Identity authentication system and method

Abstract

The invention relates to the technical field of safety terminals, and discloses an identity authentication system and method.The system comprises an intelligent password key, a wireless mouse and terminal equipment, after the intelligent password key is inserted into a USB interface of the wireless mouse, USB data are sent to the wireless mouse through the USB interface, and the USB interface is a clamping groove of a wireless receiver of the wireless mouse; a wireless mouse protocol conversion module of the wireless mouse is connected with the USB interface, and is used for receiving USB data, analyzing and converting the USB data to obtain a wireless signal, and sending the wireless signal to the terminal equipment through wireless communication; the terminal equipment is used for receiving the wireless signal and recovering the wireless signal to obtain USB data; and when the intelligent password key and the solid state disk pass the identity authentication, decrypting the data in the solid state disk. According to the invention, the intelligent password key is hidden. And the situation that the data are exposed outside and found by others is avoided, and user privacy and data security are protected.

Description

Technical Field

[0001] The present invention relates to the technical field of security terminals, and in particular to an identity authentication system and method. Background Art

[0002] Most of the security terminals on the market install a secure SSD (solid-state drive) into the terminal device, and bind the smart password key (ukey) carrying the key to the security terminal device through proprietary protocol authentication. When in use, the ukey must be inserted into the security terminal device for identity mutual recognition before it can be used, which can effectively protect the data security of terminal users.

[0003] In the related technology, for security solutions on the market, after the ukey is bound to the terminal (either one-to-one binding or one-to-many binding is possible), the ukey (smart password key) can be used to decrypt the bound terminal. However, in daily situations, users need to keep this unique ukey safe, or keep it plugged into the USB port of the terminal. Since the ukey is relatively small, it is not easy for users to save it in mobile office scenarios and it is easy to lose it. If the user chooses to keep the ukey plugged into the host, it will occupy a USB port of the host. Since the number of USB ports on mainstream terminals is relatively small, if the ukey is always plugged into the USB port of the host, it is easy for others to obtain the user's encrypted data, and security is difficult to guarantee. Summary of the invention

[0004] In view of this, the present invention provides an identity authentication system and method to solve the problem that ukey is inconvenient to use and the security is difficult to ensure.

[0005] In a first aspect, the present invention provides an identity authentication system, the system comprising: a smart password key, a wireless mouse and a terminal device:

[0006] After the smart password key is inserted into the USB interface of the wireless mouse, the USB data is sent to the wireless mouse through the USB interface. The USB data complies with the specification of the USB protocol. The USB interface is the card slot of the wireless receiver of the wireless mouse.

[0007] The wireless mouse protocol conversion module of the wireless mouse is connected to the USB interface, and is used to receive USB data, parse and convert the USB data to obtain a wireless signal, and send the wireless signal to the terminal device through wireless communication. The wireless signal complies with the specification of the wireless communication protocol;

[0008] The terminal device is used to receive wireless signals, recover the wireless signals to obtain USB data; based on the USB data, determine whether the smart password key and the solid-state hard disk have passed the identity authentication, and when the smart password key and the solid-state hard disk have passed the identity authentication, decrypt the data in the solid-state hard disk.

[0009] In the present invention, by inserting the smart password key into the card slot of the wireless receiver in the wireless mouse, the smart password key and the mouse circuit board establish a connection through the USB protocol, which helps users solve the storage, safety concerns and privacy issues encountered in the daily use of ukeys, realizes the hiding of the smart password key, and makes reasonable use of the idle space of the wireless mouse; at the same time, it reduces the occupation of the host USB interface by the smart password key, and frees up the USB port for other peripherals used by the user. The smart password key does not need to be connected to the terminal, avoiding exposure to the outside and being discovered by others, protecting user privacy and data security, and greatly improving the user experience. The protocol conversion module allows the data of the smart password key ukey to communicate through the receiver of the wireless mouse, without the need to add other hardware, reducing the manufacturing cost.

[0010] In an optional implementation, the appearance of the smart password key is the same as the wireless receiver of the wireless mouse and is placed in the USB port of the wireless mouse.

[0011] In this way, when the user uses the wireless mouse, the wireless mouse receiver will be taken out and inserted into the USB interface of the terminal, and the USB interface of the wireless mouse receiver will be idle. Therefore, by setting the appearance of the smart password key to be the same as the wireless receiver of the wireless mouse, the smart password key can be hidden in the card slot of the wireless mouse receiver, thereby realizing the hiding of the smart password key and the rational use of the idle space of the wireless mouse, and at the same time, it can reduce the occupation of the host USB interface by ukey. At the same time, the ukey does not need to be connected to the terminal and exposed to the outside, avoiding the ukey from being discovered by others, which not only protects the user's privacy, but also protects the user's data security.

[0012] In an optional implementation, the wireless mouse protocol conversion module includes a conversion control unit and a wireless communication module:

[0013] The conversion control unit is used to identify the smart password key through the USB interface; after the smart password key is identified, receive USB data, encrypt the USB data, and obtain encrypted USB data; extract the encrypted USB data to obtain application layer data of the encrypted USB data; re-encapsulate the application layer data to obtain a wireless data packet, and send the wireless data packet to the wireless communication module, the wireless data packet conforming to the specification of the wireless communication protocol; modulate and encode the wireless data packet to obtain a wireless signal;

[0014] The wireless communication module is used to send wireless signals to the terminal device.

[0015] In this method, since the application layer data is the data content that actually needs to be transmitted, it contains the user's specific information and operation instructions and is the core part of the communication. Therefore, through the conversion control unit, the USB data of the smart password key is extracted from the application layer data and then encapsulated into a wireless signal that complies with the wireless communication protocol, thereby realizing the conversion between the USB protocol and the wireless communication protocol, which facilitates the terminal device to realize identity authentication and data decryption.

[0016] In an optional embodiment, the conversion control unit is also used to set data transmission parameters according to the USB protocol, and based on the data transmission parameters, determine whether the data volume of the application layer data is greater than the data volume of the maximum data packet transmitted by the wireless communication module; when the data volume of the application layer data is greater than the data volume of the maximum data packet transmitted by the wireless communication module, the application layer data is fragmented, and each fragment and the header information and tail information of the wireless communication protocol are encapsulated to obtain a wireless data packet corresponding to each fragment.

