Equipment verification method and system based on one-time password

Abstract

The invention discloses a device verification method and system based on a one-time password. The method comprises the steps that a verification device obtains a device identifier of a verified device; the verification device sends the device identifier to a verification server; the verification server obtains a device password corresponding to the device identifier, generates a target password corresponding to the device identifier based on the device password, and sends the target password to the verification device; and the verified device obtains the target password and verifies the target password.

Description

Technical Field

[0001] The present invention relates to the field of encryption technology, and in particular to a device verification method and system based on a one-time password. Background Art

[0002] In the verification method in the prior art, the user sets a user profile through the client and sends it to the server. The file contains user personal information, authentication settings, one-time password rules configured by the user, etc. When the user tries to access the application, a one-time password will be requested through the client. The server generates a one-time password according to the rules configured by the user and sends it to the user through the client device. The user processes the received one-time password according to the configured rules and enters a one-time password return value. The system verifies whether this return value meets the one-time password rules set by the user. This verification method is similar to logging in to a website with a mobile phone number. The website will send a text message containing a verification code to the mobile phone. Entering the verification code will successfully log in. The verification method in the prior art must be initiated by the client through network transmission to initiate a password verification request. Devices that do not have network transmission capabilities cannot implement this function, especially in environments without network connection or less user interaction, and the verification method in the prior art cannot be used to verify the device. Summary of the invention

[0003] In order to solve the existing technical problems, the present invention provides a device verification method and system based on a one-time password, which can achieve secure verification of the verified device even when the verified device cannot communicate with the external network, reducing the device's password verification's dependence on network connection, while providing security for device use.

[0004] In a first aspect, a one-time password-based device verification method is provided, comprising: a verification device obtains a device identification of a verified device; the verification device sends the device identification to a verification server; the verification server obtains a device password corresponding to the device identification, generates a target password corresponding to the device identification based on the device password, and sends the target password to the verification device; the verified device obtains the target password and verifies the target password.

[0005] In a second aspect, a one-time password-based device verification system is provided, the system comprising a verification device, a verified device and a verification server, the verification device communicating with the verification server; the verification device obtains a device identification of the verified device; the verification device sends the device identification to the verification server; the verification server obtains a device password corresponding to the device identification, generates a target password corresponding to the device identification based on the device password, and sends the target password to the verification device; the verified device obtains the target password through the verification device, and verifies the target password.

[0006] In the embodiment of the present application, a verification device obtains a device identification of a verified device, and then sends it to a verification server. The verification server obtains a device password of the verified device according to the device identification, generates a target password corresponding to the device identification based on the device password, and sends the target password to the verification device. After the verified device obtains the target password, it verifies the target password. In this way, even when the verified device cannot communicate with the external network, security verification of the verified device can be achieved, reducing the dependence of the device's password verification on the network connection. The verified device does not need to perform password generation work, thereby reducing the resource burden of the verified device. In addition, the target password is generated based on the device password and the target password is verified, which can improve the security of the device's password verification and reduce the risk of password leakage. BRIEF DESCRIPTION OF THE DRAWINGS

[0007] Figure 1 This is a diagram of an application environment of a device authentication method based on a one-time password in an embodiment;

[0008] Figure 2 is a flow chart of a device authentication method based on a one-time password in an embodiment;

[0009] Figure 3 is an interactive schematic diagram of a device authentication method based on a one-time password in an embodiment;

[0010] Figure 4 Another interactive diagram of a device authentication method based on a one-time password in an embodiment;

[0011] Figure 5 A schematic diagram of a device authentication apparatus based on a one-time password in an embodiment;

[0012] Figure 6 A schematic block diagram of a verification device in an embodiment;

[0013] Figure 7 A schematic block diagram of a verified device in an embodiment;

[0014] Figure 8A block diagram of a verification server in one embodiment. DETAILED DESCRIPTION

[0015] The technical solution of the present invention is further described in detail below in conjunction with the accompanying drawings and specific embodiments.

[0016] Unless otherwise defined, all technical and scientific terms used herein have the same meaning as those generally understood by those skilled in the art of the technical field of the present invention. The terms used herein in the specification of the present invention are only for the purpose of describing specific embodiments and are not intended to limit the scope of protection of the present invention. The term "and / or" used herein includes any and all combinations of one or more related listed items.

