Authentication method, authentication device and system

Abstract

The invention relates to an authentication method, an authentication device and a system, and the method comprises the steps: receiving initial data generated by a terminal, analyzing the initial data, selecting first abnormal list data in the initial data, carrying out the interception and shielding, and transmitting first interaction data in the initial data to a server side, the first interaction data is the remaining data after the initial data shields the first abnormal list data, and the abnormal list data unfavorable for data transmission in the data interaction process is shielded, so that errors in the transmission process are avoided, and the data transmission efficiency of the authentication device is improved.

Description

Technical Field

[0001] The present application relates to the field of data authentication methods, and in particular to an authentication method, an authentication device and a system. Background Art

[0002] When the authentication device transmits and processes data between the terminal and the server, some data sent by the terminal or the server may be unfavorable to the chip. If the authentication device sends or processes the data unfavorable to the chip along with other data during data transmission, it is likely to cause compatibility problems with the chip, thereby affecting the efficiency of data transmission.

[0003] In the current related technologies, no effective solution has been proposed for the chip compatibility issue. Summary of the invention

[0004] The embodiments of the present application provide an authentication method, an authentication device, and a system to solve the problem of low data transmission efficiency of the authentication device in the related art.

[0005] In a first aspect, an embodiment of the present application provides an authentication method, characterized in that it includes:

[0006] receiving initial data generated by the terminal;

[0007] Analyze the initial data, and select the first abnormal list data in the initial data for interception and shielding;

[0008] The first interactive data in the initial data is transmitted to the server, wherein the first interactive data is the remaining data of the initial data after the first abnormal list data is shielded.

[0009] In some embodiments, the initial data includes at least one of the following: software version information of the terminal, ID information of the terminal, serial information of the terminal, communication data, verification data, authentication data, counting data, and service life data.

[0010] In some embodiments, before transmitting the first interaction data in the initial data to the server, the method further includes:

[0011] Modifying the sequence information, the counting data and the service life data of the terminal, and updating the verification data according to the modified sequence information, the counting data and the service life data of the terminal;

[0012] The modified and updated counting data and the service life data are encrypted according to the authentication data.

[0013] In some embodiments, after transmitting the first interaction data in the initial data to the server, the method further includes:

[0014] Receiving response data obtained by the server end after processing the first interactive data, and selecting second abnormal list data in the response data for interception and shielding;

[0015] The second interaction data in the response data is sent to the terminal, wherein the second interaction data is the remaining data of the response data after the second abnormal list data is shielded.

[0016] In some embodiments, the response data includes at least one of the following: firmware version information of the terminal, ID information of the terminal, serial information of the terminal, communication data, verification data, signature data, counting data, and a response instruction.

[0017] In some embodiments, the first exception list data or the second exception list data includes: sequence information and authentication data of the terminal.

[0018] In some embodiments, before obtaining the initial data sent by the terminal, the method further includes:

[0019] Configure the name, type, node type and networking mode of the authentication device, and enter the device number of the authentication device;

[0020] Identifying a device status of the authentication device;

[0021] The authentication device is screened according to the device status, and the screened authentication device is selected to connect to the terminal, wherein the device status includes an inactivated state, an online state, and an offline state, the inactivated state represents an initial state of the authentication device, the online state represents a state in which the authentication device is powered on and can work normally, and the offline state represents a state in which the authentication device is powered off or cannot work normally.

[0022] In some embodiments, after acquiring the initial data sent by the terminal, the method further includes:

[0023] Sending the initial data directly to the server;

[0024] After the server processes the initial data, other authentication devices receive and save the data processing results obtained by the server;

[0025] According to the data processing result, the initial data is selected and matched with the terminal corresponding to the data processing result.

[0026] In a second aspect, an embodiment of the present application provides an authentication device, characterized in that it includes:

[0027] A receiving module, used for receiving initial data;

[0028] A processing module, configured to analyze the initial data, select first abnormal list data in the initial data for interception and shielding, wherein the first interactive data is remaining data of the initial data after shielding the first abnormal list data;

[0029] A sending module is used to send the first interaction data.

