Authentication methods and systems for information system operators, and computer equipment

Abstract

This invention relates to the field of information security technology, providing an authentication method, system, and computer device for information system operators. The method includes: when an operator logs into the information system, authenticating multiple operating devices using a pre-set application key from the information system and an application key from each operating device; each operating device has a built-in security chip, the security chip having a pre-set application key, which is obtained by distributing the application key from the information system; after successful authentication of multiple operating devices, simultaneously authenticating the operator's identity through the multiple operating devices. This invention improves the security of the information system by using the inter-associated application keys between the information system and each operating device in the authentication process, confirming that the operating device is a designated secure operating device of the information system, and then simultaneously authenticating the operator's identity using multiple authenticated operating devices.

Description

Technical Field

[0001] This invention relates to the field of information security technology, and more specifically to an authentication method and system for information system operators. Background Technology

[0002] Important information systems require operator verification. Common verification methods include passwords, fingerprints, iris scans, or facial recognition. Usually, one or two methods are combined to confirm the operator's identity, which can ensure system information security to a certain extent.

[0003] In existing technologies, there is no authentication process for the devices used to log into information systems. When an operator uses an unauthenticated device to operate the system, their information may be intercepted. For example, an unauthenticated device may be fitted with a listening device, and the keypad of such a device may record the password entered by the operator.

[0004] In existing technologies, the main methods for authenticating the identity of operators are password authentication, fingerprint authentication, or facial recognition authentication. However, the environment in which the operator is located is not verified, which still leaves insecurity. For example, an operator can still operate the information system even when threatened with a knife or gun, resulting in the theft of confidential information. Summary of the Invention

[0005] To address one of the aforementioned technical deficiencies, this invention provides an authentication method and system for information system operators.

[0006] This invention provides a method for authenticating an information system operator, comprising:

[0007] When an operator logs into the information system, the system uses a pre-set application key and the operating device's application key to authenticate multiple operating devices. Each operating device has a built-in security chip with a pre-set application key. The application key of the security chip is obtained by distributing the application key based on the information system's application key.

[0008] After successful authentication on multiple operating devices, the operator's identity is simultaneously authenticated through these devices.

[0009] In this embodiment of the invention, the application key of the information system is generated by distributing the serial number of the information system through the authentication master key of the key management system.

[0010] In this embodiment of the invention, the serial number of the information system is distributed using the authentication master key of the key management system, including: using the serial number of the information system as a distribution factor, and performing an XOR operation between the authentication master key of the key management system and the distribution factor to obtain the application key of the information system.

[0011] In this embodiment of the invention, the application key of the security chip is generated by distributing the serial number of the information system using the authentication master key of the key management system, and then distributing the serial number of the security chip using the first key. The first key is consistent with the application key of the information system.

[0012] In this embodiment of the invention, the serial number of the information system is distributed using the authentication master key of the key management system, including: using the serial number of the information system as a distribution factor, performing an XOR operation between the authentication master key and the serial number of the information system to obtain a first key that is consistent with the application key of the information system.

[0013] The serial number of the security chip is distributed using the first key, including: using the serial number of the security chip as a distribution factor, and performing an XOR operation between the first key and the serial number of the security chip to obtain the application key of the security chip.

[0014] In this embodiment of the invention, multiple operating devices are authenticated using application keys pre-set in the information system and application keys of the operating devices, including:

[0015] When an operator logs into the information system, the information system issues a device authentication command;

[0016] Each operating device responds to the device authentication command by generating a plaintext random number using the security chip built into the operating device, encrypting the plaintext random number using the application key of the security chip to obtain a ciphertext random number, concatenating the plaintext random number and the ciphertext random number to obtain a mixed random number, performing encryption operations on the mixed random number to obtain an authentication code, and sending the plaintext random number, ciphertext random number, and authentication code to the information system.

[0017] The information system extracts plaintext random numbers, ciphertext random numbers, and authentication codes from the received data. It then uses the information system's application key to distribute the serial number of the security chip, generating a second key. This second key is used to encrypt the plaintext and ciphertext random numbers to obtain the authentication code. The obtained authentication code is compared with the extracted authentication code; if they match, the second key is used to decrypt the ciphertext random number to obtain the plaintext random number. This decrypted plaintext random number is then compared with the extracted plaintext random number; if they match, authentication is successful.

[0018] In this embodiment of the invention, the operating device includes a fingerprint token, a secure keyboard, and a camera;

[0019] The method of simultaneously authenticating the operator's identity through multiple operating devices includes:

[0020] The fingerprint token is used to determine whether the current operator's fingerprint information matches the fingerprint information pre-stored in the fingerprint token.

[0021] If the fingerprint information of the current operator matches the fingerprint information pre-stored in the fingerprint token, then search the database for the identity information of the fingerprint token owner based on the fingerprint information.