[0017] In the following description, reference is made to “some embodiments”, which describes a subset of all possible embodiments, but it should be understood that “some embodiments” may be the same subset or different subsets of all possible embodiments and may be combined with each other without conflict.

[0018] See also Figure 1 , is an application environment diagram of a device verification method based on a one-time password in an embodiment. In the application environment diagram, the verified device 10, the verification device 20, and the verification server 30. The verified device 10 is a device that the user needs to operate, the verification device 20 is the user's terminal device, and the verification server 30 is one or more servers, or a cloud server. Before the user operates the verified device 10, a password verification is required, and the verified device 10 can be operated only after the password verification is passed. The verification device 20 and the verified device 10 communicate based on a short-distance communication method, and the verification device 20 and the verification server 30 communicate through a wired or wireless network. Since the verified device 10 is in a state where it cannot be connected to the external network, communication with the verification server 30 can be established through the verification device 20. The verification server 30 stores access permission information, password data, etc. of one or more verified devices 10. At least part of the code of the device verification method based on a one-time password is located in the verified device 10, the verification device 20, and the verification server 30, respectively, for implementing the device verification method based on a one-time password provided in the embodiment of the present application. In another application scenario, the communication connection between the verification device 20 and the verified device 10 can be disconnected, and the user can manually use the verification device 20 to input the data that the verified device 10 needs to transmit, thereby transmitting the data to be transmitted to the verification server.

[0019] The verified device 10 may be a device that cannot be connected to an external network, including but not limited to an embedded device. The verification device 20 includes but is not limited to: a computing device (e.g., a desktop computer, a laptop computer, a tablet computer, a handheld computer, a smart speaker, a server, etc.), a terminal device (e.g., a mobile phone, etc.), a wearable device (e.g., a pair of smart glasses or a smart watch), and other computer devices.

[0020] See also Figure 2 , is a flow chart of a device verification method based on a one-time password provided in an embodiment of the present application, the device verification method based on a one-time password comprises the following steps:

[0021] S11. The verifying device obtains the device identification of the verified device.

[0022] In this embodiment, the device identification is used to uniquely identify the device being verified, and the device identification includes but is not limited to one or more of the following combinations, text, numbers, graphics, etc. In an optional manner, the verification device provides a user interface, and a device identification input control is provided on the user interface. By triggering the device identification input control, the device identification can be input, wherein the device identification input control includes but is not limited to a drop-down box, an input box, etc. In some implementations, the device identification can also be obtained by scanning a barcode through the verification device and reading the data on the barcode.

[0023] S12. The verification device sends the device identification to the verification server.

[0024] In this embodiment, the verification device and the verification server can communicate with each other by wire or wirelessly, so the verification device can directly send the device identification to the verification server.

[0025] S13. The verification server obtains a device password corresponding to the device identification, generates a target password corresponding to the device identification based on the device password, and sends the target password to the verification device.

[0026] In some embodiments, the device password is a password that is updated after the last successful password verification of the verified device stored in the verification server. The target password is used for the current password verification of the verified device to log in to the verified device.

[0027] The verification server stores the device passwords of one or more verified devices, so that when the verified device needs to be logged in, the target password can be obtained from the verification server through the verification device.

[0028] S14. The verified device obtains the target password and verifies the target password.

[0029] In this embodiment, the verification device receives the target password sent by the verification server and sends the target password to the verified device. In some optional implementations, the verified device provides a first user interface, obtains a password input operation through the first user interface, obtains password data corresponding to the password input operation, and uses the password data as the target password. After the verified device obtains the target password, it verifies the target password to confirm whether the user can log in.

[0030] like Figure 3 As shown, Figure 3 The interactive diagram of a device verification method based on a one-time password in an embodiment is shown. The verification device obtains the device identification of the verified device and then sends it to the verification server. The verification server obtains the device password of the verified device based on the device identification, generates a target password corresponding to the device identification based on the device password, and sends the target password to the verification device. The verification device sends the target password to the verified device through a short-distance communication method or inputs the target password through a user interface provided by the verified device. After the verified device obtains the target password, it verifies the target password. Different from the one-time password verification method in the prior art, the verification server retrieves the corresponding device password based on the device identification, generates the target password based on the device password, and performs subsequent device password update work. The password verification is performed in the verified device, thereby transferring the password generation work from the verified device to the verification server to reduce the resource burden of the verified device.

