Authentication method and authentication system of information system operator and computer equipment

Abstract

The invention relates to the technical field of information security, and provides an authentication method and an authentication system for an information system operator, and computer equipment. The method comprises the following steps: when an operator logs in an information system, authenticating a plurality of operating devices by using an application key preset by the information system and application keys of the operating devices; security chips are arranged in the multiple operation devices, application keys are preset in the security chips, and the application keys of the security chips are obtained by conducting decentralized processing on the basis of the application keys of the information system; and after the plurality of operation devices are successfully authenticated, authenticating the identity of the operator through the plurality of operation devices at the same time. According to the method and the device, the mutually associated application keys between the information system and the operation devices participate in the authentication process of the operation devices, the operation devices are confirmed to be the safe operation devices specified by the information system, and then the multiple authenticated operation devices are used for authenticating the identity of an operator at the same time, so that the safety of the information system is improved.

Description

Technical Field

[0001] The present invention relates to the field of information security technology, and in particular to an authentication method and an authentication system for an information system operator. Background Art

[0002] Important information systems require operator authentication. Conventional authentication methods include passwords, fingerprints, iris or face recognition. Usually, one or a combination of two methods are used to confirm the operator's identity, which can ensure system information security to a certain extent.

[0003] In the prior art, there is no authentication for the operating device used to log in to the information system. When an operator uses an unauthenticated operating device to operate the information system, the operator's information may be intercepted. For example, the unauthenticated operating device may be equipped with a monitor, and the keyboard equipped with the monitor may record the password entered by the operator.

[0004] In the prior art, the operator's identity authentication method is mainly password authentication, fingerprint authentication or face recognition authentication. The operator's environment is not verified, and there are still unsafe situations. For example, the operator can operate the information system even when threatened with a knife or a gun, resulting in the leakage of confidential information. Summary of the invention

[0005] In order to solve one of the above technical defects, the present invention provides an authentication method and an authentication system for an information system operator.

[0006] One aspect of the present invention provides an information system operator authentication method, comprising:

[0007] When an operator logs into an information system, multiple operating devices are authenticated using an application key preset by the information system and an application key of the operating device; multiple operating devices are each equipped with a built-in security chip, the security chip is preset with an application key, and the application key of the security chip is obtained by decentralized processing based on the application key of the information system;

[0008] After multiple operating devices are successfully authenticated, the identity of the operator is authenticated simultaneously through the multiple operating devices.

[0009] In the embodiment of the present invention, the application key of the information system is generated by distributing the serial number of the information system through the authentication master key of the key management system.

[0010] In an embodiment of the present invention, the serial number of the information system is dispersed through the authentication master key of the key management system, including: using the serial number of the information system as a dispersion factor, performing an XOR operation on the authentication master key of the key management system and the dispersion factor to obtain an application key of the information system.

[0011] In an embodiment of the present invention, the application key of the security chip is generated by dispersing the serial number of the information system through the authentication master key of the key management system to generate a first key, and then dispersing the serial number of the security chip through the first key, wherein the first key is consistent with the application key of the information system.

[0012] In an embodiment of the present invention, the serial number of the information system is dispersed by using the authentication master key of the key management system, including: using the serial number of the information system as a dispersion factor, performing an XOR operation on the serial number of the information system by using the authentication master key to obtain a first key that is consistent with the application key of the information system;

[0013] The serial number of the security chip is dispersed by using the first key, including: using the serial number of the security chip as a dispersion factor, performing an XOR operation on the serial number of the security chip by using the first key to obtain an application key of the security chip.

[0014] In the embodiment of the present invention, multiple operating devices are authenticated using application keys preset by the information system and application keys of the operating devices, including:

[0015] When the operator logs into the information system, the information system issues a device authentication instruction;

[0016] Each operating device responds to the device authentication instruction, generates a plaintext random number using the security chip built into the operating device, encrypts the plaintext random number using the application key of the security chip to obtain a ciphertext random number, concatenates the plaintext random number with the ciphertext random number to obtain a mixed random number, performs encryption operation on the mixed random number to obtain an authentication code, and sends the plaintext random number, the ciphertext random number and the authentication code to the information system;

[0017] The information system intercepts the plaintext random number, ciphertext random number and authentication code from the received data, uses the information system's application key to disperse the serial number of the security chip to generate a second key, uses the second key to encrypt the plaintext random number and the ciphertext random number to obtain the authentication code, compares the calculated authentication code with the intercepted authentication code, if they are consistent, uses the second key to decrypt the ciphertext random number to obtain a plaintext random number, compares the decrypted plaintext random number with the intercepted plaintext random number, if they are consistent, the authentication is successful.

