Equipment login method and device without networking equipment, equipment and storage medium
By generating dynamic passwords for networkless devices and using the QR code security verification mechanism, the data leakage risk caused by fixed password-form login is solved, and the login security and access control of networkless devices is improved.
Patent Information
- Application Number
- CN202411171153.2
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2024-08-23
- Publication Date
- 2025-01-10
AI Technical Summary
Logging in a fixed password form without networked devices can risk data leakage. Competitors can obtain passwords and can lead to product confidential data leakage, bringing data security risks.
By obtaining the identification information of the networkless device, setting the validity period, forming the original string and transcoding it into a QR code, sending it to the password management device for analysis and security verification, and generating a dynamic password for login after the verification is successful, enhancing login Security.
Effectively prevent unauthorized access, reduce the risk of information leakage, improve the security of logging in without networked devices, and enhance the timeliness and security of access control.
Smart Images

Figure CN119299120A_ABST
Abstract
Description
Technical Field
[0001] The present application belongs to the field of information security technology, and specifically relates to a device login method, apparatus, device and storage medium for a non-networked device. Background Art
[0002] In the field of information security, protecting data from unauthorized access is of vital importance. Especially when developing and debugging terminal devices that do not have Internet connection functions, information security experts use technologies such as dynamic passwords and multi-factor authentication to enhance system security and effectively prevent unauthorized access and data leakage.
[0003] In order to prevent information leakage, local password protection is usually used to limit access to non-networked devices. However, fixed passwords are at risk of being leaked. If local passwords are obtained by competitors, product confidential data will be leaked, bringing data security risks.
[0004] Therefore, how to solve the risk of data leakage caused by logging into non-internet-connected devices with fixed passwords is the problem that needs to be solved at present. Summary of the invention
[0005] The present application provides a device login method, apparatus, device and storage medium for a non-networked device, which are used to solve the data leakage risk caused by logging into a non-networked device in the form of a fixed password.
[0006] In a first aspect, the present application provides a device login method for a non-networked device, which is applied to a login device, and the method includes:
[0007] Obtain identification information of a non-networked device, and set a validity period for the identification information to obtain an original character string corresponding to the non-networked device;
[0008] Transcoding the original string to obtain a QR code corresponding to the original string, and sending the QR code to a password management device;
[0009] Receive the dynamic password fed back by the password management device, and perform login processing on the non-networked device based on the dynamic password.
[0010] Optionally, the step of setting a validity period for the identification information to obtain an original character string corresponding to the non-networked device includes:
[0011] Determine a validity period range corresponding to the identification information, where the validity period range is used to indicate a valid access period of the non-networked device, and a start time of the valid access period is a time when the identification information is acquired;
[0012] The original character string is generated according to the identification information and the validity period range.
[0013] Optionally, the performing transcoding processing on the original string to obtain a QR code corresponding to the original string includes:
[0014] Encrypting the original string using an encryption key to generate an encrypted string, wherein the encryption key is determined by negotiation between the password management device and the login device;
[0015] The encrypted character string is transcoded to obtain the QR code.
[0016] Optionally, the performing a login process on the non-networked device based on the dynamic password includes:
[0017] Determining whether the moment of receiving the dynamic password is within the valid access period;
[0018] If so, the dynamic password is used to log in to the non-networked device.
[0019] In a second aspect, the present application provides a device login method for a non-networked device, which is applied to a password management device, and the method includes:
[0020] Obtain the QR code sent by the login device, and parse the QR code to obtain a corresponding original string, where the original string is used to indicate the identification information and validity period of the non-networked device;
[0021] Based on the validity period and the identification information, performing security verification processing on the QR code;
[0022] When the two-dimensional code verification is passed, a dynamic password corresponding to the non-networked device is generated and the dynamic password is fed back to the login device.
[0023] Optionally, the performing security verification processing on the QR code based on the validity period and the identification information includes:
[0024] Determine whether there is a security identifier matching the identifier information in the security identifier list;
[0025] If yes, determine whether the current time is within the corresponding valid access period;
[0026] If the current moment is within the corresponding valid access period, determining that the QR code security verification has passed;
[0027] When there is no security identification matching the identification information in the security identification list or the current time is not within the corresponding valid access period, it is determined that the two-dimensional code security check fails.
[0028] Optionally, the parsing of the QR code to obtain a corresponding original string includes:
[0029] Transcoding the QR code to obtain an encrypted string corresponding to the QR code;
[0030] The encrypted string is decrypted using a decryption key to obtain a corresponding original string, wherein the decryption key is determined by negotiation between the password management device and the login device.