[0031] In the above embodiment, the verification device obtains the device identification of the verified device and then sends it to the verification server. The verification server obtains the device password of the verified device according to the device identification, generates a target password corresponding to the device identification based on the device password, and sends the target password to the verification device. After the verified device obtains the target password, it verifies the target password. In this way, even if the verified device cannot communicate with the external network, the verified device can be securely verified, which reduces the dependence of the device's password verification on the network connection. The verified device does not need to perform password generation, thereby reducing the resource burden of the verified device. In addition, generating a target password based on the device password and verifying the target password can improve the security of the device's password verification and reduce the risk of password leakage.

[0032] In some embodiments, generating a target password corresponding to the device identifier based on the device password includes:

[0033] Based on the password generation strategy, the current password is randomly generated;

[0034] The device password and the current password are combined according to a preset combination rule to generate the target password.

[0035] In this embodiment, the device password is the password updated after the last password verification of the verified device was successful and stored in the verification server. The current password is a one-time new password generated during this password verification process. After the verified device successfully verifies the password this time, the device password is updated to the current password. The current password is randomly generated based on the password generation strategy, so that the current password is randomly generated and has higher security. After the device password is combined with the current password, the original password and the new password are combined to form a target password. The device password in the target password is used in the current password verification process of the verified device. The password generation strategy includes but is not limited to the random number generation method.

[0036] In the above embodiment, the current password is randomly generated, and the device password is combined with the current password to form a target password, which is used in the current password verification process of the verified device. Since the new password is randomly generated, security can be improved, and in this password verification process, the original password is also required to be verified, which can further improve the security of device use.

[0037] In some embodiments, obtaining the target password through the verification device includes at least one of the following:

[0038] The authenticated device provides a first user interface, identifies a password input operation in the first user interface, obtains password data corresponding to the password input operation, and uses the password data as the target password; and / or,

[0039] Receive the target password sent by the verification device via short-distance communication.

[0040] In this embodiment, the short-range communication method includes but is not limited to a communication method based on a wireless local area network, a communication method based on Bluetooth, a communication method based on near field communication, etc. The verification device sends the target password to the verified device through the short-range communication method. In some optional implementations, the verified device provides a first user interface, and the first user interface is provided with a password input control. After the user triggers the password input control, the password input operation and the password data corresponding to the password input operation can be obtained, and the password data is used as the target password.

[0041] In the above embodiment, the verification device and the verified device communicate through a short-distance communication method, so that the verification device can send the target password to the verified device through the short-distance communication method, or the user can enter the target password on the user interface provided by the verified device. Therefore, even if the verified device cannot be connected to the external network, the verification of the verified device can be achieved, thereby reducing the resource burden of the verified device, and generating a target password based on the device password and verifying the target password can improve the security of the device's password verification and reduce the risk of password leakage.

[0042] In some embodiments, the verifying the target password includes:

[0043] The authenticated device parses the target password according to the password parsing rule, and obtains the device password and the current password from the target password;

[0044] Compare the device password with the stored own password, and when the device password matches the own password successfully, determine that the verification is successful, update the own password to the current password, and send feedback information to the verification device, wherein the feedback information includes the verification result of the verified device;

[0045] When the device password and the self password do not match successfully, it is determined that the verification has failed, and the feedback information is sent to the verification device.

[0046] In this embodiment, after receiving the target password, the verified device analyzes the target password according to the password analysis rules to obtain the device password and the current password, compares the received device password with the password stored in the verified device, determines the verification result, and sends feedback information according to the verification result. The password analysis rules correspond to the preset combination rules, and using the password analysis rules to analyze the target password is equivalent to the reverse process of combining to generate the target password. Figure 4 As shown, Figure 4 Another interactive diagram of a device verification method based on a one-time password in an embodiment, after the password verification is completed, the verified device displays the verification result and sends feedback information to the verification device, and the verification device sends the feedback information to the verification server. After the password verification is successful, the verified device will also update its stored password to the current password, so that it is convenient to use the current password as the old password during the next password verification process. In this way, each time the verified device verifies the password, the password used is a randomly generated password, which improves security.