[0018] In an embodiment of the present invention, the operating device includes a fingerprint token, a security keyboard and a camera;

[0019] The simultaneous authentication of the identity of the operator by multiple operating devices includes:

[0020] Determine through the fingerprint token whether the fingerprint information of the current operator matches the fingerprint information pre-stored in the fingerprint token;

[0021] Under the condition that the fingerprint information of the current operator matches the fingerprint information pre-stored in the fingerprint token, searching in the database whether there is identity information of the fingerprint token owner according to the fingerprint information;

[0022] Under the condition that the identity information of the fingerprint token owner is found, the fingerprint information of the current operator is obtained through the security keyboard, and it is determined whether the fingerprint information obtained by the security keyboard matches the fingerprint information pre-stored in the fingerprint token;

[0023] Under the condition that the fingerprint information obtained by the security keyboard matches the fingerprint information pre-stored in the fingerprint token, the facial information of the current operator is obtained through the camera, and the identity information corresponding to the facial information is searched in the database based on the facial information. If the identity information corresponding to the facial information is consistent with the identity information of the owner of the fingerprint token, it is determined that the identity authentication of the current operator is successful.

[0024] In the embodiment of the present invention, the method further includes: after the operator identity authentication is successful, determining whether the operating environment of the operator is safe through a camera.

[0025] When determining that the operator's operating environment is safe, determine the scope of the operator's authority;

[0026] Perform the operator's operations within the scope of the operator's authority.

[0027] Another aspect of the present invention provides an authentication system for authenticating the identity of an information system operator, the authentication system comprising a plurality of operating devices, each of which has a built-in security chip, the security chip having an application key pre-set; the information system having an application key pre-set;

[0028] The application key of the security chip is obtained by decentralized processing based on the application key of the information system;

[0029] The authentication system is used to authenticate multiple operating devices using application keys preset in the information system and application keys of the operating devices when the operator logs into the information system. After multiple operating devices are successfully authenticated, the identity of the operator is authenticated simultaneously through multiple operating devices.

[0030] In the embodiment of the present invention, the application key of the information system is generated by distributing the serial number of the information system through the authentication master key of the key management system;

[0031] The application key of the security chip is generated by dispersing the serial number of the information system through the authentication master key of the key management system to generate a first key, and then dispersing the serial number of the security chip through the first key, wherein the first key is consistent with the application key of the information system.

[0032] In the embodiment of the present invention, the method of authenticating multiple operating devices by using the application key preset by the information system and the application key of the operating device includes:

[0033] When the operator logs into the information system, the information system issues a device authentication instruction;

[0034] Each operating device responds to the device authentication instruction, generates a plaintext random number using the security chip built into the operating device, encrypts the plaintext random number using the application key of the security chip to obtain a ciphertext random number, concatenates the plaintext random number with the ciphertext random number to obtain a mixed random number, performs encryption operation on the mixed random number to obtain an authentication code, and sends the plaintext random number, the ciphertext random number and the authentication code to the information system;

[0035] The information system intercepts the plaintext random number, ciphertext random number and authentication code from the received data, uses the information system's application key to disperse the serial number of the security chip to generate a second key, uses the second key to encrypt the plaintext random number and the ciphertext random number to obtain the authentication code, compares the calculated authentication code with the intercepted authentication code, if they are consistent, uses the second key to decrypt the ciphertext random number to obtain a plaintext random number, compares the decrypted plaintext random number with the intercepted plaintext random number, if they are consistent, the authentication is successful.

[0036] In an embodiment of the present invention, the operating device includes a fingerprint token, a security keyboard and a camera;

[0037] The simultaneous authentication of the identity of the operator by multiple operating devices includes:

[0038] Determine through the fingerprint token whether the fingerprint information of the current operator matches the fingerprint information pre-stored in the fingerprint token;

[0039] Under the condition that the fingerprint information of the current operator matches the fingerprint information pre-stored in the fingerprint token, searching in the database whether there is identity information of the fingerprint token owner according to the fingerprint information;

[0040] Under the condition that the identity information of the fingerprint token owner is found, the fingerprint information of the current operator is obtained through the security keyboard, and it is determined whether the fingerprint information obtained by the security keyboard matches the fingerprint information pre-stored in the fingerprint token;

[0041] Under the condition that the fingerprint information obtained by the security keyboard matches the fingerprint information pre-stored in the fingerprint token, the facial information of the current operator is obtained through the camera, and the identity information corresponding to the facial information is searched in the database based on the facial information. If the identity information corresponding to the facial information is consistent with the identity information of the owner of the fingerprint token, it is determined that the identity authentication of the current operator is successful.

[0042] In the embodiment of the present invention, the camera is also used to determine whether the operating environment of the operator is safe after the operator identity authentication is successful.

[0043] The present invention also provides a computer device, comprising: a memory and a processor, wherein the memory stores a computer program, and the processor is used to execute the computer program to implement the above-mentioned information system operator authentication method.

[0044] The present invention also provides a computer program product, comprising a computer program, which implements the above-mentioned information system operator authentication method when executed by a processor.

[0045] The present invention authenticates each operating device, participates in the authentication process of the operating device through the application key associated with the information system and the operating device, confirms that the operating device is a safe operating device designated by the information system, and then uses multiple authenticated operating devices to authenticate the identity of the operator at the same time, thereby improving the security of the information system. After the operator's identity authentication is successful, it is also determined whether the operating environment where the operator is located is safe. The operator's operation is performed only when it is determined that the operating environment where the operator is located is safe, which can prevent the operator from operating the information system under the threat of a knife or a gun, resulting in the peeping of secret information.

