Bidirectional authentication method and system, electronic equipment and storage medium

Abstract

The invention relates to a bidirectional authentication method and system, an electronic device and a storage medium, the method uses an embedded controller in a PC as a host for bidirectional authentication to replace an original PC CPU, because an EC works for a long time, the bidirectional authentication process can be carried out when a wireless communication module is powered on, the bidirectional authentication process is not influenced by whether the PC is started up to enter an operating system, and the operation efficiency is improved. Therefore, the two-way authentication completed by the EC does not depend on the startup operation of the terminal user on the PC, and the authentication process is invisible to the terminal user, so that the possibility of cracking by using a packet capturing tool allowed on an operating system from a host side is effectively avoided, and the system security is improved.

Description

Technical Field

[0001] The present application relates to the field of computer technology, and in particular to a two-way authentication method, system, electronic device and storage medium. Background Art

[0002] At present, a technology called FCC 2-way lock can be supported between personal computers (PCs) and wireless communication modules. This technology requires two-way authentication between the PC and the wireless communication module, that is, the PC can only work with the PC to complete normal networking functions after it recognizes the wireless communication module that matches its model and the wireless communication module also recognizes that the PC is also a matching model.

[0003] The current solution is basically to run a background program (hereinafter referred to as Host-AuthSrv) on the PC side (also called the host side). After the operating system (Operating System, referred to as OS) is started, Host-AuthSrv will initiate the authentication process with the wireless communication module (WWAN module) (the initial state of the WWAN module will be locked and the radio frequency will be turned off), and the other party will be authenticated as an allowed device. If the authentication is passed, the WWAN will be unlocked to the normal working mode. If the authentication fails, the WWAN module will remain in the Lock state and cannot be used. However, this solution requires that the PC must complete the startup, successfully enter the operating system and complete the enumeration of the module before authentication can be performed, resulting in the authentication process being visible to the end user, increasing the possibility of cracking from the host side using the packet capture tools allowed on the PC operating system, affecting the security during use. Summary of the invention

[0004] The present application provides a two-way authentication method, system, electronic device and storage medium to solve the problem that a host needs to be powered on and enter an operating system to complete two-way authentication.

[0005] In a first aspect, the present application provides a two-way authentication method, applied to an embedded controller, the method comprising:

[0006] Based on the power-on signal of the wireless communication module, a first authentication code is sent to the wireless communication module; wherein the first authentication code is the authentication code of the embedded controller;

[0007] Obtaining a second authentication code sent by the wireless communication module when two-way authentication is satisfied; wherein the second authentication code is the authentication code of the wireless communication module;

[0008] When determining that the second authentication code is valid, sending a first message to the wireless communication module indicating that the embedded controller has successfully authenticated the second authentication code;

[0009] A second message sent by the wireless communication module is obtained; wherein the second message indicates that the wireless communication module has successfully authenticated the first authentication code.

[0010] Optionally, based on a power-on signal of the wireless communication module, sending a first authentication code to the wireless communication module includes:

[0011] Based on a power-on signal of the wireless communication module, sending a two-way authentication invitation and a first authentication code to the wireless communication module;

[0012] Accordingly, obtaining the second authentication code sent by the wireless communication module when two-way authentication is satisfied includes:

[0013] Acquire a confirmation authentication reply returned by the wireless communication module based on the two-way authentication invitation when the two-way authentication is satisfied, and acquire a second authentication code sent by the wireless communication module.

[0014] Optionally, after acquiring the second message sent by the wireless communication module, the method further includes:

[0015] A two-way authentication success message is sent to a basic input / output system, so that the basic input / output system enumerates the wireless communication module and loads a driver program of the wireless communication module.

[0016] Optionally, when it is determined that the second authentication code is valid, sending a first message to the wireless communication module indicating that the embedded controller has successfully authenticated the second authentication code includes:

[0017] Decoding the second authentication code to obtain decoded data;

[0018] If the decoded data is successfully compared with the preset verification data, determining that the second authentication code is valid;

[0019] generating a first message indicating that the embedded controller successfully authenticates the second authentication code;

[0020] The first message is sent to the wireless communication module.

[0021] Optionally, based on a power-on signal of the wireless communication module, sending a two-way authentication invitation and a first authentication code to the wireless communication module comprises:

[0022] Obtaining a power-on request of the wireless communication module;

[0023] generating a power-on signal for the wireless communication module based on the power-on request;

[0024] A two-way authentication invitation and a first authentication code are sent to the wireless communication module according to the power-on signal.