[0031] In a third aspect, the present application provides a device login apparatus for a non-networked device, which is applied to a login device, and the device includes:
[0032] An acquisition module, used to acquire identification information of a non-networked device;
[0033] A processing module, used to set a validity period for the identification information and obtain an original character string corresponding to the non-networked device;
[0034] The processing module is further used to perform transcoding processing on the original string to obtain a QR code corresponding to the original string;
[0035] A sending module, used to send the QR code to a password management device;
[0036] The receiving module is used to receive the dynamic password fed back by the password management device, and perform login processing on the non-networked device based on the dynamic password.
[0037] Optionally, the device login apparatus for a non-networked device further includes: a determination module;
[0038] The determination module is used to determine the validity period range corresponding to the identification information, the validity period range is used to indicate the valid access period of the non-networked device, and the starting time of the valid access period is the acquisition time of the identification information;
[0039] The processing module is further used to generate the original character string according to the identification information and the validity period range.
[0040] Optionally, the processing module is further configured to encrypt the original string using an encryption key to generate an encrypted string, wherein the encryption key is determined by negotiation between the password management device and the login device;
[0041] The processing module is further used to perform transcoding processing on the encrypted string to obtain the QR code.
[0042] Optionally, the device login apparatus for a non-networked device further includes: a judgment module;
[0043] The judging module is used to judge whether the moment of receiving the dynamic password is within the valid access period;
[0044] The processing module is also used to use the dynamic password to log in to the non-networked device when the dynamic password is received within the valid access period.
[0045] In a fourth aspect, the present application provides a device login apparatus for a non-networked device, which is applied to a password management device, and the device includes:
[0046] The acquisition module is used to obtain the QR code sent by the login device;
[0047] A processing module, used to parse the two-dimensional code to obtain a corresponding original string, where the original string is used to indicate the identification information and validity period of the non-networked device;
[0048] The processing module is further used to perform security verification processing on the two-dimensional code based on the validity period and the identification information;
[0049] The processing module is further configured to generate a dynamic password corresponding to the non-networked device when the two-dimensional code verification passes;
[0050] The sending module is used to feed back the dynamic password to the login device.
[0051] Optionally, the device login apparatus for a non-networked device further includes: a judgment module and a determination module;
[0052] The judging module is used to judge whether there is a security identifier matching the identifier information in the security identifier list;
[0053] The judging module is further configured to judge whether the current time is within the corresponding valid access period when there is a security identifier matching the identifier information in the security identifier list;
[0054] The determination module is used to determine that the two-dimensional code security verification has passed when the current moment is within the corresponding valid access period;
[0055] The determination module is further configured to determine that the two-dimensional code security check fails when there is no security identification matching the identification information in the security identification list or the current moment is not within the corresponding valid access period.
[0056] Optionally, the processing module is further used to perform transcoding processing on the two-dimensional code to obtain an encrypted string corresponding to the two-dimensional code;
[0057] The processing module is further used to decrypt the encrypted string using a decryption key to obtain a corresponding original string, wherein the decryption key is determined by negotiation between the password management device and the login device.
[0058] In a fifth aspect, the present application provides a device login device for a non-networked device, including:
[0059] Memory;
[0060] processor;
[0061] Wherein, the memory stores computer-executable instructions;
[0062] The processor executes the computer-executable instructions stored in the memory to implement the device login method for a non-networked device as described in the first aspect and various possible implementations of the first aspect or the second aspect and various possible implementations of the second aspect.
[0063] In a sixth aspect, the present application provides a computer storage medium having computer execution instructions stored thereon, wherein the computer execution instructions are executed by a processor to implement a device login method for a non-networked device as described in the first aspect and various possible implementations of the first aspect or the second aspect and various possible implementations of the second aspect.
[0064] The present application provides a device login method, apparatus, device and storage medium for a non-networked device, wherein the login device obtains identification information of the non-networked device and sets a validity period for the identification information to obtain an original character string corresponding to the non-networked device; the original character string is transcoded to obtain a QR code corresponding to the original character string, and the QR code is sent to a password management device; the password management device parses the QR code to obtain a corresponding original character string, and the original character string is used to indicate the identification information and validity period of the non-networked device; based on the validity period and the identification information, the QR code is security-verified; if the verification passes, a dynamic password is generated and fed back to the login device; so that the login device uses a dynamic password to log in to the non-networked device, thereby improving the security of logging in to the non-networked device. BRIEF DESCRIPTION OF THE DRAWINGS
[0065] The accompanying drawings, which are incorporated in and constitute a part of this specification, illustrate embodiments consistent with the present application and, together with the description, serve to explain the principles of the present application.
