Security authentication method of medical internet of things system and related equipment

Abstract

The invention provides a security authentication method of a medical internet of things system and related equipment, which can improve the security of data transmission between a reader-writer and tag equipment. The method comprises the following steps: sending target request information to label equipment, so that the label equipment returns a target response message; the target response message is sent to the server, so that the server searches the corresponding target label content and returns the target label content; generating first challenge information according to the character string and the target label content; the first challenge information is sent to the tag equipment, so that the tag equipment verifies the identity of the reader-writer according to the first challenge information, and second challenge information is generated and returned according to the first challenge information when the verification is passed; verifying whether the tag device is legal according to the second challenge information; and if the local challenge information is legal, generating update challenge information and sending the update challenge information to the tag equipment, so that the tag equipment is matched with the local challenge information, and determining that the reader-writer and the tag equipment pass authentication when the tag equipment is matched with the local challenge information.

Description

Technical Field

[0001] The present invention relates to the field of Internet of Things, and in particular to a security authentication method and related equipment for a medical Internet of Things system. Background Art

[0002] At present, the Internet of Things technology has made great progress in logistics management, smart transportation, smart agriculture, smart medical care and other aspects. Under the infrastructure of the Internet of Things, the medical system has gradually improved the construction of the medical Internet of Things (IoMT) environment with the help of the technology in the Internet of Things. RFID (Radio Frequency Identification) technology is a key technology of the Internet of Things. The RFID system is mainly composed of three parts: tags, readers and writers, and background database servers. By applying RFID technology, biological research and medical institutions can more effectively manage resources such as experimental organisms, patients, drugs, and medical equipment, and realize the intelligent management of medical information. Through the RFID tags on experimental organisms or patients, researchers and medical staff can track the location and activity trajectory of the monitored person in real time, and obtain basic information of the monitored object through the reader at any time, such as experimental data and patient medical records, to facilitate rapid diagnosis and treatment. Much of this important information is carried in the form of biomedical images, so biomedical images need to be frequently retrieved and consulted between doctors and patients, department staff and background information systems. The RFID system transmits information through wireless channels. Some malicious attackers may deceive consumers or medical personnel through interception, forgery, replay and other attack methods, causing loss, leakage and abuse of information, thereby causing tension in the doctor-patient relationship and even causing major public opinion events such as important scientific research results and medical accidents.

[0003] At present, some security authentication protocols have been proposed for RFID systems, but there are still some security issues. Moreover, these protocols still adhere to traditional cryptographic technology and use relatively complex encryption algorithms to implement them. The required computing resources and storage space are unaffordable for low-cost electronic tags. In addition, the complex design and complicated steps of the protocol also reduce the speed of information transmission and increase the delay, resulting in low efficiency of information exchange and possible transmission errors. Summary of the invention

[0004] The embodiments of the present invention provide a security authentication method and related equipment for a medical Internet of Things system, which can improve the security of data transmission between a reader and a tag device.

[0005] A first aspect of the present invention provides a security authentication method for a medical Internet of Things system, comprising:

[0006] If the tag device is searched by the reader / writer, the reader / writer sends a target request message to the tag device, so that the tag device returns a target response message corresponding to the target request message;

[0007] The reader sends the target response message to the server, so that the server determines whether there is a target tag content matching the target response message in the database, and returns the target tag content to the reader if the target tag content exists in the database;

[0008] If the reader / writer receives the target tag content, the reader / writer generates first challenge information according to the generated character string and the target tag content;

[0009] The reader sends the first challenge information to the tag device, so that the tag device verifies the identity of the reader according to the first challenge information. If the identity verification of the reader is successful, the tag device generates second challenge information according to the first challenge information, and returns the second challenge information to the reader;

[0010] The reader / writer verifies whether the tag device is legal according to the second challenge information;

[0011] If the reader / writer determines that the tag device is legitimate, it generates update challenge information and sends the update challenge information to the tag device so that the tag device matches the update challenge information with the local challenge information, and when the local challenge information matches the update challenge information, it determines that the reader / writer and the tag device are authenticated.

[0012] A second aspect of the present invention provides a security authentication method for a medical Internet of Things system, comprising:

[0013] The tag device receives a target request message sent by the reader / writer, wherein the target response message is request information sent by the reader / writer when determining that the tag device is searched;

[0014] The tag device sends a target response message corresponding to the target request message to the reader / writer, so that the reader / writer forwards the target response message to the server, and the server determines whether there is a target tag content matching the target response message in the database, and returns the target tag content to the reader / writer when the target tag content exists in the database;

[0015] The tag device receives first challenge information sent by the reader / writer, where the first challenge information is generated by the reader / writer according to a generated character string and content of the target tag;

[0016] The tag device verifies the identity of the reader / writer according to the first challenge information;

[0017] If the identity authentication of the reader / writer is passed, the tag device generates second challenge information according to the first challenge information;

[0018] The tag device sends the second challenge information to the reader / writer, so that the reader / writer verifies whether the tag device is legitimate according to the second challenge information, and generates update challenge information when determining that the tag device is legitimate, and returns the update challenge information;

[0019] The tag device matches the generated local challenge information with the update challenge information;

[0020] If the local challenge information matches the update challenge information, the tag device determines that the authentication with the reader is successful.

[0021] A third aspect of the present invention provides a reader / writer, comprising:

[0022] A sending module, used for sending target request information to the tag device if the tag device is searched by the reader / writer, so that the tag device returns a target response message corresponding to the target request information;

[0023] The sending module is further used to send the target response message to the server, so that the server determines whether there is a target tag content matching the target response message in the database, and returns the target tag content when the target tag content exists in the database;

[0024] A first generating module, configured to generate first challenge information according to a generated character string and the target tag content if the target tag content is received;

[0025] The sending module is further used to send the first challenge information to the tag device, so that the tag device verifies the identity of the reader / writer according to the first challenge information. If the identity authentication of the reader / writer is successful, the tag device generates second challenge information according to the first challenge information and returns the second challenge information;

[0026] A verification module, used to verify whether the tag device is legal according to the second challenge information;

[0027] The second generation module is used to generate update challenge information if it is determined that the tag device is legal, and send the update challenge information to the tag device, so that the tag device matches the update challenge information with the local challenge information, and when the local challenge information matches the update challenge information, it is determined that the reader and the tag device are authenticated.