[0030] In a third aspect, an embodiment of the present application provides an authentication system, characterized in that it includes:

[0031] Terminal, used to generate initial data;

[0032] An authentication device is connected to the terminal, and is used to receive the initial data generated by the terminal, analyze the initial data, select the first abnormal list data in the initial data for interception and shielding, and transmit the first interactive data in the initial data to a server, wherein the first interactive data is the remaining data of the initial data after shielding the first abnormal list data.

[0033] The server side is connected to the authentication device and is used to receive the first interaction data sent by the authentication device.

[0034] Compared with the related art, the authentication method, authentication device and system provided in the embodiments of the present application analyze the initial data generated by the receiving terminal, select the first abnormal list data in the initial data for interception and shielding, and transmit the first interactive data in the initial data to the server side, wherein the first interactive data is the remaining data of the initial data after shielding the first abnormal list data, and shields the abnormal list data that is not conducive to data transmission during the data interaction process, thereby avoiding errors in the transmission process and improving the data transmission efficiency of the authentication device.

[0035] Details of one or more embodiments of the present application are set forth in the following drawings and description to make other features, objects, and advantages of the present application more readily apparent. BRIEF DESCRIPTION OF THE DRAWINGS

[0036] The drawings described herein are used to provide a further understanding of the present application and constitute a part of the present application. The illustrative embodiments of the present application and their descriptions are used to explain the present application and do not constitute an improper limitation on the present application. In the drawings:

[0037] Figure 1It is a schematic diagram of a conventional communication method between a terminal and a server in the prior art;

[0038] Figure 2 This is a schematic diagram of the communication method between the terminal and the server in one embodiment of the present application;

[0039] Figure 3 is a flow chart of an authentication method in one embodiment of the present application;

[0040] Figure 4 This is a data communication format diagram of one of the embodiments of the present application;

[0041] Figure 5 is a schematic diagram of a first authentication method of one embodiment of the present application;

[0042] Figure 6 is a schematic diagram of a second authentication method of one embodiment of the present application;

[0043] Figure 7 is a schematic diagram of a third authentication method of one of the embodiments of the present application;

[0044] Figure 8 This is a hardware structure diagram of an authentication device in one embodiment of the present application;

[0045] Fig. 9 This is a hardware structure diagram of an authentication system according to one of the embodiments of the present application. DETAILED DESCRIPTION

[0046] In order to make the purpose, technical solutions and advantages of the present application clearer, the present application is described and illustrated below in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present application and are not intended to limit the present application. Based on the embodiments provided in the present application, all other embodiments obtained by ordinary technicians in the field without making creative work are within the scope of protection of the present application.

[0047] Obviously, the drawings described below are only some examples or embodiments of the present application. For ordinary technicians in this field, the present application can also be applied to other similar scenarios based on these drawings without creative work. In addition, it can also be understood that although the efforts made in this development process may be complicated and lengthy, for ordinary technicians in this field related to the content disclosed in this application, some changes in design, manufacturing or production based on the technical content disclosed in this application are just conventional technical means, and should not be understood as insufficient content disclosed in this application.

[0048] Reference to "embodiments" in this application means that a particular feature, structure, or characteristic described in conjunction with the embodiments may be included in at least one embodiment of the present application. The appearance of the phrase in various locations in the specification does not necessarily refer to the same embodiment, nor is it an independent or alternative embodiment that is mutually exclusive with other embodiments. It is explicitly and implicitly understood by those of ordinary skill in the art that the embodiments described in this application may be combined with other embodiments without conflict.

[0049] Unless otherwise defined, the technical terms or scientific terms involved in this application should be understood by people with ordinary skills in the technical field to which this application belongs. The words "one", "a", "a kind of", "the" and the like involved in this application do not indicate a quantitative limitation and may represent the singular or plural. The terms "include", "comprise", "have" and any of their variations involved in this application are intended to cover non-exclusive inclusions; for example, a process, method, system, product or device that includes a series of steps or modules (units) is not limited to the listed steps or units, but may also include steps or units that are not listed, or may also include other steps or units inherent to these processes, methods, products or devices. The "multiple" involved in this application refers to two or more.

[0050] In the prior art, conventional communication methods between a terminal and a server, such as a communication method between a networked printer terminal and a server, are as follows: Figure 1 As shown, after the consumable chip product is loaded into the terminal printer, data interaction and security authentication are performed with the terminal printer. After confirming that the authentication content of the terminal printer is met, the terminal printer communicates with the matching server.

