Device registration method, device and medium, registration server, authentication server

Abstract

The present application discloses a device registration method, a device and a medium, a registration server, and an authentication server, and relates to the field of security authentication technology. The device registration method applied to the registration server comprises: upon receiving a product identification and encrypted registration information sent by an electronic device, retrieving a product public key according to the product identification, wherein the encrypted registration information is information obtained by the authentication server using a product private key to encrypt the registration information and a first character string, and the first character string is a character string obtained by the authentication server using a device public key to encrypt the registration information; decrypting the encrypted registration information using the product public key to obtain the registration information and the first character string, wherein the registration information is information determined by the authentication server when the identity authentication of the electronic device passes; verifying the first character string according to the registration information; and confirming that the electronic device is successfully registered when the first character string verification passes, thereby improving the security of the device self-registration authentication process.

Description

Technical Field

[0001] The present application relates to the field of security authentication technology, and in particular to a device registration method, a device and a medium, a registration server, and an authentication server. Background Art

[0002] Self-registration security encryption authentication technology can be traced back to symmetric key and asymmetric key encryption technology. However, with the rise of computer networks and the development of e-commerce, the traditional manual key exchange method can no longer meet the needs. This has promoted the development of Public Key Infrastructure (PKI). PKI relies on a trusted third-party Certificate Authority (CA) to manage keys and distribute certificates.

[0003] At present, self-registration encryption authentication technology has developed a variety of implementation methods. For example, a one-machine-one-secret method is used for device registration and authentication, that is, each device has an independent key pair, and the device is authenticated by its own public key. However, conventional self-registration encryption authentication technology still has some shortcomings. Many systems still rely on centralized CAs, which not only increases the complexity of the system, but also may become a potential security risk point, resulting in reduced security of self-registration encryption authentication and easy to be attacked or impersonated by a third party.

[0004] The above contents are only used to assist in understanding the technical solution of the present application and do not constitute an admission that the above contents are prior art. Summary of the invention

[0005] The main purpose of this application is to provide a device registration method, device and medium, registration server, and authentication server, aiming to solve the technical problem of low security of self-registration encryption authentication.

[0006] To achieve the above purpose, the present application proposes a device registration method, which is applied to a registration server and includes:

[0007] Upon receiving a product identification and encrypted registration information sent by an electronic device, retrieving a product public key according to the product identification, wherein the encrypted registration information is information obtained by encrypting the registration information and a first character string by the authentication server using the product private key, and the first character string is a character string obtained by encrypting the registration information by the authentication server using the device public key;

[0008] decrypting the encrypted registration information using the product public key to obtain the registration information and the first character string, wherein the registration information is information determined by the authentication server when the identity authentication of the electronic device passes;

[0009] Verifying the first character string according to the registration information;

[0010] When the first character string is verified successfully, it is confirmed that the electronic device is successfully registered.

[0011] In one embodiment, the registration information includes a device public key, and the step of verifying the first character string according to the registration information includes:

[0012] Encrypt the registration information using the device public key to obtain a second character string;

[0013] Compare whether the first character string and the second character string are the same;

[0014] In the case that the first character string and the second character string are the same, it is confirmed that the first character string has passed verification.

[0015] In one embodiment, the registration information includes a device identification and a device public key, and after the step of confirming that the electronic device is successfully registered, the following step is further included:

[0016] Generate a login account and login password according to the device identification;

[0017] The login account and the login password are encrypted using the device public key to obtain a third character string;

[0018] The third character string is sent to the electronic device, so that the electronic device uses a device private key to decrypt the third character string to obtain the login account and the login password.

[0019] In addition, to achieve the above purpose, the present application also proposes a device registration method, which is applied to an authentication server, and the method includes:

[0020] Receiving identity authentication information sent by an electronic device, and performing identity authentication on the electronic device according to the identity authentication information, wherein the identity authentication information includes a device public key;

[0021] In the case where the identity authentication of the electronic device is passed, determining the registration information according to the identity authentication information;

[0022] Encrypt the registration information using the device public key to obtain a first character string;

[0023] Encrypt the registration information and the first character string using a product private key to obtain encrypted registration information;

[0024] Send the encrypted registration information to the electronic device, so that the electronic device sends the product identification and the encrypted registration information to the registration server, and the registration server retrieves the product public key according to the product identification, uses the product public key to decrypt the encrypted registration information, obtains the registration information and the first character string, and verifies the first character string according to the registration information. When the first character string is verified, it is confirmed that the electronic device is successfully registered.

[0025] In one embodiment, before the step of receiving the identity authentication information sent by the electronic device, the method further includes:

[0026] Generate product public key and product private key according to product identification;

[0027] The product identification and the product public key are sent to a registration server, so that the registration server stores the product identification and the product public key in association with each other.

[0028] In one embodiment, the identity authentication information includes a product identification and a first authentication code, and the step of authenticating the electronic device according to the identity authentication information includes:

[0029] Retrieving a second authentication code according to the product identification;

[0030] When the first authentication code is the same as the second authentication code, it is determined that the identity authentication of the electronic device is passed.

[0031] In addition, to achieve the above purpose, the present application also proposes a device registration method, which is applied to an electronic device, and the method includes:

[0032] Sending identity authentication information to an authentication server, wherein the identity authentication information includes a device public key, so that the authentication server determines registration information according to the identity authentication information when the identity authentication of the electronic device passes, and encrypts the registration information using the device public key to obtain a first character string, and encrypts the registration information and the first character string using a product private key to obtain encrypted registration information;

[0033] Upon receiving the encrypted registration information sent by the authentication server, the product identification and the encrypted registration information are sent to the registration server, so that the registration server retrieves the product public key according to the product identification, and uses the product public key to decrypt the encrypted registration information to obtain the registration information and the first character string, and verifies the first character string according to the registration information, and confirms that the electronic device has been successfully registered if the first character string is verified.

[0034] In addition, to achieve the above purpose, the present application also proposes a device registration device, which is applied to a registration server and includes:

[0035] A retrieval module, configured to retrieve a product public key according to the product identification when receiving the product identification and encrypted registration information sent by the electronic device, wherein the encrypted registration information is information obtained by encrypting the registration information and a first character string by the authentication server using the product private key, and the first character string is a character string obtained by encrypting the registration information by the authentication server using the device public key;

[0036] a decryption module, configured to decrypt the encrypted registration information using the product public key to obtain the registration information and the first character string, wherein the registration information is information determined by the authentication server when the identity authentication of the electronic device passes;

[0037] A verification module, used to verify the first character string according to the registration information;

[0038] The confirmation module is used to confirm that the electronic device is successfully registered when the first character string is verified.

[0039] In addition, to achieve the above purpose, the present application also proposes a device registration device, the device registration device applies an authentication server, and the device registration device includes:

[0040] An identity authentication module, used to receive identity authentication information sent by an electronic device, and perform identity authentication on the electronic device according to the identity authentication information, wherein the identity authentication information includes a device public key;

[0041] An information determination module, configured to determine registration information according to the identity authentication information when the identity authentication of the electronic device is passed;

[0042] A public key encryption module, used to encrypt the registration information using the device public key to obtain a first character string;

[0043] A private key encryption module, used to encrypt the registration information and the first character string using a product private key to obtain encrypted registration information;

[0044] The information sending module is used to send the encrypted registration information to the electronic device, so that the electronic device sends the product identification and the encrypted registration information to the registration server, and the registration server retrieves the product public key according to the product identification, uses the product public key to decrypt the encrypted registration information, obtains the registration information and the first character string, and verifies the first character string according to the registration information. When the first character string is verified, it is confirmed that the electronic device is successfully registered.

