Method, system, medium and equipment for authenticating identity of terminal through dynamic password
Through the method of dynamic password authentication terminal identity, real-time dynamic passwords are generated through the interaction between the terminal and the central service, and matched, solving the problem of low security of existing terminal verification methods and achieving higher data transmission and terminal Equipment security.
Patent Information
- Application Number
- CN202411367740.9
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2024-09-29
- Publication Date
- 2025-02-07
AI Technical Summary
The existing terminal verification methods are low in security and are easy to crack. Once a fixed password is leaked or cracked, the attacker can use the password to obtain important data provided by the central service unlimited times.
Through the method of authenticating terminal identity through dynamic passwords, the interaction between the terminal and the central service generates real-time request dynamic password and verification dynamic password, and matches the last request dynamic password and verification dynamic password to ensure that each authentication requires Different passwords.
It effectively improves the security of data transmission and terminal equipment when using it, prevents passwords from being cracked, and ensures the uniqueness and security of each identity verification.
Smart Images
Figure CN119397515A_ABST
Abstract
Description
Technical Field
[0001] The present invention relates to the technical field of data transmission security, and in particular to a method, system, medium and device for authenticating a terminal identity through a dynamic password. Background Art
[0002] In recent years, with the development of science and technology, the types and quantity of terminal devices for various purposes, such as set-top boxes, new energy charging piles and mobile phones, have increased day by day. While enriching people's spiritual culture and improving people's life convenience, they have also adapted well to the rapid development trend of the Internet today.
[0003] At the same time, in the digital age, a large amount of personal sensitive information such as identity information, financial information, and health data is transmitted over the network. Ensuring the security of this data during transmission is a basic requirement for protecting personal privacy from infringement and preventing criminals from stealing or abusing this information. Financial services such as online banking and electronic payment are becoming increasingly popular, and the flow of funds is highly dependent on the network. Ensuring the secure transmission of financial transaction data is the key to preventing theft of funds and fraud, and is directly related to the stability of the national financial system and the safety of people's property. The traditional terminal verification method is that the terminal uses a fixed password to request the central service for verification. This verification method has low security, is easy to crack, and is difficult to change. Once leaked or cracked, attackers can use the password unlimited times to obtain important data provided by the central service.
[0004] In view of this, it is necessary to provide a method, system, medium and device for authenticating the identity of a terminal through a dynamic password. Summary of the invention
[0005] The method, system, medium and device for authenticating the identity of a terminal through a dynamic password provided by the present invention effectively solve the problem that the existing terminal verification method has low security and is easy to be cracked.
[0006] The technical solution adopted by the present invention is:
[0007] A method for authenticating a terminal identity through a dynamic password comprises the following steps:
[0008] S1. When the terminal is powered on for the first time, the central service receives an identity authentication request with the default password set by the terminal; the central service passes the identity authentication of the terminal;
[0009] S2. The terminal generates and saves the first request dynamic password, and the central service generates and saves the first verification dynamic password;
[0010] S3. When the terminal is powered on for the Nth time, the central service receives the identity authentication request from the terminal with the N-1th request dynamic password as the request, and the central service matches the N-1th verification dynamic password with the N-1th request dynamic password, where N is a positive integer greater than 1;
[0011] If the N-1th verification dynamic password in S4 and S3 matches the N-1th request dynamic password, the terminal's Nth power-on identity authentication request is qualified, the terminal generates the Nth request dynamic password, and the central service generates the Nth verification dynamic password, where N is a positive integer greater than 1.
[0012] Furthermore, the password includes a combination of numbers, special characters, uppercase English letters, lowercase English letters and Arabic numerals.
[0013] Furthermore, the S2 is specifically:
[0014] S21, the terminal records the first output data information output when the first identity authentication request is successfully sent to the central service; the central service records the first input data information when the receiving terminal sends the first identity authentication request successfully;
[0015] S22. The terminal extracts and encrypts the first output data information in S21 according to the built-in algorithm of the terminal to generate the first request dynamic password; the central service extracts and encrypts the first input data information in S21 according to the built-in algorithm of the central service to generate the first verification dynamic password.