[0017] In this method, the conversion control unit sets the data transmission parameters according to the USB protocol, determines the data packet size and transmission rate, and performs processing such as segmentation on the application layer data based on the data transmission parameters to ensure that the data can be effectively transmitted between the smart password key and the wireless mouse.

[0018] In an optional implementation, the terminal device is used to receive a wireless signal through an antenna; amplify and filter the wireless signal to obtain an analog signal; demodulate the analog signal to restore the encrypted USB data; and decrypt the encrypted USB data using the same encryption algorithm as the wireless mouse to obtain USB data.

[0019] In this method, the terminal device receives and demodulates the received wireless signal, decrypts the wireless signal using the same encryption algorithm as the wireless mouse, and restores the USB data, making it easier for the terminal device to use the USB data to bind the solid-state drive to the smart password key.

[0020] In an optional embodiment, the terminal device is also used to create a certificate container corresponding to the solid-state hard disk in the smart password key according to different solid-state hard disks, and the certificate container includes the digital certificate of the solid-state hard disk; based on the identity authentication relationship between the certificate container, the smart password key and the solid-state hard disk, a certificate container management file is created, and the certificate container management file includes the handle information of the certificate container; after the smart password key is inserted into the USB interface, based on the handle information corresponding to the current solid-state hard disk, the certificate container corresponding to the handle information is traversed to determine, the digital certificate in the certificate container is read, and the solid-state hard disk is authenticated; after the solid-state hard disk authentication passes, it is confirmed that the smart password key and the solid-state hard disk have passed the authentication.

[0021] In this method, corresponding certificate containers are created according to different solid-state drives, and a certificate container management file is created based on the identity authentication relationship between the certificate container, the smart password key and the solid-state drive. When switching logins, the certificate container can be determined based on the handle information, and then the solid-state drive can be authenticated. If the authentication is passed, the login is confirmed to be successful, thus realizing the identity authentication between the smart password key and the solid-state drive.

[0022] In a second aspect, the present invention provides an identity authentication method, which is applied to an identity authentication system as in any one of the first aspects, the system comprising a smart password key, a wireless mouse and a terminal device, and the method comprises:

[0023] After the smart password key is inserted into the USB interface of the wireless mouse, the wireless mouse parses and converts the USB data into a wireless signal, which complies with the specifications of the wireless communication protocol;

[0024] The terminal device recovers the wireless signal to obtain USB data;

[0025] Based on the USB data, determine whether the smart password key and the solid state drive have passed the identity authentication;

[0026] When the smart password key and the solid state drive pass identity authentication, the data in the solid state drive is decrypted.

[0027] In the present invention, after the smart password key is inserted into the USB interface of the wireless mouse, the USB data is converted into a wireless signal through the wireless mouse, the terminal device receives and restores the wireless signal to USB data, and uses the USB data for identity authentication. When the smart password key and the solid-state hard disk in the terminal device pass the identity authentication, the data of the solid-state hard disk is decrypted, thereby realizing secure decryption and improving the user experience.

[0028] In an optional implementation, parsing and converting USB data to obtain wireless signals includes:

[0029] Identify the smart password key through the USB interface;

[0030] After the smart password key is recognized, the USB data is encrypted to obtain the encrypted USB data;

[0031] Extracting the encrypted USB data to obtain application layer data of the encrypted USB data;

[0032] Re-encapsulate the application layer data to obtain a wireless data packet, and send the wireless data packet to the wireless communication module, where the wireless data packet complies with the specification of the wireless communication protocol;

[0033] The wireless data packet is modulated and encoded to obtain a wireless signal.

[0034] In this method, the USB data is encrypted, the application layer data is extracted from the encrypted USB data, and encapsulated into a wireless signal that complies with the wireless communication protocol, thereby realizing the conversion between the USB protocol and the wireless communication protocol, facilitating identity authentication and data decryption.

[0035] In an optional implementation manner, the terminal device recovers the wireless signal to obtain USB data, including:

[0036] Perform signal amplification and filtering operations on the wireless signal to obtain an analog signal;

[0037] Demodulate the analog signal and restore the encrypted USB data;

[0038] The encrypted USB data is decrypted using the same encryption algorithm as the wireless mouse to obtain the USB data.

[0039] In this method, the terminal device receives and demodulates the received wireless signal, and uses the same encryption algorithm as the wireless mouse to decrypt the wireless signal and restore the USB data. The USB data can be used to bind the solid-state drive to the smart password key.

[0040] In an optional embodiment, the method further includes:

[0041] Creating a certificate container corresponding to the solid-state drive in the smart password key according to different solid-state drives, the certificate container including the digital certificate of the solid-state drive;

[0042] Based on the identity authentication relationship between the certificate container, the smart password key and the solid state drive, a certificate container management file is created, and the certificate container management file includes handle information of the certificate container;

[0043] After the smart password key is inserted into the USB interface, based on the handle information corresponding to the current solid-state hard disk, the certificate container corresponding to the handle information is traversed and determined, the digital certificate in the certificate container is read, and the identity of the solid-state hard disk is authenticated;

[0044] After the SSD identity authentication is passed, confirm that the smart password key and the SSD have passed the identity authentication.

[0045] In this method, by creating a certificate container corresponding to the solid-state drive, a certificate container management file is created based on the identity authentication relationship between the certificate container, the smart password key and the solid-state drive. When switching logins, the certificate container can be determined based on the handle information, and then the solid-state drive can be authenticated. If the authentication is passed, the login is confirmed to be successful, thus realizing the identity authentication between the smart password key and the solid-state drive. BRIEF DESCRIPTION OF THE DRAWINGS

[0046] In order to more clearly illustrate the specific implementation methods of the present invention or the technical solutions in the prior art, the drawings required for use in the specific implementation methods or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are some implementation methods of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0047] Figure 1 Schematic diagram of the structure of an identity authentication system according to an embodiment of the present invention.

[0048] Figure 2 It is a schematic diagram of the structure of a ukey according to an embodiment of the present invention.

[0049] Figure 3 It is a schematic diagram of a ukey hidden in a slot according to an embodiment of the present invention.

[0050] Figure 4 It is a structural schematic diagram of a wireless mouse protocol conversion module according to an embodiment of the present invention.

