combination of one or more readable media. The readable medium can be a readable signal medium or a readable storage medium. The readable storage medium can include, for example, but is not limited to, a system, system or device of electricity, magnetism, light, electromagnetic, infrared, or semiconductor, or any combination of the above. More specific examples (non-exhaustive list) of readable storage media include: an electrical connection with one or more wires, a portable disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the above.

[0103] The basic principle of the present invention is described above in conjunction with specific embodiments. However, it should be pointed out that the advantages, strengths, effects, etc. mentioned in the present invention are only examples and not limitations, and it cannot be considered that these advantages, strengths, effects, etc. must be possessed by each embodiment of the present invention. In addition, the specific details disclosed above are only for the purpose of illustration and facilitation of understanding, rather than limitation, and the above details do not limit the present invention to being implemented by adopting the above specific details.

[0104] Each embodiment in this specification is described in a progressive manner, and each embodiment focuses on the differences from other embodiments. The same or similar parts between the embodiments can be referred to each other. For the system embodiment, since it basically corresponds to the method embodiment, the description is relatively simple, and the relevant parts can be referred to the partial description of the method embodiment.

[0105] The block diagrams of the devices, systems, equipment, and systems involved in the present invention are only illustrative examples and are not intended to require or imply that they must be connected, arranged, and configured in the manner shown in the block diagram. As will be appreciated by those skilled in the art, these devices, systems, equipment, and systems can be connected, arranged, and configured in any manner. Words such as "including", "comprising", "having", etc. are open words, referring to "including but not limited to", and can be used interchangeably with them. The words "or" and "and" used here refer to the words "and / or" and can be used interchangeably with them, unless the context clearly indicates otherwise. The word "such as" used here refers to the phrase "such as but not limited to", and can be used interchangeably with it.

[0106] The method and system of the present invention may be implemented in many ways. For example, the method and system of the present invention may be implemented by software, hardware, firmware or any combination of software, hardware, firmware. The above order of steps for the method is only for illustration, and the steps of the method of the present invention are not limited to the order specifically described above, unless otherwise specifically stated. In addition, in some embodiments, the present invention may also be implemented as a program recorded in a recording medium, which includes machine-readable instructions for implementing the method according to the present invention. Thus, the present invention also covers a recording medium storing a program for executing the method according to the present invention.

[0107] It should also be noted that in the system, device and method of the present invention, each component or each step can be decomposed and / or recombined. These decompositions and / or recombinations should be regarded as equivalent schemes of the present invention. The above description of the disclosed aspects is provided to enable any technician in the field to make or use the present invention. Various modifications to these aspects are very obvious to those skilled in the art, and the general principles defined here can be applied to other aspects without departing from the scope of the present invention. Therefore, the present invention is not intended to be limited to the aspects shown here, but in accordance with the widest range consistent with the principles and novel features disclosed here.

[0108] The above description has been given for the purpose of illustration and description. In addition, this description is not intended to limit the embodiments of the present invention to the forms disclosed herein. Although a number of example aspects and embodiments have been discussed above, those skilled in the art will recognize certain variations, modifications, changes, additions and sub-combinations thereof.

Claims

1. A batch one-to-many identity authentication method, characterized in that: include: Sending, through the radio frequency identification system management center receiver, an information list of each transmitter governed by the receiver and sending the identity information of the receiver corresponding to the transmitter to the transmitter; Initialize the sliding window of the receiver, and generate a random number for each of the transmitters under the jurisdiction according to the information list through the receiver and send it to the corresponding transmitter; Identity authentication is performed between the receiver and the plurality of transmitters according to the sliding window and the random number.

2. The method according to claim 1, characterized in that Also includes: Each device in the radio frequency identification system is initialized by the radio frequency identification system management center to generate system parameters, wherein the device includes a receiver and a plurality of transmitters.

3. The method according to claim 1, characterized in that Also includes: When the identity authentication is passed, service communication between the receiver and the plurality of transmitters is performed according to the system parameters.

4. The method according to claim 1, characterized in that: The receiver generates a random number for each transmitter under its jurisdiction according to the information list and sends the random number to the corresponding transmitter, including: Generate a random number for each of the transmitters under jurisdiction according to the information list by the receiver; Calculate a message authentication code according to the random number and the system parameter; The random number and the message authentication code are sent to the plurality of transmitters through the receiver.

5. The method according to claim 1, characterized in that Performing identity authentication between the receiver and the plurality of transmitters according to the sliding window and the random number includes: The time of the first authentication return received by the receiver is set as the window starting point, and the receiver adjusts the end point of the authentication window towards the window starting point by one step each time the receiver completes an authentication; Acquire the authentication return message event of the transmitter in real time, and determine whether the occurrence time of the authentication return message event is within the sliding window. If so, put the authentication return message event into the active window; if not, discard the authentication return message event.

6. The method according to claim 3, characterized in that When the identity authentication is passed, performing service communication between the receiver and the plurality of transmitters according to the system parameters includes: When the identity authentication is passed, the receiver and the corresponding transmitter perform key negotiation according to the system parameters to determine a session key; The receiver and the corresponding transmitter perform service communication according to the session key.

7. A batch one-to-many identity authentication device, characterized in that: include: A sending module, used for sending, through a radio frequency identification system management center receiver, an information list of each transmitter governed by the receiver and sending to the transmitter the identity information of the receiver corresponding to the transmitter; A sending module, used for initializing the sliding window of the receiver, and generating a random number for each transmitter under the jurisdiction of the receiver according to the information list and sending the random number to the corresponding transmitter; An authentication module is used to perform identity authentication between the receiver and the plurality of transmitters according to the sliding window and the random number.

8. The device according to claim 7, characterized in that Also includes: The generating module is used to initialize each device in the radio frequency identification system through the radio frequency identification system management center to generate system parameters, wherein the device includes a receiver and multiple transmitters.

9. The device according to claim 7, characterized in that Also includes: A communication module is used to perform business communication between the receiver and the plurality of transmitters according to the system parameters when the identity authentication is passed.

10. The device according to claim 7, characterized in that In the sending module, the receiver generates a random number for each transmitter under its jurisdiction according to the information list and sends the random number to the corresponding transmitter, including: A generating submodule, configured to generate a random number for each of the transmitters under jurisdiction according to the information list through the receiver; A calculation submodule, used to calculate a message authentication code according to the random number and the system parameters; The sending submodule is used to send the random number and the message authentication code to the plurality of transmitters through the receiver.

11. The device according to claim 7, characterized in that Certification modules, including: An adjustment submodule, used for setting the time of the first authentication return received by the receiver as the window starting point, and adjusting the end point of the authentication window by one step towards the window starting point each time the receiver completes an authentication; The judgment submodule is used to obtain the authentication return message event of the transmitter in real time, and judge whether the occurrence time of the authentication return message event is within the sliding window. If so, the authentication return message event is placed in the active window; if not, the authentication return message event is discarded.

12. The device according to claim 9, characterized in that Communication module, including: A determination submodule, configured to, when the identity authentication is passed, perform key negotiation between the receiver and the corresponding transmitter according to the system parameters to determine a session key; The communication submodule is used for the receiver and the corresponding transmitter to perform business communication according to the session key.

13. A computer-readable storage medium, characterized in that: The storage medium stores a computer program, and the computer program is used to execute the method according to any one of claims 1 to 6.

14. An electronic device, characterized in that: The electronic device comprises: processor; a memory for storing instructions executable by the processor; The processor is used to read the executable instructions from the memory and execute the instructions to implement the method described in any one of claims 1 to 6.

Images