[0022] Once the identity information of the fingerprint token owner is found, the fingerprint information of the current operator is obtained through the security keyboard, and it is determined whether the fingerprint information obtained by the security keyboard matches the fingerprint information pre-stored in the fingerprint token.

[0023] If the fingerprint information obtained by the security keyboard matches the fingerprint information pre-stored in the fingerprint token, the camera will capture the current operator's facial information. The system will then search the database for the identity information corresponding to the facial information. If the identity information corresponding to the facial information matches the identity information of the fingerprint token owner, the current operator's identity authentication will be successful.

[0024] In this embodiment of the invention, the method further includes: after the operator's identity is successfully authenticated, determining whether the operator's operating environment is safe through a camera.

[0025] When it is determined that the operator's operating environment is safe, the scope of the operator's authority should be assessed.

[0026] Perform the operator's actions within the operator's authorized scope.

[0027] Another aspect of the present invention provides an authentication system for authenticating the identity of operators of an information system. The authentication system includes multiple operating devices, each of which has a built-in security chip. The security chip has a pre-installed application key. The information system also has a pre-installed application key.

[0028] The application key of the security chip is obtained by distributing the application key of the information system.

[0029] The authentication system is used to authenticate multiple operating devices by using the application key pre-set in the information system and the application key of the operating device when the operator logs into the information system. After the multiple operating devices are successfully authenticated, the operator's identity is authenticated simultaneously through the multiple operating devices.

[0030] In this embodiment of the invention, the application key of the information system is generated by distributing the serial number of the information system through the authentication master key of the key management system;

[0031] The application key of the security chip is generated by distributing the serial number of the information system using the authentication master key of the key management system, and then distributing the serial number of the security chip using the first key. The first key is consistent with the application key of the information system.

[0032] In this embodiment of the invention, the authentication of multiple operating devices using the application key pre-set in the information system and the application key of the operating device includes:

[0033] When an operator logs into the information system, the information system issues a device authentication command;

[0034] Each operating device responds to the device authentication command by generating a plaintext random number using the security chip built into the operating device, encrypting the plaintext random number using the application key of the security chip to obtain a ciphertext random number, concatenating the plaintext random number and the ciphertext random number to obtain a mixed random number, performing encryption operations on the mixed random number to obtain an authentication code, and sending the plaintext random number, ciphertext random number, and authentication code to the information system.

[0035] The information system extracts plaintext random numbers, ciphertext random numbers, and authentication codes from the received data. It then uses the information system's application key to distribute the serial number of the security chip, generating a second key. This second key is used to encrypt the plaintext and ciphertext random numbers to obtain the authentication code. The obtained authentication code is compared with the extracted authentication code; if they match, the second key is used to decrypt the ciphertext random number to obtain the plaintext random number. This decrypted plaintext random number is then compared with the extracted plaintext random number; if they match, authentication is successful.

[0036] In this embodiment of the invention, the operating device includes a fingerprint token, a secure keyboard, and a camera;

[0037] The method of simultaneously authenticating the operator's identity through multiple operating devices includes:

[0038] The fingerprint token is used to determine whether the current operator's fingerprint information matches the fingerprint information pre-stored in the fingerprint token.

[0039] If the fingerprint information of the current operator matches the fingerprint information pre-stored in the fingerprint token, then search the database for the identity information of the fingerprint token owner based on the fingerprint information.

[0040] Once the identity information of the fingerprint token owner is found, the fingerprint information of the current operator is obtained through the security keyboard, and it is determined whether the fingerprint information obtained by the security keyboard matches the fingerprint information pre-stored in the fingerprint token.

[0041] If the fingerprint information obtained by the security keyboard matches the fingerprint information pre-stored in the fingerprint token, the camera will capture the current operator's facial information. The system will then search the database for the identity information corresponding to the facial information. If the identity information corresponding to the facial information matches the identity information of the fingerprint token owner, the current operator's identity authentication will be successful.

[0042] In this embodiment of the invention, the camera is also used to determine whether the operating environment in which the operator is located is safe after the operator's identity is successfully authenticated.

[0043] The present invention also provides a computer device, including: a memory and a processor, the memory storing a computer program, and the processor executing the computer program to implement the above-described information system operator authentication method.

[0044] The present invention also provides a computer program product, including a computer program that, when executed by a processor, implements the above-described information system operator authentication method.

[0045] This invention enhances information system security by authenticating various operating devices. The authentication process utilizes application keys linked between the information system and the operating devices to confirm their security. Multiple authenticated devices are then used simultaneously to authenticate the operator, further improving system security. After successful operator authentication, the security of the operator's environment is assessed. Operations are only executed when the environment is deemed secure, preventing the theft of confidential information if the operator is under threat of violence.