[0047] In the above embodiment, during the password verification process of the verified device, it is first verified whether the received device password is accurate, feedback information is generated based on the verification result, and then the feedback information is sent to the verification device. The verification device sends the feedback information to the verification server. Therefore, even if the verified device cannot be connected to the external network, the verification of the verified device can be achieved, thereby reducing the resource burden of the verified device. Moreover, a target password is generated based on the device password and the target password is verified, which can improve the security of the device's password verification and reduce the risk of password leakage.

[0048] In some embodiments, the method further comprises:

[0049] The verification device receives the feedback information sent by the verified device, sends the feedback information to the verification server, and prompts the user that the verification fails when the feedback information indicates that the verified device fails to be verified;

[0050] When the feedback information indicates that the verified device is successfully verified, the device password is updated to the current password through the verification server.

[0051] In this embodiment, when the feedback information indicates that the verification device fails to verify, the verification device can prompt the user in the user interface that the password verification fails, so that the user can check whether an error occurs during the password verification process. After receiving the feedback information, the verification server updates the device password to the current password when the feedback information indicates that the verification of the verified device is successful. This makes it convenient to use the current password as the old password in the next password verification process to generate the target password in the next password verification process. In this way, each time the verified device verifies the password, the password used is a randomly generated password, which improves security. Moreover, when the password is updated, the password can be randomly changed without the user manually updating, which improves ease of use and also improves the safety of device use.

[0052] In the above embodiment, when the feedback information indicates that the verified device fails to be verified, the user is prompted that the verification failed, so that the user can check whether an error occurred during the password verification process. When the feedback information indicates that the verified device succeeds in verification, the device password is updated to the current password, so that in the next password verification process, the current password is used as the old password to generate the target password in the next password verification process. In this way, each time the verified device performs password verification, the password used is a randomly generated password, which improves security.

[0053] In some embodiments, before generating a target password corresponding to the device identifier based on the device password, the method further includes:

[0054] When the verification device sends the device identification to the verification server, the verification device also sends a device tag to the verification server, where the device tag is used to identify the verification device;

[0055] The verification server determines whether the verification device can access the verified device according to the stored access permission table, the device tag and the device identification, wherein the access permission table stores a set of verification devices that can access the verified device;

[0056] When the device tag is in the verification device set, the verification server determines that the verification device can access the verified device; when the device tag is not in the verification device set, the verification server determines that the verification device cannot access the verified device and outputs a prompt message.

[0057] In an optional implementation, the access permission table further includes a preset number of accesses or a preset access duration. Before generating a target password corresponding to the device identifier based on the device password, the method further includes at least one of the following:

[0058] When the verification device is in the verification device set, obtaining the number of times the verification device has accessed the verified device within the target time period, and when the number of times the verification device has accessed exceeds the preset number within the target time period, the verification server determines that the verification device cannot access the verified device and outputs a prompt message;

[0059] When the verification device is in the verification device set, obtaining the access duration of the verification device to the verified device within the target time period, and when the access duration exceeds the preset access duration within the target time period, the verification server determines that the verification device cannot access the verified device and outputs a prompt message;

[0060] When the number of visits does not exceed the preset number of times within the target time period or the visit time does not exceed the preset time length within the target time period, the verification server determines that the verification device can access the verified device.

[0061] In an optional implementation, the access permission table further includes a preset number of accesses and a preset access duration. Before generating a target password corresponding to the device identifier based on the device password, the method further includes:

[0062] When the verification device is in the verification device set, obtaining the number of visits and / or the visit time of the verification device to the verified device within the target time period, and when the number of visits exceeds the preset number of times within the target time period and / or the visit time exceeds the preset duration within the target time period, determining through the verification server that the verification device cannot access the verified device, and outputting a prompt message;

[0063] When the number of visits does not exceed the preset number of times within the target time period and the visit time does not exceed the preset time length within the target time period, the verification server determines that the verification device can access the verified device.

[0064] In this embodiment, when the verification device performs the password verification process of the verified device, the verification device also needs to send its own device tag to the verification server, where the device tag is used to uniquely identify the verification device. Before generating the target password, the verification server also needs to verify whether the user corresponding to the device tag can access the verified device based on the device tag, device identification and access permission table. The access permission table stores one or more different verified devices, and different verified devices may correspond to different access levels. For example, some devices are storage devices for confidential data, and the higher the access rights of these devices, the higher the access level. Different access levels correspond to different access rights. For a verified device, there is a corresponding verification device set, and only devices in the verification device set can access the verified device.