[0046] Other features and advantages of the technical solution of the present invention will be described in detail in the specific implementation section below. BRIEF DESCRIPTION OF THE DRAWINGS

[0047] The drawings described herein are used to provide a further understanding of the present invention and constitute a part of the present invention. The exemplary embodiments of the present invention and their descriptions are used to explain the present invention and do not constitute an improper limitation of the present invention. In the drawings:

[0048] Figure 1 is a flow chart of an information system operator authentication method provided by Embodiment 1 of the present invention;

[0049] Figure 2 is a flow chart of authenticating an operating device provided by a specific embodiment of the present invention;

[0050] Figure 3 is a flow chart of an authentication method for an information system operator provided in Embodiment 2 of the present invention;

[0051] Figure 4 It is a block diagram of an authentication system provided by an embodiment of the present invention. DETAILED DESCRIPTION

[0052] In order to make the technical solutions and advantages of the embodiments of the present invention more clearly understood, the exemplary embodiments of the present invention are further described in detail below in conjunction with the accompanying drawings. Obviously, the described embodiments are only part of the embodiments of the present invention, rather than an exhaustive list of all the embodiments. It should be noted that the embodiments of the present invention and the features in the embodiments can be combined with each other without conflict.

[0053] In the description of the present invention, it should be understood that the terms "first" and "second" are used for descriptive purposes only and should not be understood as indicating or implying relative importance or implicitly indicating the number of the indicated technical features. Thus, a feature defined as "first" or "second" may explicitly or implicitly include one or more of the features. In the description of the present invention, the meaning of "plurality" is at least two, such as two, three, etc., unless otherwise clearly and specifically defined.

[0054] As described in the background technology, the existing information system verification method does not authenticate the operating device used by the operator. When the operator uses an unauthenticated operating device to operate the information system, the operator's information may be intercepted. In response to this problem, an embodiment of the present invention provides an authentication method for an information system operator. When the operator logs into the information system, multiple operating devices are authenticated using the application key preset by the information system and the application key of the operating device; after multiple operating devices are successfully authenticated, the identity of the operator is authenticated by multiple operating devices at the same time. Each operating device has a built-in security chip, and the security chip presets an application key. The application key of the security chip is obtained by decentralized processing based on the application key of the information system, that is, there is a derivable decentralized relationship between the application key of the security chip and the application key of the information system. The present invention authenticates each operating device, participates in the authentication process of the operating device through the mutually related application key between the information system and the operating device, confirms that the operating device is a secure operating device designated by the information system, and then uses multiple authenticated operating devices to authenticate the identity of the operator at the same time, thereby improving the security of the information system.

[0055] Figure 1 FIG. 1 is a flow chart of an authentication method for an information system operator provided in Embodiment 1 of the present invention. Figure 1 As shown, the information system operator authentication method provided in this embodiment includes the following steps:

[0056] S101, when an operator logs into the information system, multiple operating devices are authenticated using an application key preset in the information system and an application key of the operating device;

[0057] S102, after multiple operating devices are successfully authenticated, the identities of the operators are simultaneously authenticated through the multiple operating devices.

[0058] The application key preset by the information system is generated by dispersing the serial number of the information system through the authentication master key of the key management system. Specifically, the serial number of the information system is used as a dispersion factor, and the application key of the information system is obtained by performing an XOR operation on the authentication master key of the key management system and the dispersion factor.

[0059] In a specific embodiment, the information system sends a key distribution request to the key management system, and the key distribution request contains the serial number of the information system. The key management system responds to the key distribution request, uses the authentication master key key0 to disperse the serial number of the information system, generates a first key key1, and sends it to the information system. The information system stores the received first key key1 as the application key of the information system.

[0060] The information system stores the serial number of the security chip in an encrypted file or database. The information system also stores the user's role, authority, face recognition information, fingerprint information, etc. in an encrypted file or database.

[0061] The operating device includes a fingerprint token, a security keyboard, a camera and other devices. The fingerprint token pre-stores the fingerprint information of the user (designated operator). The security keyboard has a fingerprint recognition function, which can obtain the fingerprint information of the operator when the operator touches the keyboard while typing, and can also bind the fingerprint information of the designated operator. The camera can be a regular camera or a camera with a counting function, which can determine whether there are other people next to the operator through camera counting technology.

[0062] Each operating device (fingerprint token, security keyboard and camera) is equipped with a built-in security chip, and the security chip has a preset application key. The application key of the security chip is written into the security chip by the issuing device when the security chip is issued. The issuing device uses the authentication master key key0 of the key management system to disperse the serial number of the information system to generate the first key key1, and then disperses the serial number of the security chip through the first key key1 to generate the application key of the security chip. Among them, the first key key1 is consistent with the application key of the information system. Specifically, the serial number of the information system is used as a dispersion factor, and the authentication master key key0 is XORed with the serial number of the information system to obtain the first key key1 that is consistent with the application key of the information system; the serial number of the security chip is used as a dispersion factor, and the first key key1 is XORed with the serial number of the security chip to obtain the application key of the security chip.