[0045] In addition, to achieve the above-mentioned purpose, the present application also proposes a registration server, which includes: a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the computer program is configured to implement the steps of the device registration method described above.

[0046] In addition, to achieve the above-mentioned purpose, the present application also proposes an authentication server, which includes: a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the computer program is configured to implement the steps of the device registration method described above.

[0047] In addition, to achieve the above objectives, the present application also proposes an electronic device, which includes: a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the computer program is configured to implement the steps of the device registration method described above.

[0048] In addition, to achieve the above-mentioned purpose, the present application also proposes a storage medium, which is a computer-readable storage medium, and a computer program is stored on the storage medium. When the computer program is executed by a processor, the steps of the device registration method described above are implemented.

[0049] In addition, to achieve the above-mentioned purpose, the present application also provides a computer program product, which includes a computer program, and when the computer program is executed by a processor, the steps of the device registration method described above are implemented.

[0050] One or more technical solutions proposed in the present application, applied to a registration server, have at least the following technical effects: when receiving a product identification and encrypted registration information sent by an electronic device, the product public key is retrieved according to the product identification, wherein the encrypted registration information is information encrypted by the authentication server using the product private key. Encryption using the product private key means that only a device with the corresponding product public key can decrypt the information, thereby ensuring the confidentiality of the encrypted registration information during transmission and preventing unauthorized access and tampering; at the same time, each product has its corresponding product public key. Even if one of the product public keys is cracked, it will not affect the registration process of other electronic devices, further enhancing the security of the device self-registration authentication process; using the product public key to decrypt The registration information is encrypted to obtain the registration information and the first character string. Due to the uniqueness and non-replicability of the product private key, the process of decrypting the product public key can ensure that the source of the encrypted registration information is reliable, and confirm that the electronic device has passed the identity authentication of the authentication server, that is, confirm that the identity of the electronic device is legal; in addition, the first character string is obtained by encrypting the registration information by the authentication server using the device public key. According to the registration information, the first character string is verified to further determine that the encrypted registration information has not been tampered with. Therefore, if the first character string verification passes, it can be confirmed that the electronic device has been successfully registered. The verification passes, indicating that the current electronic device identity is legal and the received encrypted registration information has not been tampered with. After multiple encryption and information verification, the security of the device self-registration authentication process is improved. BRIEF DESCRIPTION OF THE DRAWINGS

[0051] The accompanying drawings, which are incorporated in and constitute a part of this specification, illustrate embodiments consistent with the present application and, together with the description, serve to explain the principles of the present application.

[0052] In order to more clearly illustrate the embodiments of the present application or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, for ordinary technicians in this field, other drawings can be obtained based on these drawings without paying any creative work.

[0053] Figure 1 A flowchart of the first embodiment of the device registration method of the present application is provided;

[0054] Figure 2 The device interaction architecture diagram provided for the device registration method of this application;

[0055] Figure 3 Device interaction flow chart provided for the device registration method of this application;

[0056] Figure 4 This is a schematic diagram of the module structure of a device registration device according to Embodiment 1 of the present application;

[0057] Figure 5 This is a schematic diagram of the module structure of another device registration device according to an embodiment of the present application;

[0058] Figure 6 A schematic diagram of the structure of a registration server involved in the device registration method in an embodiment of the present application;

[0059] Figure 7 A schematic diagram of the structure of an authentication server involved in the device registration method in an embodiment of the present application;

[0060] Figure 8 Schematic diagram of the structure of the electronic device involved in the device registration method in the embodiment of the present application. DETAILED DESCRIPTION

[0061] It should be understood that the specific embodiments described herein are only used to explain the technical solutions of the present application and are not used to limit the present application.

[0062] In order to better understand the technical solution of the present application, a detailed description will be given below in conjunction with the accompanying drawings and specific implementation methods.

[0063] In this embodiment, for ease of description, the following description is made with the registration server as the execution entity.

[0064] In conventional technology, the identity information provided by the user is encrypted through a symmetric encryption algorithm. The encryption key can be easily stolen by a third party through a password cracking tool, which may lead to the leakage of the device's verification information and registration information. The attacker may launch a man-in-the-middle attack on the authentication server and the registration server, or perform malicious registration, which seriously endangers the security of the device self-registration process and user privacy; or it can be encrypted through an asymmetric encryption algorithm. Since the private key is confidential and difficult to be obtained by a third party, the security of user information can be improved to a certain extent. However, the server cannot identify whether the device information sent by the user has been modified by a third party, which may cause the legitimate device to be impersonated by a third party, resulting in the security of the device self-registration authentication process being reduced.

[0065] The embodiment of the present application provides a solution, which is applied to a registration server. First, the product identification and encrypted registration information sent by the electronic device are received, wherein the encrypted registration information is obtained by encrypting the registration information and the first character string with the product private key of the authentication server, and the encrypted transmission is carried out by using the product private key to prevent information leakage caused by theft by a third party, and at the same time effectively reduce impersonation from a third party; then, according to the product identification, the product public key is retrieved, and the product public key corresponds to the product identification. Even if the attacker cracks the key of other products, he cannot impersonate the current device; and then the encrypted registration information is decrypted using the retrieved product public key to obtain the registration information and the first character string. The registration information is mainly used to verify the first character string to ensure that the current encrypted registration information has not been tampered with; since the registration The registration information includes the device public key, and the device public key can be used to encrypt the registration information to obtain a second character string. Since the first character string is also encrypted by the authentication server using the device public key, the registration server cannot encrypt it. To verify whether the encrypted registration information has been tampered with or impersonated, it is necessary to compare whether the first character string is the same as the second character string. If the two are the same, it means that the registration request is initiated by a legitimate electronic device and the first character string verification is successful. If the two are different, it means that the encrypted registration information has been tampered with. When the first character string verification is successful, it is confirmed that the electronic device has been successfully registered. Through a series of asymmetric encryption and decryption and character string verification operations, the legitimacy of the electronic device is ensured, and the data is ensured to be unchanged, thereby improving the security of the device self-registration authentication process.

[0066] It should be noted that the execution subject of this embodiment can be a computing service device with data processing, network communication and program running functions, such as a tablet computer, a personal computer, a mobile phone, etc., or an electronic device that can realize the above functions.

[0067] The present embodiment is described below by taking the registration server as an execution subject as an example.

[0068] Based on this, the present application embodiment provides a device registration method, referring to Figure 1 , Figure 1 This is a flowchart of the first embodiment of the device registration method of the present application.

[0069] In this embodiment, the authentication server device registration method includes steps S10 to S40:

[0070] Step S10, when receiving the product identification and encrypted registration information sent by the electronic device, retrieve the product public key according to the product identification, wherein the encrypted registration information is the information obtained by the authentication server using the product private key to encrypt the registration information and the first character string, and the first character string is the character string obtained by the authentication server using the device public key to encrypt the registration information.