[0028] A fourth aspect of the present invention provides a label device, comprising:

[0029] A receiving module, used for receiving a target request message sent by a reader / writer, wherein the target response message is request information sent by the reader / writer when determining that the tag device is searched;

[0030] A sending module, used for sending a target response message corresponding to the target request message to the reader / writer, so that the reader / writer forwards the target response message to the server, and enables the server to determine whether there is a target tag content matching the target response message in the database, and return the target tag content to the reader / writer when the target tag content exists in the database;

[0031] The receiving module is further used to receive first challenge information sent by the reader / writer, where the first challenge information is generated by the reader / writer according to a generated character string and content of the target tag;

[0032] A verification module, used to verify the identity of the reader / writer according to the first challenge information;

[0033] Generate information, used to generate second challenge information according to the first challenge information if the identity authentication of the reader / writer passes;

[0034] The sending module is further used to send the second challenge information to the reader / writer, so that the reader / writer verifies whether the tag device is legal according to the second challenge information, and generates update challenge information when determining that the tag device is legal, and returns the update challenge information;

[0035] A matching module, used for matching the generated local challenge information with the updated challenge information;

[0036] A determination module is used for determining that the tag device has passed the authentication with the reader / writer if the local challenge information matches the update challenge information.

[0037] A fifth aspect of the present invention provides an electronic device, comprising a memory and a processor, wherein the processor is used to implement the steps of the security authentication method of the medical Internet of Things system as described in any one of the above aspects when executing a computer management program stored in the memory.

[0038] The sixth aspect of the present invention provides a computer-readable storage medium on which a computer management program is stored. When the computer management program is executed by a processor, the steps of the security authentication method of the medical Internet of Things system as described in any one of the above aspects are implemented.

[0039] In summary, it can be seen that in the embodiment provided by the present invention, a two-way authentication service is performed between the reader and the tag device. At the same time, when performing the two-way authentication service, through the design of the Ref function, the use of XOR and bit shift operations can realize the resetting and confusion of the character string, and achieve a pseudo-random effect, thereby ensuring the randomness of the protocol challenge message. In addition, the challenge message in the authentication is a structure that is calculated through multiple layers of Ref function and Rot function, thereby ensuring the non-repeatability and real-time nature of the challenge information, and realizing the non-traceability of the message. After each authentication, the reader updates the key and index value, realizing the one-time one-secret effect, thereby ensuring the security of data transmission. BRIEF DESCRIPTION OF THE DRAWINGS

[0040] Figure 1 A system architecture diagram of a security authentication system for a medical Internet of Things system provided by an embodiment of the present invention;

[0041] Figure 2 A schematic diagram of a flow chart of a security authentication method for a medical Internet of Things system provided by an embodiment of the present invention;

[0042] Figure 3 Another schematic diagram of a process flow of a security authentication method for a medical Internet of Things system provided by an embodiment of the present invention;

[0043] Figure 4 Another schematic diagram of a process flow of a security authentication method for a medical Internet of Things system provided by an embodiment of the present invention;

[0044] Figure 5 A schematic diagram of a virtual structure of a reader / writer of a medical Internet of Things system provided by an embodiment of the present invention;

[0045] Figure 6 A schematic diagram of a virtual structure of a tag device of a medical Internet of Things system provided by an embodiment of the present invention;

[0046] Figure 7 A schematic diagram of the hardware structure of a security authentication device for a medical Internet of Things system provided by an embodiment of the present invention;

[0047] Figure 8 A schematic diagram of an electronic device according to an embodiment of the present invention;

[0048] Fig. 9 A schematic diagram of an embodiment of a computer-readable storage medium provided for an embodiment of the present invention. DETAILED DESCRIPTION

[0049] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative work are within the scope of protection of the present invention.

[0050] The present invention belongs to an RFID protocol two-way authentication protocol, which is used in a biomedical image retrieval system in a medical Internet of Things environment for identity recognition and information security. The parties involved in the protocol are an electronic tag, a reader and a background database. First, the symbols involved in the present invention are explained. Please refer to Table 1. Table 1 shows the symbols provided by the present invention and their corresponding meanings:

[0051] Table 1

[0052]

[0053]

[0054] The definition of the Ref(x,y) operation is as follows:

[0055] Assume that X and Y are two n-bit binary strings as follows:

[0056] X=x n-1 x n-2 ...x0,x∈{0,1},i=0,1,2,...,n-1

[0057] Y=y n-1 y n-2 ...y0,y∈{0,1},i=0,1,2,...,n-1

[0058] The operation rules of Ref(x,y) are as follows:

[0059] Ref(x,y)=z n-1 z n-2 ...z0,z∈{0,1},i=0,1,2,...,n-1=F i (x i ,y i )

[0060] The function F i (x i ,y i ) is calculated according to the following formula:

[0061]

[0062] symbol Represents the exclusive-or operation.

[0063] See also Figure 1 , Figure 1 The system framework diagram of the security authentication method of the medical Internet of Things system provided by the present invention includes a tag, a reader and a server, wherein patients, drugs, medical equipment and even experimental animals can wear tags, and medical staff, such as nurses, can use a handheld reader to obtain relevant information in the tag and send the information to the backend database server for doctors and managers to perform medical diagnosis or information management. The wireless channel between the reader and the backend database is secure, while the channel between the tag and the reader is not secure. Therefore, the present invention provides a security authentication method for the medical Internet of Things system. Figure 2 From the perspective of the reader / writer, a security authentication method for a medical Internet of Things system provided by the present invention is described:

[0064] See also Figure 2 , Figure 2 A schematic diagram of a flow chart of a security authentication method for a medical Internet of Things system provided by an embodiment of the present invention, wherein the security authentication method for a medical Internet of Things system includes:

[0065] 201. If the tag device is searched by the reader, the reader sends a target request message to the tag device.