[0016] Furthermore, the S3 is specifically:
[0017] S31, the terminal records the Nth output data information output when the Nth identity authentication request is successfully sent to the central service; the central service records the Nth input data information when the receiving terminal sends the Nth identity authentication request successfully;
[0018] S32. The terminal extracts and encrypts the Nth output data information in S21 according to the algorithm built into the terminal, and generates the Nth request dynamic password; the central service extracts and encrypts the Nth input data information in S21 according to the algorithm built into the central service, and generates the Nth verification dynamic password.
[0019] Furthermore, the algorithm built into the terminal is the same as the algorithm built into the central service.
[0020] Furthermore, the method of extracting and encrypting the first output data information and the method of extracting and encrypting the first input data information are the same.
[0021] Furthermore, the method of extracting and encrypting the output data information for the Nth time is the same as the method of extracting and encrypting the input data information for the Nth time.
[0022] A system for authenticating a terminal identity through a dynamic password, comprising:
[0023] Terminal module, used to generate dynamic password for request and send identity authentication request;
[0024] The central service module is used to generate and verify dynamic passwords and verify identity authentication.
[0025] A computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the steps of the method for authenticating a terminal identity through a dynamic password are implemented.
[0026] In addition, the computer-readable storage medium may take the form of any combination of one or more computer-readable storage media, wherein the computer-readable storage medium includes an electronic, optical, electromagnetic, infrared or semiconductor system, apparatus or device, or any combination thereof.
[0027] A computer device comprises a processor, a communication interface, a memory and a communication bus, wherein the processor, the communication interface and the memory communicate with each other via the communication bus; wherein:
[0028] The memory is used to store computer programs;
[0029] The processor is used to execute the steps of the method for authenticating the terminal identity through dynamic passwords by running the program stored in the memory. The communication bus mentioned in the above terminal can be a peripheral component interconnect standard (PCI) bus or an extended industry standard architecture (EISA) bus. The communication bus can be divided into address bus, data bus, control bus and other communication interfaces for communication between the above terminal and other devices. The memory can include random access memory (RAM) or non-volatile memory, such as at least one disk storage. Optionally, the memory can also be at least one storage device located away from the aforementioned processor. The above-mentioned processor can be a general-purpose processor, including a central processing unit (CPU), a network processor (NP), etc.; it can also be a digital signal processor (DSP), an application specific integrated circuit (ASIC), a field programmable gate array (FPGA) or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components.
[0030] Beneficial effects of the invention:
[0031] 1. Data transmission is realized through the interaction between the terminal and the central service. The terminal and the central service generate real-time request dynamic password and verification dynamic password through the transmitted data as the comparison parameters required for the next identity authentication, and match the previous request dynamic password and verification dynamic password as the comparison parameters required for this verification, ensuring that each identity authentication requires a different password to realize dynamic password authentication, which is not easy to be cracked, and effectively improves the security of data transmission and terminal equipment use.
[0032] 2. The algorithm built into the terminal is the same as the algorithm built into the central service, which can ensure that when the output data and the input data are the same, the dynamic password requested and the dynamic password verified at the same time are consistent.
[0033] 3. The password uses a combination of multiple characters to further increase the complexity of the password and enhance the security of the password.
[0034] 4. The corresponding output data information and input data information are recorded only when the identity authentication request is sent successfully, which can ensure that when the request fails, the verification password is still compared with the last verification dynamic password and the request dynamic password. BRIEF DESCRIPTION OF THE DRAWINGS
[0035] Figure 1 A flowchart of a method for authenticating a terminal identity through a dynamic password provided in an embodiment of the present application. DETAILED DESCRIPTION
[0036] In order to make the above-mentioned objects, features and advantages of the present invention more obvious and easy to understand, the specific embodiments of the present invention are described in detail below with reference to the accompanying drawings.