[0063] In a specific embodiment, the process of generating the application key of the security chip is as follows:

[0064] When issuing a security chip, the issuing device reads the serial number of the security chip, and sends a key distribution request to the key management system, wherein the key distribution request contains the serial number of the security chip and the serial number of the information system;

[0065] The key management system responds to the key distribution request, uses the authentication master key key0 to perform a decentralized process on the serial number of the information system, generates a first key key1 (the application key of the information system is consistent with the first key key1), uses the first key key1 to perform a decentralized process on the serial number of the security chip, generates a second key key2, and sends the second key key2 to the issuing device;

[0066] The issuing device writes the received second key key2 into the security chip as the application key of the security chip.

[0067] Since the application key of the information system is consistent with the first key key1, the application key of the security chip (i.e., the second key key2) is equivalent to the application key key1 of the information system dispersed based on the serial number of the security chip. Therefore, there is a derivable dispersion relationship between the application key key2 of the security chip and the application key key1 of the information system.

[0068] like Figure 2 As shown, in a specific embodiment, the information system authenticates the operating device, including the following steps:

[0069] When the operator logs into the information system, the information system issues a device authentication instruction;

[0070] Each operating device responds to the device authentication instruction, generates a 4-byte plaintext random number R using the built-in security chip of the operating device, encrypts the plaintext random number R using the application key key1 of the security chip to obtain a ciphertext random number R', concatenates the plaintext random number R and the ciphertext random number R' together to obtain a mixed random number R+R', performs encryption operation on the mixed random number R+R' to obtain an authentication code MAC (8-bit hash value), and sends the plaintext random number R, the ciphertext random number R' and the authentication code to the information system;

[0071] The information system intercepts the plaintext random number R, the ciphertext random number R' and the authentication code MAC from the received data (since the data length of the plaintext random number, the ciphertext random number and the authentication code is fixed, the corresponding data can be intercepted according to the data length of each part), uses the information system's application key key1 to disperse the serial number of the security chip to generate the second key key2, uses the second key key2 to encrypt the plaintext random number and the ciphertext random number to obtain the authentication code MAC', compares the calculated authentication code MAC' with the intercepted authentication code MAC for verification, if they are consistent, it means that the received data has not been tampered with; then uses the second key key2 to decrypt the ciphertext random number R' to obtain the plaintext random number R", compares the decrypted plaintext random number R" with the intercepted plaintext random number R for verification, if they are consistent, the authentication is successful.

[0072] In a specific embodiment, the information system can be deployed on the server side, and the operator accesses the information system through a client device (such as a laptop computer). The client connects to a specific camera, security keyboard, fingerprint token (fingerprint USB key), etc. The security chip of the camera, security keyboard and fingerprint token is pre-set with the application key key2, and the client needs to install a service plug-in (such as websocket). The operator enters the URL of the information system (such as HTTPS) on the client side, and the information system will send a response message (device authentication instruction) to the client, requiring the client to verify whether the camera, security keyboard, fingerprint token and other devices are legal. The client can call the information system of the server side through the web page, and the server controls the camera, security keyboard, fingerprint token and other devices by calling the client websocket.

[0073] The information system and operating equipment can also be deployed on the same client computer. The URL of the information system is entered on the client. When requested, the information system directly calls the dynamic library to interact with devices such as cameras, security keyboards, fingerprint tokens, and performs hardware control of cameras, security keyboards, and fingerprint tokens.

[0074] In a specific embodiment, in the above step S102, the identity of the operator is authenticated simultaneously by multiple operating devices, including the following steps:

[0075] Determine through the fingerprint token whether the fingerprint information of the current operator matches the fingerprint information pre-stored in the fingerprint token;

[0076] Under the condition that the fingerprint information of the current operator matches the fingerprint information pre-stored in the fingerprint token, searching in the database whether there is identity information of the fingerprint token owner according to the fingerprint information;

[0077] Searching for the identity information of the fingerprint token owner in the encrypted file or database of the information system, obtaining the fingerprint information of the current operator through the security keyboard (with fingerprint recognition function) when the identity information of the fingerprint token owner is found, and judging whether the fingerprint information obtained by the security keyboard matches the fingerprint information pre-stored in the fingerprint token. If they match, it is determined that the operator of the fingerprint token and the operator of the security keyboard are the same person;

[0078] Under the condition that the fingerprint information obtained by the security keyboard matches the fingerprint information pre-stored in the fingerprint token, the facial information of the current operator is obtained through the camera, and the identity information corresponding to the facial information is searched in the database based on the facial information. If the identity information corresponding to the facial information is consistent with the identity information of the owner of the fingerprint token, it is determined that the identity authentication of the current operator is successful.

[0079] In the implementation manner of the present invention, after the operator's identity authentication is successful, it is also determined whether the operator's operating environment is safe. The operator's operation is executed only when it is determined that the operator's operating environment is safe. This can prevent the operator from operating the information system under the threat of a knife or a gun, causing secret information to be peeped.