[0051] Figure 5 It is a flowchart of a ukey binding work according to an embodiment of the present invention.

[0052] Figure 6 is a flow chart of an identity authentication method according to an embodiment of the present invention. DETAILED DESCRIPTION

[0053] In order to make the purpose, technical solution and advantages of the embodiments of the present invention clearer, the technical solution in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative work are within the scope of protection of the present invention.

[0054] In the related technology, for security solutions on the market, after the ukey is bound to the terminal (either one-to-one binding or one-to-many binding is possible), the ukey (smart password key) can be used to decrypt the bound terminal. However, in daily situations, users need to keep this unique ukey safe, or keep it plugged into the USB port of the terminal. Since the ukey is relatively small, it is not easy for users to save it in mobile office scenarios and it is easy to lose it. If the user chooses to keep the ukey plugged into the host, it will occupy a USB port of the host. Since the number of USB ports on mainstream terminals is relatively small, if the ukey is always plugged into the USB port of the host, it is easy for others to obtain the user's encrypted data, and security is difficult to guarantee.

[0055] To solve the above problems, an identity authentication system is provided in an embodiment of the present invention. The identity authentication system in this embodiment is suitable for the use scenario of using a smart password key to decrypt the bound terminal. The identity authentication system provided by the present invention, by inserting the smart password key into the card slot of the wireless receiver in the wireless mouse, the smart password key and the mouse circuit board establish a connection through the USB protocol, which helps users solve the storage and security concerns and privacy issues encountered in the daily use of ukey, realizes the hiding of the smart password key, and makes reasonable use of the idle space of the infinite mouse; at the same time, it reduces the occupation of the host USB interface by the smart password key, and frees up the USB port for other peripherals used by the user. The smart password key does not need to be connected to the terminal, avoiding exposure to the outside and being discovered by others, protecting user privacy and data security, and greatly improving the user experience. The protocol conversion module allows the data of the smart password key ukey to communicate through the receiver of the wireless mouse, without the need to add other hardware, reducing the manufacturing cost.

[0056] According to an embodiment of the present invention, an embodiment of an identity authentication system is provided. Figure 1 is a schematic diagram of the structure of an identity authentication system according to an embodiment of the present invention. Figure 1 As shown, the identity authentication system includes: a smart password key 10, a wireless mouse 20 and a terminal device 30: after the smart password key 10 is inserted into the USB interface of the wireless mouse 20, the USB data is sent to the wireless mouse 20 through the USB interface, and the USB data complies with the specification of the USB protocol. The USB interface is a card slot of the wireless receiver of the wireless mouse 20; the wireless mouse protocol conversion module of the wireless mouse 20 is connected to the USB interface, and is used to receive USB data, parse and convert the USB data to obtain a wireless signal, and send the wireless signal to the terminal device 30 through wireless communication, and the wireless signal complies with the specification of the wireless communication protocol; the terminal device 30 is used to receive the wireless signal, and restore the wireless signal to obtain the USB data; based on the USB data, it is determined whether the smart password key 10 and the solid state drive have passed the identity authentication, and when the smart password key 10 and the solid state drive have passed the identity authentication, the data in the solid state drive is decrypted.

[0057] In an optional implementation, the appearance of the smart password key 10 is the same as the wireless receiver of the wireless mouse 20 , and is placed in the USB port of the wireless mouse 20 .

[0058] In one example, Figure 2 is a schematic diagram of a structure of a ukey according to an embodiment of the present invention, such as Figure 2As shown, the appearance of the ukey is the same as that of the wireless mouse receiver. Compared with the traditional wireless mouse, the wireless mouse has a receiver slot that is only used to store the receiver, which is converted into a USB interface. The USB interface is connected to the wireless mouse motherboard; the receiver is normally inserted into the USB interface. When the ukey is used, take out the wireless mouse receiver and insert it into the terminal USB interface, and the USB interface of the wireless mouse receiver will be free. Figure 3 FIG. 1 is a schematic diagram of a ukey hidden in a slot according to an embodiment of the present invention. Figure 3 As shown, insert the ukey into the receiver USB port, and the ukey and wireless mouse will establish a connection through the USB protocol.

[0059] In this way, when the user uses the wireless mouse, the wireless mouse receiver will be taken out and inserted into the USB interface of the terminal, and the USB interface of the wireless mouse receiver will be idle. Therefore, by setting the appearance of the smart password key to be the same as the wireless receiver of the wireless mouse, the smart password key can be hidden in the card slot of the wireless mouse receiver, thereby realizing the hiding of the smart password key and the rational use of the idle space of the wireless mouse, and at the same time, it can reduce the occupation of the host USB interface by ukey. At the same time, the ukey does not need to be connected to the terminal and exposed to the outside, avoiding the ukey from being discovered by others, which not only protects the user's privacy, but also protects the user's data security.

[0060] In an optional embodiment, the wireless mouse protocol conversion module includes a conversion control unit and a wireless communication module: the conversion control unit is used to identify the smart password key through the USB interface; after the smart password key is identified, the USB data is received, the USB data is encrypted, and the encrypted USB data is obtained; the encrypted USB data is extracted to obtain the application layer data of the encrypted USB data; the application layer data is repackaged to obtain a wireless data packet, and the wireless data packet is sent to the wireless communication module, and the wireless data packet complies with the specifications of the wireless communication protocol; the wireless data packet is modulated and encoded to obtain a wireless signal; the wireless communication module is used to send the wireless signal to the terminal device.

[0061] In one example, Figure 4 is a schematic diagram of the structure of a wireless mouse protocol conversion module according to an embodiment of the present invention. Figure 4 As shown, the wireless mouse protocol conversion module may include a USB interface, a protocol conversion chip, a conversion control unit, an MCU and a 2.4G wireless transmission module, which are integrated inside the wireless mouse to realize the conversion between the USB protocol and the 2.4G wireless communication protocol. The functions of the conversion control unit (MCU) may include:

[0062] Control and coordination: MCU is responsible for controlling each step in the protocol conversion process, including the initialization of the USB interface, enumeration of the Ukey device, data transmission settings, etc.

[0063] Data processing: The MCU encrypts, parses, segments, and encapsulates the received data to meet the requirements of the 2.4GHz wireless communication protocol.

[0064] Protocol conversion: The MCU analyzes the USB data packet structure, extracts the application layer data, and converts it into a format suitable for wireless transmission.