[0037] like Figure 1 As shown, the present application provides a first embodiment, which is a method for authenticating a terminal identity through a dynamic password, comprising the following steps:
[0038] S1. When the terminal is powered on for the first time, the central service receives an identity authentication request with the default password set by the terminal; the central service passes the identity authentication of the terminal;
[0039] S2. The terminal generates and saves the first request dynamic password, and the central service generates and saves the first verification dynamic password;
[0040] S3. When the terminal is powered on for the Nth time, the central service receives the identity authentication request from the terminal with the N-1th request dynamic password as the request, and the central service matches the N-1th verification dynamic password with the N-1th request dynamic password, where N is a positive integer greater than 1;
[0041] If the N-1th verification dynamic password in S4 and S3 matches the N-1th request dynamic password, the terminal's Nth power-on identity authentication request is qualified, the terminal generates the Nth request dynamic password, and the central service generates the Nth verification dynamic password, where N is a positive integer greater than 1.
[0042] For example: a certain model A smart set-top box is set to support high-definition playback, but it needs to obtain the high-definition playback source address from the central service. To avoid address leakage and cracking, the terminal identity needs to be authenticated. The smart set-top box terminal calculates and saves the request dynamic password based on the last request, and initiates a new request to obtain the high-definition playback address. The center saves the corresponding verification dynamic password based on the data information of the corresponding terminal's last request, and performs a check. After authenticating the legal identity, it returns the valid playback source address to the terminal.
[0043] When charging business is set for a certain model B charging pile, the terminal needs to communicate with the central service to make order payment. To avoid payment risks, the terminal identity needs to be authenticated. The charging pile terminal calculates and saves the request dynamic password based on the last request, and initiates a new request to the central service for payment. The central service saves the corresponding verification dynamic password based on the data information of the last request of the corresponding terminal, verifies it, and completes the payment.
[0044] In the above design, data transmission is achieved through the interaction between the terminal and the central service. The terminal and the central service generate real-time request dynamic passwords and verification dynamic passwords through the transmitted data as a reference for the next identity authentication, and match the previous request dynamic password and verification dynamic password as the verification reference for this time, ensuring that each identity authentication requires a different password to implement dynamic password authentication, which is not easy to be cracked, effectively improving the security of data transmission and terminal device use.
[0045] Specifically: the password includes a combination of numbers, special characters, uppercase English letters, lowercase English letters and Arabic numerals.
[0046] In the above design, the password is made more complex through the arrangement and combination of numbers, special characters, uppercase English letters, lowercase English letters and Arabic numerals, which reduces the probability of the password being cracked and effectively improves the security of the terminal device.
[0047] Specifically: S2 is specifically,
[0048] S21, the terminal records the first output data information output when the first identity authentication request is successfully sent to the central service; the central service records the first input data information when the receiving terminal sends the first identity authentication request successfully;
[0049] S22. The terminal extracts and encrypts the first output data information in S21 according to the built-in algorithm of the terminal to generate the first request dynamic password; the central service extracts and encrypts the first input data information in S21 according to the built-in algorithm of the central service to generate the first verification dynamic password.
[0050] In the above design, the terminal will record the first output data information only when the central service successfully sends the first identity authentication request, and the central service will record the first input data information only when the central service records that the receiving terminal successfully sends the first identity authentication request. This can ensure that when the identity authentication is performed again after the first identity authentication request fails, the terminal will not generate the first request dynamic password, and the central service will not generate the first verification dynamic password. The central service still only needs to re-verify with the default password, which ensures the fault tolerance of the terminal and the central service during the initial verification.
[0051] Specifically: S3 is specifically,
[0052] S31, the terminal records the Nth output data information output when the Nth identity authentication request is successfully sent to the central service; the central service records the Nth input data information when the receiving terminal sends the Nth identity authentication request successfully;
[0053] S32. The terminal extracts and encrypts the Nth output data information in S21 according to the algorithm built into the terminal, and generates the Nth request dynamic password; the central service extracts and encrypts the Nth input data information in S21 according to the algorithm built into the central service, and generates the Nth verification dynamic password.