[0080] Figure 3 FIG. 1 is a flow chart of an information system operator authentication method provided by Embodiment 2 of the present invention. Figure 3 As shown, the information system operator authentication method provided in this embodiment includes the following steps:

[0081] S301, when an operator logs into the information system, multiple operating devices are authenticated using an application key preset in the information system and an application key of the operating device;

[0082] S302, after multiple operating devices are successfully authenticated, the identity of the operator is authenticated simultaneously through the multiple operating devices;

[0083] S303, after the operator's identity authentication is successful, judging whether the operator's operating environment is safe through the camera;

[0084] S304, when it is determined that the operating environment of the operator is safe, determining the authority scope of the operator, and executing the operator's operation within the authority scope of the operator.

[0085] In the above step S301, authenticating the operating device includes the following steps:

[0086] When the operator logs into the information system, the information system issues a device authentication instruction;

[0087] Each operating device responds to the device authentication instruction, generates a 4-byte plaintext random number R using the built-in security chip of the operating device, encrypts the plaintext random number R using the application key key1 of the security chip to obtain a ciphertext random number R', concatenates the plaintext random number R and the ciphertext random number R' together to obtain a mixed random number R+R', performs encryption operation on the mixed random number R+R' to obtain an authentication code MAC, and sends the plaintext random number R, the ciphertext random number R' and the authentication code to the information system;

[0088] The information system intercepts the plaintext random number R, the ciphertext random number R' and the authentication code MAC from the received data (since the data length of the plaintext random number, the ciphertext random number and the authentication code is fixed, the corresponding data can be intercepted according to the data length of each part), uses the information system's application key key1 to disperse the serial number of the security chip to generate the second key key2, uses the second key key2 to encrypt the plaintext random number and the ciphertext random number to obtain the authentication code MAC', compares the calculated authentication code MAC' with the intercepted authentication code MAC, if they are consistent, it means that the received data has not been tampered with; then uses the second key key2 to decrypt the ciphertext random number R' to obtain the plaintext random number R", compares the decrypted plaintext random number R" with the intercepted plaintext random number R, if they are consistent, the authentication is successful.

[0089] In the above step S302, the identity of the operator is authenticated simultaneously by multiple operating devices, including the following steps:

[0090] Determine through the fingerprint token whether the fingerprint information of the current operator matches the fingerprint information pre-stored in the fingerprint token;

[0091] Under the condition that the fingerprint information of the current operator matches the fingerprint information pre-stored in the fingerprint token, searching in the database whether there is identity information of the fingerprint token owner according to the fingerprint information;

[0092] Searching for the identity information of the fingerprint token owner in the encrypted file or database of the information system, obtaining the fingerprint information of the current operator through the security keyboard (with fingerprint recognition function) when the identity information of the fingerprint token owner is found, and judging whether the fingerprint information obtained by the security keyboard matches the fingerprint information pre-stored in the fingerprint token. If they match, it is determined that the operator of the fingerprint token and the operator of the security keyboard are the same person;

[0093] Under the condition that the fingerprint information obtained by the security keyboard matches the fingerprint information pre-stored in the fingerprint token, the facial information of the current operator is obtained through the camera, and the identity information corresponding to the facial information is searched in the database based on the facial information. If the identity information corresponding to the facial information is consistent with the identity information of the owner of the fingerprint token, it is determined that the identity authentication of the current operator is successful.

[0094] In the above step S303, a camera with a counting function is used to determine whether there are other people or devices in the operating environment where the operator is located that may peek at the operation content, and whether there are people or objects that threaten the operator. In this way, it can be determined whether the operator is under direct security threats and whether there is a possibility of being peeped at, so as to avoid the situation where the operator operates the information system under the threat of a knife or a gun, resulting in the peeping of secret information. For example, if the camera detects that the operator leaves the monitoring range, or the camera detects that a second person appears in the monitoring range, the system will be locked; if the camera detects that the operator has no operation for a period of time, the system will be locked.

[0095] The present invention mainly verifies the security of the input environment, with the purpose of ensuring that the device is safe, the operator is correct, and the operator's personal safety is not directly threatened. The key authentication technology is used to confirm whether the operating device is the designated operating device, and the face recognition and fingerprint are used to double confirm whether the operator is the designated operator. The camera counting technology is used to confirm whether there is a direct security threat and whether there is a possibility of being peeped. Compared with the prior art, the present invention can prevent the operator from operating the information system under the threat of a knife or a gun, which may cause the secret information to be peeped, thereby improving the security of the information system.

[0096] The embodiment of the present invention also provides an authentication system. Figure 4 As shown, an embodiment of the present invention provides an authentication system for authenticating the identity of an operator of an information system, including a fingerprint token, a security keyboard, a camera and other multiple operating devices. The multiple operating devices are all equipped with a security chip, the security chip is pre-set with an application key, and the information system is pre-set with an application key. The application key of the security chip is obtained by decentralized processing based on the application key of the information system. When the operator logs into the information system, the multiple operating devices are authenticated using the application key pre-set by the information system and the application key of the operating device. After the multiple operating devices are successfully authenticated, the identity of the operator is authenticated simultaneously through the multiple operating devices.

[0097] The application key preset by the information system is generated by dispersing the serial number of the information system through the authentication master key of the key management system. In a specific embodiment, the information system sends a key distribution request to the key management system, and the key distribution request contains the serial number of the information system. The key management system responds to the key distribution request, uses the authentication master key key0 to disperse the serial number of the information system, generates a first key key1, and sends it to the information system. The information system stores the received first key key1 as the application key of the information system.