[0065] Modulation and coding: The MCU is responsible for modulating and encoding the encapsulated data packets to facilitate the transmission of wireless signals.

[0066] Signal management: MCU may also be involved in signal reception, demodulation and synchronization management to ensure the reliability and stability of data transmission.

[0067] Security control: The security module in the MCU is responsible for using encryption algorithms to protect the security of data transmission and prevent unauthorized access to data.

[0068] In this method, since the application layer data is the data content that actually needs to be transmitted, it contains the user's specific information and operation instructions and is the core part of the communication. Therefore, through the conversion control unit, the USB data of the smart password key is extracted from the application layer data and then encapsulated into a wireless signal that complies with the wireless communication protocol, thereby realizing the conversion between the USB protocol and the wireless communication protocol, which facilitates the terminal device to realize identity authentication and data decryption.

[0069] In an optional embodiment, the conversion control unit is also used to set data transmission parameters according to the USB protocol, and based on the data transmission parameters, determine whether the data volume of the application layer data is greater than the data volume of the maximum data packet transmitted by the wireless communication module; when the data volume of the application layer data is greater than the data volume of the maximum data packet transmitted by the wireless communication module, the application layer data is fragmented, and each fragment and the header information and tail information of the wireless communication protocol are encapsulated to obtain a wireless data packet corresponding to each fragment.

[0070] In one example, the conversion control unit is used to convert the USB protocol into the 2.4G protocol. Specifically, the conversion process includes:

[0071] 1. USB interface initialization: The USB interface on the wireless mouse device is configured as host mode so that it can communicate with the Ukey device. The initialization process includes setting the power management, clock and data signal lines of the USB interface. The USB interface is equivalent to the above-mentioned slot and the mouse wireless receiver card slot. The traditional slot for placing the wireless receiver is further expanded to realize the function of the USB port and can be converted to the 2.4G protocol through the conversion steps in the document.

[0072] 2. Ukey device enumeration: MCU sends an enumeration request through the USB interface to identify the connected Ukey device. This step involves the exchange of device descriptors, configuration descriptors, and interface descriptors defined in the USB standard. Specifically, the specific steps to implement the enumeration of ukey include: the USB interface on the wireless mouse device is configured to host mode to communicate with the Ukey device. MCU sends an enumeration request through the USB interface to identify the connected Ukey device. This involves the exchange of device descriptors, configuration descriptors, and interface descriptors defined in the USB standard.

[0073] 3. Data transfer settings: After the Ukey device is successfully identified, the MCU sets the data transfer parameters according to the USB protocol, such as the transfer type (control transfer, bulk transfer, interrupt transfer or isochronous transfer), data packet size and transfer rate. After the Ukey device is identified, the MCU sets the data transfer parameters according to the USB protocol, including the transfer type (control transfer, bulk transfer, interrupt transfer or isochronous transfer). Determine the data packet size and transfer rate to ensure that data can be effectively transferred between the Ukey and the wireless mouse.

[0074] 4. Data encryption process: The security module in the MCU encrypts the received USB data using an encryption algorithm (such as AES, RSA). The encryption process involves key exchange, generation of initialization vector (IV) and selection of encryption mode (such as ECB, CBC, CTR). The security module in the MCU encrypts the received USB data using an encryption algorithm (such as AES, RSA). The encryption process involves key exchange, generation of initialization vector (IV) and selection of encryption mode (such as ECB, CBC, CTR).

[0075] 5. Protocol parsing and conversion: Since the application layer data is the data content that actually needs to be transmitted, it contains the user's specific information and operation instructions and is the core part of the communication. Therefore, the application layer data is extracted. The MCU analyzes the structure of the USB data packet, extracts the application layer data, and repackages the data according to the requirements of the 2.4GHz wireless communication protocol. This involves operations such as data segmentation, adding the wireless communication protocol header and tail, and calculating the checksum.

[0076] Specifically, the specific steps of calculating the checksum may include: 1) MCU captures the data packet sent from the Ukey device through the USB interface. 2) Parses the captured data packet and extracts the application layer data. 3) In the process of encapsulating the data into a wireless data packet, calculates the checksum or CRC to detect whether an error occurs during the transmission process and adds it to the tail information of the wireless communication protocol.

[0077] The data packet capture includes: the MCU first captures the data packets sent from the Ukey device through the USB interface. These data packets may contain control information, data transmission and status information.

[0078] Packet parsing includes: MCU parses the captured USB packets to identify and extract application layer data. USB packets include the following parts: a. Header information: including device address, endpoint information, transmission type, etc. b. Payload: application layer data, which is the actual data content that needs to be transmitted (ukey internal information). c. Tail information: including checksum, packet tail flag, etc.

[0079] Data fragmentation includes: If the size of the application layer data exceeds the maximum data packet size that the 2.4GHz wireless communication module can handle, the MCU needs to fragment the data. Each fragment will be transmitted as an independent wireless data packet and reassembled at the receiving end.

[0080] The protocol header and tail addition includes: MCU adds the necessary wireless communication protocol header and tail information for each slice. This information may include: a. Source address and destination address: Identify the sender and receiver of the data. b. Sequence number: Used to ensure the order and integrity of the data packet. c. Checksum or CRC: Used to detect whether there is an error during the transmission process.

[0081] Data encapsulation includes: The encapsulation process involves combining application layer data, protocol header and tail information into a complete wireless data packet. The MCU needs to ensure that the encapsulated data packet complies with the specifications of the 2.4GHz wireless communication protocol.

[0082] 6. Modulation and Coding: The wireless communication module uses appropriate modulation technology to convert digital signals into analog signals. The GFSK (Gaussian Frequency Shift Keying) modulation technology can provide good bandwidth efficiency and anti-interference performance, which is suitable for wireless communication in the 2.4GHz frequency band. Among them, the frequency change of the GFSK signal is proportional to the output of the Gaussian function, thereby realizing the modulation of the signal. In the GFSK modulation process, the "1" and "0" of the digital signal are represented as different frequencies, and the Gaussian filter is used to smooth the edges of the frequency change to reduce the bandwidth occupancy of the signal and improve the spectrum efficiency.