[0046] Other features and advantages of the technical solution of the present invention will be described in detail in the following detailed embodiments section. Attached Figure Description

[0047] The accompanying drawings, which are included to provide a further understanding of the invention and form part of this invention, illustrate exemplary embodiments of the invention and are used to explain the invention, but do not constitute an undue limitation of the invention. In the drawings:

[0048] Figure 1 This is a flowchart of the information system operator authentication method provided in Embodiment 1 of the present invention;

[0049] Figure 2 This is a flowchart of authenticating an operating device provided in a specific embodiment of the present invention;

[0050] Figure 3 This is a flowchart of the information system operator authentication method provided in Embodiment 2 of the present invention;

[0051] Figure 4 This is a block diagram of the authentication system provided in an embodiment of the present invention. Detailed Implementation

[0052] To make the technical solutions and advantages of the embodiments of the present invention clearer, the exemplary embodiments of the present invention will be further described in detail below with reference to the accompanying drawings. Obviously, the described embodiments are only a part of the embodiments of the present invention, and not an exhaustive list of all embodiments. It should be noted that, unless otherwise specified, the embodiments and features in the embodiments of the present invention can be combined with each other.

[0053] In the description of this invention, it should be understood that the terms "first" and "second" are used for descriptive purposes only and should not be construed as indicating or implying relative importance or implicitly specifying the number of indicated technical features. Thus, a feature defined as "first" or "second" may explicitly or implicitly include one or more of that feature. In the description of this invention, "a plurality of" means at least two, such as two, three, etc., unless otherwise explicitly specified.

[0054] As described in the background section, existing information system verification methods do not authenticate the operating devices used by the operator. When an operator uses an unauthenticated device to operate the information system, their information may be intercepted. To address this problem, this invention provides an information system operator authentication method. When an operator logs into the information system, multiple operating devices are authenticated using a pre-set application key from the information system and the application key of the operating device. After successful authentication of multiple operating devices, the operator's identity is simultaneously authenticated through these devices. Each operating device has a built-in security chip with a pre-set application key. This security chip's application key is derived from the information system's application key through a distributed processing method, meaning there is a deducible distributed relationship between the security chip's application key and the information system's application key. This invention improves the security of the information system by authenticating each operating device and using the interrelated application keys between the information system and the operating device in the authentication process. This confirms that the operating device is a secure operating device designated by the information system, and then the operator's identity is simultaneously authenticated using multiple authenticated operating devices.

[0055] Figure 1 This is a flowchart of the information system operator authentication method provided in Embodiment 1 of the present invention. Figure 1 As shown, the information system operator authentication method provided in this embodiment includes the following steps:

[0056] S101, When an operator logs into the information system, the application key pre-set in the information system and the application key of the operating device are used to authenticate multiple operating devices.

[0057] S102, after successful authentication by multiple operating devices, simultaneously authenticate the operator's identity through multiple operating devices.

[0058] The application key pre-configured in the information system is generated by distributing the information system's serial number using the authentication master key from the key management system. Specifically, the information system's serial number is used as a distribution factor, and the application key is obtained by XORing the distribution factor with the authentication master key from the key management system.

[0059] In one specific embodiment, the information system sends a key allocation request to the key management system, the request containing the information system's serial number. The key management system responds to the request by using the authentication master key key0 to distribute the information system's serial number, generating a first key key1, which is then sent to the information system. The information system stores the received first key key1 as its application key.

[0060] The information system stores the serial number of the security chip in an encrypted file or database. It also stores user roles, permissions, facial recognition information, fingerprint information, and other data in encrypted files or databases.

[0061] The operating device includes a fingerprint token, a secure keyboard, and a camera. The fingerprint token pre-stores the user's (designated operator's) fingerprint information. The secure keyboard has fingerprint recognition functionality, capable of acquiring the operator's fingerprint information when the operator touches the keyboard while typing, and can also be linked to the fingerprint information of a designated operator. The camera can be a conventional camera or a camera with a counting function, using camera counting technology to determine if there are other people nearby.

[0062] Each operating device (fingerprint token, secure keyboard, and camera) has a built-in security chip with a pre-installed application key. This application key is written into the security chip by the issuing device during chip issuance. The issuing device uses the authentication master key (key0) from the key management system to distribute the serial number of the information system, generating a first key (key1). Then, it uses key1 to distribute the serial number of the security chip, generating the application key for the security chip. The first key (key1) is identical to the application key of the information system. Specifically, the serial number of the information system is used as a distribution factor, and the authentication master key (key0) is XORed with the information system's serial number to obtain the first key (key1), which matches the information system's application key. The serial number of the security chip is then used as a distribution factor, and the first key (key1) is XORed with the security chip's serial number to obtain the application key for the security chip.

[0063] In one specific embodiment, the process of generating the application key for the security chip is as follows:

[0064] When issuing a security chip, the issuing device reads the serial number of the security chip and sends a key allocation request to the key management system. The key allocation request contains the serial number of the security chip and the serial number of the information system.