[0025] In a second aspect, the present application provides a two-way authentication method, applied to a wireless communication module, the method comprising:

[0026] Obtaining a first authentication code sent by an embedded controller; wherein the first authentication code is an authentication code of the embedded controller;

[0027] When two-way authentication is satisfied, a second authentication code is sent to the embedded controller; wherein the second authentication code is the authentication code of the wireless communication module;

[0028] Acquire a first message sent by the embedded controller; wherein the first message indicates that the embedded controller has successfully authenticated the second authentication code;

[0029] When it is determined that the first authentication code is valid, a second message indicating that the wireless communication module has successfully authenticated the first authentication code is sent to the embedded controller.

[0030] Optionally, obtaining a first authentication code sent by the embedded controller includes:

[0031] Obtaining a two-way authentication invitation and a first authentication code sent by the embedded controller;

[0032] Accordingly, when the two-way authentication is satisfied, sending a second authentication code to the embedded controller includes:

[0033] Determining whether the wireless communication module is ready for two-way authentication based on the two-way authentication invitation;

[0034] When the two-way authentication is ready, a confirmation authentication reply and a second authentication code are sent to the embedded controller.

[0035] In a third aspect, the present application provides a two-way authentication system, the two-way authentication system comprising an embedded controller and a wireless communication module;

[0036] The embedded controller is used to send a first authentication code to the wireless communication module based on a power-on signal of the wireless communication module; wherein the first authentication code is the authentication code of the embedded controller; obtain a second authentication code sent by the wireless communication module when two-way authentication is satisfied; wherein the second authentication code is the authentication code of the wireless communication module; when determining that the second authentication code is valid, send a first message to the wireless communication module indicating that the embedded controller has successfully authenticated the second authentication code; obtain a second message sent by the wireless communication module; wherein the second message indicates that the wireless communication module has successfully authenticated the first authentication code;

[0037] The wireless communication module is used to obtain a first authentication code sent by an embedded controller; when two-way authentication is satisfied, send a second authentication code to the embedded controller; obtain a first message sent by the embedded controller; wherein the first message indicates that the embedded controller has successfully authenticated the second authentication code; and when it is determined that the first authentication code is valid, send a second message to the embedded controller indicating that the wireless communication module has successfully authenticated the first authentication code.

[0038] In a fourth aspect, the present application provides a two-way authentication device, applied to an embedded controller, the device comprising:

[0039] A first sending module, configured to send a first authentication code to the wireless communication module based on a power-on signal of the wireless communication module; wherein the first authentication code is an authentication code of the embedded controller;

[0040] A first acquisition module, used to acquire a second authentication code sent by the wireless communication module when two-way authentication is satisfied; wherein the second authentication code is the authentication code of the wireless communication module;

[0041] A second sending module is used to send a first message indicating that the embedded controller has successfully authenticated the second authentication code to the wireless communication module when it is determined that the second authentication code is valid;

[0042] The second acquisition module is used to acquire a second message sent by the wireless communication module; wherein the second message indicates that the wireless communication module has successfully authenticated the first authentication code.

[0043] In a fifth aspect, the present application provides a two-way authentication device, applied to a wireless communication module, the device comprising:

[0044] A third acquisition module is used to acquire a first authentication code sent by the embedded controller; wherein the first authentication code is the authentication code of the embedded controller;

[0045] A third sending module, used to send a second authentication code to the embedded controller when two-way authentication is satisfied; wherein the second authentication code is the authentication code of the wireless communication module;

[0046] A fourth acquisition module, configured to acquire a first message sent by the embedded controller; wherein the first message indicates that the embedded controller has successfully authenticated the second authentication code;

[0047] The fourth sending module is used to send a second message to the embedded controller indicating that the wireless communication module has successfully authenticated the first authentication code when it is determined that the first authentication code is valid.

[0048] In a sixth aspect, the present application provides an electronic device, including a processor, a communication interface, a memory, and a communication bus, wherein the processor, the communication interface, and the memory communicate with each other via the communication bus;

[0049] Memory, used to store computer programs;

[0050] The processor is used to implement the two-way authentication method described in any embodiment of the first aspect or the second aspect when executing the program stored in the memory.

[0051] In a seventh aspect, the present application provides a computer-readable storage medium having a computer program stored thereon, and when the computer program is executed by a processor, the two-way authentication method as described in any one of the embodiments of the first aspect or the second aspect is implemented.