[0065] The access permission table may also include preset access times and / or preset access durations. For authenticated devices of different access levels, the preset access times and / or preset access durations may be configured differently. For example, for devices with higher access levels, shorter preset access durations and fewer preset access times may be set, thereby improving data security during device use.

[0066] In the above embodiment, the access rights in the access permission table are set according to the confidentiality level of the device to be verified, and whether the verification device can access the verified device is determined according to the preset number of accesses and / or preset access duration in the access permission table. After it is determined that the verification device can access the verified device, the verification device can participate in the password verification process of the verified device, thereby improving the security of the password verification of the device and reducing the risk of password leakage.

[0067] In some embodiments, the method further comprises:

[0068] The verification device displays a process operation control, and when a triggering operation of the process operation control is identified, displays a process corresponding to a device verification method based on a one-time password.

[0069] In this embodiment, the verification device provides a second user interface. The one-time password-based device verification method includes multiple process steps, which can be displayed to the user in the form of a flow chart on the second user interface, so that the user can clearly understand the next step of operation after completing each step.

[0070] In the above embodiment, multiple process steps in the device verification method based on a one-time password are displayed by diagrams, so that the user can clearly understand the next operation step after completing each step, thereby improving the user experience.

[0071] In some embodiments, the method further comprises:

[0072] When the verification server determines that the verification device can access the verified device and determines that the verification device has the authority to modify the password generation policy, the verification server obtains the target password generation policy sent by the verification device and updates the password generation policy to the target password generation policy.

[0073] In this embodiment, the target password generation policy is the password generation policy used to generate the target password. The password generation policy stored in the verification server is updated to the target password generation policy, so that after the update is completed, the target password is subsequently generated using the target password generation policy.

[0074] In the above embodiment, when the verification device has the permission to modify the password generation policy, the password generation policy can be dynamically adjusted, thereby flexibly adjusting the password generation policy to improve the security of the device.

[0075] In some embodiments, the method further comprises:

[0076] After receiving the feedback information, the verification server records the password verification event data of the verified device, wherein the password verification event data includes but is not limited to the verification time, the device tag of the verification device, and the verification result.

[0077] In the above embodiment, the verification server records the data of each password verification of the verified device to facilitate subsequent security analysis and subsequent audit of the use of the device, thereby improving the security of the use of the device.

[0078] On the other hand, the present application provides a computer program product, including a computer program, which, when executed by a processor, implements the one-time password-based device authentication method described in any embodiment of the present application.

[0079] Among them, in the computer program product, an optional implementation form of the program module architecture of the computer program that implements each step of the one-time password-based device authentication method can be a one-time password-based device authentication device.

[0080] See also Figure 5 An embodiment of the present application provides a device verification apparatus based on a one-time password, including: an acquisition module 61, used for a verification device to obtain a device identification of a verified device; a sending module 62, used for the verification device to send the device identification to a verification server; a generation module 63, used for the verification server to obtain a device password corresponding to the device identification, generate a target password corresponding to the device identification based on the device password, and send the target password to the verification device; a verification module 64, used for the verified device to obtain the target password and verify the target password.

[0081] In an optional embodiment, the generating module 63 is further used for:

[0082] Based on the password generation strategy, the current password is randomly generated;

[0083] The device password and the current password are combined according to a preset combination rule to generate the target password.

[0084] In an optional embodiment, the verification module 64 is further configured to:

[0085] The authenticated device provides a first user interface, identifies a password input operation in the first user interface, obtains password data corresponding to the password input operation, and uses the password data as the target password; and / or,

[0086] Receive the target password sent by the verification device via short-distance communication.

[0087] In an optional embodiment, the verification module 64 is further configured to:

[0088] The authenticated device parses the target password according to the password parsing rule, and obtains the device password and the current password from the target password;

[0089] Compare the device password with the stored own password, and when the device password matches the own password successfully, determine that the verification is successful, update the own password to the current password, and send feedback information to the verification device, wherein the feedback information includes the verification result of the verified device;

[0090] When the device password and the self password do not match successfully, it is determined that the verification has failed, and the feedback information is sent to the verification device.