[0098] The information system stores the serial number of the security chip in an encrypted file or database. The information system also stores the user's role, authority, face recognition information, fingerprint information, etc. in an encrypted file or database.

[0099] The fingerprint token stores the fingerprint information of the designated operator. The secure keyboard has a fingerprint recognition function, which can obtain the fingerprint information of the operator when the operator touches the keyboard while typing, and can also bind the fingerprint information of the designated operator. The camera can be a regular camera or a camera with a counting function, which can determine whether there are other people next to the operator through camera counting technology.

[0100] Fingerprint tokens, security keyboards, cameras and other operating devices are all equipped with security chips, which are pre-set with application keys. The application key of the security chip is written into the security chip by the issuing device when the security chip is issued. The issuing device uses the authentication master key key0 of the key management system to disperse the serial number of the information system to generate the first key key1, and then disperses the serial number of the security chip through the first key key1 to generate the application key of the security chip. Among them, the first key key1 is consistent with the application key of the information system.

[0101] In a specific embodiment, the process of generating the application key of the security chip is as follows: when issuing the security chip, the issuing device reads the serial number of the security chip, and the issuing device sends a key distribution request to the key management system, wherein the key distribution request contains the serial number of the security chip and the serial number of the information system; the key management system responds to the key distribution request, uses the authentication master key key0 to disperse the serial number of the information system, generates a first key key1 (the application key of the information system is consistent with the first key key1), uses the first key key1 to disperse the serial number of the security chip, generates a second key key2, and sends the second key key2 to the issuing device; the issuing device writes the received second key key2 into the security chip as the application key of the security chip.

[0102] Since the application key of the information system is consistent with the first key key1, the application key of the security chip (i.e., the second key key2) is equivalent to the application key key1 of the information system dispersed based on the serial number of the security chip. Therefore, there is a derivable dispersion relationship between the application key key2 of the security chip and the application key key1 of the information system.

[0103] In a specific embodiment, the information system authenticates the operating device in the following manner:

[0104] When the operator logs into the information system, the information system issues a device authentication instruction;

[0105] Each operating device responds to the device authentication instruction, generates a 4-byte plaintext random number R using the built-in security chip of the operating device, encrypts the plaintext random number R using the application key key1 of the security chip to obtain a ciphertext random number R', concatenates the plaintext random number R and the ciphertext random number R' together to obtain a mixed random number R+R', performs encryption operation on the mixed random number R+R' to obtain an authentication code MAC, and sends the plaintext random number R, the ciphertext random number R' and the authentication code to the information system;

[0106] The information system intercepts the plaintext random number R, the ciphertext random number R' and the authentication code MAC from the received data (since the data length of the plaintext random number, the ciphertext random number and the authentication code is fixed, the corresponding data can be intercepted according to the data length of each part), uses the information system's application key key1 to disperse the serial number of the security chip to generate the second key key2, uses the second key key2 to encrypt the plaintext random number and the ciphertext random number to obtain the authentication code MAC', compares the calculated authentication code MAC' with the intercepted authentication code MAC for verification, if they are consistent, it means that the received data has not been tampered with; then uses the second key key2 to decrypt the ciphertext random number R' to obtain the plaintext random number R", compares the decrypted plaintext random number R" with the intercepted plaintext random number R for verification, if they are consistent, the authentication is successful.

[0107] In a specific embodiment, the method in which multiple operating devices simultaneously authenticate the operator's identity is:

[0108] Determine through the fingerprint token whether the fingerprint information of the current operator matches the fingerprint information pre-stored in the fingerprint token;

[0109] Under the condition that the fingerprint information of the current operator matches the fingerprint information pre-stored in the fingerprint token, searching in the database whether there is identity information of the fingerprint token owner according to the fingerprint information;

[0110] Searching for the identity information of the fingerprint token owner in the encrypted file or database of the information system, obtaining the fingerprint information of the current operator through the security keyboard (with fingerprint recognition function) when the identity information of the fingerprint token owner is found, and judging whether the fingerprint information obtained by the security keyboard matches the fingerprint information pre-stored in the fingerprint token. If they match, it is determined that the operator of the fingerprint token and the operator of the security keyboard are the same person;

[0111] Under the condition that the fingerprint information obtained by the security keyboard matches the fingerprint information pre-stored in the fingerprint token, the facial information of the current operator is obtained through the camera, and the identity information corresponding to the facial information is searched in the database based on the facial information. If the identity information corresponding to the facial information is consistent with the identity information of the owner of the fingerprint token, it is determined that the identity authentication of the current operator is successful.

[0112] In a specific embodiment, the camera is a camera with a counting function. The camera can use counting technology to determine whether there are other people or devices in the operating environment where the operator is located that may peek at the operation content, and whether there are people or objects that threaten the operator. Therefore, it can be determined whether the operator is under direct security threats and whether there is a possibility of being peeped at, so as to avoid the situation where the operator operates the information system under the threat of a knife or a gun, resulting in the peeping of secret information. When determining that the operating environment where the operator is located is safe, the authentication system also determines the scope of the operator's authority and executes the operator's operation within the scope of the operator's authority.