[0066] Figure 1Signaling interaction for the device login method of the non-networked device provided by this application Figure 1 ;
[0067] Figure 2 Signaling interaction for the device login method of the non-networked device provided by this application Figure 2 ;
[0068] Figure 3 This is a schematic diagram of the structure of the device login device for non-networked devices provided by this application Figure 1 ;
[0069] Figure 4 This is a schematic diagram of the structure of the device login device for non-networked devices provided by this application Figure 2 ;
[0070] Figure 5 It is a structural diagram of a device login device without an Internet-connected device provided in this application.
[0071] The above drawings have shown clear embodiments of the present application, which will be described in more detail later. These drawings and text descriptions are not intended to limit the scope of the present application in any way, but to illustrate the concept of the present application to those skilled in the art by referring to specific embodiments. DETAILED DESCRIPTION
[0072] In order to make the purpose, technical solutions and advantages of this application clearer, the technical solutions in this application will be clearly and completely described below in conjunction with the drawings in this application. Obviously, the described embodiments are part of the embodiments of this application, not all of the embodiments. Based on the embodiments in this application, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of this application.
[0073] The terms "first", "second", "third", "fourth", etc. (if any) in the specification and claims of the present invention and the above-mentioned drawings are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence. It should be understood that the numbers used in this way can be interchanged where appropriate, so that the embodiments of the present invention described herein, for example, can be implemented in an order other than those illustrated or described herein.
[0074] In the embodiments of the present application, the words "exemplary" or "for example" are used to indicate examples, illustrations or descriptions. Any embodiment or design described as "exemplary" or "for example" in the present application should not be interpreted as being more preferred or more advantageous than other embodiments or designs. Specifically, the use of words such as "exemplary" or "for example" is intended to present related concepts in a specific way.
[0075] In the information security industry, ensuring data security and preventing unauthorized access are core tasks. In the face of the development and testing of terminal devices that are not connected to the Internet, information security professionals have adopted advanced methods such as dynamic passwords and multi-factor authentication to enhance system security protection and effectively prevent unauthorized access and data leakage.
[0076] In order to prevent information leakage, local password protection is usually used to limit access to non-networked devices. However, fixed passwords are at risk of being leaked. If local passwords are obtained by competitors, product confidential data will be leaked, bringing data security risks.
[0077] Therefore, how to solve the risk of data leakage caused by logging into non-internet-connected devices with fixed passwords is the problem that needs to be solved at present.
[0078] In response to the above problems, the present application provides a device login method for a non-networked device. The method obtains the identification information of the non-networked device through the login device and sets the validity period to form an original string; the string is transcoded into a QR code and sent to the password management device for parsing and security verification; after the verification is successful, a dynamic password is generated and fed back to the login device, so as to log in to the non-networked device, thereby enhancing the security of logging in to the non-networked device.
[0079] The technical solution of the present application and how the technical solution of the present application solves the above-mentioned technical problems are described in detail below with specific embodiments. The following specific embodiments can be combined with each other, and the same or similar concepts or processes may not be repeated in some embodiments. The embodiments of the present application will be described below in conjunction with the accompanying drawings.
[0080] Figure 1 Signaling interaction of the device login method for the non-networked device provided in this embodiment Figure 1 This embodiment aims to explain the steps between the login device and the password management device when logging in to a device without an Internet connection. Figure 1 As shown, the device login method for a non-networked device provided in this embodiment includes:
[0081] S101. A login device obtains identification information of a non-networked device, and sets a validity period for the identification information to obtain an original character string corresponding to the non-networked device.
[0082] The login device obtains the identification information of the offline device by some means, such as scanning, inputting or automatic detection. The identification information is usually a unique device ID serial number or MAC address.
[0083] By obtaining the identification information of the offline device, it is ensured that each offline device has a identifiable identity, and different offline devices can be distinguished to avoid confusion.
[0084] The login device sets a validity range for the identification information of the non-networked device according to preset rules, such as a fixed time period, a specific date, etc. The validity range defines the time period during which the identification information is valid. The starting point of the validity period is the moment when the identification information is obtained.