[0052] The above-mentioned technical solution provided by the embodiment of the present application has the following advantages over the prior art: the method provided by the embodiment of the present application is applied to an embedded controller, comprising: based on a power-on signal of the wireless communication module, sending a first authentication code to the wireless communication module; wherein the first authentication code is the authentication code of the embedded controller; obtaining a second authentication code sent by the wireless communication module when two-way authentication is satisfied; wherein the second authentication code is the authentication code of the wireless communication module; when it is determined that the second authentication code is valid, sending a first message to the wireless communication module indicating that the embedded controller has successfully authenticated the second authentication code; obtaining a second message sent by the wireless communication module; wherein the second message indicates that the wireless communication module has successfully authenticated the first authentication code. The method uses an embedded controller (EC) as the host of two-way authentication to replace the original PC CPU. Since the EC works for a long time, the two-way authentication process can be performed when the wireless communication module is powered on, and it will not be affected by whether the host is turned on and enters the operating system. Therefore, the two-way authentication completed by the EC does not depend on the terminal user's power-on operation on the host. In addition, the authentication process is invisible to the terminal user, which effectively avoids the possibility of cracking from the host side using the packet capture tool allowed on the operating system, thereby improving the security of the system. BRIEF DESCRIPTION OF THE DRAWINGS

[0053] The accompanying drawings, which are incorporated in and constitute a part of this specification, illustrate embodiments consistent with the present application and, together with the description, serve to explain the principles of the present application.

[0054] In order to more clearly illustrate the embodiments of the present application or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, for ordinary technicians in this field, other drawings can be obtained based on these drawings without paying any creative labor.

[0055] One or more embodiments are exemplarily described by pictures in the corresponding drawings, and these exemplified descriptions do not constitute limitations on the embodiments. Elements with the same reference numerals in the drawings represent similar elements, and unless otherwise stated, the figures in the drawings do not constitute proportional limitations.

[0056] Figure 1 A system architecture diagram of a two-way authentication method provided in one embodiment of the present application;

[0057] Figure 2 A schematic diagram of a two-way authentication method provided in accordance with an embodiment of the present application;

[0058] Figure 3A flowchart of a two-way authentication method provided in another embodiment of the present application;

[0059] Figure 4 A flowchart of a two-way authentication method provided in another embodiment of the present application;

[0060] Figure 5 A schematic diagram of the structure of a two-way authentication device provided in one embodiment of the present application;

[0061] Figure 6 A schematic diagram of the structure of a two-way authentication device provided in another embodiment of the present application;

[0062] Figure 7 A schematic diagram of the structure of an electronic device provided in accordance with an embodiment of the present application. DETAILED DESCRIPTION

[0063] In order to make the purpose, technical solution and advantages of the embodiments of the present application clearer, the technical solution in the embodiments of the present application will be clearly and completely described below in conjunction with the drawings in the embodiments of the present application. Obviously, the described embodiments are part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without making creative work are within the scope of protection of this application.

[0064] The disclosure below provides many different embodiments or examples to realize the different structures of the present application. In order to simplify the disclosure of the present application, the parts and settings of specific examples are described below. Of course, they are only examples, and the purpose is not to limit the present application. In addition, the present application can repeat reference numbers and / or letters in different examples. This repetition is for the purpose of simplification and clarity, and does not itself indicate the relationship between the various embodiments and / or settings discussed.

[0065] In order to solve the technical problem in the prior art that the host needs to be powered on and enter the operating system to complete two-way authentication, the present application provides a two-way authentication method, system, electronic device and storage medium, which can achieve independent operation of the terminal user on the host, and the authentication process is invisible to the terminal user, effectively avoiding the possibility of cracking from the host side using the packet capture tools allowed on the operating system, thereby improving system security.

[0066] The first embodiment of the present application provides a two-way authentication method, which can be applied to Figure 1The system architecture shown in the figure includes at least an embedded controller 101 and a wireless communication module 102, and the embedded controller 101 and the wireless communication module 102 establish a communication connection. Further, the system architecture can be a terminal, such as a desktop computer, a tablet computer, a notebook, a supercomputer, etc. In the following embodiments, the terminal is illustrated as a PC, which does not represent a specific limitation on the terminal device. At this time, since the embedded controller as the authentication host is inside the PC, the host side can also be called the PC side.

[0067] The method can be applied to the embedded controller 101 or the wireless communication module 102 in the system architecture.

[0068] When applied to embedded controllers, such as Figure 2 , the two-way authentication method includes:

[0069] Step 201 : sending a first authentication code to the wireless communication module based on a power-on signal of the wireless communication module; wherein the first authentication code is an authentication code of the embedded controller.

[0070] When a power-on signal is sent to the wireless communication module, or when power supply is detected to the wireless communication module, it is confirmed that there is a power-on signal for the wireless communication module, and a first authentication code is sent to the wireless communication module based on the power-on signal to start a two-way authentication process.

[0071] In one embodiment, sending the first authentication code to the wireless communication module based on a power-on signal of the wireless communication module includes: sending a two-way authentication invitation and the first authentication code to the wireless communication module based on the power-on signal of the wireless communication module.