[0054] In the above design, the terminal will record the Nth output data information only when the central service successfully sends the Nth identity authentication request, and the central service will record the Nth input data information only when the central service records that the receiving terminal successfully sends the Nth identity authentication request. This can ensure that when identity authentication is performed again after the Nth identity authentication request fails, the terminal will not generate an Nth request dynamic password, and the central service will not generate an Nth verification dynamic password. The central service still only needs to re-verify with the default password, which ensures the fault tolerance of the terminal and the central service during verification.
[0055] Specifically: the algorithm built into the terminal is the same as the algorithm built into the central service.
[0056] In the above design, the algorithm built into the terminal is the same as the algorithm built into the central service, which can ensure that when the output data recorded by the terminal is the same as the input data recorded by the central service, the request dynamic password generated by the terminal and the verification dynamic password generated by the central service are consistent, avoiding the situation where the request dynamic password generated by the terminal and the verification dynamic password generated by the central service are inconsistent when the output data recorded by the terminal is the same as the input data recorded by the central service.
[0057] Specifically: the method of extracting and encrypting the output data information for the first time and the method of extracting and encrypting the input data information for the first time are the same.
[0058] In actual use, the output data and input data can be treated as a string of characters. By extracting the hash value of the string and then using the RSA encryption algorithm, the request dynamic password and verification dynamic password can be obtained.
[0059] In the above design, the method of extracting and encrypting the first output data information and the method of extracting and encrypting the first input data information are the same, which can ensure the consistency of the encrypted output data and input data, and facilitate subsequent matching.
[0060] Specifically: the method of extracting and encrypting the output data information for the Nth time is the same as the method of extracting and encrypting the input data information for the Nth time.
[0061] In actual use, the output data and input data can be treated as a string of characters. By extracting the hash value of the string and then using the RSA encryption algorithm, the request dynamic password and verification dynamic password can be obtained.
[0062] In the above design, the method of extracting and encrypting the Nth output data information and the Nth input data information is the same, which can ensure the consistency of the encrypted output data and input data, and facilitate subsequent matching.
[0063] The present application provides a second embodiment, which is a system for authenticating a terminal identity through a dynamic password, including:
[0064] Terminal module, used to generate dynamic password for request and send identity authentication request;
[0065] The central service module is used to generate and verify dynamic passwords and verify identity authentication.
[0066] The present application provides a third embodiment, which is a computer-readable storage medium. The computer-readable storage medium stores a computer program. When the computer program is executed by a processor, the steps of a method for authenticating a terminal identity through a dynamic password are implemented.
[0067] As an embodiment of the present invention, the communication bus mentioned in the above terminal can be a Peripheral Component Interconnect (PCI) bus or an Extended Industry Standard Architecture (EISA) bus, etc. The communication bus can be divided into an address bus, a data bus, a control bus, etc.
[0068] The present application provides a fourth embodiment, which is a computer device, including a processor, a communication interface, a memory, and a communication bus, wherein the processor, the communication interface, and the memory communicate with each other through the communication bus; wherein:
[0069] The memory is used to store computer programs;
[0070] The processor is used to execute the steps of the method for authenticating the terminal identity through a dynamic password by running the program stored in the memory.
[0071] As an embodiment of the present invention, the communication bus mentioned in the above terminal can be a Peripheral Component Interconnect (PCI) bus or an Extended Industry Standard Architecture (EISA) bus, etc. The communication bus can be divided into an address bus, a data bus, a control bus, etc.
[0072] As an implementation mode of the present invention, the communication interface is used for communication between the above-mentioned terminal and other devices.
[0073] As an embodiment of the present invention, the memory may include a random access memory (RAM) or a non-volatile memory, such as at least one disk memory. Optionally, the memory may also be at least one storage device located away from the aforementioned processor.