[0066] In this embodiment, if the tag device is searched by the reader / writer, the reader / writer sends a target request message to the tag device, that is, when the tag device is searched by the reader / writer, the reader / writer will send a "hello" request message to the tag device. After the tag device receives the "hello" request message sent by the reader / writer, the tag device will return the index random code IDS stored locally as a target response message to the reader / writer.

[0067] It should be noted that before the tag device and the reader perform security verification, the parameters between the tag device, the reader and the background server can also be initially set and stored. At this stage, the data stored by the tag device, the reader and the background database are as follows:

[0068] Tag device: (K, ID, IDS):

[0069] Reader & backend database: (K, ID, IDS old ,IDS new );

[0070] Initially, IDS old =IDS, and IDS new Set to empty;

[0071] In the subsequent verification phase, each time a two-way authentication is completed between the tag device and the reader, the tag device's IDS and K will be updated, the reader will also update the key K and IDS, and store the two most recent index random codes IDS old ,IDS new .

[0072] 202. The reader sends the target response message to the server, so that the server determines whether there is a target tag content matching the target response message in the database, and returns the target tag content if the target tag content exists in the database.

[0073] In this embodiment, when the reader receives the target response message IDS from the tag device, the reader uses the IDS as an index value and requests the background server to search in the database to see whether there is a matching target tag content. When the target tag content is found, the target tag content is returned. If the server does not find the corresponding matching tag, the authentication process is exited.

[0074] 203. If the reader / writer receives the target tag content, the reader / writer generates first challenge information according to the generated character string and the target tag content.

[0075] In this embodiment, if the reader receives the target tag content sent by the server, the reader generates two random binary strings n1 and n2 (i.e., strings) with a length of L bits using a pseudo-random generator PRNG (·), and generates a first challenge message according to the generated strings and the target tag content, wherein the first challenge message is the information pair {A, B, C L or R Specifically, the reader can generate the first challenge information by the following formula:

[0076]

[0077] C L or R =Ref(Ref(n1,ID),Ref(n2,ID));

[0078] Among them, IDS is the index random code of the tag device in the target response message, K is the key between the reader and the tag device, n1 and n2 are strings, and ID is the index value of the tag device in the target tag content.

[0079] 204. The reader sends the first challenge information to the tag device, so that the tag device verifies the identity of the reader according to the first challenge information. If the identity authentication of the reader is successful, the tag device generates the second challenge information according to the first challenge information, and returns the second challenge information to the reader.

[0080] In this embodiment, after generating the first challenge information, the reader can send the first challenge information to the tag device. After receiving the first challenge information, the tag device can verify the identity of the reader based on the first challenge information. If the identity authentication of the reader is passed, the tag device generates a second challenge information based on the first challenge information and returns the second challenge information to the reader.

[0081] It should be noted that before sending the first challenge information, the reader can also judge the value of wt(C), that is, L or R The value of C L or R If the value is an odd number, the reader sends the left half of C. L , otherwise send the right half of C R , assuming C = 10010100, if wt(C) is an odd number, send the left half of C L =1001, otherwise send the right half C R =0100. The division criteria of the left half and the right half can be based on C L or R The value is divided by the number of digits, such as C L or R The number of bits in the value is 8. The left half is 1 to 4 bits from left to right, and the right half is 5 to 8 bits. Of course, it can also be divided according to other standards, and there is no specific limit.

[0082] 205. The reader / writer verifies whether the tag device is legitimate according to the second challenge information. If the reader / writer determines that the tag device is legitimate, step 206 is executed.

[0083] In this embodiment, the second challenge information is {D L or R}, after receiving the second challenge information, the reader can verify whether the tag device is legal according to the second challenge information. The specific reader determines the read / write challenge information value through the following formula:

[0084]

[0085] Among them, D L or R ' is the reading and writing challenge information value, n1 and n2 are character strings, ID' is the index value stored locally on the tag device, IDS' is the index random code stored locally on the tag device, and K is the key stored locally on the tag device;

[0086] And compare the read / write challenge information value with the value corresponding to the second challenge information; if the read / write challenge information value matches the value corresponding to the second challenge information, it is determined that the tag device is legal, and step 206 is executed; if the read / write challenge information value does not match the value corresponding to the second challenge information, it is determined that the tag device is illegal, and the security verification process is exited.

[0087] 206. Generate update challenge information, and send the update challenge information to the tag device, so that the tag device matches the update challenge information with the local challenge information, and determines that the reader / writer is authenticated with the tag device when the local challenge information matches the update challenge information.

[0088] In this embodiment, if the reader determines that the tag device is legitimate, the update challenge information is generated by the following formula:

[0089] E=Ref(K new ',ID');

[0090] Among them, E is the update challenge information.

[0091] The update challenge information is sent to the tag device so that the tag device matches the update challenge information with the local challenge information, and when the local challenge information matches the update challenge information, it is determined that the reader / writer and the tag device are authenticated.

[0092] It should be noted that if the reader determines that the tag device is legal, the reader can also calculate the index random value and key by the following formula:

[0093]

[0094] And replace the index random value and key of the locally stored tag device with the calculated new index random value IDS new and key K new .