[0065] The key management system responds to the key allocation request by using the authentication master key 0 to distribute the serial number of the information system to generate a first key key 1 (the application key of the information system is consistent with the first key key 1), using the first key key 1 to distribute the serial number of the security chip to generate a second key key 2, and sending the second key key 2 to the issuing device.

[0066] The issuing device writes the received second key, key2, into the security chip as the application key for the security chip.

[0067] Since the application key of the information system is the same as the first key key1, the application key of the security chip (i.e. the second key key2) is essentially the application key key1 of the information system distributed based on the serial number of the security chip. Therefore, there is a deducible distribution relationship between the application key key2 of the security chip and the application key key1 of the information system.

[0068] like Figure 2 As shown, in one specific embodiment, the information system authenticates the operating device, including the following steps:

[0069] When an operator logs into the information system, the information system issues a device authentication command;

[0070] Each operating device responds to the device authentication command by generating a 4-byte plaintext random number R using the security chip built into the operating device, encrypting the plaintext random number R using the application key key1 of the security chip to obtain a ciphertext random number R', concatenating the plaintext random number R and the ciphertext random number R' together to obtain a mixed random number R+R', performing encryption operations on the mixed random number R+R' to obtain the authentication code MAC (8-bit hash value), and sending the plaintext random number R, the ciphertext random number R', and the authentication code to the information system.

[0071] The information system extracts a plaintext random number R, a ciphertext random number R', and an authentication code MAC from the received data (since the data lengths of the plaintext random number, ciphertext random number, and authentication code are fixed, the corresponding data can be extracted based on the length of each part). Using the information system's application key key1, the serial number of the security chip is distributed to generate a second key key2. The second key key2 is used to encrypt the plaintext and ciphertext random numbers to obtain the authentication code MAC'. The obtained authentication code MAC' is compared with the extracted authentication code MAC. If they match, the received data has not been tampered with. Then, the second key key2 is used to decrypt the ciphertext random number R' to obtain the plaintext random number R''. The decrypted plaintext random number R'''' is compared with the extracted plaintext random number R''. If they match, authentication is successful.

[0072] In a specific embodiment, the information system can be deployed on a server, and operators access the information system through client devices (such as laptops). The client connects to specific cameras, security keyboards, fingerprint tokens (fingerprint USB keys), etc. The security chips of the cameras, security keyboards, and fingerprint tokens have pre-installed application keys (key2), and the client needs to install a service plugin (such as a WebSocket). When the operator enters the information system's URL (e.g., HTTPS) on the client, the information system sends a response message (device authentication command) to the client, requiring the client to verify the legitimacy of the cameras, security keyboards, fingerprint tokens, etc. The client can call the server-side information system through a webpage, and the server controls the cameras, security keyboards, fingerprint tokens, etc., by calling the client's WebSocket.

[0073] Information systems and operating devices can also be deployed on the same client computer. When the client enters the URL of the information system, the information system can directly call dynamic libraries to interact with devices such as cameras, security keyboards, and fingerprint tokens when requested, and perform hardware control on the cameras, security keyboards, and fingerprint tokens.

[0074] In one specific embodiment, step S102 above, which involves simultaneously authenticating the operator's identity using multiple operating devices, includes the following steps:

[0075] The fingerprint token is used to determine whether the current operator's fingerprint information matches the fingerprint information pre-stored in the fingerprint token.

[0076] If the fingerprint information of the current operator matches the fingerprint information pre-stored in the fingerprint token, then search the database for the identity information of the fingerprint token owner based on the fingerprint information.

[0077] Search for the identity information of the fingerprint token owner in the encrypted file or database of the information system. If the identity information of the fingerprint token owner is found, obtain the fingerprint information of the current operator through the security keyboard (with fingerprint recognition function). Determine whether the fingerprint information obtained by the security keyboard matches the fingerprint information pre-stored in the fingerprint token. If they match, determine that the operator of the fingerprint token and the operator of the security keyboard are the same person.

[0078] If the fingerprint information obtained by the security keyboard matches the fingerprint information pre-stored in the fingerprint token, the camera will capture the current operator's facial information. The system will then search the database for the identity information corresponding to the facial information. If the identity information corresponding to the facial information matches the identity information of the fingerprint token owner, the current operator's identity authentication will be successful.

[0079] In this embodiment of the invention, after the operator's identity is successfully authenticated, the safety of the operator's operating environment is also assessed. The operator's operation is only executed when the operating environment is determined to be safe. This can prevent the operator from operating the information system under the threat of knives or guns, which could lead to the theft of confidential information.