[0071] It should be noted that electronic devices refer to any device that can process data and transmit information electronically, including but not limited to smartphones, tablets and computers. Product identification refers to a string that uniquely identifies a product or category, which may include numbers and / or letters and is used to track, manage or distinguish different products; encrypted registration information refers to files or string information that have been encrypted using an asymmetric encryption algorithm. Only recipients with the correct key can decrypt and access its content. Without authorization, it is impossible to directly read or understand its content, thus protecting the confidentiality and integrity of data during transmission.

[0072] In addition, it should be noted that the product public key refers to a set of public parameters corresponding to the product private key, which is generated by the authentication server based on the product identification and is used to verify the authenticity of the digital signature or decryption of encrypted information. The corresponding product private key is stored in the authentication server and is not published to the public. The device public key refers to the public key part of a key pair used to encrypt and decrypt data, which is used to verify the integrity and authenticity of the data sent by the device. The corresponding device private key is stored in the electronic device and is not published to the public. Retrieval refers to searching and extracting the corresponding product public key in a specific storage medium (such as a database, file system) based on the product identification.

[0073] It is understandable that by using the product identification to retrieve the public key, only verified products can decrypt and access sensitive data or applications, preventing unauthorized users from obtaining sensitive information or attacking the registration server by guessing or forging product identification.

[0074] For example, when a smartphone is turned on for the first time, it needs to confirm activation with the manufacturer's server (registration server). The user's mobile phone (electronic device) can send the product identification and encrypted registration information to the registration server via a wireless network. After receiving this data, the registration server retrieves the corresponding product public key based on the product identification for subsequent decryption steps.

[0075] It is understandable that by encrypting the registration information transmission, even if the data is intercepted during transmission, unauthorized third parties cannot read the file content, thereby improving the security of the self-registration authentication process.

[0076] Step S20, using the product public key to decrypt the encrypted registration information to obtain the registration information and the first character string, wherein the registration information is information determined by the authentication server when the identity authentication of the electronic device passes;

[0077] It should be noted that the registration information and the first character string are original data or information obtained after decryption, which can be used for data verification or directly used.

[0078] Exemplarily, the encrypted registration information is decrypted using a product public key associated with the product identifier to obtain the original device and product information (registration information), as well as a character string (first character string) that can verify the integrity and validity of the device and product information, to ensure that the registration information has not been tampered with during transmission.

[0079] It can be understood that the process of decryption using the product public key ensures that only users holding the correct key can access and read the contents of the encrypted registration information, verifying the legitimacy of the electronic device, while effectively reducing malicious impersonation from third parties, thereby improving the security of the self-registration process.

[0080] Step S30, verifying the first character string according to the registration information;

[0081] It should be noted that verification refers to checking the first character string obtained after decryption to ensure its integrity, correctness or satisfying specific conditions, which may include format checking, content checking, etc.

[0082] Exemplarily, the first string is encrypted by the authentication server through a hash algorithm. The authentication server can use the registration information and the random value in the registration information as input to calculate the hash value (first string). The random value can be a device public key or a device identifier, etc. This embodiment does not specifically limit this. When the registration server verifies the first string, it extracts the corresponding value from the registration information in accordance with the agreement with the authentication server, and uses it together with the registration information as input to the hash algorithm to calculate the hash value. Since the hash algorithm is irreversible and difficult to crack, it can be determined by comparing the two hash values ​​whether the first string or the registration information has been tampered with.

[0083] It is understood that the verification step ensures that only untampered registration information can be accepted and used by the electronic device, ensuring the integrity and authenticity of the data.

[0084] Step S40: if the first character string is verified successfully, it is determined that the electronic device is successfully registered.

[0085] It should be noted that successful registration means that in the registration server, the electronic device goes through a series of registration processes (such as submitting registration information, performing identity authentication, etc.), and is finally recognized by the system and is granted specific permissions or identity.

[0086] For example, when a new smart refrigerator (electronic device) is started for the first time, it automatically sends the refrigerator's product identification and encrypted registration information to the manufacturer's registration server. The registration server uses the refrigerator's product public key to decrypt the received encrypted registration information to obtain a first string, and verifies the validity of the first string, including checking the device information and security checksum in the string. If the first string is verified, the registration server determines that the refrigerator is successfully registered, updates the database, and sends a notification of successful registration to the user's smart home application.

[0087] This embodiment provides a device registration method, which uses the product identifier to retrieve the product public key for decryption, effectively reducing the possibility of encrypted registration information being stolen or cracked, and preventing unauthorized users from forging product identifiers to cause malicious attacks on registration servers; by verifying the first character string, it ensures that the information is not tampered with by a third party during transmission, thereby preventing illegal devices from impersonating it. Both of these together improve the security of the electronic device self-registration authentication process.

[0088] In a feasible implementation manner, the registration information includes a device public key, and step S30 includes:

[0089] Step S31, encrypting the registration information using the device public key to obtain a second character string;

[0090] It should be noted that the second character string refers to the character string obtained by encrypting the product identification and device identification through an encryption algorithm. It is an encrypted form of the original product identification and device identification. Only the decryptor who holds the corresponding private key can restore the original information.

[0091] In addition, it should be noted that encryption is the process of converting original data (product identification and device identification) into an unreadable encrypted form (the second string) using a specific algorithm and key. Encryption algorithms include hash salting algorithms, symmetric encryption algorithms, etc. It should be noted that the encryption algorithm used here should be the same as the algorithm used to encrypt the first string.

[0092] Step S32, comparing the first character string and the second character string to see if they are the same;

[0093] If the first string and the second string are completely consistent in terms of character sequence, uppercase and lowercase, special characters, etc., then the two are considered to be the same.

[0094] It can be understood that by comparing the first character string and the second character string, it is possible to verify whether the received information has been tampered with or damaged during transmission, thereby ensuring the accuracy and authenticity of the information.

[0095] Step S33: if the first character string and the second character string are the same, it is determined that the first character string has passed the verification.

[0096] When there is a difference between the first character string and the second character string, it means that the registration information is damaged during transmission or maliciously tampered with by a third party, and the corresponding electronic device does not meet the conditions for registration.

[0097] For example, to verify whether an encrypted contract document has not been tampered with, you can use the file encryption key to encrypt the correct contract document content in advance and store it in a safe place as a comparison file. When the encrypted contract document is received, use the public key to decrypt it to obtain the original contract document and the file encryption key, encrypt the original contract document with the file encryption key, and compare it with the stored comparison file. If the two are exactly the same, it is determined that the contract document has not been tampered with and the verification is passed.

[0098] In this implementation, by comparing the first character string and the second character string, it is ensured that the information provided by the device during the registration process is consistent, and at the same time it is ensured that the information is not tampered with during the transmission process, effectively preventing malicious fraud from a third party and increasing the security of the self-registration authentication process.

[0099] In a feasible implementation manner, the registration information includes a device identification and a device public key, and after step S40, further includes:

[0100] Step S41, generating a login account and login password according to the device identification;

[0101] It should be noted that the device ID refers to the unique identification code or serial number of the device, which is used to uniquely identify and recognize the device in the system. It can be a hardware address, device ID, etc. The login account refers to the identity of the user in the system, and the login password is the secret information used to verify the user's identity. The combination of the login account and login password is usually used for access control to ensure that only authorized users can access system resources.