[0091] In an optional embodiment, a feedback module 65 is further included, which is used to:

[0092] The verification device receives the feedback information sent by the verified device, sends the feedback information to the verification server, and prompts the user that the verification fails when the feedback information indicates that the verified device fails to be verified;

[0093] When the feedback information indicates that the verified device is successfully verified, the device password is updated to the current password through the verification server.

[0094] In one embodiment, the generating module 63 is further used for:

[0095] When the verification device sends the device identification to the verification server, the verification device also sends a device tag to the verification server, where the device tag is used to identify the verification device;

[0096] The verification server determines whether the verification device can access the verified device according to the stored access permission table, the device tag and the device identification, wherein the access permission table stores a set of verification devices that can access the verified device;

[0097] When the device tag is in the verification device set, the verification server determines that the verification device can access the verified device; when the device tag is not in the verification device set, the verification server determines that the verification device cannot access the verified device and outputs a prompt message.

[0098] In one embodiment, the access permission table also includes the number of accesses or the access time, and the generating module 63 is further used to:

[0099] When the verification device is in the verification device set, obtaining the number of times the verification device has accessed the verified device within the target time period, and when the number of times the verification device has accessed exceeds the preset number within the target time period, the verification server determines that the verification device cannot access the verified device and outputs a prompt message;

[0100] When the verification device is in the verification device set, obtaining the access duration of the verification device to the verified device within the target time period, and when the access duration exceeds the preset access duration within the target time period, the verification server determines that the verification device cannot access the verified device and outputs a prompt message;

[0101] When the number of visits does not exceed the preset number of times within the target time period or the visit time does not exceed the preset time length within the target time period, the verification server determines that the verification device can access the verified device.

[0102] In one embodiment, the access permission table also includes the number of accesses and the access time, and the generating module 63 is further used to:

[0103] When the verification device is in the verification device set, obtaining the number of visits and / or the visit time of the verification device to the verified device within the target time period, and when the number of visits exceeds the preset number of times within the target time period and / or the visit time exceeds the preset duration within the target time period, determining through the verification server that the verification device cannot access the verified device, and outputting a prompt message;

[0104] When the number of visits does not exceed the preset number of times within the target time period and the visit time does not exceed the preset time length within the target time period, the verification server determines that the verification device can access the verified device.

[0105] In one embodiment, the feedback module 65 is further configured to:

[0106] The verification device displays a process operation control, and when a triggering operation of the process operation control is identified, displays a process corresponding to a device verification method based on a one-time password.

[0107] In one embodiment, the generating module 63 is further used for:

[0108] When the verification server determines that the verification device can access the verified device and determines that the verification device has the authority to modify the password generation policy, the verification server obtains the target password generation policy sent by the verification device and updates the password generation policy to the target password generation policy.

[0109] It can be understood by those skilled in the art that Figure 5The structure of the device verification apparatus based on a one-time password does not constitute a limitation on the device verification apparatus based on a one-time password, and the various modules can be implemented in whole or in part by software, hardware, and a combination thereof. The above-mentioned modules can be embedded in or independent of the processor in the computer device in the form of hardware, or can be stored in the memory in the computer device in the form of software, so that the processor can call and execute the operations corresponding to the above modules. In other embodiments, the device verification apparatus based on a one-time password may include more or fewer modules than those shown in the figure. It can be understood that the acquisition module 61, the sending module 62 and the feedback module 65 are located in the verification device, the generation module 63 and the update module 66 are located in the verification server, and the verification module 64 is located in the verified device.

[0110] like Figure 6 As shown, another aspect of the embodiment of the present application further provides a verification device 20, including a processor 201 and a memory 202, the memory 202 stores a computer program, and when the computer program is executed by the processor 201, the processor 201 executes some steps of the device verification method based on a one-time password provided in any of the above embodiments of the present application. The verification device may include a computing device (e.g., a desktop computer, a laptop computer, a tablet computer, a handheld computer, a smart speaker, a server, etc.), a terminal device (e.g., a mobile phone, etc.), a wearable device (e.g., a pair of smart glasses or a smart watch), and other computer devices.