[0051] However, after the consumables are placed in the terminal printer, the serial number of the consumable chip will be recorded in the terminal, and abnormal list data will be generated that is not conducive to the normal communication between the terminal and the server. If the terminal communicates with the server after connecting to the network, the data including the serial number that is not conducive to the normal communication between the terminal and the server will be uploaded to the database on the server. At this time, when the consumables are placed in another terminal printer with networking function, the consumables will have a serial number collision, causing the data to be unable to be transmitted normally, affecting the efficiency of data transmission.

[0052] In this embodiment, an authentication method is provided. Figure 2 Schematic diagram of the communication method between the terminal and the server in the embodiment of the present application. Figure 2As shown, in the present application, an authentication device is added, such as an intelligent gateway device (hereinafter referred to as gateway), which is arranged between the terminal and the server. Through the control interface of the PC, the authentication device is controlled to filter the data interacting between the terminal and the server, and intercept and shield the communication data that is not conducive to the normal communication between the terminal and the server, so that when the consumable chip is replaced by the terminal, the terminal and the server can also communicate normally.

[0053] Figure 3 is a flow chart of the authentication method of an embodiment of the present application, such as Figure 3 As shown, the method comprises the following steps:

[0054] Step S301, receiving initial data generated by a terminal.

[0055] The terminal may include a printer and printer consumables chip with networking communication function, such as a printer with GPRS (General Packet Radio Service), WIFI, and Ethernet interface. After the consumables chip is installed in the printer, data interaction and security authentication are performed with the printer. After confirming that the consumables chip meets the authentication content of the printer, the printer, as a terminal, sends the data to the authentication device.

[0056] Step S302, analyzing the initial data, and selecting the first abnormal list data in the initial data for interception and shielding.

[0057] Among them, the authentication device includes an intelligent gateway device, which has functions similar to those of a gateway router. Network settings and gateway function configuration can be performed through the PC web page to realize functions such as data collection and storage, data analysis, data shielding, and data forwarding. That is, the authentication device obtains the initial data sent by the terminal, and analyzes the obtained data item by item. The first abnormal list data that is analyzed to be unfavorable for communication between the terminal and the server is intercepted or shielded, and the intercepted and shielded data will be recorded in the database.

[0058] Step S303, transmitting the first interactive data in the initial data to the server, wherein the first interactive data is the remaining data of the initial data after shielding the first abnormal list data.

[0059] After the authentication device selects the first abnormal list data, if the first abnormal list data includes all the initial data, all the initial data are blocked and intercepted. If the first abnormal list data is part of the initial data, the remaining data except the first abnormal list data in the initial data is selected, and the first interactive data that does not affect the communication between the terminal and the server is forwarded to the corresponding server.

[0060] In the above steps S301 to S303, the initial data generated by the receiving terminal is analyzed, the first abnormal list data in the initial data is selected for interception and shielding, and the first interactive data in the initial data is transmitted to the server side, wherein the first interactive data is the remaining data of the initial data after the first abnormal list data is shielded, and the abnormal list data that is not conducive to data transmission during the data interaction process is shielded, thereby avoiding errors in the transmission process and improving the data transmission efficiency of the authentication device.

[0061] In some of the embodiments, the initial data includes at least one of the following: software version information of the terminal, ID information of the terminal, serial information of the terminal, communication data, verification data, authentication data, counting data, and service life data.

[0062] in, Figure 4 is a data communication format diagram of an embodiment of the present application, such as Figure 4 As shown, taking the terminal printer as an example, the data sent by the terminal to the authentication device includes: the software version information (version) of the printer, the unique ID information (ID) of the printer, the serial number of the consumable chip (serial number), communication data (DATA), verification data (CRC), security authentication data (SECU), counting data (including at least one of the number of prints, internal report count, copy count, and ink cartridge count), and the service life data (lifespan) of the ink cartridge.

[0063] In some of the embodiments, before the first interactive data in the initial data is transmitted to the server, it also includes: changing the sequence information, counting data and service life data of the terminal, and updating the verification data according to the changed sequence information, counting data and service life data of the terminal, and encrypting the modified and updated counting data and service life data according to the authentication data.