[0102] It is understandable that a unique login account and login password are generated for the electronic device based on the device identification, ensuring the uniqueness and security of the electronic device in the registration server; since the generation algorithm is not public, even if the electronic device is stolen or lost, it is difficult for a third party to obtain its login account and login password based on the device identification, and then connect to the registration server and launch malicious attacks on the registration server.

[0103] Step S42, using the device public key to encrypt the login account and login password to obtain a third character string;

[0104] It should be noted that the third string refers to the encrypted string obtained by encrypting the login account and login password using the device public key, which can only be decrypted if the corresponding private key is available. Since the electronic device needs to decrypt it during subsequent use, the encryption algorithm used here is not an asymmetric encryption algorithm, including the RSA algorithm, ECC (Elliptic curve cryptography) algorithm, etc.

[0105] It is understandable that encryption using the device public key ensures that only the corresponding electronic device can decrypt and obtain the login account and login password information, thereby preventing other unregistered devices from impersonating and connecting.

[0106] Step S43, sending the third character string to the electronic device, so that the electronic device uses the device private key to decrypt the third character string to obtain the login account and login password.

[0107] It should be noted that the device private key is the key used by the device to decrypt encrypted data, corresponds to the device public key, and is only stored in the electronic device itself.

[0108] Exemplarily, after the smart light bulb (electronic device) is successfully registered, a unique login account and login password are automatically generated for it based on the unique identification code (device identification) of the smart light bulb, and the login account and login password are encrypted using the device public key of the light bulb to obtain a third character string, and the encrypted third character string is sent to the smart light bulb. The smart light bulb can use its device private key to decrypt the received third character string to obtain the original login account and login password information, and use this pair of login account and login password for identity authentication in subsequent connections or communications with the registration server.

[0109] It can be understood that through the encryption and decryption process, the security of user accounts and passwords during transmission is ensured, preventing information leakage and illegal access.

[0110] In this implementation, a login account and password are automatically generated based on the device identification, thereby enhancing the security and identity uniqueness of the electronic device; and the device public key is used for encryption, thereby improving the security of the login account and password transmission and effectively preventing unregistered users from making malicious connections.

[0111] Based on the first embodiment of the present application, in the second embodiment of the present application, the same or similar contents as those in the above-mentioned embodiment 1 can be referred to the above introduction, and will not be described in detail later. The following takes the authentication server as the execution subject as an example to illustrate this embodiment.

[0112] On this basis, the device registration method includes steps E10 to E50:

[0113] Step E10, receiving identity authentication information sent by the electronic device, and authenticating the electronic device according to the identity authentication information, wherein the identity authentication information includes a device public key;

[0114] It should be noted that identity authentication information refers to a set of data used to verify the identity of a device, ensuring that the identity of the device is authentic when interacting with other devices or systems.

[0115] Exemplarily, after receiving the identity authentication information, the authentication code of the current electronic device is extracted from it, and the identity of the smart speaker is verified by verifying whether it matches the previously stored legitimate authentication code. If the authentication code verification is successful, the authentication server confirms the identity of the electronic device and allows it to proceed with the subsequent registration process.

[0116] Step E20, when the identity authentication of the electronic device is passed, determining the registration information according to the identity authentication information;

[0117] It should be noted that registration information refers to information used to complete the registration of an electronic device, which may include device permissions, configuration parameters, etc.

[0118] Exemplarily, the identity authentication information includes the device public key, device identification, product identification and authentication code, etc. All of them can be directly determined as registration information, or some of them (such as the device public key, device identification and product identification) can be extracted as registration information for subsequent device registration processes.

[0119] Step E30, encrypting the registration information using the device public key to obtain a first character string;

[0120] Step E40, encrypting the registration information and the first character string using the product private key to obtain encrypted registration information;

[0121] It should be noted that the product private key is the private key that corresponds to the product public key in a key pair. It is used to encrypt data, decrypt data or generate signatures. The encryption here needs to adopt an asymmetric encryption algorithm to facilitate subsequent decryption and verification.

[0122] After the electronic device passes the identity authentication, the authentication server needs to securely transmit the registration information to the electronic device, which is then transmitted by the electronic device to the registration server for device registration. Therefore, the registration information needs to be encrypted.

[0123] Exemplarily, the device public key, device identification and product identification are determined as registration information, and the device public key is used to encrypt the device identification and product identification to obtain a first character string. Compared with other device information (such as device model, product name, etc.), the device identification and product identification have higher confidentiality and non-repeatability. In the absence of a corresponding decryption key, the encrypted character string is more difficult to crack, making it difficult for attackers to replicate and thus difficult to impersonate legitimate electronic devices. Afterwards, the first character string and registration information are encrypted using the product private key. Due to the uniqueness and confidentiality of the private key, it is equivalent to adding a digital signature to the encrypted registration information, telling the server that receives the information that the information is trustworthy.

[0124] It can be understood that encryption using the device public key ensures that only the electronic device with the device private key can decrypt it, and then encryption using the product private key further ensures the security of the data during transmission and prevents unauthorized devices from stealing sensitive information.

[0125] Step E50, sending the encrypted registration information to the electronic device, so that the electronic device sends the product identification and the encrypted registration information to the registration server, and the registration server retrieves the product public key according to the product identification, uses the product public key to decrypt the encrypted registration information, obtains the registration information and the first character string, and verifies the first character string according to the registration information. When the first character string verification passes, it is confirmed that the electronic device is successfully registered.

[0126] In this implementation, the electronic device is authenticated to ensure the legitimacy of its identity, and then subsequent registration documents are provided to prevent malicious impersonation or malicious registration by a third party; by using the device public key to encrypt the product identification and device identification, it is equivalent to adding a digital signature, which can be used to confirm that the data has not been tampered with; encryption with the product private key prevents information leakage, thereby improving the security of the device self-registration process.

[0127] In a feasible implementation manner, before step E10, the method further includes:

[0128] Step E01, generating a product public key and a product private key according to the product identification;

[0129] Exemplarily, each electronic device has a unique product identification. The authentication server can use an encryption algorithm to generate a corresponding product public key and product private key based on the product identification, and securely store the product private key on the local end to ensure that only authorized users or systems can access it.

[0130] Exemplarily, tools such as OpenSSL, OpenSSH's ssh-keygen, GnuPG (GNU Privacy Guard)'s gpg, or Java's keytool can be used to generate different public and private key pairs based on specific identifiers, such as product identifiers, dates, product names, etc., which are not specifically limited in this embodiment.

[0131] It can be appreciated that by ensuring the confidentiality of the private key, the security of data transmission is increased and unauthorized access and tampering are prevented.

[0132] Step E02: Send the product identification and the product public key to the registration server, so that the registration server stores the product identification and the product public key in association.

[0133] It should be noted that the associated storage refers to the process in which the registration server associates the product identification and product public key in some way and stores them on the registration server after receiving them. This association can be based on key-value pairs, indexes or other forms, and this implementation does not specifically limit this. The registration server refers to the server that performs device registration and provides device registration and key management services.