[0085] By setting a validity period, the timeliness of the use of identification information can be limited, thereby increasing security and preventing expired or stolen identification information from being misused.
[0086] According to the acquired identification information and the set validity period, the login device combines the identification information and the validity period to form an original string. Specifically, the original string includes the device ID, the start time and the end time information of the validity period.
[0087] By setting an expiration date, you can limit the usage time of identification information and reduce the risk window after information leakage. The expiration date setting means that only legitimate access requests within a short period of time can be accepted, which enhances access control for devices without Internet access.
[0088] S102. The login device transcodes the original string to obtain a QR code corresponding to the original string.
[0089] The original character string is preprocessed as necessary, for example, unnecessary characters are removed, the format is standardized, etc., to ensure that the data format meets the requirements of QR code transcoding.
[0090] Select an appropriate encoding method to ensure that all characters in the original string can be processed correctly. Log in to the device to transcode the original string and obtain the QR code corresponding to the original string.
[0091] By transcoding the original string, a QR code corresponding to the original string can be generated based on the original string. The QR code is designed for fast scanning, which improves the efficiency of data input. This makes the transmission of information more efficient and secure.
[0092] S103. The login device sends the QR code to the password management device.
[0093] S104: The password management device parses the QR code to obtain a corresponding original string, where the original string is used to indicate identification information and validity period of the non-networked device.
[0094] The password management device scans the QR code sent by the login device, captures the QR code image and starts the parsing process, parses the QR code image, extracts the black and white modules, identifies the positioning pattern, timing pattern and format information, extracts the data module from the QR code based on the positioning and timing patterns, and converts it into the corresponding original string. Analyze specific fields in the original string to determine the identification information and validity period of the non-networked device.
[0095] The password management device effectively parses the information in the QR code. The automated QR code parsing reduces the need for manual input and reduces operational errors. The high fault tolerance of the QR code ensures that data can be accurately obtained even under unfavorable scanning conditions.
[0096] S105. The password management device performs security verification on the QR code based on the validity period and identification information.
[0097] The password management device splits the original string into two parts: identification information and validity period, so as to perform independent security verification. Check whether the identification information exists in the security identification list to ensure that the identification information of the non-networked device has been pre-authorized to prevent unauthorized devices from attempting to access the system. Compare the current time with the validity period to determine whether the current time is within the valid access period of the identification information, ensuring that the non-networked device can only be accessed within the validity period, thereby improving security.
[0098] Based on the validity of the identification information and whether the current time is within the valid access period, a comprehensive judgment is made to determine the security of the QR code, ensuring that only verified QR codes can be used to log in to devices without an Internet connection.
[0099] The password management device can ensure that only legitimate, authorized, and valid offline devices can access the device by performing security verification on the identification information and validity period in the QR code. This process improves the overall security of the system and reduces the risk of illegal access and data leakage. In this way, not only can offline devices be protected from the threat of unauthorized access, but the reliability and user experience of the entire system can also be improved.
[0100] S106. When the QR code verification passes, the password management device generates a dynamic password corresponding to the non-networked device.
[0101] The password management device receives a signal indicating that the QR code has been verified, confirming that the current access request is legitimate. If the QR code has been verified, the password management device uses a cryptographically secure random number generator to generate a random value. Specifically, the random number is combined with other possible variables such as timestamps, device IDs, etc., and a preset algorithm is applied to generate a dynamic password corresponding to the non-networked device.
[0102] The use of dynamic passwords significantly improves the security of the system because they are temporary and difficult to predict or reuse. Even if someone intercepts a dynamic password, it is difficult to use it for unauthorized access due to its short validity.
[0103] S107. The password management device feeds back the dynamic password to the login device.
[0104] S108: The login device performs a login process on the non-networked device based on the dynamic password.
[0105] Among them, the login device receives the dynamic password generated and transmitted by the password management device through a secure channel, and the login device performs login processing on the offline device based on the dynamic password. After receiving the input password, the offline device performs internal verification to confirm the correctness and validity of the password. If the password verification is successful, the offline device will authorize the login device to perform subsequent operations.
[0106] Use dynamic passwords to increase the security of the login process for devices without an Internet connection. Even if the device itself cannot connect to the Internet, it can still achieve relatively secure remote management and access control. This approach not only increases security, but also improves the user experience.