[0080] Figure 3 This is a flowchart of the information system operator authentication method provided in Embodiment 2 of the present invention. Figure 3 As shown, the information system operator authentication method provided in this embodiment includes the following steps:

[0081] S301, when an operator logs into the information system, the application key pre-set in the information system and the application key of the operating device are used to authenticate multiple operating devices;

[0082] S302, after successful authentication by multiple operating devices, the operator's identity is authenticated simultaneously through multiple operating devices;

[0083] S303, after successful operator authentication, uses a camera to determine whether the operator's operating environment is safe;

[0084] S304: When it is determined that the operating environment in which the operator is located is safe, the scope of the operator's authority is determined, and the operator's operation is performed within the scope of the operator's authority.

[0085] In step S301 above, authenticating the operating device includes the following steps:

[0086] When an operator logs into the information system, the information system issues a device authentication command;

[0087] Each operating device responds to the device authentication command by generating a 4-byte plaintext random number R using the security chip built into the operating device, encrypting the plaintext random number R using the application key key1 of the security chip to obtain a ciphertext random number R', concatenating the plaintext random number R and the ciphertext random number R' together to obtain a mixed random number R+R', performing encryption operations on the mixed random number R+R' to obtain the authentication code MAC, and sending the plaintext random number R, the ciphertext random number R', and the authentication code to the information system.

[0088] The information system extracts a plaintext random number R, a ciphertext random number R', and an authentication code MAC from the received data (since the data lengths of the plaintext random number, ciphertext random number, and authentication code are fixed, the corresponding data can be extracted based on the length of each part). Using the information system's application key key1, the serial number of the security chip is distributed to generate a second key key2. The second key key2 is used to encrypt the plaintext and ciphertext random numbers to obtain the authentication code MAC'. The obtained authentication code MAC' is compared with the extracted authentication code MAC; if they match, the received data has not been tampered with. Then, the second key key2 is used to decrypt the ciphertext random number R' to obtain the plaintext random number R''. The decrypted plaintext random number R'''' is compared with the extracted plaintext random number R''; if they match, authentication is successful.

[0089] In step S302 above, the operator's identity is authenticated simultaneously through multiple operating devices, including the following steps:

[0090] The fingerprint token is used to determine whether the current operator's fingerprint information matches the fingerprint information pre-stored in the fingerprint token.

[0091] If the fingerprint information of the current operator matches the fingerprint information pre-stored in the fingerprint token, then search the database for the identity information of the fingerprint token owner based on the fingerprint information.

[0092] Search for the identity information of the fingerprint token owner in the encrypted file or database of the information system. If the identity information of the fingerprint token owner is found, obtain the fingerprint information of the current operator through the security keyboard (with fingerprint recognition function). Determine whether the fingerprint information obtained by the security keyboard matches the fingerprint information pre-stored in the fingerprint token. If they match, determine that the operator of the fingerprint token and the operator of the security keyboard are the same person.

[0093] If the fingerprint information obtained by the security keyboard matches the fingerprint information pre-stored in the fingerprint token, the camera will capture the current operator's facial information. The system will then search the database for the identity information corresponding to the facial information. If the identity information corresponding to the facial information matches the identity information of the fingerprint token owner, the current operator's identity authentication will be successful.

[0094] In step S303 above, a camera with a counting function is used to determine whether there are other people or devices in the operator's operating environment that might be spying on the operation, or whether there are people or objects that could threaten the operator. This determines whether the operator is under direct security threat and whether they might be spied on, preventing situations where confidential information is leaked due to the operator being threatened with knives or guns. For example, if the camera detects the operator leaving the monitoring range, or if the camera detects a second person appearing within the monitoring range, the system is locked; if the camera detects that the operator has not operated the system for a period of time, the system is locked.

[0095] This invention primarily verifies the security of the input environment, aiming to ensure device security, operator correctness, and that the operator's personal safety is not directly threatened. It uses key authentication technology to confirm whether the operating device is the designated one, facial recognition and fingerprint verification to confirm the operator's identity, and camera counting technology to determine if there are any direct security threats or potential eavesdropping. Compared to existing technologies, this invention prevents the eavesdropping of confidential information when the operator is under threat of knives or guns, thus improving the security of the information system.

[0096] This invention also provides an authentication system. For example... Figure 4 As shown, this embodiment of the invention provides an authentication system for identifying operators of an information system, including multiple operating devices such as fingerprint tokens, secure keyboards, and cameras. Each operating device has a built-in security chip, with a pre-set application key and a pre-set application key in the information system. The application key of the security chip is obtained by distributing the application key of the information system. When an operator logs into the information system, the application key pre-set in the information system and the application keys of the operating devices are used to authenticate the multiple operating devices. After successful authentication on multiple operating devices, the operator's identity is simultaneously authenticated through all the operating devices.

[0097] The application key pre-configured in the information system is generated by distributing the information system's serial number using the authentication master key of the key management system. In a specific embodiment, the information system sends a key allocation request to the key management system, which contains the information system's serial number. The key management system responds to the key allocation request by distributing the information system's serial number using the authentication master key (key0) to generate a first key (key1) and sending it to the information system. The information system stores the received first key (key1) as its application key.