[0113] The embodiment of the present invention further provides a computer device, including: a memory and a processor, wherein the memory stores a computer program, and the processor is used to execute the computer program to implement the above-mentioned information system operator authentication method.

[0114] The embodiment of the present invention further provides a computer program product, including a computer program, which implements the above-mentioned information system operator authentication method when executed by a processor.

[0115] The embodiment of the present invention further provides a machine-readable storage medium on which computer program instructions are stored. When the computer program instructions are executed by a processor, the above-mentioned information system operator authentication method is implemented.

[0116] It will be appreciated by those skilled in the art that embodiments of the present invention may be provided as methods, systems, or computer program products. Therefore, the present invention may take the form of a complete hardware embodiment, a complete software embodiment, or an embodiment combining software and hardware. Moreover, the present invention may take the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program codes. The schemes in the embodiments of the present invention may be implemented in various computer languages, for example, object-oriented programming language Java and literal scripting language JavaScript, etc.

[0117] The present invention is described with reference to flowcharts and / or block diagrams of methods, devices (systems), and computer program products according to embodiments of the present invention. It should be understood that each process and / or block in the flowchart and / or block diagram, as well as the combination of processes and / or blocks in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing device to produce a machine, so that the instructions executed by the processor of the computer or other programmable data processing device generate instructions for implementing the processes in the flowchart and / or block diagram. Figure 1 A process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0118] These computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing device to operate in a specific manner, so that the instructions stored in the computer-readable memory produce an article of manufacture comprising an instruction device, which implements the process Figure 1 A process or multiple processes and / or boxes Figure 1 A function specified in one or more boxes.

[0119] These computer program instructions can also be loaded onto a computer or other programmable data processing device so that a series of operating steps are executed on the computer or other programmable device to produce a computer-implemented process, thereby providing instructions for implementing the process. Figure 1 A process or multiple processes and / or boxes Figure 1 A step that specifies a function in one or more boxes.

[0120] Although the preferred embodiments of the present invention have been described, those skilled in the art may make other changes and modifications to these embodiments once they have learned the basic creative concept. Therefore, the appended claims are intended to be interpreted as including the preferred embodiments and all changes and modifications that fall within the scope of the present invention.

[0121] Obviously, those skilled in the art can make various changes and modifications to the present invention without departing from the spirit and scope of the present invention. Thus, if these modifications and variations of the present invention fall within the scope of the claims of the present invention and their equivalents, the present invention is also intended to include these modifications and variations.

Claims

1. A method for authenticating an information system operator, It is characterized in that include: When the operator logs into the information system, multiple operating devices are authenticated using the application key preset in the information system and the application key of the operating device; A plurality of operating devices are each equipped with a built-in security chip, wherein the security chip is pre-set with an application key, and the application key of the security chip is obtained by decentralized processing based on the application key of the information system; After multiple operating devices are successfully authenticated, the identity of the operator is authenticated simultaneously through the multiple operating devices.

2. The information system operator authentication method according to claim 1, It is characterized in that The application key of the information system is generated by dispersing the serial number of the information system through the authentication master key of the key management system.

3. The information system operator authentication method according to claim 2, It is characterized in that The decentralized processing of the serial number of the information system by the authentication master key of the key management system includes: The serial number of the information system is used as a dispersion factor, and the application key of the information system is obtained by performing an XOR operation on the authentication master key of the key management system and the dispersion factor.

4. The information system operator authentication method according to claim 2, It is characterized in that The application key of the security chip is generated by dispersing the serial number of the information system through the authentication master key of the key management system to generate a first key, and then dispersing the serial number of the security chip through the first key, wherein the first key is consistent with the application key of the information system.

5. The information system operator authentication method according to claim 4, It is characterized in that The decentralized processing of the serial number of the information system by the authentication master key of the key management system includes: Using the serial number of the information system as a dispersion factor, an XOR operation is performed between the authentication master key of the key management system and the serial number of the information system to obtain a first key that is consistent with the application key of the information system; The dispersing processing of the serial number of the security chip by using the first key includes: The serial number of the security chip is used as a dispersion factor, and an XOR operation is performed on the first key and the serial number of the security chip to obtain an application key of the security chip.

6. The information system operator authentication method according to claim 1, It is characterized in that The method of authenticating multiple operating devices by using application keys preset by the information system and application keys of the operating devices includes: When the operator logs into the information system, the information system issues a device authentication instruction; Each operating device responds to the device authentication instruction, generates a plaintext random number using the security chip built into the operating device, encrypts the plaintext random number using the application key of the security chip to obtain a ciphertext random number, concatenates the plaintext random number with the ciphertext random number to obtain a mixed random number, performs encryption operation on the mixed random number to obtain an authentication code, and sends the plaintext random number, the ciphertext random number and the authentication code to the information system; The information system intercepts the plaintext random number, ciphertext random number and authentication code from the received data, uses the information system's application key to disperse the serial number of the security chip to generate a second key, uses the second key to encrypt the plaintext random number and the ciphertext random number to obtain the authentication code, compares the calculated authentication code with the intercepted authentication code, if they are consistent, uses the second key to decrypt the ciphertext random number to obtain a plaintext random number, compares the decrypted plaintext random number with the intercepted plaintext random number, if they are consistent, the authentication is successful.