[0111] The processor 201 is the control center, which uses various interfaces and lines to connect various parts of the entire computer device, and executes various functions of the computer device and processes data by running or executing software programs and / or modules stored in the memory, and calling data stored in the memory. Optionally, the processor 201 may include one or more processing cores; preferably, the processor 201 may integrate an application processor and a modem processor, wherein the application processor mainly processes the operating system, user pages and application programs, etc., and the modem processor mainly processes wireless communications. It is understandable that the above-mentioned modem processor may not be integrated into the processor 201.

[0112] The memory 202 can be used to store software programs and modules. The processor 201 executes various functional applications and data processing by running the software programs and modules stored in the memory 202. The memory 202 can mainly include a program storage area and a data storage area, wherein the program storage area can store an operating system, an application required for at least one function (such as a sound playback function, an image playback function, etc.), etc.; the data storage area can store data created according to the use of the computer device, etc. In addition, the memory 202 can include a high-speed random access memory, and can also include a non-volatile memory, such as at least one disk storage device, a flash memory device, or other volatile solid-state storage devices.

[0113] like Figure 7 As shown, on the other hand, the embodiment of the present application further provides a verified device 10, the verified device includes a storage device 101 and a processing device 102, the storage device 101 stores a computer program, and when the computer program is executed by the processing device 102, the processing device 102 executes the device verification method based on a one-time password described in any embodiment of the present application. The storage device 101 has the same function as the memory 202, and the processing device 102 has the same function as the processor 201.

[0114] like Figure 8 As shown, on the other hand, the embodiment of the present application further provides a verification server 30, the verification server includes a storage unit 301 and a processing unit 302, the storage unit 301 stores a computer program, and when the computer program is executed by the processing unit 302, the processing unit 302 executes the device verification method based on a one-time password described in any embodiment of the present application. The storage unit 301 has the same function as the memory 202, and the processing unit 302 has the same function as the processor 201.

[0115] On the other hand, an embodiment of the present application provides a device verification system based on a one-time password, the system comprising a verification device, a verified device and a verification server, the verification device communicating with the verification server, the verification device and the verified device communicating via short-distance communication; the verification device obtains a device identification of the verified device; the verification device sends the device identification to the verification server; the verification server obtains a device password corresponding to the device identification, generates a target password corresponding to the device identification based on the device password, and sends the target password to the verification device; the verified device obtains the target password via the verification device, and verifies the target password.

[0116] Those skilled in the art can understand that all or part of the processes in the methods provided in the above embodiments can be completed by instructing the relevant hardware through a computer program, and the program can be stored in a non-volatile computer-readable storage medium. When the program is executed, it can include the processes of the embodiments of the above methods. Among them, any reference to memory, storage, database or other media used in the embodiments provided in the present application can include non-volatile and / or volatile memory. Non-volatile memory may include read-only memory (ROM), programmable ROM (PROM), electrically programmable ROM (EPROM), electrically erasable programmable ROM (EEPROM) or flash memory. Volatile memory may include random access memory (RAM) or external cache memory. As an illustration and not limitation, RAM is available in many forms, such as static RAM (SRAM), dynamic RAM (DRAM), synchronous DRAM (SDRAM), double data rate SDRAM (DDRSDRAM), enhanced SDRAM (ESDRAM), synchronous link (Synchlink) DRAM (SLDRAM), memory bus (Rambus) direct RAM (RDRAM), direct memory bus dynamic RAM (DRDRAM), and memory bus dynamic RAM (RDRAM).

[0117] The above is only a specific embodiment of the present invention, but the protection scope of the present invention is not limited thereto. Any person skilled in the art can easily think of changes or substitutions within the technical scope disclosed by the present invention, which should be included in the protection scope of the present invention. The protection scope of the present invention should be based on the protection scope of the claims.

Claims

1. A device verification method based on a one-time password, characterized in that: include: The verification device obtains the device identification of the verified device; The verification device sends the device identification to a verification server; The verification server obtains a device password corresponding to the device identification, generates a target password corresponding to the device identification based on the device password, and sends the target password to the verification device; The authenticated device obtains the target password and authenticates the target password.

2. The device verification method based on a one-time password as claimed in claim 1, characterized in that: The generating a target password corresponding to the device identification based on the device password includes: Based on the password generation strategy, the current password is randomly generated; The device password and the current password are combined according to a preset combination rule to generate the target password.