[0095] In summary, it can be seen that in the embodiment provided by the present invention, a two-way authentication service is performed between the reader and the tag device. At the same time, when performing the two-way authentication service, through the design of the Ref function, the use of XOR and bit shift operations can realize the resetting and confusion of the character string, and achieve a pseudo-random effect, thereby ensuring the randomness of the protocol challenge message. In addition, the challenge message in the authentication is a structure that is calculated through multiple layers of Ref function and Rot function, thereby ensuring the non-repeatability and real-time nature of the challenge information, and realizing the non-traceability of the message. After each authentication, the reader updates the key and index value, realizing the one-time one-secret effect, thereby ensuring the security of data transmission.

[0096] The following describes the security authentication method of the medical Internet of Things system provided by the embodiment of the present invention from the perspective of the tag device. Figure 3 , Figure 3 A schematic diagram of another embodiment of a security authentication method for a medical Internet of Things system provided by an embodiment of the present invention includes:

[0097] 301. The tag device receives a target request message sent by a reader / writer.

[0098] In this embodiment, when the tag device is searched by the reader / writer, the reader / writer will send a "hello" request message (target request information) to the tag device, and the tag device can receive the target request message sent by the reader / writer.

[0099] 302. The tag device sends a target response message corresponding to the target request message to the reader / writer.

[0100] In this embodiment, after receiving the "hello" request information sent by the reader / writer, the tag device returns the index random code IDS stored locally as a target response message to the reader / writer.

[0101] 303. The tag device receives the first challenge information sent by the reader.

[0102] In this embodiment, after the reader receives the target response message IDS from the tag device, the reader uses the IDS as an index value to request the backend server to search in the database to see if there is a matching target tag content. When the target tag content is found, the target tag content is returned. The reader generates a first challenge message based on the target tag content and the generated string, and returns the first challenge message to the tag device. Thus, the tag device can receive the first challenge message sent by the reader, and the first challenge message is the information pair {A, B, C LorR}.

[0103] 304. The tag device verifies the identity of the reader / writer according to the first challenge information. If the identity verification of the reader / writer passes, execute step 305.

[0104] In this embodiment, the tag device can use the information to L or R} Verify the identity of the reader. Specifically, the tag device generates C' through the following formula L or R :

[0105] C' L or R =Ref(Ref(n1,ID'),Ref(n2,ID'));

[0106] in, IDS' is the index random code stored locally in the tag device, and ID' is the index random value stored locally in the tag device;

[0107] And judge C' LorR With C LorR Is it a match? If C' LorR With C LorR If the reader's identity authentication is successful, then step 305 is executed.LorR With C LorR If they do not match, it is determined that the reader's identity authentication has failed and the security authentication process is exited.

[0108] 305. The tag device generates second challenge information according to the first challenge information.

[0109] In this embodiment, when the tag device determines that the identity authentication of the reader / writer is passed, the tag device can generate the second challenge information by using the following formula according to the first challenge information:

[0110]

[0111] Among them, D LorR The second challenge information is: IDS' is the index random code stored locally in the tag device, n1 and n2 are character strings, and K is the key stored locally in the tag device.

[0112] 306. The tag device sends the second challenge information to the reader.

[0113] In this embodiment, after generating the second challenge information, the tag device can LorR The second challenge information is sent to the reader / writer. After receiving the second challenge information, the reader / writer verifies whether the tag device is legal according to the second challenge information. When determining that the tag device is legal, the reader / writer generates updated challenge information E and returns the updated challenge information E.

[0114] It should be noted that before sending the second challenge information, the tag device can also judge the value of wt(D), that is, L or R The value of D L or R If the value is an odd number, the tag device sends the left half of D L , otherwise send the right half of D R , assuming D = 10010100, if wt(D) is an odd number, send the left half of D L =1001, otherwise send the right half D R =0100. The division criteria of the left half and the right half can be based on D L or R The value is divided into the number of digits, such as D L or R The number of bits in the value is 8. The left half is 1 to 4 bits from left to right, and the right half is 5 to 8 bits. Of course, it can also be divided according to other standards, and there is no specific limit.

[0115] 307. The tag device matches the generated local challenge information with the updated challenge information.

[0116] In this embodiment, after receiving the update challenge information, the tag device can generate local challenge information by the following formula:

[0117] E'=Ref(K new ',ID);

[0118] Among them, E' is the local challenge information;

[0119] The calculated E' is matched with the received E. If E' matches E, step 308 is executed; otherwise, the security authentication process is exited.

[0120] 308. The tag device determines that the authentication with the reader is passed.

[0121] In this embodiment, when the tag device determines that E' matches E, it determines that the security authentication between the tag device and the reader is passed, and updates the index random value and key stored locally to IDS new ' and K new '.

[0122] In summary, it can be seen that in the embodiment provided by the present invention, a two-way authentication service is performed between the reader and the tag device. At the same time, when performing the two-way authentication service, through the design of the Ref function, the use of XOR and bit shift operations can realize the resetting and confusion of the character string, and achieve a pseudo-random effect, thereby ensuring the randomness of the protocol challenge message. In addition, the challenge message in the authentication is a structure that is calculated through multiple layers of Ref function and Rot function, thereby ensuring the non-repeatability and real-time nature of the challenge information, and realizing the non-traceability of the message. After each authentication, the reader updates the key and index value, realizing the one-time one-secret effect, thereby ensuring the security of data transmission.

[0123] Combine the following Figure 4 The security authentication method of the medical Internet of Things system provided by the embodiment of the present invention is explained from the interaction between the reader and the tag device. Figure 4 , Figure 4 Another flowchart of a security authentication method for a medical Internet of Things system provided by an embodiment of the present invention includes:

[0124] 401. If the tag device is searched by the reader / writer, the reader / writer sends target request information to the tag device.

[0125] 402. The tag device sends a target response message corresponding to the target request message to the reader / writer.

[0126] 403. The reader sends the target response message to the server.

[0127] 404. The server determines whether there is a target tag content matching the target response message in the database, and returns the target tag content to the reader if the target tag content exists in the database.

[0128] 405. The reader generates first challenge information according to the generated character string and the target tag content.

[0129] 406. The reader sends the first challenge information to the tag device.