[0107] The present embodiment provides a device login method for a non-networked device, in which the login device obtains the identification information of the non-networked device and sets a validity period for the identification information to obtain an original character string corresponding to the non-networked device; the original character string is transcoded to obtain a QR code corresponding to the original character string, and the QR code is sent to a password management device; the password management device parses the QR code to obtain a corresponding original character string, where the original character string is used to indicate the identification information and validity period of the non-networked device; based on the validity period and the identification information, the QR code is security-verified; if the verification passes, a dynamic password is generated and fed back to the login device; so that the login device uses a dynamic password to log in to the non-networked device, thereby improving the security of the non-networked device login.
[0108] Figure 2 Signaling interaction of the device login method for the non-networked device provided in this embodiment Figure 2 .like Figure 2 As shown, this embodiment is in Figure 1 Based on the embodiment, the specific implementation process of the device login method for a non-networked device is described in detail. The device login method for a non-networked device provided in this embodiment includes:
[0109] S201. Log in to the device to obtain identification information of the non-networked device.
[0110] Among them, the login device needs to determine the type of identification information possessed by the non-networked device, such as a serial number, MAC address, device ID or other unique identifier.
[0111] According to the technical specifications and interfaces of the wireless device, select the appropriate method to obtain identification information, such as direct reading, scanning QR code, NFC sensing or serial communication.
[0112] The login device sends a request to the offline device to retrieve its identification information. After receiving the request, the offline device returns its identification information to the login device. The login device parses the data received from the offline device and extracts the identification information.
[0113] S202: The login device determines the validity period range corresponding to the identification information.
[0114] The login device determines the validity period rules of the identification information based on the device type, usage scenario or security requirements. The time when the identification information is obtained is set as the starting time of the valid access period, which is usually recorded by the system timestamp; according to the predefined rules, the duration of the validity period is set, which may be a few minutes, a few hours or longer; the duration is added to the starting time to determine the end time of the valid access period.
[0115] Determining the validity period corresponding to the identification information can effectively determine the validity period of the identification information of the wireless device, thereby ensuring that the wireless device can only be accessed within a specified time period. This not only improves security, but also enhances the controllability and flexibility of the system, which is very important for protecting wireless devices from unauthorized access.
[0116] S203: The login device generates an original character string according to the identification information and the validity period range.
[0117] Here, a structure of an original string is designed, which can contain all necessary information. Specifically, the structure of the original string contains device identification information, the start time and the end time of the validity period.
[0118] The login device encodes the device identification information in a predetermined format to ensure readability and consistency. The formatted validity period information is inserted to obtain the original string. Ensure that the generated original string contains both complete identification information and validity period range, and has good security and manageability. This helps protect non-networked devices from unauthorized access and ensures data integrity and consistency.
[0119] S204: The login device uses the encryption key to encrypt the original string to generate an encrypted string.
[0120] Among them, an encryption algorithm that meets the security requirements is selected, and the encryption key is determined by negotiation between the password management device and the login device. For example: AES, RSA or other industry standard encryption technologies. The login device uses the encryption algorithm and key to encrypt the original string and generate an encrypted string.
[0121] The original string is encrypted and becomes an encrypted string, ensuring the secure transmission and storage of data. The beneficial effects of this encryption method include improving data security, protecting sensitive information, and ensuring the integrity of data during transmission. At the same time, through the key negotiation mechanism, it can also ensure that only the legitimate recipient can decrypt the data, thereby increasing the security of the entire system.
[0122] S205. The login device transcodes the encrypted string to obtain a QR code.
[0123] Step S205 is similar to step S102 and will not be described again here.
[0124] S206. The login device sends the QR code to the password management device.
[0125] S207: The password management device transcodes the QR code to obtain an encrypted string corresponding to the QR code.
[0126] The password management device uses a QR code scanner or image recognition software to read the QR code image and extract the coded information therein. The scanned image is subjected to necessary image processing, such as denoising and contrast adjustment, to improve recognition accuracy. The password management device decodes the coded information in the QR code into the original string format and extracts the encrypted string from the decoded string.
[0127] S208. The password management device uses the decryption key to decrypt the encrypted string to obtain the corresponding original string.
[0128] The decryption key is determined by negotiation between the password management device and the login device. The password management device selects a corresponding decryption algorithm according to the encryption algorithm used in the encrypted string to perform decryption processing to obtain the corresponding original string. The original string is used to indicate the identification information and validity period of the non-networked device.
[0129] S209: The password management device determines whether there is a security identifier matching the identifier information in the security identifier list.