7. The information system operator authentication method according to claim 1, It is characterized in that The operating device includes a fingerprint token, a security keyboard and a camera; The simultaneous authentication of the identity of the operator by multiple operating devices includes: Determine through the fingerprint token whether the fingerprint information of the current operator matches the fingerprint information pre-stored in the fingerprint token; Under the condition that the fingerprint information of the current operator matches the fingerprint information pre-stored in the fingerprint token, searching in the database whether there is identity information of the fingerprint token owner according to the fingerprint information; Under the condition that the identity information of the fingerprint token owner is found, the fingerprint information of the current operator is obtained through the security keyboard, and it is determined whether the fingerprint information obtained by the security keyboard matches the fingerprint information pre-stored in the fingerprint token; Under the condition that the fingerprint information obtained by the security keyboard matches the fingerprint information pre-stored in the fingerprint token, the facial information of the current operator is obtained through the camera, and the identity information corresponding to the facial information is searched in the database based on the facial information. If the identity information corresponding to the facial information is consistent with the identity information of the owner of the fingerprint token, it is determined that the identity authentication of the current operator is successful.

8. The information system operator authentication method according to claim 1, It is characterized in that The method further includes: after the operator identity authentication is successful, determining whether the operator's operating environment is safe through a camera.

9. The information system operator authentication method according to claim 8, It is characterized in that The method further comprises: When determining that the operator's operating environment is safe, determine the scope of the operator's authority; Perform the operator's operations within the scope of the operator's authority.

10. An authentication system for authenticating the identity of an information system operator. It is characterized in that The authentication system includes a plurality of operating devices, each of which has a built-in security chip, and the security chip is pre-set with an application key; The information system presets an application key; The application key of the security chip is obtained by decentralized processing based on the application key of the information system; The authentication system is used to authenticate multiple operating devices using application keys preset in the information system and application keys of the operating devices when the operator logs into the information system. After multiple operating devices are successfully authenticated, the identity of the operator is authenticated simultaneously through multiple operating devices.

11. The authentication system according to claim 10, It is characterized in that The application key of the information system is generated by distributing the serial number of the information system through the authentication master key of the key management system; The application key of the security chip is generated by dispersing the serial number of the information system through the authentication master key of the key management system to generate a first key, and then dispersing the serial number of the security chip through the first key, wherein the first key is consistent with the application key of the information system.

12. The authentication system according to claim 10, It is characterized in that The method of authenticating multiple operating devices by using application keys preset by the information system and application keys of the operating devices includes: When the operator logs into the information system, the information system issues a device authentication instruction; Each operating device responds to the device authentication instruction, generates a plaintext random number using the security chip built into the operating device, encrypts the plaintext random number using the application key of the security chip to obtain a ciphertext random number, concatenates the plaintext random number with the ciphertext random number to obtain a mixed random number, performs encryption operation on the mixed random number to obtain an authentication code, and sends the plaintext random number, the ciphertext random number and the authentication code to the information system; The information system intercepts the plaintext random number, ciphertext random number and authentication code from the received data, uses the information system's application key to disperse the serial number of the security chip to generate a second key, uses the second key to encrypt the plaintext random number and the ciphertext random number to obtain the authentication code, compares the calculated authentication code with the intercepted authentication code, if they are consistent, uses the second key to decrypt the ciphertext random number to obtain a plaintext random number, compares the decrypted plaintext random number with the intercepted plaintext random number, if they are consistent, the authentication is successful.

13. The authentication system according to claim 10, It is characterized in that The operating device includes a fingerprint token, a security keyboard and a camera; The simultaneous authentication of the identity of the operator by multiple operating devices includes: Determine through the fingerprint token whether the fingerprint information of the current operator matches the fingerprint information pre-stored in the fingerprint token; Under the condition that the fingerprint information of the current operator matches the fingerprint information pre-stored in the fingerprint token, searching in the database whether there is identity information of the fingerprint token owner according to the fingerprint information; Under the condition that the identity information of the fingerprint token owner is found, the fingerprint information of the current operator is obtained through the security keyboard, and it is determined whether the fingerprint information obtained by the security keyboard matches the fingerprint information pre-stored in the fingerprint token; Under the condition that the fingerprint information obtained by the security keyboard matches the fingerprint information pre-stored in the fingerprint token, the facial information of the current operator is obtained through the camera, and the identity information corresponding to the facial information is searched in the database based on the facial information. If the identity information corresponding to the facial information is consistent with the identity information of the owner of the fingerprint token, it is determined that the identity authentication of the current operator is successful.

14. The authentication system according to claim 13, It is characterized in that The camera is also used to determine whether the operator's operating environment is safe after the operator's identity authentication is successful.

15. A computer device, It is characterized in that include: a memory storing a computer program; A processor, configured to execute the computer program to implement the information system operator authentication method according to any one of claims 1 to 9.

16. A computer program product comprising a computer program, It is characterized in that When the computer program is executed by a processor, the computer program implements the information system operator authentication method according to any one of claims 1 to 9.

Images