[0130] 407. The tag device verifies the identity of the reader / writer according to the first challenge information. If the identity verification of the reader / writer passes, the tag device generates second challenge information according to the first challenge information.

[0131] 408. The tag device sends the second challenge information to the reader.

[0132] 409. The reader / writer verifies whether the tag device is legitimate according to the second challenge information. If so, it generates update challenge information.

[0133] 410. The reader sends the update challenge information to the tag device.

[0134] 411. The tag device matches the generated local challenge information with the updated challenge information. If they match, the tag device determines that the authentication with the reader is successful.

[0135] It should be noted that Figure 4 Steps 401 to 411 in the above Figure 2 and Figure 3 The various steps have been described in detail and will not be repeated here.

[0136] In summary, it can be seen that in the embodiment provided by the present invention, a two-way authentication service is performed between the reader and the tag device. At the same time, when performing the two-way authentication service, through the design of the Ref function, the use of XOR and bit shift operations can realize the resetting and confusion of the character string, and achieve a pseudo-random effect, thereby ensuring the randomness of the protocol challenge message. In addition, the challenge message in the authentication is a structure that is calculated through multiple layers of Ref function and Rot function, thereby ensuring the non-repeatability and real-time nature of the challenge information, and realizing the non-traceability of the message. After each authentication, the reader updates the key and index value, realizing the one-time one-secret effect, thereby ensuring the security of data transmission.

[0137] The above describes the embodiment of the present invention from the perspective of the security authentication method of the medical Internet of Things system. The following describes the embodiment of the present invention from the perspective of the reader and the tag device.

[0138] See also Figure 5 , Figure 5This is a virtual structural diagram of a reader / writer in an embodiment of the present invention. The reader / writer 500 includes:

[0139] The sending module 501 is used for sending target request information to the tag device if the tag device is searched by the reader / writer, so that the tag device returns a target response message corresponding to the target request information;

[0140] The sending module 501 is further used to send the target response message to the server, so that the server determines whether there is a target tag content matching the target response message in the database, and returns the target tag content if the target tag content exists in the database;

[0141] A first generating module 502, configured to generate first challenge information according to a generated character string and the target tag content if the target tag content is received;

[0142] The sending module 501 is further used to send the first challenge information to the tag device, so that the tag device verifies the identity of the reader / writer according to the first challenge information. If the identity authentication of the reader / writer is successful, the tag device generates second challenge information according to the first challenge information and returns the second challenge information.

[0143] A verification module 503, configured to verify whether the tag device is legitimate according to the second challenge information;

[0144] The second generation module 504 is used to generate update challenge information if it is determined that the tag device is legal, and send the update challenge information to the tag device, so that the tag device matches the update challenge information with the local challenge information, and when the local challenge information matches the update challenge information, it is determined that the reader and the tag device are authenticated.

[0145] In a possible design, the first challenge information is an information pair {A, B, C LorR}, the first generating module 502 is specifically used for:

[0146] The first challenge information is determined by the following formula:

[0147]

[0148] C L or R =Ref(Ref(n1,ID),Ref(n2,ID));

[0149] Among them, IDS is the index random code of the tag device in the target response message, K is the key between the reader and the tag device, n1 and n2 are the character strings, and ID is the index value of the tag device in the target tag content.

[0150] In a possible design, the verification module 503 is specifically used for:

[0151] The reader determines the read / write challenge information value by the following formula:

[0152]

[0153] Among them, D LorR ' is the read-write challenge information value, n1 and n2 are the character strings, ID' is the index value stored locally in the tag device, IDS' is the index random code stored locally in the tag device, and K is the key stored locally in the tag device;

[0154] Compare the read / write challenge information value with the value corresponding to the second challenge information;

[0155] If the read / write challenge information value matches the value corresponding to the second challenge information, it is determined that the tag device is legal;

[0156] If the read / write challenge information value does not match the value corresponding to the second challenge information, it is determined that the tag device is illegal.

[0157] In a possible design, the second generating module 504 is specifically used for:

[0158] The update challenge information is generated by the following formula:

[0159] E=Ref(K new ',ID');

[0160] Wherein, E is the update challenge information.

[0161] See also Figure 6 , Figure 6 This is a virtual structural diagram of a label device in an embodiment of the present invention. The label device 600 includes:

[0162] The receiving module 601 is used to receive a target request message sent by the reader / writer, wherein the target response message is the request information sent by the reader / writer when determining that the tag device is searched;

[0163] The sending module 602 is used to send the target response message corresponding to the target request message to the reader / writer, so that the reader / writer forwards the target response message to the server, and the server determines whether there is a target tag content matching the target response message in the database, and returns the target tag content to the reader / writer when the target tag content exists in the database;

[0164] The receiving module 601 is further used to receive first challenge information sent by the reader / writer, where the first challenge information is generated by the reader / writer according to a generated character string and the target tag content;

[0165] A verification module 603, configured to verify the identity of the reader / writer according to the first challenge information;

[0166] Generate information 604, used to generate second challenge information according to the first challenge information if the identity authentication of the reader is passed;

[0167] The sending module 602 is further used to send the second challenge information to the reader / writer, so that the reader / writer verifies whether the tag device is legal according to the second challenge information, and generates update challenge information when determining that the tag device is legal, and returns the update challenge information;

[0168] A matching module 605, configured to match the generated local challenge information with the updated challenge information;

[0169] The determination module 606 is configured to determine that the tag device has passed the authentication with the reader if the local challenge information matches the update challenge information.

[0170] In a possible design, the first challenge information is an information pair {A, B, C L or R}, the verification module 603 is specifically used for:

[0171] C' is generated by the following formula L or R :

[0172] C' L or R =Ref(Ref(n1,ID'),Ref(n2,ID'));

[0173] in, IDS' is the index random code stored locally in the tag device, and ID' is the index random value stored locally in the tag device;

[0174] Determine the C' LorR With the C LorR Whether it matches;

[0175] If so, determining that the identity authentication of the reader / writer is passed;

[0176] If not, it is determined that the identity authentication of the reader / writer fails.

