Multi-layer encryption authentication method and system for mobile terminal, readable medium and electronic equipment

Abstract

The invention belongs to the technical field of multi-time encryption and authentication in a communication process, and relates to a multi-layer encryption authentication method and system for a mobile terminal, a readable medium and electronic equipment, and the method comprises the following steps: generating a mobile terminal secret key according to a mobile terminal timestamp; generating a ciphertext through the mobile terminal secret key, and uploading the ciphertext to a server; generating a server secret key, decrypting the ciphertext through the server secret key, and if the decryption is successful, ending; and if the decryption is not successful, generating a server secret key again according to the timestamp of the previous moment, and decrypting the ciphertext through the server secret key until the decryption is successful, or stopping decoding after a preset time is exceeded. No secret key is transmitted, the information interception and decryption risk in the network communication process is reduced, and the encryption and decryption pressure of the server is relieved.

Description

Technical Field

[0001] The present invention relates to a mobile terminal multi-layer encryption authentication method, system, readable medium and electronic equipment, belonging to the technical field of multiple encryption and authentication in a communication process. Background Art

[0002] With the development of enterprise informatization, more and more company businesses need to be processed on mobile phones. Most of the internal business of the company can also be processed on mobile phones. In the process of implementing informatization, enterprises take security and convenient informatization as important considerations. In system construction, developers must inevitably consider the security of communication in the process of informatization. The current common implementation method is: when logging in to the APP, the account password is encrypted and passed to the server, and the server decrypts and confirms the information. The server encrypts and returns the token token, which represents the object of the right to perform certain operations. The APP decrypts to obtain the token, and the token can be carried when requesting again to confirm the information. It can be seen that in the prior art, when the APP and the server transmit information, the secret key is transmitted together with the ciphertext, and the secret key is easily intercepted during the transmission process, resulting in the interception of information. Summary of the invention

[0003] In view of the above problems, the purpose of the present invention is to provide a mobile multi-layer encryption authentication method, system, readable medium and electronic device, which do not require secret key transmission to reduce the risk of information being intercepted and decrypted during network communication and alleviate the pressure of server encryption and decryption.

[0004] To achieve the above-mentioned purpose, the present invention proposes the following technical scheme: a mobile terminal multi-layer encryption authentication method, comprising the following steps: generating a mobile terminal secret key according to a mobile terminal timestamp; generating a ciphertext through the mobile terminal secret key, and uploading the ciphertext to a server; generating a server secret key, decrypting the ciphertext through the server secret key, and ending if successful; if unsuccessful, generating a server secret key again according to the timestamp of the previous moment, and decrypting the ciphertext through the server secret key, until the decryption is successful, or stopping decoding after a preset time.

[0005] Furthermore, a method for generating a mobile terminal secret key based on a mobile terminal timestamp is as follows: obtaining a mobile terminal timestamp; reversing the order of the timestamp; generating a determinant by combining the initial timestamp and the numbers after the order is reversed; and generating a mobile terminal secret key based on the determinant.

[0006] Furthermore, the determinant generates a mobile terminal secret key through a Vigenère matrix.

[0007] Furthermore, the compiled data is encrypted using a symmetric encryption method using the mobile terminal secret key to generate a ciphertext, which is then uploaded to the server.

[0008] Furthermore, if the decryption is successful and the decrypted information is verified to be correct, information interaction between the mobile terminal and the server is performed.

[0009] Furthermore, if the user information is verified to be correct, the server will interact with the user to encrypt and decrypt information.

[0010] Furthermore, if the verified user information is incorrect, the user will be prompted that the information submitted is incorrect.

[0011] The present invention also discloses a mobile multi-layer encryption authentication system, comprising: a mobile key generation module, used to generate a mobile key according to a mobile timestamp; a ciphertext generation module, used to generate a ciphertext through the mobile key, and upload the ciphertext to a server; a server decryption module, used to generate a server key, and decrypt the ciphertext through the server key, and terminate if successful; if unsuccessful, generate a server key again according to the timestamp of the previous moment, and decrypt the ciphertext through the server key, until the decryption is successful, or the decoding is stopped after a preset time.

[0012] The present invention also discloses a computer-readable storage medium, on which a computer program is stored. The computer program is executed by a processor to implement any of the above-mentioned mobile terminal multi-layer encryption authentication methods.

[0013] The present invention also discloses an electronic device, characterized in that it includes: one or more processors; a memory; and one or more applications, wherein the one or more applications are stored in the memory and are configured to be executed by the one or more processors, and the one or more programs are used to execute any of the mobile multi-layer encryption authentication methods described above.