[0130] The password management device maintains a list of all valid security identifiers, each of which is associated with a specific offline device. The password management device searches for security identifiers that match the identifier information in the security identifier list, and determines whether there is a security identifier that matches the identifier information in the security identifier list.
[0131] Effectively determine whether there is a security identifier that matches the identification information in the security identifier list. This helps ensure the security of the system, prevent unauthorized access, and ensure normal access by legitimate users.
[0132] S210: When there is a security identifier matching the identifier information in the security identifier list, the password management device determines whether the current time is within the corresponding valid access period.
[0133] When there is a security identification matching the identification information in the security identification list, the password management device obtains the current system time, compares the current time with the extracted validity period information, and determines whether the current time is within the corresponding valid access period.
[0134] Determine whether the current moment is within the valid access period of the identification information. This helps ensure that the offline device can only be accessed within the specified time range, thereby improving the security of the system.
[0135] S211. When the current moment is within the corresponding valid access period, the password management device determines that the QR code security verification has passed.
[0136] If the current time is within the corresponding valid access period, the password management device determines that the QR code security check has passed. If there is no security identifier matching the identifier information in the security identifier list or the current time is not within the corresponding valid access period, the QR code security check has failed.
[0137] S212: When the QR code verification is passed, the password management device generates a dynamic password corresponding to the non-networked device.
[0138] The password management device receives the result of the QR code security verification. If the QR code verification passes, the password management device automatically triggers the dynamic password generation process. According to the pre-set password generation rules, a dynamic password corresponding to the non-networked device is generated.
[0139] S213. The password management device feeds back the dynamic password to the login device.
[0140] S214. The login device determines whether the moment of receiving the dynamic password is within a valid access period.
[0141] S215. When the dynamic password is received within the valid access period, the login device uses the dynamic password to log in to the non-networked device.
[0142] When the login device receives the dynamic password, it records the current specific time and verifies whether the time point of receiving the dynamic password is within the preset valid access period. If the dynamic password is received within the valid access period, the dynamic password is used to log in the non-networked device; if it is not within the valid access period, the login request is rejected.
[0143] The device login method for a non-networked device provided in this embodiment obtains the identification information and validity period of the non-networked device through the login device, and generates an original string based on this. After being encrypted with an encryption key, it is converted into a QR code and sent to the password management device. The latter parses and decrypts to verify the validity and time range of the identification information. After the verification is passed, a dynamic password is generated and fed back to the login device for logging in to the non-networked device, ensuring that the dynamic password is received within the validity period, thereby improving the security of logging in to the non-networked device and avoiding expired or malicious access attempts.
[0144] Figure 3 Structural diagram of the device login device for non-networked devices provided in this application Figure 1 .like Figure 3 As shown, the present application provides a device login apparatus for a non-networked device, which is applied to a login device. The device login apparatus 300 for a non-networked device includes:
[0145] An acquisition module 301 is used to acquire identification information of a non-networked device;
[0146] The processing module 302 is used to set the validity period of the identification information to obtain the original character string corresponding to the non-networked device;
[0147] The processing module 302 is further used to perform transcoding processing on the original string to obtain a QR code corresponding to the original string;
[0148] A sending module 303, used to send the QR code to a password management device;
[0149] The receiving module 304 is used to receive the dynamic password fed back by the password management device, and perform login processing on the non-networked device based on the dynamic password.
[0150] Optionally, the device login apparatus for a non-networked device further includes: a determination module 305;
[0151] The determination module 305 is used to determine the validity period range corresponding to the identification information, the validity period range is used to indicate the valid access period of the non-networked device, and the starting time of the valid access period is the time when the identification information is obtained;
[0152] The processing module 302 is further configured to generate the original character string according to the identification information and the validity period range.
[0153] Optionally, the processing module 302 is further configured to encrypt the original string using an encryption key to generate an encrypted string, wherein the encryption key is determined by negotiation between the password management device and the login device;
[0154] The processing module 302 is further used to perform transcoding processing on the encrypted string to obtain the QR code.
[0155] Optionally, the device login apparatus for a non-networked device further includes: a judgment module 306;
[0156] The judging module 306 is used to judge whether the receiving time of the dynamic password is within the valid access period;
[0157] The processing module 302 is further configured to use the dynamic password to log in to the non-networked device when the dynamic password is received within the valid access period.