[0177] In a possible design, the generating module 604 is specifically used for:

[0178] The second challenge information is generated by the following formula:

[0179]

[0180] Among them, the D LorR The second challenge information is: IDS' is the index random code stored locally in the tag device, n1 and n2 are the character strings, and K is the key stored locally in the tag device.

[0181] In one possible design, the determining module 606 is further configured to:

[0182] The index random code and the key are updated by the following formula:

[0183]

[0184] Among them, IDS new is the updated index random code, K new is the updated key.

[0185] above Figure 5 From the perspective of modular functional entities, the reader / writer and Figure 6 The tag device in the embodiment of the present invention is described from the perspective of modular functional entities. The security authentication device of the medical Internet of Things system in the embodiment of the present invention is described in detail from the perspective of hardware processing. Please refer to Figure 7 , a schematic diagram of an embodiment of a security authentication device 700 of a medical Internet of Things system in an embodiment of the present invention, wherein the security authentication device 700 of the medical Internet of Things system comprises:

[0186] An input device 701, an output device 702, a processor 703 and a memory 704 (the number of the processor 703 can be one or more, Figure 4 In some embodiments of the present invention, the input device 701, the output device 702, the processor 703 and the memory 704 may be connected via a communication bus or other means, wherein: Figure 4 The communication bus connection is taken as an example.

[0187] Wherein, by calling the operation instruction stored in the memory 704, the processor 703 is used to perform the following steps:

[0188] If the tag device is searched by the reader / writer, the reader / writer sends a target request message to the tag device, so that the tag device returns a target response message corresponding to the target request message;

[0189] The reader sends the target response message to the server, so that the server determines whether there is a target tag content matching the target response message in the database, and returns the target tag content to the reader if the target tag content exists in the database;

[0190] If the reader / writer receives the target tag content, the reader / writer generates first challenge information according to the generated character string and the target tag content;

[0191] The reader sends the first challenge information to the tag device, so that the tag device verifies the identity of the reader according to the first challenge information. If the identity verification of the reader is successful, the tag device generates second challenge information according to the first challenge information, and returns the second challenge information to the reader;

[0192] The reader / writer verifies whether the tag device is legal according to the second challenge information;

[0193] If the reader / writer determines that the tag device is legitimate, it generates update challenge information and sends the update challenge information to the tag device so that the tag device matches the update challenge information with the local challenge information, and when the local challenge information matches the update challenge information, it determines that the reader / writer and the tag device are authenticated.

[0194] By calling the operation instructions stored in the memory 704, the processor 703 is also used to execute Figure 2 Any method in the corresponding embodiment;

[0195] By calling the operation instructions stored in the memory 704, the processor 703 is further configured to perform the following steps:

[0196] The tag device receives a target request message sent by the reader / writer, wherein the target response message is request information sent by the reader / writer when determining that the tag device is searched;

[0197] The tag device sends a target response message corresponding to the target request message to the reader / writer, so that the reader / writer forwards the target response message to the server, and the server determines whether there is a target tag content matching the target response message in the database, and returns the target tag content to the reader / writer when the target tag content exists in the database;

[0198] The tag device receives first challenge information sent by the reader / writer, where the first challenge information is generated by the reader / writer according to a generated character string and content of the target tag;

[0199] The tag device verifies the identity of the reader / writer according to the first challenge information;

[0200] If the identity authentication of the reader / writer is passed, the tag device generates second challenge information according to the first challenge information;

[0201] The tag device sends the second challenge information to the reader / writer, so that the reader / writer verifies whether the tag device is legitimate according to the second challenge information, and generates update challenge information when determining that the tag device is legitimate, and returns the update challenge information;

[0202] The tag device matches the generated local challenge information with the update challenge information;

[0203] If the local challenge information matches the update challenge information, the tag device determines that the authentication with the reader is successful.

[0204] By calling the operation instructions stored in the memory 704, the processor 703 is also used to execute Figure 3 Any method in the corresponding embodiment.

[0205] See also Figure 8 , Figure 8 A schematic diagram of an electronic device according to an embodiment of the present invention.

[0206] like Figure 8 As shown, an embodiment of the present invention provides an electronic device, including a memory 810, a processor 820, and a computer program 811 stored in the memory 810 and executable on the processor 820. When the processor 820 executes the computer program 811, the following steps are implemented:

[0207] If the tag device is searched by the reader / writer, the reader / writer sends a target request message to the tag device, so that the tag device returns a target response message corresponding to the target request message;

[0208] The reader sends the target response message to the server, so that the server determines whether there is a target tag content matching the target response message in the database, and returns the target tag content to the reader if the target tag content exists in the database;

[0209] If the reader / writer receives the target tag content, the reader / writer generates first challenge information according to the generated character string and the target tag content;

[0210] The reader sends the first challenge information to the tag device, so that the tag device verifies the identity of the reader according to the first challenge information. If the identity verification of the reader is successful, the tag device generates second challenge information according to the first challenge information, and returns the second challenge information to the reader;

[0211] The reader / writer verifies whether the tag device is legal according to the second challenge information;

[0212] If the reader / writer determines that the tag device is legitimate, it generates update challenge information and sends the update challenge information to the tag device so that the tag device matches the update challenge information with the local challenge information, and when the local challenge information matches the update challenge information, it determines that the reader / writer and the tag device are authenticated.