[0064] Among them, taking the terminal printer as an example, after receiving the initial data sent by the terminal, the authentication device will modify the sequence information and the ink cartridge life. In the case of continuous printing, at least one of the count data including the number of prints, internal report count, copy count and ink cartridge count will also be modified. After the modification is completed, the CRC check data will also change, and the security authentication data will be encrypted according to the modified data content, and then the encrypted data will be sent to the server. During data transmission, the data is updated in time according to the actual use of the terminal to ensure the real-time performance of the system.

[0065] In some embodiments, after the first interactive data in the initial data is transmitted to the server, it also includes: receiving response data obtained by the server after processing the first interactive data, selecting second abnormal list data in the response data for interception and shielding; sending the second interactive data in the response data to the terminal, wherein the second interactive data is the remaining data of the response data after shielding the second abnormal list data.

[0066] Among them, the server side responds according to the first interaction data and replies the response data to the authentication device. The authentication device selectively blocks the protocol instructions and command data (i.e., the second abnormal list data) contained in the response data replied by the server side that are not conducive to the normal use of the terminal, and sends the second interaction data obtained after blocking to the terminal.

[0067] In some of the embodiments, the response data includes at least one of the following: firmware version information of the terminal, ID information of the terminal, serial information of the terminal, communication data, verification data, signature data, counting data, and a response instruction.

[0068] Among them, Figure 4 As shown, taking a networked printer terminal as an example, the data sent by the server to the authentication device includes: the printer's firmware version information (version), the printer's unique ID information (ID), the serial number of the consumable chip (serial number), communication data (DATA), verification data (CRC), security authentication data and signature algorithm data (SECU), counting data (including at least one of the number of prints, internal report count, copy count, and ink cartridge count), and a response instruction (ACK).

[0069] In some embodiments, the first exception list data or the second exception list data includes: sequence information and authentication data of the terminal.

[0070] Among them, the serial number and authentication data of the terminal may cause a collision when the consumable chip is replaced and the terminal cannot be used. Therefore, it is necessary to shield and intercept them to ensure that there will be no collision when the consumable chip is replaced, avoid errors in the communication process, and improve communication efficiency.

[0071] In some of the embodiments, before obtaining the initial data sent by the terminal, it also includes: configuring the name, type, node type and networking method of the authentication device, entering the device number of the authentication device, identifying the device status of the authentication device, screening the authentication device according to the device status, and selecting the screened authentication device to connect to the terminal.

[0072] Before exchanging data with the terminal, network configuration is required. First, you need to open the control page for authentication device configuration, create an authentication device in the device list on the page, and after adding the authentication device, select the authentication device type and enter the device number of the authentication device. After confirmation, return to the device list and confirm the device status of the authentication device. Filter the authentication device according to the device status, connect the filtered authentication device to the terminal movement network, and perform preliminary screening of the authentication device through the device status, which is conducive to the stable operation of the system.

[0073] In some of the embodiments, the device status includes an inactivated state, an online state, and an offline state. The inactivated state indicates the initial state of the authentication device, the online state indicates the state in which the authentication device is powered on and can work normally, and the offline state indicates the state in which the authentication device is powered off or cannot work normally.

[0074] After the name, type and device number of the authentication device are confirmed to be correct, the interface of the device list is returned, and the device status of the authentication device is inactive. When the authentication device is powered on, the network module starts and works normally, and the device status of the authentication device is online. When the authentication device network is not smooth or the device is powered off, the authentication device cannot communicate with the server, and the device status of the authentication device is offline. Dividing the gateway device into multiple states is more conducive to the system to make targeted selections for authentication devices in different operating conditions.

[0075] In some of the embodiments, after obtaining the initial data sent by the terminal, it also includes: sending the initial data directly to the server; after the server processes the initial data, other authentication devices receive and save the data processing results obtained by the server; based on the data processing results, selecting the terminal corresponding to the initial data and the data processing results for matching.

[0076] Among them, after receiving the initial data sent by the terminal, the authentication device can send the initial data as it is to the server side. The server side will modify the sequence information, service life, and counting data. After the modification is completed, the verification data will also change. The authentication data will be encrypted according to the data content, and then the data processing results will be sent to other authentication devices. Other authentication devices will save these data as their own database information for matching with other terminals. When matching with other terminals, the available data corresponding to the terminal can be selected, which improves the reusability of the data and avoids invalid duplication of data.