[0072] In this embodiment, a two-way authentication invitation can be sent while sending the first authentication code to the wireless communication module. If the wireless communication module meets the two-way authentication requirements, two-way authentication can be performed. If the wireless communication module does not meet the two-way authentication requirements, the first authentication code can be directly discarded. Sending the two-way authentication invitation and the first authentication code at the same time can reduce the interaction process between the EC and the wireless communication module during the two-way authentication process and improve the efficiency of the two-way authentication.

[0073] In one embodiment, based on the power-on signal of the wireless communication module, a two-way authentication invitation and a first authentication code are sent to the wireless communication module, including: obtaining a power-on request of the wireless communication module; generating a power-on signal of the wireless communication module based on the power-on request; and sending a two-way authentication invitation and a first authentication code to the wireless communication module according to the power-on signal.

[0074] In this embodiment, EC is a controller on the PC, which can perform basic operations on some hardware devices on the PC when the operating system of the PC is not working. Among them, EC is responsible for controlling the power-on of the wireless communication module. After obtaining the power-on signal of the wireless communication module, EC can send a two-way authentication invitation and a first authentication code to the wireless communication module, wherein the first authentication code is the EC authentication code. Specifically, a two-way authentication invitation can be initiated when a power-on signal to the wireless communication module is issued or when it is detected that the wireless communication module has power supply. At this time, there is no need to worry about whether the PC is powered on or whether the operating system is entered after power-on. That is, the two-way authentication completed by EC does not depend on the terminal user's power-on operation of the PC.

[0075] Step 202, obtaining a second authentication code sent by the wireless communication module when two-way authentication is satisfied; wherein the second authentication code is the authentication code of the wireless communication module.

[0076] The wireless communication module will send a second authentication code to the EC when the two-way authentication is satisfied.

[0077] Specifically, obtaining the second authentication code sent by the wireless communication module when two-way authentication is satisfied includes: obtaining a confirmation authentication reply returned by the wireless communication module based on the two-way authentication invitation, and obtaining the second authentication code sent by the wireless communication module.

[0078] In this embodiment, if the wireless communication module receives a two-way authentication invitation sent by the EC while receiving the first authentication code, the wireless communication module will determine whether the two-way authentication is satisfied. If satisfied, it will return a confirmation authentication reply to the EC based on the two-way authentication invitation and send the second authentication code to the EC at the same time. After receiving the confirmation authentication reply returned by the wireless communication module, the EC can confirm that the wireless communication module is ready for two-way authentication. At this time, the second authentication code sent by the wireless communication module can be authenticated to determine whether the second authentication code is valid.

[0079] Step 203: When it is determined that the second authentication code is valid, a first message indicating that the embedded controller has successfully authenticated the second authentication code is sent to the wireless communication module.

[0080] When the EC determines that the authentication code of the wireless communication module is valid, it means that the EC has identified a wireless communication module that matches its model, and the host side where the EC is located successfully authenticates the wireless communication module and sends a first message of successful authentication to the wireless communication module to notify the wireless communication module.

[0081] In one embodiment, when it is determined that the second authentication code is valid, a first message indicating that the embedded controller has successfully authenticated the second authentication code is sent to the wireless communication module, including: decoding the second authentication code to obtain decoded data; when the decoded data is successfully compared with preset verification data, determining that the second authentication code is valid; generating a first message indicating that the embedded controller has successfully authenticated the second authentication code; and sending the first message to the wireless communication module.

[0082] In this embodiment, to determine whether the second authentication code is valid, the second authentication code may be decoded to obtain decoded data, the decrypted data may be compared with preset verification data, and if the comparison is successful, the second authentication code is determined to be valid. At this time, a first message indicating that the embedded controller has successfully authenticated the second authentication code is generated, and the first message is sent to the wireless communication module.

[0083] In this embodiment, during the two-way authentication process, the EC can perform two-way authentication with the wireless communication module without determining whether the wireless communication module is in a locked state, thereby reducing the complexity of the two-way authentication process. At the same time, since the EC is used as the authentication host instead of the traditional PC CPU as the authentication host, the two-way authentication process can be initiated by the EC without the PC completing the startup and entering the operating system. Therefore, the authentication process is invisible to the terminal user, avoiding the possibility of the host side cracking the operating system through a packet capture tool, thereby improving the security of the authentication process.

[0084] Step 204, obtaining a second message sent by the wireless communication module; wherein the second message indicates that the wireless communication module has successfully authenticated the first authentication code.