[0158] Figure 4 Structural diagram of the device login device for non-networked devices provided in this application Figure 2 .like Figure 4 As shown, the present application provides a device login apparatus for a non-networked device, which is applied to a password management device. The device login apparatus 400 for a non-networked device includes:
[0159] The acquisition module 401 is used to acquire the QR code sent by the login device;
[0160] The processing module 402 is used to parse the two-dimensional code to obtain a corresponding original string, where the original string is used to indicate the identification information and validity period of the non-networked device;
[0161] The processing module 402 is further used to perform security verification processing on the two-dimensional code based on the validity period and the identification information;
[0162] The processing module 402 is further configured to generate a dynamic password corresponding to the non-networked device when the two-dimensional code verification passes;
[0163] The sending module 403 is used to feed back the dynamic password to the login device.
[0164] Optionally, the device login apparatus for a non-networked device further includes: a judgment module 404 and a determination module 405;
[0165] The determination module 404 is used to determine whether there is a security identifier matching the identifier information in the security identifier list;
[0166] The judgment module 404 is further configured to judge whether the current time is within the corresponding valid access period when there is a security identifier matching the identifier information in the security identifier list;
[0167] The determination module 405 is used to determine that the two-dimensional code security verification has passed when the current moment is within the corresponding valid access period;
[0168] The determination module 405 is further configured to determine that the two-dimensional code security check fails when there is no security identification matching the identification information in the security identification list or the current moment is not within the corresponding valid access period.
[0169] Optionally, the processing module 402 is further used to perform transcoding processing on the two-dimensional code to obtain an encrypted string corresponding to the two-dimensional code;
[0170] The processing module 402 is further used to decrypt the encrypted string using a decryption key to obtain a corresponding original string, wherein the decryption key is determined by negotiation between the password management device and the login device.
[0171] Figure 5 This is a schematic diagram of the structure of the device login device without network connection provided by this application. Figure 5 As shown, the present application provides a device login device for a non-networked device, and the device login device 500 for a non-networked device includes: a receiver 501, a transmitter 502, a processor 503 and a memory 504.
[0172] Receiver 501, used for receiving instructions and data;
[0173] A transmitter 502, used for sending instructions and data;
[0174] Memory 504, used to store computer-executable instructions;
[0175] The processor 503 is used to execute the computer-executable instructions stored in the memory 504 to implement the various steps executed by the device login method for a non-networked device in the above embodiment. For details, please refer to the relevant description in the above embodiment of the device login method for a non-networked device.
[0176] Optionally, the memory 504 may be independent or integrated with the processor 403 .
[0177] When the memory 504 is independently provided, the electronic device further includes a bus for connecting the memory 504 and the processor 503 .
[0178] The present application also provides a computer-readable storage medium, in which computer execution instructions are stored. When a processor executes the computer execution instructions, a device login method for a non-networked device as executed by the device login device of the non-networked device mentioned above is implemented.
[0179] It will be appreciated by those skilled in the art that all or some of the steps, systems, and functional modules / units in the methods disclosed above may be implemented as software, firmware, hardware, and appropriate combinations thereof. In hardware implementations, the division between the functional modules / units mentioned in the above description does not necessarily correspond to the division of physical components; for example, a physical component may have multiple functions, or a function or step may be performed by several physical components in cooperation. Some or all physical components may be implemented as software executed by a processor, such as a central processing unit, a digital signal processor, or a microprocessor, or implemented as hardware, or implemented as an integrated circuit, such as an application-specific integrated circuit. Such software may be distributed on a computer-readable medium, which may include a computer storage medium (or non-transitory medium) and a communication medium (or temporary medium). As known to those skilled in the art, the term computer storage medium includes volatile and non-volatile, removable and non-removable media implemented in any method or technology for storing information (such as computer-readable instructions, data structures, program modules, or other data). Computer storage media include, but are not limited to, RAM, ROM, EEPROM, flash memory or other memory technology, CD-ROM, digital versatile disks (DVD) or other optical disk storage, magnetic cassettes, magnetic tapes, magnetic disk storage or other magnetic storage devices, or any other medium that can be used to store the desired information and can be accessed by a computer. In addition, it is well known to those of ordinary skill in the art that communication media typically contain computer-readable instructions, data structures, program modules, or other data in a modulated data signal such as a carrier wave or other transport mechanism, and may include any information delivery media.