[0134] It is understandable that synchronizing product information (product identification and product public key) with a registration server helps to achieve cross-platform or other device self-registration.

[0135] In this implementation, a secure key management mechanism is used to associate the product identification and product public key and store them in the registration server, ensuring that only devices that have successfully passed the authentication server can access the registration server. This helps prevent unauthorized devices from maliciously attacking the registration server, thereby improving the security of the device self-registration process.

[0136] In a feasible implementation manner, the identity authentication information includes a product identification and a first authentication code, and the step of performing identity authentication on the electronic device according to the identity authentication information in step E10 includes:

[0137] Step E11, retrieving a second authentication code according to the product identification;

[0138] It should be noted that the first authentication code refers to a secret code used to verify the identity of the device, which is usually generated and sent by the device during the identity authentication process; the second authentication code is usually pre-generated and stored, corresponding to the first authentication code, and is used to verify the validity of the first authentication code.

[0139] Step E12: when the first authentication code and the second authentication code are the same, determining that the identity authentication of the electronic device is passed.

[0140] For example, a product identification and a first authentication code sent by a smart refrigerator (electronic device) are received, and a second authentication code associated with the product identification of the smart refrigerator is retrieved from a database, and the two authentication codes are compared. If they are the same, the identity of the smart refrigerator can be confirmed to be legitimate, and the product identification and device identification of the smart refrigerator are encrypted using the device public key of the smart refrigerator to generate a first string. The first string may then be sent to a server of the smart home system for storage or further processing.

[0141] Exemplarily, if there is a difference between the first authentication code and the second authentication code, a verification request may be sent to the corresponding electronic device, or the electronic device may be directly put into a blacklist to reject subsequent authentication requests, which is not specifically limited in this embodiment.

[0142] In this embodiment, by verifying the legitimacy of the identity of the electronic device, unauthorized devices are prevented from launching network attacks by forging identities, ensuring that all electronic devices in the network are verified, and improving the stability and reliability of authentication services and registration services.

[0143] Based on the first embodiment and / or the second embodiment of the present application, in the third embodiment of the present application, the same or similar contents as those of the first and second embodiments can be referred to the above description, and will not be described in detail later.

[0144] On this basis, the device registration method includes steps A10 to A20:

[0145] Step A10, sending identity authentication information to the authentication server, wherein the identity authentication information includes a device public key, so that the authentication server determines registration information according to the identity authentication information when the identity authentication of the electronic device passes, encrypts the registration information using the device public key to obtain a first character string, and encrypts the registration information and the first character string using the product private key to obtain encrypted registration information;

[0146] It should be noted that the authentication server refers to a server used to receive and process identity authentication information, and is usually responsible for verifying the identity of the device.

[0147] It can be understood that by sending the identity authentication information to the authentication server, the identity of the device can be effectively verified. At the same time, the authentication server can centrally manage the identity authentication information of all electronic devices, which is convenient for the registration and management of electronic devices.

[0148] Step A20, when the encrypted registration information sent by the authentication server is received, the product identification and the encrypted registration information are sent to the registration server, so that the registration server retrieves the product public key according to the product identification, and uses the product public key to decrypt the encrypted registration information, obtains the registration information and the first character string, and verifies the first character string according to the registration information. When the first character string verification is passed, it is confirmed that the electronic device is successfully registered.

[0149] It should be noted that the registration server refers to the server where users receive registration information and perform verification, and is used for device registration and device management.

[0150] The electronic device receives the encrypted registration information sent by the authentication server, which indicates that the identity of the electronic device is legitimate, and the subsequent device registration steps can be continued. After successful registration, the electronic device will receive the login account and password sent by the registration server, and can establish a communication connection with the registration server through the account and password, which is convenient for users or systems to manage the electronic device.

[0151] In this embodiment, after identity authentication is performed on the authentication server and the device identity is confirmed to be legitimate, the encrypted registration information is obtained; then the device is registered in the registration server, and after the identity and registration information are confirmed, the login account and login password for establishing the connection are obtained;

[0152] For example, to help understand the implementation process of the device registration method obtained by combining this embodiment with the above-mentioned embodiment 1, please refer to Figure 2 , Figure 2 A device interaction schematic diagram is provided, specifically:

[0153] The authentication server and the registration server are in a data synchronization relationship, and the product identification information and product public key information are synchronized between the two;

[0154] The electronic device goes to the authentication server for device authentication. After the device authentication is completed, the authentication server returns the encrypted registration information to the electronic device;

[0155] The electronic device registers the device with the registration server. After the registration server confirms that the registration is successful, it will return the login account and login password to the electronic device.

[0156] In order to help understand the above technical solution, a more complete embodiment of a proxy configuration method is provided for illustration. Figure 3 , Figure 3 A schematic diagram of the interactive process of a device registration method is provided, specifically:

[0157] Step S101, the electronic device records the product identification, the device public key and the device private key.

[0158] Step S102: the authentication server generates a product public key and a product private key according to the product identifier, wherein the product private key is stored in the local terminal and is not published.

[0159] Step S103: The authentication server sends the product identification and product public key to the registration server.

[0160] Step S104: The registration server stores the product identifier and the product public key in association with each other.

[0161] Step S105: the electronic device sends identity authentication information to an authentication server.

[0162] Step S106, the authentication server receives the identity authentication information sent by the electronic device, and performs identity authentication on the electronic device according to the identity authentication information, and after the identity authentication is passed, determines the registration information according to the identity authentication information.

[0163] Step S107: The authentication server encrypts the registration information using the device public key to obtain a first character string.

[0164] Step S108: The authentication server uses the product private key to encrypt the registration information and the first character string to obtain encrypted registration information.

[0165] Step S109: the authentication server sends the encrypted registration information to the electronic device.

[0166] Step S110, the electronic device receives the encrypted registration information sent by the authentication server, and sends the product identification and the encrypted registration information to the registration server.

[0167] Step S111: the registration server retrieves the product public key according to the product identifier.

[0168] Step S112: The registration server decrypts the encrypted registration information using the product public key to obtain the first character string and the registration information.

[0169] Step S113, the registration server verifies the first string according to the registration information, may use the device public key in the registration information to encrypt the registration information to obtain a second string, and compares whether the first string and the second string are the same.

[0170] Step S114: When the first character string is verified successfully, the registration server generates a login account and a login password according to the device identification.

[0171] Step S115: The registration server uses the device public key to encrypt the login account and login password to obtain a third character string.

[0172] Step S116: the registration server sends a third character string to the electronic device.

[0173] Step S117: The electronic device decrypts the third character string using the device private key to obtain the login account and login password.

[0174] Step S118: The electronic device uses the login account and login password to establish a connection with the registration server.

[0175] It should be noted that the above examples are only used to understand the present application and do not constitute a limitation on the device registration method of the present application. More simple transformations based on this technical concept are all within the scope of protection of the present application.