[0085] The method uses an embedded controller in a PC as a host Host for two-way authentication, replacing the original PC CPU. The embedded controller sends a first authentication code to the wireless communication module based on a power-on signal of the wireless communication module, obtains a second authentication code sent by the wireless communication module when the two-way authentication is satisfied, and sends a first message to the wireless communication module indicating that the embedded controller has successfully authenticated the second authentication code when the second authentication code is determined to be valid, obtains a second message sent by the wireless communication module indicating that the wireless communication module has successfully authenticated the first authentication code, and then determines that the two-way authentication is successful. Since the EC works for a long time, the two-way authentication process can be performed when the wireless communication module is powered on, and will not be affected by whether the PC is turned on to enter the operating system. Therefore, the two-way authentication completed by the EC does not depend on the terminal user's power-on operation of the PC, and the authentication process is invisible to the terminal user, which effectively avoids the possibility of cracking from the host side using a packet capture tool allowed on the PC operating system, thereby improving system security.

[0086] In one embodiment, after acquiring the second message sent by the wireless communication module, the method further includes: sending a two-way authentication success message to a basic input / output system so that the basic input / output system enumerates the wireless communication module and loads a driver of the wireless communication module.

[0087] In this embodiment, after the EC obtains the second message sent by the wireless communication module, it can be determined that the first authentication code has been successfully authenticated on the wireless communication module side. Since the second authentication code has been successfully authenticated by the EC, that is, the bidirectional authentication has been successful at this time, the EC sends a bidirectional authentication success message to the basic input and output system (BIOS). When the PC is turned on, the BIOS completes the enumeration of the wireless communication module on the PCIe or USB bus and loads the driver, making the wireless communication module visible to the terminal user on the operating system. Of course, if the bidirectional authentication is unsuccessful, the wireless communication module will not appear at all on any operating system interface that the user can query.

[0088] It should be noted that in the above-mentioned two-way authentication process, the data communication between the EC and the wireless communication module can be carried out through the I2C bus. Using the I2C bus communication instead of the PCIe or USB interface communication required for the normal operation of the EC and the wireless communication module can avoid the embarrassing situation that the wireless communication module to be authenticated must be enumerated before authentication. Moreover, the wireless communication module is enumerated only after the two-way authentication is successful. The wireless communication module that fails the authentication will no longer be enumerated, which will not affect the driver, service, power consumption and other factors in the system.

[0089] When applied to wireless communication modules, such as Figure 3 , the two-way authentication method includes:

[0090] Step 301, obtaining a first authentication code sent by an embedded controller; wherein the first authentication code is the authentication code of the embedded controller.

[0091] Specifically, while obtaining the first authentication code from the embedded controller, the two-way authentication invitation sent by the embedded controller can also be obtained, and the wireless communication module can determine whether it meets the process of starting the two-way authentication according to the two-way authentication invitation.

[0092] Step 302, when the two-way authentication is satisfied, sending a second authentication code to the embedded controller; wherein the second authentication code is the authentication code of the wireless communication module.

[0093] In one embodiment, when two-way authentication is satisfied, a second authentication code is sent to the embedded controller, including: judging whether the wireless communication module is ready for two-way authentication based on the two-way authentication invitation; and sending a confirmation authentication reply and a second authentication code to the embedded controller when the two-way authentication is ready.

[0094] In this embodiment, after receiving the two-way authentication invitation sent by the EC, the wireless communication module can first determine whether it is ready for two-way authentication. If ready, it can send a confirmation authentication reply to the EC and send a second authentication code at the same time as the reply so that the EC can authenticate the second authentication code.

[0095] Step 303: Acquire a first message sent by the embedded controller; wherein the first message indicates that the embedded controller successfully authenticates the second authentication code.

[0096] Step 304: When it is determined that the first authentication code is valid, a second message indicating that the wireless communication module has successfully authenticated the first authentication code is sent to the embedded controller.

[0097] When the wireless communication module determines that the authentication code of the EC is valid, it means that the wireless communication module has identified the EC that matches its model, and the wireless communication module has successfully authenticated the host side where the EC is located, and sends a second message to the EC to notify the EC that the wireless communication module has successfully authenticated the first authentication code.

[0098] The method uses an embedded controller in a PC as a host Host for two-way authentication, replacing the original PC CPU. The wireless communication module obtains the first authentication code of the embedded controller. When the wireless communication module satisfies the two-way authentication, the second authentication code is sent to the embedded controller. When the wireless communication module determines that the first authentication code is valid, the wireless communication module sends a second message to the embedded controller indicating that the wireless communication module has successfully authenticated the first authentication code. Since the EC works for a long time, the two-way authentication process can be performed when the wireless communication module is powered on, and it will not be affected by whether the PC is turned on to enter the operating system. Therefore, the two-way authentication completed by the EC does not depend on the terminal user's power-on operation of the PC, and the authentication process is invisible to the terminal user, which effectively avoids the possibility of cracking from the host side using the packet capture tool allowed in the operating system, thereby improving the security of the system.