[0014] The technical solution of the present invention has at least the following technical effects or advantages: The present invention adopts the above technical solution, performs encryption and decryption through a highly efficient symmetric encryption method, generates a non-fixed symmetric key using a timestamp and fixed rules, changes at any time, and only transmits the encrypted ciphertext during interaction with the server, without transmitting the key, thereby reducing the risk of information being intercepted and decrypted during network communication, alleviating the pressure of server encryption and decryption, improving the security of information interaction, and taking into account the high efficiency of system operation. By formulating commonly used encryption and decryption rules, the security and efficiency of information system construction are improved, and the workload of front-end and back-end developers is reduced. BRIEF DESCRIPTION OF THE DRAWINGS

[0015] Figure 1 is a flow chart of a multi-layer encryption authentication method for a mobile terminal in one embodiment of the present invention;

[0016] Figure 2 It is a Vigenère square diagram in one embodiment of the present invention. DETAILED DESCRIPTION

[0017] In order to enable those skilled in the art to better understand the technical solution of the present invention, the present invention is described in detail through specific embodiments. However, it should be understood that the provision of specific embodiments is only for a better understanding of the present invention, and they should not be understood as limitations of the present invention. In the description of the present invention, it should be understood that the terms used are only for the purpose of description and cannot be understood as indicating or implying relative importance.

[0018] As mobile APPs become more and more popular, security and efficiency issues have become more important. Therefore, security and efficiency should be taken into account in the process of APP information interaction. When dealing with security issues, encryption methods and permission management are generally used in the prior art, but the two are separated, resulting in certain loopholes. In order to solve the above problems, the present invention provides a mobile multi-layer encryption authentication method, system, readable medium and electronic device that uses symmetric encryption and adds time for verification. It generates symmetric encryption keys according to timestamps and fixed algorithms to ensure that the server can use the same method to generate the same key to decrypt information. The scheme of the present invention is described in detail below through embodiments in conjunction with the accompanying drawings.

[0019] Embodiment 1

[0020] This embodiment discloses a mobile terminal multi-layer encryption authentication method, such as Figure 1 As shown, the following steps are included:

[0021] S1 generates a mobile terminal secret key based on the mobile terminal timestamp;

[0022] The method to generate a mobile terminal secret key based on the mobile terminal timestamp is:

[0023] Get the mobile terminal timestamp, such as the timestamp is 28637732;

[0024] Reverse the order of the timestamps, and the number combination after the reverse order is 23773682;

[0025] Combine the initial timestamp and the reversed numbers to generate the determinant;

[0026] According to the determinant, the mobile terminal secret key is generated through the Vigenère matrix. Figure 2 shown. Figure 2 In the example, the first position is W in the third row and third column, and finally WIRMXANW is obtained. The account information data to be sent is compiled in base64. The method of generating a secret key according to the mobile terminal timestamp can be implemented according to a custom algorithm combination. The above method of generating a mobile terminal secret key is only one of them. For a better understanding of the example of the embodiment, the example is not limited to this.

[0027] S2 generates ciphertext using the mobile terminal secret key and uploads the ciphertext to the server;

[0028] The compiled data is encrypted using the mobile terminal secret key and symmetric encryption to generate ciphertext, which is then uploaded to the server.

[0029] S3 generates a server key. The method of generating a server key is the same as the method of generating a mobile key in S1. The ciphertext is decrypted using the server key. If successful, the process ends. If unsuccessful, the server key is generated again based on the timestamp of the previous moment, and the ciphertext is decrypted using the server key until the decryption is successful or the decoding stops after a preset time.

[0030] If the decryption is successful and the decrypted information is verified to be correct, the mobile terminal and the server will exchange information. If the user information is verified to be correct, the server will exchange encrypted and decrypted information with the user in reverse. If the user information is verified to be incorrect, the user will be prompted that the information submitted is incorrect.

[0031] Embodiment 2

[0032] Based on the same inventive concept, this embodiment discloses a mobile terminal multi-layer encryption authentication system, including:

[0033] A mobile terminal secret key generation module, used to generate a mobile terminal secret key according to a mobile terminal timestamp;

[0034] The ciphertext generation module is used to generate ciphertext using the mobile terminal secret key and upload the ciphertext to the server;

[0035] The server decryption module is used to generate a server key and decrypt the ciphertext using the server key. If successful, the process ends. If unsuccessful, the server key is generated again according to the timestamp of the previous moment and the ciphertext is decrypted using the server key until the decryption is successful or the decoding stops after a preset time.

[0036] Embodiment 3

[0037] Based on the same inventive concept, this embodiment discloses a computer-readable storage medium, on which a computer program is stored, and the computer program is executed by a processor to implement any of the above-mentioned mobile terminal multi-layer encryption authentication methods.

[0038] Embodiment 4

[0039] Based on the same inventive concept, this embodiment provides an electronic device, comprising: one or more processors; a memory; one or more applications, wherein the one or more applications are stored in the memory and configured to be executed by the one or more processors, and the one or more programs are used to execute any of the above-mentioned mobile-side multi-layer encryption authentication methods.