[0077] Figure 5 is a schematic diagram of a first authentication method of an embodiment of the present application, such as Figure 5As shown, taking the networked printer terminal as an example, after the consumable chip is loaded into the terminal printer, data interaction and security authentication are carried out with the terminal. After confirming that the authentication content of the terminal is met, the terminal will package the initial data, including: version, ID, serial number, DATA data, verification data, security authentication data, number of prints, internal report count, copy count, ink cartridge count, and ink cartridge life, and send the data to the authentication device. After receiving the data, the authentication device will not modify the data, but will directly transmit the data to the cloud server, which will serve as the data recording and processing center. The cloud server will modify the serial number data and ink cartridge life. If printing continuously, the printer will also modify the number of prints, internal report count, copy count, and ink cartridge count. After the modification is completed, the verification data will also change, and the security authentication data will be encrypted according to the data content, and then sent to the server corresponding to the networked printer terminal. When the server corresponding to the networked printer terminal receives the processed data, it will reply with response data based on the data. The data will also change accordingly with the ID, serial number, communication data, CRC check, security authentication, signature algorithm, printer firmware version, number of prints, internal report count, copy count, cartridge count, and response command.

[0078] Figure 6 is a schematic diagram of a second authentication method of an embodiment of the present application, such as Figure 6 As shown, taking the networked printer terminal as an example, after the consumable chip is loaded into the terminal, data interaction and security authentication are carried out with the terminal. After confirming that the authentication content of the terminal is met, the terminal will package the initial data, including: version, ID, serial number, DATA data, verification data, security authentication data, number of prints, internal report count, copy count, ink cartridge count, and ink cartridge life, and send the data to the authentication device. After receiving the data, the authentication device will not modify the data, but will directly transmit the data to the server, which will serve as the data recording and processing center. The server will modify the serial number data and ink cartridge life. If printing continuously, the printer terminal will also modify the number of prints, internal report count, copy count, and ink cartridge count. After the modification is completed, the verification data will also change, and the security authentication data will be encrypted according to the data content and then sent to other authentication devices. Other authentication devices will save the received data as their own database information for matching other terminals.

[0079] Figure 7 is a schematic diagram of a third authentication method of an embodiment of the present application, such as Figure 7As shown, taking the networked printer terminal as an example, after the consumable chip is loaded into the terminal, data interaction and security authentication are carried out with the terminal. After confirming that the authentication content of the terminal is met, the terminal will package the initial data, including: version, ID, serial number, DATA data, verification data, security authentication data, number of prints, internal report count, copy count, ink cartridge count, and ink cartridge life, and send the data to the gateway. After receiving the data, the gateway will change the serial number data and ink cartridge life. If printing continuously, the printer terminal will also change the number of prints, internal report count, copy count, and ink cartridge count. After the change is completed, the verification data will also change, and the security authentication data will be encrypted according to the data content and then sent to the printer server. After receiving the data, the printer cloud server replies to the big data, and the data will change accordingly with the ID, serial number, communication data, CRC check, security authentication, signature algorithm, printer firmware version, number of prints, internal report count, copy count, ink cartridge count, and response instruction. The authentication device receives the response data sent by the server and shields the data with serial numbers or other abnormal list data in the response data.

[0080] The present application also provides an authentication device. Figure 8 is a hardware structure diagram of the authentication device in the embodiment of the present application, such as Figure 8 As shown, the device comprises:

[0081] A receiving module 81, used for receiving initial data;

[0082] A processing module 82 is used to analyze the initial data, select the first abnormal list data in the initial data for interception and shielding, wherein the first interactive data is the remaining data of the initial data after shielding the first abnormal list data;

[0083] The sending module 83 is used to send the first interaction data.

[0084] The present application also provides an authentication system. Fig. 9 is a hardware structure diagram of the authentication system of the embodiment of the present application, such as Fig. 9 As shown, the system includes:

[0085] Terminal 91, used to generate initial data;

[0086] The authentication device 92 is connected to the terminal 91, and is used to receive the initial data generated by the terminal 91, analyze the initial data, select the first abnormal list data in the initial data for interception and shielding, and transmit the first interactive data in the initial data to the server 93, wherein the first interactive data is the remaining data of the initial data after shielding the first abnormal list data;

[0087] The server side 93 is connected to the authentication device 92 and is used to receive the first interaction data sent by the authentication device 92 .