[0099] In a specific embodiment, the two-way authentication method is as follows: Figure 4, every time EC powers on the wireless communication module (the power-on of the wireless communication module installed inside the PC is controlled by EC), it initiates a two-way authentication invitation to the wireless communication module through the I2C bus and attaches its own authentication code (i.e., EC authentication code); after the wireless communication module receives the authentication invitation command, if it is ready, it replies with an authentication reply and attaches the authentication code of the wireless communication module. At the same time, the wireless communication module starts the internal logic and uses the authentication code sent by EC to authenticate the message. After receiving the affirmative reply from the wireless communication module and the authentication code of the wireless communication module, EC will start to decode and authenticate the authentication code of the wireless communication module. After confirming that the authentication code of the wireless communication module is valid, it will send a message of successful authentication on the host side to the wireless communication module again through I2C. After the wireless communication module receives the message of successful authentication on the host side, if the authentication of the EC authentication code previously run is also true, it will reply to EC with a message of successful authentication on the wireless communication module side. At this point, the two-way authentication is completed. After completing the two-way authentication, the EC will notify the BIOS to complete the enumeration of the wireless communication module on the PCIe or USB bus and load the driver when the PC is turned on, making the wireless communication module visible to the end user on the PC operating system. Otherwise, this device will not appear at all on any operating system interface that the user can query.

[0100] In this embodiment, the EC on the laptop is used as the Host of the two-way authentication to replace the original PC CPU. Since the EC works for a long time and is not affected by whether the laptop is turned on, the two-way authentication completed by the EC does not depend on the terminal user's power-on operation of the laptop. In addition, the I2C bus is used to replace the PCIe or USB interface required for the normal operation of the module, avoiding the embarrassing situation that the wireless communication module to be authenticated must be enumerated before authentication.

[0101] This embodiment has at least the following advantages:

[0102] 1. In the traditional authentication scheme using PC CPU as Host, the Lock state of the wireless communication module will conflict with other functions, which will increase the complexity of process control in conflict handling. At the same time, complex process control logic will also increase the probability of failure. This embodiment will not produce the above-mentioned contradictions, thus avoiding the above-mentioned problems in conflict handling.

[0103] 2. Authentication does not have to be completed by booting the computer and entering the operating system. The authentication process is invisible to the end user, effectively avoiding the possibility of cracking from the host side using packet capture tools allowed on the operating system.

[0104] 3. Wireless communication modules that fail authentication will no longer be enumerated, and will not affect drivers, services, power consumption and other factors in the operating system.

[0105] 4. The authentication process is invisible to the naked eye. After successful authentication, the wireless communication module can be used after the PC is turned on. After authentication fails, the wireless communication module is completely invisible after the PC is turned on. That is, whether the authentication is successful or not, the end user will not feel it at all.

[0106] Based on the same technical concept, the second embodiment of the present application provides a two-way authentication device, which can be applied to an embedded controller or a wireless communication module. When applied to an embedded controller, Figure 5 , the device comprises:

[0107] The first sending module 501 is used to send a first authentication code to the wireless communication module based on a power-on signal of the wireless communication module; wherein the first authentication code is an authentication code of the embedded controller;

[0108] A first acquisition module 502 is used to acquire a second authentication code sent by the wireless communication module when two-way authentication is satisfied; wherein the second authentication code is the authentication code of the wireless communication module;

[0109] A second sending module 503 is used to send a first message indicating that the embedded controller has successfully authenticated the second authentication code to the wireless communication module when it is determined that the second authentication code is valid;

[0110] The second acquisition module 504 is used to acquire a second message sent by the wireless communication module; wherein the second message indicates that the wireless communication module has successfully authenticated the first authentication code.

[0111] The device uses the embedded controller in the PC as the host Host for two-way authentication, replacing the original PC CPU. Since the EC works for a long time, the two-way authentication process can be performed when the wireless communication module is powered on, and it will not be affected by whether the PC is turned on to enter the operating system. Therefore, the two-way authentication completed by the EC does not depend on the terminal user's PC startup operation. In addition, the authentication process is invisible to the terminal user, which effectively avoids the possibility of cracking from the host side using the packet capture tools allowed on the PC operating system, thereby improving system security.

[0112] When applied to wireless communication modules, such as Figure 6 , the device comprises:

[0113] A third acquisition module 601 is used to acquire a first authentication code sent by an embedded controller; wherein the first authentication code is an authentication code of the embedded controller;

[0114] The third sending module 602 is used to send a second authentication code to the embedded controller when the two-way authentication is satisfied; wherein the second authentication code is the authentication code of the wireless communication module;

[0115] A fourth acquisition module 603 is configured to acquire a first message sent by the embedded controller; wherein the first message indicates that the embedded controller has successfully authenticated the second authentication code;

[0116] The fourth sending module 604 is configured to send, when determining that the first authentication code is valid, to the embedded controller a second message indicating that the wireless communication module has successfully authenticated the first authentication code.