[0083] Specifically, the specific steps of implementing modulation and coding may include:

[0084] 1) Data encapsulation: First, the MCU combines the application layer data, protocol header and tail information into a complete wireless data packet, ensuring that the encapsulated data packet complies with the specifications of the 2.4GHz wireless communication protocol.

[0085] 2) Modulation: Use appropriate modulation technology to convert digital signals into analog signals suitable for wireless transmission. In this solution, GFSK modulation technology is used.

[0086] 3) Coding: To increase the reliability of the signal, the modulated signal is coded, which may include error detection and correction mechanisms.

[0087] 7. Wireless signal transmission: The wireless communication module transmits the modulated wireless signal through the antenna. To ensure the reliability of the signal, it may be necessary to adjust the transmission power, select a suitable antenna, and consider the propagation characteristics of the signal.

[0088] In this method, the conversion control unit sets the data transmission parameters according to the USB protocol, determines the data packet size and transmission rate, and performs processing such as segmentation on the application layer data based on the data transmission parameters to ensure that the data can be effectively transmitted between the smart password key and the wireless mouse.

[0089] In an optional implementation, the terminal device is used to receive a wireless signal through an antenna; amplify and filter the wireless signal to obtain an analog signal; demodulate the analog signal to restore the encrypted USB data; and decrypt the encrypted USB data using the same encryption algorithm as the wireless mouse to obtain USB data.

[0090] In one example, the wireless receiver of the terminal device captures the wireless signal and converts it back to a digital signal through a demodulation process. The demodulation algorithm needs to match the modulation technology of the wireless mouse device.

[0091] Specifically, the specific steps to achieve signal reception and demodulation are:

[0092] 1) Signal reception: The wireless receiver of the terminal device captures the wireless signal through the antenna.

[0093] 2) Signal amplification: The received signal usually needs to be amplified first to increase the signal strength.

[0094] 3) Filtering: Remove noise and interference from the signal through filters.

[0095] 4) Demodulation: Convert the analog signal back to a digital signal. The demodulation process needs to match the modulation technology used by the wireless mouse (such as GFSK).

[0096] 5) Signal synchronization: Ensure that the clock at the receiving end is synchronized with the sending end to correctly demodulate the signal.

[0097] 6) Error Correction: If error correction codes were included in the encoding stage, error detection and correction will be performed here.

[0098] The USB driver or security module on the terminal device decrypts the received encrypted data and restores the original USB data packet. The decryption process needs to use the same encryption algorithm and key as the wireless mouse device. Specific steps to achieve data decryption:

[0099] 1) Ciphertext reception: The USB driver or security module on the terminal device receives the encrypted data transmitted wirelessly.

[0100] 2) Key preparation: Make sure the terminal device has the correct decryption key paired with Ukey.

[0101] 3) Decryption operation: Use the same encryption algorithm as the wireless mouse device to decrypt and restore the encrypted data to the original USB data packet.

[0102] 4) Verification: Check the integrity and correctness of the decrypted data to ensure that the data has not been tampered with during transmission.

[0103] In this method, the terminal device receives and demodulates the received wireless signal, decrypts the wireless signal using the same encryption algorithm as the wireless mouse, and restores the USB data, making it easier for the terminal device to use the USB data to bind the solid-state drive to the smart password key.

[0104] In an optional embodiment, the terminal device 30 is also used to create a certificate container corresponding to the solid-state hard disk in the smart password key 10 according to different solid-state hard disks, and the certificate container includes the digital certificate of the solid-state hard disk; based on the identity authentication relationship between the certificate container, the smart password key 10 and the solid-state hard disk, a certificate container management file is created, and the certificate container management file includes the handle information of the certificate container; after the smart password key is inserted into the USB interface, based on the handle information corresponding to the current solid-state hard disk, the certificate container corresponding to the handle information is traversed to determine, the digital certificate in the certificate container is read, and the solid-state hard disk is authenticated; after the solid-state hard disk authentication is passed, it is confirmed that the smart password key 10 and the solid-state hard disk have passed the authentication.

[0105] In one example, SSD is the abbreviation of solid-state drive, which is usually stored in the hard disk slot of the terminal and is used to store user data for the terminal device. Ukey is an intelligent password key, similar to the form of a U shield. By binding ukey with SSD, the encrypted data in the SSD can be unlocked and locked. SSD is a secure SSD that can realize data self-encryption. After binding ukey and SSD through software, it is equivalent to establishing a mutual identity authentication relationship between ukey and SSD. When ukey is inserted into the USB port of the terminal, ukey and the secure SSD in the terminal can communicate through the USB protocol. At this time, mutual identity authentication between ukey and SSD can be realized. If the authentication is passed (that is, the mutual binding relationship), the data in the SSD can be securely decrypted. Figure 5 is a schematic diagram of a process of ukey binding work according to an embodiment of the present invention, such as Figure 5 As shown, the ukey binding work may include: in the smart password key, a corresponding certificate container is created according to the identification information of different secure SSDs, the certificate container carries the identification information of the secure SSD, and the digital certificate applied for by the secure SSD through the identification information such as sn required is stored in the certificate container. In the smart password key, a certificate container management file is created according to the binding relationship between different certificate containers and secure SSDs, and the handle information of different certificate containers is set in the certificate container management file. In the smart password key, a secure SSD is selected for login authentication, the corresponding handle information is traversed in the certificate container management file, and the corresponding certificate container is located according to the handle information, the digital certificate in the corresponding certificate container is read, and the information in the digital certificate is authenticated. When switching login, that is, the smart password key is inserted into other secure SSDs, the corresponding handle information is traversed again in the certificate container management file, and the corresponding certificate container is located according to the handle information, the digital certificate in the certificate container is read, and the identification information of the secure SSD is authenticated. If the authentication is passed, the login is considered successful.

[0106] In this method, corresponding certificate containers are created according to different solid-state drives, and a certificate container management file is created based on the identity authentication relationship between the certificate container, the smart password key and the solid-state drive. When switching logins, the certificate container can be determined based on the handle information, and then the solid-state drive can be authenticated. If the authentication is passed, the login is confirmed to be successful, thus realizing the identity authentication between the smart password key and the solid-state drive.