[0074] As an embodiment of the present invention, the above-mentioned processor can be a general-purpose processor, including a central processing unit (CPU), a network processor (NP), etc.; it can also be a digital signal processor (DSP), an application specific integrated circuit (ASIC), a field programmable gate array (FPGA) or other programmable logic devices, discrete gates or transistor logic devices, discrete hardware components.
[0075] To further explain in detail, it should be understood that the above is only a specific embodiment of the present invention and is not intended to limit the present invention. Any modifications, equivalent substitutions, improvements, etc. made within the spirit and principles of the present invention should be included in the protection scope of the present invention.
Claims
1. A method for authenticating a terminal identity through a dynamic password, characterized in that: The steps include: S1. When the terminal is powered on for the first time, the central service receives an identity authentication request with the default password set by the terminal, and the central service passes the identity authentication of the terminal; S2. The terminal generates and saves the first request dynamic password, and the central service generates and saves the first verification dynamic password; S3. When the terminal is powered on for the Nth time, the central service receives the identity authentication request from the terminal with the N-1th request dynamic password as the request, and the central service matches the N-1th verification dynamic password with the N-1th request dynamic password, where N is a positive integer greater than 1; If the N-1th verification dynamic password in S4 and S3 matches the N-1th request dynamic password, the terminal's Nth power-on identity authentication request is qualified, the terminal generates the Nth request dynamic password, and the central service generates the Nth verification dynamic password, where N is a positive integer greater than 1.
2. The method for authenticating a terminal identity by a dynamic password according to claim 1, characterized in that: The password includes a combination of numbers, special characters, uppercase English letters, lowercase English letters and Arabic numerals.
3. The method for authenticating a terminal identity by a dynamic password according to claim 1, characterized in that: The S2 is specifically: S21, the terminal records the first output data information output when the first identity authentication request is successfully sent to the central service; the central service records the first input data information when the receiving terminal sends the first identity authentication request successfully; S22, the terminal extracts and encrypts the first output data information in S21 according to the algorithm built into the terminal, and generates the first request dynamic password; The central service extracts and encrypts the data information entered for the first time in S21 according to the algorithm built into the central service, and generates the first verification dynamic password.
4. The method for authenticating a terminal identity by a dynamic password according to claim 3, characterized in that: The S3 is specifically: S31, the terminal records the Nth output data information output when the Nth identity authentication request is successfully sent to the central service; the central service records the Nth input data information when the receiving terminal sends the Nth identity authentication request successfully; S32, the terminal extracts and encrypts the Nth output data information in S21 according to the algorithm built into the terminal, and generates the Nth request dynamic password; The central service extracts and encrypts the data information entered for the Nth time in S21 according to the algorithm built into the central service, and generates the Nth verification dynamic password.
5. The method for authenticating a terminal identity by a dynamic password according to claim 4, characterized in that: The algorithm built into the terminal is the same as the algorithm built into the central service.
6. The method for authenticating a terminal identity by a dynamic password according to claim 4, characterized in that: The method for extracting and encrypting the first output data information and the method for extracting and encrypting the first input data information are the same.
7. The method for authenticating a terminal identity by a dynamic password according to claim 4, characterized in that: The method for extracting and encrypting the output data information for the Nth time is the same as the method for extracting and encrypting the input data information for the Nth time.
8. A system for authenticating a terminal identity through a dynamic password, characterized in that: include, Terminal module, used to generate and request dynamic passwords and send identity authentication requests; The central service module is used to generate and verify dynamic passwords and verify identity authentication.
9. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the steps of the method for authenticating the identity of a terminal through a dynamic password according to any one of claims 1 to 7 are implemented.
10. A computer device, characterized in that: The method comprises a processor, a communication interface, a memory and a communication bus, wherein the processor, the communication interface and the memory communicate with each other via the communication bus; wherein: The memory is used to store computer programs; The processor is used to execute the steps of the method for authenticating the identity of a terminal through a dynamic password according to any one of claims 1 to 7 by running the program stored in the memory.