[0117] The device uses the embedded controller in the PC as the host Host for two-way authentication, replacing the original PC CPU. The wireless communication module obtains the two-way authentication invitation and the first authentication code of the embedded controller. When the wireless communication module satisfies the two-way authentication, the second authentication code is sent to the embedded controller. When the wireless communication module determines that the first authentication code is valid, the wireless communication module sends a second message to the embedded controller indicating that the wireless communication module has successfully authenticated the first authentication code. Since the EC works for a long time, the two-way authentication process can be carried out when the wireless communication module is powered on, and it will not be affected by whether the PC is turned on to enter the operating system. Therefore, the two-way authentication completed by the EC does not depend on the terminal user's PC startup operation, and the authentication process is invisible to the terminal user, which effectively avoids the possibility of cracking from the host side using the packet capture tool allowed in the operating system, thereby improving the security of the system.

[0118] like Figure 7 As shown, an embodiment of the present application provides an electronic device, including a processor 111, a communication interface 112, a memory 113 and a communication bus 114, wherein the processor 111, the communication interface 112, and the memory 113 communicate with each other through the communication bus 114.

[0119] Memory 113, used for storing computer programs;

[0120] In one embodiment of the present application, the processor 111 is used to implement the two-way authentication method provided by any one of the aforementioned method embodiments when executing the program stored in the memory 113.

[0121] The communication bus mentioned in the above terminal can be a Peripheral Component Interconnect (PCI) bus or an Extended Industry Standard Architecture (EISA) bus, etc. The communication bus can be divided into an address bus, a data bus, a control bus, etc. For ease of representation, only one thick line is used in the figure, but it does not mean that there is only one bus or one type of bus.

[0122] The communication interface is used for communication between the above terminal and other devices.

[0123] The memory may include a random access memory (RAM) or a non-volatile memory, such as at least one disk memory. Optionally, the memory may also be at least one storage device located away from the aforementioned processor.

[0124] The above-mentioned processor can be a general-purpose processor, including a central processing unit (CPU), a network processor (NP), etc.; it can also be a digital signal processor (DSP), an application specific integrated circuit (ASIC), a field programmable gate array (FPGA) or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components.

[0125] An embodiment of the present application also provides a computer-readable storage medium on which a computer program is stored. When the computer program is executed by a processor, the two-way authentication method provided by any of the aforementioned method embodiments is implemented.

[0126] The device embodiments described above are merely illustrative, wherein the units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed on multiple network units. Some or all of the modules may be selected according to actual needs to achieve the purpose of the solution of this embodiment.

[0127] Through the description of the above implementation methods, those skilled in the art can clearly understand that each implementation method can be implemented by means of software plus a general hardware platform, and of course, by hardware. Based on this understanding, the above technical solution is essentially or the part that contributes to the relevant technology can be embodied in the form of a software product, and the computer software product can be stored in a computer-readable storage medium, such as ROM / RAM, a disk, an optical disk, etc., including a number of instructions for a computer device (which can be a personal computer, a server, or a network device, etc.) to execute the methods described in each embodiment or some parts of the embodiments.

[0128] It should be understood that the terms used herein are only for the purpose of describing specific example embodiments and are not intended to be limiting. Unless the context clearly indicates otherwise, the singular forms "one", "an" and "said" as used herein may also be meant to include plural forms. The terms "include", "comprise", "contain", and "have" are inclusive, and therefore specify the existence of stated features, steps, operations, elements and / or parts, but do not exclude the existence or addition of one or more other features, steps, operations, elements, parts, and / or combinations thereof. The method steps, processes, and operations described herein are not interpreted as necessarily requiring them to be performed in the specific order described or illustrated, unless the execution order is clearly indicated. It should also be understood that additional or alternative steps may be used.

[0129] It should be understood that the specific embodiments described herein are only used to explain the present application and are not used to limit the present application. In the description, the suffixes such as "module", "component" or "unit" used to represent the elements are only used to facilitate the description of the present application and have no specific meaning in themselves. Therefore, "module", "component" or "unit" can be used in a mixed manner.

[0130] The above description is only a specific implementation of the present application, so that those skilled in the art can understand or implement the present application. Various modifications to these embodiments will be apparent to those skilled in the art, and the general principles defined herein can be implemented in other embodiments without departing from the spirit or scope of the present application. Therefore, the present application will not be limited to the embodiments shown herein, but will conform to the widest range consistent with the principles and novel features applied for herein.