[0107] The identity authentication system provided in this embodiment helps users solve the storage, safety and privacy issues encountered in daily use of ukeys by inserting the smart password key into the card slot of the wireless receiver in the wireless mouse, and the smart password key and the mouse circuit board are connected through the USB protocol, so as to hide the smart password key and make reasonable use of the idle space of the wireless mouse; at the same time, it reduces the occupation of the host USB interface by the smart password key, and frees up the USB port for other peripherals used by the user. The smart password key does not need to be connected to the terminal, which avoids being exposed to the outside and discovered by others, protects user privacy and data security, and greatly improves the user experience. The protocol conversion module allows the data of the smart password key ukey to communicate through the receiver of the wireless mouse, without the need to add other hardware, reducing manufacturing costs.

[0108] In this embodiment, an identity authentication method is provided, which can be used in the above-mentioned identity authentication system, the system includes a smart password key, a wireless mouse and a terminal device. Figure 6 is a flow chart of an identity authentication method according to an embodiment of the present invention. Figure 6 As shown, the process includes the following steps:

[0109] Step S601, after the smart password key is inserted into the USB interface of the wireless mouse, the wireless mouse parses and converts the USB data to obtain a wireless signal.

[0110] In the embodiment of the present invention, the wireless signal complies with the specification of the wireless communication protocol.

[0111] In an optional implementation, the USB data is parsed and converted to obtain a wireless signal, including: identifying a smart password key through a USB interface; after the smart password key is identified, encrypting the USB data to obtain encrypted USB data; extracting the encrypted USB data to obtain application layer data of the encrypted USB data; repackaging the application layer data to obtain a wireless data packet, sending the wireless data packet to a wireless communication module, the wireless data packet conforming to the specifications of the wireless communication protocol; modulating and encoding the wireless data packet to obtain a wireless signal.

[0112] In one example, converting the USB protocol to the 2.4G protocol includes: 1. USB interface initialization: The USB interface on the wireless mouse device is configured to host mode so that it can communicate with the Ukey device. The initialization process includes setting the power management, clock and data signal lines of the USB interface. The USB interface is equivalent to the above-mentioned slot and the mouse wireless receiver card slot. The traditional slot for placing the wireless receiver is further expanded to realize the function of the USB port and can be converted to the 2.4G protocol through the conversion steps in the document.

[0113] 2. Ukey device enumeration: MCU sends an enumeration request through the USB interface to identify the connected Ukey device. This step involves the exchange of device descriptors, configuration descriptors, and interface descriptors defined in the USB standard. Specifically, the specific steps to implement the enumeration of ukey include: the USB interface on the wireless mouse device is configured to host mode to communicate with the Ukey device. MCU sends an enumeration request through the USB interface to identify the connected Ukey device. This involves the exchange of device descriptors, configuration descriptors, and interface descriptors defined in the USB standard.

[0114] 3. Data transfer settings: After the Ukey device is successfully identified, the MCU sets the data transfer parameters according to the USB protocol, such as the transfer type (control transfer, bulk transfer, interrupt transfer or isochronous transfer), data packet size and transfer rate. After the Ukey device is identified, the MCU sets the data transfer parameters according to the USB protocol, including the transfer type (control transfer, bulk transfer, interrupt transfer or isochronous transfer). Determine the data packet size and transfer rate to ensure that data can be effectively transferred between the Ukey and the wireless mouse.

[0115] 4. Data encryption process: The security module in the MCU encrypts the received USB data using an encryption algorithm (such as AES, RSA). The encryption process involves key exchange, generation of initialization vector (IV) and selection of encryption mode (such as ECB, CBC, CTR). The security module in the MCU encrypts the received USB data using an encryption algorithm (such as AES, RSA). The encryption process involves key exchange, generation of initialization vector (IV) and selection of encryption mode (such as ECB, CBC, CTR).

[0116] 5. Protocol parsing and conversion: Since the application layer data is the data content that actually needs to be transmitted, it contains the user's specific information and operation instructions and is the core part of the communication. Therefore, the application layer data is extracted. The MCU analyzes the structure of the USB data packet, extracts the application layer data, and repackages the data according to the requirements of the 2.4GHz wireless communication protocol. This involves operations such as data segmentation, adding the wireless communication protocol header and tail, and calculating the checksum.

[0117] Specifically, the specific steps for calculating the checksum may include: 1) MCU captures the data packet sent from the Ukey device through the USB interface. 2) Parse the captured data packet and extract the application layer data. 3) In the process of encapsulating the data into a wireless data packet, calculate the checksum or CRC to detect whether an error occurs during the transmission process and add it to the tail information of the wireless communication protocol. Among them, data packet capture includes: MCU first captures the data packet sent from the Ukey device through the USB interface. These data packets may contain control information, data transmission and status information. Data packet parsing includes: MCU parses the captured USB data packet to identify and extract the application layer data. The USB data packet includes the following parts: a. Header information: including device address, endpoint information, transmission type, etc. b. Payload: that is, application layer data, which is the actual data content that needs to be transmitted (ukey internal information). c. Tail information: including checksum, packet tail flag, etc. Data fragmentation includes: if the size of the application layer data exceeds the maximum data packet size that the 2.4GHz wireless communication module can handle, the MCU needs to fragment the data. Each fragment will be transmitted as an independent wireless data packet and reassembled at the receiving end. Protocol header and tail addition includes: MCU adds necessary wireless communication protocol header and tail information for each slice. This information may include: a. Source address and destination address: Identify the sender and receiver of the data. b. Sequence number: Used to ensure the order and integrity of the data packet. c. Checksum or CRC: Used to detect whether errors occur during transmission. Data encapsulation includes: The encapsulation process involves combining application layer data, protocol header and tail information into a complete wireless data packet. The MCU needs to ensure that the encapsulated data packet complies with the specifications of the 2.4GHz wireless communication protocol.

[0118] 6. Modulation and Coding: The wireless communication module uses appropriate modulation technology to convert digital signals into analog signals. The GFSK (Gaussian Frequency Shift Keying) modulation technology can provide good bandwidth efficiency and anti-interference performance, which is suitable for wireless communication in the 2.4GHz frequency band. Among them, the frequency change of the GFSK signal is proportional to the output of the Gaussian function, thereby realizing the modulation of the signal. In the GFSK modulation process, the "1" and "0" of the digital signal are represented as different frequencies, and the Gaussian filter is used to smooth the edges of the frequency change to reduce the bandwidth occupancy of the signal and improve the spectrum efficiency.