[0040] Those skilled in the art will appreciate that embodiments of the present invention may be provided as methods, systems, or computer program products. Therefore, the present invention may take the form of a complete hardware embodiment, a complete software embodiment, or an embodiment combining software and hardware. Moreover, the present invention may take the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.

[0041] The present invention is described with reference to flowcharts and / or block diagrams of methods, devices (systems), and computer program products according to embodiments of the present invention. It should be understood that each process and / or block in the flowchart and / or block diagram, as well as the combination of processes and / or blocks in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing device to produce a machine, so that the instructions executed by the processor of the computer or other programmable data processing device generate instructions for implementing the processes in the flowchart and / or block diagram. Figure 1 A process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0042] These computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing device to operate in a specific manner, so that the instructions stored in the computer-readable memory produce an article of manufacture comprising an instruction device, which implements the process Figure 1 A process or multiple processes and / or boxes Figure 1 A function specified in one or more boxes.

[0043] These computer program instructions can also be loaded onto a computer or other programmable data processing device so that a series of operating steps are executed on the computer or other programmable device to produce a computer-implemented process, thereby providing instructions for implementing the process. Figure 1 A process or multiple processes and / or boxes Figure 1 The steps for the functions specified in one or more boxes.

[0044] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention rather than to limit them. Although the present invention has been described in detail with reference to the above embodiments, ordinary technicians in the relevant field should understand that the specific implementation of the present invention can still be modified or replaced by equivalents, and any modification or equivalent replacement that does not deviate from the spirit and scope of the present invention should be included in the protection scope of the claims of the present invention. The above content is only a specific implementation of the present invention, but the protection scope of the present invention is not limited thereto. Any technician familiar with the technical field can easily think of changes or replacements within the technical scope disclosed by the present invention, which should be included in the protection scope of the present invention. Therefore, the protection scope of the present invention shall be based on the protection scope of the claims.

Claims

1. A mobile terminal multi-layer encryption authentication method, characterized in that: The following steps are involved: Generate a mobile terminal secret key based on the mobile terminal timestamp; Generate ciphertext using the mobile terminal secret key, and upload the ciphertext to the server; Generate a server key, and use the server key to decrypt the ciphertext. If successful, the process ends. If unsuccessful, generate a server key again based on the timestamp of the previous moment, and use the server key to decrypt the ciphertext until the decryption is successful, or the decoding is stopped after a preset time.

2. The mobile terminal multi-layer encryption authentication method according to claim 1, characterized in that: The method to generate a mobile terminal secret key based on the mobile terminal timestamp is: Get the mobile terminal timestamp; Reversing the time stamps; Combine the initial timestamp and the reversed numbers to generate the determinant; Generate the mobile terminal secret key according to the determinant.

3. The mobile terminal multi-layer encryption authentication method according to claim 2, characterized in that: The determinant generates a mobile terminal secret key through a Vigenère matrix.

4. The mobile terminal multi-layer encryption authentication method according to claim 1, characterized in that: The compiled data is encrypted using the mobile terminal secret key using a symmetric encryption method to generate ciphertext, which is then uploaded to the server.

5. The mobile terminal multi-layer encryption authentication method according to claim 1, characterized in that: If the decryption is successful and the decrypted information is verified to be correct, information exchange between the mobile terminal and the server will be carried out.

6. The mobile terminal multi-layer encryption authentication method according to claim 5, characterized in that: If the user information is verified to be correct, the server will interact with the user to encrypt and decrypt information.

7. The mobile terminal multi-layer encryption authentication method according to claim 5, characterized in that: If the verified user information is incorrect, the user will be prompted that the information submitted is incorrect.

8. A mobile terminal multi-layer encryption authentication system, characterized in that: include: A mobile terminal secret key generation module, used to generate a mobile terminal secret key according to a mobile terminal timestamp; A ciphertext generation module, used to generate ciphertext using the mobile terminal secret key and upload the ciphertext to a server; The server decryption module is used to generate a server key and decrypt the ciphertext using the server key. If successful, the process ends. If unsuccessful, the server key is generated again according to the timestamp of the previous moment and the ciphertext is decrypted using the server key until the decryption is successful or the decoding stops after a preset time.

9. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores a computer program, and the computer program is executed by a processor to implement the mobile terminal multi-layer encryption authentication method as described in any one of claims 1-7.

10. An electronic device, characterized in that: include: one or more processors; Memory; One or more applications, wherein the one or more applications are stored in the memory and configured to be executed by the one or more processors, and the one or more programs are used to execute the mobile multi-layer encryption authentication method as described in any one of claims 1-7.

Images