Claims

1. A two-way authentication method, characterized in that: Applied to an embedded controller, the method comprises: Based on the power-on signal of the wireless communication module, a first authentication code is sent to the wireless communication module; wherein the first authentication code is the authentication code of the embedded controller; Obtaining a second authentication code sent by the wireless communication module when two-way authentication is satisfied; wherein the second authentication code is the authentication code of the wireless communication module; When determining that the second authentication code is valid, sending a first message to the wireless communication module indicating that the embedded controller has successfully authenticated the second authentication code; A second message sent by the wireless communication module is obtained; wherein the second message indicates that the wireless communication module has successfully authenticated the first authentication code.

2. The method according to claim 1, characterized in that Based on a power-on signal of the wireless communication module, sending a first authentication code to the wireless communication module comprises: Based on a power-on signal of the wireless communication module, sending a two-way authentication invitation and a first authentication code to the wireless communication module; Accordingly, obtaining the second authentication code sent by the wireless communication module when two-way authentication is satisfied includes: Acquire a confirmation authentication reply returned by the wireless communication module based on the two-way authentication invitation when the two-way authentication is satisfied, and acquire a second authentication code sent by the wireless communication module.

3. The method according to claim 1, characterized in that After acquiring the second message sent by the wireless communication module, the method further includes: A two-way authentication success message is sent to a basic input / output system, so that the basic input / output system enumerates the wireless communication module and loads a driver program of the wireless communication module.

4. The method according to claim 1, characterized in that When it is determined that the second authentication code is valid, sending a first message to the wireless communication module indicating that the embedded controller has successfully authenticated the second authentication code includes: Decoding the second authentication code to obtain decoded data; If the decoded data is successfully compared with the preset verification data, determining that the second authentication code is valid; generating a first message indicating that the embedded controller successfully authenticates the second authentication code; The first message is sent to the wireless communication module.

5. The method according to claim 2, characterized in that: Based on a power-on signal of the wireless communication module, sending a two-way authentication invitation and a first authentication code to the wireless communication module includes: Obtaining a power-on request of the wireless communication module; generating a power-on signal for the wireless communication module based on the power-on request; A two-way authentication invitation and a first authentication code are sent to the wireless communication module according to the power-on signal.

6. A two-way authentication method, characterized in that: Applied to a wireless communication module, the method comprises: Obtaining a first authentication code sent by an embedded controller; wherein the first authentication code is an authentication code of the embedded controller; When two-way authentication is satisfied, a second authentication code is sent to the embedded controller; wherein the second authentication code is the authentication code of the wireless communication module; Acquire a first message sent by the embedded controller; wherein the first message indicates that the embedded controller has successfully authenticated the second authentication code; When it is determined that the first authentication code is valid, a second message indicating that the wireless communication module has successfully authenticated the first authentication code is sent to the embedded controller.

7. The method according to claim 6, characterized in that Obtaining a first authentication code sent by the embedded controller, including: Obtaining a two-way authentication invitation and a first authentication code sent by the embedded controller; Accordingly, when the two-way authentication is satisfied, sending a second authentication code to the embedded controller includes: Determining whether the wireless communication module is ready for two-way authentication based on the two-way authentication invitation; When the two-way authentication is ready, a confirmation authentication reply and a second authentication code are sent to the embedded controller.

8. A two-way authentication system, characterized in that: The two-way authentication system includes an embedded controller and a wireless communication module; The embedded controller is used to send a first authentication code to the wireless communication module based on a power-on signal of the wireless communication module; wherein the first authentication code is the authentication code of the embedded controller; obtain a second authentication code sent by the wireless communication module when two-way authentication is satisfied; wherein the second authentication code is the authentication code of the wireless communication module; when determining that the second authentication code is valid, send a first message to the wireless communication module indicating that the embedded controller has successfully authenticated the second authentication code; obtain a second message sent by the wireless communication module; wherein the second message indicates that the wireless communication module has successfully authenticated the first authentication code; The wireless communication module is used to obtain a first authentication code sent by an embedded controller; when two-way authentication is satisfied, send a second authentication code to the embedded controller; obtain a first message sent by the embedded controller; wherein the first message indicates that the embedded controller has successfully authenticated the second authentication code; and when it is determined that the first authentication code is valid, send a second message to the embedded controller indicating that the wireless communication module has successfully authenticated the first authentication code.

9. An electronic device, characterized in that: It includes a processor, a communication interface, a memory and a communication bus, wherein the processor, the communication interface and the memory communicate with each other through the communication bus; Memory, used to store computer programs; The processor is used to implement the two-way authentication method described in any one of claims 1 to 7 when executing the program stored in the memory.

10. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the two-way authentication method according to any one of claims 1 to 7 is implemented.

Images