[0176] The present application also provides a device registration device, please refer to Figure 4 , the authentication server device registration device is applied to the registration server, and the device includes:

[0177] The retrieval module 10 is used to retrieve the product public key according to the product identification when receiving the product identification and the encrypted registration information sent by the electronic device, wherein the encrypted registration information is the information obtained by the authentication server using the product private key to encrypt the registration information and the first character string, and the first character string is the character string obtained by the authentication server using the device public key to encrypt the registration information;

[0178] The decryption module 20 is used to decrypt the encrypted registration information using the product public key to obtain the registration information and the first character string, wherein the registration information is information determined by the authentication server when the identity authentication of the electronic device passes;

[0179] A verification module 30, used to verify the first character string according to the registration information;

[0180] The confirmation module 40 is used to confirm that the electronic device is successfully registered when the first character string is verified.

[0181] The device registration device provided in the embodiment of the present application adopts the device registration method in the above embodiment, which can solve the technical problem of low security of self-registration encryption authentication. Compared with the prior art, the beneficial effects of the device registration device provided in the present application are the same as the beneficial effects of the device registration method provided in the above embodiment, and other technical features in the device registration device are the same as the features disclosed in the above embodiment method, which will not be repeated here.

[0182] This application embodiment also provides another device registration device, please refer to Figure 5 The device registration device is applied to the authentication server, and the device includes:

[0183] The identity authentication module 50 is used to receive identity authentication information sent by the electronic device and authenticate the electronic device according to the identity authentication information, wherein the identity authentication information includes a device public key;

[0184] The information determination module 60 is used to determine the registration information according to the identity authentication information when the identity authentication of the electronic device is passed;

[0185] The public key encryption module 70 is used to encrypt the registration information using the device public key to obtain a first character string;

[0186] The private key encryption module 80 is used to encrypt the registration information and the first character string using the product private key to obtain the encrypted registration information;

[0187] The information sending module 90 is used to send encrypted registration information to the electronic device, so that the electronic device sends the product identification and the encrypted registration information to the registration server, and the registration server retrieves the product public key according to the product identification, uses the product public key to decrypt the encrypted registration information, obtains the registration information and the first character string, and verifies the first character string according to the registration information. When the first character string verification passes, it is confirmed that the electronic device is successfully registered.

[0188] The device registration device provided in the embodiment of the present application adopts the device registration method in the above embodiment, which can solve the technical problem of low security of self-registration encryption authentication. Compared with the prior art, the beneficial effects of the device registration device provided in the present application are the same as the beneficial effects of the device registration method provided in the above embodiment, and other technical features in the device registration device are the same as the features disclosed in the above embodiment method, which will not be repeated here.

[0189] An embodiment of the present application provides a registration server, which includes: at least one processor; and a memory communicatively connected to the at least one processor; wherein the memory stores instructions executable by the at least one processor, and the instructions are executed by the at least one processor so that the at least one processor can execute the device registration method in the above-mentioned embodiment one.

[0190] Reference below Figure 6, which shows a schematic diagram of the structure of a registration server suitable for implementing an embodiment of the present application. The registration server in the embodiment of the present application may include but is not limited to mobile terminals such as mobile phones, laptop computers, digital broadcast receivers, PDAs (Personal Digital Assistants), PADs (Portable Application Descriptions), PMPs (Portable Media Players), vehicle-mounted terminals (such as vehicle-mounted navigation terminals), etc., and fixed terminals such as digital TVs, desktop computers, etc. Figure 6 The registration server shown is merely an example and should not bring any limitation to the functions and scope of use of the embodiments of the present application.

[0191] like Figure 6 As shown, the registration server may include a processing device 1001 (e.g., a central processing unit, a graphics processor, etc.), which may perform various appropriate actions and processes according to a program stored in a read-only memory (ROM: Read Only Memory) 1002 or a program loaded from a storage device 1003 to a random access memory (RAM: Random Access Memory) 1004. In RAM1004, various programs and data required for the operation of the registration server are also stored. The processing device 1001, ROM1002, and RAM1004 are connected to each other via a bus 1005. An input / output (I / O) interface 1006 is also connected to the bus. Generally, the following systems may be connected to the I / O interface 1006: an input device 1007 including, for example, a touch screen, a touch pad, a keyboard, a mouse, an image sensor, a microphone, an accelerometer, a gyroscope, etc.; an output device 1008 including, for example, a liquid crystal display (LCD: Liquid Crystal Display), a speaker, a vibrator, etc.; a storage device 1003 including, for example, a magnetic tape, a hard disk, etc.; and a communication device 1009. The communication device 1009 can allow the registration server to communicate with other devices wirelessly or by wire to exchange data. Although the figure shows a registration server with various systems, it should be understood that it is not required to implement or have all the systems shown. More or fewer systems can be implemented or have alternatively.

[0192] In particular, according to the embodiments disclosed in the present application, the process described above with reference to the flowchart can be implemented as a computer software program. For example, the embodiments disclosed in the present application include a computer program product, which includes a computer program carried on a computer-readable medium, and the computer program includes a program code for executing the method shown in the flowchart. In such an embodiment, the computer program can be downloaded and installed from a network through a communication device, or installed from a storage device 1003, or installed from a ROM 1002. When the computer program is executed by the processing device 1001, the above-mentioned functions defined in the method of the embodiment disclosed in the present application are executed.

[0193] The registration server provided in the embodiment of the present application adopts the device registration method in the above embodiment, which can solve the technical problem of low security of self-registration encryption authentication. Compared with the prior art, the beneficial effects of the registration server provided in the present application are the same as the beneficial effects of the device registration method provided in the above embodiment, and the other technical features in the registration server are the same as the features disclosed in the method of the previous embodiment, which will not be repeated here.

[0194] It should be understood that the various parts disclosed in this application can be implemented by hardware, software, firmware or a combination thereof. In the description of the above embodiments, specific features, structures, materials or characteristics can be combined in any one or more embodiments or examples in a suitable manner.

[0195] The above is only a specific implementation of the present application, but the protection scope of the present application is not limited thereto. Any person skilled in the art who is familiar with the present technical field can easily think of changes or substitutions within the technical scope disclosed in the present application, which should be included in the protection scope of the present application. Therefore, the protection scope of the present application should be based on the protection scope of the claims.

[0196] An embodiment of the present application provides an authentication server, which includes: at least one processor; and a memory communicatively connected to the at least one processor; wherein the memory stores instructions executable by the at least one processor, and the instructions are executed by the at least one processor so that the at least one processor can execute the device registration method in the above-mentioned embodiment 1.

[0197] Reference below Figure 7 , which shows a schematic diagram of the structure of an authentication server suitable for implementing an embodiment of the present application. The authentication server in the embodiment of the present application may include but is not limited to mobile terminals such as mobile phones, notebook computers, digital broadcast receivers, PDAs, PADs, PMPs, vehicle terminals (such as vehicle navigation terminals), etc., and fixed terminals such as digital TVs, desktop computers, etc. Figure 7The authentication server shown is merely an example and should not bring any limitation to the functions and scope of use of the embodiments of the present application.