[0213] In the specific implementation process, when the processor 820 executes the computer program 811, it can achieve Figure 2 Any implementation manner in the corresponding embodiment;

[0214] When the processor 820 executes the computer program 811, the following steps are also implemented:

[0215] The tag device receives a target request message sent by the reader / writer, wherein the target response message is request information sent by the reader / writer when determining that the tag device is searched;

[0216] The tag device sends a target response message corresponding to the target request message to the reader / writer, so that the reader / writer forwards the target response message to the server, and the server determines whether there is a target tag content matching the target response message in the database, and returns the target tag content to the reader / writer when the target tag content exists in the database;

[0217] The tag device receives first challenge information sent by the reader / writer, where the first challenge information is generated by the reader / writer according to a generated character string and content of the target tag;

[0218] The tag device verifies the identity of the reader / writer according to the first challenge information;

[0219] If the identity authentication of the reader / writer is passed, the tag device generates second challenge information according to the first challenge information;

[0220] The tag device sends the second challenge information to the reader / writer, so that the reader / writer verifies whether the tag device is legitimate according to the second challenge information, and generates update challenge information when determining that the tag device is legitimate, and returns the update challenge information;

[0221] The tag device matches the generated local challenge information with the update challenge information;

[0222] If the local challenge information matches the update challenge information, the tag device determines that the authentication with the reader is successful.

[0223] In the specific implementation process, when the processor 820 executes the computer program 811, it can achieve Figure 3 Any implementation manner in the corresponding embodiments.

[0224] Since the electronic device introduced in this embodiment is a device used to implement a security authentication device of a medical Internet of Things system in the embodiment of the present invention, based on the method introduced in the embodiment of the present invention, technical personnel in this field can understand the specific implementation mode of the electronic device of this embodiment and its various variations. Therefore, how the electronic device implements the method in the embodiment of the present invention will not be introduced in detail here. As long as the equipment used by technical personnel in this field to implement the method in the embodiment of the present invention falls within the scope of protection of the present invention.

[0225] See also Fig. 9 , Fig. 9 A schematic diagram of an embodiment of a computer-readable storage medium provided in an embodiment of the present invention.

[0226] like Fig. 9 As shown, the embodiment of the present invention further provides a computer-readable storage medium 900, on which a computer program 911 is stored. When the computer program 911 is executed by a processor, the following steps are implemented:

[0227] If the tag device is searched by the reader / writer, the reader / writer sends a target request message to the tag device, so that the tag device returns a target response message corresponding to the target request message;

[0228] The reader sends the target response message to the server, so that the server determines whether there is a target tag content matching the target response message in the database, and returns the target tag content to the reader if the target tag content exists in the database;

[0229] If the reader / writer receives the target tag content, the reader / writer generates first challenge information according to the generated character string and the target tag content;

[0230] The reader sends the first challenge information to the tag device, so that the tag device verifies the identity of the reader according to the first challenge information. If the identity verification of the reader is successful, the tag device generates second challenge information according to the first challenge information, and returns the second challenge information to the reader;

[0231] The reader / writer verifies whether the tag device is legal according to the second challenge information;

[0232] If the reader / writer determines that the tag device is legitimate, it generates update challenge information and sends the update challenge information to the tag device so that the tag device matches the update challenge information with the local challenge information, and when the local challenge information matches the update challenge information, it determines that the reader / writer and the tag device are authenticated.

[0233] In the specific implementation process, the computer program 911 is executed by the processor to achieve Figure 2 Any implementation manner in the corresponding embodiment;

[0234] When the computer program 911 is executed by the processor, the following steps are also implemented:

[0235] The tag device receives a target request message sent by the reader / writer, wherein the target response message is request information sent by the reader / writer when determining that the tag device is searched;

[0236] The tag device sends a target response message corresponding to the target request message to the reader / writer, so that the reader / writer forwards the target response message to the server, and the server determines whether there is a target tag content matching the target response message in the database, and returns the target tag content to the reader / writer when the target tag content exists in the database;

[0237] The tag device receives first challenge information sent by the reader / writer, where the first challenge information is generated by the reader / writer according to a generated character string and content of the target tag;

[0238] The tag device verifies the identity of the reader / writer according to the first challenge information;

[0239] If the identity authentication of the reader / writer is passed, the tag device generates second challenge information according to the first challenge information;

[0240] The tag device sends the second challenge information to the reader / writer, so that the reader / writer verifies whether the tag device is legitimate according to the second challenge information, and generates update challenge information when determining that the tag device is legitimate, and returns the update challenge information;

[0241] The tag device matches the generated local challenge information with the update challenge information;

[0242] If the local challenge information matches the update challenge information, the tag device determines that the authentication with the reader is successful.

[0243] In the specific implementation process, the computer program 911 is executed by the processor to achieve Figure 3 Any implementation manner in the corresponding embodiments.

[0244] It should be noted that in the above embodiments, the description of each embodiment has its own emphasis, and for parts that are not described in detail in a certain embodiment, reference can be made to the relevant descriptions of other embodiments.

[0245] As described above, the above embodiments are only used to illustrate the technical solutions of the present invention, rather than to limit the same. Although the present invention has been described in detail with reference to the aforementioned embodiments, those skilled in the art should understand that the technical solutions described in the aforementioned embodiments may still be modified, or some of the technical features thereof may be replaced by equivalents. However, these modifications or replacements do not deviate the essence of the corresponding technical solutions from the spirit and scope of the technical solutions of the embodiments of the present invention.

Claims

1. A security authentication method for a medical Internet of Things system, characterized in that: include: If the tag device is searched by the reader / writer, the reader / writer sends a target request message to the tag device, so that the tag device returns a target response message corresponding to the target request message; The reader sends the target response message to the server, so that the server determines whether there is a target tag content matching the target response message in the database, and returns the target tag content to the reader if the target tag content exists in the database; If the reader / writer receives the target tag content, the reader / writer generates first challenge information according to the generated character string and the target tag content; The reader sends the first challenge information to the tag device, so that the tag device verifies the identity of the reader according to the first challenge information. If the identity verification of the reader is successful, the tag device generates second challenge information according to the first challenge information, and returns the second challenge information to the reader; The reader / writer verifies whether the tag device is legal according to the second challenge information; If the reader / writer determines that the tag device is legitimate, it generates update challenge information and sends the update challenge information to the tag device so that the tag device matches the update challenge information with the local challenge information, and when the local challenge information matches the update challenge information, it determines that the reader / writer and the tag device are authenticated.