[0098] The information system stores the serial number of the security chip in an encrypted file or database. It also stores user roles, permissions, facial recognition information, fingerprint information, and other data in encrypted files or databases.

[0099] The fingerprint token stores the fingerprint information of a designated user. The secure keyboard has fingerprint recognition capabilities, capturing the user's fingerprint information when they touch the keyboard while typing, and can also be linked to the fingerprint information of a designated user. The camera can be a regular camera or a camera with a counting function, using camera counting technology to determine if there are other people nearby.

[0100] Operating devices such as fingerprint tokens, secure keyboards, and cameras all have built-in security chips with pre-installed application keys. These application keys are written into the security chip by the issuing device during chip issuance. The issuing device uses the authentication master key (key0) of the key management system to distribute the serial number of the information system, generating a first key (key1). Then, it uses key1 to distribute the serial number of the security chip, generating the application key for the security chip. The first key (key1) is identical to the application key of the information system.

[0101] In a specific embodiment, the process of generating the application key for the security chip is as follows: When issuing a security chip, the issuing device reads the serial number of the security chip and sends a key allocation request to the key management system. The key allocation request contains the serial number of the security chip and the serial number of the information system. The key management system responds to the key allocation request by using the authentication master key key0 to distribute the serial number of the information system and generate a first key key1 (the application key of the information system is consistent with the first key key1). The first key key1 is then used to distribute the serial number of the security chip and generate a second key key2. The second key key2 is then sent to the issuing device. The issuing device writes the received second key key2 into the security chip as the application key of the security chip.

[0102] Since the application key of the information system is the same as the first key key1, the application key of the security chip (i.e. the second key key2) is essentially the application key key1 of the information system distributed based on the serial number of the security chip. Therefore, there is a deducible distribution relationship between the application key key2 of the security chip and the application key key1 of the information system.

[0103] In a specific embodiment, the information system authenticates the operating device in the following way:

[0104] When an operator logs into the information system, the information system issues a device authentication command;

[0105] Each operating device responds to the device authentication command by generating a 4-byte plaintext random number R using the security chip built into the operating device, encrypting the plaintext random number R using the application key key1 of the security chip to obtain a ciphertext random number R', concatenating the plaintext random number R and the ciphertext random number R' together to obtain a mixed random number R+R', performing encryption operations on the mixed random number R+R' to obtain the authentication code MAC, and sending the plaintext random number R, the ciphertext random number R', and the authentication code to the information system.

[0106] The information system extracts a plaintext random number R, a ciphertext random number R', and an authentication code MAC from the received data (since the data lengths of the plaintext random number, ciphertext random number, and authentication code are fixed, the corresponding data can be extracted based on the length of each part). Using the information system's application key key1, the serial number of the security chip is distributed to generate a second key key2. The second key key2 is used to encrypt the plaintext and ciphertext random numbers to obtain the authentication code MAC'. The obtained authentication code MAC' is compared with the extracted authentication code MAC. If they match, the received data has not been tampered with. Then, the second key key2 is used to decrypt the ciphertext random number R' to obtain the plaintext random number R''. The decrypted plaintext random number R'''' is compared with the extracted plaintext random number R''. If they match, authentication is successful.

[0107] In a specific embodiment, the method by which multiple operating devices simultaneously authenticate the operator's identity is as follows:

[0108] The fingerprint token is used to determine whether the current operator's fingerprint information matches the fingerprint information pre-stored in the fingerprint token.

[0109] If the fingerprint information of the current operator matches the fingerprint information pre-stored in the fingerprint token, then search the database for the identity information of the fingerprint token owner based on the fingerprint information.

[0110] Search for the identity information of the fingerprint token owner in the encrypted file or database of the information system. If the identity information of the fingerprint token owner is found, obtain the fingerprint information of the current operator through the security keyboard (with fingerprint recognition function). Determine whether the fingerprint information obtained by the security keyboard matches the fingerprint information pre-stored in the fingerprint token. If they match, determine that the operator of the fingerprint token and the operator of the security keyboard are the same person.

[0111] If the fingerprint information obtained by the security keyboard matches the fingerprint information pre-stored in the fingerprint token, the camera will capture the current operator's facial information. The system will then search the database for the identity information corresponding to the facial information. If the identity information corresponding to the facial information matches the identity information of the fingerprint token owner, the current operator's identity authentication will be successful.

[0112] In a specific embodiment, the camera is a camera with a counting function. The camera can use counting technology to determine whether there are other people or devices in the operator's operating environment that might be spying on the operation, or whether there are people or objects that could threaten the operator. Therefore, it can be determined whether the operator is under direct security threat and whether there is a possibility of being spied on, avoiding situations where confidential information is leaked due to the operator operating the information system under threat of knives or guns. When determining the security of the operator's operating environment, the authentication system also determines the operator's authorization scope, executing the operator's operations within that scope.