[0198] like Figure 7 As shown, the authentication server may include a processing device 1001 (e.g., a central processing unit, a graphics processor, etc.), which can perform various appropriate actions and processes according to a program stored in a read-only memory (ROM: Read Only Memory) 1002 or a program loaded from a storage device 1003 to a random access memory (RAM: Random Access Memory) 1004. In RAM1004, various programs and data required for the operation of the authentication server are also stored. The processing device 1001, ROM1002, and RAM1004 are connected to each other through a bus 1005. An input / output (I / O) interface 1006 is also connected to the bus. Generally, the following systems can be connected to the I / O interface 1006: an input device 1007 including, for example, a touch screen, a touch pad, a keyboard, a mouse, an image sensor, a microphone, an accelerometer, a gyroscope, etc.; an output device 1008 including, for example, a liquid crystal display (LCD: Liquid Crystal Display), a speaker, a vibrator, etc.; a storage device 1003 including, for example, a magnetic tape, a hard disk, etc.; and a communication device 1009. The communication device 1009 can allow the authentication server to communicate with other devices wirelessly or by wire to exchange data. Although the figure shows an authentication server with various systems, it should be understood that it is not required to implement or have all the systems shown. More or fewer systems can be implemented or have alternatively.

[0199] In particular, according to the embodiments disclosed in the present application, the process described above with reference to the flowchart can be implemented as a computer software program. For example, the embodiments disclosed in the present application include a computer program product, which includes a computer program carried on a computer-readable medium, and the computer program includes a program code for executing the method shown in the flowchart. In such an embodiment, the computer program can be downloaded and installed from a network through a communication device, or installed from a storage device 1003, or installed from a ROM 1002. When the computer program is executed by the processing device 1001, the above-mentioned functions defined in the method of the embodiment disclosed in the present application are executed.

[0200] The authentication server provided in the embodiment of the present application adopts the device registration method in the above embodiment to solve the technical problem of low security of self-registration encryption authentication. Compared with the prior art, the beneficial effects of the authentication server provided in the present application are the same as the beneficial effects of the device registration method provided in the above embodiment, and the other technical features in the authentication server are the same as the features disclosed in the method of the previous embodiment, which will not be repeated here.

[0201] It should be understood that the various parts disclosed in this application can be implemented by hardware, software, firmware or a combination thereof. In the description of the above embodiments, specific features, structures, materials or characteristics can be combined in any one or more embodiments or examples in a suitable manner.

[0202] The above is only a specific implementation of the present application, but the protection scope of the present application is not limited thereto. Any person skilled in the art who is familiar with the present technical field can easily think of changes or substitutions within the technical scope disclosed in the present application, which should be included in the protection scope of the present application. Therefore, the protection scope of the present application should be based on the protection scope of the claims.

[0203] An embodiment of the application provides an electronic device, which includes: at least one processor; and a memory communicatively connected to the at least one processor; wherein the memory stores instructions executable by the at least one processor, and the instructions are executed by the at least one processor so that the at least one processor can execute the device registration method in the above-mentioned embodiment one.

[0204] Reference below Figure 8 , which shows a schematic diagram of the structure of an electronic device suitable for implementing the embodiments of the present application. The electronic device in the embodiments of the present application may include but is not limited to mobile terminals such as mobile phones, notebook computers, digital broadcast receivers, PDAs, PADs, PMPs, vehicle terminals (such as vehicle navigation terminals), etc., and fixed terminals such as digital TVs, desktop computers, etc. Figure 8 The electronic device shown is merely an example and should not bring any limitation to the functions and scope of use of the embodiments of the present application.

[0205] like Figure 8As shown, the electronic device may include a processing device 1001 (e.g., a central processing unit, a graphics processor, etc.), which can perform various appropriate actions and processes according to a program stored in a read-only memory (ROM: Read Only Memory) 1002 or a program loaded from a storage device 1003 to a random access memory (RAM: Random Access Memory) 1004. In RAM1004, various programs and data required for the operation of the electronic device are also stored. The processing device 1001, ROM1002, and RAM1004 are connected to each other through a bus 1005. An input / output (I / O) interface 1006 is also connected to the bus. Generally, the following systems can be connected to the I / O interface 1006: an input device 1007 including, for example, a touch screen, a touch pad, a keyboard, a mouse, an image sensor, a microphone, an accelerometer, a gyroscope, etc.; an output device 1008 including, for example, a liquid crystal display (LCD: Liquid Crystal Display), a speaker, a vibrator, etc.; a storage device 1003 including, for example, a magnetic tape, a hard disk, etc.; and a communication device 1009. The communication device 1009 can allow the electronic device to communicate with other devices wirelessly or by wire to exchange data. Although the figure shows an electronic device with various systems, it should be understood that it is not required to implement or have all the systems shown. More or fewer systems can be implemented or have alternatively.

[0206] In particular, according to the embodiments disclosed in the present application, the process described above with reference to the flowchart can be implemented as a computer software program. For example, the embodiments disclosed in the present application include a computer program product, which includes a computer program carried on a computer-readable medium, and the computer program includes a program code for executing the method shown in the flowchart. In such an embodiment, the computer program can be downloaded and installed from a network through a communication device, or installed from a storage device 1003, or installed from a ROM 1002. When the computer program is executed by the processing device 1001, the above-mentioned functions defined in the method of the embodiment disclosed in the present application are executed.

[0207] The electronic device provided in the embodiment of the present application adopts the device registration method in the above embodiment to solve the technical problem of low security of self-registration encryption authentication. Compared with the prior art, the beneficial effects of the electronic device provided in the present application are the same as the beneficial effects of the device registration method provided in the above embodiment, and other technical features in the electronic device are the same as the features disclosed in the method of the previous embodiment, which will not be repeated here.

[0208] It should be understood that the various parts disclosed in this application can be implemented by hardware, software, firmware or a combination thereof. In the description of the above embodiments, specific features, structures, materials or characteristics can be combined in any one or more embodiments or examples in a suitable manner.

[0209] The above is only a specific implementation of the present application, but the protection scope of the present application is not limited thereto. Any person skilled in the art who is familiar with the present technical field can easily think of changes or substitutions within the technical scope disclosed in the present application, which should be included in the protection scope of the present application. Therefore, the protection scope of the present application should be based on the protection scope of the claims.

[0210] An embodiment of the present application provides a computer-readable storage medium having computer-readable program instructions (ie, a computer program) stored thereon, wherein the computer-readable program instructions are used to execute the device registration method in the above embodiment.

[0211] The computer-readable storage medium provided in the embodiment of the present application may be, for example, a USB flash drive, but is not limited to electrical, magnetic, optical, electromagnetic, infrared, or semiconductor systems or devices, or any combination of the above. More specific examples of computer-readable storage media may include, but are not limited to: an electrical connection with one or more wires, a portable computer disk, a hard disk, a random access memory (RAM: Random Access Memory), a read-only memory (ROM: Read Only Memory), an erasable programmable read-only memory (EPROM: Erasable Programmable Read Only Memory or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM: CD-Read Only Memory), an optical storage device, a magnetic storage device, or any suitable combination of the above. In this embodiment, the computer-readable storage medium may be any tangible medium containing or storing a program, which may be used by or in combination with an instruction execution system or device. The program code contained on the computer-readable storage medium may be transmitted using any appropriate medium, including but not limited to: wires, optical cables, RF (Radio Frequency: Radio Frequency), etc., or any suitable combination of the above.

[0212] The computer-readable storage medium may be included in the registration server, the authentication server and / or the electronic device; or may exist independently without being assembled into the registration server, the authentication server and / or the electronic device.