[0119] Specifically, the specific steps to implement modulation and coding may include: 1) Data encapsulation: First, the MCU combines the application layer data, protocol header and tail information into a complete wireless data packet to ensure that the encapsulated data packet complies with the specifications of the 2.4GHz wireless communication protocol. 2) Modulation: Use appropriate modulation technology to convert digital signals into analog signals suitable for wireless transmission. In this solution, GFSK modulation technology is used. 3) Coding: In order to increase the reliability of the signal, the modulated signal is encoded, which may include error detection and correction mechanisms.

[0120] 7. Wireless signal transmission: The wireless communication module transmits the modulated wireless signal through the antenna. To ensure the reliability of the signal, it may be necessary to adjust the transmission power, select a suitable antenna, and consider the propagation characteristics of the signal.

[0121] In this method, the USB data is encrypted, the application layer data is extracted from the encrypted USB data, and encapsulated into a wireless signal that complies with the wireless communication protocol, thereby realizing the conversion between the USB protocol and the wireless communication protocol, facilitating identity authentication and data decryption.

[0122] Step S602: The terminal device recovers the wireless signal to obtain USB data.

[0123] In an optional implementation, the terminal device recovers the wireless signal to obtain USB data, including: amplifying and filtering the wireless signal to obtain an analog signal; demodulating the analog signal to restore the encrypted USB data; and decrypting the encrypted USB data using the same encryption algorithm as the wireless mouse to obtain the USB data.

[0124] In one example, the wireless receiver of the terminal device captures the wireless signal and converts it back to a digital signal through a demodulation process. The demodulation algorithm needs to match the modulation technology of the wireless mouse device.

[0125] Specifically, the specific steps to achieve signal reception and demodulation are: 1) Signal reception: The wireless receiver of the terminal device captures the wireless signal through the antenna. 2) Signal amplification: The received signal usually needs to be amplified first to increase the signal strength. 3) Filtering: Remove noise and interference from the signal through the filter. 4) Demodulation: Convert the analog signal back to a digital signal. The demodulation process needs to match the modulation technology used by the wireless mouse (such as GFSK). 5) Signal synchronization: Ensure that the clock at the receiving end is synchronized with the transmitting end to correctly demodulate the signal. 6) Error correction: If the encoding stage includes error correction codes, error detection and correction will be performed here.

[0126] The USB driver or security module on the terminal device decrypts the received encrypted data and restores the original USB data packet. The decryption process requires the use of the same encryption algorithm and key as the wireless mouse device. Specific steps to achieve data decryption: 1) Ciphertext reception: The USB driver or security module on the terminal device receives the encrypted data transmitted wirelessly. 2) Key preparation: Ensure that the terminal device has the correct decryption key paired with the Ukey. 3) Decryption operation: Decrypt using the same encryption algorithm as the wireless mouse device to restore the encrypted data to the original USB data packet. 4) Verification: Check the integrity and correctness of the decrypted data to ensure that the data has not been tampered with during transmission.

[0127] In this method, the terminal device receives and demodulates the received wireless signal, and uses the same encryption algorithm as the wireless mouse to decrypt the wireless signal and restore the USB data. The USB data can be used to bind the solid-state drive to the smart password key.

[0128] Step S603: Based on the USB data, determine whether the smart password key and the solid state drive have passed identity authentication.

[0129] Step S604, when the smart password key and the solid state hard disk pass identity authentication, the data in the solid state hard disk is decrypted.

[0130] In an optional embodiment, the method also includes: creating a certificate container corresponding to the solid-state hard disk in the smart password key according to different solid-state hard disks, the certificate container including the digital certificate of the solid-state hard disk; creating a certificate container management file based on the identity authentication relationship between the certificate container, the smart password key and the solid-state hard disk, the certificate container management file including the handle information of the certificate container; after the smart password key is inserted into the USB interface, based on the handle information corresponding to the current solid-state hard disk, traversing and determining the certificate container corresponding to the handle information, reading the digital certificate in the certificate container, and authenticating the solid-state hard disk; after the solid-state hard disk identity authentication passes, confirming that the smart password key and the solid-state hard disk have passed the identity authentication.

[0131] In one example, SSD is the abbreviation of solid-state drive, which is usually stored in the hard disk slot of the terminal and is used to store user data for the terminal device. Ukey is an intelligent password key, similar to the form of a U shield. By binding ukey with SSD, the encrypted data in the SSD can be unlocked and locked. SSD is a secure SSD that can realize data self-encryption. After binding ukey and SSD through software, it is equivalent to establishing a mutual identity authentication relationship between ukey and SSD. When ukey is inserted into the USB port of the terminal, ukey and the secure SSD in the terminal can communicate through the USB protocol. At this time, mutual identity authentication between ukey and SSD can be realized. If the authentication is passed (that is, the mutual binding relationship), the data in the SSD can be securely decrypted. Figure 5 is a schematic diagram of a flow chart of a ukey binding operation according to an embodiment of the present invention, such as Figure 5 As shown, the ukey binding work may include: in the smart password key, a corresponding certificate container is created according to the identification information of different secure SSDs, the certificate container carries the identification information of the secure SSD, and the digital certificate applied for by the secure SSD through the identification information such as sn required is stored in the certificate container. In the smart password key, a certificate container management file is created according to the binding relationship between different certificate containers and secure SSDs, and the handle information of different certificate containers is set in the certificate container management file. In the smart password key, a secure SSD is selected for login authentication, the corresponding handle information is traversed in the certificate container management file, and the corresponding certificate container is located according to the handle information, the digital certificate in the corresponding certificate container is read, and the information in the digital certificate is authenticated. When switching login, that is, the smart password key is inserted into other secure SSDs, the corresponding handle information is traversed again in the certificate container management file, and the corresponding certificate container is located according to the handle information, the digital certificate in the certificate container is read, and the identification information of the secure SSD is authenticated. If the authentication is passed, the login is considered successful.

[0132] In this method, by creating a certificate container corresponding to the solid-state drive, a certificate container management file is created based on the identity authentication relationship between the certificate container, the smart password key and the solid-state drive. When switching logins, the certificate container can be determined based on the handle information, and then the solid-state drive can be authenticated. If the authentication is passed, the login is confirmed to be successful, thus realizing the identity authentication between the smart password key and the solid-state drive.