3. The device verification method based on a one-time password as claimed in claim 1, characterized in that: The verified device obtaining the target password includes at least one of the following: The authenticated device provides a first user interface, identifies a password input operation in the first user interface, obtains password data corresponding to the password input operation, and uses the password data as the target password; and / or, Receive the target password sent by the verification device via short-distance communication.

4. The device verification method based on a one-time password as claimed in claim 2, characterized in that: The verifying the target password includes: The authenticated device parses the target password according to the password parsing rule, and obtains the device password and the current password from the target password; Compare the device password with the stored own password, and when the device password matches the own password successfully, determine that the verification is successful, update the own password to the current password, and send feedback information to the verification device, wherein the feedback information includes the verification result of the verified device; When the device password and the self password do not match successfully, it is determined that the verification has failed, and the feedback information is sent to the verification device.

5. The device verification method based on a one-time password as claimed in claim 4, characterized in that: The method further comprises: The verification device receives the feedback information sent by the verified device, sends the feedback information to the verification server, and prompts the user that the verification fails when the feedback information indicates that the verified device fails to be verified; When the feedback information indicates that the verified device is successfully verified, the device password is updated to the current password through the verification server.

6. The device verification method based on a one-time password as claimed in claim 1, characterized in that: Before generating a target password corresponding to the device identification based on the device password, the method further includes: When the verification device sends the device identification to the verification server, the verification device also sends a device tag to the verification server, where the device tag is used to identify the verification device; The verification server determines whether the verification device can access the verified device according to the stored access permission table, the device tag and the device identification, wherein the access permission table stores a set of verification devices that can access the verified device; When the device tag is in the verification device set, the verification server determines that the verification device can access the verified device; when the device tag is not in the verification device set, the verification server determines that the verification device cannot access the verified device and outputs a prompt message.

7. The device verification method based on a one-time password as claimed in claim 6, characterized in that: The access permission table also includes a preset number of accesses or a preset access duration. Before generating a target password corresponding to the device identifier based on the device password, the method also includes at least one of the following: When the verification device is in the verification device set, obtaining the number of times the verification device has accessed the verified device within the target time period, and when the number of times the verification device has accessed exceeds the preset number within the target time period, the verification server determines that the verification device cannot access the verified device and outputs a prompt message; When the verification device is in the verification device set, obtaining the access duration of the verification device to the verified device within the target time period, and when the access duration exceeds the preset access duration within the target time period, the verification server determines that the verification device cannot access the verified device and outputs a prompt message; When the number of visits does not exceed the preset number of times within the target time period or the visit time does not exceed the preset time length within the target time period, the verification server determines that the verification device can access the verified device.

8. The device verification method based on a one-time password as claimed in claim 6, characterized in that: The access permission table also includes a preset number of accesses and a preset access duration. Before generating a target password corresponding to the device identifier based on the device password, the method also includes: When the verification device is in the verification device set, obtaining the number of visits and / or the visit time of the verification device to the verified device within the target time period, and when the number of visits exceeds the preset number of times within the target time period and / or the visit time exceeds the preset duration within the target time period, determining through the verification server that the verification device cannot access the verified device, and outputting a prompt message; When the number of visits does not exceed the preset number of times within the target time period and the visit time does not exceed the preset time length within the target time period, the verification server determines that the verification device can access the verified device.

9. The device verification method based on a one-time password as claimed in claim 1, characterized in that: The method further comprises: The verification device displays a process operation control, and when a triggering operation of the process operation control is identified, displays a process corresponding to a device verification method based on a one-time password.

10. The device verification method based on a one-time password as claimed in claim 2, characterized in that: The method further comprises: When the verification server determines that the verification device can access the verified device and determines that the verification device has the authority to modify the password generation policy, the verification server obtains the target password generation policy sent by the verification device and updates the password generation policy to the target password generation policy.

11. A device verification system based on a one-time password, characterized in that: The system comprises a verification device, a verified device and a verification server, wherein the verification device communicates with the verification server; The verification device obtains the device identification of the verified device; and sends the device identification to the verification server; The verification server obtains a device password corresponding to the device identification, generates a target password corresponding to the device identification based on the device password, and sends the target password to the verification device; The authenticated device obtains the target password through the authenticating device and authenticates the target password.

12. The one-time password-based device authentication system according to claim 11, characterized in that: The verification device communicates with the verified device via a short-distance communication method.

Images