[0180] So far, the technical solution of the present application has been described in conjunction with the preferred embodiments shown in the accompanying drawings. However, it is easy for those skilled in the art to understand that the protection scope of the present application is obviously not limited to these specific embodiments, and the above embodiments are only used to illustrate the technical solution of the present application rather than to limit it. Although the present application has been described in detail with reference to the aforementioned embodiments, those skilled in the art should understand that they can still modify the technical solutions described in the aforementioned embodiments, or replace some or all of the technical features therein by equivalents. However, these modifications or replacements do not cause the essence of the corresponding technical solutions to deviate from the scope of the technical solutions of the embodiments of the present application.
Claims
1. A device login method for a non-networked device, characterized in that: Applied to a login device, the method comprises: Obtain identification information of a non-networked device, and set a validity period for the identification information to obtain an original character string corresponding to the non-networked device; Transcoding the original string to obtain a QR code corresponding to the original string, and sending the QR code to a password management device; Receive the dynamic password fed back by the password management device, and perform login processing on the non-networked device based on the dynamic password.
2. The method according to claim 1, characterized in that The step of setting a validity period for the identification information to obtain an original character string corresponding to the non-networked device includes: Determine a validity period range corresponding to the identification information, where the validity period range is used to indicate a valid access period of the non-networked device, and a start time of the valid access period is a time when the identification information is acquired; The original character string is generated according to the identification information and the validity period range.
3. The method according to claim 1, characterized in that: The performing transcoding processing on the original character string to obtain a QR code corresponding to the original character string includes: Encrypting the original string using an encryption key to generate an encrypted string, wherein the encryption key is determined by negotiation between the password management device and the login device; The encrypted character string is transcoded to obtain the QR code.
4. The method according to claim 2, characterized in that: The performing a login process on the non-networked device based on the dynamic password includes: Determining whether the moment of receiving the dynamic password is within the valid access period; If so, the dynamic password is used to log in to the non-networked device.
5. A device login method for a non-networked device, characterized in that: Applied to a password management device, the method comprises: Obtain the QR code sent by the login device, and parse the QR code to obtain a corresponding original string, where the original string is used to indicate the identification information and validity period of the non-networked device; Based on the validity period and the identification information, performing security verification processing on the QR code; When the two-dimensional code verification is passed, a dynamic password corresponding to the non-networked device is generated and the dynamic password is fed back to the login device.
6. The method according to claim 5, characterized in that The performing security verification processing on the two-dimensional code based on the validity period and the identification information includes: Determine whether there is a security identifier matching the identifier information in the security identifier list; If yes, determine whether the current time is within the corresponding valid access period; If the current moment is within the corresponding valid access period, determining that the QR code security verification has passed; When there is no security identification matching the identification information in the security identification list or the current time is not within the corresponding valid access period, it is determined that the two-dimensional code security check fails.
7. The method according to claim 5, characterized in that The parsing process of the QR code to obtain the corresponding original string includes: Transcoding the QR code to obtain an encrypted string corresponding to the QR code; The encrypted string is decrypted using a decryption key to obtain a corresponding original string, wherein the decryption key is determined by negotiation between the password management device and the login device.
8. A device login device for a non-networked device, characterized in that: Applied to a login device, the device comprises: An acquisition module, used to acquire identification information of a non-networked device; A processing module, used to set a validity period for the identification information and obtain an original character string corresponding to the non-networked device; The processing module is further used to perform transcoding processing on the original string to obtain a QR code corresponding to the original string; A sending module, used to send the QR code to a password management device; The receiving module is used to receive the dynamic password fed back by the password management device, and perform login processing on the non-networked device based on the dynamic password.
9. A device login device for a non-networked device, characterized in that: Applied to a password management device, the device comprises: The acquisition module is used to obtain the QR code sent by the login device; A processing module, used to parse the two-dimensional code to obtain a corresponding original string, where the original string is used to indicate the identification information and validity period of the non-networked device; The processing module is further used to perform security verification processing on the two-dimensional code based on the validity period and the identification information; The processing module is further configured to generate a dynamic password corresponding to the non-networked device when the two-dimensional code verification passes; The sending module is used to feed back the dynamic password to the login device.
10. A device login device for a non-networked device, characterized in that: include: Memory; processor; Wherein, the memory stores computer-executable instructions; The processor executes the computer-executable instructions stored in the memory to implement the device login method for a non-networked device as described in any one of claims 1-7.
11. A computer storage medium, characterized in that: The computer storage medium stores computer execution instructions, which, when executed by a processor, are used to implement the device login method for a non-networked device as described in any one of claims 1-7.