[0113] This invention also provides a computer device, including: a memory and a processor, the memory storing a computer program, and the processor executing the computer program to implement the above-described information system operator authentication method.

[0114] This invention also provides a computer program product, including a computer program that, when executed by a processor, implements the above-described information system operator authentication method.

[0115] This invention also provides a machine-readable storage medium storing computer program instructions thereon, which, when executed by a processor, implement the aforementioned authentication method for information system operators.

[0116] Those skilled in the art will understand that embodiments of the present invention can be provided as methods, systems, or computer program products. Therefore, the present invention can take the form of a completely hardware embodiment, a completely software embodiment, or an embodiment combining software and hardware aspects. Furthermore, the present invention can take the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code. The solutions in the embodiments of the present invention can be implemented using various computer languages, such as the object-oriented programming language Java and the interpreted scripting language JavaScript.

[0117] This invention is described with reference to flowchart illustrations and / or block diagrams of methods, apparatus (systems), and computer program products according to embodiments of the invention. It will be understood that each block of the flowchart illustrations and / or block diagrams, and combinations of blocks in the flowchart illustrations and / or block diagrams, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, special-purpose computer, embedded processor, or other programmable data processing apparatus to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing apparatus, generate instructions for implementing the flowchart illustrations and / or block diagrams. Figure 1 a process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in one or more boxes.

[0118] These computer program instructions may also be stored in a computer readable memory that can direct a computer or other programmable data processing device to work in a specific manner, so that the instructions stored in the computer readable memory produce an article of manufacture comprising an instruction device, which implements the process Figure 1 a process or multiple processes and / or boxes Figure 1 The function specified in one or more boxes.

[0119] These computer program instructions can also be loaded onto a computer or other programmable data processing device so that a series of operational steps are executed on the computer or other programmable device to produce a computer-implemented process, thereby providing the instructions executed on the computer or other programmable device for implementing the process. Figure 1 a process or multiple processes and / or boxes Figure 1 A step that specifies a function in one or more boxes.

[0120] Although preferred embodiments of the invention have been described, those skilled in the art, upon learning the basic inventive concept, can make other changes and modifications to these embodiments. Therefore, the appended claims are intended to be interpreted as including both the preferred embodiments and all changes and modifications falling within the scope of the invention.

[0121] Obviously, those skilled in the art can make various modifications and variations to this invention without departing from its spirit and scope. Therefore, if these modifications and variations fall within the scope of the claims of this invention and their equivalents, this invention also intends to include these modifications and variations.

Claims

1. A method for authenticating an operator of an information system, characterized in that, include: When an operator logs into the information system, the system uses the application key pre-set in the information system and the application key pre-set in the security chip of multiple operating devices to authenticate multiple operating devices. The application key of the information system is generated by distributing the serial number of the information system through the authentication master key of the key management system. The application key of the security chip is generated by distributing the serial number of the information system using the authentication master key of the key management system, and then distributing the serial number of the security chip using the first key. The first key is consistent with the application key of the information system. The application key of the security chip is written into the security chip by the issuing device when the security chip is issued. After successful authentication on multiple operating devices, the operator's identity is simultaneously authenticated through these devices.

2. The method for authenticating information system operators according to claim 1, characterized in that, The process of distributing the serial number of the information system using the authentication master key of the key management system includes: The information system's serial number is used as a dispersion factor. The application key of the information system is obtained by XORing the authentication master key of the key management system with the dispersion factor.

3. The method for authenticating information system operators according to claim 1, characterized in that, The process of distributing the serial number of the information system using the authentication master key of the key management system includes: The serial number of the information system is used as a dispersion factor. The authentication master key of the key management system is XORed with the serial number of the information system to obtain the first key that is consistent with the application key of the information system. The step of distributing the serial number of the security chip using the first key includes: The serial number of the security chip is used as a dispersion factor. The application key of the security chip is obtained by XORing the serial number of the security chip with the first key.

4. The method for authenticating information system operators according to claim 1, characterized in that, The authentication of multiple operating devices using the application key pre-set in the information system and the application key of the operating device includes: When an operator logs into the information system, the information system issues a device authentication command; Each operating device responds to the device authentication command by generating a plaintext random number using the security chip built into the operating device, encrypting the plaintext random number using the application key of the security chip to obtain a ciphertext random number, concatenating the plaintext random number and the ciphertext random number to obtain a mixed random number, performing encryption operations on the mixed random number to obtain an authentication code, and sending the plaintext random number, ciphertext random number, and authentication code to the information system. The information system extracts plaintext random numbers, ciphertext random numbers, and authentication codes from the received data. It then uses the information system's application key to distribute the serial number of the security chip, generating a second key. This second key is used to encrypt the plaintext and ciphertext random numbers to obtain the authentication code. The obtained authentication code is compared with the extracted authentication code; if they match, the second key is used to decrypt the ciphertext random number to obtain the plaintext random number. This decrypted plaintext random number is then compared with the extracted plaintext random number; if they match, authentication is successful.