[0213] The above-mentioned computer-readable storage medium carries one or more programs. When the above-mentioned one or more programs are executed by the registration server, the registration server: when receiving the product identification and encrypted registration information sent by the electronic device, retrieve the product public key according to the product identification, wherein the encrypted registration information is the information obtained by the authentication server using the product private key to encrypt the registration information and the first character string; use the product public key to decrypt the encrypted registration information to obtain the registration information and the first character string, wherein the registration information is the information determined by the authentication server when the identity authentication of the electronic device is passed, and the first character string is the character string obtained by the authentication server using the device public key to encrypt the registration information; verify the first character string according to the registration information; and confirm that the electronic device is successfully registered when the first character string is verified.

[0214] Computer program code for performing the operations of the present application may be written in one or more programming languages ​​or a combination thereof, including object-oriented programming languages ​​such as Java, Smalltalk, C++, and conventional procedural programming languages ​​such as "C" or similar programming languages. The program code may be executed entirely on the user's computer, partially on the user's computer, as a separate software package, partially on the user's computer and partially on a remote computer, or entirely on a remote computer or server. In the case of a remote computer, the remote computer may be connected to the user's computer through any type of network, including a local area network (LAN) or a wide area network (WAN), or may be connected to an external computer (e.g., via the Internet using an Internet service provider).

[0215] The flow chart and block diagram in the accompanying drawings illustrate the possible architecture, function and operation of the system, method and computer program product according to various embodiments of the present application. In this regard, each square box in the flow chart or block diagram can represent a module, a program segment or a part of a code, and the module, the program segment or a part of the code contains one or more executable instructions for realizing the specified logical function. It should also be noted that in some alternative implementations, the functions marked in the square box can also occur in a sequence different from that marked in the accompanying drawings. For example, two square boxes represented in succession can actually be executed substantially in parallel, and they can sometimes be executed in the opposite order, depending on the functions involved. It should also be noted that each square box in the block diagram and / or flow chart, and the combination of the square boxes in the block diagram and / or flow chart can be implemented with a dedicated hardware-based system that performs a specified function or operation, or can be implemented with a combination of dedicated hardware and computer instructions.

[0216] The modules involved in the embodiments described in this application may be implemented by software or hardware, wherein the name of the module does not constitute a limitation on the unit itself in some cases.

[0217] The readable storage medium provided in the embodiment of the present application is a computer-readable storage medium, which stores computer-readable program instructions (i.e., computer programs) for executing the above-mentioned device registration method, and can solve the technical problem of low security of self-registration encryption authentication. Compared with the prior art, the beneficial effects of the computer-readable storage medium provided in the present application are the same as the beneficial effects of the device registration method provided in the above-mentioned embodiment, and will not be repeated here.

[0218] An embodiment of the present application also provides a computer program product, including a computer program, which implements the steps of the above-mentioned device registration method when executed by a processor.

[0219] The computer program product provided in the embodiment of the present application can solve the technical problem of low security of self-registration encryption authentication. Compared with the prior art, the beneficial effects of the computer program product provided in the present application are the same as the beneficial effects of the device registration method provided in the above embodiment, which will not be repeated here.

[0220] The above descriptions are only some embodiments of the present application, and are not intended to limit the patent scope of the present application. All equivalent structural changes made using the contents of the present application specification and drawings under the technical concept of the present application, or direct / indirect applications in other related technical fields are included in the patent protection scope of the present application.

Claims

1. A device registration method, characterized in that: The device registration method is applied to a registration server, and the method includes: Upon receiving a product identification and encrypted registration information sent by an electronic device, retrieving a product public key according to the product identification, wherein the encrypted registration information is information obtained by encrypting the registration information and a first character string by the authentication server using the product private key, and the first character string is a character string obtained by encrypting the registration information by the authentication server using the device public key; decrypting the encrypted registration information using the product public key to obtain the registration information and the first character string, wherein the registration information is information determined by the authentication server when the identity authentication of the electronic device passes; Verifying the first character string according to the registration information; When the first character string is verified successfully, it is confirmed that the electronic device is successfully registered.

2. The device registration method according to claim 1, characterized in that: The registration information includes a device public key, and the step of verifying the first character string according to the registration information includes: Encrypt the registration information using the device public key to obtain a second character string; Compare whether the first character string and the second character string are the same; In the case that the first character string and the second character string are the same, it is confirmed that the first character string has passed verification.

3. A device registration method, characterized in that: The device registration method is applied to the authentication server, and the method includes: Receiving identity authentication information sent by an electronic device, and performing identity authentication on the electronic device according to the identity authentication information, wherein the identity authentication information includes a device public key; In the case where the identity authentication of the electronic device is passed, determining the registration information according to the identity authentication information; Encrypt the registration information using the device public key to obtain a first character string; Encrypt the registration information and the first character string using a product private key to obtain encrypted registration information; Send the encrypted registration information to the electronic device, so that the electronic device sends the product identification and the encrypted registration information to the registration server, and the registration server retrieves the product public key according to the product identification, uses the product public key to decrypt the encrypted registration information, obtains the registration information and the first character string, and verifies the first character string according to the registration information. When the first character string is verified, it is confirmed that the electronic device is successfully registered.

4. The device registration method according to claim 3, characterized in that: Before the step of receiving the identity authentication information sent by the electronic device, the method further includes: Generate product public key and product private key according to product identification; The product identification and the product public key are sent to a registration server, so that the registration server stores the product identification and the product public key in association with each other.

5. The device registration method according to claim 3, characterized in that: The identity authentication information includes a product identification and a first authentication code, and the step of authenticating the electronic device according to the identity authentication information includes: Retrieving a second authentication code according to the product identification; When the first authentication code is the same as the second authentication code, it is determined that the identity authentication of the electronic device is passed.

6. A device registration method, characterized in that: The device registration method is applied to an electronic device, and the method comprises: Sending identity authentication information to an authentication server, wherein the identity authentication information includes a device public key, so that the authentication server determines registration information according to the identity authentication information when the identity authentication of the electronic device passes, and encrypts the registration information using the device public key to obtain a first character string, and encrypts the registration information and the first character string using a product private key to obtain encrypted registration information; Upon receiving the encrypted registration information sent by the authentication server, the product identification and the encrypted registration information are sent to the registration server, so that the registration server retrieves the product public key according to the product identification, and uses the product public key to decrypt the encrypted registration information to obtain the registration information and the first character string, and verifies the first character string according to the registration information, and confirms that the electronic device has been successfully registered if the first character string is verified.

7. A registration server, characterized in that: The registration server comprises: a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the computer program is configured to implement the steps of the device registration method according to any one of claims 1 to 2.

8. An authentication server, characterized in that: The authentication server comprises: a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the computer program is configured to implement the steps of the device registration method according to any one of claims 3 to 5.

9. An electronic device, characterized in that: The electronic device comprises: a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the computer program is configured to implement the steps of the device registration method according to claim 6.

10. A storage medium, characterized in that: The storage medium is a computer-readable storage medium, and a computer program is stored on the storage medium. When the computer program is executed by a processor, the steps of the device registration method according to any one of claims 1 to 6 are implemented.

Images