2. The method according to claim 1, characterized in that The first challenge information is an information pair {A, B, C LorR }, the reader generates the first challenge information according to the generated character string and the target tag content, including: The first challenge information is determined by the following formula: C LorR =Ref(Ref(n1,ID),Ref(n2,ID)); Among them, IDS is the index random code of the tag device in the target response message, K is the key between the reader and the tag device, n1 and n2 are the character strings, and ID is the index value of the tag device in the target tag content.

3. The method according to claim 1, characterized in that The reader / writer verifies whether the tag device is legitimate according to the second challenge information, including: The reader determines the read / write challenge information value by the following formula: Among them, D LorR ' is the read-write challenge information value, n1 and n2 are the character strings, ID′ is the index value stored locally on the tag device, IDS′ is the index random code stored locally on the tag device, and K is the key stored locally on the tag device; Compare the read / write challenge information value with the value corresponding to the second challenge information; If the read / write challenge information value matches the value corresponding to the second challenge information, it is determined that the tag device is legal; If the read / write challenge information value does not match the value corresponding to the second challenge information, it is determined that the tag device is illegal.

4. The method according to claim 3, characterized in that The generation and update challenge information includes: The update challenge information is generated by the following formula: E=Ref(K new ′,ID′); Wherein, E is the update challenge information.

5. A security authentication method for a medical Internet of Things system, characterized in that: include: The tag device receives a target request message sent by the reader / writer, wherein the target response message is request information sent by the reader / writer when determining that the tag device is searched; The tag device sends a target response message corresponding to the target request message to the reader / writer, so that the reader / writer forwards the target response message to the server, and the server determines whether there is a target tag content matching the target response message in the database, and returns the target tag content to the reader / writer when the target tag content exists in the database; The tag device receives first challenge information sent by the reader / writer, where the first challenge information is generated by the reader / writer according to a generated character string and content of the target tag; The tag device verifies the identity of the reader / writer according to the first challenge information; If the identity authentication of the reader / writer is passed, the tag device generates second challenge information according to the first challenge information; The tag device sends the second challenge information to the reader / writer, so that the reader / writer verifies whether the tag device is legitimate according to the second challenge information, and generates update challenge information when determining that the tag device is legitimate, and returns the update challenge information; The tag device matches the generated local challenge information with the update challenge information; If the local challenge information matches the update challenge information, the tag device determines that the authentication with the reader is successful.

6. The method according to claim 5, characterized in that The first challenge information is an information pair {A, B, C LorR }, the tag device verifies the identity of the reader / writer according to the first challenge information, including: The tag device generates C′ by the following formula LorR : C′ LorR =Ref(Ref(n1,ID′),Ref(n2,ID′)); in, IDS′ is the index random code stored locally in the tag device, and ID′ is the index random value stored locally in the tag device; Determine the C′ LorR With the C LorR Whether it matches; If so, it is determined that the identity authentication of the reader / writer is passed; If not, it is determined that the identity authentication of the reader / writer fails.

7. The method according to claim 5, characterized in that The tag device generating the second challenge information according to the first challenge information includes: The tag device generates the second challenge information by the following formula: Among them, the D LorR The second challenge information is: IDS′ is the index random code stored locally in the tag device, n1 and n2 are the character strings, and K is the key stored locally in the tag device.

8. The method according to claim 7, characterized in that The method further comprises: The tag device updates the index random code and the key using the following formula: Among them, IDS new is the updated index random code, K new is the updated key.

9. A reader / writer, characterized in that: include: A sending module, used for sending target request information to the tag device if the tag device is searched by the reader / writer, so that the tag device returns a target response message corresponding to the target request information; The sending module is further used to send the target response message to the server, so that the server determines whether there is a target tag content matching the target response message in the database, and returns the target tag content when the target tag content exists in the database; A first generating module, configured to generate first challenge information according to a generated character string and the target tag content if the target tag content is received; The sending module is further used to send the first challenge information to the tag device, so that the tag device verifies the identity of the reader / writer according to the first challenge information. If the identity authentication of the reader / writer is successful, the tag device generates second challenge information according to the first challenge information and returns the second challenge information; A verification module, used to verify whether the tag device is legal according to the second challenge information; The second generation module is used to generate update challenge information if it is determined that the tag device is legal, and send the update challenge information to the tag device, so that the tag device matches the update challenge information with the local challenge information, and when the local challenge information matches the update challenge information, it is determined that the reader and the tag device are authenticated.

10. A labeling device, characterized in that: include: A receiving module, used for receiving a target request message sent by a reader / writer, wherein the target response message is request information sent by the reader / writer when determining that the tag device is searched; A sending module, used for sending a target response message corresponding to the target request message to the reader / writer, so that the reader / writer forwards the target response message to the server, and enables the server to determine whether there is a target tag content matching the target response message in the database, and return the target tag content to the reader / writer when the target tag content exists in the database; The receiving module is further used to receive first challenge information sent by the reader / writer, where the first challenge information is generated by the reader / writer according to a generated character string and content of the target tag; A verification module, used to verify the identity of the reader / writer according to the first challenge information; Generate information, used to generate second challenge information according to the first challenge information if the identity authentication of the reader / writer passes; The sending module is further used to send the second challenge information to the reader / writer, so that the reader / writer verifies whether the tag device is legal according to the second challenge information, and generates update challenge information when determining that the tag device is legal, and returns the update challenge information; A matching module, used for matching the generated local challenge information with the updated challenge information; A determination module is used for determining that the tag device has passed the authentication with the reader / writer if the local challenge information matches the update challenge information.

Images