[0133] The identity authentication method provided in this embodiment converts USB data into wireless signals in the wireless mouse after the smart password key is inserted into the USB interface of the wireless mouse. The terminal device receives and restores the wireless signals into USB data, and uses the USB data for identity authentication. When the smart password key and the solid-state hard disk in the terminal device pass the identity authentication, the data of the solid-state hard disk is decrypted, thereby realizing secure decryption and improving the user experience.

[0134] Although the embodiments of the present invention have been described in conjunction with the accompanying drawings, those skilled in the art may make various modifications and variations without departing from the spirit and scope of the present invention, and such modifications and variations are all within the scope defined by the appended claims.

Claims

1. An identity authentication system, characterized in that: The system includes: intelligent password key, wireless mouse and terminal equipment: After the smart password key is inserted into the USB interface of the wireless mouse, the USB data is sent to the wireless mouse through the USB interface, and the USB data complies with the specification of the USB protocol. The USB interface is the card slot of the wireless receiver of the wireless mouse; The wireless mouse protocol conversion module of the wireless mouse is connected to the USB interface, and is used to receive the USB data, parse and convert the USB data to obtain a wireless signal, and send the wireless signal to the terminal device through wireless communication, wherein the wireless signal complies with the specification of the wireless communication protocol; The terminal device is used to receive the wireless signal, restore the wireless signal to obtain the USB data; based on the USB data, determine whether the smart password key and the solid-state hard disk have passed identity authentication, and when the smart password key and the solid-state hard disk have passed identity authentication, decrypt the data in the solid-state hard disk.

2. The system according to claim 1, characterized in that The appearance of the smart password key is the same as the wireless receiver of the wireless mouse, and is placed in the USB interface of the wireless mouse.

3. The system according to claim 1, characterized in that The wireless mouse protocol conversion module includes a conversion control unit and a wireless communication module: The conversion control unit is used to identify the smart password key through the USB interface; after the smart password key is identified, receive the USB data, encrypt the USB data, and obtain the encrypted USB data; extract the encrypted USB data to obtain the application layer data of the encrypted USB data; Re-encapsulating the application layer data to obtain a wireless data packet, and sending the wireless data packet to the wireless communication module, wherein the wireless data packet complies with the specification of the wireless communication protocol; modulating and encoding the wireless data packet to obtain the wireless signal; The wireless communication module is used to send the wireless signal to the terminal device.

4. The system according to claim 3, characterized in that The conversion control unit is also used to set data transmission parameters according to the USB protocol, and based on the data transmission parameters, determine whether the data volume of the application layer data is greater than the data volume of the maximum data packet transmitted by the wireless communication module; when the data volume of the application layer data is greater than the data volume of the maximum data packet transmitted by the wireless communication module, the application layer data is fragmented, and each of the fragments and the header information and tail information of the wireless communication protocol are encapsulated to obtain a wireless data packet corresponding to each of the fragments.

5. The system according to claim 3, characterized in that The terminal device is used to receive the wireless signal through an antenna; perform signal amplification and filtering operations on the wireless signal to obtain an analog signal; demodulate the analog signal to restore the encrypted USB data; and decrypt the encrypted USB data using the same encryption algorithm as that of the wireless mouse to obtain the USB data.

6. The system according to claim 1, characterized in that The terminal device is further used to create a certificate container corresponding to the solid-state hard disk in the smart password key according to different solid-state hard disks, and the certificate container includes the digital certificate of the solid-state hard disk; based on the identity authentication relationship between the certificate container, the smart password key and the solid-state hard disk, create a certificate container management file, and the certificate container management file includes the handle information of the certificate container; After the smart password key is inserted into the USB interface, based on the handle information corresponding to the current solid-state hard drive, the certificate container corresponding to the handle information is traversed and determined, the digital certificate in the certificate container is read, and the solid-state hard drive is authenticated; after the solid-state hard drive authentication passes, it is confirmed that the smart password key and the solid-state hard drive have passed the authentication.

7. An identity authentication method, characterized in that: Applied to the identity authentication system as claimed in any one of claims 1 to 6, the system comprises a smart password key, a wireless mouse and a terminal device, and the method comprises: After the smart password key is inserted into the USB interface of the wireless mouse, the wireless mouse parses and converts the USB data to obtain a wireless signal, and the wireless signal complies with the specification of the wireless communication protocol; The terminal device recovers the wireless signal to obtain the USB data; Based on the USB data, determine whether the smart password key and the solid state drive have passed identity authentication; When the smart password key and the solid state hard disk pass identity authentication, the data in the solid state hard disk is decrypted.

8. The method according to claim 7, characterized in that The step of parsing and converting the USB data to obtain a wireless signal includes: Identify the smart password key through the USB interface; After the smart password key is recognized, the USB data is encrypted to obtain encrypted USB data; Extracting the encrypted USB data to obtain application layer data of the encrypted USB data; Re-encapsulating the application layer data to obtain a wireless data packet, and sending the wireless data packet to the wireless communication module, wherein the wireless data packet complies with the specification of the wireless communication protocol; The wireless data packet is modulated and then encoded to obtain the wireless signal.

9. The method according to claim 8, characterized in that The step of recovering the wireless signal to obtain the USB data comprises: Performing signal amplification and filtering operations on the wireless signal to obtain an analog signal; Demodulating the analog signal to restore the encrypted USB data; The encrypted USB data is decrypted using the same encryption algorithm as that of the wireless mouse to obtain the USB data.

10. The method according to claim 7, characterized in that The method further comprises: Creating a certificate container corresponding to the solid-state hard disk in the smart password key according to different solid-state hard disks, wherein the certificate container includes a digital certificate of the solid-state hard disk; Based on the identity authentication relationship between the certificate container, the smart password key and the solid state drive, a certificate container management file is created, wherein the certificate container management file includes handle information of the certificate container; After the smart password key is inserted into the USB interface, based on the handle information corresponding to the current solid-state hard disk, the certificate container corresponding to the handle information is traversed and determined, the digital certificate in the certificate container is read, and the identity of the solid-state hard disk is authenticated; After the solid state hard disk identity authentication is passed, it is confirmed that the smart password key and the solid state hard disk have passed the identity authentication.

Images