[0088] It should be noted that the above modules can be functional modules or program modules, and can be implemented by software or hardware. For modules implemented by hardware, the above modules can be located in the same processor; or the above modules can be located in different processors in any combination.

[0089] The technical features of the above-described embodiments may be arbitrarily combined. To make the description concise, not all possible combinations of the technical features in the above-described embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this specification.

[0090] The above-mentioned embodiments only express several implementation methods of the present application, and the descriptions thereof are relatively specific and detailed, but they cannot be understood as limiting the scope of the invention patent. It should be pointed out that, for a person of ordinary skill in the art, several variations and improvements can be made without departing from the concept of the present application, and these all belong to the protection scope of the present application. Therefore, the protection scope of the patent of the present application shall be subject to the attached claims.

Claims

1. An authentication method, characterized in that: include: receiving initial data generated by the terminal; Analyze the initial data, and select the first abnormal list data in the initial data for interception and shielding; The first interactive data in the initial data is transmitted to the server, wherein the first interactive data is the remaining data of the initial data after the first abnormal list data is shielded.

2. The authentication method according to claim 1, characterized in that: The initial data includes at least one of the following: software version information of the terminal, ID information of the terminal, serial information of the terminal, communication data, verification data, authentication data, counting data, and service life data.

3. The authentication method according to claim 2, characterized in that: Before transmitting the first interactive data in the initial data to the server, the method further includes: Modifying the sequence information, the counting data and the service life data of the terminal, and updating the verification data according to the modified sequence information, the counting data and the service life data of the terminal; The modified and updated counting data and the service life data are encrypted according to the authentication data.

4. The authentication method according to claim 1, characterized in that: After transmitting the first interactive data in the initial data to the server, the method further includes: Receiving response data obtained by the server end after processing the first interactive data, and selecting second abnormal list data in the response data for interception and shielding; The second interaction data in the response data is sent to the terminal, wherein the second interaction data is the remaining data of the response data after the second abnormal list data is shielded.

5. The authentication method according to claim 4, characterized in that: The response data includes at least one of the following: firmware version information of the terminal, ID information of the terminal, serial information of the terminal, communication data, verification data, signature data, counting data, and a response instruction.

6. The authentication method according to claim 4, characterized in that: The first abnormal list data or the second abnormal list data includes: sequence information and authentication data of the terminal.

7. The authentication method according to claim 1, characterized in that: Before acquiring the initial data sent by the terminal, the method further includes: Configure the name, type, node type and networking mode of the authentication device, and enter the device number of the authentication device; Identifying a device status of the authentication device; The authentication device is screened according to the device status, and the screened authentication device is selected to connect to the terminal, wherein the device status includes an inactivated state, an online state, and an offline state, the inactivated state represents an initial state of the authentication device, the online state represents a state in which the authentication device is powered on and can work normally, and the offline state represents a state in which the authentication device is powered off or cannot work normally.

8. The authentication method according to claim 1, characterized in that: After acquiring the initial data sent by the terminal, the method further includes: Sending the initial data directly to the server; After the server processes the initial data, the other authentication devices receive and save the data processing results obtained by the server; According to the data processing result, the initial data is selected and matched with the terminal corresponding to the data processing result.

9. An authentication device, characterized in that: include: A receiving module, used for receiving initial data; A processing module, configured to analyze the initial data, select first abnormal list data in the initial data for interception and shielding, wherein the first interactive data is the remaining data of the initial data after shielding the first abnormal list data; A sending module is used to send the first interaction data.

10. An authentication system, characterized in that: include: Terminal, used to generate initial data; an authentication device connected to the terminal, configured to receive the initial data generated by the terminal, analyze the initial data, select first abnormal list data in the initial data for interception and shielding, and transmit first interactive data in the initial data to a server, wherein the first interactive data is remaining data of the initial data after shielding the first abnormal list data; The server side is connected to the authentication device and is used to receive the first interaction data sent by the authentication device.

Images