5. The method for authenticating information system operators according to claim 1, characterized in that, The operating device includes a fingerprint token, a secure keyboard, and a camera; The method of simultaneously authenticating the operator's identity through multiple operating devices includes: The fingerprint token is used to determine whether the current operator's fingerprint information matches the fingerprint information pre-stored in the fingerprint token. If the fingerprint information of the current operator matches the fingerprint information pre-stored in the fingerprint token, then search the database for the identity information of the fingerprint token owner based on the fingerprint information. Once the identity information of the fingerprint token owner is found, the fingerprint information of the current operator is obtained through the security keyboard, and it is determined whether the fingerprint information obtained by the security keyboard matches the fingerprint information pre-stored in the fingerprint token. If the fingerprint information obtained by the security keyboard matches the fingerprint information pre-stored in the fingerprint token, the camera will capture the current operator's facial information. The system will then search the database for the identity information corresponding to the facial information. If the identity information corresponding to the facial information matches the identity information of the fingerprint token owner, the current operator's identity authentication will be successful.

6. The method for authenticating information system operators according to claim 1, characterized in that, The method also includes: after the operator's identity is successfully authenticated, determining whether the operator's operating environment is safe through a camera.

7. The method for authenticating information system operators according to claim 6, characterized in that, The method further includes: When it is determined that the operator's operating environment is safe, the scope of the operator's authority should be assessed. Perform the operator's actions within the operator's authorized scope.

8. An authentication system for authenticating the identity of operators of an information system, characterized in that, The authentication system includes multiple operating devices, each of which has a built-in security chip, and the security chip has a pre-installed application key. The information system has a pre-set application key, which is generated by distributing the serial number of the information system using the authentication master key of the key management system. The application key of the security chip is generated by distributing the serial number of the information system using the authentication master key of the key management system, and then distributing the serial number of the security chip using the first key. The first key is consistent with the application key of the information system. The application key of the security chip is written into the security chip by the issuing device when the security chip is issued. The authentication system is used to authenticate multiple operating devices by using the application key pre-set in the information system and the application key of the operating device when the operator logs into the information system. After the multiple operating devices are successfully authenticated, the operator's identity is authenticated simultaneously through the multiple operating devices.

9. The authentication system according to claim 8, characterized in that, The authentication of multiple operating devices using the application key pre-set in the information system and the application key of the operating device includes: When an operator logs into the information system, the information system issues a device authentication command; Each operating device responds to the device authentication command by generating a plaintext random number using the security chip built into the operating device, encrypting the plaintext random number using the application key of the security chip to obtain a ciphertext random number, concatenating the plaintext random number and the ciphertext random number to obtain a mixed random number, performing encryption operations on the mixed random number to obtain an authentication code, and sending the plaintext random number, ciphertext random number, and authentication code to the information system. The information system extracts plaintext random numbers, ciphertext random numbers, and authentication codes from the received data. It then uses the information system's application key to distribute the serial number of the security chip, generating a second key. This second key is used to encrypt the plaintext and ciphertext random numbers to obtain the authentication code. The obtained authentication code is compared with the extracted authentication code; if they match, the second key is used to decrypt the ciphertext random number to obtain the plaintext random number. This decrypted plaintext random number is then compared with the extracted plaintext random number; if they match, authentication is successful.

10. The authentication system according to claim 8, characterized in that, The operating device includes a fingerprint token, a secure keyboard, and a camera; The method of simultaneously authenticating the operator's identity through multiple operating devices includes: The fingerprint token is used to determine whether the current operator's fingerprint information matches the fingerprint information pre-stored in the fingerprint token. If the fingerprint information of the current operator matches the fingerprint information pre-stored in the fingerprint token, then search the database for the identity information of the fingerprint token owner based on the fingerprint information. Once the identity information of the fingerprint token owner is found, the fingerprint information of the current operator is obtained through the security keyboard, and it is determined whether the fingerprint information obtained by the security keyboard matches the fingerprint information pre-stored in the fingerprint token. If the fingerprint information obtained by the security keyboard matches the fingerprint information pre-stored in the fingerprint token, the camera will capture the current operator's facial information. The system will then search the database for the identity information corresponding to the facial information. If the identity information corresponding to the facial information matches the identity information of the fingerprint token owner, the current operator's identity authentication will be successful.

11. The authentication system according to claim 10, characterized in that, The camera is also used to determine whether the operator's operating environment is safe after the operator's identity is successfully authenticated.

12. A computer device, characterized in that, include: Memory, which stores computer programs; A processor for executing the computer program to implement the information system operator authentication method according to any one of claims 1-7.

13. A computer program product, comprising a computer program, characterized in that, When the computer program is executed by a processor, it implements the authentication method for information system operators as described in any one of claims 1-7.

Images